My sister gets the blue screen of death everytime she starts her computer... it isn't any certain thing she does so we can pinpoint it or a certain amount time being on it, it could be 5 minutes or 30 minutes and everytime it will give her a different message on the blue screen. She doesn't have a recovery disk for her computer (lost it) just her a reinstallation cd that says microsoft windows xp home edition disk to reinstall her operating system.
Also she doesn't have the ark.txt because whenever she tried to it would give her the blue screen and shut down on her all three times she did it.
She also told me sometimes it will just shut down without a blue screen and then she will get this message :"overclocking failed press F1 to enter set up or press F2 to normal default"
DDS (Ver_09-05-14.01) - NTFSx86
Run by Nikki at 17:12:51.14 on Wed 05/27/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3295.2851 [GMT -4:00]
AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Nikki\Desktop\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
mDefault_Page_URL = hxxp://yahoo.sbc.com/dsl
mDefault_Search_URL = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
mSearch Page = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com
mSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.html
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
uURLSearchHooks: N/A: {00a6faf6-072e-44cf-8957-5838f569a31d} - c:\program files\mywebsearch\srchastt\1.bin\MWSSRCAS.DLL
BHO: MyWebSearch Search Assistant BHO: {00a6faf1-072e-44cf-8957-5838f569a31d} - c:\program files\mywebsearch\srchastt\1.bin\MWSSRCAS.DLL
BHO: 1 (0x1): {02478d38-c3f9-4efb-9b51-7695eca05670} - Yahoo! Companion BHO
BHO: mwsBar BHO: {07b18ea1-a523-4961-b6bb-170de4475cca} - c:\program files\mywebsearch\bar\1.bin\MWSBAR.DLL
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {399d96ca-6f9a-4fff-95fe-284e45ebb935} - No File
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: My Web Search: {07b18ea9-a523-4961-b6bb-170de4475cca} - c:\program files\mywebsearch\bar\1.bin\MWSBAR.DLL
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
EB: &Yahoo! Messenger: {4528bbe0-4e08-11d5-ad55-00010333d0ad} - c:\program files\yahoo!\messenger\yhexbmes.dll
uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messen~1\YAHOOM~1.EXE" -quiet
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [High Definition Audio Property Page Shortcut] HDAShCut.exe
mRun: [Lexmark X6100 Series] "c:\program files\lexmark x6100 series\lxbfbmgr.exe"
mRun: [My Web Search Bar Search Scope Monitor] "c:\progra~1\mywebs~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
mRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [PRISMSVR.EXE] "c:\windows\system32\PRISMSVR.EXE" /APPLY
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [MyWebSearch Plugin] rundll32 c:\progra~1\mywebs~1\bar\1.bin\M3PLUGIN.DLL,UPF
mRun: [LogMeIn GUI] "c:\program files\logmein\x86\LogMeInSystray.exe"
IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZRxdm479YYUS
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Yahoo! Dictionary - file:///c:\program files\yahoo!\Common/ycdict.htm
IE: Yahoo! Search - file:///c:\program files\yahoo!\Common/ycsrch.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2499216C-4BA5-11D5-BD9C-000103C116D5} - {2499216C-4BA5-11D5-BD9C-000103C116D5} - c:\program files\yahoo!\common\ylogin.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll
IE: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - {4C171D40-8277-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\messenger\yhexbmes.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - hxxp://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/PopularScreenSaversInitialSetup1.0.1.1.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper20073151.dll
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1243371316781
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - hxxp://download.yahoo.com/dl/installs/yab_af.cab
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} - hxxp://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: mctp - {d7b95390-b1c5-11d0-b111-0080c712fe82} -
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
WinCE Filter: image/bmp - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: image/gif - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: image/jpeg - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: image/xbm - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: text/asp - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} -
WinCE Filter: text/html - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} -
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: LMIinit - LMIinit.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
============= SERVICES / DRIVERS ===============
R0 m5288;m5288;c:\windows\system32\drivers\m5288.sys [2009-5-26 210304]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-5-26 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-5-26 72944]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2008-7-24 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2008-10-6 47640]
R2 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [2004-8-12 14336]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-5-26 7408]
S1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys --> c:\windows\system32\drivers\mfehidk.sys [?]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\mcafee\siteadvisor\mcsacore.exe" --> c:\program files\mcafee\siteadvisor\McSACore.exe [?]
S2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe --> c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [?]
S2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2009-5-8 144704]
S3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-5-8 606736]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys --> c:\windows\system32\drivers\mfeavfk.sys [?]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys --> c:\windows\system32\drivers\mfebopk.sys [?]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys --> c:\windows\system32\drivers\mferkdk.sys [?]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys --> c:\windows\system32\drivers\mfesmfk.sys [?]
S4 LMIRfsClientNP;LMIRfsClientNP; [x]
=============== Created Last 30 ================
2009-05-27 11:51 268,648 a------- c:\windows\system32\mucltui.dll
2009-05-27 11:51 27,496 a------- c:\windows\system32\mucltui.dll.mui
2009-05-26 22:04 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2009-05-26 22:04 <DIR> --d----- c:\program files\common files\Wise Installation Wizard
2009-05-26 22:02 1,341,441 a------- C:\MGtools.exe
2009-05-26 21:46 410,984 a------- c:\windows\system32\deploytk.dll
2009-05-26 21:46 73,728 a------- c:\windows\system32\javacpl.cpl
2009-05-26 19:44 29,696 a------- c:\windows\system32\dev32.exe
2009-05-26 19:35 210,304 a------- c:\windows\system32\drivers\m5288.sys
2009-05-26 19:35 167,936 a------- c:\windows\system32\coin5288.dll
2009-05-26 19:35 35,587 a------- c:\windows\system32\rM5288.exe
2009-05-26 19:35 9,621 a------- c:\windows\system32\drivers\ulisata.cat
2009-05-26 19:25 <DIR> --d----- c:\program files\ATI
2009-05-26 19:23 363,520 ac------ c:\windows\system32\dllcache\psisdecd.dll
2009-05-26 19:22 <DIR> --d----- c:\program files\ATI Technologies
2009-05-26 19:16 <DIR> --d----- C:\Driver Download
2009-05-26 19:10 <DIR> --d----- C:\Driver Backup 5-26-2009-191035
2009-05-26 19:01 1,686,016 a------- c:\windows\system32\clinetsuitex6.ocx
2009-05-26 19:01 662,288 a------- c:\windows\system32\MSCOMCT2.OCX
2009-05-26 19:01 427,864 a------- c:\windows\system32\XceedZip.dll
2009-05-26 19:01 <DIR> --d----- c:\program files\Driver-Soft
2009-05-26 18:42 <DIR> --d----- c:\program files\Conduit
2009-05-26 18:42 <DIR> --d----- c:\program files\RadarSync
2009-05-26 15:32 447,752 a------- c:\windows\system32\vp6vfw.dll
2009-05-26 11:00 381,425 -c------ c:\windows\system32\dllcache\copycd.wmv
2009-05-26 11:00 184,959 -c------ c:\windows\system32\dllcache\compact.wmz
2009-05-26 11:00 9,585 -c------ c:\windows\system32\dllcache\controls.css
2009-05-26 11:00 8,298 -c------ c:\windows\system32\dllcache\contents.htm
2009-05-26 11:00 6,878 -c------ c:\windows\system32\dllcache\controls.js
2009-05-26 11:00 773 -c------ c:\windows\system32\dllcache\cnth.gif
2009-05-26 11:00 773 -c------ c:\windows\system32\dllcache\cnt.gif
2009-05-26 11:00 772 -c------ c:\windows\system32\dllcache\cntd.gif
2009-05-26 11:00 760 -c------ c:\windows\system32\dllcache\cloapph.gif
2009-05-26 11:00 717 -c------ c:\windows\system32\dllcache\cloapp.gif
2009-05-26 11:00 999 -c------ c:\windows\system32\dllcache\bktrh.gif
2009-05-26 10:50 203,136 -c------ c:\windows\system32\dllcache\rmcast.sys
2009-05-26 10:50 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2009-05-26 10:50 333,952 -c------ c:\windows\system32\dllcache\srv.sys
2009-05-26 10:50 691,712 -c------ c:\windows\system32\dllcache\inetcomm.dll
2009-05-26 10:50 337,408 -c------ c:\windows\system32\dllcache\netapi32.dll
2009-05-26 10:49 215,552 -c------ c:\windows\system32\dllcache\wordpad.exe
2009-05-25 21:10 85,504 a------- c:\windows\system32\ff_vfw.dll
2009-05-25 21:10 547 a------- c:\windows\system32\ff_vfw.dll.manifest
2009-05-25 21:10 60,273 a------- c:\windows\system32\pthreadGC2.dll
2009-05-25 21:10 <DIR> --d----- c:\program files\ffdshow
2009-05-24 23:11 <DIR> --d----- c:\program files\SBC Yahoo!
2009-05-24 23:10 24,576 a------- c:\windows\system32\msxml3a.dll
2009-05-24 22:46 <DIR> --d----- C:\@Home
2009-05-24 20:14 65,536 a------- c:\windows\system32\YCRWin32.dll
2009-05-24 20:14 344,064 a------- c:\windows\system32\msvcr70.dll
2009-05-24 20:14 84,992 a------- c:\windows\system32\ATL70.DLL
2009-05-24 17:34 57,856 ac------ c:\windows\system32\dllcache\EXCH_scripto.dll
2009-05-24 17:33 480,256 ac------ c:\windows\system32\dllcache\cintsetp.exe
2009-05-24 17:32 488 a---hr-- c:\windows\system32\logonui.exe.manifest
2009-05-24 17:32 749 a---hr-- c:\windows\WindowsShell.Manifest
2009-05-24 17:32 749 a---hr-- c:\windows\system32\wuaucpl.cpl.manifest
2009-05-24 17:32 749 a---hr-- c:\windows\system32\sapi.cpl.manifest
2009-05-24 17:32 749 a---hr-- c:\windows\system32\ncpa.cpl.manifest
2009-05-24 17:32 16,384 ac------ c:\windows\system32\dllcache\isignup.exe
2009-05-24 13:56 90,112 a------- c:\windows\DUMP7733.tmp
2009-05-24 13:56 90,112 a------- c:\windows\DUMP73c8.tmp
2009-05-24 13:56 90,112 a------- c:\windows\DUMP6ca5.tmp
2009-05-24 13:56 90,112 a------- c:\windows\DUMP6adf.tmp
2009-05-24 13:12 2,145,386,496 a------- c:\windows\MEMORY.DMP
2009-05-16 16:20 <DIR> --d----- c:\program files\CCleaner
2009-05-16 13:00 2,944 a------- c:\windows\system32\drivers\msmpu401.sys
2009-05-16 13:00 417,887 a------- c:\program files\Uninstall Fun Web Products.dll
2009-05-16 00:16 <DIR> --d----- c:\program files\MyWebSearch
2009-05-16 00:16 <DIR> --d----- c:\program files\FunWebProducts
2009-05-16 00:16 <DIR> --d----- c:\program files\McAfee.com
2009-05-16 00:16 <DIR> --d----- c:\program files\McAfee
2009-05-16 00:16 <DIR> --d----- c:\program files\common files\McAfee
2009-05-15 21:15 <DIR> --d----- c:\program files\Analog Devices
2009-05-15 20:35 <DIR> --d----- c:\windows\system32\XPSViewer
2009-05-15 20:12 39,337 a------- c:\windows\setupapi.old
2009-05-15 00:48 <DIR> --d----- C:\MGtools
2009-05-15 00:38 <DIR> --d----- C:\cmdcons
2009-05-15 00:16 <DIR> --d----- c:\docume~1\nikki\applic~1\Malwarebytes
2009-05-15 00:16 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-05-15 00:16 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-05-14 23:39 <DIR> --d----- c:\program files\SUPERAntiSpyware
2009-05-14 23:39 <DIR> --d----- c:\docume~1\nikki\applic~1\SUPERAntiSpyware.com
2009-05-14 23:08 <DIR> --d----- c:\windows\pss
2009-05-08 19:32 <DIR> --d----- c:\windows\The Sims 2 AiO
2009-05-08 13:25 <DIR> --d----- c:\program files\Microsoft ActiveSync
2009-05-08 11:18 929,792 a----r-- c:\windows\system32\PRISME5.dll
2009-05-08 11:18 15,781 a----r-- c:\windows\system32\drivers\mdc8021x.sys
2009-05-06 22:29 <DIR> --d----- c:\docume~1\nikki\applic~1\MSNInstaller
==================== Find3M ====================
2009-05-24 17:31 22,720 a------- c:\windows\system32\emptyregdb.dat
2009-05-24 13:15 94,208 a------- c:\windows\DUMP74b3.tmp
2009-05-19 15:38 94,208 a------- c:\windows\DUMP704f.tmp
2009-05-16 21:17 94,208 a------- c:\windows\DUMP4c7a.tmp
2009-05-16 21:13 94,208 a------- c:\windows\DUMP7afc.tmp
2009-05-16 20:32 90,112 a------- c:\windows\DUMP7222.tmp
2009-05-16 20:22 90,112 a------- c:\windows\DUMP449a.tmp
2009-05-16 16:28 94,208 a------- c:\windows\DUMP5fb4.tmp
2009-05-16 16:25 90,112 a------- c:\windows\DUMP704e.tmp
2009-05-16 13:57 94,208 a------- c:\windows\DUMP6810.tmp
2009-05-16 13:37 90,112 a------- c:\windows\DUMP7501.tmp
2009-05-16 13:05 90,112 a------- c:\windows\DUMP7639.tmp
2009-05-16 12:39 94,208 a------- c:\windows\DUMP6745.tmp
2009-05-16 12:37 94,208 a------- c:\windows\DUMP67b3.tmp
2009-05-16 12:34 94,208 a------- c:\windows\DUMP67b2.tmp
2009-05-16 12:30 94,208 a------- c:\windows\DUMP6ca4.tmp
2009-05-16 12:11 90,112 a------- c:\windows\DUMP7213.tmp
2009-05-16 12:02 94,208 a------- c:\windows\DUMP687e.tmp
2009-05-16 12:00 90,112 a------- c:\windows\DUMP59f7.tmp
2009-05-16 11:49 90,112 a------- c:\windows\DUMP59e7.tmp
2009-05-16 11:33 94,208 a------- c:\windows\DUMP6707.tmp
2009-05-16 11:06 94,208 a------- c:\windows\DUMP5d52.tmp
2009-05-16 00:49 94,208 a------- c:\windows\DUMP5d81.tmp
2009-05-16 00:36 90,112 a------- c:\windows\DUMP5c58.tmp
2009-05-16 00:24 94,208 a------- c:\windows\DUMP5f56.tmp
2009-05-16 00:21 94,208 a------- c:\windows\DUMP5e3d.tmp
2009-05-05 19:43 189,072 a------- c:\windows\system32\PnkBstrB.exe
2009-03-14 18:20 75,064 a------- c:\windows\system32\PnkBstrA.exe
2009-03-06 10:22 284,160 a------- c:\windows\system32\pdh.dll
2008-12-31 18:44 22,328 a------- c:\docume~1\nikki\applic~1\PnkBstrK.sys
============= FINISH: 17:13:08.25 ===============
Also she doesn't have the ark.txt because whenever she tried to it would give her the blue screen and shut down on her all three times she did it.
She also told me sometimes it will just shut down without a blue screen and then she will get this message :"overclocking failed press F1 to enter set up or press F2 to normal default"
DDS (Ver_09-05-14.01) - NTFSx86
Run by Nikki at 17:12:51.14 on Wed 05/27/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3295.2851 [GMT -4:00]
AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Nikki\Desktop\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
mDefault_Page_URL = hxxp://yahoo.sbc.com/dsl
mDefault_Search_URL = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
mSearch Page = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com
mSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.html
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
uURLSearchHooks: N/A: {00a6faf6-072e-44cf-8957-5838f569a31d} - c:\program files\mywebsearch\srchastt\1.bin\MWSSRCAS.DLL
BHO: MyWebSearch Search Assistant BHO: {00a6faf1-072e-44cf-8957-5838f569a31d} - c:\program files\mywebsearch\srchastt\1.bin\MWSSRCAS.DLL
BHO: 1 (0x1): {02478d38-c3f9-4efb-9b51-7695eca05670} - Yahoo! Companion BHO
BHO: mwsBar BHO: {07b18ea1-a523-4961-b6bb-170de4475cca} - c:\program files\mywebsearch\bar\1.bin\MWSBAR.DLL
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {399d96ca-6f9a-4fff-95fe-284e45ebb935} - No File
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: My Web Search: {07b18ea9-a523-4961-b6bb-170de4475cca} - c:\program files\mywebsearch\bar\1.bin\MWSBAR.DLL
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
EB: &Yahoo! Messenger: {4528bbe0-4e08-11d5-ad55-00010333d0ad} - c:\program files\yahoo!\messenger\yhexbmes.dll
uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messen~1\YAHOOM~1.EXE" -quiet
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [High Definition Audio Property Page Shortcut] HDAShCut.exe
mRun: [Lexmark X6100 Series] "c:\program files\lexmark x6100 series\lxbfbmgr.exe"
mRun: [My Web Search Bar Search Scope Monitor] "c:\progra~1\mywebs~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
mRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [PRISMSVR.EXE] "c:\windows\system32\PRISMSVR.EXE" /APPLY
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [MyWebSearch Plugin] rundll32 c:\progra~1\mywebs~1\bar\1.bin\M3PLUGIN.DLL,UPF
mRun: [LogMeIn GUI] "c:\program files\logmein\x86\LogMeInSystray.exe"
IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZRxdm479YYUS
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Yahoo! Dictionary - file:///c:\program files\yahoo!\Common/ycdict.htm
IE: Yahoo! Search - file:///c:\program files\yahoo!\Common/ycsrch.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2499216C-4BA5-11D5-BD9C-000103C116D5} - {2499216C-4BA5-11D5-BD9C-000103C116D5} - c:\program files\yahoo!\common\ylogin.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll
IE: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - {4C171D40-8277-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\messenger\yhexbmes.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - hxxp://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/PopularScreenSaversInitialSetup1.0.1.1.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper20073151.dll
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1243371316781
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - hxxp://download.yahoo.com/dl/installs/yab_af.cab
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} - hxxp://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: mctp - {d7b95390-b1c5-11d0-b111-0080c712fe82} -
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
WinCE Filter: image/bmp - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: image/gif - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: image/jpeg - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: image/xbm - {86F59FAE-FB3A-11D1-AA72-00C04FAE2D4B} -
WinCE Filter: text/asp - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} -
WinCE Filter: text/html - {6C5C3074-FFAB-11d1-8EC4-00C04F98D57A} -
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: LMIinit - LMIinit.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
============= SERVICES / DRIVERS ===============
R0 m5288;m5288;c:\windows\system32\drivers\m5288.sys [2009-5-26 210304]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-5-26 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-5-26 72944]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2008-7-24 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2008-10-6 47640]
R2 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [2004-8-12 14336]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-5-26 7408]
S1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys --> c:\windows\system32\drivers\mfehidk.sys [?]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\mcafee\siteadvisor\mcsacore.exe" --> c:\program files\mcafee\siteadvisor\McSACore.exe [?]
S2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe --> c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [?]
S2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2009-5-8 144704]
S3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-5-8 606736]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys --> c:\windows\system32\drivers\mfeavfk.sys [?]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys --> c:\windows\system32\drivers\mfebopk.sys [?]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys --> c:\windows\system32\drivers\mferkdk.sys [?]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys --> c:\windows\system32\drivers\mfesmfk.sys [?]
S4 LMIRfsClientNP;LMIRfsClientNP; [x]
=============== Created Last 30 ================
2009-05-27 11:51 268,648 a------- c:\windows\system32\mucltui.dll
2009-05-27 11:51 27,496 a------- c:\windows\system32\mucltui.dll.mui
2009-05-26 22:04 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2009-05-26 22:04 <DIR> --d----- c:\program files\common files\Wise Installation Wizard
2009-05-26 22:02 1,341,441 a------- C:\MGtools.exe
2009-05-26 21:46 410,984 a------- c:\windows\system32\deploytk.dll
2009-05-26 21:46 73,728 a------- c:\windows\system32\javacpl.cpl
2009-05-26 19:44 29,696 a------- c:\windows\system32\dev32.exe
2009-05-26 19:35 210,304 a------- c:\windows\system32\drivers\m5288.sys
2009-05-26 19:35 167,936 a------- c:\windows\system32\coin5288.dll
2009-05-26 19:35 35,587 a------- c:\windows\system32\rM5288.exe
2009-05-26 19:35 9,621 a------- c:\windows\system32\drivers\ulisata.cat
2009-05-26 19:25 <DIR> --d----- c:\program files\ATI
2009-05-26 19:23 363,520 ac------ c:\windows\system32\dllcache\psisdecd.dll
2009-05-26 19:22 <DIR> --d----- c:\program files\ATI Technologies
2009-05-26 19:16 <DIR> --d----- C:\Driver Download
2009-05-26 19:10 <DIR> --d----- C:\Driver Backup 5-26-2009-191035
2009-05-26 19:01 1,686,016 a------- c:\windows\system32\clinetsuitex6.ocx
2009-05-26 19:01 662,288 a------- c:\windows\system32\MSCOMCT2.OCX
2009-05-26 19:01 427,864 a------- c:\windows\system32\XceedZip.dll
2009-05-26 19:01 <DIR> --d----- c:\program files\Driver-Soft
2009-05-26 18:42 <DIR> --d----- c:\program files\Conduit
2009-05-26 18:42 <DIR> --d----- c:\program files\RadarSync
2009-05-26 15:32 447,752 a------- c:\windows\system32\vp6vfw.dll
2009-05-26 11:00 381,425 -c------ c:\windows\system32\dllcache\copycd.wmv
2009-05-26 11:00 184,959 -c------ c:\windows\system32\dllcache\compact.wmz
2009-05-26 11:00 9,585 -c------ c:\windows\system32\dllcache\controls.css
2009-05-26 11:00 8,298 -c------ c:\windows\system32\dllcache\contents.htm
2009-05-26 11:00 6,878 -c------ c:\windows\system32\dllcache\controls.js
2009-05-26 11:00 773 -c------ c:\windows\system32\dllcache\cnth.gif
2009-05-26 11:00 773 -c------ c:\windows\system32\dllcache\cnt.gif
2009-05-26 11:00 772 -c------ c:\windows\system32\dllcache\cntd.gif
2009-05-26 11:00 760 -c------ c:\windows\system32\dllcache\cloapph.gif
2009-05-26 11:00 717 -c------ c:\windows\system32\dllcache\cloapp.gif
2009-05-26 11:00 999 -c------ c:\windows\system32\dllcache\bktrh.gif
2009-05-26 10:50 203,136 -c------ c:\windows\system32\dllcache\rmcast.sys
2009-05-26 10:50 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2009-05-26 10:50 333,952 -c------ c:\windows\system32\dllcache\srv.sys
2009-05-26 10:50 691,712 -c------ c:\windows\system32\dllcache\inetcomm.dll
2009-05-26 10:50 337,408 -c------ c:\windows\system32\dllcache\netapi32.dll
2009-05-26 10:49 215,552 -c------ c:\windows\system32\dllcache\wordpad.exe
2009-05-25 21:10 85,504 a------- c:\windows\system32\ff_vfw.dll
2009-05-25 21:10 547 a------- c:\windows\system32\ff_vfw.dll.manifest
2009-05-25 21:10 60,273 a------- c:\windows\system32\pthreadGC2.dll
2009-05-25 21:10 <DIR> --d----- c:\program files\ffdshow
2009-05-24 23:11 <DIR> --d----- c:\program files\SBC Yahoo!
2009-05-24 23:10 24,576 a------- c:\windows\system32\msxml3a.dll
2009-05-24 22:46 <DIR> --d----- C:\@Home
2009-05-24 20:14 65,536 a------- c:\windows\system32\YCRWin32.dll
2009-05-24 20:14 344,064 a------- c:\windows\system32\msvcr70.dll
2009-05-24 20:14 84,992 a------- c:\windows\system32\ATL70.DLL
2009-05-24 17:34 57,856 ac------ c:\windows\system32\dllcache\EXCH_scripto.dll
2009-05-24 17:33 480,256 ac------ c:\windows\system32\dllcache\cintsetp.exe
2009-05-24 17:32 488 a---hr-- c:\windows\system32\logonui.exe.manifest
2009-05-24 17:32 749 a---hr-- c:\windows\WindowsShell.Manifest
2009-05-24 17:32 749 a---hr-- c:\windows\system32\wuaucpl.cpl.manifest
2009-05-24 17:32 749 a---hr-- c:\windows\system32\sapi.cpl.manifest
2009-05-24 17:32 749 a---hr-- c:\windows\system32\ncpa.cpl.manifest
2009-05-24 17:32 16,384 ac------ c:\windows\system32\dllcache\isignup.exe
2009-05-24 13:56 90,112 a------- c:\windows\DUMP7733.tmp
2009-05-24 13:56 90,112 a------- c:\windows\DUMP73c8.tmp
2009-05-24 13:56 90,112 a------- c:\windows\DUMP6ca5.tmp
2009-05-24 13:56 90,112 a------- c:\windows\DUMP6adf.tmp
2009-05-24 13:12 2,145,386,496 a------- c:\windows\MEMORY.DMP
2009-05-16 16:20 <DIR> --d----- c:\program files\CCleaner
2009-05-16 13:00 2,944 a------- c:\windows\system32\drivers\msmpu401.sys
2009-05-16 13:00 417,887 a------- c:\program files\Uninstall Fun Web Products.dll
2009-05-16 00:16 <DIR> --d----- c:\program files\MyWebSearch
2009-05-16 00:16 <DIR> --d----- c:\program files\FunWebProducts
2009-05-16 00:16 <DIR> --d----- c:\program files\McAfee.com
2009-05-16 00:16 <DIR> --d----- c:\program files\McAfee
2009-05-16 00:16 <DIR> --d----- c:\program files\common files\McAfee
2009-05-15 21:15 <DIR> --d----- c:\program files\Analog Devices
2009-05-15 20:35 <DIR> --d----- c:\windows\system32\XPSViewer
2009-05-15 20:12 39,337 a------- c:\windows\setupapi.old
2009-05-15 00:48 <DIR> --d----- C:\MGtools
2009-05-15 00:38 <DIR> --d----- C:\cmdcons
2009-05-15 00:16 <DIR> --d----- c:\docume~1\nikki\applic~1\Malwarebytes
2009-05-15 00:16 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-05-15 00:16 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-05-14 23:39 <DIR> --d----- c:\program files\SUPERAntiSpyware
2009-05-14 23:39 <DIR> --d----- c:\docume~1\nikki\applic~1\SUPERAntiSpyware.com
2009-05-14 23:08 <DIR> --d----- c:\windows\pss
2009-05-08 19:32 <DIR> --d----- c:\windows\The Sims 2 AiO
2009-05-08 13:25 <DIR> --d----- c:\program files\Microsoft ActiveSync
2009-05-08 11:18 929,792 a----r-- c:\windows\system32\PRISME5.dll
2009-05-08 11:18 15,781 a----r-- c:\windows\system32\drivers\mdc8021x.sys
2009-05-06 22:29 <DIR> --d----- c:\docume~1\nikki\applic~1\MSNInstaller
==================== Find3M ====================
2009-05-24 17:31 22,720 a------- c:\windows\system32\emptyregdb.dat
2009-05-24 13:15 94,208 a------- c:\windows\DUMP74b3.tmp
2009-05-19 15:38 94,208 a------- c:\windows\DUMP704f.tmp
2009-05-16 21:17 94,208 a------- c:\windows\DUMP4c7a.tmp
2009-05-16 21:13 94,208 a------- c:\windows\DUMP7afc.tmp
2009-05-16 20:32 90,112 a------- c:\windows\DUMP7222.tmp
2009-05-16 20:22 90,112 a------- c:\windows\DUMP449a.tmp
2009-05-16 16:28 94,208 a------- c:\windows\DUMP5fb4.tmp
2009-05-16 16:25 90,112 a------- c:\windows\DUMP704e.tmp
2009-05-16 13:57 94,208 a------- c:\windows\DUMP6810.tmp
2009-05-16 13:37 90,112 a------- c:\windows\DUMP7501.tmp
2009-05-16 13:05 90,112 a------- c:\windows\DUMP7639.tmp
2009-05-16 12:39 94,208 a------- c:\windows\DUMP6745.tmp
2009-05-16 12:37 94,208 a------- c:\windows\DUMP67b3.tmp
2009-05-16 12:34 94,208 a------- c:\windows\DUMP67b2.tmp
2009-05-16 12:30 94,208 a------- c:\windows\DUMP6ca4.tmp
2009-05-16 12:11 90,112 a------- c:\windows\DUMP7213.tmp
2009-05-16 12:02 94,208 a------- c:\windows\DUMP687e.tmp
2009-05-16 12:00 90,112 a------- c:\windows\DUMP59f7.tmp
2009-05-16 11:49 90,112 a------- c:\windows\DUMP59e7.tmp
2009-05-16 11:33 94,208 a------- c:\windows\DUMP6707.tmp
2009-05-16 11:06 94,208 a------- c:\windows\DUMP5d52.tmp
2009-05-16 00:49 94,208 a------- c:\windows\DUMP5d81.tmp
2009-05-16 00:36 90,112 a------- c:\windows\DUMP5c58.tmp
2009-05-16 00:24 94,208 a------- c:\windows\DUMP5f56.tmp
2009-05-16 00:21 94,208 a------- c:\windows\DUMP5e3d.tmp
2009-05-05 19:43 189,072 a------- c:\windows\system32\PnkBstrB.exe
2009-03-14 18:20 75,064 a------- c:\windows\system32\PnkBstrA.exe
2009-03-06 10:22 284,160 a------- c:\windows\system32\pdh.dll
2008-12-31 18:44 22,328 a------- c:\docume~1\nikki\applic~1\PnkBstrK.sys
============= FINISH: 17:13:08.25 ===============
