I found this on my computer while looking for a document. It's on a TXT document, and it's not within "my documents". It sits on its own under my name (how I access my documents, etc. on Windows 7). Tried searching for this on here to see if it is something that has a reason to be there but could not find anything. Thanks for any assistance.


****** Opened file log at 4/20/2010 16:21:15 .Tracer (STIWOW64) , called from [wiawow64.exe]
Severity TracerName [ProcessThreadId] Time MessageText

e STIWOW64 [wiawow64.exe] USD failed Initialize method, returned error code (hex)=!x!.

******Closed trace log on 4/20/2010 16:21:15 Tracer (STIWOW64) , called from [wiawow64.exe]

****** Opened file log at 9/12/2010 9:05:18 .Tracer (STIWOW64) , called from [wiawow64.exe]
Severity TracerName [ProcessThreadId] Time MessageText

e STIWOW64 [wiawow64.exe] USD failed Initialize method, returned error code (hex)=!x!.

******Closed trace log on 9/12/2010 9:05:18 Tracer (STIWOW64) , called from [wiawow64.exe]

Odd. Let's take a closer look...

Please download OTL to your Desktop. (If you already have it downloaded, then just follow the instructions below).

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
• Under the Custom Scan box paste this in
  
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\*.exe /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.sys
  %systemroot%\system32\drivers\*.dll
  %systemroot%\system32\drivers\*.ini
  %systemroot%\system32\drivers\*.exe
  %systemroot%\system32\Spool\prtprocs\w32x86\*.dll
  %SYSTEMDRIVE%\*.*
  %PROGRAMFILES%\*.
  %appdata%\*.*
  netsvcs
  msconfig
  safebootminimal
  safebootnetwork
  activex
  drivers32
  /md5start
  eventlog.dll
  scecli.dll
  netlogon.dll
  cngaudit.dll
  sceclt.dll
  ntelogon.dll
  logevent.dll
  iaStor.sys
  nvstor.sys
  atapi.sys
  IdeChnDr.sys
  viasraid.sys
  AGP440.sys
  vaxscsi.sys
  nvatabus.sys
  viamraid.sys
  nvata.sys
  nvgts.sys
  iastorv.sys
  ViPrt.sys
  eNetHook.dll
  ahcix86.sys
  KR10N.sys
  disk.sys
  nvstor32.sys
  ahcix86s.sys
  nvrd32.sys
  symmpi.sys
  adp3132.sys
  mv61xx.sys
  usbstor.sys
  /md5stop
  CREATERESTOREPOINT
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  
  
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
  
  
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    
  • Please copy (Edit->Select All, Edit->Copy) and paste (Edit->Paste) the contents of these files, one at a time

Note: in the event that OTL fails to run, please use alternate download links to try again:

http://oldtimer.geekstogo.com/OTL.com
http://oldtimer.geekstogo.com/OTL.scr

OTL Extras logfile created on: 10/1/2010 11:22:51 PM - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Users\Tricia\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 65.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 72.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 448.65 Gb Total Space | 382.19 Gb Free Space | 85.19% Space Free | Partition Type: NTFS
Drive D: | 16.82 Gb Total Space | 2.74 Gb Free Space | 16.29% Space Free | Partition Type: NTFS
Drive E: | 99.02 Mb Total Space | 95.56 Mb Free Space | 96.51% Space Free | Partition Type: FAT32
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: TRICIA-PC
Current User Name: Tricia
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

Holy cow. Sorry about all the desktop stuff you have to look through. It's stuff that I need to put on an external hard drive that I haven't gotten around to doing !

OTL logfile created on: 10/1/2010 11:22:51 PM - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Users\Tricia\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 65.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 72.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 448.65 Gb Total Space | 382.19 Gb Free Space | 85.19% Space Free | Partition Type: NTFS
Drive D: | 16.82 Gb Total Space | 2.74 Gb Free Space | 16.29% Space Free | Partition Type: NTFS
Drive E: | 99.02 Mb Total Space | 95.56 Mb Free Space | 96.51% Space Free | Partition Type: FAT32
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: TRICIA-PC
Current User Name: Tricia
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/10/01 23:21:38 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Tricia\Desktop\OTL.exe
PRC - [2010/09/16 23:39:16 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010/07/20 21:24:38 | 002,434,568 | ---- | M] (Check Point Software Technologies LTD) -- C:\Windows\SysWOW64\ZoneLabs\vsmon.exe
PRC - [2010/07/20 21:22:56 | 001,038,848 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe
PRC - [2009/10/06 03:08:42 | 000,210,216 | ---- | M] (CyberLink) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
PRC - [2009/08/25 22:34:30 | 000,015,544 | R--- | M] () -- C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
PRC - [2009/07/26 20:44:34 | 000,113,488 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
PRC - [2009/02/06 21:07:48 | 000,027,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
PRC - [2009/01/21 16:00:54 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe
PRC - [2007/07/24 15:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe


========== Modules (SafeList) ==========

MOD - [2010/10/01 23:21:38 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Tricia\Desktop\OTL.exe
MOD - [2010/06/15 07:09:52 | 000,640,488 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\WOW64\Plugins\ISWSHEX.dll
MOD - [2010/06/15 07:09:44 | 000,562,664 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\WOW64\AK\icsak.dll
MOD - [2009/12/29 02:55:34 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll
MOD - [2009/07/13 21:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009/07/13 21:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
MOD - [2009/06/10 17:23:11 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\msvcr80.dll
MOD - [2009/06/10 17:23:11 | 000,554,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\msvcp80.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/06/15 07:10:02 | 000,823,272 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)
SRV:64bit: - [2010/06/08 15:17:27 | 000,247,808 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\stacsv64.exe -- (STacSV)
SRV:64bit: - [2010/06/08 15:17:26 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe -- (AESTFilters)
SRV:64bit: - [2009/09/04 17:35:12 | 000,873,248 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/07/08 17:49:02 | 000,030,520 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV - [2010/07/20 21:24:38 | 002,434,568 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\Windows\SysWOW64\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2010/03/29 08:53:22 | 000,068,000 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2010/03/18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/07/13 21:16:19 | 000,348,672 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2009/06/05 20:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009/01/21 16:00:54 | 000,065,536 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe -- (BRA_Scheduler)
SRV - [2007/07/24 15:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010/06/15 07:09:42 | 000,033,008 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)
DRV:64bit: - [2010/06/15 07:09:40 | 000,044,784 | ---- | M] (Check Point Software Technologies) [Kernel | On_Demand | Running] -- C:\Program Files\CheckPoint\ZAForceField\AK\icsak.sys -- (icsak)
DRV:64bit: - [2010/06/09 19:16:08 | 000,456,280 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vsdatant.sys -- (Vsdatant)
DRV:64bit: - [2010/06/08 15:17:27 | 000,505,344 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2010/06/08 15:11:23 | 003,060,800 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:64bit: - [2009/10/13 12:16:40 | 000,409,624 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009/10/12 23:00:52 | 000,151,040 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2009/10/12 18:15:26 | 000,351,248 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:64bit: - [2009/10/12 18:15:26 | 000,157,712 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
DRV:64bit: - [2009/10/02 23:58:12 | 000,258,560 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009/09/17 16:56:24 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2009/09/17 16:56:16 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2009/09/17 16:56:14 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2009/09/17 16:56:10 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2009/08/22 05:54:04 | 000,084,512 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2009/08/15 02:54:54 | 000,286,768 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2009/07/20 23:39:22 | 000,140,712 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2009/07/13 21:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009/07/13 21:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 19:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2009/07/08 17:49:08 | 000,030,008 | ---- | M] (Hewlett-Packard) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2009/07/08 17:48:50 | 000,041,272 | ---- | M] (Hewlett-Packard) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2009/06/29 14:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:64bit: - [2009/06/10 17:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009/06/10 17:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009/06/10 17:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009/06/10 17:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 16:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009/06/10 16:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009/06/10 16:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/04/29 12:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2010/06/09 19:16:08 | 000,456,280 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\vsdatant.sys -- (Vsdatant)
DRV - [2010/01/05 08:56:06 | 000,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2010/01/05 08:56:04 | 000,009,968 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2010/01/05 08:56:02 | 000,074,480 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {FFB96CC1-7EB3-449D-B827-DB661701C6BB}:1.5.152.10
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100823
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/02/11 15:29:54 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker [2010/08/03 08:11:22 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/09/16 23:39:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/09/16 23:39:17 | 000,000,000 | ---D | M]

[2010/02/13 23:39:19 | 000,000,000 | ---D | M] -- C:\Users\Tricia\AppData\Roaming\Mozilla\Extensions
[2010/02/12 23:51:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tricia\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010/09/29 21:27:57 | 000,000,000 | ---D | M] -- C:\Users\Tricia\AppData\Roaming\Mozilla\Firefox\Profiles\co6rdodu.default\extensions
[2010/08/31 07:38:02 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Tricia\AppData\Roaming\Mozilla\Firefox\Profiles\co6rdodu.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010/08/15 21:07:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/04/21 08:43:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/15 21:07:37 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (ZoneAlarm Toolbar Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (ZoneAlarm Toolbar Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3:64bit: - HKLM\..\Toolbar: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe ()
O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*



SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: vsmon - C:\Windows\SysWOW64\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 10.1
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\SysWOW64\Adobe
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:64bit: MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.IYUV - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.UYVY - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YUY2 - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVYU - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave5 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: midi - wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32: midi2 - wdmaud.drv (Microsoft Corporation)
Drivers32: midi3 - wdmaud.drv (Microsoft Corporation)
Drivers32: midi4 - wdmaud.drv (Microsoft Corporation)
Drivers32: midi5 - wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - midimap.dll (Microsoft Corporation)
Drivers32: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer2 - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer3 - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer4 - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer5 - wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.dvacm - C:\Program Files (x86)\Common Files\Ulead Systems\VIO\DVACM.acm (Corel TW Corp.)
Drivers32: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.MPEGacm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.siren - sirenacm.dll (Microsoft Corporation)
Drivers32: msacm.ulmp3acm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)
Drivers32: vidc.cvid - iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iyuv - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - msyuv.dll (Microsoft Corporation)
Drivers32: wave - wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32: wave2 - wdmaud.drv (Microsoft Corporation)
Drivers32: wave3 - wdmaud.drv (Microsoft Corporation)
Drivers32: wave4 - wdmaud.drv (Microsoft Corporation)
Drivers32: wave5 - wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - msacm32.drv (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2010/10/01 23:21:37 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Tricia\Desktop\OTL.exe
[2010/10/01 10:25:24 | 000,000,000 | ---D | C] -- C:\Users\Tricia\AppData\Local\Walmart MP3 Music Downloads
[2010/10/01 10:25:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Walmart MP3 Music Downloads
[2010/09/29 10:00:35 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ks.sys
[2010/09/18 08:48:34 | 000,000,000 | -H-D | C] -- C:\Users\Tricia\Desktop\backup
[2010/09/15 23:24:16 | 002,441,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iertutil.dll
[2010/09/08 07:55:09 | 000,000,000 | ---D | C] -- C:\Users\Tricia\Desktop\William J. Neal son of James H. & Barbara repass_files
[2010/09/08 07:54:14 | 000,000,000 | ---D | C] -- C:\Users\Tricia\Desktop\Mary Bell Neal d. of James H. and Rebecca Neal_files
[2010/09/08 07:53:04 | 000,000,000 | ---D | C] -- C:\Users\Tricia\Desktop\Overton Neal son of James H. & Cynthia_files
[2010/09/08 07:42:59 | 000,000,000 | ---D | C] -- C:\Users\Tricia\Desktop\thomas a. Neal dr_files
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/10/01 23:24:41 | 003,670,016 | -HS- | M] () -- C:\Users\Tricia\NTUSER.DAT
[2010/10/01 23:21:38 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Tricia\Desktop\OTL.exe
[2010/10/01 18:01:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/10/01 10:25:25 | 000,001,406 | ---- | M] () -- C:\Users\Public\Desktop\Walmart MP3 Music Downloads.lnk
[2010/10/01 07:27:55 | 000,156,414 | ---- | M] () -- C:\Users\Tricia\Desktop\Neel_James_Thornton Draft Card image 0022.jpg
[2010/09/29 18:01:22 | 000,000,848 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
[2010/09/29 10:24:46 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/09/29 10:24:46 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/09/29 10:17:54 | 000,000,144 | ---- | M] () -- C:\Windows\SysWow64\pdfl.dat
[2010/09/29 10:17:32 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/09/29 10:17:14 | 3163,709,440 | -HS- | M] () -- C:\hiberfil.sys
[2010/09/29 10:16:30 | 003,883,628 | -H-- | M] () -- C:\Users\Tricia\AppData\Local\IconCache.db
[2010/09/27 22:05:32 | 002,384,195 | ---- | M] () -- C:\Users\Tricia\Desktop\James Miller, Jacob Neal.jpg
[2010/09/27 21:37:31 | 000,028,646 | ---- | M] () -- C:\Users\Tricia\Desktop\page 2 ship register john neel.tiff
[2010/09/27 21:37:09 | 000,101,872 | ---- | M] () -- C:\Users\Tricia\Desktop\ship register john neel'.tiff
[2010/09/27 10:12:26 | 000,333,546 | ---- | M] () -- C:\Users\Tricia\Desktop\1870 census Owen age 72.gif
[2010/09/27 10:10:00 | 000,310,362 | ---- | M] () -- C:\Users\Tricia\Desktop\dvimage.gif
[2010/09/25 23:06:22 | 000,693,886 | ---- | M] () -- C:\Users\Tricia\Desktop\1900 Census Orlena and James
[2010/09/25 18:33:59 | 000,042,465 | ---- | M] () -- C:\Users\Tricia\Desktop\webkinz-logo.png
[2010/09/24 13:35:20 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForTricia.job
[2010/09/24 12:19:28 | 000,628,620 | ---- | M] () -- C:\Users\Tricia\Desktop\Waggoner will nc.jpg
[2010/09/23 10:57:19 | 000,000,068 | ---- | M] () -- C:\Users\Tricia\Desktop\Welcome to Webkinz™ - a Ganz website.URL
[2010/09/22 23:17:52 | 000,416,111 | ---- | M] () -- C:\Users\Tricia\Desktop\Allen George Neel and Mary Susan Patton m. 1869.jpg
[2010/09/21 11:55:27 | 001,037,702 | ---- | M] () -- C:\Users\Tricia\Documents\unk647.jpg
[2010/09/21 11:54:48 | 000,854,775 | ---- | M] () -- C:\Users\Tricia\Documents\unk646.jpg
[2010/09/21 11:54:12 | 001,437,553 | ---- | M] () -- C:\Users\Tricia\Documents\unk645.jpg
[2010/09/21 11:53:23 | 000,208,726 | ---- | M] () -- C:\Users\Tricia\Documents\unk644.jpg
[2010/09/18 12:32:53 | 455,885,796 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/09/18 08:48:51 | 000,032,015 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.JPG
[2010/09/18 08:48:46 | 000,024,993 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.6
[2010/09/18 08:48:44 | 000,025,170 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.5
[2010/09/18 08:48:43 | 000,025,047 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.4
[2010/09/18 08:48:39 | 000,025,250 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.3
[2010/09/18 08:48:36 | 000,025,351 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.2
[2010/09/18 08:48:34 | 000,025,236 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.1
[2010/09/18 08:48:34 | 000,025,104 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.0
[2010/09/17 18:14:49 | 003,744,227 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6799.JPG
[2010/09/17 15:12:48 | 000,028,646 | ---- | M] () -- C:\Users\Tricia\Desktop\Survey report for SAKER of London John Neel.tiff
[2010/09/17 14:19:53 | 000,391,386 | ---- | M] () -- C:\Users\Tricia\Desktop\Owen Neel land grant Monroe 1809.tif
[2010/09/17 13:27:29 | 000,117,238 | ---- | M] () -- C:\Users\Tricia\Desktop\Marriage Elsy Neel and John Patton.jpg
[2010/09/14 10:16:18 | 003,898,080 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6805.JPG
[2010/09/13 21:18:08 | 003,014,337 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6614.JPG
[2010/09/13 21:13:40 | 008,697,628 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6559.JPG
[2010/09/13 21:01:32 | 008,364,449 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6723.JPG
[2010/09/12 22:56:55 | 000,059,941 | ---- | M] () -- C:\Users\Tricia\Desktop\check lunch.jpg
[2010/09/12 09:08:36 | 001,758,607 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpUNK636.JPG
[2010/09/11 14:20:14 | 000,227,435 | ---- | M] () -- C:\Users\Tricia\Desktop\Isabelle Julia Neel marriage.jpg
[2010/09/11 00:23:55 | 000,020,102 | ---- | M] () -- C:\Users\Tricia\Desktop\Ardelia M. Lambert daughtr of Jeremiah&Eleanor WAGGONER Lambert & Robert M. Neel m. 19 Jul 1854 Tazewell.htm
[2010/09/10 23:51:29 | 001,494,219 | ---- | M] () -- C:\Users\Tricia\Desktop\Samuel S.,Edward S., Mildora S. Neel children of D.A.&Sarah death record.jpg
[2010/09/10 23:46:22 | 002,404,732 | ---- | M] () -- C:\Users\Tricia\Desktop\Robert Everton Neal son of James Henry Neal&Sinthia-Cynthia.jpg
[2010/09/10 23:43:28 | 002,404,732 | ---- | M] () -- C:\Users\Tricia\Desktop\Dorthula Slaughter &others death record Mercer.jpg
[2010/09/10 23:41:48 | 000,138,427 | ---- | M] () -- C:\Users\Tricia\Desktop\Stella Bell Neal death cert,daughter of James&Cynthia.gif
[2010/09/10 23:39:51 | 001,684,864 | ---- | M] () -- C:\Users\Tricia\Desktop\Various Neels death records,Elvira Eliz,Oakley Stonewall,Mary B.,.jpg
[2010/09/10 23:34:57 | 001,543,353 | ---- | M] () -- C:\Users\Tricia\Desktop\Leftwich C. Neel death record son of Henderson.jpg
[2010/09/10 23:32:40 | 000,141,759 | ---- | M] () -- C:\Users\Tricia\Desktop\Cyrus Neel son of Robert and Nancy Neel death cert. 18 Apr 1854.gif
[2010/09/10 23:12:43 | 000,062,405 | ---- | M] () -- C:\Users\Tricia\Desktop\Jasper Walker interview-son of Debbie J. & Sidney Neel Walker.html
[2010/09/10 23:08:29 | 000,351,605 | ---- | M] () -- C:\Users\Tricia\Desktop\1880 Tazewell Census-Thomas Jefferson,Robert R.,Robert,Daniel,Sirius W.,Henry or Harvey.gif
[2010/09/10 23:01:57 | 000,238,082 | ---- | M] () -- C:\Users\Tricia\Desktop\Thomas Neel, Jr. marriage to Jane Littrell 1848.jpg
[2010/09/10 22:57:45 | 000,238,491 | ---- | M] () -- C:\Users\Tricia\Desktop\Susan Neel marriage to Hansbarger 1860-daughter of Thomas&Mary Neel.jpg
[2010/09/10 22:52:06 | 000,139,710 | ---- | M] () -- C:\Users\Tricia\Desktop\Julia Neel marriage to Madison Smith 1835.jpg
[2010/09/10 22:32:58 | 001,353,400 | ---- | M] () -- C:\Users\Tricia\Desktop\Thomas A. Neal Orlenia and James Miller.jpg
[2010/09/10 16:13:26 | 000,135,980 | ---- | M] () -- C:\Users\Tricia\Desktop\John S. Neel death cert.gif
[2010/09/10 16:11:39 | 001,683,168 | ---- | M] () -- C:\Users\Tricia\Desktop\Anna Laura Neel marriage to T.W. Christie 8 July 1897.jpg
[2010/09/10 15:57:52 | 000,197,404 | ---- | M] () -- C:\Users\Tricia\Desktop\Rachel Neel marriage to Matthias Mcglammory 1802.jpg
[2010/09/10 15:50:46 | 001,465,537 | ---- | M] () -- C:\Users\Tricia\Desktop\Andrew Jackson Neal marriage to Mollie Carper.jpg
[2010/09/10 15:47:41 | 001,540,794 | ---- | M] () -- C:\Users\Tricia\Desktop\Orlenia marriage to James Miller Neel.jpg
[2010/09/10 15:45:22 | 001,540,794 | ---- | M] () -- C:\Users\Tricia\Desktop\Robert Neal-Laura Fitzwater marriage.jpg
[2010/09/10 15:43:49 | 001,494,162 | ---- | M] () -- C:\Users\Tricia\Desktop\D.B. Neal b.1898 child of Robt&Laura Neal.jpg
[2010/09/10 15:29:24 | 002,212,955 | ---- | M] () -- C:\Users\Tricia\Desktop\Leonidas Neal -Ardelia Neal.jpg
[2010/09/10 15:25:48 | 001,360,866 | ---- | M] () -- C:\Users\Tricia\Desktop\Ardelia Lambert Neel death record wife of Rbt Mathias Neel.jpg
[2010/09/10 15:24:19 | 002,236,506 | ---- | M] () -- C:\Users\Tricia\Desktop\Georgia May Neal birth record child of Robt Mathias&Ardelia Lambert.jpg
[2010/09/10 15:21:38 | 002,272,710 | ---- | M] () -- C:\Users\Tricia\Desktop\Ann L. Neal birth record-child of Robt mathias & Ardelia M. Lambert.jpg
[2010/09/09 16:07:44 | 001,139,767 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpUNK632.JPG
[2010/09/09 00:22:40 | 000,033,209 | ---- | M] () -- C:\Users\Tricia\Desktop\tricia patti.jpg
[2010/09/08 23:46:10 | 001,108,694 | ---- | M] () -- C:\Users\Tricia\Desktop\iris.jpg
[2010/09/08 07:55:10 | 000,001,841 | ---- | M] () -- C:\Users\Tricia\Desktop\William J. Neal son of James H. & Barbara repass.htm
[2010/09/08 07:54:15 | 000,001,817 | ---- | M] () -- C:\Users\Tricia\Desktop\Mary Bell Neal d. of James H. and Rebecca Neal.htm
[2010/09/08 07:53:07 | 000,001,793 | ---- | M] () -- C:\Users\Tricia\Desktop\Overton Neal son of James H. & Cynthia.htm
[2010/09/08 07:48:22 | 000,279,001 | ---- | M] () -- C:\Users\Tricia\Desktop\James H. Neal 1880 Census.gif
[2010/09/08 07:45:18 | 000,273,274 | ---- | M] () -- C:\Users\Tricia\Desktop\ta neal census 1880.gif
[2010/09/08 07:43:00 | 000,001,694 | ---- | M] () -- C:\Users\Tricia\Desktop\thomas a. Neal dr.htm
[2010/09/07 01:05:58 | 000,005,271 | ---- | M] () -- C:\Users\Tricia\Desktop\BRADLEY FIREMan hat.jpg
[2010/09/07 01:04:59 | 000,025,104 | ---- | M] () -- C:\Users\Tricia\Desktop\BRADLEY FIREMAN_crop.jpg
[2010/09/07 01:04:41 | 000,050,976 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN.JPG
[2010/09/07 00:32:21 | 000,050,976 | ---- | M] () -- C:\Users\Tricia\Desktop\bradley fireman.jpg
[2010/09/04 02:18:33 | 007,103,948 | ---- | M] () -- C:\Users\Tricia\AppData\Local\tmpUNK621.JPG
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/01 10:25:25 | 000,001,406 | ---- | C] () -- C:\Users\Public\Desktop\Walmart MP3 Music Downloads.lnk
[2010/10/01 07:27:53 | 000,156,414 | ---- | C] () -- C:\Users\Tricia\Desktop\Neel_James_Thornton Draft Card image 0022.jpg
[2010/09/27 22:05:32 | 002,384,195 | ---- | C] () -- C:\Users\Tricia\Desktop\James Miller, Jacob Neal.jpg
[2010/09/27 21:37:43 | 000,028,646 | ---- | C] () -- C:\Users\Tricia\Desktop\page 2 ship register john neel.tiff
[2010/09/27 21:37:26 | 000,101,872 | ---- | C] () -- C:\Users\Tricia\Desktop\ship register john neel'.tiff
[2010/09/27 10:12:26 | 000,333,546 | ---- | C] () -- C:\Users\Tricia\Desktop\1870 census Owen age 72.gif
[2010/09/27 10:10:00 | 000,310,362 | ---- | C] () -- C:\Users\Tricia\Desktop\dvimage.gif
[2010/09/25 23:06:21 | 000,693,886 | ---- | C] () -- C:\Users\Tricia\Desktop\1900 Census Orlena and James
[2010/09/25 18:33:59 | 000,042,465 | ---- | C] () -- C:\Users\Tricia\Desktop\webkinz-logo.png
[2010/09/24 12:19:24 | 000,628,620 | ---- | C] () -- C:\Users\Tricia\Desktop\Waggoner will nc.jpg
[2010/09/23 10:57:19 | 000,000,068 | ---- | C] () -- C:\Users\Tricia\Desktop\Welcome to Webkinz™ - a Ganz website.URL
[2010/09/22 23:17:51 | 000,416,111 | ---- | C] () -- C:\Users\Tricia\Desktop\Allen George Neel and Mary Susan Patton m. 1869.jpg
[2010/09/21 16:02:37 | 001,437,553 | ---- | C] () -- C:\Users\Tricia\Documents\unk645.jpg
[2010/09/21 16:02:37 | 001,037,702 | ---- | C] () -- C:\Users\Tricia\Documents\unk647.jpg
[2010/09/21 16:02:37 | 000,854,775 | ---- | C] () -- C:\Users\Tricia\Documents\unk646.jpg
[2010/09/21 16:02:37 | 000,208,726 | ---- | C] () -- C:\Users\Tricia\Documents\unk644.jpg
[2010/09/18 08:48:48 | 000,024,993 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.6
[2010/09/18 08:48:46 | 000,025,170 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.5
[2010/09/18 08:48:44 | 000,025,047 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.4
[2010/09/18 08:48:43 | 000,025,250 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.3
[2010/09/18 08:48:39 | 000,025,351 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.2
[2010/09/18 08:48:36 | 000,025,236 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.1
[2010/09/18 08:48:34 | 000,032,015 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.JPG
[2010/09/18 08:48:34 | 000,025,104 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN_CROP.0
[2010/09/17 18:14:49 | 003,744,227 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6799.JPG
[2010/09/17 15:22:41 | 000,028,646 | ---- | C] () -- C:\Users\Tricia\Desktop\Survey report for SAKER of London John Neel.tiff
[2010/09/17 14:21:43 | 000,391,386 | ---- | C] () -- C:\Users\Tricia\Desktop\Owen Neel land grant Monroe 1809.tif
[2010/09/17 13:27:28 | 000,117,238 | ---- | C] () -- C:\Users\Tricia\Desktop\Marriage Elsy Neel and John Patton.jpg
[2010/09/15 19:45:00 | 001,580,479 | ---- | C] () -- C:\Users\Tricia\Documents\unk611.jpg
[2010/09/14 10:16:18 | 003,898,080 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6805.JPG
[2010/09/13 21:18:08 | 003,014,337 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6614.JPG
[2010/09/13 21:13:40 | 008,697,628 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6559.JPG
[2010/09/13 21:01:32 | 008,364,449 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_6723.JPG
[2010/09/12 16:54:02 | 000,059,941 | ---- | C] () -- C:\Users\Tricia\Desktop\check lunch.jpg
[2010/09/12 09:08:36 | 001,758,607 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK636.JPG
[2010/09/11 14:20:13 | 000,227,435 | ---- | C] () -- C:\Users\Tricia\Desktop\Isabelle Julia Neel marriage.jpg
[2010/09/11 00:23:55 | 000,020,102 | ---- | C] () -- C:\Users\Tricia\Desktop\Ardelia M. Lambert daughtr of Jeremiah&Eleanor WAGGONER Lambert & Robert M. Neel m. 19 Jul 1854 Tazewell.htm
[2010/09/10 23:51:29 | 001,494,219 | ---- | C] () -- C:\Users\Tricia\Desktop\Samuel S.,Edward S., Mildora S. Neel children of D.A.&Sarah death record.jpg
[2010/09/10 23:46:22 | 002,404,732 | ---- | C] () -- C:\Users\Tricia\Desktop\Robert Everton Neal son of James Henry Neal&Sinthia-Cynthia.jpg
[2010/09/10 23:43:28 | 002,404,732 | ---- | C] () -- C:\Users\Tricia\Desktop\Dorthula Slaughter &others death record Mercer.jpg
[2010/09/10 23:41:48 | 000,138,427 | ---- | C] () -- C:\Users\Tricia\Desktop\Stella Bell Neal death cert,daughter of James&Cynthia.gif
[2010/09/10 23:39:51 | 001,684,864 | ---- | C] () -- C:\Users\Tricia\Desktop\Various Neels death records,Elvira Eliz,Oakley Stonewall,Mary B.,.jpg
[2010/09/10 23:34:53 | 001,543,353 | ---- | C] () -- C:\Users\Tricia\Desktop\Leftwich C. Neel death record son of Henderson.jpg
[2010/09/10 23:32:29 | 000,141,759 | ---- | C] () -- C:\Users\Tricia\Desktop\Cyrus Neel son of Robert and Nancy Neel death cert. 18 Apr 1854.gif
[2010/09/10 23:12:43 | 000,062,405 | ---- | C] () -- C:\Users\Tricia\Desktop\Jasper Walker interview-son of Debbie J. & Sidney Neel Walker.html
[2010/09/10 23:08:28 | 000,351,605 | ---- | C] () -- C:\Users\Tricia\Desktop\1880 Tazewell Census-Thomas Jefferson,Robert R.,Robert,Daniel,Sirius W.,Henry or Harvey.gif
[2010/09/10 23:01:57 | 000,238,082 | ---- | C] () -- C:\Users\Tricia\Desktop\Thomas Neel, Jr. marriage to Jane Littrell 1848.jpg
[2010/09/10 22:57:45 | 000,238,491 | ---- | C] () -- C:\Users\Tricia\Desktop\Susan Neel marriage to Hansbarger 1860-daughter of Thomas&Mary Neel.jpg
[2010/09/10 22:52:06 | 000,139,710 | ---- | C] () -- C:\Users\Tricia\Desktop\Julia Neel marriage to Madison Smith 1835.jpg
[2010/09/10 22:32:54 | 001,353,400 | ---- | C] () -- C:\Users\Tricia\Desktop\Thomas A. Neal Orlenia and James Miller.jpg
[2010/09/10 16:13:26 | 000,135,980 | ---- | C] () -- C:\Users\Tricia\Desktop\John S. Neel death cert.gif
[2010/09/10 16:11:39 | 001,683,168 | ---- | C] () -- C:\Users\Tricia\Desktop\Anna Laura Neel marriage to T.W. Christie 8 July 1897.jpg
[2010/09/10 15:57:52 | 000,197,404 | ---- | C] () -- C:\Users\Tricia\Desktop\Rachel Neel marriage to Matthias Mcglammory 1802.jpg
[2010/09/10 15:50:46 | 001,465,537 | ---- | C] () -- C:\Users\Tricia\Desktop\Andrew Jackson Neal marriage to Mollie Carper.jpg
[2010/09/10 15:47:41 | 001,540,794 | ---- | C] () -- C:\Users\Tricia\Desktop\Orlenia marriage to James Miller Neel.jpg
[2010/09/10 15:45:21 | 001,540,794 | ---- | C] () -- C:\Users\Tricia\Desktop\Robert Neal-Laura Fitzwater marriage.jpg
[2010/09/10 15:43:49 | 001,494,162 | ---- | C] () -- C:\Users\Tricia\Desktop\D.B. Neal b.1898 child of Robt&Laura Neal.jpg
[2010/09/10 15:29:23 | 002,212,955 | ---- | C] () -- C:\Users\Tricia\Desktop\Leonidas Neal -Ardelia Neal.jpg
[2010/09/10 15:25:48 | 001,360,866 | ---- | C] () -- C:\Users\Tricia\Desktop\Ardelia Lambert Neel death record wife of Rbt Mathias Neel.jpg
[2010/09/10 15:24:19 | 002,236,506 | ---- | C] () -- C:\Users\Tricia\Desktop\Georgia May Neal birth record child of Robt Mathias&Ardelia Lambert.jpg
[2010/09/10 15:21:31 | 002,272,710 | ---- | C] () -- C:\Users\Tricia\Desktop\Ann L. Neal birth record-child of Robt mathias & Ardelia M. Lambert.jpg
[2010/09/09 16:07:44 | 001,139,767 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK632.JPG
[2010/09/09 00:22:39 | 000,033,209 | ---- | C] () -- C:\Users\Tricia\Desktop\tricia patti.jpg
[2010/09/08 23:46:09 | 001,108,694 | ---- | C] () -- C:\Users\Tricia\Desktop\iris.jpg
[2010/09/08 07:55:09 | 000,001,841 | ---- | C] () -- C:\Users\Tricia\Desktop\William J. Neal son of James H. & Barbara repass.htm
[2010/09/08 07:54:14 | 000,001,817 | ---- | C] () -- C:\Users\Tricia\Desktop\Mary Bell Neal d. of James H. and Rebecca Neal.htm
[2010/09/08 07:53:04 | 000,001,793 | ---- | C] () -- C:\Users\Tricia\Desktop\Overton Neal son of James H. & Cynthia.htm
[2010/09/08 07:48:22 | 000,279,001 | ---- | C] () -- C:\Users\Tricia\Desktop\James H. Neal 1880 Census.gif
[2010/09/08 07:45:18 | 000,273,274 | ---- | C] () -- C:\Users\Tricia\Desktop\ta neal census 1880.gif
[2010/09/08 07:42:59 | 000,001,694 | ---- | C] () -- C:\Users\Tricia\Desktop\thomas a. Neal dr.htm
[2010/09/07 01:05:58 | 000,005,271 | ---- | C] () -- C:\Users\Tricia\Desktop\BRADLEY FIREMan hat.jpg
[2010/09/07 01:04:59 | 000,025,104 | ---- | C] () -- C:\Users\Tricia\Desktop\BRADLEY FIREMAN_crop.jpg
[2010/09/07 01:04:05 | 000,050,976 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpBRADLEY FIREMAN.JPG
[2010/09/07 00:32:20 | 000,050,976 | ---- | C] () -- C:\Users\Tricia\Desktop\bradley fireman.jpg
[2010/09/04 02:18:33 | 007,103,948 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK621.JPG
[2010/07/16 16:17:43 | 000,054,518 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0013.JPG
[2010/07/05 13:27:19 | 000,049,227 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0019.1
[2010/07/05 13:27:18 | 000,150,694 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0019.0
[2010/07/05 13:27:18 | 000,049,342 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0019.JPG
[2010/07/05 13:26:50 | 000,367,719 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0018.0
[2010/07/05 13:26:50 | 000,108,340 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0018.JPG
[2010/07/05 13:26:50 | 000,106,833 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0018.1
[2010/07/05 13:26:28 | 000,031,767 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0017.1
[2010/07/05 13:26:27 | 000,102,401 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0017.0
[2010/07/05 13:26:27 | 000,032,345 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0017.JPG
[2010/07/05 13:25:55 | 000,070,260 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0016.1
[2010/07/05 13:25:54 | 000,212,630 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0016.0
[2010/07/05 13:25:54 | 000,070,154 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0016.JPG
[2010/07/05 13:25:20 | 000,053,339 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0013.1
[2010/07/05 13:24:57 | 000,165,946 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0013.0
[2010/07/05 13:24:07 | 000,146,234 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0014.1
[2010/07/05 13:24:06 | 000,447,687 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0014.0
[2010/07/05 13:24:06 | 000,145,435 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0014.JPG
[2010/07/05 13:23:46 | 000,025,540 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0012.1
[2010/07/05 13:23:43 | 000,079,101 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0012.0
[2010/07/05 13:23:43 | 000,026,060 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0012.JPG
[2010/07/05 13:23:06 | 000,141,988 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0011.1
[2010/07/05 13:23:05 | 000,436,982 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0011.0
[2010/07/05 13:23:05 | 000,141,809 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0011.JPG
[2010/07/05 13:21:28 | 000,365,359 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0009.1
[2010/07/05 13:21:26 | 001,156,804 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0009.0
[2010/07/05 13:21:26 | 000,367,617 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0009.JPG
[2010/07/04 23:24:18 | 000,571,287 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK276.JPG
[2010/07/04 23:23:58 | 000,675,149 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK276.0
[2010/06/08 08:08:02 | 000,799,655 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_5373.JPG
[2010/06/08 08:08:01 | 003,465,760 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_5373.0
[2010/05/08 09:49:28 | 000,828,582 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4982.JPG
[2010/05/08 09:48:47 | 000,900,772 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4988.JPG
[2010/05/08 09:48:46 | 004,111,663 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4988.0
[2010/05/08 09:48:22 | 003,913,371 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4986.0
[2010/05/08 09:48:22 | 000,830,900 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4986.JPG
[2010/05/08 09:47:50 | 003,920,646 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4982.0
[2010/05/08 09:47:00 | 004,288,830 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4979.0
[2010/05/08 09:47:00 | 000,936,029 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4979.JPG
[2010/05/08 09:46:40 | 000,918,924 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4978.JPG
[2010/05/08 09:46:39 | 004,192,296 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4978.0
[2010/05/08 09:46:19 | 003,618,080 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4977.0
[2010/05/08 09:46:19 | 000,810,220 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4977.JPG
[2010/05/08 09:41:46 | 002,845,530 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4814.0
[2010/05/08 09:41:46 | 000,588,884 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4814.JPG
[2010/05/08 09:41:26 | 002,880,509 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4809.0
[2010/05/08 09:41:26 | 000,592,951 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4809.JPG
[2010/05/08 09:41:08 | 003,633,443 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4808.0
[2010/05/08 09:41:08 | 000,835,747 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4808.JPG
[2010/05/08 09:40:02 | 000,709,576 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4987.JPG
[2010/05/08 09:40:01 | 003,594,743 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4987.0
[2010/04/26 18:01:07 | 000,349,967 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4756.JPG
[2010/04/26 18:01:06 | 002,280,186 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4756.0
[2010/04/26 11:44:32 | 000,489,191 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4289.JPG
[2010/04/26 11:44:31 | 002,596,450 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpIMG_4289.0
[2010/04/07 01:51:55 | 002,969,224 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK103.JPG
[2010/04/02 17:35:23 | 003,078,080 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK041.JPG
[2010/04/02 17:35:22 | 002,886,326 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK041.0
[2010/04/02 00:28:08 | 000,397,650 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK022.1
[2010/04/02 00:28:07 | 000,545,970 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK022.0
[2010/04/02 00:28:07 | 000,407,620 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK022.JPG
[2010/04/02 00:17:48 | 000,312,944 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK021.1
[2010/04/02 00:17:47 | 000,436,515 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK021.0
[2010/04/02 00:17:47 | 000,313,953 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK021.JPG
[2010/04/02 00:08:49 | 000,278,802 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK020.1
[2010/04/02 00:08:48 | 000,378,091 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK020.0
[2010/04/02 00:08:48 | 000,276,845 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK020.JPG
[2010/04/01 23:57:48 | 000,466,406 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK019.1
[2010/04/01 23:57:47 | 000,569,894 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK019.0
[2010/04/01 23:57:47 | 000,464,183 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpUNK019.JPG
[2010/03/30 13:16:27 | 000,146,340 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmp001.0
[2010/03/30 13:16:27 | 000,109,877 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmp001.JPG
[2010/03/14 17:06:35 | 001,345,272 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0002.0
[2010/03/14 17:06:35 | 000,425,764 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSCAN0002.JPG
[2010/03/01 14:30:51 | 000,049,216 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSNAPSHOT_20100227_2.0
[2010/03/01 14:30:51 | 000,039,362 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpSNAPSHOT_20100227_2.JPG
[2010/02/15 16:06:45 | 000,467,680 | ---- | C] () -- C:\Users\Tricia\AppData\Local\tmpOLD MAN.JPG
[2010/02/14 18:15:05 | 000,000,848 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2010/02/11 15:29:36 | 000,000,364 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2010/02/11 14:38:35 | 000,000,000 | ---- | C] () -- C:\Users\Tricia\AppData\Local\QSwitch.txt
[2010/02/11 14:38:35 | 000,000,000 | ---- | C] () -- C:\Users\Tricia\AppData\Local\DSwitch.txt
[2010/02/11 14:38:35 | 000,000,000 | ---- | C] () -- C:\Users\Tricia\AppData\Local\AtStart.txt
[2010/02/11 14:38:33 | 000,000,195 | ---- | C] () -- C:\ProgramData\HPWALog.txt
[2010/01/20 06:01:14 | 000,000,105 | ---- | C] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
[2010/01/20 06:01:09 | 000,000,032 | ---- | C] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
[2010/01/20 06:00:58 | 000,000,032 | ---- | C] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
[2010/01/20 06:00:42 | 000,000,032 | ---- | C] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
[2010/01/20 06:00:08 | 000,000,032 | ---- | C] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
[2010/01/20 05:57:02 | 000,209,040 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeW7.dll
[2010/01/20 05:57:02 | 000,204,944 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeA6.dll
[2010/01/20 05:57:02 | 000,196,752 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeP6.dll
[2010/01/20 05:57:02 | 000,196,752 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeM6.dll
[2010/01/20 05:57:02 | 000,192,656 | ---- | C] () -- C:\Windows\SysWow64\IVIresizePX.dll
[2010/01/20 05:57:02 | 000,024,720 | ---- | C] () -- C:\Windows\SysWow64\IVIresize.dll
[2010/01/20 05:30:25 | 000,000,283 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini
[2010/01/20 05:30:25 | 000,000,224 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini
[2010/01/09 14:38:47 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
[2010/01/09 14:35:36 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
[2010/01/09 14:34:39 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
[2010/01/09 14:34:11 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
[2009/09/29 19:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

========== Custom Scans ==========


< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009/07/13 21:15:50 | 001,386,496 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\msvbvm60.dll

< %systemroot%\system32\*.exe /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.sys >

< %systemroot%\system32\drivers\*.dll >

< %systemroot%\system32\drivers\*.ini >

< %systemroot%\system32\drivers\*.exe >

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >

< %SYSTEMDRIVE%\*.* >
[2009/07/13 21:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
[2010/09/29 10:17:14 | 3163,709,440 | -HS- | M] () -- C:\hiberfil.sys
[2010/09/29 10:17:16 | 4218,281,984 | -HS- | M] () -- C:\pagefile.sys
[2 C:\*.tmp files -> C:\*.tmp -> ]

< %PROGRAMFILES%\*. >
[2010/01/09 14:13:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2010/03/02 13:27:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Brother
[2010/05/17 07:25:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Collage Maker 3.60
[2010/08/15 21:08:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2010/01/20 05:53:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Corel
[2010/01/09 14:39:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
[2010/04/01 15:23:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\epson
[2010/08/25 13:24:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hewlett-Packard
[2010/01/20 05:58:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP
[2010/01/09 13:17:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Games
[2010/08/25 13:27:28 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2010/01/20 05:37:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2010/09/29 10:16:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2010/08/15 21:07:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2010/01/20 05:31:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\JMicron
[2010/02/14 10:52:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/01/09 12:44:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2010/01/09 13:40:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2010/01/09 13:41:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
[2010/09/29 10:17:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2010/01/09 12:45:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2010/08/13 02:50:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
[2010/06/25 10:07:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2010/09/16 23:39:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2010/01/20 05:57:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSN
[2010/02/12 01:05:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2010/02/12 13:18:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NOS
[2010/02/11 14:31:36 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Online Services
[2010/02/13 17:20:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
[2010/01/20 05:32:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2010/02/12 23:10:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SUPERAntiSpyware
[2009/07/14 00:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2010/10/01 10:25:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Walmart MP3 Music Downloads
[2009/07/14 01:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2010/01/09 12:45:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2010/01/09 12:44:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live SkyDrive
[2010/05/13 00:37:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2010/01/20 05:55:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Components
[2010/02/12 01:13:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2009/07/14 01:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2009/07/14 01:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2010/02/11 14:31:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2010/02/11 18:29:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Zone Labs

< %appdata%\*.* >


< MD5 for: AGP440.SYS >
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: DISK.SYS >
[2009/07/13 21:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysWow64\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.sys
[2009/07/13 21:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\winsxs\amd64_disk.inf_31bf3856ad364e35_6.1.7600.16385_none_55bb738b8ddd8a01\disk.sys

< MD5 for: EVENTLOG.DLL >
[2007/05/18 01:34:04 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\CyberLink\PowerDirector\EventLog.dll

< MD5 for: IASTOR.SYS >
[2009/08/08 00:17:26 | 000,330,264 | ---- | M] (Intel Corporation) MD5=01446278D4563B3013C92830AE6CBB26 -- C:\SwSetup\Drivers\IMSM\Winall\Driver\IaStor.sys
[2009/10/13 12:09:36 | 000,331,288 | ---- | M] (Intel Corporation) MD5=0BAA4115DFFFD6A6D809A89D65E1281A -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\driver\IaStor.sys
[2009/08/08 00:24:14 | 000,408,600 | ---- | M] (Intel Corporation) MD5=BBB3B6DF1ABB0FE35802EDE85CC1C011 -- C:\SwSetup\Drivers\IMSM\Winall\Driver64\IaStor.sys
[2009/08/08 00:24:14 | 000,408,600 | ---- | M] (Intel Corporation) MD5=BBB3B6DF1ABB0FE35802EDE85CC1C011 -- C:\Windows\SysWow64\DriverStore\FileRepository\iaahci.inf_amd64_neutral_4fa22a1c88c09097\iaStor.sys
[2009/10/13 12:16:40 | 000,409,624 | ---- | M] (Intel Corporation) MD5=BE7D72FCF442C26975942007E0831241 -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys
[2009/10/13 12:16:40 | 000,409,624 | ---- | M] (Intel Corporation) MD5=BE7D72FCF442C26975942007E0831241 -- C:\Windows\SysWow64\DriverStore\FileRepository\iaahci.inf_amd64_neutral_6fca727099cdabf1\iaStor.sys

< MD5 for: IASTORV.SYS >
[2009/07/13 21:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/13 21:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2009/07/13 21:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009/07/13 21:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009/07/13 21:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009/07/13 21:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2009/07/13 21:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/13 21:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009/07/13 21:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009/07/13 21:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009/07/13 21:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/13 21:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

< MD5 for: USBSTOR.SYS >
[2009/07/13 20:06:34 | 000,089,600 | ---- | M] (Microsoft Corporation) MD5=080D3820DA6C046BE82FC8B45A893E83 -- C:\Windows\SysWow64\DriverStore\FileRepository\usbstor.inf_amd64_neutral_c301b770e0bfb179\USBSTOR.SYS
[2009/07/13 20:06:34 | 000,089,600 | ---- | M] (Microsoft Corporation) MD5=080D3820DA6C046BE82FC8B45A893E83 -- C:\Windows\winsxs\amd64_usbstor.inf_31bf3856ad364e35_6.1.7600.16385_none_a47b405db18421ea\USBSTOR.SYS

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
< End of report >

Scan with Malwarebytes' Anti-Malware

Please open Malwarebytes' Anti-Malware, click the Update tab, and click Check for Updates. Then, click the Scanner tab, select Perform Quick Scan, and press Scan. Remove selected, and post the log in your next reply.

This is what happened. I tried to access MB through my start menu. It gave the option to uninstall or go to the help menu. I could not do anything else with it. I tried to uninstall, but it told me it could not be found and that it may have already been uninstalled. I tried to install it again, and it gave me a series of error messages. First one - "vbAccelerator SGnd II". Next one - "RunTime Error 0". Third one - "error 440 auto error". Last one (even though it let me install it - "732 (0,0)" when I tried to update it.

Disregard my last post. The scan is working now.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4733

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

10/2/2010 12:19:04 PM
mbam-log-2010-10-02 (12-19-04).txt

Scan type: Quick scan
Objects scanned: 137057
Time elapsed: 4 minute(s), 0 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Ok. No malware. I am guessing this document is safe, and is used for the operation of your computer.

thanks !

You're welcome. Glad I could help.

This was on another Notepad (text document?) located on C-Windows-debug-WIA. I'm assuming this is related........it was actually a LOT more to it than this copy/paste below. I just copied a bit of it here. This first line indicates last year, but I didn't purchase this computer until around April of this year. There are dates to indicate that this is a regular process, for lack of a better way to put it. It pretty much goes all the way until present.



**************** Started trace for Module: [sti_ci.dll] in Executable [setup.exe] ProcessID: [740] at 2009/09/06 18:00:30:541 ****************
WIA: 740.744 0 0 0 [sti_ci.dll] ERROR: OnDIF_DESTROYPRIVATEDATA, Invalid argument.

**************** Started trace for Module: [sti_ci.dll] in Executable [setup.exe] ProcessID: [760] at 2010/01/09 08:36:56:309 ****************
WIA: 760.764 0 0 0 [sti_ci.dll] ERROR: OnDIF_DESTROYPRIVATEDATA, Invalid argument.

**************** Started trace for Module: [sti_ci.dll] in Executable [setup.exe] ProcessID: [752] at 2010/01/20 01:27:18:656 ****************
WIA: 752.756 0 0 0 [sti_ci.dll] ERROR: OnDIF_REMOVE, SetupDiGetClassInstallParams() failed. Err=0xe0000215.

**************** Started trace for Module: [sti_ci.dll] in Executable [setup.exe] ProcessID: [752] at 2010/01/20 01:28:00:745 ****************
WIA: 752.756 0 0 0 [sti_ci.dll] ERROR: OnDIF_DESTROYPRIVATEDATA, Invalid argument.

**************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [5100] at 2010/02/14 17:11:54:013 ****************
WIA: 5100.2512 276965 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.2512 276996 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.2512 277401 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.2512 334061 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.5020 918768 0 0 [wiaservc.dll] ERROR: USDWrapper::LoadDriver, We encountered an error attempting to load driver for (Canon EOS DIGITAL REBEL XS), error (0x8000ffff)
WIA: 5100.5020 918768 0 0 [wiaservc.dll] ERROR: USDWrapper::WIA_drvLockWiaDevice, We failed to make the call to IWiaMiniDrv::drvLockWiaDevice for (Canon EOS DIGITAL REBEL XS) because the driver could not be loaded
WIA: 5100.5020 918768 0 0 [wiaservc.dll] ERROR: LOCK_WIA_DEVICE::LOCK_WIA_DEVICE, Failed to lock WIA device (8000ffff)
WIA: 5100.4356 1321391 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.4356 1321766 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.4356 1321766 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.4356 1322046 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.4356 1322046 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 5100.4356 1359424 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context

**************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [2132] at 2010/02/15 07:07:49:956 ****************
WIA: 2132.5032 56044591 0 0 [wiaservc.dll] ERROR: CEventNotifier::AddEventGUID, Returning failure hr = 0x80070005
WIA: 2132.5032 56044607 0 0 [wiaservc.dll] ERROR: CEventNotifier::AddEventGUID, Returning failure hr = 0x80070005
WIA: 2132.5032 56044607 0 0 [wiaservc.dll] ERROR: CEventNotifier::AddEventGUID, Trying to register application for a unknown global event
WIA: 2132.5032 56044607 0 0 [wiaservc.dll] ERROR: CEventNotifier::AddEventGUID, Returning failure hr = 0x80070057

**************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [2480] at 2010/02/25 08:52:03:894 ****************
WIA: 2480.6028 43741355 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 2480.6028 43741370 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 2480.6028 43742166 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context
WIA: 2480.4144 43855204 0 0 [wiaservc.dll] ERROR: CWiaDrvItem::GetDeviceSpecContext, GetDeviceSpecContext, NULL device specific context

**************** Started trace for Module: [sti_ci.dll] in Executable [DrvInst.exe] ProcessID: [3416] at 2010/03/02 12:15:59:842 ****************
WIA: 3416.5052 16 0 0 [sti_ci.dll] ERROR: CUniqueId::IsUnique, NULL string is given.

**************** Started trace for Module: [wiaservc.dll] in Executable [svchost.exe] ProcessID: [2348] at 2010/03/02 11:07:36:876 ****************
WIA: 2348.2432 4103279 0 0 [wiaservc.dll] ERROR: USDWrapper::LoadDriver, Error loading driver for (No friendly name): IStiUSD::Initialize failed with hr = 0x8007000E
WIA: 2348.2432 4103279 0 0 [wiaservc.dll] ERROR: USDWrapper::LoadDriver, We encountered an error attempting to load driver for (No friendly name), error (0x8007000e)
WIA: 2348.4968 6043136 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.2328 6044555 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.2328 6049001 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.2328 6049017 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.2328 6066006 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.2328 6066006 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6105942 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6195689 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6217342 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6217358 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6234299 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6234299 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6246889 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6246904 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6263815 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.4980 6263815 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.1600 6286669 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6354217 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6354233 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6371128 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6371128 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.1600 6416961 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.1600 6460984 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.1600 6461000 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.1592 6477848 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.1592 6477848 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.1592 6518034 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6571308 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6571324 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6588234 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6588234 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6627235 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6683801 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6683816 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder
WIA: 2348.772 6700805 0 0 [wiaservc.dll] ERROR: CEnumWiaItem::Initialize, CEnumWiaItem::Initialize, pInitialFolder is not a folder

That has to do with imaging software related to a camera you are using. It provides no data that I can understand.

However, it seems safe.

Ok. Thank you.