Repair the Dead, Slow Computer system – How to Regain a High-Performance Pc
Written on March 16, 2010 – 10:09 pm | by uoooooooo
my developed gui tool works fine with high speed on one pc but when i tried to run it on another pc it was running very slow especially it takes long time to search a image….the another pc has 3.5gb ram but still its running slow compared to my pc which has 2gb ram…i have checked the task manager also but still i dnt knw why its running slow
at first it use to hang but when i removed the command Process,,Prirority,high then it stopped hanging…why????? but this problem was not encountered on my pc
any help is greatly appreicated
requested logs follow. still unable to access antimalware sites. Outlook no longer sends spam to junk folder. this started a couple days ago. Thx, standing by.
Alpha11
All processes killed
========== FILES ==========
c:\windows\unvise32.exe moved successfully.
========== SERVICES/DRIVERS ==========
Service stllssvr stopped successfully!
Service stllssvr deleted successfully!
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-2852421500-3399416196-178439442-1005\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B}\ not found.
Registry value HKEY_USERS\S-1-5-21-2852421500-3399416196-178439442-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-security-essentials.com\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\get-key-se10.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-security-essentials.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\download-soft-package.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\download-software-package.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\get-key-se10.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\is-software-download.com\ deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:62E2D794 deleted successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\software\microsoft\security center\\"AntiVirusOverride"|dword:00000000 /E : value set successfully!
HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall\\"DisableMonitoring"|dword:00000000 /E : value set successfully!
HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall\\"DisableMonitoring"|dword:00000000 /E : value set successfully!
========== COMMANDS ==========
HOSTS file reset successfully
User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: All Users
User: Cliff
->Temp folder emptied: 98304 bytes
->Temporary Internet Files folder emptied: 10716462 bytes
->Java cache emptied: 9264738 bytes
->FireFox cache emptied: 40941805 bytes
User: Default User
->Temp folder emptied: 32768 bytes
->Temporary Internet Files folder emptied: 32902 bytes
User: LocalService
->Temp folder emptied: 65536 bytes
->Temporary Internet Files folder emptied: 32902 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 49219 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 60404569 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 991127 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 117.00 mb
OTL by OldTimer – Version 3.1.30.3 log created on 03032010_010116
Files\Folders moved on Reboot…
C:\Documents and Settings\Cliff\Local Settings\Temp\~DFB38D.tmp moved successfully.
File\Folder C:\WINDOWS\temp\ZLT03fa3.TMP not found!
Registry entries deleted on Reboot…
OTL logfile created on: 3/3/2010 1:13:27 AM – Run 2
OTL by OldTimer – Version 3.1.30.3 Folder = C:\Documents and Settings\Cliff\Desktop\Bleeping Computer Scans
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) – Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1,013.00 Mb Total Physical Memory | 576.00 Mb Available Physical Memory | 57.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.45 Gb Total Space | 57.19 Gb Free Space | 76.81% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: CLIFFDESKTOP
Current User Name: Cliff
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ==========
PRC – [2010/02/27 13:23:32 | 000,549,888 | ---- | M] (OldTimer Tools) — C:\Documents and Settings\Cliff\Desktop\Bleeping Computer Scans\OTL.exe
PRC – [2010/01/18 14:14:26 | 001,286,608 | ---- | M] (PC Tools) — C:\Program Files\Jackson\pctsTray.exe
PRC – [2010/01/18 14:14:24 | 001,141,712 | ---- | M] (PC Tools) — C:\Program Files\Jackson\pctsSvc.exe
PRC – [2009/12/09 15:23:34 | 000,365,280 | ---- | M] (PC Tools) — C:\Program Files\Jackson\pctsAuxs.exe
PRC – [2009/11/22 15:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) — C:\WINDOWS\system32\ZoneLabs\vsmon.exe
PRC – [2009/11/22 15:42:50 | 001,037,192 | ---- | M] (Check Point Software Technologies LTD) — C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
PRC – [2009/11/10 10:28:08 | 000,112,592 | ---- | M] (Threat Expert Ltd.) — C:\Program Files\Jackson\BDT\BDTUpdateService.exe
PRC – [2009/10/14 07:30:26 | 000,476,528 | ---- | M] (Check Point Software Technologies) — C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe
PRC – [2009/05/21 09:55:32 | 000,206,064 | ---- | M] (SupportSoft, Inc.) — C:\Program Files\Dell Support Center\bin\sprtcmd.exe
PRC – [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) — C:\Program Files\Internet Explorer\iexplore.exe
PRC – [2009/01/05 11:19:23 | 000,152,984 | ---- | M] (Sun Microsystems, Inc.) — C:\Program Files\Java\jre6\bin\jqs.exe
PRC – [2008/08/13 17:32:40 | 000,201,968 | ---- | M] (SupportSoft, Inc.) — C:\Program Files\Dell Support Center\bin\sprtsvc.exe
PRC – [2008/04/13 18:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) — C:\WINDOWS\explorer.exe
PRC – [2008/03/19 16:08:58 | 000,607,576 | ---- | M] (Lavasoft) — C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
PRC – [2007/05/25 10:38:46 | 000,112,176 | ---- | M] (SingleClick Systems) — C:\Program Files\Dell Network Assistant\hnm_svc.exe
PRC – [2005/03/14 12:05:02 | 000,069,632 | ---- | M] (HP) — C:\WINDOWS\system32\HPZipm12.exe
========== Modules (SafeList) ==========
MOD – [2010/02/27 13:23:32 | 000,549,888 | ---- | M] (OldTimer Tools) — C:\Documents and Settings\Cliff\Desktop\Bleeping Computer Scans\OTL.exe
MOD – [2009/10/30 11:18:16 | 000,147,024 | ---- | M] (PC Tools) — C:\Program Files\Jackson\PCTGMhk.dll
========== Win32 Services (SafeList) ==========
SRV – [2010/01/18 14:14:24 | 001,141,712 | ---- | M] (PC Tools) [Auto | Running] — C:\Program Files\Jackson\pctsSvc.exe — (sdCoreService)
SRV – [2009/12/17 16:36:24 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] — C:\Program Files\NOS\bin\getPlus_Helper.dll — (getPlusHelper) getPlus®
SRV – [2009/12/09 15:23:34 | 000,365,280 | ---- | M] (PC Tools) [Auto | Running] — C:\Program Files\Jackson\pctsAuxs.exe — (sdAuxService)
SRV – [2009/11/22 15:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] — C:\WINDOWS\System32\ZoneLabs\vsmon.exe — (vsmon)
SRV – [2009/11/10 10:28:08 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Running] — C:\Program Files\Jackson\BDT\BDTUpdateService.exe — (Browser Defender Update Service)
SRV – [2009/10/14 07:30:26 | 000,476,528 | ---- | M] (Check Point Software Technologies) [Auto | Running] — C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe — (IswSvc)
SRV – [2009/06/22 22:57:49 | 000,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] — C:\Program Files\Google\Update\GoogleUpdate.exe — (gupdate1c9f3bf36914344) Google Update Service (gupdate1c9f3bf36914344)
SRV – [2009/04/11 13:17:46 | 000,313,840 | ---- | M] (Sonic Solutions) [Auto | Stopped] — C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe — (RoxLiveShare9)
SRV – [2009/04/11 13:17:44 | 000,170,480 | ---- | M] (Sonic Solutions) [Auto | Stopped] — C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe — (RoxWatch9)
SRV – [2009/04/11 13:17:26 | 001,108,464 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] — C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe — (RoxMediaDB9)
SRV – [2009/01/05 11:19:23 | 000,152,984 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] — C:\Program Files\Java\jre6\bin\jqs.exe — (JavaQuickStarterService)
SRV – [2008/11/04 01:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] — C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE — (odserv)
SRV – [2008/08/13 17:32:40 | 000,201,968 | ---- | M] (SupportSoft, Inc.) [Auto | Running] — C:\Program Files\Dell Support Center\bin\sprtsvc.exe — (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter)
SRV – [2008/03/19 16:08:58 | 000,607,576 | ---- | M] (Lavasoft) [Auto | Running] — C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe — (aawservice)
SRV – [2007/12/06 22:20:56 | 000,088,560 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] — C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe — (Roxio UPnP Renderer 9)
SRV – [2007/12/06 22:20:52 | 000,362,992 | ---- | M] (Sonic Solutions) [Auto | Stopped] — C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe — (Roxio Upnp Server 9)
SRV – [2007/10/23 15:32:02 | 001,862,144 | ---- | M] (Google) [On_Demand | Stopped] — C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe — (GoogleDesktopManager)
SRV – [2007/05/25 10:38:46 | 000,112,176 | ---- | M] (SingleClick Systems) [Auto | Running] — C:\Program Files\Dell Network Assistant\hnm_svc.exe — (hnmsvc)
SRV – [2007/03/19 11:44:44 | 000,070,656 | ---- | M] () [On_Demand | Stopped] — C:\Program Files\DellSupport\brkrsvc.exe — (DSBrokerService)
SRV – [2006/10/26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] — C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE — (ose)
SRV – [2005/05/20 10:37:12 | 000,081,920 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] — C:\WINDOWS\system32\spool\drivers\w32×86\3\HPBPRO.EXE — (HP Port Resolver)
SRV – [2005/03/14 12:05:02 | 000,069,632 | ---- | M] (HP) [Auto | Running] — C:\WINDOWS\system32\HPZipm12.exe — (Pml Driver HPZ12)
SRV – [2004/10/22 02:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] — C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe — (IDriverT)
SRV – [2004/10/16 05:31:06 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [On_Demand | Stopped] — C:\WINDOWS\system32\spool\drivers\w32×86\3\HPBOID.EXE — (HP Status Server)
========== Driver Services (SafeList) ==========
DRV – [2009/11/22 15:42:54 | 000,486,280 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] — C:\WINDOWS\system32\vsdatant.sys — (vsdatant)
DRV – [2009/10/14 07:30:02 | 000,025,208 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] — C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys — (ISWKL)
DRV – [2009/09/23 16:10:06 | 000,207,280 | ---- | M] (PC Tools) [Kernel | Boot | Running] — C:\WINDOWS\system32\drivers\PCTCore.sys — (PCTCore)
DRV – [2009/08/26 21:41:08 | 000,049,920 | ---- | M] (HP) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\HPZid412.sys — (HPZid412)
DRV – [2009/08/26 21:41:04 | 000,016,496 | ---- | M] (HP) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\HPZipr12.sys — (HPZipr12)
DRV – [2009/08/26 21:40:06 | 000,021,568 | ---- | M] (HP) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\HPZius12.sys — (HPZius12)
DRV – [2009/05/09 01:14:20 | 000,014,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\nuidfltr.sys — (NuidFltr)
DRV – [2009/01/09 15:18:02 | 000,027,136 | R--- | M] (Research in Motion Ltd) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\RimSerial.sys — (RimVSerPort)
DRV – [2008/05/20 17:33:50 | 000,022,784 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] — C:\WINDOWS\system32\drivers\RimUsb.sys — (RimUsb)
DRV – [2008/04/13 12:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\amdagp.sys — (amdagp)
DRV – [2008/04/13 12:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\sisagp.sys — (sisagp)
DRV – [2008/04/13 11:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] — C:\WINDOWS\system32\drivers\USBAUDIO.sys — (usbaudio) USB Audio Driver (WDM)
DRV – [2008/04/13 10:36:05 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\hdaudbus.sys — (HDAudBus)
DRV – [2008/01/18 03:00:00 | 000,385,072 | ---- | M] (Symantec Corporation) [Kernel | System | Running] — C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys — (eeCtrl)
DRV – [2007/11/13 04:25:53 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] — C:\WINDOWS\system32\drivers\secdrv.sys — (Secdrv)
DRV – [2007/11/02 11:18:00 | 000,003,200 | ---- | M] (RDV Soft) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\vncdrv2.sys — (vncdrv2)
DRV – [2007/06/26 13:06:20 | 000,254,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\e1e5132.sys — (e1express) Intel®
DRV – [2007/06/13 19:41:44 | 004,403,712 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\RtkHDAud.sys — (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV – [2007/06/13 18:25:14 | 000,304,920 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] — C:\WINDOWS\system32\drivers\iaStor.sys — (iaStor)
DRV – [2007/06/13 18:21:16 | 005,760,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\igxpmp32.sys — (ialm)
DRV – [2007/05/01 02:00:00 | 000,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] — C:\WINDOWS\System32\Drivers\PxHelp20.sys — (PxHelp20)
DRV – [2007/02/25 11:10:48 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Running] — C:\WINDOWS\system32\drivers\dsunidrv.sys — (dsunidrv)
DRV – [2006/12/18 18:01:20 | 000,012,672 | ---- | M] (SingleClick Systems) [Kernel | Auto | Running] — C:\WINDOWS\system32\drivers\packet.sys — (Packet)
DRV – [2006/10/05 16:07:28 | 000,004,736 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand | Stopped] — C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys — (DSproct)
DRV – [2004/08/04 04:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\ptilink.sys — (Ptilink)
DRV – [2004/08/04 04:00:00 | 000,005,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] — C:\WINDOWS\system32\drivers\rootmdm.sys — (ROOTMODEM)
DRV – [2004/08/03 21:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] — C:\WINDOWS\system32\drivers\nv4_mini.sys — (nv)
DRV – [2001/08/17 13:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\sparrow.sys — (Sparrow)
DRV – [2001/08/17 13:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\sym_u3.sys — (sym_u3)
DRV – [2001/08/17 13:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\sym_hi.sys — (sym_hi)
DRV – [2001/08/17 13:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\symc8xx.sys — (symc8xx)
DRV – [2001/08/17 13:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\symc810.sys — (symc810)
DRV – [2001/08/17 12:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\ultra.sys — (ultra)
DRV – [2001/08/17 12:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\ql12160.sys — (ql12160)
DRV – [2001/08/17 12:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\ql1080.sys — (ql1080)
DRV – [2001/08/17 12:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\ql1280.sys — (ql1280)
DRV – [2001/08/17 12:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\dac2w2k.sys — (dac2w2k)
DRV – [2001/08/17 12:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\mraid35x.sys — (mraid35x)
DRV – [2001/08/17 12:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\asc.sys — (asc)
DRV – [2001/08/17 12:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\asc3550.sys — (asc3550)
DRV – [2001/08/17 12:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\aliide.sys — (AliIde)
DRV – [2001/08/17 12:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] — C:\WINDOWS\system32\DRIVERS\cmdide.sys — (CmdIde)
DRV – [2001/08/17 11:12:10 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] — C:\WINDOWS\system32\drivers\e100b325.sys — (E100B) Intel®
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE – HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=1071023
IE – HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE – HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=1071023
IE – HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=1071023
IE – HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE – HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=1071023
IE – HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}
IE – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\S-1-5-21-2852421500-3399416196-178439442-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\S-1-5-21-2852421500-3399416196-178439442-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\S-1-5-21-2852421500-3399416196-178439442-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
========== FireFox ==========
FF – prefs.js..browser.startup.homepage: "www.yahoo.com"
FF – prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF – prefs.js..extensions.enabledItems: {FFB96CC1-7EB3-449D-B827-DB661701C6BB}:1.5.53.4
FF – HKLM\software\mozilla\Firefox\extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker [2010/01/13 16:13:04 | 000,000,000 | ---D | M]
FF – HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/06 15:59:20 | 000,000,000 | ---D | M]
FF – HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/18 21:30:31 | 000,000,000 | ---D | M]
[2009/06/23 23:04:51 | 000,000,000 | ---D | M] — C:\Documents and Settings\Cliff\Application Data\Mozilla\Extensions
[2010/02/17 16:33:42 | 000,000,000 | ---D | M] — C:\Documents and Settings\Cliff\Application Data\Mozilla\Firefox\Profiles\x8cy6tck.default\extensions
[2010/02/21 18:38:21 | 000,000,000 | ---D | M] — C:\Program Files\Mozilla Firefox\extensions
O1 HOSTS File: ([2010/03/03 01:01:26 | 000,000,098 | ---- | M]) – C:\WINDOWS\system32\drivers\etc\Hosts
O1 – Hosts: 127.0.0.1 localhost
O1 – Hosts: ::1 localhost
O2 – BHO: (AcroIEHlprObj Class) – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 – BHO: (PC Tools Browser Guard BHO) – {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} – C:\Program Files\Jackson\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 – BHO: (Java™ Plug-In SSV Helper) – {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} – C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 – BHO: (ZoneAlarm Toolbar Registrar) – {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} – C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 – BHO: (AcroIEToolbarHelper Class) – {AE7CD045-E861-484f-8273-0445EE161910} – C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O2 – BHO: (JQSIEStartDetectorImpl Class) – {E7E6F031-17CE-4C07-BC86-EABFE594F69C} – C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 – HKLM\..\Toolbar: (PC Tools Browser Guard) – {472734EA-242A-422B-ADF8-83D1E48CC825} – C:\Program Files\Jackson\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 – HKLM\..\Toolbar: (Adobe PDF) – {47833539-D0C5-4125-9FA8-0819E2EAAC93} – C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 – HKLM\..\Toolbar: (ZoneAlarm Toolbar) – {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} – C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\..\Toolbar\WebBrowser: (PC Tools Browser Guard) – {472734EA-242A-422B-ADF8-83D1E48CC825} – C:\Program Files\Jackson\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\..\Toolbar\WebBrowser: (Adobe PDF) – {47833539-D0C5-4125-9FA8-0819E2EAAC93} – C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) – {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} – C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O4 – HKLM..\Run: C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 – HKLM..\Run: C:\Program Files\Jackson\pctsTray.exe (PC Tools)
O4 – HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005..\Run: C:\Documents and Settings\Cliff\Application Data\mjusbsp\cdloader2.exe (magicJack L.P.)
O4 – Startup: C:\Documents and Settings\Cliff\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 – HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 – HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 – HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 – HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 – HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 – HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 – HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 – HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 – HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 – HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 – HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 – HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 – HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 – HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 – HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 – HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 – HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 – Extra context menu item: E&xport to Microsoft Excel – C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 – Extra Button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O15 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\..Trusted Domains: magicjack.com ( https in Trusted sites)
O15 – HKU\S-1-5-21-2852421500-3399416196-178439442-1005\..Trusted Domains: talk4free.com ( https in Trusted sites)
O16 – DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase8942.cab (Windows Live Safety Center Base Module)
O17 – HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 – Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} – C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 – Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 – HKLM Winlogon: Shell – (Explorer.exe) – C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 – Winlogon\Notify\igfxcui: DllName – igfxdev.dll – C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 – Desktop WallPaper: C:\Documents and Settings\Cliff\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 – Desktop BackupWallPaper: C:\Documents and Settings\Cliff\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 – HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} – C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 – HKLM CDRom: AutoRun – 1
O32 – AutoRun File – [2004/08/11 16:15:00 | 000,000,000 | ---- | M] () – C:\AUTOEXEC.BAT — [ NTFS ]
O34 – HKLM BootExecute: (autocheck autochk *) – File not found
O34 – HKLM BootExecute: (lsdelete) – C:\WINDOWS\System32\lsdelete.exe ()
O35 – comfile — "%1" %*
O35 – exefile — "%1" %*
========== Files/Folders – Created Within 30 Days ==========
[2010/03/03 01:01:16 | 000,000,000 | ---D | C] — C:\_OTL
[2010/03/03 00:56:34 | 000,000,000 | ---D | C] — C:\Program Files\ERUNT
[2010/03/03 00:52:39 | 000,791,393 | ---- | C] (Lars Hederer ) — C:\Documents and Settings\Cliff\Desktop\erunt-setup.exe
[2010/03/02 13:42:44 | 000,000,000 | -HSD | C] — C:\RECYCLER
[2010/03/01 22:12:07 | 000,000,000 | RHSD | C] — C:\cmdcons
[2010/03/01 22:10:49 | 000,161,792 | ---- | C] (SteelWerX) — C:\WINDOWS\SWREG.exe
[2010/03/01 22:10:49 | 000,136,704 | ---- | C] (SteelWerX) — C:\WINDOWS\SWSC.exe
[2010/03/01 22:10:49 | 000,031,232 | ---- | C] (NirSoft) — C:\WINDOWS\NIRCMD.exe
[2010/03/01 22:10:48 | 000,212,480 | ---- | C] (SteelWerX) — C:\WINDOWS\SWXCACLS.exe
[2010/03/01 22:10:33 | 000,000,000 | ---D | C] — C:\WINDOWS\ERDNT
[2010/03/01 22:10:14 | 000,000,000 | ---D | C] — C:\Qoobox
[2010/02/28 23:27:34 | 000,000,000 | ---D | C] — C:\Documents and Settings\Cliff\Desktop\Bleeping Computer Scans
[2010/02/23 18:22:55 | 001,640,400 | ---- | C] (Threat Expert Ltd.) — C:\WINDOWS\PCTBDCore.dll
[2010/02/23 18:22:55 | 000,165,840 | ---- | C] (Threat Expert Ltd.) — C:\WINDOWS\PCTBDRes.dll
[2010/02/23 18:22:55 | 000,149,456 | ---- | C] (PC Tools) — C:\WINDOWS\SGDetectionTool.dll
[2010/02/23 18:22:29 | 000,233,136 | ---- | C] (PC Tools) — C:\WINDOWS\System32\drivers\pctgntdi.sys
[2010/02/23 18:22:19 | 000,207,280 | ---- | C] (PC Tools) — C:\WINDOWS\System32\drivers\PCTCore.sys
[2010/02/23 18:22:19 | 000,087,784 | ---- | C] (PC Tools) — C:\WINDOWS\System32\drivers\PCTAppEvent.sys
[2010/02/23 18:22:07 | 000,070,408 | ---- | C] (PC Tools) — C:\WINDOWS\System32\drivers\pctplsg.sys
[2010/02/23 18:21:58 | 000,000,000 | ---D | C] — C:\Program Files\Common Files\PC Tools
[2010/02/23 18:21:58 | 000,000,000 | ---D | C] — C:\Documents and Settings\Cliff\Application Data\PC Tools
[2010/02/23 18:21:58 | 000,000,000 | ---D | C] — C:\Documents and Settings\All Users\Application Data\PC Tools
[2010/02/23 18:21:58 | 000,000,000 | ---D | C] — C:\Program Files\Jackson
[2010/02/21 16:18:45 | 000,000,000 | ---D | C] — C:\Program Files\Windows Live Safety Center
[2010/02/16 18:38:46 | 000,000,000 | ---D | C] — C:\Program Files\Trend Micro
[2010/02/16 13:43:40 | 000,000,000 | ---D | C] — C:\Documents and Settings\Cliff\Local Settings\Application Data\Threat Expert
[2010/02/12 11:24:54 | 000,000,000 | ---D | C] — C:\Program Files\Common Files\Akamai
[2010/02/12 11:24:23 | 000,000,000 | ---D | C] — C:\Documents and Settings\Cliff\My Documents\Downloads
[2010/02/11 20:25:28 | 000,000,000 | ---D | C] — C:\Documents and Settings\Cliff\My Documents\Clearwire
[2010/02/09 14:10:51 | 000,000,000 | ---D | C] — C:\Program Files\WindowsRepairKit
[2010/02/08 23:33:01 | 000,000,000 | ---D | C] — C:\Documents and Settings\Cliff\My Documents\QB Backup Files 9-3-09
[2010/02/05 13:05:19 | 000,000,000 | ---D | C] — C:\Documents and Settings\Cliff\My Documents\My eBooks
[2009/11/07 12:50:46 | 000,000,000 | --SD | M] — C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/09/18 22:22:01 | 000,000,000 | ---D | M] — C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2009/06/25 13:14:15 | 000,000,000 | ---D | M] — C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2009/06/22 22:58:17 | 000,000,000 | ---D | M] — C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2009/01/21 20:53:45 | 000,000,000 | ---D | M] — C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2007/10/23 15:40:23 | 000,000,000 | ---D | M] — C:\Documents and Settings\LocalService\Application Data\Roxio
[2004/08/11 16:20:16 | 000,000,000 | ---D | M] — C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2004/08/11 16:06:56 | 000,000,000 | --SD | M] — C:\Documents and Settings\NetworkService\Application Data\Microsoft
========== Files – Modified Within 30 Days ==========
[2010/03/03 01:05:31 | 000,002,206 | ---- | M] () — C:\WINDOWS\System32\wpa.dbl
[2010/03/03 01:03:10 | 000,000,882 | ---- | M] () — C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/03 01:03:10 | 000,000,236 | ---- | M] () — C:\WINDOWS\tasks\OGALogon.job
[2010/03/03 01:03:09 | 000,000,006 | -H-- | M] () — C:\WINDOWS\tasks\SA.DAT
[2010/03/03 01:02:54 | 000,002,048 | --S- | M] () — C:\WINDOWS\bootstat.dat
[2010/03/03 01:02:53 | 003,742,404 | ---- | M] () — C:\video.dat
[2010/03/03 01:01:57 | 007,602,176 | -H-- | M] () — C:\Documents and Settings\Cliff\NTUSER.DAT
[2010/03/03 01:01:57 | 000,000,178 | -HS- | M] () — C:\Documents and Settings\Cliff\ntuser.ini
[2010/03/03 01:01:26 | 000,000,098 | ---- | M] () — C:\WINDOWS\System32\drivers\etc\Hosts
[2010/03/03 00:56:44 | 000,000,767 | ---- | M] () — C:\Documents and Settings\Cliff\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2010/03/03 00:56:34 | 000,000,611 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\NTREGOPT.lnk
[2010/03/03 00:56:34 | 000,000,592 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\ERUNT.lnk
[2010/03/03 00:52:44 | 000,791,393 | ---- | M] (Lars Hederer ) — C:\Documents and Settings\Cliff\Desktop\erunt-setup.exe
[2010/03/03 00:35:00 | 000,000,886 | ---- | M] () — C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/02 22:24:22 | 000,002,521 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\Microsoft Office Outlook 2007.lnk
[2010/03/01 22:18:16 | 000,000,227 | ---- | M] () — C:\WINDOWS\system.ini
[2010/03/01 22:12:12 | 000,000,281 | RHS- | M] () — C:\boot.ini
[2010/03/01 21:18:20 | 003,875,750 | R--- | M] () — C:\Documents and Settings\Cliff\Desktop\alpha11CF.exe
[2010/03/01 15:34:19 | 000,002,515 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\Microsoft Office Word 2007.lnk
[2010/03/01 14:12:28 | 000,001,004 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\magicJack.lnk
[2010/02/28 22:54:10 | 000,000,041 | ---- | M] () — C:\fixme.bat
[2010/02/28 22:49:11 | 000,077,312 | ---- | M] () — C:\mbr.exe
[2010/02/26 18:04:11 | 000,000,000 | ---- | M] () — C:\WINDOWS\System32\null
[2010/02/25 19:54:54 | 000,000,256 | ---- | M] () — C:\WINDOWS\System32\pool.bin
[2010/02/24 21:02:03 | 000,000,000 | ---- | M] () — C:\Documents and Settings\Cliff\defogger_reenable
[2010/02/23 18:22:16 | 000,001,572 | ---- | M] () — C:\Documents and Settings\All Users\Desktop\Spyware Doctor.lnk
[2010/02/23 14:05:59 | 000,011,775 | ---- | M] () — C:\Documents and Settings\Cliff\My Documents\Dear Jimmy.docx
[2010/02/21 18:44:06 | 001,426,446 | ---- | M] () — C:\Documents and Settings\Cliff\My Documents\Virtumundo.docx
[2010/02/21 15:50:25 | 000,058,249 | ---- | M] () — C:\Documents and Settings\Cliff\My Documents\processes.docx
[2010/02/16 18:38:47 | 000,001,734 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\HijackThis.lnk
[2010/02/16 16:00:46 | 000,011,082 | ---- | M] () — C:\Documents and Settings\Cliff\My Documents\Registry Data Items Infected.docx
[2010/02/16 15:43:27 | 000,000,049 | ---- | M] () — C:\WINDOWS\System32\WRKVersion.ini
[2010/02/11 13:29:52 | 000,103,653 | ---- | M] () — C:\Documents and Settings\Cliff\My Documents\Personality Test Results.docx
[2010/02/11 00:40:42 | 000,916,822 | ---- | M] () — C:\WINDOWS\System32\WRKUpdates.zip
[2010/02/09 14:26:14 | 000,010,515 | ---- | M] () — C:\Documents and Settings\Cliff\My Documents\Windows Repair Kit code.docx
[2010/02/09 14:10:53 | 000,000,710 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\Windows Repair Kit v3.0.lnk
[2010/02/07 15:07:48 | 000,019,968 | ---- | M] () — C:\Documents and Settings\Cliff\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/07 15:03:20 | 000,027,304 | ---- | M] () — C:\Documents and Settings\Cliff\My Documents\Emergency Letter.docx
[2010/02/07 10:41:42 | 000,001,915 | ---- | M] () — C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/02/05 09:25:38 | 000,070,408 | ---- | M] (PC Tools) — C:\WINDOWS\System32\drivers\pctplsg.sys
[2010/02/05 09:17:56 | 000,233,136 | ---- | M] (PC Tools) — C:\WINDOWS\System32\drivers\pctgntdi.sys
[2010/02/01 23:38:15 | 000,000,803 | ---- | M] () — C:\Documents and Settings\Cliff\Desktop\Internet Explorer.lnk
========== Files Created – No Company Name ==========
[2010/03/03 00:56:44 | 000,000,767 | ---- | C] () — C:\Documents and Settings\Cliff\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2010/03/03 00:56:34 | 000,000,611 | ---- | C] () — C:\Documents and Settings\Cliff\Desktop\NTREGOPT.lnk
[2010/03/03 00:56:34 | 000,000,592 | ---- | C] () — C:\Documents and Settings\Cliff\Desktop\ERUNT.lnk
[2010/03/01 22:12:12 | 000,000,211 | ---- | C] () — C:\Boot.bak
[2010/03/01 22:12:09 | 000,260,272 | ---- | C] () — C:\cmldr
[2010/03/01 22:10:49 | 000,261,632 | ---- | C] () — C:\WINDOWS\PEV.exe
[2010/03/01 22:10:49 | 000,098,816 | ---- | C] () — C:\WINDOWS\sed.exe
[2010/03/01 22:10:49 | 000,080,412 | ---- | C] () — C:\WINDOWS\grep.exe
[2010/03/01 22:10:49 | 000,077,312 | ---- | C] () — C:\WINDOWS\MBR.exe
[2010/03/01 22:10:49 | 000,068,096 | ---- | C] () — C:\WINDOWS\zip.exe
[2010/03/01 21:18:20 | 003,875,750 | R--- | C] () — C:\Documents and Settings\Cliff\Desktop\alpha11CF.exe
[2010/02/28 22:54:10 | 000,000,041 | ---- | C] () — C:\fixme.bat
[2010/02/28 22:49:29 | 000,077,312 | ---- | C] () — C:\mbr.exe
[2010/02/25 18:30:01 | 000,000,886 | ---- | C] () — C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/02/25 18:30:01 | 000,000,882 | ---- | C] () — C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/02/24 21:02:03 | 000,000,000 | ---- | C] () — C:\Documents and Settings\Cliff\defogger_reenable
[2010/02/23 18:22:55 | 001,152,444 | ---- | C] () — C:\WINDOWS\UDB.zip
[2010/02/23 18:22:55 | 000,767,952 | ---- | C] () — C:\WINDOWS\BDTSupport.dll
[2010/02/23 18:22:55 | 000,000,882 | ---- | C] () — C:\WINDOWS\RegSDImport.xml
[2010/02/23 18:22:55 | 000,000,880 | ---- | C] () — C:\WINDOWS\RegISSImport.xml
[2010/02/23 18:22:55 | 000,000,131 | ---- | C] () — C:\WINDOWS\IDB.zip
[2010/02/23 18:22:29 | 000,007,387 | ---- | C] () — C:\WINDOWS\System32\drivers\pctgntdi.cat
[2010/02/23 18:22:19 | 000,007,412 | ---- | C] () — C:\WINDOWS\System32\drivers\PCTAppEvent.cat
[2010/02/23 18:22:19 | 000,007,383 | ---- | C] () — C:\WINDOWS\System32\drivers\pctcore.cat
[2010/02/23 18:22:16 | 000,001,572 | ---- | C] () — C:\Documents and Settings\All Users\Desktop\Spyware Doctor.lnk
[2010/02/23 18:22:07 | 000,007,383 | ---- | C] () — C:\WINDOWS\System32\drivers\pctplsg.cat
[2010/02/23 14:05:58 | 000,011,775 | ---- | C] () — C:\Documents and Settings\Cliff\My Documents\Dear Jimmy.docx
[2010/02/21 18:21:55 | 001,426,446 | ---- | C] () — C:\Documents and Settings\Cliff\My Documents\Virtumundo.docx
[2010/02/21 15:50:25 | 000,058,249 | ---- | C] () — C:\Documents and Settings\Cliff\My Documents\processes.docx
[2010/02/16 18:38:47 | 000,001,734 | ---- | C] () — C:\Documents and Settings\Cliff\Desktop\HijackThis.lnk
[2010/02/16 16:00:46 | 000,011,082 | ---- | C] () — C:\Documents and Settings\Cliff\My Documents\Registry Data Items Infected.docx
[2010/02/11 12:57:09 | 000,103,653 | ---- | C] () — C:\Documents and Settings\Cliff\My Documents\Personality Test Results.docx
[2010/02/11 00:40:42 | 000,916,822 | ---- | C] () — C:\WINDOWS\System32\WRKUpdates.zip
[2010/02/09 14:26:13 | 000,010,515 | ---- | C] () — C:\Documents and Settings\Cliff\My Documents\Windows Repair Kit code.docx
[2010/02/09 14:15:06 | 000,000,049 | ---- | C] () — C:\WINDOWS\System32\WRKVersion.ini
[2010/02/09 14:10:53 | 000,000,710 | ---- | C] () — C:\Documents and Settings\Cliff\Desktop\Windows Repair Kit v3.0.lnk
[2010/02/07 10:41:42 | 000,001,915 | ---- | C] () — C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/02/05 13:04:31 | 000,027,304 | ---- | C] () — C:\Documents and Settings\Cliff\My Documents\Emergency Letter.docx
[2010/02/01 23:38:15 | 000,000,803 | ---- | C] () — C:\Documents and Settings\Cliff\Desktop\Internet Explorer.lnk
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () — C:\WINDOWS\System32\OGACheckControl.dll
[2008/11/20 18:09:00 | 000,159,744 | ---- | C] () — C:\WINDOWS\System32\libssl32.dll
[2008/09/05 16:11:12 | 000,000,376 | ---- | C] () — C:\WINDOWS\ODBC.INI
[2008/06/12 14:35:22 | 000,000,128 | ---- | C] () — C:\Documents and Settings\Cliff\Local Settings\Application Data\fusioncache.dat
[2008/03/05 17:48:44 | 000,023,195 | ---- | C] () — C:\Program Files\Chops.zip
[2008/01/30 17:49:13 | 000,000,775 | ---- | C] () — C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2008/01/30 17:48:59 | 000,077,824 | R--- | C] () — C:\WINDOWS\System32\hpzids01.dll
[2008/01/28 16:01:26 | 000,054,520 | ---- | C] () — C:\Program Files\ohioscript.zip
[2007/11/30 17:33:37 | 000,019,968 | ---- | C] () — C:\Documents and Settings\Cliff\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/11/05 11:20:21 | 000,135,168 | ---- | C] () — C:\WINDOWS\System32\Snmp_pp.dll
[2007/11/05 11:18:32 | 000,135,168 | ---- | C] () — C:\WINDOWS\snmp_pp.dll
[2007/11/05 11:18:14 | 000,009,376 | ---- | C] () — C:\WINDOWS\RHN1_9.ini
[2007/10/29 15:08:19 | 000,233,525 | ---- | C] () — C:\WINDOWS\System32\isutil.dll
[2007/10/29 15:08:18 | 000,000,271 | ---- | C] () — C:\WINDOWS\apptune.ini
[2007/10/23 15:40:49 | 000,000,061 | ---- | C] () — C:\WINDOWS\smscfg.ini
[2007/10/23 15:26:48 | 000,000,166 | ---- | C] () — C:\WINDOWS\wininit.ini
[2007/10/23 15:01:11 | 000,204,800 | ---- | C] () — C:\WINDOWS\System32\igfxCoIn_v4820.dll
[2007/10/23 14:59:49 | 000,001,124 | ---- | C] () — C:\WINDOWS\System32\OEMINFO.INI
[2007/09/27 09:51:02 | 000,020,698 | ---- | C] () — C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 09:48:48 | 000,030,628 | ---- | C] () — C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 09:48:28 | 000,031,698 | ---- | C] () — C:\WINDOWS\System32\gthrctr.ini
[2005/03/29 00:58:20 | 000,159,744 | ---- | C] () — C:\WINDOWS\System32\ssleay32.dll
[2005/03/29 00:58:10 | 000,847,872 | ---- | C] () — C:\WINDOWS\System32\libeay32.dll
[2004/08/11 16:24:19 | 000,000,791 | ---- | C] () — C:\WINDOWS\orun32.ini
[2004/08/11 16:11:31 | 000,001,793 | ---- | C] () — C:\WINDOWS\System32\fxsperf.ini
[2001/07/06 16:30:00 | 000,003,399 | ---- | C] () — C:\WINDOWS\System32\hptcpmon.ini
[2000/04/12 14:28:12 | 000,118,784 | ---- | C] () — C:\WINDOWS\System32\lfkodak.dll
[2000/04/12 14:24:10 | 000,338,944 | ---- | C] () — C:\WINDOWS\System32\lffpx7.dll
[1999/09/08 09:50:10 | 000,037,552 | ---- | C] () — C:\Program Files\CHOPS___.TTF
========== Alternate Data Streams ==========
@Alternate Data Stream – 158 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream – 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >
OTL Extras logfile created on: 2/27/2010 1:43:10 PM – Run 1
OTL by OldTimer – Version 3.1.30.3 Folder = C:\Documents and Settings\Cliff\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) – Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1,013.00 Mb Total Physical Memory | 430.00 Mb Available Physical Memory | 42.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.45 Gb Total Space | 51.20 Gb Free Space | 68.78% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: CLIFFDESKTOP
Current User Name: Cliff
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
========== Extra Registry (SafeList) ==========
========== File Associations ==========
.html [@ = FirefoxHTML] — C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.reg [@ = regfile] —
.html [@ = htmlfile] — Reg Error: Key error. File not found
========== Shell Spawning ==========
\command]
batfile — "%1" %*
cmdfile — "%1" %*
comfile — "%1" %*
exefile — "%1" %*
htmlfile — "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile — "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile — "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile — "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
http — "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https — "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile — "%1" %*
regfile —
regfile — Reg Error: Key error.
scrfile — "%1"
scrfile — rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile — "%1" /S
txtfile — Reg Error: Key error.
Unknown — %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory — %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder — %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder — %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive — %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe — "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} — "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring" = 1
"EnableFirewall" = 0
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"10421:UDP" = 10421:UDP:*:Enabled:SingleClick Discovery Protocol
"10426:UDP" = 10426:UDP:*:Enabled:SingleClick ICC
========== Authorized Applications List ==========
"C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe" = C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe:*:Enabled:RoxioUPnPRenderer9 — (Sonic Solutions)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook — (Microsoft Corporation)
"C:\Program Files\Dell Network Assistant\ezi_hnm2.exe" = C:\Program Files\Dell Network Assistant\ezi_hnm2.exe:*:Enabled:Dell Network Assistant — (SingleClick Systems)
"C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe" = C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe:*:Enabled:RoxioUPnPRenderer9 — (Sonic Solutions)
"C:\Documents and Settings\Cliff\Application Data\mjusbsp\magicJack.exe" = C:\Documents and Settings\Cliff\Application Data\mjusbsp\magicJack.exe:*:Enabled:magicJack — (magicJack L.P.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
"{00E02F78-9DB8-4E46-A56A-988843D76C6C}" = AutoContract Pre-Installation Support Files
"{0240BDFB-2995-4A3F-8C96-18D41282B716}" = Dell Network Assistant
"{03B0EB18-51D2-4302-B92C-BBAE869FFBBF}" = BlackBerry Device Software Updater
"{054449A0-8CCE-11D4-B273-00E029306B02}" = PFSBreeze
"{0BF5FBE7-3907-4A1F-9E48-8B66E52850D6}" = TrayApp
"{0F40754C-F1FD-43df-B73E-9DA38399CDD6}" = hpf_ProductContext
"{0F756CD9-4A1E-409B-B101-601DDC4C03AA}" = QualxServ Service Agreement
"{14A67CE0-4F30-4607-885B-43EE27BAC746}" = Readme
"{1E1F1E70-14D8-4380-8652-BD1A895A7D65}" = Status
"{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 11
"{281ECE39-F043-492B-8337-F2E546B5604A}" = PowerDVD
"{2C6C74C2-042F-4D36-B7B0-0C538FCF01AB}" = Dell DataSafe Online
"{2DC1BD16-9CD7-44A4-8F2F-1803E9BEF5F2}" = TOSHIBA e-STUDIO280 Series Client
"{2EAF7E61-068E-11DF-953C-005056806466}" = Google Earth
"{302E67DB-ADF9-4885-931D-8F18F7A25DF8}" = AutoContract-Gold
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm
"{4BE53DB2-C1F2-44D1-A9AB-1630BA7F2AF1}" = SolutionCenter
"{4D612FB2-1AE7-4E46-9377-35BB2F06A787}" = Roxio Media Manager
"{58E6A969-8215-4ABC-BD73-FCB25EA6F544}" = FormViewer
"{5905F42D-3F5F-4916-ADA6-94A3646AEE76}" = Dell Driver Reset Tool
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{777CA40C-0206-4EF6-A0FC-618BF06BF8D0}" = Intel® PRO Network Connections 12.1.8.0
"{7ADE9F27-A175-447F-A4B4-B05FA82735E1}" = HP Deskjet 6900 series
"{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}" = DellSupport
"{87F59A07-55EE-415E-A966-31F3D8B6B7AD}" = LP6940_Help
"{8DC6CA16-9B4E-4C10-95EE-2BD91EB0290C}" = LP6940Trb
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_BASICR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_BASICR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_BASICR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_BASICR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_BASICR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_BASICR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_BASICR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_BASICR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0013-0000-0000-0000000FF1CE}" = Microsoft Office Basic 2007
"{91120000-0013-0000-0000-0000000FF1CE}_BASICR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0013-0000-0000-0000000FF1CE}_BASICR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91130409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Small Business
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{975C8028-51D8-44A9-9585-82E9810FE96A}" = hp LaserJet 1000
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable – x86 9.0.30729.17
"{9C209B30-F71F-4c53-8D26-453208EC8E91}" = dj6940
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-0000-7EC8-7489-000000000603}" = Adobe Acrobat and Reader 6.0.3 Update
"{AC76BA86-0000-7EC8-7489-000000000604}" = Adobe Acrobat and Reader 6.0.4 Update
"{AC76BA86-0000-7EC8-7489-000000000605}" = Adobe Acrobat and Reader 6.0.5 Update
"{AC76BA86-0000-7EC8-7489-000000000606}" = Adobe Acrobat and Reader 6.0.6 Update
"{AC76BA86-1033-0000-BA7E-000000000001}" = Adobe Acrobat 6.0.1 Standard
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB1F3886-AE9F-46fb-8325-6B0718989285}" = dj_taplugin
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D7CAE58E-26DE-49B7-A75D-EAEDF76726BE}" = HP Photosmart Essential
"{DEBB2986-15B0-4D28-95FA-5C966A396589}" = HPProductAssistant
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware 2007
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{EC2715CE-C182-483C-84CC-81D7D914CF14}" = WebReg
"{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}" = HP Software Update
"{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}" = BlackBerry Desktop Software 5.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Atmosphere Player" = Adobe Atmosphere Player for Acrobat and Adobe Reader
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"BASICR" = Microsoft Office Basic 2007
"BlackBerry_{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}" = BlackBerry Desktop Software 5.0
"Browser Defender_is1" = Browser Defender 2.0.6.11
"Google Desktop" = Google Desktop
"HDMI" = Intel® Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 6.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center and Imaging Support Tools 6.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{58E6A969-8215-4ABC-BD73-FCB25EA6F544}" = FormViewer
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.7)" = Mozilla Firefox (3.5.7)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"SearchAssist" = SearchAssist
"Spyware Doctor" = Spyware Doctor 7.0
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Window Washer 5" = Window Washer 5
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows Repair Kit v3.0" = Windows Repair Kit v3.0
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"ZoneAlarm" = ZoneAlarm
"ZoneAlarm Toolbar" = ZoneAlarm Toolbar
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error – 2/27/2010 5:35:05 AM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 6:35:05 AM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 7:35:05 AM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 8:35:05 AM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 9:35:05 AM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 10:35:05 AM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 11:35:05 AM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 12:35:05 PM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 1:35:05 PM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
Error – 2/27/2010 2:35:05 PM | Computer Name = CLIFFDESKTOP | Source = Google Update | ID = 20
Description =
[ OSession Events ]
Error – 2/25/2008 7:40:57 PM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6023.5000, Microsoft Office Version: 12.0.4518.1014. This session lasted 27769
seconds with 9900 seconds of active time. This session ended with a crash.
Error – 10/7/2008 4:37:22 PM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6308.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 127
seconds with 120 seconds of active time. This session ended with a crash.
Error – 11/18/2008 4:20:01 PM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 15779
seconds with 5940 seconds of active time. This session ended with a crash.
Error – 2/18/2009 1:21:04 AM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 44183
seconds with 1380 seconds of active time. This session ended with a crash.
Error – 2/19/2009 2:10:58 AM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 54941
seconds with 1920 seconds of active time. This session ended with a crash.
Error – 2/19/2009 8:27:35 PM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 13675
seconds with 600 seconds of active time. This session ended with a crash.
Error – 3/18/2009 7:43:13 PM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 17467
seconds with 3180 seconds of active time. This session ended with a crash.
Error – 7/24/2009 10:05:38 AM | Computer Name = CLIFFDESKTOP | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 147
seconds with 120 seconds of active time. This session ended with a crash.
[ System Events ]
Error – 2/24/2010 11:40:55 PM | Computer Name = CLIFFDESKTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Roxio Hard Drive Watcher
9 service to connect.
Error – 2/24/2010 11:50:20 PM | Computer Name = CLIFFDESKTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the TrueVector Internet Monitor
service to connect.
Error – 2/24/2010 11:50:20 PM | Computer Name = CLIFFDESKTOP | Source = Service Control Manager | ID = 7000
Description = The TrueVector Internet Monitor service failed to start due to the
following error: %%1053
Error – 2/24/2010 11:50:20 PM | Computer Name = CLIFFDESKTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Roxio Hard Drive Watcher
9 service to connect.
Error – 2/25/2010 12:15:02 AM | Computer Name = CLIFFDESKTOP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Roxio Hard Drive Watcher
9 service to connect.
Error – 2/25/2010 2:38:19 PM | Computer Name = CLIFFDESKTOP | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.0.101 for the Network Card with network
address 001AA0958D29 has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error – 2/26/2010 1:18:48 PM | Computer Name = CLIFFDESKTOP | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.0.101 for the Network Card with network
address 001AA0958D29 has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error – 2/26/2010 4:55:54 PM | Computer Name = CLIFFDESKTOP | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.0.101 for the Network Card with network
address 001AA0958D29 has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error – 2/26/2010 9:46:55 PM | Computer Name = CLIFFDESKTOP | Source = Windows Update Agent | ID = 16
Description = Unable to Connect: Windows is unable to connect to the automatic updates
service and therefore cannot download and install updates according to the set
schedule. Windows will continue to try to establish a connection.
Error – 2/27/2010 3:09:43 PM | Computer Name = CLIFFDESKTOP | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.0.101 for the Network Card with network
address 001AA0958D29 has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
< End of report >
Getting any sluggish laptop or computer? Do you dislike to wait to get a extended time frame to the computer system answering? Can you strategy to pay for a brand new personal computer in order to exchange your fix blue screen of death recent 1 because it is really slow? Well, please maintain at previous to people examine this particular document. You will discover a number of effective and quick hints with regards to the best way to repair sluggish pc.
Tags: slow pc






