OTL logfile created on: 2010-10-06 16:33:02 - Run 7
OTL by OldTimer - Version 3.1.37.3     Folder = C:\Documents and Settings\J\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
1 023,00 Mb Total Physical Memory | 306,00 Mb Available Physical Memory | 30,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 60,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 3,27 Gb Free Space | 16,74% Space Free | Partition Type: NTFS
Drive D: | 58,59 Gb Total Space | 49,79 Gb Free Space | 84,98% Space Free | Partition Type: NTFS
Drive E: | 70,91 Gb Total Space | 48,68 Gb Free Space | 68,65% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
Drive G: | 74,52 Gb Total Space | 70,09 Gb Free Space | 94,05% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: JMM
Current User Name: J
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-09-16 22:47:34 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-08-25 11:27:44 | 000,309,824 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010-03-22 23:54:30 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\J\Desktop\OTL.exe
PRC - [2010-03-18 11:19:26 | 000,207,360 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2009-12-28 11:24:40 | 002,940,664 | ---- | M] (www.BitComet.com) -- C:\Program Files\BitComet\BitComet.exe
PRC - [2009-03-15 12:15:16 | 000,180,224 | ---- | M] (PowerISO Computing, Inc.) -- C:\Program Files\PowerISO\PWRISOVM.EXE
PRC - [2009-01-12 08:15:52 | 000,071,096 | ---- | M] () -- C:\Program Files\BurnAware Free\NMSAccess32.exe
PRC - [2008-04-14 02:12:33 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\savedump.exe
PRC - [2008-04-14 02:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-12-07 16:29:58 | 000,753,664 | ---- | M] (GIGABYTE TECHNOLOGY CO., LTD.) -- C:\Program Files\GIGABYTE\Common\GNConfig.exe
PRC - [2007-11-16 15:43:16 | 000,040,960 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) -- C:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe
PRC - [2004-12-22 11:09:44 | 000,077,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
PRC - [2004-08-04 14:00:00 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\tcpsvcs.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-03-22 23:54:30 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\J\Desktop\OTL.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2010-07-29 19:38:26 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2010-07-15 20:12:06 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2010-01-17 16:17:19 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009-01-12 08:15:52 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\BurnAware Free\NMSAccess32.exe -- (NMSAccess)
SRV - [2008-04-14 02:12:02 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\p2pgasvc.dll -- (p2pgasvc)
SRV - [2005-11-14 02:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004-08-04 14:00:00 | 000,019,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\tcpsvcs.exe -- (SimpTcp)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-09-21 03:03:15 | 000,229,208 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VMM.sys -- (vmm)
DRV - [2010-09-20 17:07:34 | 000,092,800 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata)
DRV - [2010-07-15 20:12:12 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010-07-15 20:10:53 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010-06-02 20:30:28 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010-02-12 12:37:27 | 000,004,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2010-02-11 14:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2010-01-17 18:05:41 | 000,075,184 | ---- | M] (KRFTech) [Kernel | Auto | Running] -- C:\WINDOWS\system32\WINDRVR.SYS -- (WinDriver)
DRV - [2009-12-17 16:02:34 | 000,099,152 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2009-11-25 05:50:16 | 004,463,104 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009-03-15 12:25:46 | 000,056,268 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2008-09-24 11:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2008-04-13 19:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008-04-13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007-07-28 16:10:18 | 000,483,968 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61)
DRV - [2007-07-20 19:40:10 | 000,084,992 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2007-01-29 06:20:34 | 000,059,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMNetSrv.sys -- (VPCNetS2)
DRV - [2005-04-05 21:22:30 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2005-04-05 21:22:28 | 000,033,536 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2005-03-14 15:01:38 | 000,041,984 | ---- | M] (DeviceGuys, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\DGIVECP.SYS -- (DgiVecp)
DRV - [2005-03-09 16:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005-02-23 15:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2004-10-08 21:04:10 | 000,458,820 | R--- | M] (Hauppauge Computer Works) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HCWBT8XX.sys -- (HCWBT8xx)
DRV - [2004-08-03 22:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1390067357-1592454029-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flvdirect.iamwired.net/
IE - HKU\S-1-5-21-1390067357-1592454029-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1390067357-1592454029-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/firefox"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.855
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.17
FF - prefs.js..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:3.3.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010-09-24 13:53:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-09-16 22:47:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-09-21 03:11:28 | 000,000,000 | ---D | M]
 
[2010-01-17 12:42:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Mozilla\Extensions
[2010-10-05 22:20:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Mozilla\Firefox\Profiles\bsifd4l2.default\extensions
[2010-07-05 19:28:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\J\Application Data\Mozilla\Firefox\Profiles\bsifd4l2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-09-24 19:26:07 | 000,000,000 | ---D | M] (ImTranslator) -- C:\Documents and Settings\J\Application Data\Mozilla\Firefox\Profiles\bsifd4l2.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}
[2010-01-17 16:06:24 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\J\Application Data\Mozilla\Firefox\Profiles\bsifd4l2.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2010-10-06 16:06:59 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-05-09 11:48:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-05-09 11:48:44 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-01-17 15:54:20 | 000,072,960 | ---- | M] (Foxit Software Company) -- C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
[2009-12-22 05:48:34 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-12-22 05:48:34 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-12-22 05:48:34 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-12-22 05:48:34 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-12-22 05:48:34 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-12-22 05:48:34 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010-03-23 00:46:39 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-1390067357-1592454029-682003330-1003..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-1390067357-1592454029-682003330-1003..\Run: [BitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Gigabyte Wireless Utility.lnk = C:\Program Files\GIGABYTE\Common\GNConfig.exe (GIGABYTE TECHNOLOGY CO., LTD.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\PHOTOfunSTUDIO -viewer-.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe (Matsushita Electric Industrial Co., Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1390067357-1592454029-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop WallPaper: C:\Documents and Settings\J\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\J\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-01-17 00:27:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-10-06 16:30:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010-10-06 16:30:20 | 000,000,000 | ---D | C] -- C:\Avenger
[2010-10-05 23:16:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\J\Application Data\TOMI2.THE GATES OF FATE
[2010-10-02 21:30:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\J\Saved Games
[2010-09-30 19:50:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Funny Bear Studio
[2010-09-28 20:20:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\J\Application Data\KingArthur
[2010-09-24 21:27:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\J\Application Data\Freeze Tag
[2010-09-24 21:25:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\Victorian Mysteries - Woman in White
[2010-09-21 03:03:15 | 000,229,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\VMM.sys
[2010-09-20 20:04:25 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010-09-20 20:00:48 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2010-09-20 16:04:27 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline
[2010-09-17 22:01:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\J\Application Data\Ghost Ship Studios
[2010-09-13 19:48:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\J\Application Data\Ten Heavens
[2010-09-13 19:46:23 | 000,000,000 | ---D | C] -- D:\My Documents\New Folder
[2010-09-07 22:58:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\J\Application Data\quickclick
[2010-01-17 18:13:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010-01-17 13:36:37 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010-01-17 13:36:37 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010-01-17 13:36:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-10-06 16:31:42 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-10-06 16:30:47 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-10-06 16:30:42 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-10-06 16:28:29 | 005,505,024 | -H-- | M] () -- C:\Documents and Settings\J\NTUSER.DAT
[2010-10-06 16:28:29 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\J\ntuser.ini
[2010-10-06 16:26:03 | 000,000,414 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{206E2480-CCEB-4D83-BD39-C3BEE1B05E71}.job
[2010-10-06 16:05:45 | 000,508,956 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-10-06 16:05:45 | 000,433,166 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-10-06 16:05:45 | 000,068,122 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-10-05 23:10:27 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\J\Local Settings\Application Data\prvlcl.dat
[2010-10-05 17:07:01 | 065,638,003 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010-09-21 03:45:57 | 000,070,024 | ---- | M] () -- C:\Documents and Settings\J\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010-09-21 03:45:13 | 001,557,216 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-09-21 03:28:04 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010-09-21 03:03:15 | 000,229,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\VMM.sys
[2010-09-20 17:07:34 | 000,092,800 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvata.sys
[2010-09-20 02:27:44 | 006,918,700 | -H-- | M] () -- C:\Documents and Settings\J\Local Settings\Application Data\IconCache.db
[2010-09-19 22:59:04 | 000,012,800 | ---- | M] () -- C:\Documents and Settings\J\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-09-17 22:01:32 | 000,004,096 | ---- | M] () -- C:\WINDOWS\d3dx.dat
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-09-21 03:00:38 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010-09-17 22:01:32 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2010-07-18 20:42:02 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-07-18 20:42:02 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-06-26 17:56:07 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\J\Local Settings\Application Data\PUTTY.RND
[2010-05-07 18:07:05 | 000,002,435 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2010-04-14 22:39:51 | 000,000,204 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2010-04-11 13:51:57 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\J\Local Settings\Application Data\prvlcl.dat
[2010-03-18 21:45:16 | 000,000,412 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010-03-05 19:35:56 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2010-02-12 12:38:06 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2010-02-12 12:26:30 | 000,004,096 | ---- | C] () -- C:\WINDOWS\gdrv.sys
[2010-02-05 14:11:35 | 000,012,800 | ---- | C] () -- C:\Documents and Settings\J\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-01-20 18:24:20 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\dmcrypto.dll
[2010-01-20 17:55:29 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2010-01-17 20:13:07 | 000,000,242 | ---- | C] () -- C:\Documents and Settings\J\Application Data\burnaware.ini
[2010-01-17 19:26:19 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\09384CEAE0.sys
[2010-01-17 19:26:18 | 000,002,516 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2010-01-17 18:00:46 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-01-17 18:00:46 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2010-01-17 15:16:00 | 000,006,583 | ---- | C] () -- C:\WINDOWS\HCWPNP.INI
[2010-01-17 15:02:16 | 000,039,752 | ---- | C] () -- C:\Documents and Settings\J\Local Settings\Application Data\FASTWiz.log
[2010-01-17 14:41:22 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\HCWxds.dll
[2010-01-17 14:17:17 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-08-16 22:30:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
[2010-10-05 23:16:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
[2010-08-24 19:51:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2010-02-02 20:06:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BanzaiInteractive
[2010-08-03 21:55:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Bicyclestudios
[2010-01-18 22:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EscapeTheMuseum2
[2010-02-06 18:46:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Findbasic
[2010-09-30 19:50:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Funny Bear Studio
[2010-08-25 20:10:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Gogii
[2010-01-28 13:44:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\InterAction studios
[2010-06-25 23:09:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Merscom
[2010-08-12 21:39:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2010-07-10 21:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PlayFirst
[2010-06-06 11:43:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SulusGames
[2010-08-16 20:56:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010-07-04 20:01:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\A Gypsy's Tale - The Tower of Secrets
[2010-07-03 16:15:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\AMozilla
[2010-02-02 20:06:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\BanzaiInteractive
[2010-08-03 21:55:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Bicyclestudios
[2010-09-01 20:36:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Big Fish Games
[2010-02-15 21:49:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Boomzap
[2010-04-08 19:52:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\DarkParablesBriarRose_BFG
[2010-01-26 23:14:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Dragon Altar Games
[2010-09-02 23:25:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Enki Games
[2010-08-12 20:49:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Enlightenus2_BFG
[2010-03-01 20:29:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\ERS G-Studio
[2010-10-04 22:28:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\foobar2000
[2010-01-17 15:54:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Foxit
[2010-09-24 21:27:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Freeze Tag
[2010-01-25 16:44:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Gadu-Gadu
[2010-02-05 23:59:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Gestalt Games
[2010-09-17 22:01:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Ghost Ship Studios
[2010-09-28 20:20:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\KingArthur
[2010-07-13 20:29:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\KranX Productions
[2010-05-26 20:29:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\MagicIndie
[2010-07-03 16:18:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Mariaglorum
[2010-06-25 23:09:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Merscom
[2010-01-18 22:39:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\MysteryStudio
[2010-04-01 22:06:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Nevosoft
[2010-02-14 15:49:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\OpenCandy
[2010-08-19 21:10:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Orneon
[2010-03-05 19:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Panasonic
[2010-07-10 21:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\PlayFirst
[2010-09-07 22:58:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\quickclick
[2010-06-07 19:34:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\SevenSails
[2010-08-16 21:23:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\ShaoLin
[2010-09-03 18:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Specialbit
[2010-06-06 11:43:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\SulusGames
[2010-09-13 19:48:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Ten Heavens
[2010-04-26 21:30:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Thinstall
[2010-07-31 12:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\TikisLab
[2010-10-05 23:16:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\TOMI2.THE GATES OF FATE
[2010-07-29 23:59:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Vast Studios
[2010-05-10 21:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\VendelGAMES
[2010-07-29 20:41:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\J\Application Data\Vogat Interactive
[2010-10-06 16:26:03 | 000,000,414 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{206E2480-CCEB-4D83-BD39-C3BEE1B05E71}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 139 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FB65A4AA
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57B2B96C
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3595B780
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:EEB25EAE
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:55E3C0E0
< End of report >