intocomputing2

January 10, 2009

Here's the log for step 1:

Volume in drive D has no label.

Volume Serial Number is 8DC4-AA31

Directory of D:\

06/23/2005 07:39 PM <DIR> ac3filterfi

02/18/2007 07:29 PM 78 Alfred Whitney Griswold - Wikipedia, the free encyclopedia.URL

08/08/2008 11:17 AM 25,906,688 BAIS-BSIS_Brochure.doc

12/09/2006 02:21 AM <DIR> BC5

06/01/2005 04:03 PM <DIR> BDE32

05/17/2008 02:06 AM 24,064 confirmation number for this payment.doc

02/25/2007 03:12 PM 49 DHS Services Lobby.URL

07/26/2007 05:42 PM <DIR> DivXfi

05/29/2005 11:02 AM 48,640 documents to edit and send to J.doc

02/08/2007 03:03 PM 146,612 DPNP-01-12-2003-A.pdf

04/15/2007 11:19 PM <DIR> DVDFabDecrypter_Temp

08/06/2008 05:31 PM 422,967 eStmt_2007-03-23.pdf

10/10/2006 12:36 AM <DIR> FLVplayerfi

05/21/2006 12:32 PM <DIR> Iomegazip drive

07/09/2005 09:29 PM <DIR> JetAudiofi

02/25/2007 03:13 PM 76 Mapas ambientales para comunidades saludables - HUD.URL

02/27/2007 03:44 PM 73,216 MarkApicella.doc

09/16/2006 02:03 PM <DIR> MEreader fi

10/26/2004 04:45 PM 75,776 Mesages to read imediately.doc

01/27/2007 02:19 PM 58 mike02 funny animal. The Turtle..URL

08/13/2007 09:45 PM <DIR> MOxp

09/05/2007 09:04 PM <DIR> My Documents

04/28/2005 04:46 PM 881,865 N-400.pdf

08/13/2008 09:40 AM 127,418 nursing.program.pdf

05/18/2005 12:15 AM 114 Open Media Network.url

08/27/2006 09:06 PM 3,215,844 Partida_de_Nacimiento.jpg

09/29/2008 08:09 PM <DIR> pfi

10/25/2006 01:24 AM 190 Practice Questions for the U.S. Citizenship Exam - SFPL.org.url

02/05/2005 07:44 PM <DIR> PROGRAM FILES

05/21/2008 08:34 PM 904,501 ProtoWallInstaller7.exe

01/13/2007 02:57 AM 97 RegisteredWorks - Google Search.URL

07/25/2006 09:30 AM <DIR> Shareazafi

04/13/2004 11:48 AM 165 Smithsonian Institution.url

12/22/2008 07:46 PM <DIR> Software Backup recent

09/26/2006 02:20 PM <DIR> Trillianfi

08/03/2006 05:46 PM <DIR> Unused icons

05/01/2005 10:21 PM <DIR> UT2004patch

11/17/2005 02:16 PM <DIR> Winrarfi

19 File(s) 31,828,418 bytes

19 Dir(s) 50,311,450,624 bytes free

and here's the log for step 2:

[AutoRun]

shell\open=Â´Ã²Â¿Âª(&O)

shell\open\Command=GLXB.PIF

shell\open\Default=1

shell\explore=Ã—ÃŠÃ”Â´Â¹ÃœÃ€ÃÃ†Ã·(&X)

shell\explore\command=GLXB.PIF

January 10, 2009

Hey,
OTMoveIt cleaned up itself, no need to post a log from it.
Can you please post the following two
c:\output.txt
and the log that opens in notepad after running the above command

I'm a bit confused, so after going to start >> run >> cmd I have to type "output.txt" and then post the log that opens right there, correct?

January 10, 2009

I"m not quite sure what just happened, I chose the option to allow the computer to reboot but now that it has, the icon for OTMoveIt dissapeared, so I now I can't post the log.

January 8, 2009

Please re-run the Kaspersky Online Scanner, and save the log to your desktop. Please post the log in your next reply.

here's the new log:

KASPERSKY ONLINE SCANNER 7 REPORT

Thursday, January 8, 2009

Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)

Kaspersky Online Scanner 7 version: 7.0.25.0

Program database last update: Thursday, January 08, 2009 13:13:25

Records in database: 1587187

--------------------------------------------------------------------------------

Scan settings:

Scan using the following database: extended

Scan archives: yes

Scan mail databases: yes

Scan area - My Computer:

A:\

C:\

D:\

E:\

F:\

Scan statistics:

Files scanned: 68972

Threat name: 2

Infected objects: 2

Suspicious objects: 0

Duration of the scan: 01:51:26

File name / Threat name / Threats count

C:\_OTMoveIt\MovedFiles\12302008_102636\ZGH.PIF Infected: Worm.Win32.AutoRun.vzw 1

C:\_OTMoveIt\MovedFiles\12302008_102636\ZGWZ.PIF Infected: Worm.Win32.AutoRun.vmn 1

The selected area was scanned.

January 7, 2009

thx garmanma

January 6, 2009

ok thx monsterenergy22

January 6, 2009

I'm not sure what I"m doing wrong, here's a pic of the setup page

and some from the status page

maybe I have overlooked something important, I'll check the manuals in the link, thx shanenin

January 6, 2009

an old Linksys router WRT54G which is still good, but was unplugged by mistake from the outlet and now it was to be setup all over again, I followed some steps found in google but it seems to fail getting a connection, I tried calling linksys tech support but when I gave them the model router and series number they told me they don't support the WRT54G anymore and that I had to either buy a new router or pay for technical support. Has anyone setup a linksys router WRT54G from scratch before? or does someone know how to do it by any chance?

December 30, 2008

notepad d:\autorun.ini
for this one notepad launches but the log it's empty

dir d: > c:\output.txt
and for this one nothing happens

December 30, 2008

As an additional note, I can change from C:\ to D:\ in the "DOS like black box" that you get after using run >> cmd

December 30, 2008

If I try to access the drive I get this:

and if I right-click the drive, the first 2 options show up in gibberish:

December 30, 2008

Here's the OTMoveIt3 log in case that is needed:

========== PROCESSES ==========

Process explorer.exe killed successfully.

========== FILES ==========

D:\ZGH.PIF moved successfully.

D:\ZGVZ.PIF moved successfully.

D:\ZGWZ.PIF moved successfully.

========== COMMANDS ==========

File delete failed. C:\DOCUME~1\Ed\LOCALS~1\Temp\~DF2B94.tmp scheduled to be deleted on reboot.

File delete failed. C:\DOCUME~1\Ed\LOCALS~1\Temp\~DF8CC2.tmp scheduled to be deleted on reboot.

User's Temp folder emptied.

User's Temporary Internet Files folder emptied.

User's Internet Explorer cache folder emptied.

Local Service Temp folder emptied.

File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.

Local Service Temporary Internet Files folder emptied.

File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.

File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_540.dat scheduled to be deleted on reboot.

File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_798.dat scheduled to be deleted on reboot.

Windows Temp folder emptied.

Java cache emptied.

File delete failed. C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.

File delete failed. C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.

File delete failed. C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.

File delete failed. C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.

FireFox cache emptied.

Temp folders emptied.

Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12302008_102636

Files moved on Reboot...

File C:\DOCUME~1\Ed\LOCALS~1\Temp\~DF2B94.tmp not found!

C:\DOCUME~1\Ed\LOCALS~1\Temp\~DF8CC2.tmp moved successfully.

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat moved successfully.

File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found!

C:\WINDOWS\temp\Perflib_Perfdata_540.dat moved successfully.

File C:\WINDOWS\temp\Perflib_Perfdata_798.dat not found!

C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_001_ moved successfully.

C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_002_ moved successfully.

C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_003_ moved successfully.

C:\Documents and Settings\Ed\Local Settings\Application Data\Mozilla\Firefox\Profiles\04sr2crd.default\Cache\_CACHE_MAP_ moved successfully.

December 29, 2008

BTW I tried doing a Kaspersky Online Scan again, and it worked this time:

December 29, 2008

You should see Disk 0 and Disk 1. What does it say for each HDD?

this is what it says:

December 29, 2008

Have you ever had access to your D drive?

Yes, I was able to access my D drive before the virus took over both drives. I managed to get access to the C drive as mentioned in a previous post, but I still don't have access to the D drive.

December 28, 2008

ok I managed to recover the important files on my C drive by doing a file search and copying those folders, next I formated the C drive using the recovery partition and now I got back access to the C drive, however, I'm yet to obtain access to my D drive since the problem remains in that one.

December 28, 2008

well I think I found the reason for the problem I overlooked it before since I would click accept without stopping to read the message. It says that kaspersky can't run properly if there's another antivirus program running, and I'm guessing Avast it's conflicting with it. I've tried to uninstall it several times from control panel, but it says there was an error during the uninstall and the avast icon is still running on my system tray, is there any other way to uninstall the program without using control panel or from the start menu program?

December 27, 2008

Step 3
Please do an online scan with Kaspersky WebScanner
I highly recommend using Internet Explorer for best results!
Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.
Click on the Accept button and install any components it needs.
The program will install and then begin downloading the latest definition files.
Once they are downloaded, the database will be updated.
Please accept any ActiveX or Java notifications
After the files have been updated, go to the left side of the page under the Scan section and select My Computer.
This will start the program and scan your system.
The scan will take a while so be patient and let it run.
Once the scan is complete, click on View scan report
Now, click on the Save Report as button.
Save the file to your desktop.
Copy and paste that information in your next post.

Kaspersky can't update its definitions, I tried several times in both Firefox and IE and this is what I get:

December 25, 2008

Extras.Txt log:

OTViewIt Extras logfile created on: 12/26/2004 11:20:04 AM - Run

OTViewIt by OldTimer - Version 1.0.20.1 Folder = C:\Documents and Settings\Max\Desktop

Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.5512)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

759.52 Mb Total Physical Memory | 507.52 Mb Available Physical Memory | 66.82% Memory free

1.81 Gb Paging File | 1.56 Gb Available in Paging File | 86.21% Paging File free

Paging file location(s): C:\pagefile.sys 1140 2280;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 105.78 Gb Total Space | 40.26 Gb Free Space | 38.06% Space Free | Partition Type: NTFS

Drive D: | 68.52 Gb Total Space | 46.86 Gb Free Space | 68.38% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: VALUED-3253602F

Current User Name: Max

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: Current user

Whitelist: On

File Age = 30 Days

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation)

.cpl [@ = cplfile] -- C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

.hta [@ = htafile] -- C:\WINDOWS\system32\mshta.exe (Microsoft Corporation)

.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

.inf [@ = inffile] -- C:\WINDOWS\system32\notepad.exe (Microsoft Corporation)

.ini [@ = inifile] -- C:\WINDOWS\system32\notepad.exe (Microsoft Corporation)

.url [@ = InternetShortcut] -- C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)

.js [@ = JSFile] -- C:\WINDOWS\system32\wscript.exe (Microsoft Corporation)

.jse [@ = JSEFile] -- C:\WINDOWS\system32\wscript.exe (Microsoft Corporation)

.reg [@ = regfile] -- C:\WINDOWS\regedit.exe (Microsoft Corporation)

.txt [@ = txtfile] -- C:\WINDOWS\system32\notepad.exe (Microsoft Corporation)

.vbe [@ = VBEFile] -- C:\WINDOWS\system32\wscript.exe (Microsoft Corporation)

.vbs [@ = VBSFile] -- C:\WINDOWS\system32\wscript.exe (Microsoft Corporation)

.wsf [@ = WSFFile] -- C:\WINDOWS\system32\wscript.exe (Microsoft Corporation)

.wsh [@ = WSHFile] -- C:\WINDOWS\system32\wscript.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"AntiVirusDisableNotify"=0

"FirewallDisableNotify"=0

"UpdatesDisableNotify"=0

"AntiVirusOverride"=0

"FirewallOverride"=0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[2008/04/13 16:12:34 | 00,141,312 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

[2008/04/13 10:53:32 | 00,558,080 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

[2008/04/13 16:12:34 | 00,141,312 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

[2003/06/23 16:32:54 | 01,409,024 | ---- | M] (Support.com, Inc.) -- C:\Program Files\support.com\client\bin\tgcmd.exe:*:Disabled:tgcmd Module

[2008/04/13 10:53:32 | 00,558,080 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000

[2006/10/27 14:16:48 | 12,813,096 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook

[2006/10/27 14:37:44 | 00,338,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove

[2006/10/27 14:03:04 | 01,018,664 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote

[2008/10/10 10:14:24 | 00,270,128 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Max\Desktop\utorrent.exe:*:Enabled:ÂµTorrent

[2008/08/12 17:19:02 | 21,741,864 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype

[2008/09/26 07:52:28 | 00,208,896 | ---- | M] () -- C:\Program Files\Unreal Tournament 2004\System\UT2004.exe:*:Enabled:UT2004

========== (O18) Protocol Handlers ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2006/10/26 23:48:02 | 00,222,512 | ---- | M] (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (grooveLocalGWS:{88FED34C-F0CA-4636-A375-3CB6248B04CD} (HKLM) [Local Groove Web Services Protocol])

ipp: [HKLM - No CLSID value]

[2006/10/26 18:49:48 | 01,011,488 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

msdaipp: [HKLM - No CLSID value]

[2006/10/26 18:49:48 | 01,011,488 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

[2006/10/26 18:49:48 | 01,011,488 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]

[2006/10/26 12:45:02 | 00,873,216 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (ms-help:{314111c7-a502-11d2-bbca-00c04f8ec294} (HKLM) [HxProtocol Class])

[2008/08/12 17:19:02 | 01,942,864 | R--- | M] (Skype Technologies) C:\Program Files\Common Files\Skype\Skype4COM.dll (skype4com:{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} (HKLM) [iEProtocolHandler Class])

========== (O18) Protocol Filters ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters

[2006/10/26 20:41:48 | 00,044,344 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL text/xml:{807563E5-5146-11D5-A672-00B0D022E945} (HKLM) [Microsoft Office InfoPath XML Mime Filter]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00000000-3976-4267-9F39-1DC4745090B7}"=Microsoft Learning and Research Plus Support Files

"{00203668-8170-44A0-BE44-B632FA4D780F}"=Adobe AIR

"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}"=ATI Control Panel

"{0C826C5B-B131-423A-A229-C71B3CACCD6A}"=CDDRV_Installer

"{13515135-48BB-4184-8C1F-2FAE0138E200}"=TBS WMP Plug-in

"{1D643CD7-4DD6-11D7-A4E0-000874180BB3}"=Microsoft Money 2004

"{1DBB465A-5DFC-4E3A-9A8A-15612D2386F0}"=Turbo Tax Offer

"{1EB317D8-8945-4FD6-B37F-DF470317C6AB}"=VAIO Media 2.6

"{27337663-2619-11D4-99DC-0000F49094C7}"=Memory Stick Formatter

"{3101CB58-3482-4D21-AF1A-7057FC935355}"=KhalInstallWrapper

"{315BA29D-2644-4760-B5FD-5AC04A52B8C5}"=VAIO Registration

"{3248F0A8-6813-11D6-A77B-00B0D0160070}"=Java 6 Update 7

"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP

"{369B36BE-3D64-4641-9AEA-808D436FE130}"=Microsoft Picture It! Express 7.0

"{394DC0BC-5476-4260-B52C-BDE1BDEFA958}"=Unreal Tournament 2004

"{3B24B725-D81F-442D-8CE5-2AF05A4A4CC9}"=Music Visualizer Library 1.4.00

"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}"=Logitech Registration

"{4D1D6640-CD43-4AD9-A52F-E48265DB28E0}"=VAIO BrightColor Wallpaper

"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}"=Skypeâ„¢ 3.8

"{62F33B80-6244-4A70-A233-0DA13B640364}"=OpenMG Secure Module 3.2

"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}"=PowerDVD

"{685BCC47-B8EC-45EC-BBCE-77DF2451502C}"=DVgate Plus

"{6990A2BF-D1D2-11D3-81BC-00609789C908}"=Sony Video Shared Library

"{7128C69B-8F7E-4336-8698-3FD3CDD955EC}"=VAIO Media Redistribution 2.6

"{71D6CE84-B7DC-4166-8E0D-56C1C37BFB5A}"=SonicStage 1.6.00

"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable

"{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}"=Microsoft Works 7.0

"{77DCDCE3-2DED-62F3-8154-05E745472D07}"=Acrobat.com

"{789289CA-F73A-4A16-A331-54D498CE069F}"=Ventrilo Client

"{7A79D11B-FD82-4A5E-834F-20173515DD14}"=VAIO Media Integrated Server 2.6

"{7C2F71B2-6C73-11D6-B659-00C04F790F76}"=Click to DVD 1.3

"{88DA0A52-3372-4803-971A-ADFB961707E8}"=PictureGear Studio 2.0

"{8A708DD8-A5E6-11D4-A706-000629E95E20}"=Intel® Extreme Graphics Driver

"{8C64E145-54BA-11D6-91B1-00500462BE80}"=Microsoft Money 2004 System Pack

"{90120000-0010-0C0A-0000-0000000FF1CE}"=Microsoft Software Update for Web Folders (Spanish) 12

"{90120000-0015-0C0A-0000-0000000FF1CE}"=Microsoft Office Access MUI (Spanish) 2007

"{90120000-0016-0C0A-0000-0000000FF1CE}"=Microsoft Office Excel MUI (Spanish) 2007

"{90120000-0018-0C0A-0000-0000000FF1CE}"=Microsoft Office PowerPoint MUI (Spanish) 2007

"{90120000-0019-0C0A-0000-0000000FF1CE}"=Microsoft Office Publisher MUI (Spanish) 2007

"{90120000-001A-0C0A-0000-0000000FF1CE}"=Microsoft Office Outlook MUI (Spanish) 2007

"{90120000-001B-0C0A-0000-0000000FF1CE}"=Microsoft Office Word MUI (Spanish) 2007

"{90120000-001F-0403-0000-0000000FF1CE}"=Microsoft Office Proof (Catalan) 2007

"{90120000-001F-0409-0000-0000000FF1CE}"=Microsoft Office Proof (English) 2007

"{90120000-001F-040C-0000-0000000FF1CE}"=Microsoft Office Proof (French) 2007

"{90120000-001F-0416-0000-0000000FF1CE}"=Microsoft Office Proof (Portuguese (Brazil)) 2007

"{90120000-001F-042D-0000-0000000FF1CE}"=Microsoft Office Proof (Basque) 2007

"{90120000-001F-0456-0000-0000000FF1CE}"=Microsoft Office Proof (Galician) 2007

"{90120000-001F-0C0A-0000-0000000FF1CE}"=Microsoft Office Proof (Spanish) 2007

"{90120000-002C-0C0A-0000-0000000FF1CE}"=Microsoft Office Proofing (Spanish) 2007

"{90120000-0030-0000-0000-0000000FF1CE}"=Microsoft Office Enterprise 2007

"{90120000-0044-0C0A-0000-0000000FF1CE}"=Microsoft Office InfoPath MUI (Spanish) 2007

"{90120000-006E-0C0A-0000-0000000FF1CE}"=Microsoft Office Shared MUI (Spanish) 2007

"{90120000-00A1-0C0A-0000-0000000FF1CE}"=Microsoft Office OneNote MUI (Spanish) 2007

"{90120000-00BA-0C0A-0000-0000000FF1CE}"=Microsoft Office Groove MUI (Spanish) 2007

"{93B80FB1-7A23-11D3-B250-00105A1F4184}"=

"{AC76BA86-7AD7-1033-7B44-A90000000001}"=Adobe Reader 9

"{BEF3EFE7-5159-436D-9BF0-CCC633179EB4}"=EVGA Display Driver

"{CD7D5804-C157-48A6-AEE0-4A40A4B5C054}"=VAIO System Information

"{D0448678-1203-4158-A58F-B3D0B616BF9E}"=Sony Certificate PCH

"{DDC146FA-73E0-4FA1-A353-841EA14BF600}"=Drag'n Drop CD+DVD

"{E68B38DE-D7DD-4FB3-A453-3F03A947EA8E}"=VAIO Help and Support

"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}"=Logitech SetPoint

"{F61F2821-694C-475F-99AB-6AF2EFDF40FD}"=Quicken 2003 New User Edition

"{FA11D5B5-7D0A-43E8-88C4-960F97B194DE}"=VAIO Survey Standalone

"7-Zip"=7-Zip 4.57

"Adobe AIR"=Adobe AIR

"Adobe Flash Player ActiveX"=Adobe Flash Player ActiveX

"Adobe Flash Player Plugin"=Adobe Flash Player Plugin

"Agere Systems Soft Modem"=Agere Systems AC'97 Modem

"a-squared Free_is1"=a-squared Free 4.0

"AT&T Worldnet Setup"=AT&T Worldnet Setup

"ATI Display Driver"=ATI Display Driver

"avast!"=avast! Antivirus

"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1"=Acrobat.com

"CutePDF Writer Installation"=CutePDF Writer 2.7

"Dropbox"=Dropbox

"DVD Decrypter"=DVD Decrypter (Remove Only)

"DVD Shrink_is1"=DVD Shrink 3.2

"DVD43_is1"=DVD43 v4.3.1

"ENTERPRISE"=Microsoft Office Enterprise 2007

"Hamachi"=Hamachi 1.0.3.0

"HijackThis"=HijackThis 2.0.2

"InstallShield_{13515135-48BB-4184-8C1F-2FAE0138E200}"=TBS WMP Plug-in

"InstallShield_{315BA29D-2644-4760-B5FD-5AC04A52B8C5}"=VAIO Registration

"InstallShield_{E68B38DE-D7DD-4FB3-A453-3F03A947EA8E}"=VAIO Help and Support

"InstallShield_{F61F2821-694C-475F-99AB-6AF2EFDF40FD}"=Quicken 2003 New User Edition

"InstallShield_{FA11D5B5-7D0A-43E8-88C4-960F97B194DE}"=VAIO Survey Standalone

"LiveReg"=LiveReg (Symantec Corporation)

"LiveUpdate"=LiveUpdate 1.80 (Symantec Corporation)

"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware

"MoodLogic"=MoodLogic

"Mozilla Firefox (2.0.0.20)"=Mozilla Firefox (2.0.0.20)

"MSNMS"=MSN Internet Software

"Netscape (7.02)"=Netscape (7.02)

"OpenMG HotFix3.2-03-01-16-01"=OpenMG Limited Patch 3.2-03-02-21-08

"OpenMG HotFix3.2-03-01-16-02"=OpenMG Limited Patch 3.2-03-03-18-01

"OpenMG HotFix3.2-03-04-14-02"=OpenMG Limited Patch 3.2-03-04-14-02

"PeerGuardian_is1"=PeerGuardian 2.0

"PROSet"=Intel® PRO Network Adapters and Drivers

"QuickTime"=QuickTime

"Shockwave"=Shockwave

"Sony on Yahoo! Essentials"=Sony on Yahoo! Essentials

"VAIO Support"=VAIO Support

"ViewpointMediaPlayer"=Viewpoint Media Player (Remove Only)

"VLC media player"=VideoLAN VLC media player 0.8.6i

"Wdf01005"=Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

"Welcome to VAIO life"=Welcome to VAIO life

"Windows XP Service Pack"=Windows XP Service Pack 3

"WinRAR archiver"=WinRAR archiver

"Xfire"=Xfire (remove only)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Google Chrome"=Google Chrome

"Octoshape add-in for Adobe Flash Player"=Octoshape add-in for Adobe Flash Player

========== Last 10 Event Log Errors ==========

[ Application Events ]

Error - 12/9/2008 11:21:17 PM | Computer Name = VALUED-3253602F | Source = Application Error | ID = 1000

Description = Faulting application pg2.exe, version 1.0.6.4, faulting module ntdll.dll,

version 5.1.2600.5512, fault address 0x0001b1fa.

Error - 12/22/2008 5:16:34 PM | Computer Name = VALUED-3253602F | Source = Application Error | ID = 1000

Description = Faulting application pg2.exe, version 1.0.6.4, faulting module ntdll.dll,

version 5.1.2600.5512, fault address 0x0001b1fa.

Error - 12/24/2004 10:49:07 PM | Computer Name = VALUED-3253602F | Source = Application Hang | ID = 1002

Description = Hanging application iexplore.exe, version 6.0.2900.5512, hang module