OTL.txt
OTL logfile created on: 1/2/2012 11:25:19 AM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Kyle\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.37 Gb Total Physical Memory | 2.42 Gb Available Physical Memory | 71.62% Memory free
6.92 Gb Paging File | 6.09 Gb Available in Paging File | 88.10% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.31 Gb Total Space | 236.19 Gb Free Space | 81.64% Space Free | Partition Type: NTFS
Drive D: | 8.78 Gb Total Space | 1.00 Gb Free Space | 11.43% Space Free | Partition Type: NTFS
Computer Name: KYLE-PC | User Name: Kyle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/01/02 11:17:37 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
PRC - [2011/12/28 23:47:26 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2011/12/24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011/04/16 19:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton 360\Engine\5.1.0.29\ccSvcHst.exe
PRC - [2007/03/02 16:55:02 | 001,441,792 | ---- | M] () -- C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
PRC - [2007/03/01 10:38:48 | 004,390,912 | ---- | M] (Realtek Semiconductor) -- C:\WINDOWS\RtHDVCpl.exe
PRC - [2007/02/15 05:59:00 | 000,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
PRC - [2006/09/28 08:42:24 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe
========== Modules (No Company Name) ==========
MOD - [2007/03/02 16:55:02 | 001,441,792 | ---- | M] () -- C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
========== Win32 Services (SafeList) ==========
SRV - [2011/12/29 00:12:58 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/12/24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011/04/16 19:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files\Norton 360\Engine\5.1.0.29\ccSvcHst.exe -- (N360)
========== Driver Services (SafeList) ==========
DRV - [2011/12/29 18:56:18 | 000,126,584 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2011/12/29 01:00:00 | 001,576,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120101.006\NAVEX15.SYS -- (NAVEX15)
DRV - [2011/12/29 01:00:00 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2011/12/29 01:00:00 | 000,106,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2011/12/29 01:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120101.006\NAVENG.SYS -- (NAVENG)
DRV - [2011/12/28 18:35:30 | 000,368,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20111228.001\IDSvix86.sys -- (IDSVix86)
DRV - [2011/12/21 22:50:32 | 000,819,320 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20111221.003\BHDrvx86.sys -- (BHDrvx86)
DRV - [2011/12/10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011/03/30 22:00:09 | 000,516,216 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SRTSP.SYS -- (SRTSP)
DRV - [2011/03/30 22:00:09 | 000,050,168 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2011/03/21 19:39:49 | 000,331,384 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SYMTDIV.SYS -- (SYMTDIv)
DRV - [2011/03/14 21:31:23 | 000,744,568 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SYMEFA.SYS -- (SymEFA)
DRV - [2011/01/27 01:47:10 | 000,340,088 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SYMDS.SYS -- (SymDS)
DRV - [2011/01/27 00:07:05 | 000,136,312 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\Ironx86.SYS -- (SymIRON)
DRV - [2008/10/09 15:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV - [2008/08/01 19:51:14 | 001,052,704 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2008/05/22 21:49:00 | 007,465,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008/05/08 05:05:18 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [2008/05/08 05:03:18 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\HSX_DP.sys -- (HSF_DP)
DRV - [2007/10/26 18:51:24 | 000,110,624 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2007/10/18 07:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2005/12/12 12:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\PS2.sys -- (Ps2)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Pavilion&pf=desktop
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Pavilion&pf=desktop
IE - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2629: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\IPSFFPlgn\ [2011/12/31 15:30:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\coFFPlgn_2011_7_4_3 [2012/01/02 10:14:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/29 19:14:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2011/12/29 19:14:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kyle\AppData\Roaming\Mozilla\Extensions
[2011/12/29 19:14:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/12/21 02:24:52 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/12/20 23:30:41 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/12/20 23:30:41 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
O1 HOSTS File: ([2006/09/18 16:41:30 | 000,000,761 | ---- | M]) - C:\WINDOWS\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\5.1.0.29\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\5.1.0.29\IPS\IPSBHO.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SnapfishMediaDetector] C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe ()
O4 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKU\.DEFAULT\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-18\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\..Trusted Ranges: Range1 ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{56972830-0254-43F0-983C-F6098DF3CA50}: DhcpNameServer = 209.18.47.61 209.18.47.62
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\img8.jpg
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\img8.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/05/18 15:34:58 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012/01/02 11:17:36 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
[2012/01/02 00:21:27 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012/01/02 00:20:08 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012/01/01 23:55:09 | 004,360,044 | R--- | C] (Swearware) -- C:\Users\Kyle\Desktop\ComboFix.exe
[2012/01/01 20:46:02 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\ImgBurn
[2012/01/01 20:43:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
[2012/01/01 20:43:23 | 000,000,000 | ---D | C] -- C:\Program Files\ImgBurn
[2012/01/01 20:42:38 | 006,055,875 | ---- | C] (LIGHTNING UK!) -- C:\Users\Kyle\Desktop\SetupImgBurn_2.5.6.0.exe
[2012/01/01 20:41:21 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Roxio
[2012/01/01 19:32:45 | 000,000,000 | ---D | C] -- C:\FRST
[2012/01/01 15:46:33 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/01/01 15:46:33 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/01/01 15:46:32 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/01/01 15:46:32 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2012/01/01 15:46:26 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012/01/01 15:46:21 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/01/01 15:29:45 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Desktop\!mportant!
[2012/01/01 15:04:25 | 004,702,720 | ---- | C] (AVAST Software) -- C:\Users\Kyle\Desktop\aswMBR.exe
[2012/01/01 09:43:44 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Kyle\Desktop\dds(1).scr
[2012/01/01 09:09:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/01/01 09:09:31 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/01/01 09:09:31 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/01/01 08:59:26 | 010,847,608 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Kyle\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/31 17:48:35 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Documents\Updater5
[2011/12/31 17:48:13 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Adobe
[2011/12/31 16:10:58 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\NPE
[2011/12/31 16:10:33 | 002,562,040 | ---- | C] (Symantec Corporation) -- C:\Users\Kyle\Desktop\NPE.exe
[2011/12/29 19:49:10 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Malwarebytes
[2011/12/29 19:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/12/29 19:42:07 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Desktop\tdsskiller
[2011/12/29 19:24:18 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Adobe
[2011/12/29 19:22:52 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011/12/29 19:22:52 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2011/12/29 19:14:09 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Mozilla
[2011/12/29 19:14:09 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Mozilla
[2011/12/29 19:13:57 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011/12/29 18:58:07 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Documents\Symantec
[2011/12/29 18:56:19 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2011/12/29 18:56:18 | 000,126,584 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2011/12/29 18:56:18 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2011/12/29 18:56:07 | 000,744,568 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\SymEFA.sys
[2011/12/29 18:56:07 | 000,516,216 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\srtsp.sys
[2011/12/29 18:56:07 | 000,340,088 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\SymDS.sys
[2011/12/29 18:56:07 | 000,331,384 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\symtdiv.sys
[2011/12/29 18:56:07 | 000,296,568 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\symnets.sys
[2011/12/29 18:56:07 | 000,136,312 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\Ironx86.sys
[2011/12/29 18:56:07 | 000,050,168 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\srtspx.sys
[2011/12/29 18:55:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360
[2011/12/29 18:55:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360\0501000.01D
[2011/12/29 18:55:57 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
[2011/12/29 18:55:57 | 000,000,000 | ---D | C] -- C:\Program Files\Norton 360
[2011/12/29 18:55:45 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2011/12/29 18:55:45 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2011/12/29 18:51:45 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
[2011/12/29 18:51:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2011/12/29 18:51:31 | 000,397,800 | ---- | C] (Symantec Corporation) -- C:\Users\Kyle\Desktop\N360Downloader.exe
[2011/12/29 18:41:26 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2011/12/28 22:44:09 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011/12/28 22:42:07 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011/12/28 22:29:18 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2011/12/28 20:24:13 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Hewlett-Packard
[2011/12/28 20:22:14 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Snapfish
[2011/12/28 20:21:36 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011/12/28 20:21:36 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Searches
[2011/12/28 20:21:36 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011/12/28 20:21:24 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Identities
[2011/12/28 20:21:15 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Contacts
[2011/12/28 20:18:10 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Macromedia
[2011/12/28 20:12:18 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\VirtualStore
[2011/12/28 20:01:35 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Hewlett-Packard
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\AppData\Local\Temporary Internet Files
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Templates
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Start Menu
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\SendTo
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Recent
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\PrintHood
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\NetHood
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Documents\My Videos
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Documents\My Pictures
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Documents\My Music
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\My Documents
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Local Settings
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\AppData\Local\History
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Cookies
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Application Data
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\AppData\Local\Application Data
[2011/12/28 19:59:12 | 000,000,000 | --SD | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Videos
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Saved Games
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Pictures
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Music
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Links
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Favorites
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Downloads
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Documents
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Desktop
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011/12/28 19:59:12 | 000,000,000 | -H-D | C] -- C:\Users\Kyle\AppData
[2011/12/28 19:59:12 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Temp
[2011/12/28 19:59:12 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Microsoft
[2011/12/28 19:59:12 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Media Center Programs
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Templates
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Videos
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Pictures
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Music
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Start Menu
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favorites
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data
========== Files - Modified Within 30 Days ==========
[2012/01/02 11:17:37 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
[2012/01/02 11:13:48 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/02 11:13:48 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/02 10:19:08 | 000,618,410 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/01/02 10:19:08 | 000,103,818 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/01/02 10:13:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/01/02 10:13:43 | 3622,363,136 | -HS- | M] () -- C:\hiberfil.sys
[2012/01/01 23:55:06 | 004,360,044 | R--- | M] (Swearware) -- C:\Users\Kyle\Desktop\ComboFix.exe
[2012/01/01 20:43:24 | 000,001,676 | ---- | M] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2012/01/01 20:43:24 | 000,001,652 | ---- | M] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2012/01/01 20:42:45 | 006,055,875 | ---- | M] (LIGHTNING UK!) -- C:\Users\Kyle\Desktop\SetupImgBurn_2.5.6.0.exe
[2012/01/01 20:39:09 | 115,079,168 | ---- | M] () -- C:\Users\Kyle\Desktop\gparted-live-0.10.0-3.iso
[2012/01/01 19:32:08 | 000,858,316 | ---- | M] () -- C:\Users\Kyle\Desktop\FRST.exe
[2012/01/01 17:24:38 | 001,008,141 | ---- | M] () -- C:\Users\Kyle\Desktop\rkill.com
[2012/01/01 15:04:56 | 004,702,720 | ---- | M] (AVAST Software) -- C:\Users\Kyle\Desktop\aswMBR.exe
[2012/01/01 09:43:44 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Kyle\Desktop\dds(1).scr
[2012/01/01 09:32:38 | 000,302,592 | ---- | M] () -- C:\Users\Kyle\Desktop\klvg3jy5.exe
[2012/01/01 09:09:32 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/01/01 08:59:39 | 010,847,608 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Kyle\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/31 16:10:34 | 002,562,040 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\NPE.exe
[2011/12/31 14:40:10 | 000,002,521 | ---- | M] () -- C:\Users\Kyle\Desktop\HiJackThis.lnk
[2011/12/30 16:28:41 | 001,547,168 | ---- | M] () -- C:\Windows\System32\drivers\N360\0501000.01D\Cat.DB
[2011/12/29 19:41:50 | 001,558,406 | ---- | M] () -- C:\Users\Kyle\Desktop\tdsskiller.zip
[2011/12/29 19:21:36 | 001,402,880 | ---- | M] () -- C:\Users\Kyle\Desktop\HiJackThis.msi
[2011/12/29 19:14:06 | 000,000,872 | ---- | M] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/12/29 19:14:06 | 000,000,848 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/12/29 18:56:18 | 000,126,584 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2011/12/29 18:56:18 | 000,007,468 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2011/12/29 18:56:18 | 000,000,806 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2011/12/29 18:56:16 | 000,002,142 | ---- | M] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2011/12/29 18:51:45 | 000,000,850 | ---- | M] () -- C:\Users\Kyle\Desktop\Norton Installation Files.lnk
[2011/12/29 18:51:32 | 000,397,800 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\N360Downloader.exe
[2011/12/29 18:43:36 | 000,000,945 | ---- | M] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/29 07:43:35 | 033,161,216 | ---- | M] () -- C:\Windows\ocsetup_install_NetFx3.etl
[2011/12/29 07:43:35 | 000,327,680 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_NetFx3.perf
[2011/12/29 07:43:35 | 000,065,536 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_NetFx3.dpx
[2011/12/29 03:50:07 | 000,358,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/12/29 00:29:43 | 000,001,820 | ---- | M] () -- C:\Windows\System32\rasctrnm.h
[2011/12/29 00:21:32 | 001,657,350 | ---- | M] () -- C:\Windows\System32\wlan.tmf
[2011/12/28 23:36:11 | 000,000,129 | ---- | M] () -- C:\Windows\System32\MRT.INI
[2011/12/28 21:03:58 | 000,001,829 | RHS- | M] () -- C:\Windows\System32\drivers\103C_HP_CPC_GG038AA-ABA a6109n_YC_0Pavi_QCNH724_E73NAv3PrA1_49_INARRA2_SASUSTek Computer INC._V2.00_B5.09_T070515_WUH0_L409_M3454_J320_7AMD_8Athlon 64 X2 Dual Core_92_#070908_N10DE03EF_Z14F12F20_G10DE03D0.MRK
[2011/12/28 20:19:46 | 000,000,044 | ---- | M] () -- C:\Windows\System\hpsysdrv.dat
[2011/12/10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
========== Files Created - No Company Name ==========
[2012/01/01 20:43:24 | 000,001,676 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2012/01/01 20:43:24 | 000,001,664 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
[2012/01/01 20:43:24 | 000,001,652 | ---- | C] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2012/01/01 20:31:37 | 115,079,168 | ---- | C] () -- C:\Users\Kyle\Desktop\gparted-live-0.10.0-3.iso
[2012/01/01 19:32:08 | 000,858,316 | ---- | C] () -- C:\Users\Kyle\Desktop\FRST.exe
[2012/01/01 19:06:55 | 3622,363,136 | -HS- | C] () -- C:\hiberfil.sys
[2012/01/01 17:24:38 | 001,008,141 | ---- | C] () -- C:\Users\Kyle\Desktop\rkill.com
[2012/01/01 15:46:33 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/01/01 15:46:33 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/01/01 15:46:33 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/01/01 15:46:33 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/01/01 15:46:33 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/01/01 09:32:37 | 000,302,592 | ---- | C] () -- C:\Users\Kyle\Desktop\klvg3jy5.exe
[2012/01/01 09:09:32 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2011/12/29 19:41:17 | 001,558,406 | ---- | C] () -- C:\Users\Kyle\Desktop\tdsskiller.zip
[2011/12/29 19:22:52 | 000,002,521 | ---- | C] () -- C:\Users\Kyle\Desktop\HiJackThis.lnk
[2011/12/29 19:21:36 | 001,402,880 | ---- | C] () -- C:\Users\Kyle\Desktop\HiJackThis.msi
[2011/12/29 19:14:06 | 000,000,872 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/12/29 19:14:06 | 000,000,860 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/12/29 19:14:06 | 000,000,848 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/12/29 18:56:21 | 001,547,168 | ---- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\Cat.DB
[2011/12/29 18:56:19 | 000,007,468 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2011/12/29 18:56:19 | 000,000,806 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2011/12/29 18:56:16 | 000,002,142 | ---- | C] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2011/12/29 18:56:07 | 000,000,000 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymDS.cat
[2011/12/29 18:55:59 | 000,003,373 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymEFA.inf
[2011/12/29 18:55:59 | 000,002,792 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymDS.inf
[2011/12/29 18:55:59 | 000,001,474 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymNetV.inf
[2011/12/29 18:55:59 | 000,001,446 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymNet.inf
[2011/12/29 18:55:59 | 000,001,389 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtspx.inf
[2011/12/29 18:55:59 | 000,001,383 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtsp.inf
[2011/12/29 18:55:59 | 000,000,742 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\Iron.inf
[2011/12/29 18:55:58 | 000,007,877 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\symnetv.cat
[2011/12/29 18:55:58 | 000,007,528 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\iron.cat
[2011/12/29 18:55:58 | 000,007,458 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymNet.cat
[2011/12/29 18:55:58 | 000,007,456 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymEFA.cat
[2011/12/29 18:55:58 | 000,007,454 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtspx.cat
[2011/12/29 18:55:58 | 000,007,450 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtsp.cat
[2011/12/29 18:55:58 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\isolate.ini
[2011/12/29 18:51:45 | 000,000,850 | ---- | C] () -- C:\Users\Kyle\Desktop\Norton Installation Files.lnk
[2011/12/29 18:43:36 | 000,000,945 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/29 18:39:01 | 000,004,984 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2011/12/29 00:29:43 | 000,001,820 | ---- | C] () -- C:\Windows\System32\rasctrnm.h
[2011/12/29 00:21:32 | 001,657,350 | ---- | C] () -- C:\Windows\System32\wlan.tmf
[2011/12/28 23:36:11 | 000,000,129 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2011/12/28 22:56:17 | 033,161,216 | ---- | C] () -- C:\Windows\ocsetup_install_NetFx3.etl
[2011/12/28 22:56:17 | 000,327,680 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_NetFx3.perf
[2011/12/28 22:56:17 | 000,065,536 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_NetFx3.dpx
[2011/12/28 21:03:50 | 000,001,829 | RHS- | C] () -- C:\Windows\System32\drivers\103C_HP_CPC_GG038AA-ABA a6109n_YC_0Pavi_QCNH724_E73NAv3PrA1_49_INARRA2_SASUSTek Computer INC._V2.00_B5.09_T070515_WUH0_L409_M3454_J320_7AMD_8Athlon 64 X2 Dual Core_92_#070908_N10DE03EF_Z14F12F20_G10DE03D0.MRK
[2011/12/28 20:21:38 | 000,000,951 | ---- | C] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011/12/28 20:21:36 | 000,000,946 | ---- | C] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2011/12/28 20:21:15 | 000,000,917 | ---- | C] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
[2011/12/28 20:20:08 | 000,002,057 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
[2011/12/28 20:19:46 | 000,000,044 | ---- | C] () -- C:\Windows\System\hpsysdrv.dat
[2011/12/28 19:59:12 | 000,000,258 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011/12/28 19:59:12 | 000,000,240 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2007/05/18 15:20:57 | 000,103,521 | ---- | C] () -- C:\Windows\hpqins13.dat
[2007/05/18 15:03:54 | 000,061,440 | ---- | C] () -- C:\Windows\System32\OsdRemove.exe
[2007/05/18 15:00:07 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom24.dll
[2007/05/18 15:00:07 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes24.dll
[2007/03/06 03:47:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2007/01/12 09:07:48 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007/01/12 09:07:48 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 07:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 07:47:37 | 000,358,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,618,410 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,103,818 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/11/02 02:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2006/11/02 02:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
========== LOP Check ==========
[2012/01/01 20:47:33 | 000,000,000 | ---D | M] -- C:\Users\Kyle\AppData\Roaming\ImgBurn
[2011/12/28 20:22:15 | 000,000,000 | ---D | M] -- C:\Users\Kyle\AppData\Roaming\Snapfish
[2012/01/02 00:42:47 | 000,011,270 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2007/05/18 15:34:58 | 000,000,074 | ---- | M] () -- C:\autoexec.bat
[2006/11/02 04:53:57 | 000,438,840 | RHS- | M] () -- C:\bootmgr
[2007/05/18 15:47:28 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2012/01/02 00:21:11 | 000,017,867 | ---- | M] () -- C:\ComboFix.txt
[2006/09/18 16:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2012/01/02 10:13:43 | 3622,363,136 | -HS- | M] () -- C:\hiberfil.sys
[2012/01/02 10:13:42 | 3936,092,160 | -HS- | M] () -- C:\pagefile.sys
[2007/05/18 15:12:39 | 000,000,471 | ---- | M] () -- C:\RHDSetup.log
[2012/01/01 17:25:19 | 000,000,321 | ---- | M] () -- C:\rkill.log
[2011/12/29 19:43:00 | 000,070,396 | ---- | M] () -- C:\TDSSKiller.2.6.25.0_29.12.2011_19.42.21_log.txt
< %systemroot%\Fonts\*.com >
[2006/11/02 07:37:12 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 07:37:12 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 07:37:12 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2006/11/02 07:37:12 | 000,030,808 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2006/09/18 16:37:34 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 07:35:48 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 21:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2011/12/29 03:53:41 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2006/11/02 05:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006/11/02 05:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006/11/02 05:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 05:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 05:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/12/29 18:43:36 | 000,000,221 | -HS- | M] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
< %USERPROFILE%\Desktop\*.exe >
[2012/01/01 15:04:56 | 004,702,720 | ---- | M] (AVAST Software) -- C:\Users\Kyle\Desktop\aswMBR.exe
[2012/01/01 23:55:06 | 004,360,044 | R--- | M] (Swearware) -- C:\Users\Kyle\Desktop\ComboFix.exe
[2012/01/01 19:32:08 | 000,858,316 | ---- | M] () -- C:\Users\Kyle\Desktop\FRST.exe
[2012/01/01 09:32:38 | 000,302,592 | ---- | M] () -- C:\Users\Kyle\Desktop\klvg3jy5.exe
[2012/01/01 08:59:39 | 010,847,608 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Kyle\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/29 18:51:32 | 000,397,800 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\N360Downloader.exe
[2011/12/31 16:10:34 | 002,562,040 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\NPE.exe
[2012/01/02 11:17:37 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
[2012/01/01 20:42:45 | 006,055,875 | ---- | M] (LIGHTNING UK!) -- C:\Users\Kyle\Desktop\SetupImgBurn_2.5.6.0.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >
< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >
< %PROGRAMFILES%\Internet Explorer\*.tmp >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %USERPROFILE%\My Documents\*.exe >
< %USERPROFILE%\*.exe >
< %systemroot%\ADDINS\*.* >
< %systemroot%\assembly\*.bak2 >
< %systemroot%\Config\*.* >
< %systemroot%\REPAIR\*.bak2 >
< %systemroot%\SECURITY\Database\*.sdb /x >
[2011/12/28 22:44:02 | 000,008,192 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.chk
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.log
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00001.jrs
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00002.jrs
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbtmp.log
[2011/12/28 22:43:32 | 001,056,768 | ---- | M] () -- C:\Windows\SECURITY\Database\tmp.edb
< %systemroot%\SYSTEM\*.bak2 >
< %systemroot%\Web\*.bak2 >
< %systemroot%\Driver Cache\*.* >
< %PROGRAMFILES%\Mozilla Firefox\0*.exe >
< %ProgramFiles%\Microsoft Common\*.* >
< %ProgramFiles%\TinyProxy. >
< %USERPROFILE%\Favorites\*.url /x >
[2011/12/28 20:21:36 | 000,000,402 | -HS- | M] () -- C:\Users\Kyle\Favorites\desktop.ini
< %systemroot%\system32\*.bk >
< %systemroot%\*.te >
< %systemroot%\system32\system32\*.* >
< %ALLUSERSPROFILE%\*.dat /x >
[2007/05/18 15:22:04 | 000,000,311 | ---- | M] () -- C:\ProgramData\hpzinstall.log
< %systemroot%\system32\drivers\*.rmv >
< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >
< dir /b "%systemroot%\*.exe" | find /i " " /c >
< %PROGRAMFILES%\Microsoft\*.* >
< %systemroot%\System32\Wbem\proquota.exe >
< %PROGRAMFILES%\Mozilla Firefox\*.dat >
< %USERPROFILE%\Cookies\*.txt /x >
< %SystemRoot%\system32\fonts\*.* >
< %systemroot%\system32\winlog\*.* >
< %systemroot%\system32\Language\*.* >
< %systemroot%\system32\Settings\*.* >
< %systemroot%\system32\*.quo >
< %SYSTEMROOT%\AppPatch\*.exe >
< %SYSTEMROOT%\inf\*.exe >
< %SYSTEMROOT%\Installer\*.exe >
< %systemroot%\system32\config\*.bak2 >
< %systemroot%\system32\Computers\*.* >
< %SystemRoot%\system32\Sound\*.* >
< %SystemRoot%\system32\SpecialImg\*.* >
< %SystemRoot%\system32\code\*.* >
< %SystemRoot%\system32\draft\*.* >
< %SystemRoot%\system32\MSSSys\*.* >
< %ProgramFiles%\Javascript\*.* >
< %systemroot%\pchealth\helpctr\System\*.exe /s >
< %systemroot%\Web\*.exe >
< %systemroot%\system32\msn\*.* >
< %systemroot%\system32\*.tro >
< %AppData%\Microsoft\Installer\msupdates\*.* >
< %ProgramFiles%\Messenger\*.* >
< %systemroot%\system32\systhem32\*.* >
< %systemroot%\system\*.exe >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >
< End of report >
OTL logfile created on: 1/2/2012 11:25:19 AM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Kyle\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.37 Gb Total Physical Memory | 2.42 Gb Available Physical Memory | 71.62% Memory free
6.92 Gb Paging File | 6.09 Gb Available in Paging File | 88.10% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.31 Gb Total Space | 236.19 Gb Free Space | 81.64% Space Free | Partition Type: NTFS
Drive D: | 8.78 Gb Total Space | 1.00 Gb Free Space | 11.43% Space Free | Partition Type: NTFS
Computer Name: KYLE-PC | User Name: Kyle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/01/02 11:17:37 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
PRC - [2011/12/28 23:47:26 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2011/12/24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011/04/16 19:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton 360\Engine\5.1.0.29\ccSvcHst.exe
PRC - [2007/03/02 16:55:02 | 001,441,792 | ---- | M] () -- C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
PRC - [2007/03/01 10:38:48 | 004,390,912 | ---- | M] (Realtek Semiconductor) -- C:\WINDOWS\RtHDVCpl.exe
PRC - [2007/02/15 05:59:00 | 000,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
PRC - [2006/09/28 08:42:24 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe
========== Modules (No Company Name) ==========
MOD - [2007/03/02 16:55:02 | 001,441,792 | ---- | M] () -- C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
========== Win32 Services (SafeList) ==========
SRV - [2011/12/29 00:12:58 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/12/24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011/04/16 19:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files\Norton 360\Engine\5.1.0.29\ccSvcHst.exe -- (N360)
========== Driver Services (SafeList) ==========
DRV - [2011/12/29 18:56:18 | 000,126,584 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2011/12/29 01:00:00 | 001,576,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120101.006\NAVEX15.SYS -- (NAVEX15)
DRV - [2011/12/29 01:00:00 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2011/12/29 01:00:00 | 000,106,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2011/12/29 01:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120101.006\NAVENG.SYS -- (NAVENG)
DRV - [2011/12/28 18:35:30 | 000,368,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20111228.001\IDSvix86.sys -- (IDSVix86)
DRV - [2011/12/21 22:50:32 | 000,819,320 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20111221.003\BHDrvx86.sys -- (BHDrvx86)
DRV - [2011/12/10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011/03/30 22:00:09 | 000,516,216 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SRTSP.SYS -- (SRTSP)
DRV - [2011/03/30 22:00:09 | 000,050,168 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2011/03/21 19:39:49 | 000,331,384 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SYMTDIV.SYS -- (SYMTDIv)
DRV - [2011/03/14 21:31:23 | 000,744,568 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SYMEFA.SYS -- (SymEFA)
DRV - [2011/01/27 01:47:10 | 000,340,088 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\SYMDS.SYS -- (SymDS)
DRV - [2011/01/27 00:07:05 | 000,136,312 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\N360\0501000.01D\Ironx86.SYS -- (SymIRON)
DRV - [2008/10/09 15:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV - [2008/08/01 19:51:14 | 001,052,704 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2008/05/22 21:49:00 | 007,465,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008/05/08 05:05:18 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [2008/05/08 05:03:18 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\HSX_DP.sys -- (HSF_DP)
DRV - [2007/10/26 18:51:24 | 000,110,624 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2007/10/18 07:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2005/12/12 12:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\PS2.sys -- (Ps2)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Pavilion&pf=desktop
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Pavilion&pf=desktop
IE - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2629: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\IPSFFPlgn\ [2011/12/31 15:30:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\coFFPlgn_2011_7_4_3 [2012/01/02 10:14:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/29 19:14:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2011/12/29 19:14:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kyle\AppData\Roaming\Mozilla\Extensions
[2011/12/29 19:14:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/12/21 02:24:52 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/12/20 23:30:41 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/12/20 23:30:41 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
O1 HOSTS File: ([2006/09/18 16:41:30 | 000,000,761 | ---- | M]) - C:\WINDOWS\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\5.1.0.29\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\5.1.0.29\IPS\IPSBHO.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SnapfishMediaDetector] C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe ()
O4 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKU\.DEFAULT\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-18\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-21-1236342630-377052059-3977624695-1000\..Trusted Ranges: Range1 ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{56972830-0254-43F0-983C-F6098DF3CA50}: DhcpNameServer = 209.18.47.61 209.18.47.62
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\img8.jpg
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\img8.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/05/18 15:34:58 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012/01/02 11:17:36 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
[2012/01/02 00:21:27 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012/01/02 00:20:08 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012/01/01 23:55:09 | 004,360,044 | R--- | C] (Swearware) -- C:\Users\Kyle\Desktop\ComboFix.exe
[2012/01/01 20:46:02 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\ImgBurn
[2012/01/01 20:43:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
[2012/01/01 20:43:23 | 000,000,000 | ---D | C] -- C:\Program Files\ImgBurn
[2012/01/01 20:42:38 | 006,055,875 | ---- | C] (LIGHTNING UK!) -- C:\Users\Kyle\Desktop\SetupImgBurn_2.5.6.0.exe
[2012/01/01 20:41:21 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Roxio
[2012/01/01 19:32:45 | 000,000,000 | ---D | C] -- C:\FRST
[2012/01/01 15:46:33 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/01/01 15:46:33 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/01/01 15:46:32 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/01/01 15:46:32 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2012/01/01 15:46:26 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012/01/01 15:46:21 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/01/01 15:29:45 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Desktop\!mportant!
[2012/01/01 15:04:25 | 004,702,720 | ---- | C] (AVAST Software) -- C:\Users\Kyle\Desktop\aswMBR.exe
[2012/01/01 09:43:44 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Kyle\Desktop\dds(1).scr
[2012/01/01 09:09:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/01/01 09:09:31 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/01/01 09:09:31 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/01/01 08:59:26 | 010,847,608 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Kyle\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/31 17:48:35 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Documents\Updater5
[2011/12/31 17:48:13 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Adobe
[2011/12/31 16:10:58 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\NPE
[2011/12/31 16:10:33 | 002,562,040 | ---- | C] (Symantec Corporation) -- C:\Users\Kyle\Desktop\NPE.exe
[2011/12/29 19:49:10 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Malwarebytes
[2011/12/29 19:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/12/29 19:42:07 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Desktop\tdsskiller
[2011/12/29 19:24:18 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Adobe
[2011/12/29 19:22:52 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011/12/29 19:22:52 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2011/12/29 19:14:09 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Mozilla
[2011/12/29 19:14:09 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Mozilla
[2011/12/29 19:13:57 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011/12/29 18:58:07 | 000,000,000 | ---D | C] -- C:\Users\Kyle\Documents\Symantec
[2011/12/29 18:56:19 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2011/12/29 18:56:18 | 000,126,584 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2011/12/29 18:56:18 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2011/12/29 18:56:07 | 000,744,568 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\SymEFA.sys
[2011/12/29 18:56:07 | 000,516,216 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\srtsp.sys
[2011/12/29 18:56:07 | 000,340,088 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\SymDS.sys
[2011/12/29 18:56:07 | 000,331,384 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\symtdiv.sys
[2011/12/29 18:56:07 | 000,296,568 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\symnets.sys
[2011/12/29 18:56:07 | 000,136,312 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\Ironx86.sys
[2011/12/29 18:56:07 | 000,050,168 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0501000.01D\srtspx.sys
[2011/12/29 18:55:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360
[2011/12/29 18:55:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360\0501000.01D
[2011/12/29 18:55:57 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
[2011/12/29 18:55:57 | 000,000,000 | ---D | C] -- C:\Program Files\Norton 360
[2011/12/29 18:55:45 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2011/12/29 18:55:45 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2011/12/29 18:51:45 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
[2011/12/29 18:51:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2011/12/29 18:51:31 | 000,397,800 | ---- | C] (Symantec Corporation) -- C:\Users\Kyle\Desktop\N360Downloader.exe
[2011/12/29 18:41:26 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2011/12/28 22:44:09 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011/12/28 22:42:07 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011/12/28 22:29:18 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2011/12/28 20:24:13 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Hewlett-Packard
[2011/12/28 20:22:14 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Snapfish
[2011/12/28 20:21:36 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011/12/28 20:21:36 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Searches
[2011/12/28 20:21:36 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011/12/28 20:21:24 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Identities
[2011/12/28 20:21:15 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Contacts
[2011/12/28 20:18:10 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Macromedia
[2011/12/28 20:12:18 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\VirtualStore
[2011/12/28 20:01:35 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Hewlett-Packard
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\AppData\Local\Temporary Internet Files
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Templates
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Start Menu
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\SendTo
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Recent
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\PrintHood
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\NetHood
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Documents\My Videos
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Documents\My Pictures
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Documents\My Music
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\My Documents
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Local Settings
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\AppData\Local\History
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Cookies
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\Application Data
[2011/12/28 19:59:14 | 000,000,000 | -HSD | C] -- C:\Users\Kyle\AppData\Local\Application Data
[2011/12/28 19:59:12 | 000,000,000 | --SD | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Videos
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Saved Games
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Pictures
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Music
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Links
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Favorites
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Downloads
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Documents
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\Desktop
[2011/12/28 19:59:12 | 000,000,000 | R--D | C] -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011/12/28 19:59:12 | 000,000,000 | -H-D | C] -- C:\Users\Kyle\AppData
[2011/12/28 19:59:12 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Temp
[2011/12/28 19:59:12 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Local\Microsoft
[2011/12/28 19:59:12 | 000,000,000 | ---D | C] -- C:\Users\Kyle\AppData\Roaming\Media Center Programs
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Templates
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Videos
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Pictures
[2011/12/28 19:53:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Music
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Start Menu
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favorites
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop
[2011/12/28 19:53:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data
========== Files - Modified Within 30 Days ==========
[2012/01/02 11:17:37 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
[2012/01/02 11:13:48 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/02 11:13:48 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/02 10:19:08 | 000,618,410 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/01/02 10:19:08 | 000,103,818 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/01/02 10:13:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/01/02 10:13:43 | 3622,363,136 | -HS- | M] () -- C:\hiberfil.sys
[2012/01/01 23:55:06 | 004,360,044 | R--- | M] (Swearware) -- C:\Users\Kyle\Desktop\ComboFix.exe
[2012/01/01 20:43:24 | 000,001,676 | ---- | M] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2012/01/01 20:43:24 | 000,001,652 | ---- | M] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2012/01/01 20:42:45 | 006,055,875 | ---- | M] (LIGHTNING UK!) -- C:\Users\Kyle\Desktop\SetupImgBurn_2.5.6.0.exe
[2012/01/01 20:39:09 | 115,079,168 | ---- | M] () -- C:\Users\Kyle\Desktop\gparted-live-0.10.0-3.iso
[2012/01/01 19:32:08 | 000,858,316 | ---- | M] () -- C:\Users\Kyle\Desktop\FRST.exe
[2012/01/01 17:24:38 | 001,008,141 | ---- | M] () -- C:\Users\Kyle\Desktop\rkill.com
[2012/01/01 15:04:56 | 004,702,720 | ---- | M] (AVAST Software) -- C:\Users\Kyle\Desktop\aswMBR.exe
[2012/01/01 09:43:44 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Kyle\Desktop\dds(1).scr
[2012/01/01 09:32:38 | 000,302,592 | ---- | M] () -- C:\Users\Kyle\Desktop\klvg3jy5.exe
[2012/01/01 09:09:32 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/01/01 08:59:39 | 010,847,608 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Kyle\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/31 16:10:34 | 002,562,040 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\NPE.exe
[2011/12/31 14:40:10 | 000,002,521 | ---- | M] () -- C:\Users\Kyle\Desktop\HiJackThis.lnk
[2011/12/30 16:28:41 | 001,547,168 | ---- | M] () -- C:\Windows\System32\drivers\N360\0501000.01D\Cat.DB
[2011/12/29 19:41:50 | 001,558,406 | ---- | M] () -- C:\Users\Kyle\Desktop\tdsskiller.zip
[2011/12/29 19:21:36 | 001,402,880 | ---- | M] () -- C:\Users\Kyle\Desktop\HiJackThis.msi
[2011/12/29 19:14:06 | 000,000,872 | ---- | M] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/12/29 19:14:06 | 000,000,848 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/12/29 18:56:18 | 000,126,584 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2011/12/29 18:56:18 | 000,007,468 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2011/12/29 18:56:18 | 000,000,806 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2011/12/29 18:56:16 | 000,002,142 | ---- | M] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2011/12/29 18:51:45 | 000,000,850 | ---- | M] () -- C:\Users\Kyle\Desktop\Norton Installation Files.lnk
[2011/12/29 18:51:32 | 000,397,800 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\N360Downloader.exe
[2011/12/29 18:43:36 | 000,000,945 | ---- | M] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/29 07:43:35 | 033,161,216 | ---- | M] () -- C:\Windows\ocsetup_install_NetFx3.etl
[2011/12/29 07:43:35 | 000,327,680 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_NetFx3.perf
[2011/12/29 07:43:35 | 000,065,536 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_NetFx3.dpx
[2011/12/29 03:50:07 | 000,358,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/12/29 00:29:43 | 000,001,820 | ---- | M] () -- C:\Windows\System32\rasctrnm.h
[2011/12/29 00:21:32 | 001,657,350 | ---- | M] () -- C:\Windows\System32\wlan.tmf
[2011/12/28 23:36:11 | 000,000,129 | ---- | M] () -- C:\Windows\System32\MRT.INI
[2011/12/28 21:03:58 | 000,001,829 | RHS- | M] () -- C:\Windows\System32\drivers\103C_HP_CPC_GG038AA-ABA a6109n_YC_0Pavi_QCNH724_E73NAv3PrA1_49_INARRA2_SASUSTek Computer INC._V2.00_B5.09_T070515_WUH0_L409_M3454_J320_7AMD_8Athlon 64 X2 Dual Core_92_#070908_N10DE03EF_Z14F12F20_G10DE03D0.MRK
[2011/12/28 20:19:46 | 000,000,044 | ---- | M] () -- C:\Windows\System\hpsysdrv.dat
[2011/12/10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
========== Files Created - No Company Name ==========
[2012/01/01 20:43:24 | 000,001,676 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2012/01/01 20:43:24 | 000,001,664 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
[2012/01/01 20:43:24 | 000,001,652 | ---- | C] () -- C:\Users\Public\Desktop\ImgBurn.lnk
[2012/01/01 20:31:37 | 115,079,168 | ---- | C] () -- C:\Users\Kyle\Desktop\gparted-live-0.10.0-3.iso
[2012/01/01 19:32:08 | 000,858,316 | ---- | C] () -- C:\Users\Kyle\Desktop\FRST.exe
[2012/01/01 19:06:55 | 3622,363,136 | -HS- | C] () -- C:\hiberfil.sys
[2012/01/01 17:24:38 | 001,008,141 | ---- | C] () -- C:\Users\Kyle\Desktop\rkill.com
[2012/01/01 15:46:33 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/01/01 15:46:33 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/01/01 15:46:33 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/01/01 15:46:33 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/01/01 15:46:33 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/01/01 09:32:37 | 000,302,592 | ---- | C] () -- C:\Users\Kyle\Desktop\klvg3jy5.exe
[2012/01/01 09:09:32 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2011/12/29 19:41:17 | 001,558,406 | ---- | C] () -- C:\Users\Kyle\Desktop\tdsskiller.zip
[2011/12/29 19:22:52 | 000,002,521 | ---- | C] () -- C:\Users\Kyle\Desktop\HiJackThis.lnk
[2011/12/29 19:21:36 | 001,402,880 | ---- | C] () -- C:\Users\Kyle\Desktop\HiJackThis.msi
[2011/12/29 19:14:06 | 000,000,872 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/12/29 19:14:06 | 000,000,860 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/12/29 19:14:06 | 000,000,848 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/12/29 18:56:21 | 001,547,168 | ---- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\Cat.DB
[2011/12/29 18:56:19 | 000,007,468 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2011/12/29 18:56:19 | 000,000,806 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2011/12/29 18:56:16 | 000,002,142 | ---- | C] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2011/12/29 18:56:07 | 000,000,000 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymDS.cat
[2011/12/29 18:55:59 | 000,003,373 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymEFA.inf
[2011/12/29 18:55:59 | 000,002,792 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymDS.inf
[2011/12/29 18:55:59 | 000,001,474 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymNetV.inf
[2011/12/29 18:55:59 | 000,001,446 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymNet.inf
[2011/12/29 18:55:59 | 000,001,389 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtspx.inf
[2011/12/29 18:55:59 | 000,001,383 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtsp.inf
[2011/12/29 18:55:59 | 000,000,742 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\Iron.inf
[2011/12/29 18:55:58 | 000,007,877 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\symnetv.cat
[2011/12/29 18:55:58 | 000,007,528 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\iron.cat
[2011/12/29 18:55:58 | 000,007,458 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymNet.cat
[2011/12/29 18:55:58 | 000,007,456 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\SymEFA.cat
[2011/12/29 18:55:58 | 000,007,454 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtspx.cat
[2011/12/29 18:55:58 | 000,007,450 | R--- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\srtsp.cat
[2011/12/29 18:55:58 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\N360\0501000.01D\isolate.ini
[2011/12/29 18:51:45 | 000,000,850 | ---- | C] () -- C:\Users\Kyle\Desktop\Norton Installation Files.lnk
[2011/12/29 18:43:36 | 000,000,945 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/29 18:39:01 | 000,004,984 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2011/12/29 00:29:43 | 000,001,820 | ---- | C] () -- C:\Windows\System32\rasctrnm.h
[2011/12/29 00:21:32 | 001,657,350 | ---- | C] () -- C:\Windows\System32\wlan.tmf
[2011/12/28 23:36:11 | 000,000,129 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2011/12/28 22:56:17 | 033,161,216 | ---- | C] () -- C:\Windows\ocsetup_install_NetFx3.etl
[2011/12/28 22:56:17 | 000,327,680 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_NetFx3.perf
[2011/12/28 22:56:17 | 000,065,536 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_NetFx3.dpx
[2011/12/28 21:03:50 | 000,001,829 | RHS- | C] () -- C:\Windows\System32\drivers\103C_HP_CPC_GG038AA-ABA a6109n_YC_0Pavi_QCNH724_E73NAv3PrA1_49_INARRA2_SASUSTek Computer INC._V2.00_B5.09_T070515_WUH0_L409_M3454_J320_7AMD_8Athlon 64 X2 Dual Core_92_#070908_N10DE03EF_Z14F12F20_G10DE03D0.MRK
[2011/12/28 20:21:38 | 000,000,951 | ---- | C] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011/12/28 20:21:36 | 000,000,946 | ---- | C] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2011/12/28 20:21:15 | 000,000,917 | ---- | C] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
[2011/12/28 20:20:08 | 000,002,057 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
[2011/12/28 20:19:46 | 000,000,044 | ---- | C] () -- C:\Windows\System\hpsysdrv.dat
[2011/12/28 19:59:12 | 000,000,258 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011/12/28 19:59:12 | 000,000,240 | ---- | C] () -- C:\Users\Kyle\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2007/05/18 15:20:57 | 000,103,521 | ---- | C] () -- C:\Windows\hpqins13.dat
[2007/05/18 15:03:54 | 000,061,440 | ---- | C] () -- C:\Windows\System32\OsdRemove.exe
[2007/05/18 15:00:07 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom24.dll
[2007/05/18 15:00:07 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes24.dll
[2007/03/06 03:47:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2007/01/12 09:07:48 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007/01/12 09:07:48 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 07:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 07:47:37 | 000,358,432 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,618,410 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,103,818 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/11/02 02:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2006/11/02 02:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
========== LOP Check ==========
[2012/01/01 20:47:33 | 000,000,000 | ---D | M] -- C:\Users\Kyle\AppData\Roaming\ImgBurn
[2011/12/28 20:22:15 | 000,000,000 | ---D | M] -- C:\Users\Kyle\AppData\Roaming\Snapfish
[2012/01/02 00:42:47 | 000,011,270 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2007/05/18 15:34:58 | 000,000,074 | ---- | M] () -- C:\autoexec.bat
[2006/11/02 04:53:57 | 000,438,840 | RHS- | M] () -- C:\bootmgr
[2007/05/18 15:47:28 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2012/01/02 00:21:11 | 000,017,867 | ---- | M] () -- C:\ComboFix.txt
[2006/09/18 16:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2012/01/02 10:13:43 | 3622,363,136 | -HS- | M] () -- C:\hiberfil.sys
[2012/01/02 10:13:42 | 3936,092,160 | -HS- | M] () -- C:\pagefile.sys
[2007/05/18 15:12:39 | 000,000,471 | ---- | M] () -- C:\RHDSetup.log
[2012/01/01 17:25:19 | 000,000,321 | ---- | M] () -- C:\rkill.log
[2011/12/29 19:43:00 | 000,070,396 | ---- | M] () -- C:\TDSSKiller.2.6.25.0_29.12.2011_19.42.21_log.txt
< %systemroot%\Fonts\*.com >
[2006/11/02 07:37:12 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 07:37:12 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 07:37:12 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2006/11/02 07:37:12 | 000,030,808 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2006/09/18 16:37:34 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 07:35:48 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 21:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2011/12/29 03:53:41 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2006/11/02 05:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006/11/02 05:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006/11/02 05:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 05:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 05:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/12/29 18:43:36 | 000,000,221 | -HS- | M] () -- C:\Users\Kyle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
< %USERPROFILE%\Desktop\*.exe >
[2012/01/01 15:04:56 | 004,702,720 | ---- | M] (AVAST Software) -- C:\Users\Kyle\Desktop\aswMBR.exe
[2012/01/01 23:55:06 | 004,360,044 | R--- | M] (Swearware) -- C:\Users\Kyle\Desktop\ComboFix.exe
[2012/01/01 19:32:08 | 000,858,316 | ---- | M] () -- C:\Users\Kyle\Desktop\FRST.exe
[2012/01/01 09:32:38 | 000,302,592 | ---- | M] () -- C:\Users\Kyle\Desktop\klvg3jy5.exe
[2012/01/01 08:59:39 | 010,847,608 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Kyle\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/29 18:51:32 | 000,397,800 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\N360Downloader.exe
[2011/12/31 16:10:34 | 002,562,040 | ---- | M] (Symantec Corporation) -- C:\Users\Kyle\Desktop\NPE.exe
[2012/01/02 11:17:37 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Kyle\Desktop\OTL.exe
[2012/01/01 20:42:45 | 006,055,875 | ---- | M] (LIGHTNING UK!) -- C:\Users\Kyle\Desktop\SetupImgBurn_2.5.6.0.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >
< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >
< %PROGRAMFILES%\Internet Explorer\*.tmp >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %USERPROFILE%\My Documents\*.exe >
< %USERPROFILE%\*.exe >
< %systemroot%\ADDINS\*.* >
< %systemroot%\assembly\*.bak2 >
< %systemroot%\Config\*.* >
< %systemroot%\REPAIR\*.bak2 >
< %systemroot%\SECURITY\Database\*.sdb /x >
[2011/12/28 22:44:02 | 000,008,192 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.chk
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.log
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00001.jrs
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00002.jrs
[2011/12/28 22:43:31 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbtmp.log
[2011/12/28 22:43:32 | 001,056,768 | ---- | M] () -- C:\Windows\SECURITY\Database\tmp.edb
< %systemroot%\SYSTEM\*.bak2 >
< %systemroot%\Web\*.bak2 >
< %systemroot%\Driver Cache\*.* >
< %PROGRAMFILES%\Mozilla Firefox\0*.exe >
< %ProgramFiles%\Microsoft Common\*.* >
< %ProgramFiles%\TinyProxy. >
< %USERPROFILE%\Favorites\*.url /x >
[2011/12/28 20:21:36 | 000,000,402 | -HS- | M] () -- C:\Users\Kyle\Favorites\desktop.ini
< %systemroot%\system32\*.bk >
< %systemroot%\*.te >
< %systemroot%\system32\system32\*.* >
< %ALLUSERSPROFILE%\*.dat /x >
[2007/05/18 15:22:04 | 000,000,311 | ---- | M] () -- C:\ProgramData\hpzinstall.log
< %systemroot%\system32\drivers\*.rmv >
< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >
< dir /b "%systemroot%\*.exe" | find /i " " /c >
< %PROGRAMFILES%\Microsoft\*.* >
< %systemroot%\System32\Wbem\proquota.exe >
< %PROGRAMFILES%\Mozilla Firefox\*.dat >
< %USERPROFILE%\Cookies\*.txt /x >
< %SystemRoot%\system32\fonts\*.* >
< %systemroot%\system32\winlog\*.* >
< %systemroot%\system32\Language\*.* >
< %systemroot%\system32\Settings\*.* >
< %systemroot%\system32\*.quo >
< %SYSTEMROOT%\AppPatch\*.exe >
< %SYSTEMROOT%\inf\*.exe >
< %SYSTEMROOT%\Installer\*.exe >
< %systemroot%\system32\config\*.bak2 >
< %systemroot%\system32\Computers\*.* >
< %SystemRoot%\system32\Sound\*.* >
< %SystemRoot%\system32\SpecialImg\*.* >
< %SystemRoot%\system32\code\*.* >
< %SystemRoot%\system32\draft\*.* >
< %SystemRoot%\system32\MSSSys\*.* >
< %ProgramFiles%\Javascript\*.* >
< %systemroot%\pchealth\helpctr\System\*.exe /s >
< %systemroot%\Web\*.exe >
< %systemroot%\system32\msn\*.* >
< %systemroot%\system32\*.tro >
< %AppData%\Microsoft\Installer\msupdates\*.* >
< %ProgramFiles%\Messenger\*.* >
< %systemroot%\system32\systhem32\*.* >
< %systemroot%\system\*.exe >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >
< End of report >