Ok, firstly, The reset button was not located under the advanced button tab. Only restore defaults. I did so.. doubt it worked.
Secondly, the OTmoveit on those 4 files did not work. See log below. The rest of the scans are cut and pasted.
OTMOVEIT results
Error: Unable to interpret <C:\WINDOWS\system32\mSuuxyay.ini2> in the current context!
Error: Unable to interpret <C:\WINDOWS\system32\mSuuxyay.ini> in the current context!
Error: Unable to interpret <C:\WINDOWS\system32\ltgnycfw.dll> in the current context!
Error: Unable to interpret <C:\WINDOWS\system32\f30f2094-.txt> in the current context!
OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11292008_215848
-----------------------------------------------------------------------------------------------------------
GMER 1.0.14.14536 -
http://www.gmer.net
Rootkit scan 2008-11-29 22:08:09
Windows 5.1.2600 Service Pack 3
---- Devices - GMER 1.0.14 ----
AttachedDevice \FileSystem\Ntfs \Ntfs TmPreFlt.sys (Pre-Filter For XP/Trend Micro Inc.)
AttachedDevice \Driver\Tcpip \Device\Ip tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Tcpip \Device\Tcp tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
AttachedDevice \Driver\Tcpip \Device\Udp tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
AttachedDevice \Driver\Tcpip \Device\RawIp tmtdi.sys (Trend Micro TDI Driver (i386-fre)/Trend Micro Inc.)
---- EOF - GMER 1.0.14 ----
OTViewIt logfile created on: 11/29/2008 10:09:22 PM - Run
OTViewIt by OldTimer - Version 1.0.20.0 Folder = C:\Documents and Settings\shaevans\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 68.85% Memory free
3.84 Gb Paging File | 3.36 Gb Available in Paging File | 87.43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.53 Gb Total Space | 45.09 Gb Free Space | 60.51% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NYMTJSLXP041364
Current User Name: ShaEvans
NOT logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Whitelist: On
File Age = 30 Days
========== Processes ==========
[2007/02/06 15:02:26 | 00,266,295 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
[2007/10/08 14:06:44 | 01,183,744 | ---- | M] (Intel Corporation ) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
[2007/05/03 18:51:42 | 00,095,024 | ---- | M] (ActivIdentity) -- c:\Program Files\ActivIdentity\ActivClient\acevents.exe
[2007/05/03 18:51:44 | 00,182,576 | ---- | M] (ActivIdentity) -- c:\Program Files\ActivIdentity\ActivClient\accoca.exe
[2008/10/01 12:06:14 | 00,116,040 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[2007/05/01 16:52:14 | 00,183,064 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\atchksrv.exe
[2008/08/29 09:18:44 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
[2007/07/16 11:58:02 | 01,524,512 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
[2004/01/07 17:41:22 | 00,249,856 | ---- | M] (DameWare Development LLC) -- C:\WINDOWS\system32\DWRCS.EXE
[2007/10/08 14:27:02 | 00,794,624 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
[2008/10/17 10:29:42 | 00,168,432 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
[2007/02/15 13:00:04 | 00,677,408 | ---- | M] (Infineon Technologies AG) -- c:\WINDOWS\system32\IFXSPMGT.exe
[2007/01/23 19:26:02 | 00,849,440 | ---- | M] (Infineon Technologies AG) -- c:\WINDOWS\system32\IFXTCS.exe
[2007/01/04 19:48:52 | 00,112,152 | R--- | M] (InterVideo) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
[2008/11/26 10:55:34 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
[2007/05/01 16:52:06 | 00,121,624 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\Lms.exe
[2008/10/09 15:47:06 | 00,906,536 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\NTRtScan.exe
[2007/02/15 12:55:18 | 00,140,832 | ---- | M] (Infineon Technologies AG) -- c:\WINDOWS\system32\IfxPsdSv.exe
[2007/10/08 14:01:54 | 00,483,328 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
[2007/05/01 16:52:18 | 01,489,688 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\Uns.exe
[2007/12/05 16:30:40 | 00,144,688 | R--- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
[2008/10/09 15:47:02 | 00,984,360 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\TmListen.exe
[2007/03/07 05:19:00 | 00,066,048 | R--- | M] (Bioscrypt Inc.) -- C:\Program Files\Hewlett-Packard\IAM\Bin\asghost.exe
[2008/10/09 15:47:22 | 00,296,224 | ---- | M] (Trend Micro Inc.) -- C:\WINDOWS\Temp\IU7186.EXE
[2008/10/09 15:47:20 | 00,435,576 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\CNTAoSMgr.exe
[2007/05/01 16:52:10 | 00,404,248 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\atchk.exe
[2007/09/15 02:27:20 | 01,015,808 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[2007/03/01 13:18:36 | 00,472,776 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
[2008/04/14 05:42:42 | 00,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe
[2007/10/08 14:18:04 | 00,995,328 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
[2007/10/08 14:13:36 | 01,101,824 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe
[2007/05/03 18:51:06 | 00,293,168 | ---- | M] (ActivIdentity) -- C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
[2007/01/05 17:36:48 | 00,872,448 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe
[2007/05/18 21:50:08 | 00,162,584 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\hkcmd.exe
[2007/05/18 21:50:16 | 00,138,008 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxpers.exe
[2007/05/18 21:50:20 | 00,252,696 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxsrvc.exe
[2007/11/06 16:34:02 | 00,177,456 | ---- | M] ( Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
[2007/05/03 18:51:42 | 00,095,024 | ---- | M] (ActivIdentity) -- c:\Program Files\ActivIdentity\ActivClient\acevents.exe
[2002/12/17 12:28:00 | 00,684,032 | ---- | M] (Roxio) -- C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\Directcd.exe
[2008/10/09 15:47:02 | 00,709,928 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\PccNTMon.exe
[2008/11/26 10:55:34 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
[2007/01/23 20:15:14 | 00,181,792 | ---- | M] (Infineon Technologies AG) -- c:\Program Files\Hewlett-Packard\Embedded Security Software\PSDrt.exe
[2007/05/16 09:43:04 | 00,677,432 | ---- | M] () -- C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
[2007/02/06 15:14:00 | 00,561,213 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[1999/09/30 20:31:38 | 00,869,376 | ---- | M] (Fred's Software) -- C:\Program Files\PrintKey2000\Printkey2000.exe
[2008/09/26 11:12:16 | 01,897,184 | ---- | M] (Cisco Systems, Inc) -- C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
[2007/10/08 14:09:26 | 00,659,456 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
[2007/02/06 15:11:50 | 01,409,108 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
[2008/04/14 05:42:24 | 00,093,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe
[2008/10/15 21:03:31 | 00,185,872 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
[2008/11/28 12:41:13 | 00,349,696 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\shaevans\Desktop\OTMoveIt3.exe
[2008/04/14 05:42:30 | 00,069,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\notepad.exe
[2008/11/29 21:59:47 | 00,422,400 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\shaevans\Desktop\OTViewIt.exe
========== (O23) Win32 Services ==========
[2007/05/03 18:51:44 | 00,182,576 | ---- | M] (ActivIdentity) -- c:\Program Files\ActivIdentity\ActivClient\accoca.exe -- (accoca [Auto | Running])
[2008/10/01 12:06:14 | 00,116,040 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running])
[2007/10/24 00:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
[2007/05/01 16:52:14 | 00,183,064 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\atchksrv.exe -- (atchksrv [Auto | Running])
[2008/05/13 13:26:00 | 00,077,944 | ---- | M] (Autodesk) -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service [On_Demand | Stopped])
[2008/08/29 09:18:44 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running])
[2007/02/06 15:02:26 | 00,266,295 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe -- (btwdins [Auto | Running])
File not found -- -- (CCAAgentStub [Auto | Stopped])
[2007/10/24 00:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
[2007/07/16 11:58:02 | 01,524,512 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND [Auto | Running])
[2002/02/04 05:20:00 | 00,053,296 | ---- | M] (IBM Corporation) -- C:\WINDOWS\cwbrxd.exe -- (Cwbrxd [On_Demand | Stopped])
[2004/01/07 17:41:22 | 00,249,856 | ---- | M] (DameWare Development LLC) -- C:\WINDOWS\system32\DWRCS.EXE -- (DWMRCS [Auto | Running])
[2007/10/08 14:27:02 | 00,794,624 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -- (EvtEng [Auto | Running])
[2007/04/30 08:28:34 | 00,172,131 | ---- | M] (Hewlett-Packard Ltd) -- C:\WINDOWS\system32\flcdlock.exe -- (FLCDLOCK [On_Demand | Stopped])
[2008/10/17 10:29:42 | 00,168,432 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [Auto | Running])
[2007/12/05 16:30:40 | 00,144,688 | R--- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe -- (hpqwmiex [Auto | Running])
[2005/04/03 23:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])
[2007/02/15 13:00:04 | 00,677,408 | ---- | M] (Infineon Technologies AG) -- c:\WINDOWS\system32\IFXSPMGT.exe -- (IFXSpMgtSrv [Auto | Running])
[2007/01/23 19:26:02 | 00,849,440 | ---- | M] (Infineon Technologies AG) -- c:\WINDOWS\system32\IFXTCS.exe -- (IFXTCS [Auto | Running])
[2007/12/19 17:01:28 | 00,155,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\imapihp.exe -- (ImapiService [On_Demand | Stopped])
[2007/01/04 19:48:52 | 00,112,152 | R--- | M] (InterVideo) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr [Auto | Running])
[2008/11/26 10:55:34 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
[2007/05/01 16:52:06 | 00,121,624 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\Lms.exe -- (LMS [Auto | Running])
[2008/10/09 15:47:06 | 00,906,536 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\NTRtScan.exe -- (ntrtscan [Auto | Running])
[2003/07/28 12:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
[2007/02/15 12:55:18 | 00,140,832 | ---- | M] (Infineon Technologies AG) -- c:\WINDOWS\system32\IfxPsdSv.exe -- (PersonalSecureDriveService [Auto | Running])
[2007/10/08 14:01:54 | 00,483,328 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -- (RegSrvc [Auto | Running])
[2007/10/08 14:06:44 | 01,183,744 | ---- | M] (Intel Corporation ) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- (S24EventMonitor [Auto | Running])
[2008/10/09 15:47:02 | 00,984,360 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\TmListen.exe -- (tmlisten [Auto | Running])
[2008/10/09 15:47:08 | 00,652,552 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\TmProxy.exe -- (TmProxy [On_Demand | Stopped])
[2007/05/01 16:52:18 | 01,489,688 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\Uns.exe -- (UNS [Auto | Running])
[2006/10/18 20:05:24 | 00,913,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
========== Driver Services ==========
[2008/04/14 00:16:22 | 00,048,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\61883.sys -- (61883 [On_Demand | Stopped])
[2006/10/17 10:59:06 | 00,022,016 | ---- | M] (Hewlett-Packard Corporation) -- C:\WINDOWS\system32\drivers\Accelerometer.sys -- (Accelerometer [On_Demand | Running])
[2007/10/01 13:27:40 | 00,281,600 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService [On_Demand | Running])
[2007/07/13 10:26:12 | 00,094,976 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (AEAudio [On_Demand | Running])
[2007/12/19 09:30:25 | 00,021,361 | ---- | M] (Cisco Systems, Inc.) -- C:\WINDOWS\system32\drivers\AegisP.sys -- (AegisP [Auto | Running])
[2007/08/28 15:47:36 | 00,146,560 | ---- | M] (AuthenTec, Inc.) -- C:\WINDOWS\system32\drivers\atswpdrv.sys -- (ATSWPDRV [On_Demand | Running])
[2008/04/14 00:16:22 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\avc.sys -- (Avc [On_Demand | Stopped])
[2007/02/14 14:20:56 | 00,530,861 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio [On_Demand | Running])
[2007/02/14 14:20:58 | 00,030,459 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver [On_Demand | Running])
[2007/02/14 14:20:58 | 00,868,298 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL [On_Demand | Running])
[2007/02/14 14:20:58 | 00,149,123 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS [On_Demand | Running])
[2007/02/14 14:21:00 | 00,067,960 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB [On_Demand | Running])
[2008/09/15 19:14:18 | 00,009,336 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp [System | Stopped])
[2008/09/15 19:14:20 | 00,009,464 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k [System | Stopped])
[2002/12/17 12:27:32 | 00,241,152 | ---- | M] (Roxio) -- C:\WINDOWS\System32\drivers\cdudf_xp.sys -- (cdudf_xp [System | Running])
[2007/01/18 15:28:02 | 00,005,275 | ---- | M] (Cisco Systems, Inc.) -- C:\WINDOWS\system32\drivers\CVirtA.sys -- (CVirtA [On_Demand | Stopped])
[2007/07/16 11:57:12 | 00,306,299 | ---- | M] (Cisco Systems, Inc.) -- C:\WINDOWS\system32\drivers\CVPNDRVA.sys -- (CVPNDRVA [Auto | Running])
[2007/04/23 13:13:44 | 00,030,008 | ---- | M] (Hewlett-Packard Development Company L.P.) -- C:\WINDOWS\system32\drivers\DAMDrv.sys -- (DAMDrv [On_Demand | Stopped])
[2007/01/31 13:45:06 | 00,127,376 | ---- | M] (Deterministic Networks, Inc.) -- C:\WINDOWS\system32\drivers\dne2000.sys -- (DNE [On_Demand | Running])
[2008/01/02 11:34:13 | 00,025,898 | ---- | M] (Roxio) -- C:\WINDOWS\System32\drivers\Dvd_2k.sys -- (dvd_2K [On_Demand | Stopped])
[2007/06/19 18:47:58 | 00,255,896 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\e1e5132.sys -- (e1express [On_Demand | Running])
[2008/11/27 00:43:08 | 00,085,969 | ---- | M] (GMER) -- C:\WINDOWS\system32\drivers\gmer.sys -- (gmer [On_Demand | Running])
[2006/06/28 09:54:00 | 00,009,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey [On_Demand | Running])
[2008/04/13 22:06:06 | 00,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus [On_Demand | Running])
[2006/10/17 10:57:58 | 00,017,920 | ---- | M] (Hewlett-Packard Corporation) -- C:\WINDOWS\system32\drivers\hpdskflt.sys -- (hpdskflt [Boot | Running])
[2007/06/18 16:12:04 | 00,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr [On_Demand | Running])
[2007/10/16 07:28:20 | 00,211,200 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL [On_Demand | Running])
[2007/10/16 07:29:00 | 00,989,312 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV [On_Demand | Running])
[2007/05/16 11:14:58 | 05,707,744 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm [On_Demand | Running])
[2003/02/23 02:05:00 | 00,002,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\idisw2km.sys -- (idisw2km [Disabled | Stopped])
[2007/01/23 19:13:26 | 00,036,608 | ---- | M] (Infineon Technologies AG) -- C:\WINDOWS\system32\drivers\ifxtpm.sys -- (IFXTPM [On_Demand | Running])
[2008/04/14 00:09:50 | 00,014,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kbdhid.sys -- (kbdhid [System | Running])
[2003/02/23 02:05:00 | 00,007,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kbstuff5.sys -- (kbstuff [On_Demand | Running])
[2006/06/19 06:26:58 | 00,012,672 | ---- | M] (Conexant) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys -- (mdmxsdk [Auto | Running])
[2008/01/02 11:34:13 | 00,030,630 | ---- | M] (Roxio) -- C:\WINDOWS\System32\drivers\Mmc_2k.sys -- (mmc_2K [On_Demand | Stopped])
[2007/09/28 13:30:57 | 00,019,345 | ---- | M] (Motive, Inc.) -- C:\Program Files\Common Files\Motive\MREMPR5.sys -- (MREMPR5 [On_Demand | Stopped])
[2007/09/28 13:30:49 | 00,018,003 | ---- | M] (Motive, Inc.) -- C:\Program Files\Common Files\Motive\MRENDIS5.sys -- (MRENDIS5 [On_Demand | Stopped])
[2008/04/14 00:16:10 | 00,051,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\msdv.sys -- (MSDV [On_Demand | Stopped])
[2008/05/16 10:20:10 | 00,027,136 | ---- | M] (NCH Swift Sound) -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD [On_Demand | Stopped])
[2007/09/26 06:01:32 | 02,236,032 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32 [On_Demand | Running])
[2007/01/23 20:07:30 | 00,039,080 | ---- | M] (Infineon Technologies AG) -- C:\WINDOWS\system32\drivers\psd.sys -- (PersonalSecureDrive [System | Running])
[2001/08/23 07:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink [On_Demand | Running])
[2008/01/02 11:34:13 | 00,143,834 | ---- | M] (Roxio) -- C:\WINDOWS\System32\drivers\pwd_2K.sys -- (pwd_2k [System | Running])
[2008/09/15 19:14:18 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
[2006/12/20 01:08:00 | 00,047,616 | ---- | M] (RICOH Company, Ltd.) -- C:\WINDOWS\system32\drivers\rismc32.sys -- (RICOH SmartCard Reader [On_Demand | Stopped])
[2007/02/24 14:42:22 | 00,039,936 | ---- | M] (REDC) -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk [Auto | Running])
[2006/12/20 01:08:00 | 00,047,616 | ---- | M] (RICOH Company, Ltd.) -- C:\WINDOWS\system32\drivers\rismc32.sys -- (rismc32 [On_Demand | Running])
[2007/08/27 11:10:36 | 00,012,288 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans [Auto | Running])
[2008/04/14 00:06:46 | 00,079,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\sdbus.sys -- (sdbus [On_Demand | Running])
[2007/11/13 05:25:53 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv [On_Demand | Stopped])
[2004/06/16 11:19:58 | 00,046,080 | ---- | M] (SMSC) -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA [On_Demand | Running])
[2007/09/15 02:09:44 | 00,213,696 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP [On_Demand | Running])
[2008/10/09 15:47:28 | 00,142,096 | ---- | M] (Trend Micro Inc.) -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm [Auto | Running])
[2008/10/09 15:47:10 | 00,205,328 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\TmXpflt.sys -- (TmFilter [Auto | Running])
[2008/10/09 15:47:08 | 00,036,368 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\TmPreflt.sys -- (TmPreFilter [Auto | Running])
[2008/10/09 15:47:28 | 00,072,072 | ---- | M] (Trend Micro Inc.) -- C:\WINDOWS\system32\drivers\tmtdi.sys -- (tmtdi [System | Running])
[2008/01/02 11:34:13 | 00,206,464 | ---- | M] (Roxio) -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys -- (UdfReadr_xp [System | Running])
[2008/10/09 15:47:10 | 01,195,448 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\OfficeScan Client\VsapiNT.sys -- (VSApiNt [Auto | Running])
[2005/01/26 09:22:20 | 00,280,344 | ---- | M] (Zone Labs LLC) -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant [On_Demand | Stopped])
[2006/11/02 07:22:54 | 00,492,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\wdf01000.sys -- (Wdf01000 [On_Demand | Running])
[2007/10/16 07:28:16 | 00,731,136 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf [On_Demand | Running])
[ 2008/04/14 00:06:40 | 00,008,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\wmiacpi.sys -- (WmiAcpi [System | Running])
========== (R ) Internet Explorer ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
"Default_Search_URL"=http://www.google.com/ie
"Local Page"=%SystemRoot%\system32\blank.htm
"Search Page"=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
"Start Page"=http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
"CustomizeSearch"=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
"Default_Search_URL"=http://www.google.com/ie
"SearchAssistant"=http://www.google.com/ie
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]
"Local Page"=C:\WINDOWS\system32\blank.htm
"Page_Transitions"=
"Search Page"=http://www.google.com
"SearchMigratedDefaultName"=Google
"SearchMigratedDefaultURL"=http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
"Start Page"=http://home.fcinternal.net/fc/default.asp?ID=2
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant"=http://www.google.com/ie
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL]
""=http://www.google.com/search?q=%s
"provider"=gogl
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
"ProxyOverride" = *.local
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\SOFTWARE\Microsoft\Internet Explorer\Main]
"Local Page"=C:\WINDOWS\system32\blank.htm
"Page_Transitions"=
"Search Page"=http://www.google.com
"SearchMigratedDefaultName"=Google
"SearchMigratedDefaultURL"=http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
"Start Page"=http://home.fcinternal.net/fc/default.asp?ID=2
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant"=http://www.google.com/ie
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\Software\Microsoft\Internet Explorer\SearchURL]
""=http://www.google.com/search?q=%s
"provider"=gogl
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
"ProxyOverride" = *.local
========== (O1) Hosts File ==========
HOSTS File = (288033 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
First 25 entries...
127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 www.1001namen.com
127.0.0.1 1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
9926 more lines...
========== (O2) BHO's ==========
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (HKLM) -- C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (HKLM) -- C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll (Google Inc.)
{DBC80044-A445-435b-BC74-9C25C1C588A9} (HKLM) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (HKLM) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
========== (O3) Toolbars ==========
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found
========== (O4) Run Keys ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
""= File not found
"accrdsub"="c:\Program Files\ActivIdentity\ActivClient\accrdsub.exe" (ActivIdentity)
"AdaptecDirectCD"="C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" (Roxio)
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.)
"atchk"="C:\Program Files\Intel\AMT\atchk.exe" (Intel Corporation)
"Client Access Check Version"="C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN (IBM Corporation)
"Client Access Express Welcome"="C:\Program Files\IBM\Client Access\cwbwlwiz.exe" (IBM Corporation)
"Client Access Help Update"="C:\Program Files\IBM\Client Access\cwbinhlp.exe" (IBM Corporation)
"Client Access Service"="C:\Program Files\IBM\Client Access\cwbsvstr.exe" (IBM Corporation)
"CognizanceTS"=rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule (Cognizance Corporation)
"Cpqset"=C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe ()
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
"hpWirelessAssistant"=%ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Hewlett-Packard Development Company, L.P.)
"IFXSPMGT"=c:\WINDOWS\system32\ifxspmgt.exe /NotifyLogon (Infineon Technologies AG)
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless (Intel Corporation)
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" (Intel Corporation)
"OfficeScanNT Monitor"="C:\Program Files\Trend Micro\OfficeScan Client\Pccntmon.exe" -HideWindow (Trend Micro Inc.)
"Persistence"=C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
"PTHOSTTR"=c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start (Hewlett-Packard Development Company, L.P.)
"QlbCtrl"=%ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start ( Hewlett-Packard Development Company, L.P.)
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray (Analog Devices, Inc.)
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot (RealNetworks, Inc.)
"Verizon_McciTrayApp"=C:\Program Files\Verizon\McciTrayApp.exe File not found
========== (O4) Startup Folders ==========
[2005/03/05 08:18:22 | 00,010,872 | ---- | M] (Autodesk, Inc) -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutoCAD LT Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
[2007/02/06 15:14:00 | 00,561,213 | ---- | M] (Broadcom Corporation.) -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[2007/12/07 18:18:00 | 00,028,672 | ---- | M] (Cisco Systems, Inc.) -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Clean Access Agent.lnk = C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgentLauncher.exe
[2000/01/21 03:15:54 | 00,065,588 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
[1999/09/30 20:31:38 | 00,869,376 | ---- | M] (Fred's Software) -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
========== (O6 & O7) Current Version Policies ==========
[HKEY_CURRENT_USER\Software\policies\microsoft\internet explorer\Restrictions]
"NoExternalBranding"=1
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\Software\policies\microsoft\internet explorer\Restrictions]
"NoExternalBranding"=1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoWelcomeScreen"=1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]
"dontdisplaylastusername"=1
"legalnoticecaption"=Legal Notice
"legalnoticetext"=This computer system and the data contained herein are property of Frontier Communications. Any unauthorized access and/or use of the data will be investigated and prosecuted to the full extent of the law. This system is to be used for business purposes. All information stored or processed is property of Frontier Communications and is subject to inspection.
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
"ClassicShell"=2
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]
"Wallpaper"=
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
"CDRAutoRun"=0
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
"CDRAutoRun"=0
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
"ClassicShell"=2
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]
"Wallpaper"=
========== (O8) IE Context Menu Extensions ==========
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\]
E&xport to Microsoft Excel: File not found
Send to &Bluetooth Device...: C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm [2006/08/16 07:16:32 | 00,002,773 | ---- | M] ()
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\Software\Microsoft\Internet Explorer\MenuExt\]
E&xport to Microsoft Excel: File not found
Send to &Bluetooth Device...: C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm [2006/08/16 07:16:32 | 00,002,773 | ---- | M] ()
========== (O9) IE Extensions ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
{92780B25-18CC-41C8-B9BE-3C9C571A8263}: Button: Research -- %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [2003/07/14 21:57:08 | 00,040,512 | ---- | M] (Microsoft Corporation)
{CCA281CA-C863-46ef-9331-5C8D4460577F}: Button: @btrez.dll,-4015 -- %ProgramFiles%\WIDCOMM\Bluetooth Software\btsendto_ie.htm [2006/08/16 07:16:32 | 00,005,589 | ---- | M] ()
{CCA281CA-C863-46ef-9331-5C8D4460577F}: Menu: @btrez.dll,-12650 -- %ProgramFiles%\WIDCOMM\Bluetooth Software\btsendto_ie.htm [2006/08/16 07:16:32 | 00,005,589 | ---- | M] ()
{e2e2dd38-d088-4134-82b7-f2ba38496583}: Menu: @xpsp3res.dll,-20001 -- %SystemRoot%\network diagnostic\xpnetdiag.exe [2008/04/14 00:23:34 | 00,558,080 | ---- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}: Button: Messenger -- %ProgramFiles%\Messenger\msmsgs.exe [2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}: Menu: Windows Messenger -- %ProgramFiles%\Messenger\msmsgs.exe [2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %SystemRoot%\system32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation)
CmdMapping\\{92780B25-18CC-41C8-B9BE-3C9C571A8263} [HKLM] -> %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 21:57:08 | 00,040,512 | ---- | M] (Microsoft Corporation)
CmdMapping\\{CCA281CA-C863-46ef-9331-5C8D4460577F} [HKLM] -> [@btrez.dll,-4015] -> File not found
CmdMapping\\{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> %SystemRoot%\network diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/14 00:23:34 | 00,558,080 | ---- | M] (Microsoft Corporation)
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation)
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %SystemRoot%\system32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation)
CmdMapping\\{92780B25-18CC-41C8-B9BE-3C9C571A8263} [HKLM] -> %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 21:57:08 | 00,040,512 | ---- | M] (Microsoft Corporation)
CmdMapping\\{CCA281CA-C863-46ef-9331-5C8D4460577F} [HKLM] -> [@btrez.dll,-4015] -> File not found
CmdMapping\\{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> %SystemRoot%\network diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/14 00:23:34 | 00,558,080 | ---- | M] (Microsoft Corporation)
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation)
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %SystemRoot%\system32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation)
CmdMapping\\{92780B25-18CC-41C8-B9BE-3C9C571A8263} [HKLM] -> %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 21:57:08 | 00,040,512 | ---- | M] (Microsoft Corporation)
CmdMapping\\{CCA281CA-C863-46ef-9331-5C8D4460577F} [HKLM] -> [@btrez.dll,-4015] -> File not found
CmdMapping\\{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> %SystemRoot%\network diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/14 00:23:34 | 00,558,080 | ---- | M] (Microsoft Corporation)
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %SystemRoot%\system32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation)
CmdMapping\\{92780B25-18CC-41C8-B9BE-3C9C571A8263} [HKLM] -> %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 21:57:08 | 00,040,512 | ---- | M] (Microsoft Corporation)
CmdMapping\\{CCA281CA-C863-46ef-9331-5C8D4460577F} [HKLM] -> [@btrez.dll,-4015] -> File not found
CmdMapping\\{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> %SystemRoot%\network diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/14 00:23:34 | 00,558,080 | ---- | M] (Microsoft Corporation)
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation)
========== (O12) Internet Explorer Plugins ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\]
PluginsPage: "" =
http://activex.microsoft.com/controls/find...=%s&mime=%s
PluginsPageFriendlyName: "" = Microsoft ActiveX Gallery
========== (O13) Default Prefixes ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
""=http://
========== (O15) Trusted Sites ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
1 domain(s) and sub-domain(s) not assigned to a zone.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
ADTRAN.COM\WWW: https in My Computer
czn.com: http in Local intranet
czncorp.com: http in Local intranet
fcinternal.net: http in Local intranet
frontiercorp.com: http in Local intranet
54 domain(s) and sub-domain(s) not assigned to a zone.
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
49 domain(s) and sub-domain(s) not assigned to a zone.
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
49 domain(s) and sub-domain(s) not assigned to a zone.
[HKEY_USERS\S-1-5-21-329068152-838170752-682003330-13558\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
ADTRAN.COM\WWW: https in My Computer
czn.com: http in Local intranet
czncorp.com: http in Local intranet
fcinternal.net: http in Local intranet
frontiercorp.com: http in Local intranet
54 domain(s) and sub-domain(s) not assigned to a zone.
========== (O16) DPF ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\]
{01113300-3E00-11D2-8470-0060089874ED}:
https://activatemydsl.verizon.net/sdcCommon...20Installer.cab -- Support.com Configuration Class
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}:
http://go.microsoft.com/fwlink/?linkid=58813 -- Office Genuine Advantage Validation Tool
{233C1507-6A77-46A4-9443-F871F945D258}:
http://fpdownload.macromedia.com/pub/shock...director/sw.cab -- Shockwave ActiveX Control
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}:
http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab -- Symantec AntiVirus scanner
{2D8ED06D-3C30-438B-96AE-4D110FDC1FB8}:
http://www.pandasecurity.com/activescan/cabs/as2stubie.cab -- ActiveScan 2.0 Installer Class
{30528230-99f7-4bb4-88d8-fa1d4f56a2ab}: C:\Program Files\Yahoo!\Common\Yinsthelper.dll -- Installation Support
{406B5949-7190-4245-91A9-30A17DE16AD0}:
http://photo.walgreens.com/WalgreensActivia.cab -- Snapfish Activia
{56762DEC-6B0D-4AB4-A8AD-989993B5D08B}:
http://www.eset.eu/buxus/docs/OnlineScanner.cab -- OnlineScanner Control
{6414512B-B978-451D-A0D8-FCFDF33E833C}:
http://www.update.microsoft.com/windowsupd...b?1198010915734 -- WUWebControl Class
{644E432F-49D3-41A1-8DD5-E099162EEEC5}:
http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab -- Symantec RuFSI Utility Class
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}:
http://update.microsoft.com/microsoftupdat...b?1227705794549 -- MUWebControl Class
{82B56B47-90DC-4F58-9A7D-D27BA46D3C0F}:
http://schleppy1975.myphotoalbum.com/ImageUploader4.cab -- MyPhotoAlbum Easy Upload Tool Combo Control
{8AD9C840-044E-11D1-B3E9-00805F499D93}:
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_10
{C7DB51B4-BCF7-4923-8874-7F1A0DC92277}:
http://office.microsoft.com/officeupdate/content/opuc4.cab -- Office Update Installation Engine
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:
http://java.sun.com/products/plugin/autodl...indows-i586.cab -- Java Plug-in 1.6.0_05
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_07
{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_10
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}:
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_10
{D27CDB6E-AE6D-11CF-96B8-444553540000}:
http://download.macromedia.com/pub/shockwa...ash/swflash.cab -- Shockwave Flash Object
{DC11F230-5717-4C25-BAD7-37B879C19655}:
http://schleppy1975.myphotoalbum.com/ImageUploader4.cab -- MyPhotoAlbum Easy Upload Tool Combo Control
{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}:
https://sapience360.webex.com/client/T26L/webex/ieatgpc.cab -- GpcContainer Class
{F281A59C-7B65-11D3-8617-0010830243BD}: file://C:\Program Files\AutoCAD LT 2002\AcPreview.ocx -- AcPreview Control
Microsoft XML Parser for Java: file://C:\WINDOWS\Java\classes\xmldso.cab -- Reg Error: Key does not exist or could not be opened.
========== (O17) DNS Name Servers ==========
{41972733-2A33-40AC-A2BA-3AD2BD78437E} (Servers: | Description: )
{67A49BF5-5987-41F5-A8E8-FBA029658758} (Servers: | Description: )
{7C5D1D32-CCFD-42AA-98CE-0B13C125E8E9} (Servers: | Description: Intel® 82566MM Gigabit Network Connection)
{BACE2D51-2962-466D-BAD9-3004EF25CC6B} (Servers: | Description: Intel® Wireless WiFi Link 4965AG)
{C77CD8BD-14AB-48B3-AE2E-8541B9457289} (Servers: | Description: )
{E38DD2C0-2C57-44D6-941B-7C22FD297756} (Servers: | Description: 1394 Net Adapter)
========== (O20) AppInit_DLLs ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_Dlls"=APSHook.dll lmhfhs.dll hubsls.dll
>[2007/02/26 03:49:00 | 00,070,144 | R--- | M] (Bioscrypt Inc.) -- C:\WINDOWS\system32\APSHook.dll
>File not found --
>File not found --
========== (O20) HKLM Winlogon Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"GinaDLL"=ginaunlock.dll
>[2006/07/21 11:06:04 | 00,122,880 | ---- | M] () -- C:\WINDOWS\system32\ginaunlock.dll
========== (O20) Winlogon Notify Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\]
ackpbsc: "DllName" = c:\WINDOWS\system32\ackpbsc.dll -- c:\WINDOWS\system32\ackpbsc.dll (ActivIdentity)
acunlock: "DllName" = c:\Program Files\ActivIdentity\ActivClient\acunlock.dll -- c:\Program Files\ActivIdentity\ActivClient\acunlock.dll (ActivIdentity)
DeviceNP: "DllName" = DeviceNP.dll -- C:\WINDOWS\system32\DeviceNP.dll (Hewlett-Packard Limited)
igfxcui: "DllName" = igfxdev.dll -- C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
OneCard: "DllName" = C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll -- C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll (Bioscrypt Inc.)
yayyVopP: "DllName" = Reg Error: Value DLLName does not exist or could not be read. -- File not found
========== HKLM *SecurityProviders* ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, ,
>File not found --
========== Safeboot Options ==========
"AlternateShell"=cmd.exe
========== CDRom AutoRun Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
"AutoRun" = 1
========== Autorun Files on Drives ==========
AUTOEXEC.BAT []
[2007/12/18 14:59:08 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT -- [ NTFS ]
========== MountPoints2 ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{57bd5546-adaa-11dc-bbbe-b02c9a8bec2e}\Shell\AutoRun\command]
""=E:\setup.exe -- File not found
========== Files/Folders - Created Within 30 Days ==========
[1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2008/11/29 21:59:42 | 00,422,400 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\shaevans\Desktop\OTViewIt.exe
[2008/11/29 08:34:27 | 01,364,995 | ---- | C] () -- C:\Documents and Settings\shaevans\Desktop\CamStudio20.exe
[2008/11/28 12:51:11 | 00,015,174 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\restrictions.gif
[2008/11/28 12:49:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\Desktop\Dial-a-fix-v0.60.0.24
[2008/11/28 12:42:17 | 00,000,000 | ---D | C] -- C:\_OTMoveIt
[2008/11/28 12:41:29 | 00,335,992 | ---- | C] () -- C:\Documents and Settings\shaevans\Desktop\Dial-a-fix-v0.60.0.24.zip
[2008/11/28 12:41:09 | 00,349,696 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\shaevans\Desktop\OTMoveIt3.exe
[2008/11/28 11:30:56 | 00,003,785 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\kapersky 11-29-2008.html
[2008/11/27 23:41:45 | 00,000,000 | ---D | C] -- C:\Program Files\EsetOnlineScanner
[2008/11/27 23:40:47 | 00,019,663 | ---- | C] () -- C:\Documents and Settings\shaevans\Desktop\FileFind.zip
[2008/11/27 00:47:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\Desktop\gmer
[2008/11/27 00:43:10 | 00,000,250 | ---- | C] () -- C:\WINDOWS\gmer.ini
[2008/11/27 00:43:08 | 00,884,736 | ---- | C] () -- C:\WINDOWS\gmer.dll
[2008/11/27 00:43:08 | 00,811,008 | ---- | C] () -- C:\WINDOWS\gmer.exe
[2008/11/27 00:43:08 | 00,085,969 | ---- | C] (GMER) -- C:\WINDOWS\System32\drivers\gmer.sys
[2008/11/27 00:43:08 | 00,000,080 | ---- | C] () -- C:\WINDOWS\gmer_uninstall.cmd
[2008/11/27 00:40:19 | 00,747,873 | ---- | C] () -- C:\Documents and Settings\shaevans\Desktop\gmer.zip
[2008/11/27 00:39:46 | 00,356,792 | ---- | C] () -- C:\Documents and Settings\shaevans\Desktop\dds.scr
[2008/11/26 21:13:01 | 00,000,000 | ---D | C] -- C:\VundoFix Backups
[2008/11/26 19:39:56 | 21,383,61856 | -HS- | C] () -- C:\hiberfil.sys
[2008/11/26 17:54:48 | 00,003,636 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\kapersky 11-26-2008.html
[2008/11/26 15:32:55 | 00,000,000 | ---D | C] -- C:\rsit
[2008/11/26 15:32:42 | 00,305,705 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\RSIT.exe
[2008/11/26 13:23:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\My Documents\IBM
[2008/11/26 11:56:52 | 00,005,174 | ---- | C] () -- C:\Internetshortcut.reg
[2008/11/26 10:48:51 | 00,000,000 | -HSD | C] -- C:\Config.Msi
[2008/11/26 10:34:26 | 00,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2008/11/26 10:34:26 | 00,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe
[2008/11/26 10:14:42 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2008/11/26 10:14:37 | 00,455,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2008/11/26 09:50:09 | 00,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dhcpcsvc.dll
[2008/11/26 09:46:36 | 00,000,000 | ---D | C] -- C:\Program Files\msn gaming zone
[2008/11/26 09:46:27 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2008/11/26 09:38:23 | 00,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll
[2008/11/26 09:38:22 | 01,307,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll
[2008/11/26 09:38:22 | 00,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml6r.dll
[2008/11/26 09:38:21 | 00,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpcdll.dll
[2008/11/26 09:38:15 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys
[2008/11/26 09:38:15 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsdupd.exe
[2008/11/26 09:38:10 | 00,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll
[2008/11/26 09:38:10 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2008/11/26 09:38:09 | 00,650,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll
[2008/11/26 09:38:09 | 00,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3svc.dll
[2008/11/26 09:38:09 | 00,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll
[2008/11/26 09:38:09 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll
[2008/11/26 09:38:09 | 00,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll
[2008/11/26 09:38:09 | 00,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll
[2008/11/26 09:38:09 | 00,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll
[2008/11/26 09:38:09 | 00,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll
[2008/11/26 09:38:09 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll
[2008/11/26 09:38:09 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsntfy.dll
[2008/11/26 09:38:09 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\credssp.dll
[2008/11/26 09:38:09 | 00,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll
[2008/11/26 09:38:08 | 00,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll
[2008/11/26 09:38:08 | 00,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll
[2008/11/26 09:38:08 | 00,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll
[2008/11/26 09:38:08 | 00,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll
[2008/11/26 09:38:08 | 00,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll
[2008/11/26 09:38:08 | 00,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll
[2008/11/26 09:38:08 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapsvc.dll
[2008/11/26 09:38:07 | 00,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kmsvc.dll
[2008/11/26 09:38:07 | 00,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll
[2008/11/26 09:38:07 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll
[2008/11/26 09:38:07 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll
[2008/11/26 09:38:07 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll
[2008/11/26 09:38:07 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll
[2008/11/26 09:38:06 | 00,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll
[2008/11/26 09:38:06 | 00,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll
[2008/11/26 09:38:06 | 00,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll
[2008/11/26 09:38:06 | 00,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll
[2008/11/26 09:38:06 | 00,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll
[2008/11/26 09:38:06 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe
[2008/11/26 09:38:05 | 00,193,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll
[2008/11/26 09:38:05 | 00,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll
[2008/11/26 09:38:04 | 00,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe
[2008/11/26 09:38:03 | 00,412,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\photometadatahandler.dll
[2008/11/26 09:38:03 | 00,291,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagentrt.dll
[2008/11/26 09:38:03 | 00,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll
[2008/11/26 09:38:03 | 00,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll
[2008/11/26 09:38:03 | 00,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll
[2008/11/26 09:38:03 | 00,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll
[2008/11/26 09:38:03 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll
[2008/11/26 09:38:02 | 00,712,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windowscodecs.dll
[2008/11/26 09:38:02 | 00,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tspkg.dll
[2008/11/26 09:38:02 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe
[2008/11/26 09:38:01 | 00,346,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windowscodecsext.dll
[2008/11/26 09:38:01 | 00,276,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmphoto.dll
[2008/11/26 09:38:01 | 00,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll
[2008/11/26 09:37:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2008/11/26 09:37:57 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2008/11/26 09:37:57 | 00,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2008/11/26 09:37:56 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2008/11/26 09:34:44 | 00,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2008/11/26 09:32:13 | 00,044,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\agpcpq.sys
[2008/11/26 09:32:13 | 00,042,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\alim1541.sys
[2008/11/26 09:32:13 | 00,042,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\agp440.sys
[2008/11/26 09:32:13 | 00,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2008/11/26 09:32:11 | 00,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2008/11/26 09:32:11 | 00,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthmodem.sys
[2008/11/26 09:32:11 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthusb.sys
[2008/11/26 09:32:11 | 00,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthenum.sys
[2008/11/26 09:32:10 | 00,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2008/11/26 09:32:10 | 00,046,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\gagp30kx.sys
[2008/11/26 09:32:10 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidbth.sys
[2008/11/26 09:32:10 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidir.sys
[2008/11/26 09:32:09 | 00,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2008/11/26 09:32:09 | 00,059,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rfcomm.sys
[2008/11/26 09:32:09 | 00,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys
[2008/11/26 09:32:09 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sffp_mmc.sys
[2008/11/26 09:32:08 | 00,121,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbvideo.sys
[2008/11/26 09:32:08 | 00,044,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\uagp35.sys
[2008/11/26 09:32:08 | 00,042,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\viaagp.sys
[2008/11/26 09:32:08 | 00,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wacompen.sys
[2008/11/26 09:32:08 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023x.sys
[2008/11/26 09:32:08 | 00,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys
[2008/11/26 09:28:45 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2008/11/26 09:12:01 | 33,180,5736 | ---- | C] (Microsoft Corporation) -- C:\WindowsXP-KB936929-SP3-x86-ENU.exe
[2008/11/26 09:00:49 | 00,000,000 | ---D | C] -- C:\hotfix
[2008/11/26 08:14:41 | 00,065,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SMSCfg.cpl
[2008/11/25 16:30:33 | 00,000,190 | ---- | C] () -- C:\Documents and Settings\shaevans\Desktop\MetaFrame Presentation Server Log In.url
[2008/11/25 15:45:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2008/11/25 10:01:45 | 00,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2008/11/25 09:57:18 | 00,023,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui
[2008/11/22 15:47:28 | 00,885,141 | -HS- | C] () -- C:\WINDOWS\System32\mSuuxyay.ini2
[2008/11/22 15:47:27 | 00,885,141 | -HS- | C] () -- C:\WINDOWS\System32\mSuuxyay.ini
[2008/11/21 16:16:11 | 00,031,232 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\dosen rd count.xls
[2008/11/21 12:14:08 | 00,022,651 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\spybotmsg.gif
[2008/11/21 11:35:55 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\shaevans\My Documents\HJTInstall.exe
[2008/11/21 09:00:14 | 00,003,549 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\kapersky 11-21-2008.html
[2008/11/21 08:57:38 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2008/11/21 08:57:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2008/11/21 08:54:47 | 00,038,496 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2008/11/21 08:54:01 | 15,083,520 | ---- | C] (Safer Networking Limited ) -- C:\Documents and Settings\shaevans\My Documents\spybotsd160.exe
[2008/11/20 23:07:52 | 00,072,704 | ---- | C] () -- C:\WINDOWS\System32\ltgnycfw.dll
[2008/11/20 14:06:26 | 00,045,097 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\TimesHeraldRecord Fiber Makeup.jpg
[2008/11/19 21:03:35 | 00,001,896 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Clean Access Agent.lnk
[2008/11/19 16:20:47 | 00,039,936 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\TimesHeraldRecord Fiber Makeup.vsd
[2008/11/15 18:45:59 | 00,019,456 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\Doc1.doc
[2008/11/14 08:25:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\Local Settings\Application Data\Identities
[2008/11/13 21:46:01 | 01,760,245 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\rcr815-manual.zip
[2008/11/13 20:06:20 | 00,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mstee.sys
[2008/11/13 20:06:15 | 00,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ndisip.sys
[2008/11/13 20:06:14 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax
[2008/11/13 20:06:14 | 00,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\streamip.sys
[2008/11/13 20:06:12 | 00,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\slip.sys
[2008/11/13 20:06:09 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wstcodec.sys
[2008/11/13 20:06:07 | 00,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nabtsfec.sys
[2008/11/13 20:06:05 | 00,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ccdecode.sys
[2008/11/13 20:05:58 | 00,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax
[2008/11/13 20:05:58 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2008/11/13 20:05:58 | 00,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2008/11/13 20:05:58 | 00,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdv.sys
[2008/11/13 20:05:58 | 00,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2008/11/13 20:05:58 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2008/11/13 20:05:53 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\avc.sys
[2008/11/13 20:05:50 | 00,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\61883.sys
[2008/11/13 13:21:40 | 00,131,803 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\HA HA.gif
[2008/11/12 23:22:46 | 00,142,096 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\System32\drivers\tmcomm.sys
[2008/11/12 11:53:45 | 00,459,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2008/11/12 11:53:45 | 00,383,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2008/11/12 11:53:45 | 00,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2008/11/12 11:53:45 | 00,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icardie.dll
[2008/11/12 11:53:45 | 00,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2008/11/12 11:53:45 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieudinit.exe
[2008/11/12 11:53:44 | 02,455,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2008/11/12 11:53:44 | 00,991,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2008/11/12 11:53:43 | 06,066,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2008/11/12 11:53:30 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie7updates
[2008/11/12 08:45:28 | 00,000,420 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2008/11/11 22:36:50 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2008/11/11 22:17:27 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2008/11/11 22:15:49 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2008/11/11 22:15:34 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
[2008/11/11 22:14:58 | 00,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xmllite.dll
[2008/11/11 21:59:14 | 00,000,856 | ---- | C] () -- C:\WINDOWS\Active Setup Log.BAK
[2008/11/11 21:59:09 | 00,508,240 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\shaevans\My Documents\ie6setupOe.exe
[2008/11/09 21:16:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\Local Settings\Application Data\WMTools Downloaded Files
[2008/11/09 21:12:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages
[2008/11/09 21:11:22 | 12,580,696 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\shaevans\My Documents\mm20enu.exe
[2008/11/08 10:57:01 | 00,001,172 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2008/11/07 09:52:48 | 00,251,904 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\1069193.XLS
[2008/11/05 12:17:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\Local Settings\Application Data\Thunderbird
[2008/11/05 12:17:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\Application Data\Thunderbird
[2008/11/05 12:17:46 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2008/11/04 16:25:24 | 00,030,208 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\Suicide Pool.xls
[2008/11/03 09:50:08 | 00,614,296 | ---- | C] () -- C:\Documents and Settings\shaevans\My Documents\1070318 CABLE RUNNING.PDF
[2008/11/02 18:44:41 | 00,000,000 | ---D | C] -- C:\Documents and Settings\shaevans\Local Settings\Application Data\AOL
[2008/11/02 18:44:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2008/11/02 18:44:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AOL OCP
[2008/11/02 18:44:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AOL
[2008/11/02 18:44:01 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\AOL
[2008/11/02 18:43:41 | 00,000,465 | -H-- | C] () -- C:\IPH.PH
========== Files - Modified Within 30 Days ==========
[1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2008/11/29 22:00:37 | 00,000,250 | ---- | M] () -- C:\WINDOWS\gmer.ini
[2008/11/29 21:59:47 | 00,422,400 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\shaevans\Desktop\OTViewIt.exe
[2008/11/29 08:34:36 | 01,364,995 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\CamStudio20.exe
[2008/11/28 15:16:06 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2008/11/28 15:15:35 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2008/11/28 15:15:34 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2008/11/28 15:15:31 | 21,383,61856 | -HS- | M] () -- C:\hiberfil.sys
[2008/11/28 12:51:11 | 00,015,174 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\restrictions.gif
[2008/11/28 12:41:29 | 00,335,992 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\Dial-a-fix-v0.60.0.24.zip
[2008/11/28 12:41:13 | 00,349,696 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\shaevans\Desktop\OTMoveIt3.exe
[2008/11/28 11:30:56 | 00,003,785 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\kapersky 11-29-2008.html
[2008/11/28 10:53:15 | 00,468,688 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2008/11/28 10:53:15 | 00,401,032 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2008/11/28 10:53:15 | 00,061,026 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2008/11/28 10:48:10 | 00,126,976 | ---- | M] () -- C:\Documents and Settings\shaevans\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/11/28 10:26:19 | 00,013,828 | ---- | M] () -- C:\WINDOWS\cfgall.ini
[2008/11/28 10:25:57 | 00,000,199 | ---- | M] () -- C:\WINDOWS\SMSCFG.ini
[2008/11/27 23:40:48 | 00,019,663 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\FileFind.zip
[2008/11/27 00:43:08 | 00,884,736 | ---- | M] () -- C:\WINDOWS\gmer.dll
[2008/11/27 00:43:08 | 00,085,969 | ---- | M] (GMER) -- C:\WINDOWS\System32\drivers\gmer.sys
[2008/11/27 00:43:08 | 00,000,080 | ---- | M] () -- C:\WINDOWS\gmer_uninstall.cmd
[2008/11/27 00:40:21 | 00,747,873 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\gmer.zip
[2008/11/27 00:39:48 | 00,356,792 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\dds.scr
[2008/11/26 17:54:48 | 00,003,636 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\kapersky 11-26-2008.html
[2008/11/26 15:32:47 | 00,305,705 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\RSIT.exe
[2008/11/26 11:56:52 | 00,005,174 | ---- | M] () -- C:\Internetshortcut.reg
[2008/11/26 10:38:50 | 00,000,079 | -HS- | M] () -- C:\Documents and Settings\shaevans\My Documents\desktop.ini
[2008/11/26 10:34:26 | 00,138,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2008/11/26 10:34:26 | 00,138,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe
[2008/11/26 10:32:16 | 00,002,521 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Microsoft Office Outlook 2003.lnk
[2008/11/26 09:45:54 | 00,202,528 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/11/26 09:31:51 | 00,250,048 | RHS- | M] () -- C:\ntldr
[2008/11/26 08:35:41 | 00,000,856 | ---- | M] () -- C:\WINDOWS\Active Setup Log.BAK
[2008/11/26 08:11:37 | 00,000,743 | ---- | M] () -- C:\WINDOWS\win.ini
[2008/11/26 08:11:37 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2008/11/26 08:11:37 | 00,000,211 | RHS- | M] () -- C:\boot.ini
[2008/11/25 16:30:33 | 00,000,190 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\MetaFrame Presentation Server Log In.url
[2008/11/25 13:42:17 | 00,030,208 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\Suicide Pool.xls
[2008/11/24 22:59:57 | 04,321,198 | -H-- | M] () -- C:\Documents and Settings\shaevans\Local Settings\Application Data\IconCache.db
[2008/11/22 16:09:49 | 00,885,141 | -HS- | M] () -- C:\WINDOWS\System32\mSuuxyay.ini
[2008/11/22 16:09:13 | 00,885,141 | -HS- | M] () -- C:\WINDOWS\System32\mSuuxyay.ini2
[2008/11/21 16:16:11 | 00,031,232 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\dosen rd count.xls
[2008/11/21 15:03:49 | 00,001,120 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\S2K400.WS
[2008/11/21 12:14:08 | 00,022,651 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\spybotmsg.gif
[2008/11/21 11:35:59 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\shaevans\My Documents\HJTInstall.exe
[2008/11/21 09:02:25 | 00,288,033 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2008/11/21 09:00:15 | 00,003,549 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\kapersky 11-21-2008.html
[2008/11/21 08:54:20 | 15,083,520 | ---- | M] (Safer Networking Limited ) -- C:\Documents and Settings\shaevans\My Documents\spybotsd160.exe
[2008/11/20 23:39:18 | 00,072,704 | ---- | M] () -- C:\WINDOWS\System32\ltgnycfw.dll
[2008/11/20 14:06:32 | 00,045,097 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\TimesHeraldRecord Fiber Makeup.jpg
[2008/11/20 14:05:48 | 00,039,936 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\TimesHeraldRecord Fiber Makeup.vsd
[2008/11/19 21:03:35 | 00,001,958 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Clean Access Agent.lnk
[2008/11/19 21:03:35 | 00,001,896 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Clean Access Agent.lnk
[2008/11/19 21:01:18 | 00,002,433 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\VPN Client.lnk
[2008/11/19 09:05:26 | 00,001,622 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\Trillian.lnk
[2008/11/18 11:28:42 | 00,000,420 | ---- | M] () -- C:\WINDOWS\cdplayer.ini
[2008/11/15 18:46:00 | 00,019,456 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\Doc1.doc
[2008/11/13 21:46:07 | 01,760,245 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\rcr815-manual.zip
[2008/11/13 13:21:40 | 00,131,803 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\HA HA.gif
[2008/11/11 21:59:14 | 00,508,240 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\shaevans\My Documents\ie6setupOe.exe
[2008/11/11 13:08:28 | 00,065,118 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\2008nfl.pdf
[2008/11/09 21:12:35 | 12,580,696 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\shaevans\My Documents\mm20enu.exe
[2008/11/08 10:57:02 | 00,001,172 | ---- | M] () -- C:\WINDOWS\mozver.dat
[2008/11/07 09:52:48 | 00,251,904 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\1069193.XLS
[2008/11/06 09:05:29 | 00,025,088 | ---- | M] () -- C:\Documents and Settings\shaevans\Desktop\Thingstodo.xls
[2008/11/03 19:10:25 | 17,318,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2008/11/03 09:50:08 | 00,614,296 | ---- | M] () -- C:\Documents and Settings\shaevans\My Documents\1070318 CABLE RUNNING.PDF
[2008/11/02 18:44:42 | 00,000,465 | -H-- | M] () -- C:\IPH.PH
< End of report >
-------------------------------------------------------------------------------------------
OTViewIt Extras logfile created on: 11/29/2008 10:09:32 PM - Run
OTViewIt by OldTimer - Version 1.0.20.0 Folder = C:\Documents and Settings\shaevans\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 68.85% Memory free
3.84 Gb Paging File | 3.36 Gb Available in Paging File | 87.43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.53 Gb Total Space | 45.09 Gb Free Space | 60.51% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NYMTJSLXP041364
Current User Name: ShaEvans
NOT logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Whitelist: On
File Age = 30 Days
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=1
"AntiVirusDisableNotify"=0
"FirewallDisableNotify"=0
"UpdatesDisableNotify"=0
"AntiVirusOverride"=0
"FirewallOverride"=0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
"DisableMonitoring"=1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall"=1
"DoNotAllowExceptions"=0
"DisableNotifications"=0
""=
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[2008/04/14 05:42:36 | 00,141,312 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
File not found -- C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE:*:Enabled:OUTLOOK.EXE
[2008/04/14 05:42:16 | 01,032,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\NetMeeting\conf.exe:*:Enabled:conf.exe
[2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
File not found -- C:\SMSADMIN\bin\i386\statview.exe:*:Enabled:SMS 2.0 Utility - Status Message Viewer
File not found -- C:\SMSADMIN\bin\i386\SETUP.EXE:*:Enabled:SMS Setup
[2001/08/23 07:00:00 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\unsecapp.exe:*:Enabled:unsecapp.exe
[2008/04/14 05:42:24 | 00,093,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer
[2008/04/14 05:42:26 | 01,414,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console
File not found -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
File not found -- C:\WINDOWS\system32\VoissAssistant.exe:*:Enabled:VoissAssistant
[2008/01/30 13:48:38 | 00,199,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE:*:Enabled:OUTLOOK.EXE
File not found -- C:\Program Files\NET6\net6vpn.exe:*:Enabled:Citrix Secure Access Agent
File not found -- C:\Program Files\Java\j2re1.4.2_03\bin\javaw.exe:*:Enabled:javaw
File not found -- C:\Program Files\Viryanet\MicroServer\VCM.exe:*:Enabled:VCM
[2008/04/14 05:42:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe:*:Disabled:Windows Explorer
File not found -- C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
[2005/09/08 18:07:52 | 00,819,472 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Citrix\ICA Client\wfica32.exe:*:Enabled:Citrix ICA Client Engine (Win32)
[2008/08/29 09:18:44 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour
[2008/04/14 00:23:34 | 00,558,080 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2008/11/26 10:55:34 | 00,144,792 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java™ Platform SE binary
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
[2008/04/14 05:42:36 | 00,141,312 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
File not found -- C:\Program Files\SmartFTP\SmartFTP.exe:*:Enabled:SmartFTP
[2008/04/14 05:42:16 | 01,032,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\NetMeeting\conf.exe:*:Enabled:conf.exe
File not found -- C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE:*:Enabled:OUTLOOK.EXE
[2008/04/14 05:42:30 | 01,695,232 | -HS- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
File not found -- C:\Documents and Settings\mwj974\Local Settings\Temporary Internet Files\Content.IE5\0L6VGXAV\CitrixSAClient[1].exe:*:Enabled:Citrix Secure Access Agent
File not found -- C:\Program Files\NET6\net6vpn.exe:*:Enabled:Citrix Secure Access Agent
[2001/08/23 07:00:00 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\unsecapp.exe:*:Enabled:WMI
File not found -- C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
[2005/09/08 18:07:52 | 00,819,472 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Citrix\ICA Client\wfica32.exe:*:Enabled:Citrix ICA Client Engine (Win32)
File not found -- C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader
File not found -- C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM
[2008/04/14 00:23:34 | 00,558,080 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
========== (O10) Winsock2 Catalogs ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\]
NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] -- C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
========== (O18) Protocol Handlers ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
ipp: [HKLM - No CLSID value]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2005/09/20 12:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
msdaipp: [HKLM - No CLSID value]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2005/09/20 12:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2005/09/20 12:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2000/12/23 05:45:14 | 00,217,088 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (ms-itss:{0A9007C0-4076-11D3-8789-0000F8105754} (HKLM) [Microsoft Infotech Storage Protocol for IE 4.0])
========== (O18) Protocol Filters ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters
[2007/04/19 13:57:40 | 00,046,432 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL text/xml:{807553E5-5146-11D5-A672-00B0D022E945} (HKLM) [Reg Error: Value does not exist or could not be read.]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00020409-78E1-11D2-B60F-006097C998E7}"=Microsoft Office 2000 SR-1 Standard
"{00100409-78E1-11D2-B60F-006097C998E7}"=Microsoft Access 2000 SR-1
"{04010300-6D72-4D54-8686-91D884A27B5C}"=Cisco Clean Access Agent
"{0609D0AF-1382-42BE-81DB-CF30F8B0F6E2}"=Serif PhotoPlus 6.0
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}"=mLogView
"{14FCFE7C-AB86-428A-9D2E-BFB6F5A7AA6E}"=Cisco Systems VPN Client 5.0.01.0600
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}"=Adobe AIR
"{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}"=Google Earth
"{20A1D306-CE83-492A-8525-D6DF50B5944A}"=Embedded Security for HP ProtectTools
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}"=mProSafe
"{2604C0F9-BFD3-4BA0-9EB5-22537C648F03}"=MobileMe Control Panel
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}"=Java™ 6 Update 10
"{29EA1C3E-2D8F-42FF-A5A9-CD3D45C2315E}"=NGS Qport Access
"{2DB165DC-DDB4-403F-B985-19F3EC7D0357}"=HP ProtectTools Security Manager
"{3248F0A8-6813-11D6-A77B-00B0D0160050}"=Java™ 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}"=Java™ 6 Update 7
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}"=HP Quick Launch Buttons 6.40 B2
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP
"{3912A629-0020-0005-3131-2FBA74D4DF0A}"=InterVideo WinDVD
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}"=mIWA
"{429E92A4-159F-4AEC-85A1-D693E1E4274D}"=HP 3D DriveGuard
"{450063AA-643B-417C-8CF5-405BA3F4EF40}"=Autodesk Design Review 2009
"{49FC50FC-F965-40D9-89B4-CBFF80941033}"=Windows Movie Maker 2.0
"{55B52830-024A-443E-AF61-61E1E71AFA1B}"=Device Access Manager for HP ProtectTools
"{5783F2D7-4009-0409-0002-0060B0CE6BBA}"=AutoCAD LT 2006 - English
"{59F6A514-9813-47A3-948C-8A155460CC2A}"=RICOH R5C853 Driver Ver.1.00.02
"{5C74694C-A687-E3EB-FF18-B018D4A76ECD}"=Adobe Media Player
"{609F7AC8-C510-11D4-A788-009027ABA5D0}"=Easy CD Creator 5 Basic
"{67E4EE98-59F4-4210-89A6-A20AF5BEC689}"=Microsoft Streets and Trips 2005
"{69333A04-5134-40A5-A055-9166A7AA1EC8}"=
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}"=Apple Software Update
"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable
"{77130095-2039-424F-A633-4FAF0261258A}"=Java Card Security for HP ProtectTools
"{829CD169-E692-48E8-9BDE-A3E8D8B65538}"=mSCfg
"{84814E6B-2581-46EC-926A-823BD1C670F6}"=HP Integrated Module with Bluetooth wireless technology
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}"=Microsoft Silverlight
"{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}"=Bonjour
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}"=mPfMgr
"{8C6BB412-D3A8-4AAE-A01B-35B681789D68}"=mHelp
"{90120409-6000-11D3-8CFE-0150048383C9}"=Microsoft Office Standard Edition 2003
"{90B0D222-8C21-4B35-9262-53B042F18AF9}"=mPfWiz
"{91530409-6000-11D3-8CFE-0150048383C9}"=Microsoft Office Visio Standard 2003
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}"=InterVideo WinDVD
"{94658027-9F16-4509-BBD7-A59FE57C3023}"=mZConfig
"{976C2B2A-CE59-4AB3-83FB-BF895E28F2E6}"=Apple Mobile Device Support
"{AC194855-F7AC-4D04-B4C9-07BA46FCB697}"=ActivClient 6.1 x86
"{AC76BA86-7AD7-1033-7B44-A70900000002}"=Adobe Reader 7.0.9
"{B508B3F1-A24A-32C0-B310-85786919EF28}"=Microsoft .NET Framework 2.0 Service Pack 1
"{C15F7F16-941E-414B-A676-40190CD621D5}"=Credential Manager for HP ProtectTools
"{C74D0FA0-1D49-464F-A707-B427EE3385C1}"=BIOS Configuration for HP ProtectTools
"{D32067CD-7409-4792-BFA0-1469BCD8F0C8}"=HP Wireless Assistant
"{DF45EF6C-9E13-4CBD-B393-9FDC306F8E18}"=NGS Qport Access
"{E81667C6-2856-46D6-ABEA-6A2F42166779}"=mCore
"{E8DDBFBC-6C65-4CEE-A4D7-CD6781E94BCC}"=ScrewDrivers Client v4
"{E90140E7-3D75-478E-AB57-78F21B9DA200}"=CA eTrust GINA Option for Password Reset/Unlock
"{E92B7A19-5FD5-4AEE-9FEF-7AD5DD3A675E}"=MetaFrame Presentation Server Client
"{EB4DF30B-102B-4F0C-927A-D50E037A325D}"=AuthenTec Fingerprint Sensor Minimum Install
"{ECEA7878-2100-4525-915D-B09174E36971}"=Trend Micro OfficeScan Client
"{F0A37341-D692-11D4-A984-009027EC0A9C}"=SoundMAX
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}"=mMHouse
"{F18DB86D-BC16-4E01-BCCE-63F62B931D82}"=InterVideo Register Manager
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}"=mDrWiFi
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}"=mWlsSafe
"ActiveTouchMeetingClient"=WebEx
"Adobe Flash Player ActiveX"=Adobe Flash Player ActiveX
"Adobe Shockwave Player"=Adobe Shockwave Player
"ADTRAN DSL Assistant"=ADTRAN DSL Assistant
"Amazon MP3 Downloader"=Amazon MP3 Downloader 1.0.3
"AnswerWorks"=AnswerWorks Runtime
"Autodesk Design Review 2009"=Autodesk Design Review 2009 - SP1
"Autodesk DWF Viewer"=Autodesk DWF Viewer
"Broadcom 802.11b Network Adapter"=Broadcom 802.11 Wireless LAN Adapter
"ClientAccessExpress"=IBM iSeries Access for Windows
"CNXT_MODEM_PCI_VEN_14F1&DEV_2C06_hpqZ3795"=Soft Data Fax Modem with SmartCP
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1"=Adobe Media Player
"EsetOnlineScanner"=ESET Online Scanner
"FLEXR 7.81"=FLEXR 7.81
"Google Updater"=Google Updater
"HDMI"=Intel® Graphics Media Accelerator Driver
"HijackThis"=HijackThis 2.0.2
"IDNMitigationAPIs"=Microsoft Internationalized Domain Names Mitigation APIs
"InstallShield_{29EA1C3E-2D8F-42FF-A5A9-CD3D45C2315E}"=NGS Qport Access - 5.10.19
"InstallShield_{DF45EF6C-9E13-4CBD-B393-9FDC306F8E18}"=NGS Qport Access - 5.10.37
"Macromedia Authorware Web Player"=Macromedia Authorware Web Player
"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware
"MESOL"=Intel® Active Management Technology Device Software
"MetaASSIST View"=MetaASSIST View
"Mozilla Firefox (2.0)"=Mozilla Firefox (2.0)
"Mozilla Thunderbird (2.0.0.18)"=Mozilla Thunderbird (2.0.0.18)
"MSCompPackV1"=Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping"=Microsoft National Language Support Downlevel APIs
"PrintKey2000"=PrintKey2000
"ProInst"=Intel® PROSet/Wireless Software
"PROSet"=Intel® PRO Network Connections Drivers
"RealPlayer 6.0"=RealPlayer
"ShockwaveFlash"=Macromedia Flash Player 8
"SynTPDeinstKey"=Synaptics Pointing Device Driver
"Trillian"=Trillian
"Verizon High Speed Internet_is1"=Verizon High Speed Internet
"Volo View Express"=Volo View Express
"Wdf01005"=Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime"=Windows Media Format 11 runtime
"Windows Media Player"=Windows Media Player 11
"Windows XP Service Pack"=Windows XP Service Pack 3
"WinRAR archiver"=WinRAR archiver
"WMFDist11"=Windows Media Format 11 runtime
"wmp11"=Windows Media Player 11
"Wudf01000"=Microsoft User-Mode Driver Framework Feature Pack 1.0
"YInstHelper"=Yahoo! Install Manager
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 11/28/2008 4:15:39 PM | Computer Name = NYMTJSLXP041364 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 11/28/2008 4:15:40 PM | Computer Name = NYMTJSLXP041364 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 11/28/2008 4:15:40 PM | Computer Name = NYMTJSLXP041364 | Source = LMS | ID = 2
Description = LMS Service cannot connect to HECI driver
Error - 11/28/2008 4:15:42 PM | Computer Name = NYMTJSLXP041364 | Source = Intel® AMT | ID = 2002
Description = [UNS] Failed to subscribe to local Intel® AMT.
Error - 11/28/2008 4:15:52 PM | Computer Name = NYMTJSLXP041364 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 11/29/2008 8:57:01 AM | Computer Name = NYMTJSLXP041364 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 11/29/2008 9:01:19 AM | Computer Name = NYMTJSLXP041364 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 11/29/2008 9:39:26 AM | Computer Name = NYMTJSLXP041364 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 11/29/2008 9:40:59 AM | Computer Name = NYMTJSLXP041364 | Source = Application Error | ID = 1000
Description = Faulting application recorder.exe, version 1.0.0.1, faulting module
recorder.exe, version 1.0.0.1, fault address 0x000211a7.
Error - 11/29/2008 10:54:36 PM | Computer Name = NYMTJSLXP041364 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
[ Credential Manager Events ]
Error - 5/6/2008 8:17:04 AM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: shaevans@CORP Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 5/19/2008 8:20:09 AM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: cArson5@CORP Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 6/3/2008 9:12:04 AM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: shaevans@CORP Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 6/10/2008 9:27:13 AM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: shaevans@CORP Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 6/10/2008 9:27:17 AM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: shaevans@CORP Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 9/2/2008 8:38:24 AM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100796070
Description = The submitted user identity was rejected. User: shaevans@CORP Error:
(0xC5160102) The system could not perform the requested operation. Verify that
Credential Manager for HP ProtectTools is properly installed on your computer. If
the problem persists, please contact your system administrator.
Error - 10/28/2008 3:31:42 PM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100861620
Description = The submitted credentials were not successfully registered. User:
shaevans@CORP Credentials: Password Error: (0x8007052B) Unable to update the password.
The value provided as the current password is incorrect.
Error - 10/28/2008 3:31:49 PM | Computer Name = NYMTJSLXP041364 | Source = AuthWiz | ID = 100861620
Description = The submitted credentials were not successfully registered. User:
shaevans@CORP Credentials: Password Error: (0x8007052B) Unable to update the password.
The value provided as the current password is incorrect.
[ System Events ]
Error - 11/29/2008 9:42:51 AM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 59 minutes. NtpClient has no source of accurate
time.
Error - 11/29/2008 10:42:53 AM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 119 minutes. NtpClient has no source of accurate
time.
Error - 11/29/2008 12:42:56 PM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 239 minutes. NtpClient has no source of accurate
time.
Error - 11/29/2008 2:23:17 PM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.
Error - 11/29/2008 2:25:51 PM | Computer Name = NYMTJSLXP041364 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain CORP due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.
Error - 11/29/2008 2:38:20 PM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 29 minutes. NtpClient has no source of accurate
time.
Error - 11/29/2008 3:08:21 PM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 59 minutes. NtpClient has no source of accurate
time.
Error - 11/29/2008 10:54:44 PM | Computer Name = NYMTJSLXP041364 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain CORP due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.
Error - 11/29/2008 10:54:48 PM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.
Error - 11/29/2008 11:09:48 PM | Computer Name = NYMTJSLXP041364 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 30 minutes. NtpClient has no source of accurate
time.
< End of report >
And thats it.. Something just does not feel right about this PC. I am going to reboot.
Help
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.
This topic is locked
Back to top
to BleepingComputer.com
button in the lower left hand corner of your screen.
on your desktop.
icon on your desktop.
area. Do not include the word "Code".
button.
line here in your next reply.
)
on your desktop.
and wait for the scan to finish.
and save the logfile to your desktop.
icon on your desktop.
button.
