cant drag from favourites to desktop

ding dong

Member
I cant drag anything from my favourites file to my desktop - sure i used to be able to do this.

it comes up with a funny little transparent envelope thing. but wont drop onto the desktop
 

My Computer

System One

  • Manufacturer/Model
    HP Pavillion dv5
Hello ding dong and welcome to the forums :party:

Is this a recent problem? If so, please do a system restore to a time before the problem started

http://www.vistax64.com/tutorials/76905-system-restore-how.html

If it isn't, then please do an SFC scan:

SFC Scan


  1. Open the start menu
  2. In the search box, type cmd
  3. Right click on cmd and select Run as administrator
  4. In command prompt, type:

    sfc /scannow

  5. Let it run and let me know if it finds any Integrity Violations


Tom
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
tried system restore but it said that it didnt restore anything for some reason.

So i did your scan and this is the result;
 

Attachments

  • Capture.JPG
    Capture.JPG
    49.1 KB · Views: 75

My Computer

System One

  • Manufacturer/Model
    HP Pavillion dv5
Hmm, that's odd. Can you run OTL for me please? It will give me a little information about how your computer is set up:

OTL

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Under the Standard Registry box change it to All.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.


Once OTL has completed its first scan it will save notepad copies of the scans in the folder that OTL was started from. Unless set to produce an Extras log it will only produce OTL.txt in subsequent scans.

A copy of an OTL fix log is saved in a text file at

:\_OTL\MovedFiles
in most cases this will be C:\_OTL\MovedFiles

Tom
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
Hello Ding Dong, hi Tom

Sorry to interrupt this,
but I just wanted to ask something to Ding Dong.
I assume you mean the Internet Explorer Favorites.
From which location you drag them?
A) From the Favorites folder which is located in your account folder,
and can be opened by entering Favorites in the program Run, and then pressing Enter.
B) By clicking the Favorites option in the menu bar of Internet Explorer,
or the yellow star to the left in Internet Explorer, which both open a drop down menu containing the IE Favorites.
C) By placing your mouse pointer on Favorites in the Start menu, which also opens up a list containing the IE Favorites.
All these locations can be used to drag the Favorites to the desktop or another folder, or copy them.
Is this problem only when you drag the Favorites ?

Sweet
 

My Computer

System One

  • Manufacturer/Model
    Acer Aspire 5738G-644G32MN
    CPU
    Intel Core 2 Duo - clockspeed 2000 MHz
    Motherboard
    Acer JV50
    Memory
    RAM 4 GB - SO-DIMM DDR3
    Graphics Card(s)
    NVIDIA GeForce - G105M - 512 MB
    Screen Resolution
    1366 x 768 Pixels
    Hard Drives
    Hitachi HTS543232L9A300
    320 GB - Type SATA - Speed 5400 rpm
    Keyboard
    Azerty
    Mouse
    Logitech Wireless Mouse M505
    Internet Speed
    Currently 14.5 MB/Sec which means 1.8 MB/Sec effective
@sweet.

yes that is the problem - when I go to IE favourites (im using chrome) - i can drag them but they dont drop onto the desktop like before - they just ahve a kind of transparent envelope type symbol and it does nothing.

@ tom - seems complicated but will try it.
 

My Computer

System One

  • Manufacturer/Model
    HP Pavillion dv5
OTL logfile created on: 29/10/2011 6:45:53 AM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Danny\Documents\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

3.00 Gb Total Physical Memory | 1.97 Gb Available Physical Memory | 65.83% Memory free
6.19 Gb Paging File | 5.17 Gb Available in Paging File | 83.61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 288.50 Gb Total Space | 215.02 Gb Free Space | 74.53% Space Free | Partition Type: NTFS
Drive D: | 9.59 Gb Total Space | 1.18 Gb Free Space | 12.32% Space Free | Partition Type: NTFS
Drive F: | 11.74 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: DANNY-PC | User Name: Danny | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Danny\Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe ()
PRC - C:\Program Files\Soluto\Soluto.exe (Soluto)
PRC - C:\Program Files\Soluto\SolutoService.exe (Soluto)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
PRC - C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe (IDT, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)
PRC - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)


========== Modules (No Company Name) ==========

MOD - C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\ppgooglenaclpluginchrome.dll ()
MOD - C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\pdf.dll ()
MOD - C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\avutil-51.dll ()
MOD - C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\avformat-53.dll ()
MOD - C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\avcodec-53.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGPostBootResources\84f1a9094a83b204e8ecbc2486f0fdeb\PCGPostBootResources.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGHIDProbe\3d9f4fb0a25b1701fc9ee3ddb72e04f2\PCGHIDProbe.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGRSPProbe\ab60314cfe26d0ba2de2d8ae81c26ba8\PCGRSPProbe.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Community.CsharpSql#\965c33a866905718906cad5cbbb04924\Community.CsharpSqlite.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGWuInfo\6ba72a14a2676f1b2c4a3b7f83a10c60\PCGWuInfo.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Interop.IWshRuntime#\e1bc13bf70e839eddd877134e7d3487b\Interop.IWshRuntimeLibrary.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGUsersCenter\1b2e0a818b5a6f740f18907138b65e30\PCGUsersCenter.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGClientCommon\18e63171ef51c97fef7a614263771fff\PCGClientCommon.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGBootVisualizingC#\20664b687ee8567a8f2d39c365faa23d\PCGBootVisualizingCommon.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGConfiguration\3bd6acae92a5b50ee62a90e68aa9e6b6\PCGConfiguration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGDatabase\424e9dc1f6a614161172192b4f9741b2\PCGDatabase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGAzureShared\cf584b69add15a22673f2f1b6b6d0028\PCGAzureShared.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGAzureEntityFrame#\ec36036c036ecb89e671ba0c382e6824\PCGAzureEntityFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGCommunication\0879685034a436c35a0f10bec1cfa886\PCGCommunication.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGDriverProbe\8b438591880778758b870b95c329e873\PCGDriverProbe.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGPreCompiled\44ddbef8b1a7972039ec169689cb1c81\PCGPreCompiled.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGPrestoSerializer\b4a126370cbe2f9d7e62d32607f5f096\PCGPrestoSerializer.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Ionic.Zip.Reduced\8d882882bb25cfee871ae67bd5c10cac\Ionic.Zip.Reduced.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PCGFramework\80133f2a9a9ed73ce4996369d1ea804a\PCGFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Soluto\c18c69120b87f27939c00f1f9fe81a71\Soluto.ni.exe ()
MOD - C:\Program Files\Soluto\PCGDllExportInspector.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\7d35e4a8583c5dc077a1d43d12ad8855\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\4d5fc62cbae71aae3cf1fa90446920ef\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\daf35d9703895998bae9efd6d23be282\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\eb5ed48265c5035b75b76a847213c0bc\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\af6f706cdcf02a312a9a339c20a8dbfb\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\76b39ba20055089eb251aea0d34211df\System.Data.Linq.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\30df1b19618cda9f5715101b76e69981\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f5fa811725cbc26754b26fb9cb2bda63\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f6deb187f24bb3185841092b89fbfdbb\mscorlib.ni.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\DeviceOperate.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\DetectDev.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\atcomm.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\XCodec.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\NetInfoPlugin.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\LocaleMgrPlugin.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\NotifyServicePlugin.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\ConfigFilePlugin.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\DeviceMgrPlugin.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\DialUpPlugin.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\DeviceMgrUIPlugin.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\NDISAPI.dll ()
MOD - C:\Program Files\VIRGIN BROADBAND\isaputrace.dll ()


========== Win32 Services (SafeList) ==========

SRV - (RichVideo) Cyberlink RichVideo Service(CRVS) -- File not found
SRV - (Recovery Service for Windows) -- File not found
SRV - (SolutoService) -- C:\Program Files\Soluto\SolutoService.exe (Soluto)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (PSI_SVC_2) -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
SRV - (STacSV) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe (IDT, Inc.)
SRV - (IAANTMON) Intel(R) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (AgereModemAudio) -- C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IviRegMgr) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)


========== Driver Services (SafeList) ==========

DRV - (Soluto) -- C:\Windows\system32\DRIVERS\Soluto.sys (Soluto LTD.)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (hpdskflt) -- C:\Windows\system32\DRIVERS\hpdskflt.sys (Hewlett-Packard Company)
DRV - (Accelerometer) -- C:\Windows\System32\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (STHDA) -- C:\Windows\System32\drivers\stwrt.sys (IDT, Inc.)
DRV - (iscFlash) -- C:\SwSetup\sp43819\iscflash.sys (Insyde Software)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation )
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (JMCR) -- C:\Windows\System32\drivers\jmcr.sys (JMicron Technology Corp.)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (enecir) -- C:\Windows\System32\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV - (HpqRemHid) -- C:\Windows\System32\drivers\HpqRemHid.sys (Hewlett-Packard Development Company, L.P.)
DRV - (UsbDiag) -- C:\Windows\System32\drivers\lgusbdiag.sys (LG Electronics Inc.)
DRV - (USBModem) -- C:\Windows\System32\drivers\lgusbmodem.sys (LG Electronics Inc.)
DRV - (usbbus) -- C:\Windows\System32\drivers\lgusbbus.sys (LG Electronics Inc.)
DRV - (HpqKbFiltr) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV - (regi) -- C:\Windows\System32\drivers\regi.sys (InterVideo)
DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvm60x32.sys (NVIDIA Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Bing
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = ninemsn Homepage - Hotmail, Messenger, News, Sport & More

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\Danny\Desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Bing
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Danny\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Danny\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/06/27 06:38:52 | 000,000,000 | ---D | M]

[2011/01/25 09:33:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Danny\AppData\Roaming\Mozilla\Extensions
[2011/01/25 09:33:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Danny\AppData\Roaming\Mozilla\Extensions\[email protected]

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Disabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Disabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Disabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Disabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Disabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Disabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Disabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Danny\AppData\Local\Google\Chrome\Application\15.0.874.106\pdf.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: iTunes Application Detector (Disabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Disabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\Danny\AppData\Local\Google\Chrome\Application\14.0.835.202\pdf.dll

O1 HOSTS File: ([2006/09/19 05:41:30 | 000,000,736 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {90B49673-5506-483E-B92B-CA0265BD9CA8} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: BindDirectlyToPropertySetStorage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://uwo-northcam.axiscam.net:83/activex/AMC.cab (AxisMediaControlEmb Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3157EBB5-81E2-4BB1-9AE6-F6AAA3EC2E9E}: DhcpNameServer = 172.18.7.4 203.121.16.120
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FACE3013-4E00-4BCE-90A0-10FD9EB4115F}: NameServer = 123.200.191.17 123.200.191.18
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Program Files\Soluto\soluto.exe /userinit) -C:\Program Files\Soluto\soluto.exe (Soluto)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) -C:\Windows\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") -C:\Windows\System32\sysdm.cpl (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\Windows\System32\browseui.dll (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Danny\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Danny\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O29 - HKLM SecurityProviders - (credssp.dll) -C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) -C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) -C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) -C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) -C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) -C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) -C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/07/01 15:46:23 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.) - F:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2008/06/19 23:53:14 | 000,000,056 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{3194395a-c053-11df-a138-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{3194395a-c053-11df-a138-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{31943976-c053-11df-a138-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{31943976-c053-11df-a138-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{38e3bb36-d0c4-11df-834e-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{38e3bb36-d0c4-11df-834e-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{3a1d6145-8cad-11de-9053-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{3a1d6145-8cad-11de-9053-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{3a1d6146-8cad-11de-9053-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{3a1d6146-8cad-11de-9053-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4436da3d-bff8-11df-8fc1-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{4436da3d-bff8-11df-8fc1-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4436da4c-bff8-11df-8fc1-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{4436da4c-bff8-11df-8fc1-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{44613ee8-910c-11de-8355-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{44613ee8-910c-11de-8355-001e68fbfeca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{44bfb68f-1aa4-11e0-8f88-e40568e03386}\Shell - "" = AutoRun
O33 - MountPoints2\{44bfb68f-1aa4-11e0-8f88-e40568e03386}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{44bfb6ef-1aa4-11e0-8f88-fc585815848b}\Shell - "" = AutoRun
O33 - MountPoints2\{44bfb6ef-1aa4-11e0-8f88-fc585815848b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{44bfb701-1aa4-11e0-8f88-fc585815848b}\Shell - "" = AutoRun
O33 - MountPoints2\{44bfb701-1aa4-11e0-8f88-fc585815848b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{44bfb70e-1aa4-11e0-8f88-fc585815848b}\Shell - "" = AutoRun
O33 - MountPoints2\{44bfb70e-1aa4-11e0-8f88-fc585815848b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4d720f32-e61a-11de-ab41-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{4d720f32-e61a-11de-ab41-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{4d720f41-e61a-11de-ab41-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{4d720f41-e61a-11de-ab41-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{54c90170-5343-11e0-af99-fc77ab4389cd}\Shell - "" = AutoRun
O33 - MountPoints2\{54c90170-5343-11e0-af99-fc77ab4389cd}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{54c9017c-5343-11e0-af99-fc77ab4389cd}\Shell - "" = AutoRun
O33 - MountPoints2\{54c9017c-5343-11e0-af99-fc77ab4389cd}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{59a558e2-cf34-11dd-8328-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{59a558e2-cf34-11dd-8328-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{59a55971-cf34-11dd-8328-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{59a55971-cf34-11dd-8328-001e68fbfeca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{5d357f9e-c506-11de-8c36-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{5d357f9e-c506-11de-8c36-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{65d71a59-9f90-11de-98d5-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{65d71a59-9f90-11de-98d5-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{65d71a7e-9f90-11de-98d5-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{65d71a7e-9f90-11de-98d5-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{67d68175-5b6a-11df-bdc3-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{67d68175-5b6a-11df-bdc3-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7b0e2857-f83f-11e0-b306-b22259ad1979}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0e2857-f83f-11e0-b306-b22259ad1979}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7b0e288b-f83f-11e0-b306-b22259ad1979}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0e288b-f83f-11e0-b306-b22259ad1979}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7b0e2895-f83f-11e0-b306-e20765b436cb}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0e2895-f83f-11e0-b306-e20765b436cb}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7b0e2897-f83f-11e0-b306-e20765b436cb}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0e2897-f83f-11e0-b306-e20765b436cb}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7b0e28cb-f83f-11e0-b306-e20765b436cb}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0e28cb-f83f-11e0-b306-e20765b436cb}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7b62c537-e606-11de-b709-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{7b62c537-e606-11de-b709-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{7b62c541-e606-11de-b709-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{7b62c541-e606-11de-b709-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{836a789d-8017-11df-a764-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{836a789d-8017-11df-a764-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{8647634f-fe98-11e0-bb0a-fb21e113f3df}\Shell - "" = AutoRun
O33 - MountPoints2\{8647634f-fe98-11e0-bb0a-fb21e113f3df}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{89ea3ec0-535a-11df-a672-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{89ea3ec0-535a-11df-a672-001e68fbfeca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{8d6e21ce-bfec-11df-9f20-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{8d6e21ce-bfec-11df-9f20-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{8d6e21da-bfec-11df-9f20-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{8d6e21da-bfec-11df-9f20-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{99034251-bb96-11df-af81-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{99034251-bb96-11df-af81-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{99034254-bb96-11df-af81-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{99034254-bb96-11df-af81-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{a4ef1a98-fea9-11e0-9a82-9998718b7bc9}\Shell - "" = AutoRun
O33 - MountPoints2\{a4ef1a98-fea9-11e0-9a82-9998718b7bc9}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{a4ef1aae-fea9-11e0-9a82-9998718b7bc9}\Shell - "" = AutoRun
O33 - MountPoints2\{a4ef1aae-fea9-11e0-9a82-9998718b7bc9}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{a4ef1ae1-fea9-11e0-9a82-9998718b7bc9}\Shell - "" = AutoRun
O33 - MountPoints2\{a4ef1ae1-fea9-11e0-9a82-9998718b7bc9}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{ac292d19-7a06-11df-8934-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{ac292d19-7a06-11df-8934-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{af1915e1-21c1-11e0-b713-eec8a8d7be25}\Shell - "" = AutoRun
O33 - MountPoints2\{af1915e1-21c1-11e0-b713-eec8a8d7be25}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{af191648-21c1-11e0-b713-867509bc9bbe}\Shell - "" = AutoRun
O33 - MountPoints2\{af191648-21c1-11e0-b713-867509bc9bbe}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{af19167c-21c1-11e0-b713-867509bc9bbe}\Shell - "" = AutoRun
O33 - MountPoints2\{af19167c-21c1-11e0-b713-867509bc9bbe}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c197f99c-5d83-11e0-bbc3-af1f7364f24b}\Shell - "" = AutoRun
O33 - MountPoints2\{c197f99c-5d83-11e0-bbc3-af1f7364f24b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c197f9d0-5d83-11e0-bbc3-af1f7364f24b}\Shell - "" = AutoRun
O33 - MountPoints2\{c197f9d0-5d83-11e0-bbc3-af1f7364f24b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c197fa2d-5d83-11e0-bbc3-f7c2aeb4ed29}\Shell - "" = AutoRun
O33 - MountPoints2\{c197fa2d-5d83-11e0-bbc3-f7c2aeb4ed29}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c197fa35-5d83-11e0-bbc3-f7c2aeb4ed29}\Shell - "" = AutoRun
O33 - MountPoints2\{c197fa35-5d83-11e0-bbc3-f7c2aeb4ed29}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c197fa3f-5d83-11e0-bbc3-f7c2aeb4ed29}\Shell - "" = AutoRun
O33 - MountPoints2\{c197fa3f-5d83-11e0-bbc3-f7c2aeb4ed29}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cb5e6814-ab4b-11de-af67-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{cb5e6814-ab4b-11de-af67-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cdd8c639-e77b-11e0-9268-e36a96992ac5}\Shell - "" = AutoRun
O33 - MountPoints2\{cdd8c639-e77b-11e0-9268-e36a96992ac5}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cdd8c645-e77b-11e0-9268-e36a96992ac5}\Shell - "" = AutoRun
O33 - MountPoints2\{cdd8c645-e77b-11e0-9268-e36a96992ac5}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cf7fd946-2794-11e0-9528-f6d89eafb6d2}\Shell - "" = AutoRun
O33 - MountPoints2\{cf7fd946-2794-11e0-9528-f6d89eafb6d2}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cf7fd96c-2794-11e0-9528-bd0bbaf4e811}\Shell - "" = AutoRun
O33 - MountPoints2\{cf7fd96c-2794-11e0-9528-bd0bbaf4e811}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cf7fd976-2794-11e0-9528-bd0bbaf4e811}\Shell - "" = AutoRun
O33 - MountPoints2\{cf7fd976-2794-11e0-9528-bd0bbaf4e811}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{cf7fd982-2794-11e0-9528-bd0bbaf4e811}\Shell - "" = AutoRun
O33 - MountPoints2\{cf7fd982-2794-11e0-9528-bd0bbaf4e811}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{d04218bc-c002-11df-bcac-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{d04218bc-c002-11df-bcac-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{d656fc27-d001-11dd-a32f-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{d656fc27-d001-11dd-a32f-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{d656fc41-d001-11dd-a32f-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{d656fc41-d001-11dd-a32f-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{d731e433-0a27-11e0-8bf8-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d731e433-0a27-11e0-8bf8-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{d887b819-7c57-11df-8ed0-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{d887b819-7c57-11df-8ed0-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{d887b826-7c57-11df-8ed0-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{d887b826-7c57-11df-8ed0-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{dda55b05-0958-11e0-9926-a7f3eae5f49f}\Shell - "" = AutoRun
O33 - MountPoints2\{dda55b05-0958-11e0-9926-a7f3eae5f49f}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{dda55b11-0958-11e0-9926-a7f3eae5f49f}\Shell - "" = AutoRun
O33 - MountPoints2\{dda55b11-0958-11e0-9926-a7f3eae5f49f}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{dda55b1d-0958-11e0-9926-a7f3eae5f49f}\Shell - "" = AutoRun
O33 - MountPoints2\{dda55b1d-0958-11e0-9926-a7f3eae5f49f}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{dda55b29-0958-11e0-9926-a7f3eae5f49f}\Shell - "" = AutoRun
O33 - MountPoints2\{dda55b29-0958-11e0-9926-a7f3eae5f49f}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{df5afe97-7c48-11df-bf5d-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{df5afe97-7c48-11df-bf5d-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{df5afea7-7c48-11df-bf5d-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{df5afea7-7c48-11df-bf5d-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{fe7ba7f0-e620-11de-bc82-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{fe7ba7f0-e620-11de-bc82-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{fe7ba858-e620-11de-bc82-001e68fbfeca}\Shell - "" = AutoRun
O33 - MountPoints2\{fe7ba858-e620-11de-bc82-001e68fbfeca}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2008/04/24 05:44:40 | 000,114,688 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/10/25 09:51:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIRGIN BROADBAND
[2011/10/25 09:50:43 | 000,872,192 | ---- | C] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2011/10/25 09:50:43 | 000,103,680 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbfake.sys
[2011/10/25 09:50:43 | 000,101,632 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2011/10/25 09:50:43 | 000,100,864 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbnet.sys
[2011/10/25 09:50:43 | 000,023,424 | R--- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2011/10/24 17:45:00 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2011/10/24 17:45:00 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2011/10/24 17:45:00 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2011/10/19 11:06:10 | 000,051,144 | ---- | C] (Soluto LTD.) -- C:\Windows\System32\drivers\Soluto.sys
[2011/10/19 11:06:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soluto
[2011/10/19 11:06:08 | 000,000,000 | ---D | C] -- C:\Program Files\Soluto
[2011/10/19 11:04:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Soluto
[2011/10/17 06:49:54 | 000,000,000 | ---D | C] -- C:\Users\Danny\AppData\Roaming\Avira
[2011/10/17 06:49:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011/10/17 06:49:29 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2011/10/17 06:49:28 | 000,134,344 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2011/10/17 06:49:28 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avkmgr.sys
[2011/10/17 06:49:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011/10/17 06:49:28 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011/10/14 11:58:59 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011/10/14 11:58:58 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011/10/14 11:58:57 | 001,798,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011/10/14 11:58:57 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011/10/14 11:58:56 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011/10/10 08:29:59 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011/10/04 06:56:02 | 000,000,000 | ---D | C] -- C:\Users\Danny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/10/29 06:22:47 | 000,609,018 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/10/29 06:22:47 | 000,108,494 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/10/29 06:19:02 | 000,002,884 | ---- | M] () -- C:\Windows\System32\.rsp
[2011/10/29 06:19:02 | 000,001,479 | ---- | M] () -- C:\Windows\System32\.lck
[2011/10/29 06:17:49 | 000,378,832 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011/10/29 06:17:49 | 000,378,832 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011/10/29 06:16:25 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/10/29 06:16:25 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/10/29 06:16:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/10/28 23:10:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/10/28 23:03:00 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1676118448-1026372703-3705477752-1003UA.job
[2011/10/28 22:33:28 | 004,318,447 | ---- | M] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\better google.pdf
[2011/10/28 18:03:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1676118448-1026372703-3705477752-1003Core.job
[2011/10/28 15:44:54 | 000,140,800 | ---- | M] () -- C:\Users\Danny\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/28 07:09:20 | 000,002,090 | ---- | M] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Google Chrome.lnk
[2011/10/27 14:43:08 | 000,002,635 | ---- | M] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Word Template.lnk
[2011/10/27 14:29:35 | 000,242,826 | ---- | M] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\SDA Bulletin October 29.pdf
[2011/10/26 18:51:49 | 000,043,256 | ---- | M] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\stuarts point.pdf
[2011/10/25 09:51:09 | 000,000,860 | ---- | M] () -- C:\Users\Public\Desktop\VIRGIN BROADBAND.lnk
[2011/10/25 09:36:05 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/10/19 11:07:15 | 000,000,098 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011/10/17 06:49:34 | 000,001,831 | ---- | M] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Start Avira Free Antivirus.lnk
[2011/10/11 16:33:24 | 000,051,144 | ---- | M] (Soluto LTD.) -- C:\Windows\System32\drivers\Soluto.sys
[2011/10/03 05:06:16 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2011/10/03 05:06:15 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2011/10/03 05:06:14 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2011/10/03 05:06:03 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/10/28 22:33:28 | 004,318,447 | ---- | C] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\better google.pdf
[2011/10/27 14:29:35 | 000,242,826 | ---- | C] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\SDA Bulletin October 29.pdf
[2011/10/26 18:51:49 | 000,043,256 | ---- | C] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\stuarts point.pdf
[2011/10/25 09:51:09 | 000,000,860 | ---- | C] () -- C:\Users\Public\Desktop\VIRGIN BROADBAND.lnk
[2011/10/19 11:15:03 | 000,002,884 | ---- | C] () -- C:\Windows\System32\.rsp
[2011/10/19 11:15:03 | 000,001,479 | ---- | C] () -- C:\Windows\System32\.lck
[2011/10/19 11:07:15 | 000,000,098 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011/10/17 06:49:34 | 000,001,831 | ---- | C] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Start Avira Free Antivirus.lnk
[2011/10/04 06:56:05 | 000,002,090 | ---- | C] () -- C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Google Chrome.lnk
[2011/10/04 06:52:34 | 000,000,908 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1676118448-1026372703-3705477752-1003UA.job
[2011/10/04 06:52:34 | 000,000,856 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1676118448-1026372703-3705477752-1003Core.job
[2011/08/03 08:05:39 | 000,000,777 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2011/08/03 08:05:39 | 000,000,288 | ---- | C] () -- C:\Windows\ODBC.INI
[2011/04/09 14:13:02 | 000,204,792 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2010/09/14 21:32:41 | 000,031,567 | ---- | C] () -- C:\Windows\maxlink.ini
[2010/06/13 11:21:44 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf08b.dat
[2010/05/09 15:48:05 | 000,000,952 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2010/04/29 14:42:57 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010/04/29 06:57:48 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010/04/29 06:57:10 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/08/12 09:53:42 | 000,209,040 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2009/08/12 09:53:42 | 000,204,944 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2009/08/12 09:53:42 | 000,196,752 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2009/08/12 09:53:42 | 000,196,752 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2009/08/12 09:53:42 | 000,192,656 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2009/08/12 09:53:42 | 000,024,720 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2008/12/23 09:52:21 | 000,000,213 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2008/12/23 09:52:21 | 000,000,094 | ---- | C] () -- C:\Windows\brpcfx.ini
[2008/12/23 09:52:21 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf06a.dat
[2008/12/23 09:49:31 | 000,106,496 | ---- | C] () -- C:\Windows\System32\BrMuSNMP.dll
[2008/12/22 16:33:25 | 000,000,827 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2008/12/22 16:33:25 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2008/12/22 11:24:37 | 000,140,800 | ---- | C] () -- C:\Users\Danny\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/12/21 16:25:53 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/09/27 16:44:00 | 000,378,832 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2008/09/27 16:44:00 | 000,378,832 | ---- | C] () -- C:\ProgramData\nvModes.001
[2008/07/01 16:24:43 | 000,101,605 | ---- | C] () -- C:\Windows\hpqins13.dat
[2006/11/02 20:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 20:47:37 | 000,426,968 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 20:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 18:33:01 | 000,609,018 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 18:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 18:33:01 | 000,108,494 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 18:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 18:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 16:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 16:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 15:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 15:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/03/09 17:58:00 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll

========== LOP Check ==========

[2009/11/27 06:51:57 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/12/17 06:14:55 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\ErrorTeck
[2011/01/25 13:45:05 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\IMVUClient
[2009/04/27 15:51:23 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\LG Electronics
[2011/04/05 20:50:24 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\OpenOffice.org
[2010/11/09 17:17:47 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\PeerNetworking
[2010/10/04 07:35:59 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\ScanSoft
[2011/10/24 20:54:00 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\TS3Client
[2009/08/12 14:28:31 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\Ulead Systems
[2011/01/25 10:53:01 | 000,000,000 | ---D | M] -- C:\Users\Danny\AppData\Roaming\Vivox
[2011/10/28 23:17:48 | 000,032,590 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



< End of report >
 

My Computer

System One

  • Manufacturer/Model
    HP Pavillion dv5
Yes it is a little complicated, but I've found this which is very interesting:

C:\Users\Danny\Contacts\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Desktop\Start Avira Free Antivirus.lnk

I have no idea what's happened here but I take it you haven't intentionally done this?

Can you do the following for me please:


  1. Hold the Windows Key and press R
  2. When the run dialogue box opens, copy and paste the following:

    cmd /c dir /b /s %USERPROFILE%\Desktop > %USERPROFILE%\Desktop\tom982.txt & start %WINDIR%\notepad.exe %USERPROFILE%\Desktop\tom982.txt
  3. Then press OK
  4. This will list every file and folder on your desktop (including all subfolders) and save this information into a file called tom982.txt. It will then open this file
  5. Then I would like you to copy and paste its contents into your next post


Tom
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
That is strange. Might malware have done that? I suggest that you scan your computer.
 

My Computers

System One System Two

  • Operating System
    Windows 8.1 Industry Pro x64
    Manufacturer/Model
    HP Pavillion Elite HPE-250f
    CPU
    Intel i7 860 Quad core 2.8 ghz
    Memory
    8 gb
    Graphics Card(s)
    ATI Radeon HD 5770 1 gb ram
    Monitor(s) Displays
    Alienware 25 AW2521HF
    Screen Resolution
    1920x1080 &1680x1050
    Hard Drives
    1 TB x2
    Other Info
    https://www.cnet.com/products/hp-pavilion-elite-hpe-250f/
  • Operating System
    Windows 2012 R2 Data center/Linux Mint
    Manufacturer/Model
    Dell Poweredge T140
    CPU
    i3 9100 3.6GHz, 8M cache, 4C/4T
    Memory
    8GB 2666MT/s DDR4 ECC UDIMM
    Screen Resolution
    1680x1050
    Hard Drives
    1 TB & 360 GB x2
    Other Info
    https://www.dell.com/en-us/work/shop/productdetailstxn/poweredge-t140?~ck=bt
That is strange. Might malware have done that? I suggest that you scan your computer.

I doubt it is malware, firstly (from what I can see - I can't make claims about logs until I finish) the OTL log looks clean to me and secondly it's a really odd thing for malware to do. Yes it causes a bit of annoyance but I've never heard of anything where folder paths are this messed up. Agreed it might be malware, but, to me, all of the signs are pointing elsewhere - possibly to a path or shortcut corruption. We'll see what returns from my script and work with that :)
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
its not malware - It all began when i tried to drag a desktop folder that turned up in my contacts file by accident back into the original desktop file. That accounts for the duplication of files and folders. However, in some of my files i cant open important documents and am in danger of losing them cos it says in some "file name too long"
 

My Computer

System One

  • Manufacturer/Model
    HP Pavillion dv5
Did that Tom but when pressed ok - it said "system cannot find the path specified"

its not malware - It all began when i tried to drag a desktop folder that turned up in my contacts file by accident back into the original desktop file. That accounts for the duplication of files and folders. However, in some of my files i cant open important documents and am in danger of losing them cos it says in some "file name too long"

Hmm, try repeating those steps, but with this script:

cmd /c dir /b /s %USERPROFILE%\Desktop > %USERPROFILE%\Desktop\tom982.txt

This will create a file on your desktop, tom982.txt, please open it and copy and paste its contents into your next post :)

Once we've worked out how to fix this, I can write you a script to copy all of the files in your contacts folder (and all subfolders) into one folder, just to make sure you don't lose any important documents.

Tom
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
Okay, try this:


  1. Open the start menu
  2. In the search box, type cmd
  3. Right click on cmd and select Run as administrator
  4. In command prompt, type:

    dir /b /s "%USERPROFILE%\Desktop"
  5. Then press enter (return)
  6. If this generates a list of items, please take one screenshot so I can see the output
  7. Then attach this to your next post please :)


Tom
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
Hey Tom
Let me give you a helping hand with this :)
Hello Ding Dong

You can use the following batch files, to perform the task.
I've also included an executable that does the same,
but the difference is that you can choose which folders and files you want to list.

Content batchfile DesktopDate.bat :

cmd /c dir /s "%UserProfile%\Desktop\" > "%date:~-10,2%-%date:~-7,2%-%date:~-4,4%.txt"

Content batchfile DesktopUsrN.bat :

cmd /c dir /s "%UserProfile%\Desktop\" > "%UserName%.txt"

You can also execute this code at the command prompt,
but then the data will be written to the folder of your user account.

Sweet
 

My Computer

System One

  • Manufacturer/Model
    Acer Aspire 5738G-644G32MN
    CPU
    Intel Core 2 Duo - clockspeed 2000 MHz
    Motherboard
    Acer JV50
    Memory
    RAM 4 GB - SO-DIMM DDR3
    Graphics Card(s)
    NVIDIA GeForce - G105M - 512 MB
    Screen Resolution
    1366 x 768 Pixels
    Hard Drives
    Hitachi HTS543232L9A300
    320 GB - Type SATA - Speed 5400 rpm
    Keyboard
    Azerty
    Mouse
    Logitech Wireless Mouse M505
    Internet Speed
    Currently 14.5 MB/Sec which means 1.8 MB/Sec effective
Really appreciate the help and time you have taken but as a resilt of following bad advice from another site - my pc is in a mess. I have a technitian coming today to sort it all out.

It went from being a simple misplaced file to be a major accident on my pc - i will be more cautious to accept any advice from now on.
 

My Computer

System One

  • Manufacturer/Model
    HP Pavillion dv5
Really appreciate the help and time you have taken but as a resilt of following bad advice from another site - my pc is in a mess. I have a technitian coming today to sort it all out.

It went from being a simple misplaced file to be a major accident on my pc - i will be more cautious to accept any advice from now on.

I'm sorry to hear that. I hope it all gets fixed for you today :) Let us know how it goes!

Would you mind linking us to this other thread please? I'm intrigued as what's gone so wrong here :)
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
The thread starts here;
Desktop Folder in Contacts Folder - Microsoft Windows Vista Community Forums - Vistaheads

I am nervous about asking those guys again.

One thing though, and you may be able to help me with this. Even though my files have been recovered and the problem solved, there are now a few tidying issues that are still annoying me.

One is that my Windows Mail takes ages to start up - I never had this before and i think it was the system restore that did it. I never saw a system restore that wiped out programs either? It took my Soluto away.

The other thing is that when I went into BIOs - there was a message waiting for me "do you want to save these changes" yes/no - I didnt know how to answer it so clicked no. I was in bios by mistake when trying to get into safe mode.

is there a way of also fixing this permissions thing as well once and for all. The guy who fixed my laptop had to do it alot when deleting/accessing dummy files.

also, why wont my laptop do a system restore in normal mode - is there a way of checking/fixing this without trying to do a sytem restore again - i hate those things.
 

My Computer

System One

  • Manufacturer/Model
    HP Pavillion dv5
Hello ding dong,

Thanks for sharing that thread with us :) We now have a better understanding of the things that have happened.

Would I be correct in thinking that your original problem has gone?

Just a tip for future reference, I would be wary of taking advice from someone with so few posts. I'm not saying that post count is proportional to knowledge (otherwise my post count would be far lower!), I'm just saying that it's best to talk to the more experienced members :)

I would try a repair install:

http://www.vistax64.com/tutorials/88236-repair-install-vista.html

You've got a right mess there and repair install should sort this out :)

What's wrong with your BIOS? As long as you didn't change anything, it should be alright

Tom
 

My Computer

System One

  • Manufacturer/Model
    Build #1
    CPU
    Intel Core i7 3770K @4.4GHz
    Motherboard
    ASUS P8Z77-V PRO
    Memory
    Corsair Vengeance 2x4GB DDR3 1600MHz Low Profile (White)
    Graphics Card(s)
    Gigabyte Radeon HD 7850 (2GB GDDR5)
    Sound Card
    Integrated on motherboard
    Monitor(s) Displays
    23" LG LCD/LED IPS
    Screen Resolution
    1920*1080
    Hard Drives
    Samsung EVO 128GB SSD
    Seagate Barracuda 2TB 7200rpm
    2x500GB Seagate FreeAgent 5400rpm
    PSU
    Corsair TX650W V2 (80+ Bronze)
    Case
    NZXT Phantom 410
    Cooling
    Corsair H100 Water Cooler, 1x140mm and 1x120mm stock fans
    Keyboard
    Microsoft Desktop 2000 Wireless Keyboard
    Mouse
    Microsoft Desktop 2000 Wireless Mouse
    Internet Speed
    95 Mb/s Download 70 Mb/s Upload
Back
Top