Gmer program keeps crashing and restarting pc.
No gmer log created.

Download OTL to your Desktop.

* Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
* Under the Custom Scan box paste this in:


netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT


* Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

• When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them back here.

Here's my OTL log:

OTL logfile created on: 2/6/2010 6:28:17 PM - Run 2
OTL by OldTimer - Version 3.1.28.0 Folder = C:\Documents and Settings\JB\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 75.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 279.45 Gb Total Space | 233.83 Gb Free Space | 83.67% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ME-325432177D197
Current User Name: ME
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/02/06 18:26:20 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JB\Desktop\OTL.exe
PRC - [2009/12/11 09:20:24 | 002,043,160 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe
PRC - [2009/11/02 12:51:50 | 000,238,952 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2009/09/17 07:24:59 | 000,486,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe
PRC - [2009/09/17 07:24:55 | 000,595,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe
PRC - [2009/09/17 07:24:52 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe
PRC - [2009/09/17 07:24:51 | 000,832,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgam.exe
PRC - [2009/08/16 06:47:04 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009/08/15 21:03:55 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
PRC - [2009/07/09 11:22:18 | 000,144,712 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009/03/30 15:28:36 | 001,533,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
PRC - [2009/03/30 15:28:36 | 000,183,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
PRC - [2008/12/12 10:17:38 | 000,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010/02/06 18:26:20 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JB\Desktop\OTL.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (Nero BackItUp Scheduler 4.0)
SRV - [2009/11/02 12:51:50 | 000,238,952 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2009/10/28 2014 | 000,545,568 | ---- | M] (Apple Inc.) [On_Demand | Stopped] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2009/09/17 07:24:52 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd)
SRV - [2009/08/16 06:47:04 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009/08/15 21:03:53 | 000,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2009/07/09 11:22:18 | 000,144,712 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009/03/30 15:28:36 | 001,533,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2008/12/12 10:17:38 | 000,238,888 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2008/11/04 00:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008/10/25 10:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2008/10/16 19:12:28 | 000,217,088 | ---- | M] (Hewlett-Packard Co.) [On_Demand | Running] -- C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08)
SRV - [2008/07/18 12:13:20 | 000,053,760 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.dll -- (Pml Driver HPZ12)
SRV - [2008/07/18 12:13:20 | 000,044,032 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\WINDOWS\system32\HPZinw12.dll -- (Net Driver HPZ12)
SRV - [2008/04/07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008/03/25 20:27:36 | 000,135,168 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc)
SRV - [2008/03/25 20:25:50 | 000,630,784 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL -- (HPSLPSVC)
SRV - [2006/11/10 18:18:02 | 000,774,144 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService)
SRV - [2006/10/26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Google Search
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google Search

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google Search
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyServer" = http=127.0.0.1:5555

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429
FF - prefs.js..extensions.enabledItems: {F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}:8.6.7.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.2
FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2b}:1.1.12
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.0.0.20090707024252

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5 b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009/12/22 08:23:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/09 18:07:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/09 18:08:03 | 000,000,000 | ---D | M]

[2009/08/19 05:03:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Mozilla\Extensions
[2010/02/06 09:16:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Mozilla\Firefox\Profiles\5a9jkwa4.default\ext ensions
[2009/11/27 13:07:24 | 000,000,000 | ---D | M] (WindowsUpdate) -- C:\Documents and Settings\JB\Application Data\Mozilla\Firefox\Profiles\5a9jkwa4.default\ext ensions\{35106bca-6c78-48c7-ac28-56df30b51d2b}
[2009/08/19 05:47:47 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\JB\Application Data\Mozilla\Firefox\Profiles\5a9jkwa4.default\ext ensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/10/13 20:23:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\JB\Application Data\Mozilla\Firefox\Profiles\5a9jkwa4.default\ext ensions\{dc572301-7619-498c-a57d-39143191b318}
[2009/08/19 05:02:43 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2009/08/16 0526 | 000,000,781 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\s wg.dll (Google Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm ()
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm ()
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6 097707281E79.dll (Google Inc.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsof...?1254516787000 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.74.166 68.87.68.166
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/08/15 20:24:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2009/08/15 16:04:24 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\system32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16891891626803200)

========== Files/Folders - Created Within 14 Days ==========

[2010/02/06 18:26:24 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\JB\Desktop\OTL.exe
[2010/02/06 16:32:36 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/02/06 16:32:36 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/02/06 16:32:36 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/02/06 16:32:36 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/02/06 16:32:31 | 000,000,000 | --SD | C] -- C:\8cdft5ek78
[2010/02/06 16:31:25 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/02/06 15:09:15 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/02/06 15:09:14 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/02/06 08:48:25 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/02/06 08:47:59 | 005,115,824 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\JB\Desktop\mbam-setup.exe
[2010/02/06 06:34:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2010/02/05 11:47:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JB\Desktop\ITT Technical
[2010/01/30 07:38:02 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/01/30 07:37:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/01/29 06:55:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010/01/29 01:39:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JB\Application Data\AVG8
[2010/01/28 12:00:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JB\Application Data\Malwarebytes
[2010/01/28 12:00:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/01/28 08:48:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2010/01/28 08:48:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JB\Application Data\SUPERAntiSpyware.com
[2010/01/28 08:48:07 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/01/27 09:38:16 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/01/27 07:55:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JB\Local Settings\Application Data\uvejrv
[2010/01/25 09:11:34 | 000,000,000 | ---D | C] -- C:\Program Files\VeryPDF PDF2Word v3.0
[2010/01/20 05:31:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/01/09 18:07:56 | 000,043,056 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rpshellsearch.dll
[2009/10/02 16:52:29 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/10/02 16:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2009/09/16 11:20:41 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2009/08/27 16:09:29 | 000,712,704 | ---- | C] ( ) -- C:\Program Files\dtdr3260.dll
[2009/08/27 16:09:29 | 000,651,264 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rjbres.dll
[2009/08/27 16:09:29 | 000,352,256 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rjdlg.dll
[2009/08/27 16:09:29 | 000,139,264 | ---- | C] (Inner Media, Inc.) -- C:\Program Files\DUNZIP32.dll
[2009/08/27 16:09:29 | 000,019,456 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rjprog.dll
[2009/08/27 16:09:29 | 000,014,336 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\wmdmhelper.dll
[2009/08/27 16:09:28 | 000,081,920 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\tsasdk.dll
[2009/08/27 16:09:28 | 000,057,344 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\tpasdk.dll
[2009/08/27 16:09:28 | 000,041,472 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\mmcdda32.dll
[2009/08/27 16:09:28 | 000,036,352 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\ierjplug.dll
[2009/08/27 16:09:28 | 000,019,456 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\tnetdtct.dll
[2009/08/27 16:09:28 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\fixrjb.exe
[2009/08/27 16:09:25 | 000,198,208 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\RecordingManager.exe
[2009/08/27 16:09:25 | 000,032,768 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rpwa3260.dll
[2009/08/27 16:09:24 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dbghelp.dll
[2009/08/27 16:09:24 | 000,329,312 | ---- | C] (RealPlayer) -- C:\Program Files\rpbrowserrecordplugin.dll
[2009/08/27 16:09:24 | 000,065,536 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rjwmapln.dll
[2009/08/27 16:09:23 | 000,053,248 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rpau3260.dll
[2009/08/27 16:09:14 | 000,112,168 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rdsf3260.dll
[2009/08/27 16:09:14 | 000,086,016 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rpplugprot.dll
[2009/08/27 16:09:14 | 000,063,016 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rpshell.dll
[2009/08/27 16:09:10 | 000,014,888 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\rphelperapp.exe
[2009/08/27 16:09:10 | 000,007,168 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\realjbox.exe
[2009/08/27 16:08:52 | 000,222,728 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\realplay.exe
[2009/08/27 14:58:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2009/08/25 08:25:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2009/08/21 08:28:16 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Application Data\pcouffin.sys
[2009/08/21 07:35:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET

========== Files - Modified Within 14 Days ==========

[2010/02/06 18:26:20 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\JB\Desktop\OTL.exe
[2010/02/06 16:38:13 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/02/06 16:38:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/02/06 16:32:06 | 003,849,526 | R--- | M] () -- C:\Documents and Settings\Desktop\8cdft5ek78.exe
[2010/02/06 16:23:47 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Desktop\o9judqzx.exe
[2010/02/06 16:01:27 | 004,718,592 | ---- | M] () -- C:\Documents and Settings\ntuser.dat
[2010/02/06 16:01:27 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\ntuser.ini
[2010/02/06 15:09:18 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/02/06 14:35:46 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{6558677A-3C83-4DEA-A000-50F0ADB72A4B}.job
[2010/02/06 08:47:58 | 005,115,824 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\JB\Desktop\mbam-setup.exe
[2010/02/06 08:42:17 | 004,321,270 | -H-- | M] () -- C:\Documents and Settings\JB\Local Settings\Application Data\IconCache.db
[2010/02/06 08:36:06 | 055,171,614 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/02/06 06:34:49 | 000,000,780 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/02/06 06:23:41 | 000,087,608 | ---- | M] () -- C:\Documents and Settings\JB\Application Data\inst.exe
[2010/02/06 06:23:41 | 000,047,360 | ---- | M] (VSO Software) -- C:\Documents and Settings\JB\Application Data\pcouffin.sys
[2010/02/06 06:23:41 | 000,007,887 | ---- | M] () -- C:\Documents and Settings\JB\Application Data\pcouffin.cat
[2010/02/06 06:23:41 | 000,001,144 | ---- | M] () -- C:\Documents and Settings\JB\Application Data\pcouffin.inf
[2010/02/05 08:44:53 | 000,000,668 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/02/05 08:44:53 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010/02/05 08:44:53 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/02/05 05:55:21 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/02/02 09:25:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/01/28 18:57:25 | 000,005,208 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2010/01/27 09:32:39 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2010/01/25 10:06:41 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\FOXIT_PDF
[2010/01/25 09:13:25 | 000,000,199 | ---- | M] () -- C:\WINDOWS\pdf2word.INI

========== Files Created - No Company Name ==========

[2010/02/06 16:32:36 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/02/06 16:32:36 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/02/06 16:32:36 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/02/06 16:32:36 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/02/06 16:32:36 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/02/06 16:30:42 | 003,849,526 | R--- | C] () -- C:\Documents and Settings\JB\Desktop\8cdft5ek78.exe
[2010/02/06 16:23:48 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\JB\Desktop\o9judqzx.exe
[2010/02/06 16:00:34 | 000,060,416 | ---- | C] () -- C:\WINDOWS\System32\antiwpa.dll
[2010/02/06 15:09:18 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/02/06 06:34:49 | 000,000,780 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/01/30 07:38:11 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010/01/30 07:38:05 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/01/29 00:41:24 | 000,323,072 | ---- | C] () -- C:\WINDOWS\System32\wgatray.exe.bak
[2010/01/29 00:41:24 | 000,323,072 | ---- | C] () -- C:\WINDOWS\System32\WgaTray.exe
[2010/01/29 00:41:24 | 000,190,976 | ---- | C] () -- C:\WINDOWS\System32\wgalogon.dll.bak
[2010/01/29 00:41:24 | 000,190,976 | ---- | C] () -- C:\WINDOWS\System32\WgaLogon.dll
[2010/01/28 18:57:23 | 000,005,208 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2010/01/28 08:55:45 | 1258,663,388 | ---- | C] () -- C:\Documents and Settings\JB\My Documents\CmOm.cso
[2010/01/25 09:32:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\FOXIT_PDF
[2010/01/25 09:13:25 | 000,000,199 | ---- | C] () -- C:\WINDOWS\pdf2word.INI
[2010/01/25 08:54:23 | 000,051,046 | ---- | C] () -- C:\Documents and Settings\JB\Desktop\Stonegate_Risk_Questionnaire.p df
[2009/12/01 07:34:11 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2009/12/01 07:34:11 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2009/12/01 07:34:00 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\JB\Application Data\$_hpcst$.hpc
[2009/09/21 09:58:06 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
[2009/09/21 0910 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\All Users\Application Data\Pedal Hard
[2009/09/21 0910 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\JB\Application Data\Overdrive
[2009/09/21 0910 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT
[2009/09/21 0910 | 000,000,012 | RH-- | C] () -- C:\Documents and Settings\All Users\Application Data\Phaser
[2009/09/09 18:06:45 | 000,000,158 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini
[2009/09/03 17:42:38 | 000,000,806 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini
[2009/08/27 16:09:28 | 000,002,851 | ---- | C] () -- C:\Program Files\cdroms.cfg
[2009/08/27 16:09:25 | 000,119,808 | ---- | C] () -- C:\Program Files\waiting.avi
[2009/08/27 16:09:25 | 000,057,762 | ---- | C] () -- C:\Program Files\howto.chm
[2009/08/27 16:09:25 | 000,040,154 | ---- | C] () -- C:\Program Files\realplay.chm
[2009/08/27 16:09:25 | 000,027,278 | ---- | C] () -- C:\Program Files\frw.bmp
[2009/08/27 16:09:25 | 000,016,296 | ---- | C] () -- C:\Program Files\realtfon.fon
[2009/08/27 16:09:25 | 000,001,209 | ---- | C] () -- C:\Program Files\flvplay.swf
[2009/08/27 16:09:25 | 000,000,685 | ---- | C] () -- C:\Program Files\RecordingManager.exe.manifest
[2009/08/27 16:09:23 | 000,046,250 | ---- | C] () -- C:\Program Files\RealNetworks License.html
[2009/08/27 16:09:23 | 000,046,250 | ---- | C] () -- C:\Program Files\playrlic.html
[2009/08/27 16:09:23 | 000,043,841 | ---- | C] () -- C:\Program Files\RealNetworks License.txt
[2009/08/27 16:09:23 | 000,043,841 | ---- | C] () -- C:\Program Files\playrlic.txt
[2009/08/27 16:09:20 | 000,053,098 | ---- | C] () -- C:\Program Files\presets.rnx
[2009/08/27 16:09:19 | 000,000,480 | ---- | C] () -- C:\Program Files\keys.dat
[2009/08/27 16:09:18 | 000,803,526 | ---- | C] () -- C:\Program Files\normal.vs
[2009/08/27 16:09:18 | 000,061,495 | ---- | C] () -- C:\Program Files\ssimages.vs
[2009/08/27 16:09:15 | 000,102,400 | ---- | C] () -- C:\Program Files\HXAudioDeviceHook.dll
[2009/08/27 16:09:12 | 000,001,030 | ---- | C] () -- C:\Program Files\autoplaylist.dat
[2009/08/27 16:09:11 | 000,000,050 | ---- | C] () -- C:\Program Files\strs23.dat
[2009/08/27 16:09:11 | 000,000,013 | ---- | C] () -- C:\Program Files\strs26.dat
[2009/08/27 16:08:52 | 000,001,166 | ---- | C] () -- C:\Program Files\realplay.exe.manifest
[2009/08/27 16:08:52 | 000,000,716 | ---- | C] () -- C:\Program Files\CinemasterVideo.4.3.manifest
[2009/08/27 16:08:52 | 000,000,572 | ---- | C] () -- C:\Program Files\CinemasterAudio.4.3.manifest
[2009/08/27 16:08:51 | 000,023,558 | ---- | C] () -- C:\Program Files\freeoffers.ico
[2009/08/27 16:08:51 | 000,017,846 | ---- | C] () -- C:\Program Files\videotest.rm
[2009/08/27 16:08:51 | 000,000,207 | ---- | C] () -- C:\Program Files\subscription.rnx
[2009/08/24 04:11:03 | 002,706,432 | R--- | C] () -- C:\WINDOWS\System32\s3gcil_inv.dll
[2009/08/24 03:37:57 | 000,000,266 | ---- | C] () -- C:\Documents and Settings\JB\Application Data\default.rss
[2009/08/24 03:31:41 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009/08/21 22:28:46 | 000,114,856 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2009/08/21 08:28:47 | 000,001,041 | ---- | C] () -- C:\Documents and Settings\JB\Application Data\vso_ts_preview.xml
[2009/08/21 08:28:28 | 000,000,033 | ---- | C] () -- C:\Documents and Settings\JB\Application Data\pcouffin.log
[2009/08/21 08:28:16 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\JB\Application Data\inst.exe
[2009/08/21 08:28:16 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\JB\Application Data\pcouffin.cat
[2009/08/21 08:28:16 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\JB\Application Data\pcouffin.inf
[2009/08/21 08:12:28 | 000,000,039 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2009/08/21 06:50:31 | 000,011,776 | ---- | C] () -- C:\Documents and Settings\JB\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/16 07:07:04 | 000,033,359 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2009/08/16 07:04:16 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/08/16 06:55:05 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009/08/16 06:55:05 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009/08/16 06:54:59 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/08/16 06:54:59 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009/08/16 06:54:58 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009/08/16 06:54:52 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009/08/16 06:54:52 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2008/05/04 17:39:34 | 000,002,560 | ---- | C] () -- C:\WINDOWS\System32\ViaClassCoInstaller.dll
[2007/10/25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2007/09/27 09:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 09:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 09:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2001/07/07 02:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini

========== LOP Check ==========

[2009/09/16 10:23:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BitDefender
[2009/09/21 09:58:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EnterNHelp
[2009/08/16 03:57:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2009/09/21 09:57:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nikon
[2009/12/01 07:36:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2009/10/08 07:31:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpeedBit
[2009/10/08 07:34:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/09/21 09:58:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ultima_T15
[2009/08/21 08:49:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\vsosdk
[2009/09/15 08:34:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/08/19 05:09:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/09/16 08:06:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\BitDefender
[2010/02/05 12:20:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\BitTorrent
[2009/10/07 17:07:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\FairStars Audio Converter
[2009/09/17 07:39:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Image Zone Express
[2009/09/21 09:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Nikon
[2010/01/16 15:03:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Passware
[2009/12/01 07:36:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\PC Suite
[2009/09/17 07:38:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Printer Info Cache
[2009/12/01 07:33:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Samsung
[2010/02/06 06:23:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Vso
[2009/08/16 06:12:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Windows Desktop Search
[2009/12/22 07:28:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JB\Application Data\Windows Search
[2010/02/06 14:35:46 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{6558677A-3C83-4DEA-A000-50F0ADB72A4B}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >


< MD5 for: AGP440.SYS >
[2006/02/28 07:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2009/08/16 05:28:10 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2009/08/16 05:28:10 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sy s
[2008/04/13 13:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 13:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2006/02/28 07:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2009/08/16 05:28:10 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2009/08/16 05:28:10 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0019\DriverFi les\i386\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0020\DriverFi les\i386\atapi.sys
[2006/02/28 07:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: EVENTLOG.DLL >
[2008/04/13 19:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 19:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
[2006/02/28 07:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: NETLOGON.DLL >
[2008/04/13 19:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 19:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
[2006/02/28 07:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll

< MD5 for: SCECLI.DLL >
[2006/02/28 07:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008/04/13 19:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 19:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5BB923A2
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A9662AE0
< End of report >