This section includes InterviewSolutions, each offering curated multiple-choice questions to sharpen your knowledge and support exam preparation. Choose a topic below to get started.
| 4001. |
Solve : Network Drive Notification? |
|
Answer» Quick and easy one: Probably you have noticed that Windows 7 will pop up annoying messages when not being able to reconnect network drives on boot. If for some reason they have to be unavailable you can disable pop up message using FOLLOWING registry change: Haven't tested but presumed fixed. I'll be back if it doesn't work. |
|
| 4002. |
Solve : Monitors connected to Windows 7 shows unused space both sides? |
|
Answer» My desktop has two OS installed (dual boot): Windows 7 Home Premium and Windows XP Professional. And I have at home two monitors: one 22 inches and one 24 inches. |
|
| 4003. |
Solve : pdf files now appear as outlook files? |
|
Answer» My computer recently CONVERTED all my pdf DOCUMENTS into Outlook documents. I'm able to 'open with Adobe' but not convert it back to pdf. Therefore, I'm UNABLE to email these documents as they will then be attached as outlook documents. |
|
| 4004. |
Solve : How do I open different formats?II? |
|
Answer» How do I OPEN files in doc -- DOCX -- SIG -- htm formats? Thanks very MUCH for your HELP! |
|
| 4005. |
Solve : Computer Freeze/Crash While Playing Games? |
|
Answer» I will be playing a game. After 30-45 minutes, my monitor displays "no signal" and the audio repeats the last millisecond until I turn off the computer using the button. I have tried messing with the cables, nothing happened. Funnily enough, this once happened while I was Skyping and I was able to continue to continue the conversation without a problem (only my game audio had glitched out, Skype worked and my USB mic continued to function). But according to him, I had left the Payday game I was in. C:\Users\max\Desktop>ping www.google.com -t 1>>PingLog.txt I copied and pasted your code into a bat file. Nothing was modified. I ran this for about 30 minutes. (8:01 - 8:31 EST)Hmm... You should have gotten something like below. *Note: I had to ping local 127.0.0.1, because I am on a LAN that doesnt allow pings to and from the outside world from work computer. Quote Pinging 127.0.0.1 with 32 bytes of data: If you open up the PingLog.txt file it should look like what I had above vs what you have below which shows 7 instances. Running the batch script as I shared it without any alterations gives me the following results on Windows 7 64-bit Home Premium... Once again the info I have here shows unreachable and yours should show successful pings with ms responses like the one above that I did to home IP, but you dont want to ping home at 127.0.0.1, you need to ping www.google.com which will give you the most acurate results for for INTERNET connection because google is well established to give you a good baseline of your internet connection with multiple points of presence. Quote Pinging www.google.com [74.125.239.50] with 32 bytes of data:I had quite a few more than 7 instances, I just didn't include them since it all said the same thing. Those were the last few lines. Your script doesn't output for me what you expect it to. No idea why (probably my incompetence). But I tried pinging Google from CMD and this is what I got. Sent = 591, Recieved = 591, Lost = 0 Min = 55ms, Max = 194ms, Average = 64ms This is basically how it looked the whole time: I'm just giving up on this computer. Thanks for helping anyways, guys.Do you have another computer in the home that can play these games? That computer seems like a nice computer to give up on so early. |
|
| 4006. |
Solve : Slow Recycle Bin and cursor image freezes when dragging files? |
|
Answer» I have a Compaq Desktop computer, model # SR5710Y. It has 3 GB of RAM, and is a 64 bit operating system. It has a 220 GB hard drive with plenty of space, also an extra internal hard drive with loads of space, and an external WD hard drive with loads of space. I'm running Windows 7, service pack 1, and really just noticed these issues in the last few months. To my knowledge, no new software has been installed on the computer recently other than updates to already existing programs. I do have AVG Free 2014 running on the computer, and I occasionally perform scans with SuperAntiSpyware and Malwarebytes. Nothing of note has shown up in any of these scans, so I'm perplexed. As far as system restore, the only available dates to restore to are before i started noticing the problem, so I don't believe that will help If the dates are before then, they were created during a time when the system was healthy possibly. And so it should help to restore back to an earlier date if the problem wasnt present then. I am running a system with the cousin to your processor. I am running the Athlon 64 x2 4450B "Business Class" and I see that according to info from HP yours is the Athlon 64 x2 4450E with a slightly different Cache config. And its still a decent CPU for Windows 7 64-bit and most that I can throw at it such as PROCESSING video files etc. I also saw that your motherboard is made by ECS which is not a good brand, but some of their boards last and others have problems. *Given the age of this computer I would check to make sure that none of the cheap electrolytic capacitors around the motherboard are leaking or swollen as for this system could have bad capacitors that makes for this type of behavior. But I'd start with a system restore back to earlier date to see if this fixes the issue.oh, i'm sorry. what i meant to say is that the restore points were made AFTER the problem started. sorry about that. is there anything else i can try without having to meddle with the hardware?Does Windows Event Log show anything for Errors or Warnings? Sometimes you will find like Delayed Write messages which point to a failing hard drive etc. I use CrystalDiskInfo for looking at Hard Drive Health which is free to use and fast. http://crystalmark.info/download/index-e.html Just to rule this out as a possibility, I'd also perform a memory check with Memtest86 in which you burn the ISO to a CD or DVD and boot the system off of this disc and allow for it to scan the memory for about an hour or two. If there are no REPORTED problems in red then your good to go with memory. Lastly, I would attempt a clean install of Windows if possible if all checks out ok. And this will bring the OS back to a clean state. If the system acts up after a clean install, then its a hardware issue which is where you didnt want to have to go with this so avoided it in this response. |
|
| 4007. |
Solve : Netbook screen brightness control stopped working since screen replacement? |
|
Answer» Hi guys. I have an Acer Aspire One D257 netbook that's been upgraded to 2gb of ram and a 9-cell battery. This driver is likely part of a utility pack for the system, which should also be in the listing of available downloads from Acer. Before, when I had the older screen, I was able to access the default windows "brightness control" sliders, AND I was able to increase brightness with FN+left-arrow and decrease with FN+right-arrow. Now, with the new screen, this control is broken in windows, but not the bios or linux. I still have a feeling that this has to do with the video driver, but I seemenly can't re-install the driver from acer's driver website. I've re-installed the driver from that exact page months ago and it installed and worked perfectly. I'm pretty sure this has to do with the issue. [recovering disk space, attachment deleted by admin]Quote My guess is that your Acer has a similar tool that has these features and that is why you cant just adjust it from Windows display interface options. I agree with Dave on this ...Quote from: patio on May 09, 2014, 07:36:57 AM I agree with Dave on this ... Uhm, how about the FN+[horizontal arrow] shortcut on acer keyboards? That's the number one method to adjusting brightness on such Acer laptops. Also when the brightness worked, the brightness control slider in 'power properties'. I own 2 other acer laptops in the house and my brother has one too, they all worked exactly the same way. (in fact I've re-installed windows Alright. If this is going to be so hard to fix, would I be better off with spending a few hours backing my data up, re-installing windows, installing updates, and restoring data?There is an ePower Management Application that might be where the power management/brightness control features are. My Toshiba has a similar tool in Toshiba Tools, Power management. When you get to drivers listing, select the Application TAB for list of applications. Then download and install ePower Management Application which is 11.0MB in size. Then navigate to this control which may be after a reboot of the system and see if there are brightness control options in power management etc. You can also try the fn+brightness control after this and see if it works. http://www.acer.ca/ac/en/CA/content/driversQuote from: DaveLembke on May 09, 2014, 01:08:39 PM There is an ePower Management Application that might be where the power management/brightness control features are. My Toshiba has a similar tool in Toshiba Tools, Power management. nope, I've performed the installation of that piece of software, it made absolutely no difference just as I expected (..except for reset all of my custom power settings to default). Hm, would SIMPLY re-installing windows be the best option at this point?Quote nope, I've performed the installation of that piece of software, it made absolutely no difference just as I expected (..except for reset all of my custom power settings to default). Hm, would simply re-installing windows be the best option at this point? Earlier you stated: Quote (in fact I've re-installed windows So another reinstallation I dont believe will solve anything unless the first reinstallation was corrupted some how. With a direction to go in, if you want to give it another shot at a reinstall you can try that of Windows, but I feel you will be back where you started. Unless you were trying wrong drivers earlier and had them crash in which a clean install of Windows becomes a mine field of registry problems etc. At this point I am starting to wonder if they installed the correct display? Sometimes displays are available for sale that claim to work with a number of models but there are minor differences such as its possible that the dimmer control is not functional because of a wrong driver problem, yet this display states it works because sure it works... but the dimmer portion was never tested on your specific model. Maybe the chipset on the new display is incompatible with the original driver, yet Linux is happy with it because Linux is very good at auto detection of chipsets and setting up the correct drivers to control graphics and the dimmer circuit that is controlled through a chip on the display itself. If this is the case, you would need to track down the utility driver that matches up to the dimmer chipset that is in this display so that it can be installed for Windows. I'd look in Linux properties and see what driver it is using for the dimmer controller. Then research the Windows equivilent for that same driver. Or find out the dimmer chipset on this display and then try to track down the driver through the original replacement display manufacturer. Support can be hit and miss for drivers if this was made by some small chinese company etc. I have had to look up similar models that hardware was designed to work with before and then hunt down drivers off of those off models to try to fix problems like this with a slightly imperfect match. Usually for me, its when I am mixing server internal hardware components and need a driver for a card that normally isnt part of the original server, and I have to cross reference to the other server model since after all if its Server 2003 driver, it doesnt matter if the card is in a HP or Dell Server. The driver is OS specific, however HP doesnt have the Dell drivers so I had to install Dell driver on HP server. Long story with a very limited budget of a past employer to scrounge up mix-n-match piece a server together with just about no budget and taking 2 dead servers with 2 different problems and mixing together good hardware to have 1 good server from 2 dead ones, when the budget only covered the Server 2003 Standard License that we needed. Quote from: DaveLembke on May 09, 2014, 10:21:52 PM Earlier you stated: Wait.. sorry, I forgot to finish the thought.. I meant to say I re-installed windows on a DIFFERENT acer laptop (7741g) a long time ago. I found that the brightness control on it worked even before installing the video driver. However I've YET to do a windows re-install on the netbook I'm talking about, but might be close to deciding to do the first reinstall. Oh another thought, I JUST remembered.. When I first recieved the netbook back, my entire PC thought it was a 1024x768 display, and the bottom quarter of the screen has been cut off. I brought it back to the store and they changed the screen again with no extra cost. So now the resolution is normal and nothing is getting cut off, but now the backlight is stuck at full when the laptop is plugged in, AND when on battery the BIOS and linux can adjust brightness, but just not windows. But there's 2 concerns too about bringing it in again now, its been a few months since I brought it in for screen replacement, but ALSO I'm at the time of year at school where I NEED to bring it to school every day, so I can't wait another week for it. :l |
|
| 4008. |
Solve : How often to set restore points?? |
|
Answer» How often should one set a restore POINT on a machine. |
|
| 4009. |
Solve : GPT partition? |
|
Answer» Thanks guys. Managed to get it to install with JASON's info. Did the OP ever CONFIRM he is using 64 bit Windows 7? In the OP it is mentioned that they created GPT Partitions. Since 32-bit Windows cannot create GPT partitions, they must have been using 64-bit.See this http://www.winhelp.us/ntfs-permissions-in-windows.html Not applicable for FAT/FAT32, exFAT and not recommended for System partition drives.jason2074, excellent reference in the link above. Thanks. Hope the OP UNDERSTANDS the implication. When you have two Operating Systems using the same hard drive, you can have a permission conflict .Thanks for the info. |
|
| 4010. |
Solve : Automatic update problem? |
|
Answer» I run Win7 64 bit. I am having a problem with WINDOWS Update changing settings by itself. I prefer to get updates manually. I set update for "never check" until I choose to get updates. It resets itself for AUTOMATIC. How do I stop this? This problem arose after I reloaded Windows to fix a problem. Prior to that, I was able to do what I described above. THANK you to anyone that can help.Are you on an Admin User account when making the changes ? ? |
|
| 4011. |
Solve : Playback Devices Problem? |
|
Answer» Hi - first timer here. Hopefully, I'm posting in the right place. |
|
| 4012. |
Solve : Abnormal Screen Freezing Problem? |
|
Answer» I've got a 2 year old alienware laptop. Never had a problem in the past. Recently it crashed during a video (on DivX I think), it didn't do it frequently but it had happened before, so I HELD the power button as I usually do. Except when I restarted it took ages to reboot and switch on, then proceeded to be very slow. Now the slow boot-up time has stopped and its back up to speed, except when I use RAM intense programmes (such as gaming or HD video) I get frequent and short screen freezes, with seemingly no reason, the sound maintains and then the screen catches up (skipping the middle part), but they are incredibly annoying and make the tasks it used to be able to do annoying and unbearable. |
|
| 4013. |
Solve : Hi, something seems to be wrong with one of my files? |
|
Answer» Hello everyone |
|
| 4014. |
Solve : Google Chrome/Bing/IE? |
|
Answer» This may be long-winded, but here goes.... |
|
| 4015. |
Solve : My windows 7 Pro just crashed after I shut it down? |
|
Answer» Today I worked on some ministry work and one of our computers in the network, the MAIN one where i work on just lost the network connection, internet, system restore dont work, it cannot reinstall, I have tried nearly everything possible buT all I see is red circled crosses coming up. Any help out there please, I have wasted a FULL day and nothing happened.Red Circled Crosses after working on Ministry work!! ? .... |
|
| 4016. |
Solve : Windows 7 Kiosk mode? |
|
Answer» Hello, I am trying to write a script to run a PowerPoint presentation in kiosk mode that must be locked down and can't be interrupted. I made two accounts a Administrator account and a regular account named kiosk which I will be using to run the PowerPoint presentation. Using group POLICIES through MMC and the snap-in I have found a way so that the kiosk account logs in automatically and will than start my PowerPoint presentation in kiosk mode. The only problem I am having is finding a way to lock down my PowerPoint so that a user can't stop the presentation by for example hitting the Esc key, using cntrl+alt+delete, opening another program, etc....pretty much anything that would stop my PowerPoint presentation must be locked down or REMOVED. I know there is a fairly simple way to write a script so that it first checks to see if Powerpoint is RUNNING and than restarts it if anyone finds a way to stop the presentation. I am horrible at scripting and could REALLY use help with this..please help PEOPLE??Why not just block some keystrokes? Or damage the ESC key? |
|
| 4017. |
Solve : Diagnostic & Repair Utility? |
|
Answer» Is there a RELIABLE program out there that will diagnose and repair problems with missing FILES, missing drivers and/or driver updates, missing .dll files, program conflicts, etc. I know I'm asking a lot, but I've spent 3 days trying to track down why my computer is freezing up and running wickedly slow. Windows Explorer is constantly going down especially if I try to Right Click on a file for the Menu for Cut, Paste, Delete, etc. I've check the Device Manager and found 3 problems, however after visiting the manufacturer's website and downloading an Intel Chipset Driver, one of the yellow marked files with an exclamation point, just disappeared. Windows is telling me that the Teredo Tunneling Pseudo-Interface has the most recent update, yet it is still showing a yellow marker with the exclamation point. I've pulled every rabbit out of the hat that I know of so I was hoping there is a program that can help or is this something that I will have to use the Recovery disk for? Thank youI have generally with systems like this, backed up all information to an external drive, and then install clean to the SYSTEM, and then install a good antivirus first before reinstroducing the data back from the external HDD. And been done with it. |
|
| 4018. |
Solve : On Acer Laptop Keys change Characters? |
|
Answer» I'm running win7 |
|
| 4019. |
Solve : After holding the shift key for a while, I could not type in any window? |
|
Answer» It has happened occasionally that after holding the shift key down for some time (while thinking about what I was going to TYPE), I SAW a dialog box related to holding down the shift key, and then, after clicking Cancel, could not type in any window, and had to reboot. I'm guessing there's a key sequence to undo this (Shift F3 didn't work). If so, does anyone know what it is? I did find the following on the Internet (after I posted this topic): |
|
| 4020. |
Solve : Laptop Keeps turning off after getting hot? |
|
Answer» hi i have a toshiba satelite a205 model number psaf3u running vista it works but when it's been on for a while the left hand side gets hot and it swtiches itself off, could anyone tell me why this is HAPPENING thanksSome older laptops are known to run hot at the bottom. |
|
| 4021. |
Solve : I am back & have another problem regarding retrieving my videos from realplayer? |
|
Answer» Here's my problem. My computer shut down last July and I could have it fixed. The memory board shut down and my computer is completely shot. I've been going to the local library for internet use and whatnot. Here's where the problem comes in. If you remember I believe, I told you about saving my videos in realplayer. Now realplayer is realplayer cloud.I had an account with the old realplayer and not with realplayer cloud. I didnt save any of the realplayer videos to anything. No disk, DVD, nothing. Is there anyway I can somehow try to retrieve these videos, just so when I'm able to get my computer fixed that their there? Even if I cant get my computer fixed is there anyway that I could retrieve the videos and play them in the library? Please help. Thank you.u could remove the hard drive from your computer and place it into another computer or external hard drive case to retrieve your videosThe thing is that I cant turn my computer on to get the videos and transfer them. If I get my computer fixed I would be able to transfer the videos without a problem? Right now, I cant turn it on, so I guess I'm stuck. I wish there was a way I could use realplayer to retrieve my old videos.Jack, I think you completely missed the point made by hwrddrn in his/her reply to you. Read it again. What does it say? I'll reiterate what it says. It says to remove the hard drive from your non-functioning computer and put it in another computer or in an external hard drive enclosure. ... a while back I went to have it checked for free, to see what was wrong with it. They said my memory board was shot. They want 300 bucks to fix it. Let me ask.Are you absolutely sure they used the term "memory board"? Or, did they say motherboard? "Memory board" is not correct terminology, so I don't know for sure what it means. Quote from: Jack Catalano on May 13, 2014, 03:38:34 PM They want 300 bucks to fix it. Let me ask. Is it worth it?We don't know the make, model, and age of your computer. But, spending $300 would most likely not be a good idea. As you can see by looking at http://www.staples.com/Desktop-Computers/cat_CL167288, new computers can be found for $300. And i would actually put a priority on getting your Data back... The HDD can be removed...placed in an external enclosure...and connected to a working PC... |
|
| 4022. |
Solve : PC moving very slow, crashing on shutdown?? |
|
Answer» So, a problem has been occuring. I can't find a test case scenario where it'll guarantee to happen but some nights when I go to shut down my computer and go to bed, it will be on the "shutting down" screen of windows 7 and it will just hang and not do anything. Sometimes (but very rarely) after a long period of waiting it will shut itself off and then reboot itself back to the login screen (even if I press shut down and not restart), or it just won't and force shutting down by holding the power button will shut it off, but then bring it back on and to that screen. Then I can shut it down by pressing the power off icon on the login screen and then it usually will work. |
|
| 4023. |
Solve : computer not recognizing sd card? |
|
Answer» I have been trying to find the answer to why my computer (hp pavilion dm4 windows 7) does not recognize my sd card. I have had some issues with the computer slow and pro cleaners popping up, but do not know if I should run these (I am very much a beginner). I am hoping nothing happened to the driver, but when I scanned it, they were OK. I keep getting a message that my drivers are out of DATE. |
|
| 4024. |
Solve : Mystery Files? |
|
Answer» On My C Drive where my Program FILES, Driver, Users Windows folders are located, I found the attached files that have arrived fairly recently and I have no idea what they are or what they do. They are unlike any file I've seen before. Most of them have recent dates. Does anyone out there recognize what they are? I've tried putting one of them through the Search Engine, however, I get nothing back. Thanks |
|
| 4025. |
Solve : slow downloads? |
|
Answer» I MENTIONED a couple of weeks ago about slow downloads on windows 7. I have two locations on Vista 32 bit on adsl 2 download a file in 3 minutes. Equivalent download on NBN Wireless windows 7 is about 40 minutes Our government has introduced a boondoggle named NBN to GIVE all of Australia FAST downloads. Sorry doesn't work on either of my windows 7 machines. an xp laptop works okay. but is there something common about windows 7 downloading slowly I though I had solved this but I hadn't. On google there is several posts regarding windows 7 downloading slowly. HELP I pay extra for this fast download service which doesn't seem to exist. more information |
|
| 4026. |
Solve : Long Delay after logon ( Profile Related ) Looking for cause Win 7 64-bit Home P? |
|
Answer» So one of my Windows 7 64-bit systems recently started EXPERIENCING where the symptoms are: |
|
| 4027. |
Solve : Games minimize randomly/roughly hour long intervals? |
|
Answer» Hello there, I've looked at the usual suspects: security software (firewall, antivirus, anti-malware), no effect. What software have you used for prevention and detection? |
|
| 4028. |
Solve : PC running on Windows 7 shuts down after a few minutes of being powered on.? |
|
Answer» HELLO and thank you for TAKING the TIME to read this! My issue is that WHENEVER I turn on my PC after a few minutes of it being turned on it will completely shut down without warning. The only thing that I could think of was that it was overheating so I cleaned out all of the fans which were admittedly very clogged and then MONITORED the GPU's temperature which never went above 29 degrees before it shuts off. If anyone could help with this issue it would be immensely appreciated.More info would be helpful to know what you have here: Computer Make/Model And are all fans spinning freely that need to be? ( *Some fans have tach's that report the speed of them and if the system doesnt see the fan tach pulse it knows the blade is not spinning and it shuts down to protect even without an over temp condition. ) Download and install Speedfan from here to get a true picture of the temperatures inside your computer. |
|
| 4029. |
Solve : HP Pavilion 15-n252sq - Can not install Windows 7 over Free Dos? |
|
Answer» Hello all, I've recently bought a HP Pavilion 15-n252sq laptop, with Free DosWhat? Where? How? Hard to believe! Can anybody clarify this? Curious minds need to know. EDIT: NEVER mind. It was also posted on the HP forum. Found with Google 'HP Pavilion 15-n252sq' Quote from: Geek-9pm on May 18, 2014, 11:08:51 AM The OP said:What? Where? How?There's some stupid thing (law?) that states that all PCs sold from a big company like HP must ship with some sort of OS preinstalled. Therefore on cheaper systems that don't come with a Windows licence they tend to install FreeDOS. It's purely there to satisfy this law(?) - They don't expect people to actually run FreeDOS, the expect everyone to just remove it and put on their OS of choice. That said, I'd never bother buying a SYSTEM without a Windows licence (despite being almost entirely a Linux user myself) - There is a saving but it's very small, and not having a Windows licence can make the system much more difficult to SELL on down the line.camerongray, You are right on! A stupid law is like havering no law. One would think that the vendor would have to use a OS that is suitable to the hardware. If FreeDOS does not support dual-core, then it is not suitable for the hardware.Hey guys, I've managed to solve the windows issue ... it seems that this particular system (and most likely all the newest HP laptops) are Windows 8.1 compatible.. and ONLY windows 8.1 . But now, after installing windows, i can't install the nVidia video card... it's returns an error that it can't find the video adapter. I've installed first the Intel HD video adapter, rebooted, but then it STILL doesn't recognize the nvidia one. Any thoughts on this?Well you're on your own... As you have circumvented the manuf. liscense for that PC we can no longer assist. Topic Closed. |
|
| 4030. |
Solve : warning; unresponsive plugin? |
|
Answer» My computer keeps locking up and I get the message: unresponsive PLUGIN SHOCKWAVE........can't remember the rest of the message, senior moment! How to CORRECT?check to SEE if shockwave is updated |
|
| 4031. |
Solve : Laptop acting strange? |
|
Answer» Hi,so recently my laptop was shutting down extremely slow, so I decided to do a avg tune up, disk cleaner(which wasn't working) so I also did a anti-mal scan and avg scan. I think I turn it to safe mode once, but after that I have been unable to connect to the internet, wifi, no volume, the taskbar still looks in safe mode , the sticky notes(w/my reminders) has like no color. |
|
| 4032. |
Solve : Fresh install Question...? |
|
Answer» Been looking at a Lenovo laptop that is one of those ones that has Win 7 Pro 64bit installed when you get it, but has Win 8 license embedded I guess on the mobo so it's ready to upgrade to 8 which I'm not interested in doing. Any ideas / directions on how to do this would be greatly appreciated...Well, I say don't do it. The drivers are already installed. Bloatware overstated. You can remove it safety and gain drive space. Doing a fresh install is like cutting off toes to get rid of toenails. Before you do a fresh install, look at this: Bloatware: How to clean the crap off your PC Magical Jelly Bean KEY finder Should work. If the system came with Office or other similar APPLICATIONS you can get the Keys for those as well. If you are going to reinstall Windows It's usually better to download the drivers beforehand- just for convenience. I usually copy them to a flash drive myself, even if I have another system to use. |
|
| 4033. |
Solve : remove imesh toolbar? |
|
Answer» Greetings all,
OTL logfile created on: 5/20/2011 12:53:39 AM - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\computer 1\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 8.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 81.00% Memory free 15.00 Gb Paging File | 13.00 Gb Available in Paging File | 84.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 920.64 Gb Total Space | 770.54 Gb Free Space | 83.70% Space Free | Partition Type: NTFS Drive D: | 10.77 Gb Total Space | 1.55 Gb Free Space | 14.42% Space Free | Partition Type: NTFS Computer Name: COMPUTER1-PC | User Name: computer 1 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011/05/20 00:47:12 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\computer 1\Downloads\OTL.exe PRC - [2011/02/23 10:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011/02/23 10:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2011/02/23 10:04:17 | 000,121,000 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\afwServ.exe PRC - [2010/10/14 18:27:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2009/10/22 21:50:40 | 000,210,216 | ---- | M] (CyberLink) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe PRC - [2009/06/03 15:35:16 | 000,430,080 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe PRC - [2008/11/20 13:47:28 | 000,062,768 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe ========== Modules (SafeList) ========== MOD - [2011/05/20 00:47:12 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\computer 1\Downloads\OTL.exe MOD - [2011/02/23 10:04:17 | 000,197,208 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2010/11/20 06:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2011/02/23 10:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV:64bit: - [2011/02/23 10:04:17 | 000,121,000 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\afwServ.exe -- (avast! Firewall) SRV:64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:64bit: - [2010/06/29 12:49:27 | 000,128,752 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE) SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2010/10/14 18:27:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010/04/16 18:09:06 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010/01/06 11:58:00 | 003,482,384 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc) SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011/02/23 09:55:05 | 000,064,344 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:64bit: - [2010/01/09 15:22:06 | 000,012,368 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis.sys -- (aswNdis) DRV:64bit: - [2009/09/17 00:57:46 | 000,023,536 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- c:\Program Files\PC-Doctor for Windows\pcdsrvc_x64.pkms -- (PCDSRVC{F36B3A4C-F95654BD-06000000}_0) DRV:64bit: - [2009/08/28 20:42:52 | 000,049,152 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2009/07/30 12:12:56 | 000,339,744 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET) DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/06/10 15:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009/06/05 10:10:10 | 001,478,144 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2009/05/18 15:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - [2005/01/01 22:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPDSK/1 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{137E40F8-E8BB-4A81-A37F-4A2925743737} IE - HKLM\..\URLSearchHook: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com/ IE - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\..\URLSearchHook: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - Reg Error: Key error. File not found IE - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultengine: "" FF - prefs.js..browser.search.defaultenginen ame: "iMesh Web Search" FF - prefs.js..browser.search.defaultthis.en gineName: "NCH Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2117678&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "iMesh Web Search" FF - prefs.js..browser.search.selectedEngine: "iMesh Web Search" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.com/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: [emailprotected]:1.10.01 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: [emailprotected]:20110101 FF - prefs.js..extensions.enabledItems: [emailprotected]:1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}:6.0.25 FF - prefs.js..keyword.URL: "http://search.imesh.com/web?src=ffb&systemid=1&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\[emailprotected]: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011/02/28 00:01:24 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/05/09 08:37:46 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/09 08:37:46 | 000,000,000 | ---D | M] [2011/04/10 15:12:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Extensions [2010/04/27 17:08:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Extensions\[emailprotected] [2011/05/19 08:45:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions [2011/05/18 15:29:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} [2011/05/18 15:29:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2011/05/18 15:29:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions\{9565115d-c7d6-46d3-bd63-b67b481a4368} [2011/05/18 15:29:19 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011/05/18 15:29:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions\{c2db4fe6-8409-45ce-8010-189a7b5cce86} [2011/05/18 15:29:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} [2011/05/18 15:29:19 | 000,000,000 | ---D | M] (Yontoo Layers) -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\extensions\[emailprotected] [2011/03/12 19:23:11 | 000,002,427 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\askcom.xml [2010/07/28 17:44:18 | 000,002,331 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\bigseekpro.xml [2010/12/23 15:24:49 | 000,001,919 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\bing-zugo.xml [2011/01/17 15:40:58 | 000,000,909 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\conduit.xml [2010/09/02 03:09:28 | 000,002,486 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\iMeshWebSearch.xml [2011/05/19 08:44:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010/06/20 23:50:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010/09/22 21:19:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010/11/28 22:32:45 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011/02/06 11:51:48 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011/03/11 02:55:43 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011/05/19 08:44:27 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} [2011/04/01 21:50:28 | 000,000,000 | ---D | M] ("Savevid.com Easy Video Downloader") -- C:\PROGRAM FILES (X86)\SAVEVID\[emailprotected] [2011/02/28 00:01:24 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\WEBREP\FF [2011/04/14 05:08:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2010/09/02 03:09:28 | 000,002,486 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\iMeshWebSearch.xml O1 HOSTS File: ([2011/03/29 19:58:17 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll () O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg64.dll (Google Inc.) O2 - BHO: (MediaBar) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - File not found O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll () O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.) O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.) O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll () O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo Layers Client\YontooIEClient.dll (Yontoo Technology, Inc.) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll () O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll () O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3:64bit: - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\..\Toolbar\WebBrowser: (Zynga Toolbar) - {7B13EC3E-999A-4B70-B9CB-2617B8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.) O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation) O4:64bit: - HKLM..\Run: [PC-Doctor for Windows localizer] C:\Program Files\PC-Doctor for Windows\localizer.exe (PC-Doctor, Inc.) O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe () O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard) O4 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000..\Run: [SPMTray] C:\Program Files (x86)\SpeedingUpMyPC\SPMTray.exe (http://www.speedingupmypc.com/) O4 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\__aswSnx private storage\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0 O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\computer 1\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm () O8:64bit: - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O8:64bit: - Extra context menu item: Save video on Savevid.com - C:\Program Files (x86)\Savevid\redirect.htm () O8 - Extra context menu item: Free YouTube Download - C:\Users\computer 1\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm () O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.) O8 - Extra context menu item: Save video on Savevid.com - C:\Program Files (x86)\Savevid\redirect.htm () O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} http://www.superadblocker.com/activex/sabspx.cab (SABScanProcesses Class) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.68.166 68.87.74.166 O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\datamngr.dll) - File not found O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\IEBHO.dll) - File not found O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O28:64bit: - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011/05/19 10:21:24 | 000,000,000 | R--D | C] -- C:\32788R22FWJFW [2011/05/19 08:49:47 | 000,000,000 | ---D | C] -- C:\Users\computer 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis [2011/05/19 08:11:22 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2011/05/19 00:30:36 | 000,000,000 | ---D | C] -- C:\Users\computer 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2011/05/18 14:30:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group [2011/05/06 16:32:58 | 000,000,000 | ---D | C] -- C:\Users\computer 1\Desktop\2011-05-06 MR ROOTER [2011/05/05 08:44:15 | 000,000,000 | ---D | C] -- C:\Users\computer 1\New folder [2011/05/04 17:48:25 | 000,000,000 | ---D | C] -- C:\Users\computer 1\Desktop\2011-05-04 geo [2011/05/02 12:54:56 | 000,000,000 | ---D | C] -- C:\Users\computer 1\Desktop\2011-05-02 lyrics ========== Files - Modified Within 30 Days ========== [2011/05/20 00:51:10 | 000,001,187 | ---- | M] () -- C:\Users\computer 1\Desktop\OTL - Shortcut.lnk [2011/05/20 00:48:33 | 000,288,403 | ---- | M] () -- C:\Users\computer 1\Desktop\otl instruction.png [2011/05/20 00:24:14 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011/05/19 20:58:49 | 000,179,200 | ---- | M] () -- C:\Users\computer 1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/05/19 18:24:03 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011/05/19 17:09:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/05/19 08:57:08 | 004,351,682 | ---- | M] () -- C:\Users\computer 1\Desktop\ComboFix.exe [2011/05/19 08:49:47 | 000,002,999 | ---- | M] () -- C:\Users\computer 1\Desktop\HiJackThis.lnk [2011/05/19 08:40:34 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/05/19 08:40:34 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/05/19 08:11:15 | 1945,554,943 | -HS- | M] () -- C:\hiberfil.sys [2011/05/19 00:30:36 | 000,001,270 | ---- | M] () -- C:\Users\computer 1\Desktop\Revo Uninstaller.lnk [2011/05/18 14:13:02 | 000,001,280 | ---- | M] () -- C:\Users\computer 1\Desktop\Command Prompt.lnk [2011/05/18 12:35:31 | 000,001,854 | ---- | M] () -- C:\Users\PUBLIC\Desktop\avast! Internet Security.lnk [2011/05/18 12:35:20 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2011/05/16 12:24:12 | 000,307,572 | ---- | M] () -- C:\Users\computer 1\Documents\401k distribution.png [2011/05/13 14:25:25 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForcomputer 1.job [2011/05/06 17:41:41 | 000,000,872 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\wklnhst.dat [2011/05/05 11:57:39 | 000,150,605 | ---- | M] () -- C:\Users\computer 1\Desktop\GuideToUIBenefits.pdf [2011/05/05 11:50:37 | 000,001,023 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011/04/30 16:47:27 | 000,000,544 | ---- | M] () -- C:\Windows\tasks\PCDRScheduledMaintenance.job [2011/04/28 01:22:22 | 000,726,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011/04/28 01:22:22 | 000,623,940 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011/04/28 01:22:22 | 000,106,316 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat ========== Files Created - No Company Name ========== [2011/05/20 00:51:10 | 000,001,187 | ---- | C] () -- C:\Users\computer 1\Desktop\OTL - Shortcut.lnk [2011/05/20 00:48:33 | 000,288,403 | ---- | C] () -- C:\Users\computer 1\Desktop\otl instruction.png [2011/05/19 08:56:41 | 004,351,682 | ---- | C] () -- C:\Users\computer 1\Desktop\ComboFix.exe [2011/05/19 08:49:47 | 000,002,999 | ---- | C] () -- C:\Users\computer 1\Desktop\HiJackThis.lnk [2011/05/19 00:30:36 | 000,001,270 | ---- | C] () -- C:\Users\computer 1\Desktop\Revo Uninstaller.lnk [2011/05/18 14:13:02 | 000,001,280 | ---- | C] () -- C:\Users\computer 1\Desktop\Command Prompt.lnk [2011/05/16 12:24:11 | 000,307,572 | ---- | C] () -- C:\Users\computer 1\Documents\401k distribution.png [2011/05/06 17:48:25 | 002,141,463 | ---- | C] () -- C:\Users\computer 1\Documents\kodak easyshare manual.pdf [2011/05/05 11:57:39 | 000,150,605 | ---- | C] () -- C:\Users\computer 1\Desktop\GuideToUIBenefits.pdf [2011/02/28 17:45:02 | 000,025,099 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmpAACHEN-DOMGROOT.0 [2011/02/28 17:45:02 | 000,025,081 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmpAACHEN-DOMGROOT.JPG [2010/10/15 21:31:37 | 000,815,104 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010/10/15 21:31:37 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010/09/22 21:06:41 | 000,007,604 | ---- | C] () -- C:\Users\computer 1\AppData\Local\Resmon.ResmonCfg [2010/08/10 21:25:42 | 000,122,048 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp39868_1346405912446_1600245325_30777129_8086112_N.0 [2010/08/10 21:25:42 | 000,086,536 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp39868_1346405912446_1600245325_30777129_8086112_N.JPG [2010/08/10 21:25:30 | 000,009,558 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp39868_1346405912446_1600245325_30777129_8086112_N_navi.JPG [2010/07/02 15:20:24 | 000,000,043 | ---- | C] () -- C:\Windows\FFS20ChtReg.ini [2010/06/22 18:50:40 | 000,171,022 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmpSECUREDOWNLOAD.JPG [2010/05/25 11:05:43 | 000,036,171 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp30259_1137617818833_1779021922_252075_6494590_N.JPG [2010/05/24 10:03:58 | 000,018,533 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp28334_423795292497_774347497_5416005_6488181_N_navi.JPG [2010/05/24 10:03:55 | 000,095,569 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp28334_423795292497_774347497_5416005_6488181_N.0 [2010/05/24 10:03:55 | 000,083,513 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp28334_423795292497_774347497_5416005_6488181_N.JPG [2010/05/16 21:30:24 | 000,179,200 | ---- | C] () -- C:\Users\computer 1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/05/16 16:17:14 | 001,112,687 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.11 [2010/05/16 16:17:10 | 001,112,681 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.JPG [2010/05/16 16:16:35 | 001,112,647 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.10 [2010/05/16 16:16:28 | 001,112,495 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.9 [2010/05/16 16:16:27 | 001,112,548 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.7 [2010/05/16 16:16:27 | 001,112,495 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.8 [2010/05/16 16:16:26 | 001,112,510 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.6 [2010/05/16 16:16:25 | 001,112,473 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.5 [2010/05/16 16:16:24 | 001,112,543 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.4 [2010/05/16 16:16:23 | 001,112,525 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.3 [2010/05/16 16:16:21 | 001,112,545 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.2 [2010/05/16 16:16:20 | 001,112,708 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.1 [2010/05/16 16:16:19 | 001,864,186 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711.0 [2010/05/16 16:16:14 | 000,016,628 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp100_0711_navi.JPG [2010/05/09 22:00:54 | 000,039,058 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmpN115633981809538_7372.JPG [2010/05/09 22:00:54 | 000,014,258 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmpN115633981809538_7372_navi.JPG [2010/04/24 00:37:46 | 000,054,070 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146962497_774347497_5206755_3363509_N.4 [2010/04/24 00:37:44 | 000,054,438 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146962497_774347497_5206755_3363509_N.3 [2010/04/24 00:37:43 | 000,051,755 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146962497_774347497_5206755_3363509_N.2 [2010/04/24 00:37:42 | 000,052,140 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146962497_774347497_5206755_3363509_N.1 [2010/04/24 00:37:28 | 000,057,418 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146962497_774347497_5206755_3363509_N.0 [2010/04/24 00:37:28 | 000,052,140 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146962497_774347497_5206755_3363509_N.JPG [2010/04/24 00:32:22 | 000,063,609 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146652497_774347497_5206704_2792282_N.JPG [2010/04/24 00:32:01 | 000,075,181 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp23782_414146652497_774347497_5206704_2792282_N.0 [2010/03/19 00:52:24 | 000,000,281 | ---- | C] () -- C:\Windows\EReg213.dat [2010/03/18 00:41:05 | 000,039,382 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp24351_10150120671405361_758560360_11250166_6678926_N.3 [2010/03/18 00:41:05 | 000,039,380 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp24351_10150120671405361_758560360_11250166_6678926_N.4 [2010/03/18 00:41:04 | 000,039,389 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp24351_10150120671405361_758560360_11250166_6678926_N.2 [2010/03/18 00:41:02 | 000,039,424 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp24351_10150120671405361_758560360_11250166_6678926_N.1 [2010/03/18 00:40:56 | 000,006,965 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp24351_10150120671405361_758560360_11250166_6678926_N_navi.JPG [2010/03/18 00:40:27 | 000,044,576 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp24351_10150120671405361_758560360_11250166_6678926_N.0 [2010/03/18 00:40:27 | 000,039,379 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp24351_10150120671405361_758560360_11250166_6678926_N.JPG [2010/02/28 10:17:48 | 003,284,480 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll [2010/02/23 18:22:21 | 000,059,877 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp13559_166489250868_654450868_2952359_3307552_N.JPG [2010/02/23 18:21:27 | 000,055,690 | ---- | C] () -- C:\Users\computer 1\AppData\Local\tmp15446_200092388134_505063134_4073073_3881589_N.JPG [2010/02/20 13:22:44 | 000,000,000 | ---- | C] () -- C:\Windows\gstar.INI [2010/02/18 12:50:24 | 000,000,872 | ---- | C] () -- C:\Users\computer 1\AppData\Roaming\wklnhst.dat [2010/02/14 21:51:11 | 000,000,142 | ---- | C] () -- C:\Windows\ka.ini [2009/09/29 18:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL [2009/09/10 19:01:44 | 000,041,872 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll [2009/07/14 00:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009/07/13 21:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009/07/13 21:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009/07/13 19:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 16:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat ========== LOP Check ========== [2010/11/01 17:45:30 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\DVDVideoSoftIEHelpers [2011/05/18 15:29:18 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\GetRightToGo [2010/03/07 12:30:09 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\GOL_byHasbro [2010/04/22 17:24:33 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\Masque [2010/02/24 22:13:42 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\MP3Rocket [2011/04/02 21:51:02 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\NCH Swift Sound [2011/05/18 15:29:19 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\PhotoFiltre [2011/05/18 15:29:19 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\PictureMover [2010/03/05 22:11:28 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\PlayFirst [2011/05/18 15:28:49 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\Publish Providers [2011/03/12 19:32:27 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\RegistryKeys [2011/05/18 15:28:49 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\Sony [2010/12/18 18:58:29 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\Sony Creative Software Inc [2011/03/12 19:32:27 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\SpeedingUpMyPC [2010/04/05 21:30:26 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\Template [2011/05/19 22:43:55 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\TuneUpMedia [2010/02/13 19:50:17 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\WildTangent [2010/05/01 19:05:00 | 000,000,000 | ---D | M] -- C:\Users\computer 1\AppData\Roaming\WinBatch [2011/04/30 16:47:27 | 000,000,544 | ---- | M] () -- C:\Windows\Tasks\PCDRScheduledMaintenance.job [2011/05/12 10:48:57 | 000,032,638 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > OTL Extras logfile created on: 5/20/2011 12:53:39 AM - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\computer 1\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 8.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 81.00% Memory free 15.00 Gb Paging File | 13.00 Gb Available in Paging File | 84.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 920.64 Gb Total Space | 770.54 Gb Free Space | 83.70% Space Free | Partition Type: NTFS Drive D: | 10.77 Gb Total Space | 1.55 Gb Free Space | 14.42% Space Free | Partition Type: NTFS Computer Name: COMPUTER1-PC | User Name: computer 1 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 ========== Firewall Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector "{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 "{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources "{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo Layers Client 1.10.01 "{88E60521-1E4E-4785-B9F1-1798A4BD0C30}" = HP MediaSmart SmartMenu "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007 "{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9EFC40E3-5F31-4F75-8445-286273F74D8E}" = Apple Mobile Device Support "{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{B812FCC0-6192-4BFA-A9C6-1E8578F255DA}" = iTunes "{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64 "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DAE239CE-EB9D-4EB3-B0D4-528D6BAA48FD}" = Bonjour "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CCleaner" = CCleaner "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "NVIDIA Drivers" = NVIDIA Drivers "PC-Doctor for Windows" = Hardware Diagnostic Tools [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements "{08DB3902-2CE0-474D-BCE3-0177766CE9F1}" = HP Support Assistant "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime "{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works "{17B4760F-334B-475D-829F-1A3E94A6A4E6}" = HP Setup "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{1896E712-2B3D-45eb-BCE9-542742A51032}" = PictureMover "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 25 "{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections "{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1 "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery "{35021DFB-F9CA-402A-89A2-47F91E506465}" = HP MediaSmart/TouchSmart Netflix "{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support "{40719211-D09A-11DF-BA30-0013D3D69929}" = MSVCRT Redists "{40AE01BE-A290-4FFB-8DAB-C624C17DC87E}" = Vegas Movie Studio HD Platinum 10.0 "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor "{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites "{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack "{6D592E30-11EC-11E0-859C-0013D3D69929}" = Vegas Pro 10.0 "{7032B400-11EC-11E0-A9BF-0013D3D69929}" = MSVCRT Redists "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{7FC8C210-A319-4835-A87D-B935EFB4C148}" = Microsoft Live Search Toolbar "{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8D15E1B2-D2B7-4A17-B44B-D2DDE5981405}" = SaveVid Plug-in "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 "{90120000-0015-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 "{90120000-0019-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007 "{90120000-001A-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}_PROR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}_PROR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system "{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0000-1000-0000000FF1CE}_PROR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0409-1000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007 "{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0115-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0116-0409-1000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 "{90120000-0117-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007 "{91120000-0014-0000-0000-0000000FF1CE}_PROR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-0014-0000-0000-0000000FF1CE}_PROR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English) "{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9DEF9686-CCB2-47B7-BF83-B49EA21FA016}" = HP MediaSmart Demo "{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh "{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175 "{A54F806B-A2E1-4794-A7FE-365167EC67CB}" = Masque IGT Slots Little Green Men "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer "{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.2 "{B1924580-0C5D-11E0-B655-0013D3D69929}" = MSVCRT Redists "{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video "{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2continued .................. "{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer "{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}" = HP Support Information "{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Norton Online Backup "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{C611CF88-969D-43E6-A877-D6D6439DD081}" = HP Remote Solution "{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "{CC8E94A2-55C7-4460-953C-2A790180578C}" = LightScribe System Software "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update "{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{DF802C05-4660-418c-970C-B988ADB1D316}" = Microsoft Live Search Toolbar "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004) "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F59205C8-E5FB-43F5-AAB2-16C1760D4F59}" = FaceFilter Studio 2 Trial Edition "{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "avast" = avast! Internet Security "Bally Slots - HotShot" = Bally Slots - HotShot "Barbie(TM) Beauty Boutique(TM) CD-ROM" = Barbie(TM) Beauty Boutique(TM) CD-ROM "Bejeweled Twist" = Bejeweled Twist "conduitEngine" = Conduit Engine "DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar "ESET Online Scanner" = ESET Online Scanner v3 "Free 3GP Video Converter_is1" = Free 3GP Video Converter version 3.4 "Free YouTube Download_is1" = Free YouTube Download 2.10 "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "HP Remote Solution" = HP Remote Solution "HyperCam 2" = HyperCam 2 "HyperCam Toolbar" = HyperCam Toolbar "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe "InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video "InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "LEGO Friends" = LEGO Friends "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "MixPad" = MixPad Audio Mixer "Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17) "MP3 Rocket" = MP3 Rocket "Production Assistant" = Production Assistant 1.0 "PROR" = Microsoft Office Professional 2007 Trial "Revo Uninstaller" = Revo Uninstaller 1.92 "SaveVid Plug-in" = SaveVid Plug-in "SpeedingUpMyPC_is1" = SpeedingUpMyPC v2.2 "TuneUpMedia" = TuneUp Companion 1.6.4 "Uninstall_is1" = Uninstall 1.0.0.1 "WavePad" = WavePad Sound Editor "WildTangent hp Master Uninstall" = HP Games "WinLiveSuite" = Windows Live Essentials "Xfire" = Xfire (remove only) "Xvid_is1" = Xvid 1.2.1 final uninstall "ZD Soft Screen Recorder" = ZD Soft Screen Recorder 4.1.3.0 "Zynga Toolbar" = Zynga Toolbar ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-1456089544-1292380643-4181126952-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "HuluDesktop" = Hulu Desktop ========== Last 10 Event Log Errors ========== Error READING Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > Run OTL
IE - HKLM\..\URLSearchHook: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) IE - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\..\URLSearchHook: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - Reg Error: Key error. File not found FF - prefs.js..browser.search.defaultenginen ame: "iMesh Web Search" FF - prefs.js..browser.search.defaultthis.en gineName: "NCH Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2117678&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "iMesh Web Search" FF - prefs.js..browser.search.selectedEngine: "iMesh Web Search" FF - prefs.js..keyword.URL: "http://search.imesh.com/web?src=ffb&systemid=1&q=" [2011/03/12 19:23:11 | 000,002,427 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\askcom.xml [2010/07/28 17:44:18 | 000,002,331 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\bigseekpro.xml [2010/12/23 15:24:49 | 000,001,919 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\bing-zugo.xml [2010/09/02 03:09:28 | 000,002,486 | ---- | M] () -- C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\iMeshWebSearch.xml [2010/09/02 03:09:28 | 000,002,486 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\iMeshWebSearch.xml O2 - BHO: (MediaBar) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - File not found O2 - BHO: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKLM\..\Toolbar: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKU\S-1-5-21-1456089544-1292380643-4181126952-1000\..\Toolbar\WebBrowser: (Zynga Toolbar) - {7B13EC3E-999A-4B70-B9CB-2617B8323822} - C:\Program Files (x86)\Zynga\tbZyn0.dll (Conduit Ltd.) :Commands [purity] [emptytemp] [emptyflash] [Reboot]
Files\Folders moved on Reboot... C:\Users\computer 1\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... This is not a full log. Please, redo.Instead of clicking links that could themselves be dangerous, in order to remove a program you have installed, simply go back to a day before the program was installed, and do a System Restore. To be certain, look in Microsoft Knowledge Base and ask about System Restore, for your particular system. It will tell you exactly how to do it...and how to undo it, for that matter! Print out that info, and keep it...I guarantee you, you will use it in the future. If you don't know the exact date the program, like IMESH was installed, you must guess, and possibly redo it to an even earlier date, until the intruder is eliminated. This will remove any PROGRAMS installed since that date, but will not affect documents or emails you have MADE or received. Remember, you can UNDO a System Restore. In Windows XP, service pack 3, (Internet Explorer) I click "Start" then select "Help and Support", and then, under "Select a Task", choose, "Undo changes to your system with System Restore". Choose a date a day before you think it was installed, and bingo! You are rid of IMESH! I just did it! Yea!Quote in order to remove a program you have installed, simply go back to a day before the program was installed, and do a System Restore.Please, disregard the above. This is not a proper way to uninstall programs. Quote from: Broni on May 21, 2011, 09:19:12 AM Please, disregard the above. Not only that...it won't work.Broni - Turned off Avast and re-ran. Is this what your looking for ? thx. All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{7b13ec3e-999a-4b70-b9cb-2617b8323822} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\ not found. File C:\Program Files (x86)\Zynga\tbZyn0.dll not found. Registry value HKEY_USERS\S-1-5-21-1456089544-1292380643-4181126952-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{c2db4fe6-8409-45ce-8010-189a7b5cce86} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2db4fe6-8409-45ce-8010-189a7b5cce86}\ not found. Prefs.js: "iMesh Web Search" removed from browser.search.defaultenginen ame Prefs.js: "NCH Customized Web Search" removed from browser.search.defaultthis.en gineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2117678&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "iMesh Web Search" removed from browser.search.order.1 Prefs.js: "iMesh Web Search" removed from browser.search.selectedEngine Prefs.js: "http://search.imesh.com/web?src=ffb&systemid=1&q=" removed from keyword.URL File C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\askcom.xml not found. File C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\bigseekpro.xml not found. File C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\bing-zugo.xml not found. File C:\Users\computer 1\AppData\Roaming\Mozilla\Firefox\Profiles\ivpkydjd.default\searchplugins\iMeshWebSearch.xml not found. File C:\Program Files (x86)\Mozilla Firefox\searchplugins\iMeshWebSearch.xml not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\ not found. File C:\Program Files (x86)\Zynga\tbZyn0.dll not found. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7b13ec3e-999a-4b70-b9cb-2617b8323822} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\ not found. File C:\Program Files (x86)\Zynga\tbZyn0.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 not found. Registry value HKEY_USERS\S-1-5-21-1456089544-1292380643-4181126952-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7B13EC3E-999A-4B70-B9CB-2617B8323822} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7B13EC3E-999A-4B70-B9CB-2617B8323822}\ not found. File C:\Program Files (x86)\Zynga\tbZyn0.dll not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: AppData ->Temp folder emptied: 0 bytes User: computer 1 ->Temp folder emptied: 38137975 bytes ->Temporary Internet Files folder emptied: 38705586 bytes ->Java cache emptied: 37259 bytes ->FireFox cache emptied: 15249925 bytes ->Flash cache emptied: 7070 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 4744 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 1041861121 bytes Total Files Cleaned = 1,082.00 mb [EMPTYFLASH] User: All Users User: AppData User: computer 1 ->Flash cache emptied: 0 bytes User: Default User: Default User User: Public Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.22.3 log created on 05222011_154058 Files\Folders moved on Reboot... File\Folder C:\Users\computer 1\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\V7ZP969A\fault;sz=970x250,960x250;tile=1;dcopt=ist;kgender=f;k21=1;kauth=1;kga=1001;kar=3;klg=en;kage=21;kgg=2;kt=U;kcr=gb;dc_dedup=1;kmyd=ad_creative_1;ord=7951352747446915[1].htm not found! C:\Users\computer 1\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... Now you're talking. How are the issues? |
|
| 4034. |
Solve : Too many processes?? |
|
Answer» I'm using a Toshiba laptop with Vista. Recently it has become very slow, perhaps this is to be expected somewhat as it is a bit old. After booting up and opening Task Manager it shows over 60 processes, before I start doing anything; is this what is slowing it down? If so, which processes can I safely end?Exactly what is slow? Please define the problem in more detailOpening software (such as WORD and powerpoint) is slow. I use a 3d rendering program, and operations within it are much slower than they used to be. When playing videos (Youtube for example) it starts off fine but after a minute or so becomes "jerky".Have you run full scans with both your installed AV and MalwareBytes? If not, please do so now.I've run scans and found no problems. That's why I was wondering if the number of processes could be to blame?Open msconfig and on the General tab choose "selective startup" (uncheck all three items) and reboot. Does the problem still occur? If not, start adding items back to msconfig one or two at a time, rebooting after each change, until the problem reappears and you'll have identified the offending process. This is clearly a time consuming procedure, but it is the best WAY to determine if some process loading with the system is the cause of your problem. |
|
| 4035. |
Solve : Simple Change Is Eluding Me? |
|
Answer» I have two pc's, both operating with Windows 7 Pro 64 Bit. |
|
| 4036. |
Solve : bypassing windows start up? |
|
Answer» i have an unusual problem. i bought a hp desktop dc5800 sff on ebay. when i got the pc i hooked it up and turned it on.windows 7 pro starts loading but is password protected and i can't get a response back from the SELLER. its been 3 days. how can i reinstall windows to get AROUND this. i have a new windows cd but the desktop won't read the disc on reboot, it just keeps trying to LOAD the 7 pro and ASKING me for the password.You need to set the PC to boot to the DVD drive in the Bios... |
|
| 4037. |
Solve : IE 11 update not working? |
|
Answer» I am running Windows 7 Home Premium (64bit). I had IE 9 installed as I bought the notebook. |
|
| 4038. |
Solve : Chinese symbols in Windows Live dialogue-box? |
|
Answer» Hello I used to have Chinese installed a font so that I could be in English one moment and then, with the tab key, change to Chinese, but I uninstalled it months ago. Have you uninstalled Windows Live and reinstalled Windows Live yet? http://support.microsoft.com/kb/938275Hello DaveLembke Thanks for your reply. That's not easy to do because the uninstallation process through the CP is all in Chinese! I'm clicking on buttons without knowing what they say. Can I remove it in another WAY or just try installing a newer, English version, over what I have (2011)? Thanks again.If there is a newer version you can definately try that, but if the newer version inherrits setting info from the prior, you will be right back to the original problem. Question I have is.... why did you have chinese installed on this in the beginning if you cant read it? I originally read this as that you can read this, but want it all back to english.I just needed five symbols in crystal clear type to decorate a WEB page - I knew what those five symbols where, and no others!ok... fair enough... please try an update for that and see what happens. The worst case scenario is a reinstall of the OS, but there are things we can try before going that drastic. Such as sometimes this info resides hidden in a user profile properties and so creating a new user account on this computer and then logging in under that user instead as yourself as also an admin to the system you may find that everything is in english. I am currently dealing with trying to find a needle in a hay stack in my user profile of my one system at home which has a 1:09 delay between the time that you enter the user password and the desktop shows where I have a black screen with a pointer that I can move around in this black space. I created a new profile and the new profile logs in in 10 seconds cleanly.Hello Dave I have downloaded Windows Essentials 2012 which, I think, Windows Live is part of. Anyway, I downloaded a couple of photos into Windows Photo Gallery - part of Essentials as you will know - and the MENU along the top (File | Print, etc) is in English - a relief! Windows Live Messenger, which I thought had given way to Skype, and also part of Live, is also in English. So, it seems as if the older version, which was giving me the Chinese problem, has been pushed aside rather than inherited. Thanks for all your help! High1Sweet! Congrats on your success! |
|
| 4039. |
Solve : COM Surrogate? |
|
Answer» For quite a while my computer has been running very slow and freezing up frequently. I'm getting really tired of looking at that Hour Glass. I've also had PROBLEMS right clicking on files for a Menu and it takes sometimes more than a minute for the Menu to load. The computer is a Lenovo ideacentre and I am running Windows 7 Pro. The installed memory is 6.00GB, 64 bit system, and there is a total of 802 GB of Free Space on my DRIVE C. There are an average of 60 processes running at any one time. I began to wonder just what programs might be SLOWING it down as I do have a lot of security programs as well as Microsoft Office for Home and Student. When I clicked on the Task Manager and "Show Processes from all users" I noticed that there was one process that the name of it in the Description COLUMN would blink on and off. It was the COM Surrogate. The rest of the line would remain, but the description would blink intermittently. Now I notice that when I start the Task Manager there are 2 COM Surrogate processes listed, but they will both disappear, this time the whole line and do not reappear. Is there a way to correct this slowing & freezing problem and do you think it is related to the COM Surrogate process? Thank youWhat do you mean by "I do have a lot of security programs"? - You should only ever run one persistent Antivirus program at any one time, running multiple can lead to issues.StartupLite You should only ever run one persistent Antivirus program at any one time, running multiple can lead to issues.And only one Firewall.What I meant by a lot of security programs is that I have Norton Antivirus, Window's Security Center, and on a weekly to twice a week basis I run Malwarebytes, Spybot, CCleaner, and I run DeFraggler about once a month. Many of these are programs that you can see running processes on the Task Manager all the time. Sorry if I was a little confusing in my description. And as I am writing this the COM Surrogate process keeps going on and off in Task Manager. |
|
| 4040. |
Solve : windows 7 wont burn any cd's? |
|
Answer» hello there I am running windows 7 32bit home edition on my laptop and my laptop does not have a writable cd rom with it so I bought an external cd burner everything was fine for about a week burned NICE cd's and now as of 5/20 yesterday I tried to burn cd but nothing works. external burner is fine tested it on my friends comp works fine. tried to burn using windows explorer nothing,tried wmp12 nothing,tried realplayer nothing,tried third party cd burning software nothing will burn on my comp. I always get the error saying cannot finish burn process something went wrong. I have tried this. . I have also went threw about a dozen disks already because the burn process messes up the cd-rw disk and makes unusableHow about using CD-R discs instead?If fixing the software side doesn't help, then it looks like the issue is more of a hardware problem. Can you bring it back to the shop where you bought it and have it tested there? Or can you try using this burner to another computer. if it doesn't work then its already confirmed that you have a hardware problem. |
|
| 4041. |
Solve : RunDLL eror and BSOD? |
|
Answer» Hi, yesterday when i boot on my PC (windows7,64bit) 2 TASKS pop-up on desktop who say: core32_175.dll not working or something like this , and core64_175.dll "..." |
|
| 4042. |
Solve : chkdsk with ( fix )? |
|
Answer» After my Toshiba laptop with Windows 7 gave me a blue screen that I had never seen before I rebooted in safe mode and ran scandisk. |
|
| 4043. |
Solve : Laptop very slow after reinstall? |
|
Answer» Hello, 1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processorQuote 1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processor This just means that it will run Windows 7, but its by no means a claim that it will run well. The weakest CPU I ran Windows 7 32-bit on was a 2.0 Ghz socket 478 Pentium 4 and while it did run Windows 7, it ran it very sluggish and the single-core CPU was almost constantly at 100% and long pauses to wait for services to start up and programs to launch. The CPU was not a good match for Windows 7, so I went back to Windows XP on this system. Yet later Pentium 4's can run Windows 7 at a better pace. These are the later 2.66+ Ghz CPU's with more CACHE and others with Hyperthreading which are more powerful than early Pentium 4's.CPU seems to be the problem. It says that the minimum requirements are met but doesn't mean if you meet it, it runs faster. Try upgrading the memory as this seems to be the only option to make it fast, and use a 32bit operating system. |
|
| 4044. |
Solve : sudden BSOD when using uTorrent and Chrome, maybe not related? |
|
Answer» Hola |
|
| 4045. |
Solve : windows 7 start menu? |
|
Answer» what is the pixel width of the windows 7 start menu? Can somebody TELL me please I'm USING windows 8.1 and start is back but the start menu there is narrower than the original windows 7 menu and I need the leftwidth rightwidth and jumplistwidth DWORD values in pixels so I can add them to the registry folder of startisback and RESIZE the start menu(That's what their support staff said). |
|
| 4046. |
Solve : Jump List? |
|
Answer» As I understand, the jump LIST is the list that pops up when right-click a program button on the Windows 7 taskbar. But, there seems to be a similar jump list when clicking the arrow next to the program name on the Start menu. the same jumplist that was last seen when that program was running.What does that refer to? Quote from: BC_Programmer on April 30, 2014, 08:36:23 PM Recent Items are managed by the Windows Shell but don't appear in the start menu foldout unless the application took over management of it's recent items, and/or if that program has registered file associations. The Recent Items were once available for most of the programs in the Start Menu, but no longer available now for some of them. How should I make them available again? Quote from: Michael on April 30, 2014, 08:44:32 PM What does that refer to?The last jumplist the program had when it was running. A Jumplist is a property of a running Program; Pinned Start menu and Taskbar buttons will use the last Jumplist the program had available. Quote The Recent Items were once available for most of the programs in the Start Menu, but no longer available now for some of them. How should I make them available again? The Start Menu Options may have been changed. (Right-click, Properties, Start Menu Tab, Customize, the number of recent/frequent items may have been set to zero in the start menu).If I understand you correctly, the Start Menu foldout jump list is supposed to be the same as the one accessed from the taskbar. However, like I've mentioned earlier, they are not the same in my case. As for the "number of recent items to display in Jump Lists" in the Start Menu options, they are set to 10, but still they don't show up for some of the programs. Although I can use a workaround by pinning the programs to the taskbar, but I prefer not to congest my taskbar with too many programs.Quote from: Michael on April 30, 2014, 09:46:59 PM If I understand you correctly, the Start Menu foldout jump list is supposed to be the same as the one accessed from the taskbar.I don't believe that is what BC_Programmer was saying. Quote from: Michael on April 30, 2014, 09:46:59 PM However, like I've mentioned earlier, they are not the same in my case.Not the same in my Win 7 system either. I'm sure this is normal. Quote from: Michael on April 30, 2014, 09:46:59 PM As for the "number of recent items to display in Jump Lists" in the Start Menu options, they are set to 10, but still they don't show up for some of the programs.Same here. Can you state some programs for which they do not appear?Quote from: soybean on May 01, 2014, 03:25:10 PM I don't believe that is what BC_Programmer was saying.That's why I'm confused, because when he mentioned "the same jumplist that was last seen when that program was running. " I don't know which jump list he is referring to, because there seems to be two jump lists (start menu and taskbar), and maybe three if we include the one within the program itself. Quote from: soybean on May 01, 2014, 03:25:10 PM Not the same in my Win 7 system either. I'm sure this is normal.From MICROSOFT's website, the introduction to Jump List says this: To open a Jump List, just right-click a program button on the Windows 7 taskbar. (You can also get to Jump Lists by clicking the arrow next to the program name on the Start menu.) When it is said that we can access the Jump List by two ways, I'll assume the two lists should be the same. Quote from: soybean on May 01, 2014, 03:25:10 PM Same here. Can you state some programs for which they do not appear?Programs that don't show Recent: CorelDraw, Adobe Illustrator. Programs that show Recent: MS Excel, MS Word, Adobe Acrobat, Notepad.Quote from: Michael on May 01, 2014, 05:19:39 PM That's why I'm confused, because when he mentioned "the same jumplist that was last seen when that program was running. " I don't know which jump list he is referring to, because there seems to be two jump lists (start menu and taskbar), and maybe three if we include the one within the program itself. -Jump-lists are managed by the Application. -Applications cannot manage anything if they aren't running -Pinned Taskbar and Start Menu shortcuts have the last Jump-List that was visible for that program. Quote Programs that don't show Recent: CorelDraw, Adobe Illustrator.Do you have any non-commercial programs or any other programs that could serve as an example? I don't have either of those Programs. You also provide no Version- Version is important when it comes to support for new OS features such as Jump Lists. If a Program doesn't support Jump Lists, it's "Jump list" when right-clicking in the task bar will have an Item to launch a second instance (or try to) Close the window, and pin it to the taskbar. That's it- it will not contain Recent Items. If a Program does not support Jump Lists there will also be no foldout on the Start Menu: eg. Note that Notepad and Word both have a Foldout Arrow. However Config Tool and Update Lister do not. I know those two programs do not support Jump Lists because I wrote them and they had no need for that feature. I have an experimental version that has a Jump List of "Update Lister". If I install that, the Start menu looks the same- No Foldout for the Update Lister program. However, once I run the new version, the new JumpList appears on the Start Menu in a foldout. That is what I mean when I say that the Jump Lists are the last version thing seen when the Program was Running. Even after installing the new version, since I hadn't run it yet the Pinned Taskbar button and Start Menu Item didn't have a jump list. When I ran it and the new version CREATED a Jump List, it did. If I overwrite that new version with the old version that did not support Jump Lists, the Jump List will remain until I run that old version again, at which point the Jump List will go away. Basically the Two Jumplists when right-clicking a Pinned Program on the Taskbar and folding out a Pinned Program in the Start Menu will be Identical. The only reason I can think of for specific programs not working would be problems with those applications. As I've mentioned in my initial posts, the jump lists for these programs (CorelDraw, Adobe Illustrator) accessed from Start Menu foldout were working fine all the while until recent weeks. I'm using these programs every day so they should contain the latest recent items. Below is the comparison for the Jump Lists for Coreldraw as accessed from Start Menu foldout and Taskbar: If the two lists are supposed to be identical, I think the list should be associated with one particular system file which contains the INFORMATION. But since the two lists are shown to be different above, I believe the two lists are associated with two different system files instead. So, could it be the system file that manages the Jump List on Start Menu foldout for that particular program e.g. Coreldraw is somehow corrupted, causing the failure for the program to write to that file with updated data? Both of the JumpLists are acquired from data in %APPDATA%\Microsoft\Windows\Recent\AutomaticDestinations Each folder is the jump-list information for a program. So the question becomes, "Why do they differ?" Only reason I can think of would be if a Corel setting had been changed that causes it to empty out the Recent Jumplist Category before it exits. I suppose you could try to DELETE the contents of the AutomaticDestinations Folder, too. |
|
| 4047. |
Solve : unable to boot win7? |
|
Answer» Please be patient with me, this is my first post. |
|
| 4048. |
Solve : "Can't connect to proxy"? |
|
Answer» ???I have a LATITUDE D430: I get this message, use settings to deselect LAN, try to reselect. Cannot get past it: stuck.Some more detail would help. |
|
| 4049. |
Solve : install MS WORD? |
|
Answer» Is there anyone here who can assist me how to install MS WORD!!!The instructions are in the BOX. Did you BUY it retail? |
|
| 4050. |
Solve : Folder disappeared! HELP!!!? |
|
Answer» I was trying to take images from my camera to my external hard drive, so i used my win8 laptop(Beacause it has SD-reader) and marked all images, then right clicked and then HIT cut. Then i pasted it in a folder on my external harddrive(SEAGATE backup+). THen i unplugged, and connected harddrive to win7 alienware. When i then clicked the folder with the pictures the folder disappeared. I have tried this: Enabling hidden files, SEARCHED for it, checked the SD and tried NTFS Undelete.... I am now trying Recuva deep scan. HELP ME!Most likely since you used cut + paste you didnt WAIT long enough for all the pics to COPY... And i cant try again because i used CUT and that means it deletes the files from where they were when it`s finished! Why do it this way ? Any important files should always be verified as intact in any copy move operation... As Cameron alluded to above. You could try to run Recuva and see if it'll get any files back... |
|