OTL logfile created on: 5.12.2010 12:43:51 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Hong\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d.M.yyyy
2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 76,00% Memory free
6,00 Gb Paging File | 6,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 95,70 Gb Total Space | 40,21 Gb Free Space | 42,02% Space Free | Partition Type: NTFS
Drive D: | 94,21 Gb Total Space | 31,47 Gb Free Space | 33,40% Space Free | Partition Type: NTFS
Computer Name: CATLOS | User Name: Hong | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2010.12.05 12:42:40 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Hong\My Documents\Downloads\OTL.exe
PRC - [2010.10.27 13:20:45 | 000,133,432 | ---- | M] (ICQ, LLC.) -- C:\Program Files\ICQ7.1\ICQ.exe
PRC - [2010.01.21 08:24:00 | 000,527,344 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Hong\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2008.04.14 05:42:20 | 004,919,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.04.16 15:28:22 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
PRC - [2003.04.06 00:17:18 | 000,147,456 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
PRC - [2003.04.05 23:55:04 | 000,311,296 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposts08.exe
PRC - [2003.04.05 23:45:10 | 000,286,720 | ---- | M] (Hewlett-Packard Co.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
========== Modules (SafeList) ==========
MOD - [2010.12.05 12:42:40 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Hong\My Documents\Downloads\OTL.exe
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2010.02.19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.08.11 23:29:02 | 000,655,624 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009.08.05 22:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2009.06.02 09:10:08 | 000,637,952 | ---- | M] (Nokia.) [Disabled | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007.09.04 19:25:44 | 000,131,072 | ---- | M] (NVIDIA) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService)
SRV - [2007.01.04 22:38:08 | 000,024,652 | ---- | M] (Viewpoint Corporation) [Disabled | Stopped] -- C:\Program Files\Viewpoint\Common\ViewpointService.exe -- (Viewpoint Manager Service)
SRV - [2005.11.14 09:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2003.03.10 06:31:02 | 000,065,795 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- F:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btkrnl.sys -- (btkrnl)
DRV - [2010.10.16 19:55:00 | 009,623,680 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2010.06.28 21:50:22 | 000,087,536 | ---- | M] (CyberLink Corp.) [2010/07/11 13:05:02] [Kernel | Auto | Running] -- D:\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})
DRV - [2010.06.02 18:08:44 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2010.05.10 19:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.04.22 16:51:43 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010.02.17 19:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009.08.05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009.03.27 01:16:28 | 000,012,672 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz132_x32.sys -- (cpuz132)
DRV - [2009.03.25 22:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009.02.24 17:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2009.02.09 07:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009.02.09 07:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009.02.09 07:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009.02.09 07:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.08.14 06:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\adfs.sys -- (adfs)
DRV - [2007.09.04 19:26:32 | 000,029,696 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\nvoclock.sys -- (NVR0Dev)
DRV - [2007.08.15 15:27:18 | 000,009,600 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\n558.sys -- (n558)
DRV - [2007.04.25 16:20:48 | 004,030,144 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2006.07.01 22:39:40 | 000,036,864 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005.04.06 03:22:30 | 000,012,928 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2005.04.06 03:22:28 | 000,033,536 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2004.08.03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004.06.03 10:40:46 | 000,079,360 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys -- (nvatabus)
DRV - [2004.04.02 15:40:00 | 000,021,760 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.games-fusion.net
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://fullarticles.net
IE - HKU\S-1-5-21-789336058-839522115-1617979688-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "
http://search.live.com/results.aspx?FORM=IEFM1&q="
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "
http://www.facebook.com/"
FF - prefs.js..extensions.enabledItems:
DTToolbar@toolbarnet.com:1.1.2.0185
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7
FF - prefs.js..extensions.enabledItems:
fbchathistory@firechm.com:1.0.3
FF - prefs.js..extensions.enabledItems:
fastdial@telega.phpnet.us:2.23b1
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.2
FF - prefs.js..extensions.enabledItems: {07b2a769-ed19-4483-87ce-c643914c81bb}:3.0.0.75
FF - prefs.js..keyword.URL: "
http://search.icq.com/search/afe_result ... 2.0.0.2&q="
FF - prefs.js..network.proxy.type: 2
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "
http://search.live.com/results.aspx?FORM=IEFM1&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\
bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.10.08 22:50:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.07.26 12:35:07 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.11.24 08:08:30 | 000,000,000 | ---D | M]
[2009.03.05 20:23:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Mozilla\Extensions
[2010.12.02 14:22:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions
[2009.11.08 00:24:00 | 000,000,000 | ---D | M] (Vista-aero) -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}
[2010.02.03 22:50:28 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009.06.13 23:22:23 | 000,000,000 | ---D | M] (Aquatint Black Gloss) -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\{7694c49c-9fbd-11dc-8314-0800200c9a66}
[2010.05.27 20:53:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2009.03.24 17:59:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\{b8ccaffc-1f41-45bf-ad7a-1c730d9a4656}
[2010.03.03 17:35:47 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.04.22 16:51:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\
DTToolbar@toolbarnet.com
[2009.07.25 11:55:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\
fastdial@telega.phpnet.us
[2009.09.15 22:25:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\extensions\
fbchathistory@firechm.com
[2010.04.22 16:51:48 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\searchplugins\daemon-search.xml
[2010.03.07 22:07:50 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\searchplugins\icq-search.xml
[2010.04.22 21:42:35 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\searchplugins\icqplugin-1.xml
[2010.12.02 14:23:16 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\searchplugins\icqplugin-2.xml
[2010.04.07 21:04:50 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\searchplugins\icqplugin.xml
[2009.03.22 07:22:07 | 000,001,632 | ---- | M] () -- C:\Documents and Settings\Hong\Application Data\Mozilla\Firefox\Profiles\gb2ngkbk.default\searchplugins\live-search.xml
[2010.03.03 17:35:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010.01.31 22:39:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2007.04.16 18:07:12 | 000,180,293 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
[2010.07.12 17:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2009.08.23 15:39:16 | 000,001,583 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\atlas-sk.xml
[2009.08.23 15:39:16 | 000,001,380 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\azet-sk.xml
[2009.08.23 15:39:16 | 000,001,479 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\dunaj-sk.xml
[2009.08.23 15:39:16 | 000,001,473 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slovnik-sk.xml
[2009.08.23 15:39:16 | 000,001,104 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-sk.xml
[2009.08.23 15:39:16 | 000,000,830 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\zoznam-sk.xml
O1 HOSTS File: ([2010.11.23 15:58:10 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - No CLSID value found.
O3 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NVMixerTray] C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKU\S-1-5-21-789336058-839522115-1617979688-1003..\Run: [NVIDIA nTune] C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\hp psc 1000 series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe (Hewlett-Packard Co.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\..Trusted Domains: com.tw ([asia.msi] http in Trusted sites)
O15 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\..Trusted Domains: com.tw ([global.msi] http in Trusted sites)
O15 - HKU\S-1-5-21-789336058-839522115-1617979688-1003\..Trusted Domains: com.tw ([
www.msi] http in Trusted sites)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}
http://go.microsoft.com/fwlink/?linkid=39204 (Reg Error: Value error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe ()
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found
O24 - Desktop WallPaper: C:\Documents and Settings\Hong\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Hong\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.11.24 00:19:55 | 000,000,090 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.divxa32 - C:\WINDOWS\System32\divxa32.acm (Kristal StudioDFileDescription)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (
http://www.mp3dev.org/)
Drivers32: msacm.lhacm - C:\WINDOWS\System32\lhacm.acm (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.vorbis - C:\WINDOWS\System32\vorbis.acm (HMS
http://hp.vector.co.jp/authors/VA012897/)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:\WINDOWS\System32\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.HFYU - C:\WINDOWS\System32\huffyuv.dll (Disappearing Inc.)
Drivers32: vidc.i263 - C:\WINDOWS\System32\I263_32.drv (Intel Corporation)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.VP60 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP61 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP62 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP70 - C:\WINDOWS\System32\vp7vfw.dll (On2.com)
Drivers32: VIDC.X264 - C:\WINDOWS\System32\x264vfw.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (56308606093492224)
========== Files/Folders - Created Within 30 Days ==========
[2010.12.05 00:48:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Desktop\supernatural.s06e10
[2010.11.28 15:46:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Application Data\SUPERAntiSpyware.com
[2010.11.28 15:46:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2010.11.28 15:45:49 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010.11.28 01:24:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010.11.27 12:28:59 | 000,888,424 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco32.dll
[2010.11.27 12:28:59 | 000,813,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgenco32.dll
[2010.11.27 12:05:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2010.11.27 01:31:15 | 000,000,000 | ---D | C] -- C:\Program Files\Yamicsoft
[2010.11.26 23:50:39 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Hong\Recent
[2010.11.25 14:32:38 | 000,060,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCFDRTM.VER
[2010.11.25 14:19:50 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mouhid.sys
[2010.11.24 00:59:05 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.11.23 21:26:14 | 000,010,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidusb.sys
[2010.11.23 16:03:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010.11.21 18:50:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Application Data\Mumble
[2010.11.21 18:50:03 | 000,000,000 | ---D | C] -- C:\Program Files\Mumble
[2010.11.20 22:17:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\My Documents\The KMPlayer
[2010.11.20 22:17:16 | 000,000,000 | ---D | C] -- C:\Program Files\The KMPlayer
[2010.11.19 16:20:49 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Hong\My Documents\My Music
[2010.11.15 22:58:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Application Data\TS3Client
[2010.11.15 22:57:55 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2010.11.14 23:56:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Desktop\luňák
[2010.11.14 19:02:10 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.11.14 18:23:48 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.11.14 18:23:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Local Settings\Application Data\Sunbelt Software
[2010.11.14 18:22:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2010.11.14 18:16:50 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.11.13 19:36:38 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2010.11.13 19:36:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2010.11.12 14:42:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Desktop\Dramatikz - Morfium (2010)
[2010.11.10 10:42:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Hong\Desktop\live
[6 C:\WINDOWS\Fonts\*.tmp files -> C:\WINDOWS\Fonts\*.tmp -> ]
[2 C:\Documents and Settings\Hong\Desktop\*.tmp files -> C:\Documents and Settings\Hong\Desktop\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.12.05 12:37:06 | 000,000,374 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2010.12.05 12:36:50 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.12.05 01:07:00 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-839522115-1617979688-1003UA.job
[2010.12.04 19:36:55 | 000,444,524 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.12.04 19:36:55 | 000,072,590 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.12.04 14:07:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-839522115-1617979688-1003Core.job
[2010.12.04 13:18:10 | 000,000,549 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\World of Warcraft.lnk
[2010.12.03 20:42:28 | 000,000,522 | ---- | M] () -- C:\hpfr3420.xml
[2010.12.02 21:17:33 | 000,001,192 | ---- | M] () -- C:\Documents and Settings\Hong\Local Settings\Application Data\SRDownloader (1).nast
[2010.11.30 13:32:53 | 000,060,416 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCFDRTM.VER
[2010.11.29 22:55:52 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\Sumarizácia objednávok.x ls
[2010.11.28 15:45:59 | 000,001,678 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010.11.28 01:18:39 | 112,315,778 | ---- | M] () -- C:\Documents and Settings\Hong\My Documents\BackupRegistry(20101128).reg
[2010.11.28 00:54:33 | 004,682,144 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\ola ola le.mp3
[2010.11.27 12:34:40 | 000,240,608 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010.11.27 12:34:40 | 000,240,608 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010.11.27 12:34:40 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010.11.27 01:31:18 | 000,001,901 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\1-Click Cleaner.lnk
[2010.11.27 01:31:18 | 000,001,898 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\WinXP Manager.lnk
[2010.11.26 14:19:45 | 000,223,744 | ---- | M] () -- C:\Documents and Settings\Hong\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.26 13:28:38 | 007,890,529 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\14-Toyfriend -Featuring Wynter Gordon-.mp3
[2010.11.25 13:59:43 | 000,002,262 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.11.24 08:08:30 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010.11.23 22:24:59 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.11.23 15:58:10 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.11.23 09:41:30 | 000,026,624 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\Korekica patloš.doc
[2010.11.21 18:50:58 | 000,002,380 | ---- | M] () -- C:\Documents and Settings\Hong\My Documents\MumbleAutomaticCertificateBackup.p12
[2010.11.21 02:00:01 | 000,000,340 | ---- | M] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-FAJKOS-Hong.job
[2010.11.20 22:17:29 | 000,000,710 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\KMPlayer.lnk
[2010.11.15 22:57:59 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TeamSpeak 3 Client.lnk
[2010.11.14 23:24:25 | 000,000,340 | ---- | M] () -- C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1275498585.job
[2010.11.14 19:02:16 | 000,000,339 | RHS- | M] () -- C:\boot.ini
[2010.11.14 18:13:34 | 004,106,760 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.11.14 17:43:04 | 000,007,156 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010.11.14 17:13:58 | 000,000,293 | ---- | M] () -- C:\Boot.bak
[2010.11.14 13:10:32 | 000,000,123 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2010.11.09 10:16:58 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\Hong\Desktop\Sumarizácia objednávok.xls
[2010.11.08 15:00:16 | 000,000,549 | ---- | M] () -- C:\Documents and Settings\Hong\Application Data\Microsoft\Internet Explorer\Quick Launch\World of Warcraft.lnk
[2 C:\Documents and Settings\Hong\Desktop\*.tmp files -> C:\Documents and Settings\Hong\Desktop\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.12.02 20:46:18 | 000,001,192 | ---- | C] () -- C:\Documents and Settings\Hong\Local Settings\Application Data\SRDownloader (1).nast
[2010.11.29 22:57:41 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\Sumarizácia objednávok.x ls
[2010.11.29 18:24:56 | 000,026,624 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\Korekica patloš.doc
[2010.11.29 18:24:24 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\Sumarizácia objednávok.xls
[2010.11.28 15:45:59 | 000,001,678 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010.11.28 01:18:16 | 112,315,778 | ---- | C] () -- C:\Documents and Settings\Hong\My Documents\BackupRegistry(20101128).reg
[2010.11.28 00:54:58 | 004,682,144 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\ola ola le.mp3
[2010.11.27 12:28:59 | 000,003,739 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb
[2010.11.27 01:31:18 | 000,001,901 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\1-Click Cleaner.lnk
[2010.11.27 01:31:18 | 000,001,898 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\WinXP Manager.lnk
[2010.11.26 13:23:38 | 007,890,529 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\14-Toyfriend -Featuring Wynter Gordon-.mp3
[2010.11.21 18:50:58 | 000,002,380 | ---- | C] () -- C:\Documents and Settings\Hong\My Documents\MumbleAutomaticCertificateBackup.p12
[2010.11.20 22:17:29 | 000,000,710 | ---- | C] () -- C:\Documents and Settings\Hong\Desktop\KMPlayer.lnk
[2010.11.15 22:57:59 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TeamSpeak 3 Client.lnk
[2010.11.14 13:10:32 | 000,000,123 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2010.11.10 16:47:35 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010.11.08 15:00:16 | 000,000,549 | ---- | C] () -- C:\Documents and Settings\Hong\Application Data\Microsoft\Internet Explorer\Quick Launch\World of Warcraft.lnk
[2010.03.18 16:01:26 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.11.06 09:58:04 | 000,178,975 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2009.09.25 13:43:29 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2009.08.21 13:10:24 | 000,000,319 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.06.10 02:20:38 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009.05.29 02:24:08 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Hong\Local Settings\Application Data\fusioncache.dat
[2009.04.01 00:40:54 | 000,002,348 | ---- | C] () -- C:\WINDOWS\WINTRAN.INI
[2009.03.31 03:47:51 | 000,001,527 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009.03.22 06:31:31 | 000,001,151 | ---- | C] () -- C:\Documents and Settings\Hong\Application Data\MPQEditor.ini
[2009.03.04 04:45:29 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009.02.16 04:57:14 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009.02.10 01:36:17 | 000,001,193 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2009.02.03 06:54:02 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009.02.03 06:53:59 | 002,330,643 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2009.02.03 06:53:59 | 000,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.02.03 06:53:59 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.02.02 07:29:53 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009.02.02 07:00:18 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2009.02.02 06:21:02 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2009.02.02 06:10:34 | 000,000,732 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009.02.02 05:52:44 | 000,223,744 | ---- | C] () -- C:\Documents and Settings\Hong\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.02.01 21:35:23 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008.10.07 09:13:30 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008.02.01 08:18:14 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\FlashSys.sys
[2007.08.15 15:27:18 | 000,009,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\n558.sys
[2007.03.12 12:01:30 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll
[2003.04.07 19:38:32 | 000,005,746 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2003.03.10 06:31:04 | 000,561,152 | R--- | C] () -- C:\WINDOWS\System32\hpotscl.dll
[2001.10.29 01:42:30 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
========== LOP Check ==========
[2009.05.18 02:16:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Opera
[2010.07.25 17:02:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BioWare
[2010.08.28 13:05:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Codemasters
[2010.04.22 16:51:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2009.12.19 16:46:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009.02.04 05:44:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ICQ
[2009.10.08 22:53:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2009.09.07 22:12:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LANGMaster
[2009.10.08 22:54:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia
[2009.10.08 22:51:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2009.12.10 20:32:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle
[2009.12.13 15:04:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle VideoSpin
[2010.09.11 16:52:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2010.05.15 15:39:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2010.04.13 15:13:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sony
[2010.07.11 12:02:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009.12.10 20:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VideoSpin
[2009.08.23 15:35:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010.07.30 14:45:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\BSplayer
[2010.08.09 16:23:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\BSplayer Pro
[2009.08.21 14:04:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\CoreFTP
[2009.02.16 04:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\DAEMON Tools
[2009.09.25 13:31:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\DAEMON Tools Lite
[2009.02.16 04:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\DAEMON Tools Pro
[2010.02.28 23:58:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Facebook
[2009.08.24 09:49:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\FileZilla
[2010.06.26 17:36:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\GetRightToGo
[2010.12.05 12:37:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\ICQ
[2009.05.16 22:58:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\IObit
[2009.09.07 22:12:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\LANGMaster
[2009.12.29 11:26:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\MobMapUpdater
[2010.11.21 19:11:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Mumble
[2010.10.06 22:50:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\My Battle for Middle-earth Files
[2009.10.08 23:07:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Nokia
[2009.04.10 04:35:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\OpenOffice.org
[2009.02.02 05:57:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Opera
[2009.10.08 22:51:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\PC Suite
[2010.09.05 15:34:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\PhotoScape
[2010.04.13 15:34:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Publish Providers
[2009.11.08 00:11:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\QIP
[2010.04.13 15:34:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Sony
[2010.05.15 15:57:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010.04.11 19:39:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Styler
[2010.10.26 15:59:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\SystemRequirementsLab
[2010.11.15 22:58:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\TS3Client
[2009.05.29 02:27:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Turbine
[2009.04.17 02:26:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\Unigraphics Solutions
[2010.11.26 01:28:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\uTorrent
[2009.06.13 23:36:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\ViSplore
[2009.06.13 23:36:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Hong\Application Data\ViStart
[2010.11.14 23:24:25 | 000,000,340 | ---- | M] () -- C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1275498585.job
========== Purity Check ==========