Re: [Malware] Malware infection from fake adobe update

Author	All Replies
lilhurricane So mote it be Premium,Mod join:2003-01-11 Purple Zone kudos:54 Reviews: ·Comcast Host: TV over IP Software RCN Inside Insight Cellphones, Provid..	reply to Treabone Re: [Malware] Malware infection from fake adobe update Malwarebytes Anti-Malware (Trial) 1.65.0.1400 www.malwarebytes.org Database version: v2012.09.21.09 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Trea :: TREA-PC [administrator] Protection: Enabled 9/21/2012 5:16:57 PM mbam-log-2012-09-21 (17-16-57).txt Scan type: Full scan (C:\\|) Scan options enabled: Memory \| Startup \| Registry \| File System \| Heuristics/Extra \| Heuristics/Shuriken \| PUP \| PUM Scan options disabled: P2P Objects scanned: 417312 Time elapsed: 1 hour(s), 16 minute(s), 34 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 2 HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Quarantined and deleted successfully. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 6 C:\Users\Trea\Downloads\installer_aircrack-ng.exe (PUP.Adbundler) -> Quarantined and deleted successfully. C:\Users\Trea\Downloads\Setup(4).exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully. C:\Users\Trea\Downloads\apa_crack_by_TSRh\apa_crack_by_TSRh.exe (Rootkit.0Access) -> Quarantined and deleted successfully. C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\00000008.@ (Trojan.Dropper.BCMiner) -> Quarantined and deleted successfully. C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\000000cb.@ (Rootkit.0Access) -> Quarantined and deleted successfully. C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\80000000.@ (Rootkit.0Access.64) -> Quarantined and deleted successfully. (end) the contents of OTL.txt OTL logfile created on: 9/21/2012 11:33:35 PM - Run 1 OTL by OldTimer - Version 3.2.65.1 Folder = C:\Users\Trea\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 \| Country: United States \| Language: ENU \| Date Format: M/d/yyyy 2.60 Gb Total Physical Memory \| 1.39 Gb Available Physical Memory \| 53.39% Memory free 5.21 Gb Paging File \| 3.38 Gb Available in Paging File \| 64.98% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 267.96 Gb Total Space \| 134.48 Gb Free Space \| 50.18% Space Free \| Partition Type: NTFS Drive D: \| 19.09 Gb Total Space \| 2.41 Gb Free Space \| 12.62% Space Free \| Partition Type: NTFS Computer Name: TREA-PC \| User Name: Trea \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/09/21 14:27:04 \| 000,600,576 \| ---- \| M] (OldTimer Tools) -- C:\Users\Trea\Downloads\OTL.exe PRC - [2012/09/15 13:48:51 \| 000,917,984 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012/09/07 17:04:46 \| 000,676,936 \| ---- \| M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012/09/07 17:04:46 \| 000,399,432 \| ---- \| M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe PRC - [2012/09/07 17:04:44 \| 000,766,536 \| ---- \| M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2012/06/01 17:33:28 \| 002,446,392 \| ---- \| M] (Check Point Software Technologies LTD) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe PRC - [2012/06/01 17:03:22 \| 000,073,392 \| ---- \| M] (Check Point Software Technologies LTD) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe PRC - [2012/03/09 13:30:50 \| 000,484,976 \| ---- \| M] () -- C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe PRC - [2010/11/20 05:17:56 \| 000,164,864 \| ---- \| M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe PRC - [2010/10/14 18:27:38 \| 000,092,216 \| ---- \| M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2010/09/11 02:02:22 \| 000,399,344 \| ---- \| M] (Roxio) -- C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe PRC - [2010/09/03 18:13:30 \| 000,136,488 \| ---- \| M] (CyberLink) -- C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe PRC - [2010/08/23 18:06:58 \| 000,584,760 \| ---- \| M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe PRC - [2010/08/23 18:06:58 \| 000,026,680 \| ---- \| M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe PRC - [2010/07/15 13:22:36 \| 001,367,816 \| ---- \| M] (Motorola, Inc.) -- C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe PRC - [2009/12/23 14:34:20 \| 000,370,688 \| ---- \| M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012/09/15 13:48:11 \| 002,244,064 \| ---- \| M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012/05/30 20:06:48 \| 000,087,912 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2012/05/30 20:06:30 \| 001,242,512 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2012/03/09 13:30:50 \| 000,484,976 \| ---- \| M] () -- C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe MOD - [2010/11/20 05:19:56 \| 000,232,448 \| ---- \| M] () -- \\.\globalroot\systemroot\syswow64\mswsock.dll MOD - [2010/11/10 16:36:06 \| 000,100,864 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\ATI Technologies\Multimedia\AMDMFTDecoder_32.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:64bit: - [2012/04/30 12:08:10 \| 000,827,520 \| ---- \| M] (Check Point Software Technologies) [Auto \| Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe -- (IswSvc) SRV:64bit: - [2012/03/26 18:49:56 \| 000,291,696 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv) SRV:64bit: - [2011/12/09 19:47:40 \| 000,334,720 \| ---- \| M] (FileOpen Systems Inc.) [Auto \| Running] -- C:\Program Files\FileOpen\Services\FileOpenManagerSvc64.exe -- (FileOpenManagerSvc) SRV:64bit: - [2011/08/04 05:41:06 \| 000,204,288 \| ---- \| M] (AMD) [Auto \| Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2011/05/13 18:58:10 \| 000,030,520 \| ---- \| M] (Hewlett-Packard Company) [Auto \| Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv) SRV:64bit: - [2011/01/06 03:43:28 \| 001,028,096 \| ---- \| M] (Macrovision Europe Ltd.) [On_Demand \| Running] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:64bit: - [2010/11/10 16:40:34 \| 000,354,304 \| ---- \| M] (Advanced Micro Devices, Inc.) [Auto \| Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:64bit: - [2010/10/25 17:44:10 \| 004,150,864 \| ---- \| M] (Motorola, Inc.) [On_Demand \| Running] -- C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe -- (Bluetooth Device Manager) SRV:64bit: - [2010/09/29 06:10:00 \| 000,270,336 \| ---- \| M] (IDT, Inc.) [Auto \| Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV) SRV:64bit: - [2010/08/05 20:51:08 \| 000,291,896 \| ---- \| M] (Hewlett-Packard Company) [Auto \| Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc) SRV:64bit: - [2010/07/21 15:33:00 \| 000,103,992 \| ---- \| M] (Hewlett-Packard Company) [Auto \| Running] -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe -- (HP Wireless Assistant Service) SRV:64bit: - [2010/07/16 15:08:06 \| 000,679,176 \| ---- \| M] (Motorola, Inc.) [Auto \| Running] -- C:\Program Files\Motorola\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV:64bit: - [2010/07/15 13:22:50 \| 001,188,616 \| ---- \| M] (Motorola, Inc.) [On_Demand \| Running] -- C:\Program Files\Motorola\Bluetooth\audiosrv.exe -- (Bluetooth Media Service) SRV:64bit: - [2010/06/17 06:23:36 \| 000,194,496 \| ---- \| M] (Advanced Micro Devices) [Auto \| Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe -- (AMD Reservation Manager) SRV:64bit: - [2009/03/03 03:42:58 \| 000,089,600 \| ---- \| M] (Andrea Electronics Corporation) [Auto \| Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters) SRV - [2012/09/20 16:18:37 \| 000,250,288 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/09/15 13:48:49 \| 000,114,144 \| ---- \| M] (Mozilla Foundation) [On_Demand \| Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/09/07 17:04:46 \| 000,676,936 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012/09/07 17:04:46 \| 000,399,432 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2012/06/01 17:33:28 \| 002,446,392 \| ---- \| M] (Check Point Software Technologies LTD) [Auto \| Running] -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon) SRV - [2012/01/05 08:42:34 \| 000,075,624 \| ---- \| M] (Alcohol Soft Development Team) [Auto \| Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv) SRV - [2011/01/06 03:43:27 \| 000,647,680 \| ---- \| M] (Macrovision Europe Ltd.) [On_Demand \| Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2010/10/14 18:27:38 \| 000,092,216 \| ---- \| M] (Hewlett-Packard Company) [Auto \| Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010/09/11 02:02:22 \| 000,399,344 \| ---- \| M] (Roxio) [Auto \| Running] -- C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe -- (RoxioNow Service) SRV - [2010/08/23 18:06:58 \| 000,026,680 \| ---- \| M] (Hewlett-Packard Development Company, L.P.) [Auto \| Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC) SRV - [2010/06/18 18:59:12 \| 000,246,520 \| ---- \| M] (WildTangent, Inc.) [On_Demand \| Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2010/03/18 13:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/12/23 14:34:20 \| 000,370,688 \| ---- \| M] (StarWind Software) [Auto \| Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009/06/10 14:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008/07/07 15:45:50 \| 000,111,896 \| ---- \| M] (PCTEL) [On_Demand \| Stopped] -- C:\Program Files (x86)\Sprint\Sprint SmartView\RcAppSvc.exe -- (SprintRcAppSvc) SRV - [2008/07/07 15:45:36 \| 000,124,184 \| ---- \| M] (PCTEL) [On_Demand \| Stopped] -- C:\Program Files (x86)\Sprint\Sprint SmartView\ConAppsSvc.exe -- (CASprint) SRV - [2007/05/31 17:11:54 \| 000,443,784 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007/05/31 17:11:46 \| 000,225,672 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:64bit: - [2012/09/07 17:04:46 \| 000,025,928 \| ---- \| M] (Malwarebytes Corporation) [File_System \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2012/06/30 18:08:56 \| 000,560,184 \| ---- \| M] (Duplex Secure Ltd.) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2012/04/30 12:08:32 \| 000,033,672 \| ---- \| M] (Check Point Software Technologies) [Kernel \| Auto \| Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL) DRV:64bit: - [2012/04/25 12:11:36 \| 000,052,736 \| ---- \| M] (Apple, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2012/04/13 10:05:16 \| 000,075,016 \| ---- \| M] (FTDI Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ftdibus.sys -- (FTDIBUS) DRV:64bit: - [2012/04/13 10:05:02 \| 000,085,384 \| ---- \| M] (FTDI Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ftser2k.sys -- (FTSER2K) DRV:64bit: - [2012/03/20 20:44:12 \| 000,098,688 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:64bit: - [2012/02/29 23:46:16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011/11/25 00:25:52 \| 000,015,360 \| ---- \| M] (June Fabrics Technology Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\pneteth.sys -- (pneteth) DRV:64bit: - [2011/10/14 04:37:44 \| 000,396,848 \| ---- \| M] (Synaptics Incorporated) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2011/08/04 09:33:16 \| 009,364,480 \| ---- \| M] (ATI Technologies Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:64bit: - [2011/08/04 05:02:54 \| 000,309,760 \| ---- \| M] (Advanced Micro Devices, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2011/07/29 13:54:56 \| 000,016,776 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv) DRV:64bit: - [2011/07/29 13:54:56 \| 000,009,096 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv) DRV:64bit: - [2011/06/20 16:12:09 \| 000,312,480 \| ---- \| M] () [Kernel \| Auto \| Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:64bit: - [2011/06/20 16:12:05 \| 000,043,168 \| ---- \| M] () [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:64bit: - [2011/05/13 18:58:16 \| 000,030,008 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:64bit: - [2011/05/13 18:57:58 \| 000,043,320 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:64bit: - [2011/05/07 17:51:32 \| 000,454,232 \| ---- \| M] (Check Point Software Technologies LTD) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\vsdatant.sys -- (Vsdatant) DRV:64bit: - [2011/03/10 23:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011/03/10 23:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2010/11/20 06:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010/11/20 04:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010/11/20 02:37:42 \| 000,109,056 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2010/11/04 21:57:54 \| 001,041,760 \| ---- \| M] (Ralink Technology, Corp.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x) DRV:64bit: - [2010/10/26 20:00:42 \| 000,484,096 \| ---- \| M] (Motorola, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\btmusb.sys -- (BTMUSB) DRV:64bit: - [2010/09/29 06:10:00 \| 000,517,120 \| ---- \| M] (IDT, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:64bit: - [2010/09/24 08:46:32 \| 000,116,752 \| ---- \| M] (ATI Technologies, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:64bit: - [2010/09/20 16:39:06 \| 000,349,800 \| ---- \| M] (Realtek ) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2010/09/03 18:13:32 \| 000,031,088 \| ---- \| M] (CyberLink Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:64bit: - [2010/07/20 18:43:22 \| 000,247,400 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:64bit: - [2010/06/30 13:02:30 \| 000,052,736 \| ---- \| M] (Motorola, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\btmcom.sys -- (BTMCOM) DRV:64bit: - [2010/04/29 05:43:20 \| 000,038,528 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:64bit: - [2010/02/18 10:18:24 \| 000,046,136 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:64bit: - [2009/11/11 14:09:32 \| 000,020,056 \| -H-- \| M] (DeviceVM, Inc.) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\dvmio.sys -- (DVMIO) DRV:64bit: - [2009/07/13 18:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/13 18:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/13 18:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/07/13 17:35:32 \| 000,012,288 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam) DRV:64bit: - [2009/07/13 17:10:47 \| 000,011,264 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM) DRV:64bit: - [2009/06/10 14:01:11 \| 001,485,312 \| ---- \| M] (Conexant Systems, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:64bit: - [2009/06/10 14:01:11 \| 000,740,864 \| ---- \| M] (Conexant Systems, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:64bit: - [2009/06/10 14:01:11 \| 000,292,864 \| ---- \| M] (Conexant Systems, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:64bit: - [2009/06/10 13:37:05 \| 006,108,416 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2009/06/10 13:35:33 \| 000,389,120 \| ---- \| M] (Marvell) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:64bit: - [2009/06/10 13:35:28 \| 005,434,368 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) DRV:64bit: - [2009/06/10 13:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 13:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 13:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 13:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009/05/18 13:17:08 \| 000,034,152 \| ---- \| M] (GEAR Software Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2008/07/07 15:42:52 \| 000,195,584 \| ---- \| M] (Sierra Wireless Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\SWNC5E00.sys -- (SWNC5E00) DRV:64bit: - [2008/07/07 15:42:52 \| 000,028,680 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\swmsflt.sys -- (swmsflt) DRV:64bit: - [2008/07/07 15:42:50 \| 000,197,640 \| ---- \| M] (Sierra Wireless Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\swmx00.sys -- (swmx00) DRV:64bit: - [2008/07/07 15:41:32 \| 000,043,032 \| ---- \| M] (PCTEL Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\PCTINDIS5X64.sys -- (PCTINDIS5X64) DRV:64bit: - [2007/09/06 16:30:24 \| 000,198,144 \| ---- \| M] (Novatel Wireless Inc) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\NWADIenum.sys -- (NWADI) DRV:64bit: - [2007/05/31 14:39:32 \| 000,027,520 \| ---- \| M] (Research In Motion Limited) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb) DRV:64bit: - [2007/03/07 13:13:20 \| 000,017,920 \| ---- \| M] (June Fabrics Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\pnetmdm64.sys -- (pnetmdm) DRV:64bit: - [2007/01/18 16:10:22 \| 000,030,336 \| ---- \| M] (Research in Motion Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort) DRV - [2011/07/29 13:54:56 \| 000,014,216 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv) DRV - [2011/07/29 13:54:56 \| 000,008,456 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009/07/13 18:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2008/07/07 15:42:52 \| 000,028,680 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\swmsflt.sys -- (swmsflt) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = »g.msn.com/HPNOT/1 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = »g.msn.com/HPNOT/1 IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = »search.ask.com/web?q={searchterm···o=HPNTDF IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = »search.yahoo.com/search?p={searc···e=HPNTDF IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = »en.wikipedia.org/wiki/Special:Se···chTerms} IE:64bit: - HKLM\..\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc}: "URL" = »rover.ebay.com/rover/1/711-11109···otebooks IE:64bit: - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = »www.bing.com/search?q={searchTer···earchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = »g.msn.com/HPNOT/1 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = »g.msn.com/HPNOT/1 IE - HKLM\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = »search.ask.com/web?q={searchterm···o=HPNTDF IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = »search.yahoo.com/search?p={searc···e=HPNTDF IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = »en.wikipedia.org/wiki/Special:Se···chTerms} IE - HKLM\..\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc}: "URL" = »rover.ebay.com/rover/1/711-11109···otebooks IE - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = »www.bing.com/search?q={searchTer···earchBox IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = »g.msn.com/HPNOT/1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = »www.yahoo.com/ IE - HKCU\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found IE - HKCU\..\SearchScopes,DefaultScope = {54C9B758-6654-4F71-9E45-D4B29282832B} IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = »search.ask.com/web?q={searchterm···o=HPNTDF IE - HKCU\..\SearchScopes\{54C9B758-6654-4F71-9E45-D4B29282832B}: "URL" = »www.google.com/search?q={searchT···coding?} IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = »search.yahoo.com/search?p={searc···e=HPNTDF IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = »en.wikipedia.org/wiki/Special:Se···chTerms} IE - HKCU\..\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc}: "URL" = »rover.ebay.com/rover/1/711-11109···otebooks IE - HKCU\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = »www.bing.com/search?q={searchTer···earchBox IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = .local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: " " FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/" FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}:6.0.33 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..network.proxy.type: 0 FF:64bit:* - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@photoproduct.rocketlife.com/RocketLife App Viewer;version=0.8: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\PROGRAM FILES\CHECKPOINT\ZAFORCEFIELD\TRUSTCHECKER [2012/06/18 20:53:36 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker [2012/06/18 20:37:04 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/09/15 13:48:53 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/09/18 14:19:33 \| 000,000,000 \| ---D \| M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/09/15 13:48:53 \| 000,000,000 \| ---D \| M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/09/18 14:19:33 \| 000,000,000 \| ---D \| M] [2011/02/05 19:06:40 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Trea\AppData\Roaming\Mozilla\Extensions [2012/09/15 14:12:52 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Trea\AppData\Roaming\Mozilla\Firefox\Profiles\x7p0fgki.default\extensions [2012/06/30 18:11:13 \| 000,000,000 \| ---D \| M] (DealPly) -- C:\Users\Trea\AppData\Roaming\Mozilla\Firefox\Profiles\x7p0fgki.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2012/08/12 09:11:39 \| 000,000,000 \| ---D \| M] (OneClickDownloader) -- C:\Users\Trea\AppData\Roaming\Mozilla\Firefox\Profiles\x7p0fgki.default\extensions\OneClickDownload@OneClickDownload.com [2011/02/09 20:23:55 \| 000,000,863 \| ---- \| M] () -- C:\Users\Trea\AppData\Roaming\Mozilla\Firefox\Profiles\x7p0fgki.default\searchplugins\conduit.xml [2012/09/19 16:57:43 \| 000,005,472 \| ---- \| M] () -- C:\Users\Trea\AppData\Roaming\Mozilla\Firefox\Profiles\x7p0fgki.default\searchplugins\startpage-https.xml [2012/07/18 18:11:22 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012/07/18 18:11:22 \| 000,000,000 \| ---D \| M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012/09/15 13:48:52 \| 000,266,720 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/09/15 13:48:09 \| 000,002,465 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/09/15 13:48:08 \| 000,002,253 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: »www.google.com CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: »www.google.com CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: DealPly = C:\Users\Trea\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.0.7.2_0\ CHR - Extension: avast! WebRep = C:\Users\Trea\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_0\ CHR - Extension: OneClickDownload = C:\Users\Trea\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.0_0\ O1 HOSTS File: ([2009/06/10 14:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3:64bit: - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No CLSID value found. O3:64bit: - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files\Motorola\Bluetooth\btmshell.dll () O4:64bit: - HKLM..\Run: [FileOpenBroker] C:\Program Files\FileOpen\Services\FileOpenBroker64.exe (FileOpen Systems Inc.) O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe () O4:64bit: - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies) O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe () O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.) O4:64bit: - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui File not found O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [ZoneAlarm] C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD) O4 - HKCU..\Run: [AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe (Alcohol Soft Development Team) O4 - Startup: C:\Users\Trea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk = C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9:64bit: - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O9 - Extra 'Tools' menuitem : @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-247 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm () O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - mmswsock.dll File not found O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000011 - mmswsock.dll File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} »java.sun.com/update/1.6.0/jinsta···i586.cab (Java Plug-in 1.6.0_21) O16:64bit: - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} »java.sun.com/update/1.6.0/jinsta···i586.cab (Java Plug-in 1.6.0_21) O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} »java.sun.com/update/1.6.0/jinsta···i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} »java.sun.com/update/1.6.0/jinsta···i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} »java.sun.com/update/1.6.0/jinsta···i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} »java.sun.com/update/1.6.0/jinsta···i586.cab (Java Plug-in 1.6.0_33) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3016ED4D-1911-4254-A2DD-953945F6F50E}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5E6E680A-855C-416F-B49C-A3276902FA3B}: DhcpNameServer = 8.8.8.8 O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{21700624-34b7-11e0-bec5-68b599d31be5}\Shell - "" = AutoRun O33 - MountPoints2\{21700624-34b7-11e0-bec5-68b599d31be5}\Shell\AutoRun\command - "" = E:\ar22.exe /index.html /t ar22frame O33 - MountPoints2\{252d9270-320a-11e0-85d4-68b599d31be5}\Shell - "" = AutoRun O33 - MountPoints2\{252d9270-320a-11e0-85d4-68b599d31be5}\Shell\AutoRun\command - "" = F:\LaunchU3.exe O33 - MountPoints2\{2e562313-7b72-11e0-9c40-68b599d31be5}\Shell - "" = AutoRun O33 - MountPoints2\{2e562313-7b72-11e0-9c40-68b599d31be5}\Shell\AutoRun\command - "" = E:\setup.exe -a O33 - MountPoints2\{3a82d175-3c8a-11e0-8fd2-68b599d31be5}\Shell - "" = AutoRun O33 - MountPoints2\{3a82d175-3c8a-11e0-8fd2-68b599d31be5}\Shell\AutoRun\command - "" = E:\WIN\setup.exe O33 - MountPoints2\{54ce402b-b9ae-11e1-bc13-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{54ce402b-b9ae-11e1-bc13-806e6f6e6963}\Shell\AutoRun\command - "" = E:\setup.exe -a O33 - MountPoints2\{57ac6353-3005-11e0-9ded-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{57ac6353-3005-11e0-9ded-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup.exe -a O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\LaunchU3.exe O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit:* - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) -- ~Safe Hex~ Team Discovery ~ Project Hope ~ Like A Hurricane~
	to forum · permalink · 2012-09-22 17:50:18 ·

lilhurricane So mote it be Premium,Mod join:2003-01-11 Purple Zone kudos:54 Reviews: ·Comcast Host: TV over IP Software RCN Inside Insight Cellphones, Provid..	[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/09/21 17:12:45 \| 000,000,000 \| ---D \| C] -- C:\Users\Trea\AppData\Roaming\Malwarebytes [2012/09/21 17:12:27 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012/09/21 17:12:27 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Malwarebytes [2012/09/21 17:12:25 \| 000,025,928 \| ---- \| C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012/09/21 17:12:25 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2012/09/21 11:56:22 \| 017,483,288 \| ---- \| C] (Microsoft Corporation) -- C:\Users\Trea\Desktop\Scan.exe.exe [2012/09/21 11:47:47 \| 062,164,608 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\MRT.exe [2012/09/20 20:04:00 \| 000,000,000 \| -HSD \| C] -- C:\Windows\SysWow64\%APPDATA% [2012/09/20 14:15:13 \| 000,000,000 \| ---D \| C] -- C:\Users\Trea\Documents\My PERRLA Papers [2012/09/20 14:12:00 \| 000,000,000 \| ---D \| C] -- C:\PERRLA [2012/09/18 18:00:42 \| 000,000,000 \| ---D \| C] -- C:\Users\Trea\AppData\Roaming\Elluminate [2012/09/13 11:35:14 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Microsoft Security Client [2012/09/13 11:34:57 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Microsoft Security Client [2012/09/11 18:51:38 \| 000,041,472 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys [2012/09/11 18:51:35 \| 000,574,464 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll [2012/09/11 18:51:29 \| 000,376,688 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys [2012/09/11 18:51:29 \| 000,288,624 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS [2012/08/30 22:03:25 \| 000,000,000 \| ---D \| C] -- C:\Users\Trea\AppData\Roaming\Media Player Classic [2012/08/30 17:40:06 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack [2012/08/30 17:39:44 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\K-Lite Codec Pack [2012/08/30 17:23:34 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\VideoConverter [2012/08/29 12:32:33 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\TCFI3_Log_V3 [2012/08/29 12:32:07 \| 000,000,000 \| ---D \| C] -- C:\Users\Trea\AppData\Roaming\{46DFC4B3-56FE-4644-961F-EBC62AC65305} [2012/08/29 12:31:30 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\PC_Link_TCFI3_V4 [2012/08/29 12:31:00 \| 000,000,000 \| ---D \| C] -- C:\Users\Trea\AppData\Roaming\{2E145773-1EA5-43AA-AFA4-A71CD4B5068E} [2012/08/29 11:55:57 \| 000,000,000 \| ---D \| C] -- C:\Program Files\DIFX [2 C:\Users\Trea\Desktop\.tmp files -> C:\Users\Trea\Desktop\.tmp -> ] [1 C:\Windows\SysNative\drivers\.tmp files -> C:\Windows\SysNative\drivers\.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/09/21 23:35:52 \| 000,023,248 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/09/21 23:35:52 \| 000,023,248 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/09/21 23:28:30 \| 000,000,890 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/09/21 23:28:12 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012/09/21 23:28:08 \| 2096,549,888 \| -HS- \| M] () -- C:\hiberfil.sys [2012/09/21 22:59:01 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/09/21 22:45:01 \| 000,000,894 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/09/21 11:55:35 \| 000,729,706 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/09/21 11:55:35 \| 000,626,540 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012/09/21 11:55:35 \| 000,107,784 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012/09/21 11:53:48 \| 017,483,288 \| ---- \| M] (Microsoft Corporation) -- C:\Users\Trea\Desktop\Scan.exe.exe [2012/09/21 11:03:04 \| 000,000,189 \| ---- \| M] () -- C:\Users\Trea\Desktop\register.bat [2012/09/20 16:18:35 \| 000,696,240 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/09/20 16:18:35 \| 000,073,136 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/09/16 15:12:21 \| 394,738,826 \| ---- \| M] () -- C:\Windows\MEMORY.DMP [2012/09/15 13:48:59 \| 000,002,048 \| ---- \| M] () -- C:\Users\Trea\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2012/09/13 12:36:13 \| 000,007,680 \| ---- \| M] () -- C:\Users\Trea\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/09/13 11:35:53 \| 000,001,945 \| ---- \| M] () -- C:\Windows\epplauncher.mif [2012/09/13 11:35:25 \| 000,744,030 \| ---- \| M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/09/13 11:08:33 \| 000,454,888 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/09/11 21:08:14 \| 000,000,340 \| ---- \| M] () -- C:\Windows\tasks\HPCeeScheduleForTREA-PC$.job [2012/09/07 17:04:46 \| 000,025,928 \| ---- \| M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012/09/06 15:07:06 \| 000,000,147 \| ---- \| M] () -- C:\Users\Trea\Desktop\Info Literacy Class.url [2012/08/31 00:12:46 \| 062,164,608 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWow64\MRT.exe [2012/08/29 12:32:35 \| 000,001,904 \| ---- \| M] () -- C:\Users\Public\Desktop\TCFI III Log V3.1.lnk [2012/08/29 12:31:32 \| 000,001,944 \| ---- \| M] () -- C:\Users\Public\Desktop\PC Link TCFI III V4.0.lnk [2 C:\Users\Trea\Desktop\.tmp files -> C:\Users\Trea\Desktop\.tmp -> ] [1 C:\Windows\SysNative\drivers\.tmp files -> C:\Windows\SysNative\drivers\.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/09/21 11:01:39 \| 000,000,189 \| ---- \| C] () -- C:\Users\Trea\Desktop\register.bat [2012/09/13 11:35:53 \| 000,001,945 \| ---- \| C] () -- C:\Windows\epplauncher.mif [2012/09/13 11:35:36 \| 000,001,915 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk [2012/09/13 11:35:25 \| 000,744,030 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/09/06 15:06:41 \| 000,000,147 \| ---- \| C] () -- C:\Users\Trea\Desktop\Info Literacy Class.url [2012/08/30 17:40:01 \| 000,178,688 \| ---- \| C] () -- C:\Windows\SysWow64\unrar.dll [2012/08/29 12:32:35 \| 000,001,916 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TCFI III Log V3.1.lnk [2012/08/29 12:32:35 \| 000,001,904 \| ---- \| C] () -- C:\Users\Public\Desktop\TCFI III Log V3.1.lnk [2012/08/29 12:31:32 \| 000,001,956 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Link TCFI III V4.0.lnk [2012/08/29 12:31:32 \| 000,001,944 \| ---- \| C] () -- C:\Users\Public\Desktop\PC Link TCFI III V4.0.lnk [2012/08/29 11:38:13 \| 000,001,904 \| ---- \| C] () -- C:\Users\Trea\Desktop\TCFI3_Setup_2007_96CID.dat [2012/08/07 11:11:32 \| 000,137,732 \| ---- \| C] () -- C:\Windows\hpoins44.dat.temp [2012/08/07 11:11:32 \| 000,000,512 \| ---- \| C] () -- C:\Windows\hpomdl44.dat.temp [2012/06/30 20:58:52 \| 000,019,840 \| ---- \| C] () -- C:\Windows\SysWow64\EuEpmGdi.dll [2012/06/30 20:58:51 \| 002,468,520 \| ---- \| C] () -- C:\Windows\SysWow64\BootMan.exe [2012/06/30 20:55:56 \| 000,086,408 \| ---- \| C] () -- C:\Windows\SysWow64\setupempdrv03.exe [2012/06/30 20:55:56 \| 000,014,216 \| ---- \| C] () -- C:\Windows\SysWow64\epmntdrv.sys [2012/06/30 20:55:56 \| 000,008,456 \| ---- \| C] () -- C:\Windows\SysWow64\EuGdiDrv.sys [2012/06/30 10:07:40 \| 000,007,680 \| ---- \| C] () -- C:\Users\Trea\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/03/28 15:25:10 \| 000,000,255 \| ---- \| C] () -- C:\Windows\Brpfx04a.ini [2011/03/28 15:25:10 \| 000,000,094 \| ---- \| C] () -- C:\Windows\brpcfx.ini [2011/03/28 15:24:07 \| 000,000,419 \| ---- \| C] () -- C:\Windows\BRWMARK.INI [2011/03/28 15:24:07 \| 000,000,027 \| ---- \| C] () -- C:\Windows\BRPP2KA.INI [2011/03/28 15:22:48 \| 000,106,496 \| ---- \| C] () -- C:\Windows\SysWow64\BrMuSNMP.dll [2011/03/17 17:51:46 \| 000,003,929 \| ---- \| C] () -- C:\Windows\SysWow64\atipblag.dat [2011/02/09 20:42:41 \| 000,000,058 \| ---- \| C] () -- C:\Windows\STYLEEASEAPA.INI [2011/02/05 20:28:59 \| 000,137,284 \| ---- \| C] () -- C:\Windows\hpoins44.dat [2011/02/05 20:28:59 \| 000,000,512 \| ---- \| C] () -- C:\Windows\hpomdl44.dat [2011/02/01 20:15:58 \| 000,000,138 \| ---- \| C] () -- C:\Users\Trea\AppData\Local\mv_Photo.xml [2011/02/01 20:15:58 \| 000,000,129 \| ---- \| C] () -- C:\Users\Trea\AppData\Local\mv_music.xml [2011/01/06 03:45:37 \| 000,000,000 \| ---- \| C] () -- C:\Windows\ativpsrm.bin [2011/01/06 03:43:01 \| 000,014,051 \| ---- \| C] () -- C:\Windows\SysWow64\RaCoInst.dat [2011/01/06 03:27:48 \| 000,000,299 \| ---- \| C] () -- C:\Windows\SysWow64\RStoneLog2.ini [2011/01/06 03:27:48 \| 000,000,240 \| ---- \| C] () -- C:\Windows\SysWow64\RStoneLog.ini [2010/12/13 18:20:12 \| 000,000,188 \| ---- \| C] () -- C:\Windows\SysWow64\HPWA.ini [2010/09/24 16:41:34 \| 000,007,736 \| ---- \| C] () -- C:\Windows\hpDSTRES.DLL [2007/02/15 09:42:52 \| 003,620,640 \| ---- \| C] () -- C:\Users\Trea\STYLEEAS.EXE [color=#E56717]========== ZeroAccess Check ==========[/color] [2011/11/16 23:41:18 \| 000,002,048 \| -HS- \| M] () -- C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\@ [2012/09/20 20:02:20 \| 000,000,000 \| -HSD \| M] -- C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\L [2012/09/21 23:26:54 \| 000,000,000 \| -HSD \| M] -- C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U [2012/09/21 23:28:12 \| 000,000,804 \| ---- \| M] () -- C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\L\00000004.@ [2012/09/20 15:12:02 \| 000,002,048 \| ---- \| M] () -- C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\00000004.@ [2012/09/21 08:33:48 \| 000,091,136 \| ---- \| M] () -- C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\80000032.@ [2012/09/21 08:33:48 \| 000,077,824 \| ---- \| M] () -- C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\80000064.@ [2012/02/11 15:51:22 \| 000,000,000 \| ---D \| M] -- C:\Users\Trea\AppData\LocalLow\Microsoft\Silverlight\is\3sx3gzof.gef\0ywhxifu.un3\1\l [2011/01/05 06:02:22 \| 000,069,168 \| ---- \| M] () -- C:\Users\Trea\AppData\LocalLow\PriceGong\Data\l.xml [2011/01/05 06:02:22 \| 000,036,808 \| ---- \| M] () -- C:\Users\Trea\AppData\LocalLow\PriceGong\Data\n.xml [2011/01/05 06:02:22 \| 000,020,960 \| ---- \| M] () -- C:\Users\Trea\AppData\LocalLow\PriceGong\Data\u.xml [2009/07/13 21:55:00 \| 000,000,227 \| RHS- \| M] () -- C:\Windows\assembly\Desktop.ini [2012/09/21 23:28:12 \| 000,004,608 \| -HS- \| M] () -- C:\Windows\assembly\GAC_32\Desktop.ini [2012/09/21 23:28:12 \| 000,006,144 \| -HS- \| M] () -- C:\Windows\assembly\GAC_64\Desktop.ini the contents of Extras.txt OTL Extras logfile created on: 9/21/2012 11:33:35 PM - Run 1 OTL by OldTimer - Version 3.2.65.1 Folder = C:\Users\Trea\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 \| Country: United States \| Language: ENU \| Date Format: M/d/yyyy 2.60 Gb Total Physical Memory \| 1.39 Gb Available Physical Memory \| 53.39% Memory free 5.21 Gb Paging File \| 3.38 Gb Available in Paging File \| 64.98% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 267.96 Gb Total Space \| 134.48 Gb Free Space \| 50.18% Space Free \| Partition Type: NTFS Drive D: \| 19.09 Gb Total Space \| 2.41 Gb Free Space \| 12.62% Space Free \| Partition Type: NTFS Computer Name: TREA-PC \| User Name: Trea \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{09BDCC02-80F2-4EFB-8F1B-A807D2C38E31}" = HP MediaSmart Movies and TV "{0DF3F266-B52E-4309-B3CC-233607DF4E50}" = HP 3D DriveGuard "{13DCC2C7-454D-42F0-A892-E0E9A5DE4E67}" = HP Wireless Assistant "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition) "{26A24AE4-039D-4CA4-87B4-2F86416021FF}" = Java(TM) 6 Update 21 (64-bit) "{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services "{3FB0BE76-253B-3964-888B-D2A7A9267A11}" = ccc-utility64 "{49F4B373-6E6D-9887-B102-517089CF9238}" = AMD Fuel "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5121C4F9-BC62-4F47-B313-474A619E3813}" = Sprint SmartView "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile Device Center "{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}" = Apple Mobile Device Support "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{819CA3BC-2FF8-4811-B42F-421F7BFD3559}" = HP Deskjet F2400 All-in-One Driver 14.0 Rel. 6 "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}" = iTunes "{873170EE-2708-67B6-5A42-092EEC3ABCC4}" = ATI Catalyst Install Manager "{8D8B35B1-4F80-412C-8F96-0BEE6AF1C57D}" = FileOpen Client (x64) "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007 "{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}" = Microsoft Security Client "{BE6725F2-6D15-477C-86C6-4522B8569D62}" = HP MediaSmart SmartMenu "{BE930E38-7BB3-45B6-85B2-5251F374F844}" = 64 Bit HP CIO Components Installer "{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto "{D4CC9170-E0B3-7127-4247-B8DE1A527AA7}" = WMV9/VC-1 Video Playback "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "1DF1F719-D43A-46E8-950F-65A8D96C678A.MBT_is1" = Ralink Motorola BC8 Bluetooth 3.0+HS Adapter "3134FEF0E1D959EC0CC2E458C94B7057B2AC0CC9" = Windows Driver Package - FTDI CDM Driver Package (10/22/2009 2.06.00) "88EB56038379B8B7DCFB4D2448A60F52E064B265" = Windows Driver Package - FTDI CDM Driver Package (10/22/2009 2.06.00) "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft Security Client" = Microsoft Security Essentials "SynTPDeinstKey" = Synaptics Pointing Device Driver "ZoneAlarm LTD Toolbar" = ZoneAlarm LTD Toolbar [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam "{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements "{08DB3902-2CE0-474D-BCE3-0177766CE9F1}" = HP Support Assistant "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0B674336-6374-B29B-C5AF-C89E3CAB64A7}" = CCC Help Thai "{0BFF1302-ADE5-9EFB-C0B7-D5D31837C8EC}" = CCC Help Spanish "{0D9ADF08-1BAC-AD8D-BA31-BF575E7F1008}" = CCC Help Japanese "{0E1436D4-C573-4FDF-B6EF-701C680EE1B4}" = PC Link TCFI III V4.0 "{0EDEB615-1A60-425E-8306-0E10519C7B55}" = RoxioNow Player "{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support "{14830F1E-C1C4-4526-BB51-4FC1ABC3EFBD}" = ZoneAlarm Firewall "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{214A5B65-5432-F3C2-BFF2-EA793713C463}" = CCC Help Hungarian "{21BA06AB-7619-F86C-3DCD-904860A8F57A}" = CCC Help Italian "{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library "{264FE20A-757B-492a-B0C3-4009E2997D8A}" = PictureMover "{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 33 "{28375E61-16A8-48E0-9BF5-07B313A001B8}" = HP Documentation "{28C6DBD4-3B0A-0B96-6AC4-92B61D901DA7}" = Catalyst Control Center Localization All "{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox "{2B4C6DE8-AE91-743A-103D-22C0B183057B}" = CCC Help Czech "{2E076B90-57E0-97A8-0B58-436935683B15}" = CCC Help Russian "{2EA3D6B2-157E-4112-A3AB-BF17E16661C3}" = HP MediaSmart/TouchSmart Netflix "{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery "{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7 "{3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}" = Adobe Shockwave Player 11.5 "{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3 "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{467A5C10-8152-6FBA-03F5-2BE95B8A1B73}" = CCC Help Danish "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{50324109-3BD7-B267-E00E-7FD01CB88D43}" = CCC Help Portuguese "{52DE3AF0-1C26-4258-9A04-9AEBF3E145F7}" = Catalyst Control Center - Branding "{53469506-A37E-4314-A9D9-38724EC23A75}" = HP Setup "{54415FFC-4AB0-B66F-CC2A-C0A3CE1D002E}" = CCC Help Norwegian "{5546F4E9-B0F4-4F54-B949-2AB006C9284F}" = DJ_AIO_06_F2400_SW_Min "{626B5918-B395-4B69-A06B-14C3EB1C3942}" = HP Quick Launch "{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack "{6B114F59-6732-4EA5-A33E-ACC6DEC49B61}" = HP Software Framework "{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{75C3EE76-E4B8-4C8D-A875-C19A051AF956}" = TCFI III Log V3.1 "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{79AB1DC0-89B1-5125-8374-404AC780F32B}" = CCC Help English "{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}" = Ralink RT2860 Wireless LAN Card "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 "{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 "{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007 "{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007 "{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007 "{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007 "{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007 "{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 "{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{A15FCAAF-6FA9-331F-BEBE-C4F49A2EAFED}" = CCC Help Dutch "{A3CDC601-4840-C0FE-702A-C898DF56B3CA}" = CCC Help French "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A83540E9-9A19-434B-51FB-BD301000086F}" = Catalyst Control Center InstallProxy "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer "{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.5.2 MUI "{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager "{AF306BD8-F9D1-4627-89B9-246E59074A05}" = HP Power Manager "{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR "{B64BC516-2406-43AE-A21A-1E387A2343B1}" = ContentManager "{BB253F06-91BA-34C4-5D40-6FA7F01CAEEC}" = CCC Help Korean "{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo "{BDCCD186-DE1F-F443-62C2-C888AE111D74}" = CCC Help German "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail "{C7231F7C-6530-4E65-ADA6-5B392CF5BEB1}" = Recovery Manager "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{CE4A6D41-0094-C56C-26A3-AF8A16C6D459}" = Catalyst Control Center Profiles Mobile "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{CEB8DD3E-546A-77FE-AF2A-79F9088DE458}" = CCC Help Finnish "{CEE8C1C1-2C92-9CB3-8636-2080865E0BB2}" = CCC Help Greek "{D046F248-D151-CEB4-095D-CD10F66D1F56}" = CCC Help Swedish "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D782F0AC-8036-E194-1A97-3C3261378466}" = Catalyst Control Center Graphics Previews Common "{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources "{DF7141BA-7CAB-5488-CB92-986822210200}" = CCC Help Polish "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{EA3F9C49-CAA9-4FF5-B70A-A7FC0976C5E9}" = ZoneAlarm Security "{EA96FE3A-2D81-4AEE-6D74-A47BDA29C060}" = CCC Help Chinese Traditional "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{EF5B2C16-D640-8E94-DA95-B48A07F7C4D5}" = CCC Help Chinese Standard "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}" = The Witcher Enhanced Edition "{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "{FCD89426-8409-2394-06EA-679DB494C68F}" = ccc-core-static "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "EaseUS Partition Master Home Edition_is1" = EaseUS Partition Master 9.1.1 Home Edition "ENTERPRISE" = Microsoft Office Enterprise 2007 "Google Chrome" = Google Chrome "Governor of Poker1.0" = Governor of Poker "HP Photo Creations" = HP Photo Creations "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite "InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo "InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music "InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video "InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "IsoBuster_is1" = IsoBuster 2.7 "KLiteCodecPack_is1" = K-Lite Codec Pack 9.2.4 (Full) "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.65.0.1400 "Mozilla Firefox 15.0.1 (x86 en-US)" = Mozilla Firefox 15.0.1 (x86 en-US) "MozillaMaintenanceService" = Mozilla Maintenance Service "My HP Game Console" = HP Game Console "PdaNet_is1" = PdaNet for Android 3.50 "StyleEase for APA Style" = StyleEase for APA Style "StyleEase for APA Style, version 3.83" = StyleEase for APA Style, version 3.83 "uTorrent" = ÂµTorrent "VLC media player" = VLC media player 2.0.1 "WildTangent hp Master Uninstall" = HP Games "WinLiveSuite" = Windows Live Essentials "WT087328" = Blackhawk Striker 2 "WT087330" = Bounce Symphony "WT087335" = Build-a-lot 2 "WT087343" = Dora's World Adventure "WT087360" = Escape Rosecliff Island "WT087361" = FATE "WT087362" = Final Drive Nitro "WT087372" = Heroes of Hellas 2 - Olympia "WT087379" = Jewel Quest Solitaire 2 "WT087394" = Penguins! "WT087395" = Poker Superstars III "WT087396" = Polar Bowler "WT087397" = Polar Golfer "WT087414" = Virtual Families "WT087415" = Wheel of Fortune 2 "WT087428" = Bejeweled 2 Deluxe "WT087453" = Chuzzle Deluxe "WT087501" = Plants vs. Zombies "WT087533" = Zuma Deluxe "WT087536" = Diner Dash 2 Restaurant Rescue "WT089299" = Mystery P.I. - The London Caper "WT089307" = Virtual Villagers 4 - The Tree of Life "WT089308" = Blasterball 3 "WT089328" = Farm Frenzy "WT089359" = Cake Mania "WT089362" = Agatha Christie - Peril at End House "YTdetect" = Yahoo! Detect "ZoneAlarm Free Firewall" = ZoneAlarm Free Firewall "ZumoDrive" = HP CloudDrive [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Video Converter" = Video Converter [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 9/15/2012 5:41:17 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 125971 Error - 9/15/2012 5:41:18 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 9/15/2012 5:41:18 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 126969 Error - 9/15/2012 5:41:18 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 126969 Error - 9/15/2012 5:41:19 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 9/15/2012 5:41:19 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 127983 Error - 9/15/2012 5:41:19 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 127983 Error - 9/15/2012 5:41:20 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 9/15/2012 5:41:20 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 128981 Error - 9/15/2012 5:41:20 PM \| Computer Name = Trea-PC \| Source = Bonjour Service \| ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 128981 [ HP Wireless Assistant Events ] Error - 2/1/2011 11:26:58 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException The RPC server is unavailable. (Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName) at HPPA_Service.CurrentConfiguration.b__c() -- ~Safe Hex~ Team Discovery ~ Project Hope ~ Like A Hurricane~
	to forum · permalink · 2012-09-22 17:50:37 ·
lilhurricane So mote it be Premium,Mod join:2003-01-11 Purple Zone kudos:54 Reviews: ·Comcast Host: TV over IP Software RCN Inside Insight Cellphones, Provid..	Error - 6/21/2011 2:41:02 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException Call was canceled by the message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName) at HPPA_Service.CurrentConfiguration.b__c() Error - 7/3/2011 2:51:08 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException Call was canceled by the message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObjectSearcher.Initialize() at System.Management.ManagementObjectSearcher.Get() at HPPA_Service.CurrentConfiguration.FindDevice(String hostPath, String portName) at HPPA_Service.CurrentConfiguration.b__9(RadioHardware radio) at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext() at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext() at HPPA_Service.CurrentConfiguration.ReloadRadioList() Error - 11/17/2011 9:02:49 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Exception GetDeviceInfo() failed : 597 at HP_Common.CaslWrapper.GetDeviceInfo(List`1& radioList) at HPPA_Service.CurrentConfiguration.ReloadRadioList() Error - 4/14/2012 4:37:45 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementObject.Initialize(Boolean getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName) at HPPA_Service.CurrentConfiguration.b__c() Error - 4/30/2012 6:04:29 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Management.ManagementException Unexpected error at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode) at System.Management.ManagementObjectCollection.ManagementObjectEnumerator.MoveNext() at HPPA_Service.CurrentConfiguration.FindDevice(String hostPath, String portName) at HPPA_Service.CurrentConfiguration.b__9(RadioHardware radio) at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext() at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext() at HPPA_Service.CurrentConfiguration.ReloadRadioList() Error - 5/5/2012 11:24:00 AM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException Call was canceled by the message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObjectSearcher.Initialize() at System.Management.ManagementObjectSearcher.Get() at HPPA_Service.CurrentConfiguration.FindDevice(String hostPath, String portName) at HPPA_Service.CurrentConfiguration.b__9(RadioHardware radio) at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext() at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext() at HPPA_Service.CurrentConfiguration.ReloadRadioList() Error - 7/5/2012 12:19:55 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException Call was canceled by the message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName) at HPPA_Service.CurrentConfiguration.b__c() Error - 7/5/2012 3:48:26 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementObjectCollection.ManagementObjectEnumerator.MoveNext() at HPPA_Service.CurrentConfiguration.FindDevice(String hostPath, String portName) at HPPA_Service.CurrentConfiguration.b__9(RadioHardware radio) at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext() at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext() at HPPA_Service.CurrentConfiguration.ReloadRadioList() Error - 7/25/2012 8:02:14 PM \| Computer Name = Trea-PC \| Source = HP WA Service \| ID = 0 Description = System.Runtime.InteropServices.COMException at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementObject.Initialize(Boolean getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName) at HPPA_Service.CurrentConfiguration.b__c() [ Media Center Events ] Error - 6/29/2012 10:02:59 PM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 7:02:59 PM - Error connecting to the internet. 7:02:59 PM - Unable to contact server.. Error - 7/10/2012 5:46:35 PM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 2:46:35 PM - Error connecting to the internet. 2:46:35 PM - Unable to contact server.. Error - 7/16/2012 2:39:46 PM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 11:39:46 AM - Error connecting to the internet. 11:39:46 AM - Unable to contact server.. Error - 7/21/2012 10:11:03 AM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 7:10:59 AM - Error connecting to the internet. 7:11:00 AM - Unable to contact server.. Error - 7/23/2012 2:08:03 PM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 11:08:02 AM - Error connecting to the internet. 11:08:02 AM - Unable to contact server.. Error - 8/29/2012 4:54:00 PM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 1:54:00 PM - Error connecting to the internet. 1:54:00 PM - Unable to contact server.. Error - 9/11/2012 7:02:03 PM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 4:02:03 PM - Error connecting to the internet. 4:02:03 PM - Unable to contact server.. Error - 9/19/2012 4:55:28 PM \| Computer Name = Trea-PC \| Source = MCUpdate \| ID = 0 Description = 1:55:27 PM - Error connecting to the internet. 1:55:27 PM - Unable to contact server.. [ OSession Events ] Error - 2/20/2011 9:22:34 PM \| Computer Name = Trea-PC \| Source = Microsoft Office 12 Sessions \| ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2373 seconds with 1140 seconds of active time. This session ended with a crash. Error - 2/20/2011 9:25:39 PM \| Computer Name = Trea-PC \| Source = Microsoft Office 12 Sessions \| ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 166 seconds with 120 seconds of active time. This session ended with a crash. Error - 2/22/2011 2:10:07 PM \| Computer Name = Trea-PC \| Source = Microsoft Office 12 Sessions \| ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 338 seconds with 180 seconds of active time. This session ended with a crash. [ System Events ] Error - 9/21/2012 8:08:27 PM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7023 Description = The Function Discovery Resource Publication service terminated with the following error: %%-2147024891 Error - 9/21/2012 8:10:10 PM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7001 Description = The HomeGroup Provider service depends on the Function Discovery Resource Publication service which failed to start because of the following error: %%-2147024891 Error - 9/21/2012 8:10:10 PM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7023 Description = The Function Discovery Resource Publication service terminated with the following error: %%-2147024891 Error - 9/21/2012 8:28:33 PM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7001 Description = The HomeGroup Provider service depends on the Function Discovery Resource Publication service which failed to start because of the following error: %%-2147024891 Error - 9/21/2012 8:28:33 PM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7023 Description = The Function Discovery Resource Publication service terminated with the following error: %%-2147024891 Error - 9/22/2012 2:27:09 AM \| Computer Name = Trea-PC \| Source = DCOM \| ID = 10010 Description = Error - 9/22/2012 2:28:24 AM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7024 Description = The Windows Firewall service terminated with service-specific error %%5. Error - 9/22/2012 2:28:24 AM \| Computer Name = Trea-PC \| Source = Application Popup \| ID = 875 Description = Driver atksgt.sys has been blocked from loading. Error - 9/22/2012 2:28:24 AM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7000 Description = The atksgt service failed to start due to the following error: %%1275 Error - 9/22/2012 2:28:26 AM \| Computer Name = Trea-PC \| Source = Service Control Manager \| ID = 7023 Description = The Function Discovery Resource Publication service terminated with the following error: %%-2147024891 the contents of checkup.txt Results of screen317's Security Check version 0.99.51 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 9 [u]``````````````Antivirus/Firewall Check:``````````````[/u] [color=red]Windows Security Center service is not running! This report may not be accurate![/color] Microsoft Security Essentials (On Access scanning disabled!) [color=red]Error obtaining update status for antivirus![/color] [u]`````````Anti-malware/Other Utilities Check:`````````[/u] Malwarebytes Anti-Malware version 1.65.0.1400 Java(TM) 6 Update 33 [color=red]Java version out of Date![/color] Adobe Flash Player 11.4.402.265 Adobe Reader 9 [color=red]Adobe Reader out of Date![/color] Mozilla Firefox (15.0.1) Google Chrome 21.0.1180.83 Google Chrome 21.0.1180.89 [u]````````Process Check: objlist.exe by Laurent````````[/u] Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe CheckPoint ZoneAlarm vsmon.exe CheckPoint ZoneAlarm zatray.exe [u]`````````````````System Health check`````````````````[/u] Total Fragmentation on Drive C: 0% [u]````````````````````End of Log``````````````````````[/u] the contents of the Online AntiVirus Scan log C:\Program Files (x86)\VideoConverter\VideoConverter.exe a variant of Win32/InstallCore.A application cleaned by deleting - quarantined C:\Program Files (x86)\VideoConverter\Uninstall\Uninstall.exe a variant of Win32/InstallCore.AG application cleaned by deleting - quarantined C:\Users\Trea\Downloads\Alcohol120_trial_2.0.2.3931.exe a variant of Win32/InstallCore.T application cleaned by deleting - quarantined C:\Users\Trea\Downloads\Magellan_Spring_2009_GPS_Map_Update_for_Maestro_and_RoadMate.exe Win32/Adware.1ClickDownload.E application cleaned by deleting - quarantined C:\Users\Trea\Downloads\VideoConverterSetup.exe a variant of Win32/InstallCore.AG application cleaned by deleting - quarantined C:\Users\Trea\Downloads\_Alcohol_120%_v2.0.0.exe Win32/Adware.1ClickDownload.E application cleaned by deleting - quarantined C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\00000004.@ Win64/Conedex.C trojan cleaned by deleting - quarantined C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\00000008.@ Win64/Agent.BA trojan cleaned by deleting - quarantined C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\000000cb.@ Win64/Conedex.B trojan cleaned by deleting - quarantined C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\80000000.@ Win64/Sirefef.AP trojan cleaned by deleting - quarantined C:\Windows\Installer\{12b1f5f0-fc91-c3a5-83f3-5c317851f5df}\U\80000032.@ a variant of Win32/Sirefef.FD trojan cleaned by deleting - quarantined Operating memory multiple threats -- ~Safe Hex~ Team Discovery ~ Project Hope ~ Like A Hurricane~
	to forum · permalink · 2012-09-22 17:50:57 ·
Treabone join:2012-09-22 El Cajon, CA	lilhurricane, Do you have enough info to help me get this machine clean? Treabone
	to forum · permalink · 2012-09-22 17:59:32 ·
lilhurricane So mote it be Premium,Mod join:2003-01-11 Purple Zone kudos:54 Reviews: ·Comcast Host: TV over IP Software RCN Inside Insight Cellphones, Provid..	If you followed the steps: »Security Cleanup FAQ »Mandatory Steps Before Requesting Assistance yes...for now. Just realize sometimes posts are delayed for review. Be patient As soon as LoPhatPhuud has a moment, he'll review & post.
	to forum · permalink · 2012-09-22 18:02:22 ·
Treabone join:2012-09-22 El Cajon, CA	Ok, Thankyou.
	to forum · permalink · 2012-09-22 18:03:10 ·

Broadband Tech > Security > Security Cleanup > [Malware] Malware infection from fake adobe update