OTL logfile created on: 2/14/2010 9:58:10 PM - Run 1
OTL by OldTimer - Version 3.1.28.0     Folder = C:\Documents and Settings\Stephan Binns\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
502.00 Mb Total Physical Memory | 210.00 Mb Available Physical Memory | 42.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.88 Gb Total Space | 11.28 Gb Free Space | 20.18% Space Free | Partition Type: NTFS
Drive D: | 1.88 Gb Total Space | 1.78 Gb Free Space | 94.74% Space Free | Partition Type: FAT
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: PC444058823227
Current User Name: Stephan Binns
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Documents and Settings\Stephan Binns\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\PremierOpinion\pmropn.exe (VoiceFive Networks, Inc.)
PRC - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
PRC - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Hp\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\Hp\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple, Inc.)
PRC - C:\Program Files\Hp\Digital Imaging\bin\hpqgpc01.exe (Hewlett-Packard)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe ()
PRC - C:\Program Files\Common Files\LightScribe\LSSrvc.exe ()
PRC - C:\WINDOWS\system32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Program Files\Netscape Internet Service\ncupdatesvc.exe (Netscape Communications Corporation)
PRC - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)
PRC - C:\WINDOWS\system32\brsvc01a.exe (brother Industries Ltd)
PRC - C:\WINDOWS\system32\brss01a.exe (brother Industries Ltd)
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - C:\Documents and Settings\Stephan Binns\Desktop\OTL.exe (OldTimer Tools)
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - (KodakCCS) --  File not found
SRV - (aspnet_state) --  File not found
SRV - (Akamai) -- c:\Program Files\Common Files\Akamai\rswin_3647.dll ()
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (TomTomHOMEService) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (gusvc) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (YahooAUService) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.dll (Hewlett-Packard)
SRV - (Net Driver HPZ12) -- C:\WINDOWS\system32\HPZinw12.dll (Hewlett-Packard)
SRV - (iPod Service) -- C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (hpqddsvc) -- C:\Program Files\Hp\Digital Imaging\bin\hpqddsvc.dll (Hewlett-Packard Co.)
SRV - (hpqcxs08) -- C:\Program Files\Hp\Digital Imaging\bin\hpqcxs08.dll (Hewlett-Packard Co.)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple, Inc.)
SRV - (Bonjour Service) -- C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (WebFilter) -- C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe ()
SRV - (hpqwmi) -- C:\Program Files\HPQ\Shared\hpqwmi.exe (Hewlett-Packard Development Company, L.P.)
SRV - (LightScribeService) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe ()
SRV - (NCUpdateSvc) -- C:\Program Files\Netscape Internet Service\ncupdatesvc.exe (Netscape Communications Corporation)
SRV - (ose) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (SoundMAX Agent Service (default)) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)
SRV - (Brother XP spl Service) -- C:\WINDOWS\system32\brsvc01a.exe (brother Industries Ltd)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (CDAVFS) -- C:\WINDOWS\system32\drivers\CDAVFS.sys (CyberDefender Corp.)
DRV - (NPF) -- C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (NwlnkIpx) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)
DRV - (GEARAspiWDM) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (HPZius12) -- C:\WINDOWS\system32\drivers\HPZius12.sys (HP)
DRV - (HPZipr12) -- C:\WINDOWS\system32\drivers\HPZipr12.sys (HP)
DRV - (HPZid412) -- C:\WINDOWS\system32\drivers\HPZid412.sys (HP)
DRV - (WinDriver6) -- C:\WINDOWS\system32\drivers\swypeout.sys (Jungo)
DRV - (cwmtdi) -- C:\WINDOWS\system32\drivers\cwmtdi.sys ()
DRV - (PxHelp20) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (SymEvent) -- C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (ApfiltrService) -- C:\WINDOWS\system32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (ialm) -- C:\WINDOWS\system32\drivers\ialmnt5.sys (Intel Corporation)
DRV - (aeaudio) -- C:\WINDOWS\system32\drivers\aeaudio.sys (Andrea Electronics Corporation)
DRV - (smwdm) -- C:\WINDOWS\system32\drivers\smwdm.sys (Analog Devices, Inc.)
DRV - (AgereSoftModem) -- C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)
DRV - (NwlnkNb) -- C:\WINDOWS\system32\drivers\nwlnknb.sys (Microsoft Corporation)
DRV - (NwlnkSpx) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys (Microsoft Corporation)
DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.)
DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation                           )
DRV - (senfilt) -- C:\WINDOWS\system32\drivers\senfilt.sys (Sensaura)
DRV - (eabfiltr) -- C:\WINDOWS\system32\drivers\eabfiltr.sys (Hewlett-Packard Company)
DRV - (BrScnUsb) -- C:\WINDOWS\system32\drivers\BrScnUsb.sys (Brother Industries Ltd.)
DRV - (MLPTDR_Q) -- C:\WINDOWS\system32\MLPTDR_Q.SYS (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
DRV - (eabusb) -- C:\WINDOWS\system32\drivers\EabUsb.sys (Hewlett-Packard Company)
DRV - (MidiSyn) -- C:\WINDOWS\system32\drivers\MidiSyn.sys (Analog Devices Inc)
DRV - (SMCIRDA) -- C:\WINDOWS\system32\drivers\smcirda.sys (SMC)
DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?fr=fp-yie8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.msn.com/access/allinone.asp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?fr=fp-yie8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL File not found
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
 
FF - HKLM\software\mozilla\Firefox\Extensions\\paypalfirefoxplugin@orbiscom: C:\Program Files\PayPal\PayPal Plug-In [2008/05/07 18:26:12 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Program Files\PremierOpinion [2010/02/07 14:24:21 | 000,000,000 | ---D | M]
 
[2008/06/21 20:16:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Mozilla\Extensions
[2008/06/21 20:16:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Mozilla\Extensions\[removed]
[2009/11/26 11:58:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Mozilla\Firefox\Profiles\yl2b3igm.default\extensions
[2009/11/26 11:58:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Stephan Binns\Application Data\Mozilla\Firefox\Profiles\yl2b3igm.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2008/01/01 15:54:59 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2007/04/11 19:10:03 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2005/09/01 10:34:42 | 001,312,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll
 
O1 HOSTS File: ([2004/08/04 03:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (My.Freeze.com Toolbar) - {D0523BB4-21E7-11DD-9AB7-415B56D89593} - C:\Program Files\My.Freeze.com Toolbar\freeze_ie_na_us.dll ()
O3 - HKLM\..\Toolbar: (PayPal Plug-In) - {DC0F2F93-27FA-4f84-ACAA-9416F90B9511} - C:\Program Files\PayPal\PayPal Plug-In\OToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (My.Freeze.com Toolbar) - {D0523BB4-21E7-11DD-9AB7-415B56D89593} - C:\Program Files\My.Freeze.com Toolbar\freeze_ie_na_us.dll ()
O4 - HKCU..\Run: [NoAdware5] C:\Program Files\NoAdware5.0\NoAdware5.exe  ()
O4 - HKCU..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe File not found
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF  [binary data]
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll (Sun Microsystems, Inc.)
O9 - Extra Button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Hp\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {14C1B87C-3342-445F-9B5E-365FF330A3AC} http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB (Hewlett-Packard Online Support Services)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/MyFunCardsInitialSetup1.0.1.1.cab (Reg Error: Key error.)
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab (Symantec AntiVirus scanner)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdate/content/opuc3.cab (Office Update Installation Engine)
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} http://photo.walgreens.com/WalgreensActivia.cab (Snapfish Activia)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Utility Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1139277458468 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} http://www.sibelius.com/download/software/win/ActiveXPlugin.cab (ScorchPlugin Class)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {EA6246B4-F380-443F-8727-9AEA3371146C} http://aolsvc.aol.com/onlinegames/free-trial-wedding-dash/WeddingDash.1.0.0.47.cab (CPlayFirstWeddingDashControl Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (\\.\globalroot\systemroot\system32\userinit.exe) - \\.\globalroot\systemroot\system32\userinit.exe ()
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\PremierOpinion: DllName - C:\Program Files\PremierOpinion\pmls.dll - C:\Program Files\PremierOpinion\pmls.dll (VoiceFive Networks, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Stephan Binns\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Stephan Binns\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/02/14 21:47:01 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/02/14 21:47:04 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ FAT ]
O33 - MountPoints2\{d62f62ff-9aaf-11dc-b7bf-0014a517edd7}\Shell\AutoRun\command - "" = E:\InstallTomTomHOME.exe -- File not found
O33 - MountPoints2\{d62f632e-9aaf-11dc-b7bf-0014a517edd7}\Shell\AutoRun\command - "" = D:\InstallTomTomHOME.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010/02/14 21:47:01 | 000,000,000 | RHSD | C] -- C:\autorun.inf
[2010/02/14 21:46:34 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Stephan Binns\Desktop\OTL.exe
[2010/02/13 12:33:34 | 000,000,000 | ---D | C] -- C:\Program Files\Bing Bar Installer
[2010/02/13 12:33:32 | 000,067,424 | ---- | C] (CyberDefender Corp.) -- C:\WINDOWS\System32\drivers\CDAVFS.sys
[2010/02/13 12:33:25 | 000,000,000 | ---D | C] -- C:\Program Files\CyberDefender
[2010/02/09 09:49:17 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2010/02/09 09:47:47 | 000,000,000 | ---D | C] -- C:\Program Files\Cain
[2010/02/07 14:21:16 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010/01/23 20:36:30 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update(2)
[2009/08/02 02:02:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2008/05/03 18:11:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2007/07/08 18:13:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2007/06/26 18:48:16 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2007/04/19 17:28:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Yahoo!
[2007/04/19 17:28:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2007/04/19 17:28:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Google
[2006/01/18 20:53:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Symantec
[2005/05/22 00:06:53 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010/02/14 21:46:34 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Stephan Binns\Desktop\OTL.exe
[2010/02/14 21:33:22 | 000,132,597 | ---- | M] () -- C:\Documents and Settings\Stephan Binns\Desktop\Flash_Disinfector.exe
[2010/02/14 19:12:53 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/02/14 19:09:48 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/02/14 19:09:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/02/14 19:09:44 | 526,897,152 | -HS- | M] () -- C:\hiberfil.sys
[2010/02/14 15:50:01 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\EasyShare Registration Task.job
[2010/02/14 03:00:00 | 000,000,504 | ---- | M] () -- C:\WINDOWS\tasks\SpywareBot Scheduled Scan.job
[2010/02/13 12:48:31 | 000,000,043 | ---- | M] () -- C:\WINDOWS\av_affiliate.ini
[2010/02/13 12:48:23 | 000,000,043 | ---- | M] () -- C:\WINDOWS\as_affiliate.ini
[2010/02/13 12:46:07 | 000,000,755 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/02/13 12:32:49 | 000,067,424 | ---- | M] (CyberDefender Corp.) -- C:\WINDOWS\System32\drivers\CDAVFS.sys
[2010/02/12 15:00:00 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\Norton Security Scan.job
[2010/02/10 21:26:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/02/09 09:51:32 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010/02/09 09:49:53 | 005,042,176 | ---- | M] () -- C:\Documents and Settings\Stephan Binns\ntuser.dat
[2010/02/09 09:49:20 | 000,000,073 | ---- | M] () -- C:\WINDOWS\System32\-1
[2010/02/07 15:53:40 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/02/07 15:52:46 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\Stephan Binns\ntuser.ini
[2010/01/17 12:24:27 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010/02/14 21:37:32 | 000,132,597 | ---- | C] () -- C:\Documents and Settings\Stephan Binns\Desktop\Flash_Disinfector.exe
[2010/02/13 12:48:31 | 000,000,043 | ---- | C] () -- C:\WINDOWS\av_affiliate.ini
[2010/02/13 12:48:23 | 000,000,043 | ---- | C] () -- C:\WINDOWS\as_affiliate.ini
[2010/02/09 09:49:20 | 000,000,073 | ---- | C] () -- C:\WINDOWS\System32\-1
[2009/10/20 13:19:30 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2009/01/05 13:34:09 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\rmc_rtspdl.dll
[2008/12/25 10:00:00 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008/12/25 10:00:00 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008/12/20 14:02:58 | 000,002,325 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2008/04/30 10:36:44 | 000,540,672 | ---- | C] () -- C:\WINDOWS\System32\TX32.DLL
[2008/04/30 10:36:41 | 000,229,376 | ---- | C] () -- C:\WINDOWS\System32\ISP2000.dll
[2008/04/30 10:36:41 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\Eztw32.dll
[2008/04/30 10:10:44 | 000,000,379 | ---- | C] () -- C:\WINDOWS\_delis43.ini
[2008/01/11 21:45:19 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\PretzelSpellCheck.dll
[2008/01/08 09:38:12 | 000,019,286 | ---- | C] () -- C:\Program Files\Common Files\InternetAntivirusPro.exe
[2008/01/08 09:38:12 | 000,019,286 | ---- | C] () -- C:\Program Files\Common Files\file.exe
[2007/06/10 15:19:17 | 000,000,645 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007/06/08 19:20:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\setup32.INI
[2007/05/14 18:04:40 | 000,048,640 | ---- | C] () -- C:\WINDOWS\System32\drivers\cwmtdi.sys
[2006/11/17 10:34:40 | 000,091,520 | ---- | C] () -- C:\WINDOWS\HPBroker.dll
[2006/09/23 17:58:32 | 000,000,045 | ---- | C] () -- C:\WINDOWS\MSREGUSR.INI
[2006/09/23 17:57:01 | 000,000,191 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2006/09/23 17:53:02 | 000,000,198 | ---- | C] () -- C:\WINDOWS\NGARCHIV.INI
[2006/04/23 11:12:48 | 000,000,035 | ---- | C] () -- C:\WINDOWS\WDIRECT.INI
[2006/02/11 17:30:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Brownie.ini
[2006/02/11 15:39:10 | 000,000,462 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2006/02/11 15:39:10 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2006/02/11 15:39:10 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2006/02/11 15:34:57 | 000,027,019 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2006/01/05 18:09:24 | 000,000,054 | ---- | C] () -- C:\WINDOWS\VistaEmail.ini
[2005/12/30 16:26:37 | 000,000,964 | ---- | C] () -- C:\WINDOWS\hegames.ini
[2005/12/24 14:21:46 | 000,000,067 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2005/12/10 21:10:01 | 000,000,022 | ---- | C] () -- C:\WINDOWS\kodakpcd.Stephan Binns.ini
[2005/11/06 02:22:50 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2005/10/23 09:33:29 | 000,002,620 | ---- | C] () -- C:\Documents and Settings\Stephan Binns\Application Data\wklnhst.dat
[2005/10/21 19:07:15 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2005/10/21 19:06:25 | 000,000,739 | ---- | C] () -- C:\WINDOWS\disney.ini
[2005/10/21 18:44:21 | 000,000,604 | ---- | C] () -- C:\WINDOWS\Spiderman.INI
[2005/10/21 16:51:04 | 000,016,896 | ---- | C] () -- C:\Documents and Settings\Stephan Binns\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/10/20 20:50:00 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/05/22 01:26:23 | 000,015,669 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005/02/12 03:33:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/08/07 08:16:44 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/08/07 08:10:08 | 000,000,882 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2003/07/15 00:53:56 | 000,011,521 | ---- | C] () -- C:\WINDOWS\MSUMLT_Q.INI
[2003/01/07 15:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/03/13 15:46:46 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\zlib.dll
[2002/03/04 10:16:34 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Jpeg32.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2008/12/25 10:01:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Axara
[2007/03/08 19:28:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CA
[2008/08/05 15:15:15 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2007/06/08 19:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Digital Praise
[2005/05/22 01:45:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2007/04/27 08:47:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Netscape Internet Service
[2008/03/10 15:27:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PlayFirst
[2006/02/11 15:34:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ScanSoft
[2007/05/10 19:31:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2008/06/21 20:16:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TomTom
[2008/12/30 18:00:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\alot
[2009/08/29 19:05:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\EarthLink Toolbar
[2006/01/27 19:40:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\InterVideo
[2005/10/23 09:23:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Leadertech
[2008/01/01 15:55:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Netscape
[2007/04/19 17:10:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Opera
[2009/12/19 09:19:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\OverDrive
[2009/11/26 11:59:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Participatory Culture Foundation
[2008/03/10 15:27:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\PlayFirst
[2007/05/10 17:43:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\SpywareBot
[2005/10/23 09:33:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\Template
[2007/11/28 01:16:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Stephan Binns\Application Data\TomTom
[2010/02/14 15:50:01 | 000,000,452 | ---- | M] () -- C:\WINDOWS\Tasks\EasyShare Registration Task.job
[2009/12/19 08:51:18 | 000,001,006 | -H-- | M] () -- C:\WINDOWS\Tasks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
[2010/02/14 03:00:00 | 000,000,504 | ---- | M] () -- C:\WINDOWS\Tasks\SpywareBot Scheduled Scan.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Stephan Binns\Desktop\steve:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Stephan Binns\Desktop\Kohler.zip:SummaryInformation
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >