Malware Removal

I followed the instructions for Google redirects. The log files for the TDSSKiller and GooredFix follows:
2010/10/12 08:24:20.0484 TDSS rootkit removing tool 2.4.4.0 Oct 4 2010 09:06:59
2010/10/12 08:24:20.0484 ================================================================================
2010/10/12 08:24:20.0484 SystemInfo:
2010/10/12 08:24:20.0484
2010/10/12 08:24:20.0484 OS Version: 5.1.2600 ServicePack: 3.0
2010/10/12 08:24:20.0484 Product type: Workstation
2010/10/12 08:24:20.0484 ComputerName: FRONTDESK
2010/10/12 08:24:20.0484 UserName: Dr. LoSasso
2010/10/12 08:24:20.0484 Windows directory: C:\WINDOWS
2010/10/12 08:24:20.0484 System windows directory: C:\WINDOWS
2010/10/12 08:24:20.0484 Processor architecture: Intel x86
2010/10/12 08:24:20.0484 Number of processors: 1
2010/10/12 08:24:20.0484 Page size: 0x1000
2010/10/12 08:24:20.0484 Boot type: Normal boot
2010/10/12 08:24:20.0484 ================================================================================
2010/10/12 08:24:21.0000 Initialize success
2010/10/12 08:24:25.0015 ================================================================================
2010/10/12 08:24:25.0015 Scan started
2010/10/12 08:24:25.0015 Mode: Manual;
2010/10/12 08:24:25.0015 ================================================================================
2010/10/12 08:24:28.0281 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
2010/10/12 08:24:28.0531 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2010/10/12 08:24:28.0843 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
2010/10/12 08:24:29.0062 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
2010/10/12 08:24:29.0281 aeaudio (11c04b17ed2abbb4833694bcd644ac90) C:\WINDOWS\system32\drivers\aeaudio.sys
2010/10/12 08:24:29.0515 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2010/10/12 08:24:29.0796 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys
2010/10/12 08:24:30.0109 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
2010/10/12 08:24:30.0406 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
2010/10/12 08:24:30.0703 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
2010/10/12 08:24:30.0968 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
2010/10/12 08:24:31.0187 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
2010/10/12 08:24:31.0312 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
2010/10/12 08:24:31.0468 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
2010/10/12 08:24:31.0734 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
2010/10/12 08:24:31.0968 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
2010/10/12 08:24:32.0187 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
2010/10/12 08:24:32.0375 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
2010/10/12 08:24:32.0703 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
2010/10/12 08:24:33.0000 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2010/10/12 08:24:33.0218 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2010/10/12 08:24:33.0531 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2010/10/12 08:24:33.0765 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2010/10/12 08:24:33.0968 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2010/10/12 08:24:34.0140 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
2010/10/12 08:24:34.0265 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2010/10/12 08:24:34.0421 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
2010/10/12 08:24:34.0671 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2010/10/12 08:24:34.0890 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2010/10/12 08:24:35.0140 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2010/10/12 08:24:35.0562 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys
2010/10/12 08:24:35.0796 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
2010/10/12 08:24:35.0953 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
2010/10/12 08:24:36.0140 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
2010/10/12 08:24:36.0406 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
2010/10/12 08:24:36.0703 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
2010/10/12 08:24:37.0062 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
2010/10/12 08:24:37.0281 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2010/10/12 08:24:37.0468 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2010/10/12 08:24:37.0781 Dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys
2010/10/12 08:24:38.0093 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys
2010/10/12 08:24:38.0359 dot4usb (6ec3af6bb5b30e488a0c559921f012e1) C:\WINDOWS\system32\DRIVERS\dot4usb.sys
2010/10/12 08:24:38.0718 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
2010/10/12 08:24:38.0984 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2010/10/12 08:24:39.0312 E100B (98b46b331404a951cabad8b4877e1276) C:\WINDOWS\system32\DRIVERS\e100b325.sys
2010/10/12 08:24:39.0515 eeCtrl (089296aedb9b72b4916ac959752bdc89) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
2010/10/12 08:24:39.0765 EraserUtilRebootDrv (850259334652d392e33ee3412562e583) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
2010/10/12 08:24:40.0000 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2010/10/12 08:24:40.0250 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
2010/10/12 08:24:40.0515 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
2010/10/12 08:24:40.0796 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2010/10/12 08:24:41.0093 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
2010/10/12 08:24:41.0328 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2010/10/12 08:24:41.0531 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2010/10/12 08:24:41.0781 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2010/10/12 08:24:42.0093 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2010/10/12 08:24:42.0359 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
2010/10/12 08:24:42.0671 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
2010/10/12 08:24:42.0953 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
2010/10/12 08:24:43.0250 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
2010/10/12 08:24:43.0500 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2010/10/12 08:24:43.0828 ialm (9a883c3c4d91292c0d09de7c728e781c) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
2010/10/12 08:24:44.0265 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2010/10/12 08:24:44.0609 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
2010/10/12 08:24:44.0906 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
2010/10/12 08:24:45.0187 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2010/10/12 08:24:45.0531 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
2010/10/12 08:24:45.0812 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2010/10/12 08:24:46.0109 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2010/10/12 08:24:46.0437 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2010/10/12 08:24:46.0734 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2010/10/12 08:24:47.0031 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2010/10/12 08:24:47.0359 isapnp (d9b3bbe422d8c44f77c03e909c3f3f49) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2010/10/12 08:24:47.0359 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\isapnp.sys. Real md5: d9b3bbe422d8c44f77c03e909c3f3f49, Fake md5: 05a299ec56e52649b1cf2fc52d20f2d7
2010/10/12 08:24:47.0468 isapnp - detected Rootkit.Win32.TDSS.tdl3 (0)
2010/10/12 08:24:47.0703 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2010/10/12 08:24:48.0015 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
2010/10/12 08:24:48.0343 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2010/10/12 08:24:48.0640 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
2010/10/12 08:24:49.0140 LMIInfo (4f69faaabb7db0d43e327c0b6aab40fc) C:\Program Files\LogMeIn\x86\RaInfo.sys
2010/10/12 08:24:49.0468 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys
2010/10/12 08:24:49.0781 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
2010/10/12 08:24:50.0109 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2010/10/12 08:24:50.0375 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
2010/10/12 08:24:50.0671 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2010/10/12 08:24:50.0984 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2010/10/12 08:24:51.0281 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
2010/10/12 08:24:51.0578 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
2010/10/12 08:24:51.0875 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2010/10/12 08:24:52.0218 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2010/10/12 08:24:52.0500 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2010/10/12 08:24:52.0812 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010/10/12 08:24:53.0093 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010/10/12 08:24:53.0359 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2010/10/12 08:24:53.0640 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2010/10/12 08:24:53.0921 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
2010/10/12 08:24:54.0265 NAVENG (49d802531e5984cf1fe028c6c129b9d8) C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20101010.003\naveng.sys
2010/10/12 08:24:54.0562 NAVEX15 (158676a5758c1fa519563b3e72fbf256) C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20101010.003\navex15.sys
2010/10/12 08:24:54.0828 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
2010/10/12 08:24:55.0156 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2010/10/12 08:24:55.0437 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2010/10/12 08:24:55.0750 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2010/10/12 08:24:56.0109 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys
2010/10/12 08:24:56.0421 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2010/10/12 08:24:56.0734 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2010/10/12 08:24:57.0093 NPF (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS\system32\drivers\NPF.sys
2010/10/12 08:24:57.0406 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2010/10/12 08:24:57.0718 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
2010/10/12 08:24:58.0093 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2010/10/12 08:24:58.0390 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
2010/10/12 08:24:58.0906 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2010/10/12 08:24:59.0281 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2010/10/12 08:24:59.0578 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
2010/10/12 08:24:59.0953 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2010/10/12 08:25:00.0281 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
2010/10/12 08:25:00.0546 PCANDIS5 (2f9806b52cb3748b1e49222744b28e3c) C:\WINDOWS\system32\PCANDIS5.SYS
2010/10/12 08:25:01.0359 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
2010/10/12 08:25:01.0781 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
2010/10/12 08:25:02.0031 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
2010/10/12 08:25:02.0734 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
2010/10/12 08:25:02.0937 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
2010/10/12 08:25:03.0265 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2010/10/12 08:25:03.0640 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
2010/10/12 08:25:03.0890 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2010/10/12 08:25:04.0078 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
2010/10/12 08:25:04.0421 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
2010/10/12 08:25:04.0687 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
2010/10/12 08:25:04.0968 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
2010/10/12 08:25:05.0296 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
2010/10/12 08:25:05.0640 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2010/10/12 08:25:05.0921 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2010/10/12 08:25:06.0093 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2010/10/12 08:25:06.0250 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2010/10/12 08:25:06.0453 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2010/10/12 08:25:06.0671 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2010/10/12 08:25:06.0921 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2010/10/12 08:25:07.0203 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
2010/10/12 08:25:07.0437 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
2010/10/12 08:25:07.0796 SAVRT (cdb565c093b0105086cc630b32f9e6e6) C:\Program Files\Symantec AntiVirus\savrt.sys
2010/10/12 08:25:08.0046 SAVRTPEL (1042cb5a003f9aed8d6cec56a0fc6c49) C:\Program Files\Symantec AntiVirus\Savrtpel.sys
2010/10/12 08:25:08.0328 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2010/10/12 08:25:08.0609 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
2010/10/12 08:25:08.0906 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
2010/10/12 08:25:09.0265 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
2010/10/12 08:25:09.0734 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
2010/10/12 08:25:10.0093 smwdm (5018a9db5eb62e3edb3110f82f556285) C:\WINDOWS\system32\drivers\smwdm.sys
2010/10/12 08:25:10.0453 SONYPVU1 (a1eceeaa5c5e74b2499eb51d38185b84) C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
2010/10/12 08:25:10.0765 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
2010/10/12 08:25:11.0062 SPBBCDrv (677b10906838d3bfb1c07ac9087e4bf7) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys
2010/10/12 08:25:11.0312 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2010/10/12 08:25:11.0656 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
2010/10/12 08:25:11.0984 Srv (89220b427890aa1dffd1a02648ae51c3) C:\WINDOWS\system32\DRIVERS\srv.sys
2010/10/12 08:25:12.0312 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2010/10/12 08:25:12.0625 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2010/10/12 08:25:12.0953 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
2010/10/12 08:25:13.0234 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
2010/10/12 08:25:13.0546 SymEvent (3c6790d26d03fe5163e2bec490e51a7e) C:\Program Files\Symantec\SYMEVENT.SYS
2010/10/12 08:25:13.0781 SYMREDRV (5314e345dfc068504cfb2676d3b2ca39) C:\WINDOWS\System32\Drivers\SYMREDRV.SYS
2010/10/12 08:25:14.0093 SYMTDI (8cd0a1478256240249b8ee88e6f25e94) C:\WINDOWS\System32\Drivers\SYMTDI.SYS
2010/10/12 08:25:14.0437 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
2010/10/12 08:25:14.0796 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
2010/10/12 08:25:15.0109 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2010/10/12 08:25:15.0468 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2010/10/12 08:25:15.0796 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2010/10/12 08:25:16.0125 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
2010/10/12 08:25:16.0437 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2010/10/12 08:25:16.0750 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys
2010/10/12 08:25:17.0078 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2010/10/12 08:25:17.0718 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
2010/10/12 08:25:18.0078 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2010/10/12 08:25:18.0484 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2010/10/12 08:25:18.0796 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2010/10/12 08:25:19.0140 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2010/10/12 08:25:19.0453 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2010/10/12 08:25:19.0781 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2010/10/12 08:25:20.0109 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
2010/10/12 08:25:20.0437 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
2010/10/12 08:25:20.0765 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
2010/10/12 08:25:21.0125 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2010/10/12 08:25:21.0578 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2010/10/12 08:25:22.0109 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
2010/10/12 08:25:22.0515 ================================================================================
2010/10/12 08:25:22.0515 Scan finished
2010/10/12 08:25:22.0515 ================================================================================
2010/10/12 08:25:22.0531 Detected object count: 1
2010/10/12 08:25:35.0640 isapnp (d9b3bbe422d8c44f77c03e909c3f3f49) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2010/10/12 08:25:35.0640 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\isapnp.sys. Real md5: d9b3bbe422d8c44f77c03e909c3f3f49, Fake md5: 05a299ec56e52649b1cf2fc52d20f2d7
2010/10/12 08:25:36.0406 Backup copy found, using it..
2010/10/12 08:25:36.0421 C:\WINDOWS\system32\DRIVERS\isapnp.sys - will be cured after reboot
2010/10/12 08:25:36.0421 Rootkit.Win32.TDSS.tdl3(isapnp) - User select action: Cure
2010/10/12 08:25:46.0953 Deinitialize success



GooredFix by jpshortstuff (03.07.10.1)
Log created at 08:22 on 12/10/2010 (Dr. LoSasso)
Firefox version [Unable to determine]

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files\Mozilla Firefox\extensions\
(none)

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [07:05 08/08/2009]

-=E.O.F=-


After a reboot the google redirects are gone, but I'd like to be sure that all issues have been removed. I ran the OTL.exe, the log files follow:

OTL logfile created on: 10/12/2010 8:36:03 AM - Run 1
OTL by OldTimer - Version 3.2.15.1 Folder = C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 523.00 Mb Available Physical Memory | 51.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 63.15 Gb Free Space | 84.82% Space Free | Partition Type: NTFS

Computer Name: FRONTDESK | User Name: Dr. LoSasso | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\LogMeIn\x86\ramaint.exe (LogMeIn, Inc.)
PRC - C:\Program Files\LogMeIn\x86\LMIGuardian.exe (LogMeIn, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
PRC - C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe (Patterson Dental Supply, Inc.)
PRC - C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\OpenOffice.org 2.0\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files\OpenOffice.org 2.0\program\soffice.exe (OpenOffice.org)
PRC - C:\Documents and Settings\All Users\Start Menu\Programs\Startup\gce.exe (Leithauser Research)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (HidServ) – C:\WINDOWS\System32\hidserv.dll File not found
SRV - (6to4) – C:\WINDOWS\System32\6to4v32.dll File not found
SRV - (LMIMaint) – C:\Program Files\LogMeIn\x86\RaMaint.exe (LogMeIn, Inc.)
SRV - (LogMeIn) – C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
SRV - (SavRoam) – C:\Program Files\Symantec AntiVirus\SavRoam.exe (symantec)
SRV - (Symantec AntiVirus) – C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (DefWatch) – C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
SRV - (SPBBCSvc) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE (Symantec Corporation)
SRV - (SNDSrvc) – C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation)
SRV - (NetSvc) – C:\Program Files\Intel\NCS\Sync\NetSvc.exe (Intel® Corporation)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\hpzipm12.exe (HP)


========== Driver Services (SafeList) ==========

DRV - (Winacusb) – C:\WINDOWS\System32\DRIVERS\winacusb.sys File not found
DRV - (NAVEX15) – C:\Program Files\Common Files\Symantec Shared\VIRUSD~1\20101010.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Program Files\Common Files\Symantec Shared\VIRUSD~1\20101010.003\NAVENG.SYS (Symantec Corporation)
DRV - (NPF) WinPcap Packet Driver (NPF) – C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (LMIRfsClientNP) – C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (LMIRfsDriver) – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (amdagp) – C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) – C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (LMIInfo) – C:\Program Files\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)
DRV - (SymEvent) – C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SAVRTPEL) – C:\Program Files\Symantec AntiVirus\Savrtpel.sys (Symantec Corporation)
DRV - (SAVRT) – C:\Program Files\Symantec AntiVirus\savrt.sys (Symantec Corporation)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (PCANDIS5) – C:\WINDOWS\system32\PCANDIS5.SYS (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (Sparrow) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) – C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) – C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) – C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) – C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) – C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) – C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) – C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) – C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (CmdIde) – C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://toolbar.inbox.com/help/sa_customize.aspx?tbid=80100
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx?tb…0100&lng=en

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\URLSearchHook: {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =



O1 HOSTS File: ([2004/08/04 06:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [ESInetConnect] C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe (Patterson Dental Supply, Inc.)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe File not found
O4 - HKLM..\Run: [sniffer] C:\WINDOWS\Temp\_ex-08 .exe File not found
O4 - HKLM..\Run: [vptray] C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\gce.exe (Leithauser Research)
O4 - Startup: C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Start Menu\Programs\Startup\OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/…b?1130271050656 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shock…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://pattersonsupport.webex.com/client/T…ort/ieatgpc.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - LMIinit.dll - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O20 - Winlogon\Notify\NavLogon: DllName - C:\WINDOWS\system32\NavLogon.dll - C:\WINDOWS\system32\NavLogon.dll (Symantec Corporation)
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/11 18:15:00 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - C:\WINDOWS\System32\6to4v32.dll File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Unable to start service SrService!

========== Files/Folders - Created Within 30 Days ==========

[2010/10/12 08:32:26 | 000,576,000 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\OTL.exe
[2010/10/12 08:24:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\tdsskiller
[2010/10/12 08:22:48 | 000,000,000 | —D | C] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\GooredFix Backups
[2010/09/28 16:04:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Bitrix Security
[2010/09/16 00:15:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Ocmi
[2010/09/16 00:15:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Cuat
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/10/12 08:32:28 | 000,576,000 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\OTL.exe
[2010/10/12 08:29:21 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/10/12 08:27:09 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/10/12 08:26:55 | 1071,697,920 | -HS- | M] () – C:\hiberfil.sys
[2010/10/12 08:19:06 | 001,211,285 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\tdsskiller.zip
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At91.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At67.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At571.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At547.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At523.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At499.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At475.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At451.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At43.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At427.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At403.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At379.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At355.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At331.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At307.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At283.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At259.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At235.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At211.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At19.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At187.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At163.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At139.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At115.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At90.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At66.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At570.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At546.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At522.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At498.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At474.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At450.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At426.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At42.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At402.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At378.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At354.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At330.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At306.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At282.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At258.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At234.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At210.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At186.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At18.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At162.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At138.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At114.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At89.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At65.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At569.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At545.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At521.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At497.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At473.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At449.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At425.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At41.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At401.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At377.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At353.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At329.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At305.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At281.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At257.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At233.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At209.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At185.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At17.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At161.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At137.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At113.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At88.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At64.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At568.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At544.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At520.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At496.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At472.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At448.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At424.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At400.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At40.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At376.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At352.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At328.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At304.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At280.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At256.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At232.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At208.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At184.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At160.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At16.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At136.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At112.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At87.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At63.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At567.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At543.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At519.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At495.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At471.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At447.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At423.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At399.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At39.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At375.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At351.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At327.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At303.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At279.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At255.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At231.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At207.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At183.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At159.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At15.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At135.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At111.job
[2010/10/11 13:19:36 | 000,000,372 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\spider.sav
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At86.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At62.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At566.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At542.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At518.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At494.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At470.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At446.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At422.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At398.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At38.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At374.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At350.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At326.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At302.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At278.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At254.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At230.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At206.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At182.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At158.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At14.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At134.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At110.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At85.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At61.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At565.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At541.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At517.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At493.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At469.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At445.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At421.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At397.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At373.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At37.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At349.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At325.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At301.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At277.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At253.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At229.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At205.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At181.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At157.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At133.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At13.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At109.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At84.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At60.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At564.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At540.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At516.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At492.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At468.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At444.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At420.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At396.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At372.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At36.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At348.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At324.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At300.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At276.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At252.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At228.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At204.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At180.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At156.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At132.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At12.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At108.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At83.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At59.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At563.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At539.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At515.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At491.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At467.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At443.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At419.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At395.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At371.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At35.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At347.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At323.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At299.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At275.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At251.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At227.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At203.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At179.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At155.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At131.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At11.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At107.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At82.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At58.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At562.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At538.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At514.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At490.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At466.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At442.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At418.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At394.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At370.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At346.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At34.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At322.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At298.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At274.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At250.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At226.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At202.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At178.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At154.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At130.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At106.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At10.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At9.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At81.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At57.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At561.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At537.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At513.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At489.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At465.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At441.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At417.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At393.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At369.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At345.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At33.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At321.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At297.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At273.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At249.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At225.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At201.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At177.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At153.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At129.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At105.job
[2010/10/07 11:19:01 | 000,011,208 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Phillip Devoe upper and lower anterior TX.odt
[2010/10/07 11:12:40 | 000,002,547 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\OpenOffice.org Writer.lnk
[2010/10/07 08:47:32 | 000,357,944 | —- | M] () – C:\WINDOWS\System32\Ë
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At80.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At8.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At560.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At56.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At536.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At512.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At488.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At464.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At440.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At416.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At392.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At368.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At344.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At320.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At32.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At296.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At272.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At248.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At224.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At200.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At176.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At152.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At128.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At104.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At79.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At7.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At559.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At55.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At535.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At511.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At487.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At463.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At439.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At415.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At391.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At367.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At343.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At319.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At31.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At295.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At271.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At247.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At223.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At199.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At175.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At151.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At127.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At103.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At78.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At6.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At558.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At54.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At534.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At510.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At486.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At462.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At438.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At414.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At390.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At366.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At342.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At318.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At30.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At294.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At270.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At246.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At222.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At198.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At174.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At150.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At126.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At102.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At77.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At557.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At533.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At53.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At509.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At5.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At485.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At461.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At437.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At413.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At389.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At365.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At341.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At317.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At293.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At29.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At269.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At245.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At221.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At197.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At173.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At149.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At125.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At101.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At76.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At556.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At532.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At52.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At508.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At484.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At460.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At436.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At412.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At4.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At388.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At364.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At340.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At316.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At292.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At28.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At268.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At244.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At220.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At196.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At172.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At148.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At124.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At100.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At99.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At75.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At555.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At531.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At51.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At507.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At483.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At459.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At435.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At411.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At387.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At363.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At339.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At315.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At3.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At291.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At27.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At267.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At243.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At219.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At195.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At171.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At147.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At123.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At98.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At74.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At554.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At530.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At506.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At50.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At482.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At458.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At434.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At410.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At386.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At362.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At338.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At314.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At290.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At266.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At26.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At242.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At218.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At2.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At194.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At170.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At146.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At122.job
[2010/10/07 00:58:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At49.job
[2010/10/07 00:58:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At241.job
[2010/10/07 00:57:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At337.job
[2010/10/07 00:55:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At217.job
[2010/10/07 00:52:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At433.job
[2010/10/07 00:50:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At169.job
[2010/10/07 00:46:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At457.job
[2010/10/07 00:44:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At289.job
[2010/10/07 00:44:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At121.job
[2010/10/07 00:41:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At73.job
[2010/10/07 00:40:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At481.job
[2010/10/07 00:35:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At265.job
[2010/10/07 00:31:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At97.job
[2010/10/07 00:28:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At385.job
[2010/10/07 00:27:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At529.job
[2010/10/07 00:20:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At553.job
[2010/10/07 00:16:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At313.job
[2010/10/07 00:15:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At193.job
[2010/10/07 00:14:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At361.job
[2010/10/07 00:14:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At1.job
[2010/10/07 00:13:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At505.job
[2010/10/07 00:12:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At145.job
[2010/10/07 00:10:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At25.job
[2010/10/07 00:05:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At409.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At96.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At72.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At576.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At552.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At528.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At504.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At480.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At48.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At456.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At432.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At408.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At384.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At360.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At336.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At312.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At288.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At264.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At240.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At24.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At216.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At192.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At168.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At144.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At120.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At95.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At71.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At575.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At551.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At527.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At503.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At479.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At47.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At455.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At431.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At407.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At383.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At359.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At335.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At311.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At287.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At263.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At239.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At23.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At215.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At191.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At167.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At143.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At119.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At94.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At70.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At574.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At550.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At526.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At502.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At478.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At46.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At454.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At430.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At406.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At382.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At358.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At334.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At310.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At286.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At262.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At238.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At22.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At214.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At190.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At166.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At142.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At118.job
[2010/10/06 20:00:07 | 000,000,280 | —- | M] () – C:\WINDOWS\tasks\Demandforce DFLink Upload.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At93.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At69.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At573.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At549.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At525.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At501.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At477.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At453.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At45.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At429.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At405.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At381.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At357.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At333.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At309.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At285.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At261.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At237.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At213.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At21.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At189.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At165.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At141.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At117.job
[2010/10/06 19:30:08 | 000,000,270 | —- | M] () – C:\WINDOWS\tasks\Demandforce DFLink Update.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At92.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At68.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At572.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At548.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At524.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At500.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At476.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At452.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At44.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At428.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At404.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At380.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At356.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At332.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At308.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At284.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At260.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At236.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At212.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At20.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At188.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At164.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At140.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\At116.job
[2010/10/04 11:40:51 | 000,011,073 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Neeka Alford upper anterior TX.odt
[2010/09/28 14:47:55 | 000,013,253 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\fax cover page-jamie.odt
[2010/09/28 13:43:33 | 000,011,227 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Carla Meza upper anterior tx.odt
[2010/09/27 11:02:04 | 000,011,188 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Virginia Price tx.odt
[2010/09/27 09:11:34 | 000,011,222 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Vicki Roberts 7-10 tx.odt
[2010/09/20 15:26:36 | 000,012,290 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\stephen fischer tx.odt
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/12 08:23:39 | 001,211,285 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\tdsskiller.zip
[2010/10/07 11:19:00 | 000,011,208 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Phillip Devoe upper and lower anterior TX.odt
[2010/10/04 11:40:50 | 000,011,073 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Neeka Alford upper anterior TX.odt
[2010/09/28 13:43:32 | 000,011,227 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Carla Meza upper anterior tx.odt
[2010/09/27 10:59:32 | 000,011,188 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Virginia Price tx.odt
[2010/09/27 09:10:06 | 000,011,222 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\Vicki Roberts 7-10 tx.odt
[2010/09/20 15:26:35 | 000,012,290 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\My Documents\stephen fischer tx.odt
[2010/08/23 08:42:33 | 000,000,112 | —- | C] () – C:\Documents and Settings\All Users\Application Data\w4sGX3DB.dat
[2009/10/12 13:25:17 | 000,007,168 | —- | C] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/04/06 10:45:05 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\support.dll
[2007/04/06 10:45:05 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\AdapterId.dll
[2005/12/16 10:46:29 | 000,000,000 | —- | C] () – C:\WINDOWS\VPC32.INI
[2005/11/09 12:24:59 | 000,000,025 | —- | C] () – C:\WINDOWS\zzxcvgc.ini
[2005/11/08 16:18:23 | 000,000,025 | —- | C] () – C:\WINDOWS\sigplus.ini
[2005/10/14 13:20:55 | 000,240,640 | —- | C] () – C:\WINDOWS\System32\nmocod.dll
[2005/10/14 12:36:27 | 000,000,083 | —- | C] () – C:\WINDOWS\usrwiz.ini
[2005/10/14 10:20:20 | 000,017,975 | —- | C] () – C:\WINDOWS\hplj1010.ini
[2005/09/22 11:05:18 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2005/09/22 10:44:18 | 000,012,288 | —- | C] () – C:\WINDOWS\System32\e100bmsg.dll
[2005/09/22 10:44:10 | 000,000,390 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2004/08/11 18:24:19 | 000,000,791 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/11 18:11:31 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/11 18:07:24 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2003/08/29 05:23:46 | 000,094,274 | —- | C] () – C:\WINDOWS\System32\HPBHEALR.DLL

========== LOP Check ==========

[2008/06/18 12:52:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LogMeIn
[2010/10/04 07:35:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Bitrix Security
[2010/10/04 07:35:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Cuat
[2010/09/30 11:38:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Ocmi
[2010/10/07 00:14:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At1.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At10.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At100.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At101.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At102.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At103.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At104.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At105.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At106.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At107.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At108.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At109.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At11.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At110.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At111.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At112.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At113.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At114.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At115.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At116.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At117.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At118.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At119.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At12.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At120.job
[2010/10/07 00:44:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At121.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At122.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At123.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At124.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At125.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At126.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At127.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At128.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At129.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At13.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At130.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At131.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At132.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At133.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At134.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At135.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At136.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At137.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At138.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At139.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At14.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At140.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At141.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At142.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At143.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At144.job
[2010/10/07 00:12:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At145.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At146.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At147.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At148.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At149.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At15.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At150.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At151.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At152.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At153.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At154.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At155.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At156.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At157.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At158.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At159.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At16.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At160.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At161.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At162.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At163.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At164.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At165.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At166.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At167.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At168.job
[2010/10/07 00:50:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At169.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At17.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At170.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At171.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At172.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At173.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At174.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At175.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At176.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At177.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At178.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At179.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At18.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At180.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At181.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At182.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At183.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At184.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At185.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At186.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At187.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At188.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At189.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At19.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At190.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At191.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At192.job
[2010/10/07 00:15:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At193.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At194.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At195.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At196.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At197.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At198.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At199.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At2.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At20.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At200.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At201.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At202.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At203.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At204.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At205.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At206.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At207.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At208.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At209.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At21.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At210.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At211.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At212.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At213.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At214.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At215.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At216.job
[2010/10/07 00:55:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At217.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At218.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At219.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At22.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At220.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At221.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At222.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At223.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At224.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At225.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At226.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At227.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At228.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At229.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At23.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At230.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At231.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At232.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At233.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At234.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At235.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At236.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At237.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At238.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At239.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At24.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At240.job
[2010/10/07 00:58:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At241.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At242.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At243.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At244.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At245.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At246.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At247.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At248.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At249.job
[2010/10/07 00:10:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At25.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At250.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At251.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At252.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At253.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At254.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At255.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At256.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At257.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At258.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At259.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At26.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At260.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At261.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At262.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At263.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At264.job
[2010/10/07 00:35:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At265.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At266.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At267.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At268.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At269.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At27.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At270.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At271.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At272.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At273.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At274.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At275.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At276.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At277.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At278.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At279.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At28.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At280.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At281.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At282.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At283.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At284.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At285.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At286.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At287.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At288.job
[2010/10/07 00:44:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At289.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At29.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At290.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At291.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At292.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At293.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At294.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At295.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At296.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At297.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At298.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At299.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At3.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At30.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At300.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At301.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At302.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At303.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At304.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At305.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At306.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At307.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At308.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At309.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At31.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At310.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At311.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At312.job
[2010/10/07 00:16:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At313.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At314.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At315.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At316.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At317.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At318.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At319.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At32.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At320.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At321.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At322.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At323.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At324.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At325.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At326.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At327.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At328.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At329.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At33.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At330.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At331.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At332.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At333.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At334.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At335.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At336.job
[2010/10/07 00:57:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At337.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At338.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At339.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At34.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At340.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At341.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At342.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At343.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At344.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At345.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At346.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At347.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At348.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At349.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At35.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At350.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At351.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At352.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At353.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At354.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At355.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At356.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At357.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At358.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At359.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At36.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At360.job
[2010/10/07 00:14:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At361.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At362.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At363.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At364.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At365.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At366.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At367.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At368.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At369.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At37.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At370.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At371.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At372.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At373.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At374.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At375.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At376.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At377.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At378.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At379.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At38.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At380.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At381.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At382.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At383.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At384.job
[2010/10/07 00:28:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At385.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At386.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At387.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At388.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At389.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At39.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At390.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At391.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At392.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At393.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At394.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At395.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At396.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At397.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At398.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At399.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At4.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At40.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At400.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At401.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At402.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At403.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At404.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At405.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At406.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At407.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At408.job
[2010/10/07 00:05:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At409.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At41.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At410.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At411.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At412.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At413.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At414.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At415.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At416.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At417.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At418.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At419.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At42.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At420.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At421.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At422.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At423.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At424.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At425.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At426.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At427.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At428.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At429.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At43.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At430.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At431.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At432.job
[2010/10/07 00:52:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At433.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At434.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At435.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At436.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At437.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At438.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At439.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At44.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At440.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At441.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At442.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At443.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At444.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At445.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At446.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At447.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At448.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At449.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At45.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At450.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At451.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At452.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At453.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At454.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At455.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At456.job
[2010/10/07 00:46:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At457.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At458.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At459.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At46.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At460.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At461.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At462.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At463.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At464.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At465.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At466.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At467.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At468.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At469.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At47.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At470.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At471.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At472.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At473.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At474.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At475.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At476.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At477.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At478.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At479.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At48.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At480.job
[2010/10/07 00:40:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At481.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At482.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At483.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At484.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At485.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At486.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At487.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At488.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At489.job
[2010/10/07 00:58:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At49.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At490.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At491.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At492.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At493.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At494.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At495.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At496.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At497.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At498.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At499.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At5.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At50.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At500.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At501.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At502.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At503.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At504.job
[2010/10/07 00:13:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At505.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At506.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At507.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At508.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At509.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At51.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At510.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At511.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At512.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At513.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At514.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At515.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At516.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At517.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At518.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At519.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At52.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At520.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At521.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At522.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At523.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At524.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At525.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At526.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At527.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At528.job
[2010/10/07 00:27:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At529.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At53.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At530.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At531.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At532.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At533.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At534.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At535.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At536.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At537.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At538.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At539.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At54.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At540.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At541.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At542.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At543.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At544.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At545.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At546.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At547.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At548.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At549.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At55.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At550.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At551.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At552.job
[2010/10/07 00:20:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At553.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At554.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At555.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At556.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At557.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At558.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At559.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At56.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At560.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At561.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At562.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At563.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At564.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At565.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At566.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At567.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At568.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At569.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At57.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At570.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At571.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At572.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At573.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At574.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At575.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At576.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At58.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At59.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At6.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At60.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At61.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At62.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At63.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At64.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At65.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At66.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At67.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At68.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At69.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At7.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At70.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At71.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At72.job
[2010/10/07 00:41:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At73.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At74.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At75.job
[2010/10/07 03:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At76.job
[2010/10/07 04:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At77.job
[2010/10/07 05:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At78.job
[2010/10/07 06:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At79.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At8.job
[2010/10/07 07:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At80.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At81.job
[2010/10/11 09:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At82.job
[2010/10/11 10:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At83.job
[2010/10/11 11:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At84.job
[2010/10/11 12:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At85.job
[2010/10/11 13:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At86.job
[2010/10/11 14:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At87.job
[2010/10/11 15:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At88.job
[2010/10/11 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At89.job
[2010/10/11 08:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At9.job
[2010/10/11 17:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At90.job
[2010/10/11 18:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At91.job
[2010/10/06 19:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At92.job
[2010/10/06 20:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At93.job
[2010/10/06 21:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At94.job
[2010/10/06 22:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At95.job
[2010/10/06 23:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At96.job
[2010/10/07 00:31:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At97.job
[2010/10/07 01:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At98.job
[2010/10/07 02:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\At99.job
[2010/10/06 19:30:08 | 000,000,270 | —- | M] () – C:\WINDOWS\Tasks\Demandforce DFLink Update.job
[2010/10/06 20:00:07 | 000,000,280 | —- | M] () – C:\WINDOWS\Tasks\Demandforce DFLink Upload.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2008/02/02 12:49:48 | 000,001,024 | —- | M] () – C:\.rnd
[2010/01/21 09:37:52 | 000,003,804 | —- | M] () – C:\aaw7boot.log
[2004/08/11 18:15:00 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2005/11/09 10:53:22 | 000,000,211 | RHS- | M] () – C:\boot.ini
[2004/08/11 18:15:00 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2005/09/22 10:44:52 | 000,003,182 | RH– | M] () – C:\dell.sdr
[2010/10/12 08:26:55 | 1071,697,920 | -HS- | M] () – C:\hiberfil.sys
[2005/10/02 11:44:50 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/11 18:15:00 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2004/08/11 18:15:00 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 06:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/05/16 10:49:38 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/10/12 08:26:53 | 1610,612,736 | -HS- | M] () – C:\pagefile.sys
[2010/10/12 08:25:46 | 000,046,630 | —- | M] () – C:\TDSSKiller.2.4.4.0_12.10.2010_08.24.20_log.txt
[2010/01/13 17:24:53 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\tegfcwpf.exe

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/11 18:14:22 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2003/08/29 05:23:48 | 000,062,976 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\HPPRN05.DLL
[2003/08/29 05:23:50 | 000,049,152 | —- | M] (Zenographics, Inc.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\IMFPRINT.DLL
[2010/06/02 16:06:34 | 000,053,632 | —- | M] (LogMeIn, Inc.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\LMIproc.dll
[2008/07/06 06:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/08/11 18:06:14 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2004/08/11 18:06:14 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2004/08/11 18:06:14 | 000,876,544 | —- | M] () – C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/05/16 10:55:41 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2005/10/02 11:41:10 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/08/11 18:20:42 | 000,000,079 | —- | M] () – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2006/01/04 15:02:32 | 006,860,424 | —- | M] (Microsoft Corporation ) – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\MicrosoftAntiSpywareInstall.exe
[2010/10/12 08:32:28 | 000,576,000 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\OTL.exe
[2007/04/06 10:44:18 | 002,233,046 | —- | M] (3Com Corporation ) – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\SiteSurvey2.exe
[2007/04/06 10:44:47 | 005,655,305 | —- | M] (3Com ) – C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop\WidManSetup.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-07-14 19:12:58

< End of report >


OTL Extras logfile created on: 10/12/2010 8:36:03 AM - Run 1
OTL by OldTimer - Version 3.2.15.1 Folder = C:\Documents and Settings\Dr. LoSasso.FRONTDESK\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 523.00 Mb Available Physical Memory | 51.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 63.15 Gb Free Space | 84.82% Space Free | Partition Type: NTFS

Computer Name: FRONTDESK | User Name: Dr. LoSasso | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
"DisableSR" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"135:TCP" = 135:TCP:*:Enabled:DCOM
"135:UDP" = 135:UDP:*:Enabled:DCOM2

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe" = C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe:*:Enabled:javaw – ()
"C:\Program Files\PDSI\eMAGINE\rteng8.exe" = C:\Program Files\PDSI\eMAGINE\rteng8.exe:*:Enabled:Adaptive Server Anywhere Network Server – File not found
"C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe" = C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe:*:Enabled:Patterson EagleSoft Internet Connection – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\ESTechUtil.exe" = C:\Program Files\EagleSoft\Shared Files\ESTechUtil.exe:*:Enabled:Patterson EagleSoft Technical Utility – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\EagleSoft.exe" = C:\Program Files\EagleSoft\Shared Files\EagleSoft.exe:*:Enabled:Patterson EagleSoft – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\techaid.exe" = C:\Program Files\EagleSoft\Shared Files\techaid.exe:*:Enabled:Patterson EagleSoft Technical Reference – ()
"C:\Program Files\EagleSoft\Shared Files\ESMessenger.exe" = C:\Program Files\EagleSoft\Shared Files\ESMessenger.exe:*:Enabled:Patterson EagleSoft Messenger Client – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\dbeng7.exe" = C:\Program Files\EagleSoft\Shared Files\dbeng7.exe:*:Enabled:Patterson EagleSoft ODBC Client – (Sybase, Inc.)
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger – File not found
"C:\Program Files\Yahoo!\Messenger\YahooMessenger .exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger .exe:*:Disabled:Yahoo! Messenger – File not found
"C:\WINDOWS\explorer.exe" = C:\WINDOWS\explorer.exe:*:Disabled:Windows Explorer – (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{292C47B2-8DB7-47BF-896C-C3C5EE8108C4}" = hp LaserJet 1010 Series
"{2A0E6C1F-0304-4A34-979F-6C3983E1B2DA}" = Microsoft XML Parser
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD 5.1
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78D891EF-9E2D-4FC8-A71F-E6F897BA1B21}" = Symantec AntiVirus
"{7E7658A2-CD3F-48A7-93EA-0882BCA4FD2A}" = LogMeIn
"{837AF9C6-A55A-4E48-AFF8-D95C26B2FBF1}" = 3Com Wireless Infrastructure Device Manager
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Extreme Graphics 2 Driver
"{987AE1EA-9AF0-484D-A0F9-11A2E0EB4AA0}" = OpenOffice.org 2.0
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}" = Windows Defender Signatures
"{A790BEB1-BCCF-4EC6-807B-5708B36E8A79}" = Intel® PROSet
"{AC76BA86-7AD7-1033-7B44-A71000000002}" = Adobe Reader 7.1.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DBBD27DA-E9A5-480F-92DB-A459AEF1A078}" = Patterson EagleSoft
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{FDF54538-EE59-449E-829D-A54B42316074}" = D3One
"ActiveTouchMeetingClient" = WebEx
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"ArubAEz 6.2.0" = ArubAEz 6.2.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{FDF54538-EE59-449E-829D-A54B42316074}" = D3One
"LiveUpdate" = LiveUpdate 3.0 (Symantec Corporation)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PROSet" = Intel® PRO Network Adapters and Drivers
"Windows XP Service Pack" = Windows XP Service Pack 3

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/11/2010 2:25:41 PM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 10/11/2010 6:26:46 PM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 10/11/2010 6:26:47 PM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The connection with the server was terminated abnormally

Error - 10/11/2010 6:26:47 PM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 10/11/2010 6:26:47 PM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 10/12/2010 8:07:22 AM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 10/12/2010 8:07:22 AM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The connection with the server was terminated abnormally

Error - 10/12/2010 8:07:23 AM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 10/12/2010 8:07:23 AM | Computer Name = FRONTDESK | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 10/12/2010 8:34:28 AM | Computer Name = FRONTDESK | Source = Application Hang | ID = 1002
Description = Hanging application OTL.exe, version 3.2.15.1, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 10/12/2010 8:01:16 AM | Computer Name = FRONTDESK | Source = Ftdisk | ID = 262189
Description = The system could not sucessfully load the crash dump driver.

Error - 10/12/2010 8:01:16 AM | Computer Name = FRONTDESK | Source = Ftdisk | ID = 262193
Description = Configuring the Page file for crash dump failed. Make sure there is
a page file on the boot partition and that is large enough to contain all physical
memory.

Error - 10/12/2010 8:01:37 AM | Computer Name = FRONTDESK | Source = Service Control Manager | ID = 7023
Description = The Network Security service terminated with the following error:
%%126

Error - 10/12/2010 8:04:23 AM | Computer Name = FRONTDESK | Source = Ftdisk | ID = 262189
Description = The system could not sucessfully load the crash dump driver.

Error - 10/12/2010 8:04:23 AM | Computer Name = FRONTDESK | Source = Ftdisk | ID = 262193
Description = Configuring the Page file for crash dump failed. Make sure there is
a page file on the boot partition and that is large enough to contain all physical
memory.

Error - 10/12/2010 8:04:57 AM | Computer Name = FRONTDESK | Source = Service Control Manager | ID = 7023
Description = The Network Security service terminated with the following error:
%%126

Error - 10/12/2010 8:29:03 AM | Computer Name = FRONTDESK | Source = Service Control Manager | ID = 7023
Description = The Network Security service terminated with the following error:
%%126

Error - 10/12/2010 8:29:07 AM | Computer Name = FRONTDESK | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
agp440 IntelIde

Error - 10/12/2010 8:36:37 AM | Computer Name = FRONTDESK | Source = SRService | ID = 104
Description = The System Restore initialization process failed.

Error - 10/12/2010 8:36:37 AM | Computer Name = FRONTDESK | Source = Service Control Manager | ID = 7023
Description = The System Restore Service service terminated with the following error:
%%2


< End of report >

Thank you for your response. This is indeed a computer at a doctor's office. It is part of a peer-to-peer network with two other computers. What follows are OTL logs for the other two computers. Do they also show signs of infection by the same backdoor trojan?


OTL Extras logfile created on: 10/13/2010 8:35:58 AM - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Documents and Settings\Dr. LoSasso\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 496.00 Mb Available Physical Memory | 49.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 47.97 Gb Free Space | 64.43% Space Free | Partition Type: NTFS

Computer Name: OFFICEMANAGER | User Name: Dr. LoSasso | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"135:TCP" = 135:TCP:*:Enabled:DCOM
"135:UDP" = 135:UDP:*:Enabled:DCOM2

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe" = C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe:*:Enabled:javaw – ()
"C:\WINDOWS\system32\usmt\migwiz.exe" = C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard – (Microsoft Corporation)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader – (AOL LLC)
"C:\Program Files\Common Files\AOL\1134573407\ee\aolsoftware.exe" = C:\Program Files\Common Files\AOL\1134573407\ee\aolsoftware.exe:*:Enabled:AOL Services – (America Online, Inc.)
"C:\Program Files\Common Files\AOL\1134573407\ee\aim6.exe" = C:\Program Files\Common Files\AOL\1134573407\ee\aim6.exe:*:Enabled:AIM – (America Online, Inc.)
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger – (Yahoo! Inc.)
"C:\Program Files\Yahoo!\Messenger\YServer.exe" = C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server – File not found
"C:\Program Files\MySpace\IM\MySpaceIM.exe" = C:\Program Files\MySpace\IM\MySpaceIM.exe:*:Enabled:MySpace Instant Messenger – File not found
"C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe" = C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe:*:Enabled:Patterson EagleSoft Internet Connection – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\ESTechUtil.exe" = C:\Program Files\EagleSoft\Shared Files\ESTechUtil.exe:*:Enabled:Patterson EagleSoft Technical Utility – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\EagleSoft.exe" = C:\Program Files\EagleSoft\Shared Files\EagleSoft.exe:*:Enabled:Patterson EagleSoft – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\techaid.exe" = C:\Program Files\EagleSoft\Shared Files\techaid.exe:*:Enabled:Patterson EagleSoft Technical Reference – ()
"C:\Program Files\EagleSoft\Shared Files\ESMessenger.exe" = C:\Program Files\EagleSoft\Shared Files\ESMessenger.exe:*:Enabled:Patterson EagleSoft Messenger Client – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\dbeng7.exe" = C:\Program Files\EagleSoft\Shared Files\dbeng7.exe:*:Enabled:Patterson EagleSoft ODBC Client – (Sybase, Inc.)
"C:\Documents and Settings\Dr. LoSasso\Local Settings\Temporary Internet Files\Content.IE5\U5WEJ2EL\NTRsupport[1].exe" = C:\Documents and Settings\Dr. LoSasso\Local Settings\Temporary Internet Files\Content.IE5\U5WEJ2EL\NTRsupport[1].exe:*:Enabled:NTRsupport – File not found
"C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe" = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe:*:Enabled:qbupdate.exe – (Intuit Inc.)
"C:\Documents and Settings\Dr. LoSasso\Local Settings\Temporary Internet Files\Content.IE5\KKH92YPP\NTRsupport[1].exe" = C:\Documents and Settings\Dr. LoSasso\Local Settings\Temporary Internet Files\Content.IE5\KKH92YPP\NTRsupport[1].exe:*:Enabled:NTRsupport – File not found
"C:\Documents and Settings\Dr. LoSasso\Local Settings\Temporary Internet Files\Content.IE5\ODHF7WLF\NTRsupport[1].exe" = C:\Documents and Settings\Dr. LoSasso\Local Settings\Temporary Internet Files\Content.IE5\ODHF7WLF\NTRsupport[1].exe:*:Enabled:NTRsupport – File not found
"C:\Program Files\Intuit\QuickBooks 2007\FileManagement.exe" = C:\Program Files\Intuit\QuickBooks 2007\FileManagement.exe:*:Enabled:FileManagement.exe – ( )
"C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe" = C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe:*:Enabled:QBCFMonitorService.exe – (Intuit)
"C:\Program Files\Intuit\QuickBooks 2007\QBDBMgr.exe" = C:\Program Files\Intuit\QuickBooks 2007\QBDBMgr.exe:*:Enabled:QBDBMgr.exe – (iAnywhere Solutions, Inc.)
"C:\Program Files\Intuit\QuickBooks 2007\QBW32.EXE" = C:\Program Files\Intuit\QuickBooks 2007\QBW32.EXE:*:Enabled:QBW32.EXE – (Intuit Inc.)
"C:\Program Files\Intuit\QuickBooks 2007\QBDBMgrN.exe" = C:\Program Files\Intuit\QuickBooks 2007\QBDBMgrN.exe:*:Enabled:QuickBooks 2007 Data Manager – (iAnywhere Solutions, Inc.)
"C:\WINDOWS\LMI458.tmp\lmi_rescue.exe" = C:\WINDOWS\LMI458.tmp\lmi_rescue.exe:*:Enabled:LogMeIn Rescue – File not found


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.4
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"ActiveTouchMeetingClient" = WebEx
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Google Desktop" = Google Desktop
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting 4.0.0.320

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 9/8/2010 8:58:38 AM | Computer Name = OFFICEMANAGER | Source = Application Hang | ID = 1001
Description = Fault bucket 1987266601.

Error - 10/4/2010 1:06:14 AM | Computer Name = OFFICEMANAGER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 2:06:14 AM | Computer Name = OFFICEMANAGER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 3:06:14 AM | Computer Name = OFFICEMANAGER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 4:06:14 AM | Computer Name = OFFICEMANAGER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 5:06:14 AM | Computer Name = OFFICEMANAGER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 6:06:14 AM | Computer Name = OFFICEMANAGER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 7:06:07 AM | Computer Name = OFFICEMANAGER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 8:08:37 AM | Computer Name = OFFICEMANAGER | Source = Application Hang | ID = 1002
Description = Hanging application QBW32.EXE, version 17.0.4013.564, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 10/4/2010 8:08:39 AM | Computer Name = OFFICEMANAGER | Source = Application Hang | ID = 1002
Description = Hanging application QBW32.EXE, version 17.0.4013.564, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 8/23/2010 8:21:27 AM | Computer Name = OFFICEMANAGER | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.

Error - 8/23/2010 8:36:27 AM | Computer Name = OFFICEMANAGER | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 30 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)

Error - 8/23/2010 8:36:27 AM | Computer Name = OFFICEMANAGER | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 29 minutes. NtpClient has no source of accurate
time.

Error - 8/26/2010 1:48:19 PM | Computer Name = OFFICEMANAGER | Source = Schannel | ID = 36870
Description = A fatal error occurred when attempting to access the SSL server credential
private key. The error code returned from the cryptographic module is 0x80090016.

Error - 8/26/2010 1:49:38 PM | Computer Name = OFFICEMANAGER | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Yahoo! Updater service
to connect.

Error - 8/26/2010 1:49:38 PM | Computer Name = OFFICEMANAGER | Source = Service Control Manager | ID = 7000
Description = The Yahoo! Updater service failed to start due to the following error:
%%1053

Error - 9/15/2010 9:07:15 AM | Computer Name = OFFICEMANAGER | Source = Schannel | ID = 36870
Description = A fatal error occurred when attempting to access the SSL server credential
private key. The error code returned from the cryptographic module is 0x80090016.

Error - 9/30/2010 2:42:02 PM | Computer Name = OFFICEMANAGER | Source = Schannel | ID = 36870
Description = A fatal error occurred when attempting to access the SSL server credential
private key. The error code returned from the cryptographic module is 0x80090016.

Error - 10/4/2010 8:11:07 AM | Computer Name = OFFICEMANAGER | Source = Schannel | ID = 36870
Description = A fatal error occurred when attempting to access the SSL server credential
private key. The error code returned from the cryptographic module is 0x80090016.

Error - 10/13/2010 8:06:05 AM | Computer Name = OFFICEMANAGER | Source = Schannel | ID = 36870
Description = A fatal error occurred when attempting to access the SSL server credential
private key. The error code returned from the cryptographic module is 0x80090016.


< End of report >

OTL logfile created on: 10/13/2010 8:35:58 AM - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Documents and Settings\Dr. LoSasso\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 496.00 Mb Available Physical Memory | 49.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 47.97 Gb Free Space | 64.43% Space Free | Partition Type: NTFS

Computer Name: OFFICEMANAGER | User Name: Dr. LoSasso | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
PRC - C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe (Patterson Dental Supply, Inc.)
PRC - C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
PRC - C:\Program Files\OpenOffice.org 2.0\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files\OpenOffice.org 2.0\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\All Users\Start Menu\Programs\Startup\gce.exe (Leithauser Research)
PRC - C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
PRC - C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (HidServ) – C:\WINDOWS\System32\hidserv.dll File not found
SRV - (GoogleDesktopManager-051210-111108) – C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (QBCFMonitorService) – C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe (Intuit)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (aawservice) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (Symantec RemoteAssist) – C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe (Symantec, Inc.)
SRV - (Viewpoint Manager Service) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (QBFCService) – C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe (Intuit Inc.)
SRV - (SavRoam) – C:\Program Files\Symantec AntiVirus\SavRoam.exe (symantec)
SRV - (Symantec AntiVirus) – C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (DefWatch) – C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
SRV - (ccPwdSvc) – C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
SRV - (SNDSrvc) – C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation)
SRV - (SPBBCSvc) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation)
SRV - (NetSvc) – C:\Program Files\Intel\NCS\Sync\NetSvc.exe (Intel® Corporation)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\hpzipm12.exe (HP)


========== Driver Services (SafeList) ==========

DRV - (lmimirr) – C:\WINDOWS\System32\DRIVERS\lmimirr.sys File not found
DRV - (NAVEX15) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101012.001\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101012.001\NAVENG.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\eengine\eeCtrl.sys (Symantec Corporation)
DRV - (amdagp) – C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) – C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (SAVRTPEL) – C:\Program Files\Symantec AntiVirus\Savrtpel.sys (Symantec Corporation)
DRV - (SAVRT) – C:\Program Files\Symantec AntiVirus\savrt.sys (Symantec Corporation)
DRV - (SymEvent) – C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (Sparrow) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) – C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) – C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) – C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) – C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) – C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) – C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) – C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) – C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (CmdIde) – C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\URLSearchHook: {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll (America Online, Inc.)
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =



O1 HOSTS File: ([2004/08/04 06:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: () - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (AOL Toolbar Launcher) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll (America Online, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.0988.2\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.0988.2\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [ESInetConnect] C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe (Patterson Dental Supply, Inc.)
O4 - HKLM..\Run: [gcasServ] C:\Program Files\Microsoft AntiSpyware\gcasServ.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 1010 Series\SetConfig.exe (Hewlett-Packard Inc.)
O4 - HKLM..\Run: [vptray] C:\PROGRA~1\SYMANT~1\\vptray.exe ()
O4 - HKCU..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [Aim6] File not found
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\gce.exe (Leithauser Research)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
O4 - Startup: C:\Documents and Settings\Dr. LoSasso\Start Menu\Programs\Startup\OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &AOL Toolbar Search - c:\Program Files\AOL\AOL Toolbar 3.0\resources\en-us\local\search.html ()
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: wachovia.com ([www] https in Trusted sites)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shock…ash/swflash.cab (Shockwave Flash Object)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\NavLogon: DllName - C:\WINDOWS\system32\NavLogon.dll - C:\WINDOWS\system32\NavLogon.dll (Symantec Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Dr. LoSasso\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Dr. LoSasso\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {9EF34FF2-3396-4527-9D27-04C8C1C67806} - C:\Program Files\Microsoft AntiSpyware\shellextension.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/11 18:15:00 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2010/10/13 08:34:42 | 000,574,464 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe
[2010/10/12 23:25:17 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2010/10/12 23:25:17 | 000,954,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40.dll
[2010/10/12 23:25:17 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2010/10/12 23:25:07 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/10/13 08:34:46 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe
[2010/10/13 08:07:19 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/10/13 08:05:01 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/13 08:04:17 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/10/13 08:04:10 | 000,352,976 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/13 08:04:06 | 1071,697,920 | -HS- | M] () – C:\hiberfil.sys
[2010/10/13 08:03:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/13 03:08:08 | 000,001,393 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/10/11 15:22:59 | 001,453,732 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Desktop\bedroom furniture 004.jpg
[2010/10/11 15:22:37 | 001,434,528 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Desktop\bedroom furniture 003.jpg
[2010/10/04 15:46:41 | 000,013,312 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/04 15:04:12 | 001,549,513 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Desktop\bedroom furniture 002.jpg
[2010/10/04 15:04:10 | 001,504,702 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Desktop\bedroom furniture 001.jpg
[2010/10/04 08:03:50 | 000,493,374 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/10/04 08:03:50 | 000,091,394 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/09/18 12:23:26 | 000,974,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mfc42u.dll
[2010/09/18 12:23:26 | 000,974,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42u.dll
[2010/09/18 02:53:25 | 000,974,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mfc42.dll
[2010/09/18 02:53:25 | 000,974,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2010/09/18 02:53:25 | 000,954,368 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mfc40.dll
[2010/09/18 02:53:25 | 000,954,368 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40.dll
[2010/09/18 02:53:25 | 000,953,856 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mfc40u.dll
[2010/09/18 02:53:25 | 000,953,856 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2010/09/15 03:05:57 | 002,000,907 | —- | M] () – C:\WINDOWS\iis6.BAK
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2009/09/28 10:39:49 | 000,000,038 | —- | C] () – C:\Documents and Settings\Dr. LoSasso\Application Data\msnpromo.txt
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2007/05/01 10:14:15 | 000,000,843 | —- | C] () – C:\Program Files\INSTALL.LOG
[2007/01/17 15:32:38 | 000,000,134 | —- | C] () – C:\Documents and Settings\Dr. LoSasso\Local Settings\Application Data\fusioncache.dat
[2007/01/17 15:16:31 | 000,013,312 | —- | C] () – C:\Documents and Settings\Dr. LoSasso\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/12/14 11:13:39 | 000,000,028 | —- | C] () – C:\WINDOWS\atid.ini
[2005/11/18 15:41:57 | 000,000,000 | —- | C] () – C:\WINDOWS\vpc32.INI
[2005/11/09 14:47:25 | 000,000,025 | —- | C] () – C:\WINDOWS\zzxcvgc.ini
[2005/10/14 10:58:37 | 000,007,616 | —- | C] () – C:\WINDOWS\hplj1010.ini
[2005/09/22 11:06:16 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2005/09/22 10:45:10 | 000,012,288 | —- | C] () – C:\WINDOWS\System32\e100bmsg.dll
[2005/09/22 10:45:02 | 000,000,390 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2004/08/11 18:24:19 | 000,000,791 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/11 18:11:31 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/11 18:07:24 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI

========== LOP Check ==========

[2009/07/23 12:04:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\COMMON FILES
[2008/02/21 18:04:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2008/11/03 13:06:32 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[2007/05/15 16:01:33 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso\Application Data\acccore
[2005/10/26 08:51:11 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso\Application Data\MSNInstaller
[2009/07/23 14:41:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso\Application Data\ntr
[2007/05/17 15:29:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso\Application Data\Viewpoint

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2008/02/02 13:00:25 | 000,001,024 | —- | M] () – C:\.rnd
[2004/08/11 18:15:00 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2005/11/09 15:31:11 | 000,000,211 | RHS- | M] () – C:\boot.ini
[2004/08/11 18:15:00 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2005/09/22 10:45:38 | 000,003,182 | RH– | M] () – C:\dell.sdr
[2010/10/13 08:04:06 | 1071,697,920 | -HS- | M] () – C:\hiberfil.sys
[2005/09/30 14:40:16 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/11 18:15:00 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2008/02/21 18:07:38 | 000,001,811 | -H– | M] () – C:\IPH.PH
[2004/08/11 18:15:00 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 06:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/08/27 09:24:19 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/10/13 08:04:04 | 1610,612,736 | -HS- | M] () – C:\pagefile.sys
[2009/07/23 15:29:50 | 000,000,150 | —- | M] () – C:\YServer.txt
[2005/10/19 11:33:31 | 000,177,686 | —- | M] () – C:\ò

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/11 18:14:22 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/07/06 06:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2007/05/01 10:14:16 | 000,000,843 | —- | M] () – C:\Program Files\INSTALL.LOG

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/08/11 18:06:14 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2004/08/11 18:06:14 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2004/08/11 18:06:14 | 000,876,544 | —- | M] () – C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/08/27 09:32:30 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2005/09/30 13:50:01 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Dr. LoSasso\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/08/11 18:20:42 | 000,000,079 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2010/10/13 08:34:46 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe
[2009/01/19 17:55:11 | 191,371,528 | —- | M] (Intuit Inc.) – C:\Documents and Settings\Dr. LoSasso\Desktop\qbwebpatch.exe
[2009/07/23 14:14:18 | 370,501,680 | —- | M] (Intuit, Inc. ) – C:\Documents and Settings\Dr. LoSasso\Desktop\QuickBooksPro2007.exe
[2009/07/23 11:55:38 | 003,327,000 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Desktop\WindowsXP-KB942288-v3-x86.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-10-13 07:08:20

< End of report >


OTL Extras logfile created on: 10/13/2010 8:39:44 AM - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Documents and Settings\Dr. LoSasso\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 231.00 Mb Available Physical Memory | 23.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 70.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 58.12 Gb Free Space | 78.06% Space Free | Partition Type: NTFS
Drive D: | 4.38 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive E: | 111.76 Gb Total Space | 98.33 Gb Free Space | 87.98% Space Free | Partition Type: FAT32

Computer Name: SERVER | User Name: Dr. LoSasso | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
"135:TCP" = 135:TCP:*:Enabled:DCOM
"135:UDP" = 135:UDP:*:Enabled:DCOM2

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe" = C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe:*:Enabled:javaw – ()
"C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe" = C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe:*:Enabled:Patterson EagleSoft Internet Connection – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\ESTechUtil.exe" = C:\Program Files\EagleSoft\Shared Files\ESTechUtil.exe:*:Enabled:Patterson EagleSoft Technical Utility – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\EagleSoft.exe" = C:\Program Files\EagleSoft\Shared Files\EagleSoft.exe:*:Enabled:Patterson EagleSoft – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\techaid.exe" = C:\Program Files\EagleSoft\Shared Files\techaid.exe:*:Enabled:Patterson EagleSoft Technical Reference – ()
"C:\Program Files\EagleSoft\Shared Files\ESMsgServer.exe" = C:\Program Files\EagleSoft\Shared Files\ESMsgServer.exe:*:Enabled:Patterson EagleSoft Messenger Server – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\ESMessenger.exe" = C:\Program Files\EagleSoft\Shared Files\ESMessenger.exe:*:Enabled:Patterson EagleSoft Messenger Client – (Patterson Dental Supply, Inc.)
"C:\Program Files\EagleSoft\Shared Files\dbsrv7.exe" = C:\Program Files\EagleSoft\Shared Files\dbsrv7.exe:*:Enabled:Patterson EagleSoft ODBC Server – (Sybase, Inc.)
"C:\Program Files\EagleSoft\Shared Files\dbeng7.exe" = C:\Program Files\EagleSoft\Shared Files\dbeng7.exe:*:Enabled:Patterson EagleSoft ODBC Client – (Sybase, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 20
"{292C47B2-8DB7-47BF-896C-C3C5EE8108C4}" = hp LaserJet 1010 Series
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{3248E093-5288-4CA9-B3AB-11A675FEA1F9}" = Symantec AntiVirus
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{637099FB-45FD-4BC7-9651-6FB540DBB749}" = StompSoft Backup MyPC
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD 5.1
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{7E7658A2-CD3F-48A7-93EA-0882BCA4FD2A}" = LogMeIn
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Extreme Graphics 2 Driver
"{A06275F4-324B-4E85-95E6-87B2CD729401}" = Windows Defender
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}" = Windows Defender Signatures
"{A790BEB1-BCCF-4EC6-807B-5708B36E8A79}" = Intel® PROSet
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DBBD27DA-E9A5-480F-92DB-A459AEF1A078}" = Patterson EagleSoft
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware 2007
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Carbonite Setup Lite" = Carbonite Online Backup Setup
"ie8" = Windows Internet Explorer 8
"LiveUpdate" = LiveUpdate 2.6 (Symantec Corporation)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"PROSet" = Intel® PRO Network Adapters and Drivers
"ShockwaveFlash" = Macromedia Flash Player 8
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"Windows XP Service Pack" = Windows XP Service Pack 3
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Toolbar" = Yahoo! Toolbar

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 8/23/2010 8:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

Error - 9/8/2010 2:09:30 AM | Computer Name = SERVER | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 1.1.1593.0,
P5 mpsigdwn.dll, P6 1.1.1593.0, P7 windows defender, P8 NIL, P9 NIL, P10 NIL.

Error - 10/4/2010 1:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 2:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 2:15:29 AM | Computer Name = SERVER | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 1.1.1593.0,
P5 mpsigdwn.dll, P6 1.1.1593.0, P7 windows defender, P8 NIL, P9 NIL, P10 NIL.

Error - 10/4/2010 3:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 4:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 5:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 6:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

Error - 10/4/2010 7:02:14 AM | Computer Name = SERVER | Source = Google Update | ID = 20
Description =

[ System Events ]
Error - 7/4/2010 8:02:35 PM | Computer Name = SERVER | Source = VolSnap | ID = 393241
Description = The shadow copy of volume C: was aborted because the diff area file
could not grow in time. Consider reducing the IO load on this system to avoid this
problem in the future.

Error - 7/22/2010 7:41:19 AM | Computer Name = SERVER | Source = BROWSER | ID = 8032
Description = The browser service has failed to retrieve the backup list too many
times on transport \Device\NetBT_Tcpip_{7AAC48CD-251A-4BCD-A1AF-C566ED6BCF9A}. The
backup browser is stopping.

Error - 7/31/2010 8:00:46 PM | Computer Name = SERVER | Source = VolSnap | ID = 393228
Description = The shadow copy of volume C: became low on diff area space before
it was properly installed.

Error - 7/31/2010 8:02:45 PM | Computer Name = SERVER | Source = VolSnap | ID = 393241
Description = The shadow copy of volume C: was aborted because the diff area file
could not grow in time. Consider reducing the IO load on this system to avoid this
problem in the future.

Error - 8/26/2010 8:01:06 PM | Computer Name = SERVER | Source = VolSnap | ID = 393228
Description = The shadow copy of volume C: became low on diff area space before
it was properly installed.

Error - 8/26/2010 8:03:06 PM | Computer Name = SERVER | Source = VolSnap | ID = 393241
Description = The shadow copy of volume C: was aborted because the diff area file
could not grow in time. Consider reducing the IO load on this system to avoid this
problem in the future.

Error - 9/7/2010 8:00:42 PM | Computer Name = SERVER | Source = VolSnap | ID = 393228
Description = The shadow copy of volume C: became low on diff area space before
it was properly installed.

Error - 9/7/2010 8:01:55 PM | Computer Name = SERVER | Source = VolSnap | ID = 393241
Description = The shadow copy of volume C: was aborted because the diff area file
could not grow in time. Consider reducing the IO load on this system to avoid this
problem in the future.

Error - 9/15/2010 3:02:13 AM | Computer Name = SERVER | Source = atapi | ID = 262153
Description = The device, \Device\Ide\IdePort1, did not respond within the timeout
period.

Error - 9/15/2010 3:02:20 AM | Computer Name = SERVER | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.


< End of report >

OTL logfile created on: 10/13/2010 8:39:44 AM - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Documents and Settings\Dr. LoSasso\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 231.00 Mb Available Physical Memory | 23.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 70.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.46 Gb Total Space | 58.12 Gb Free Space | 78.06% Space Free | Partition Type: NTFS
Drive D: | 4.38 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive E: | 111.76 Gb Total Space | 98.33 Gb Free Space | 87.98% Space Free | Partition Type: FAT32

Computer Name: SERVER | User Name: Dr. LoSasso | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\LogMeIn\x86\LMIGuardian.exe (LogMeIn, Inc.)
PRC - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe (Lavasoft)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\EagleSoft\Shared Files\ESMsgServer.exe (Patterson Dental Supply, Inc.)
PRC - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
PRC - C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe (Patterson Dental Supply, Inc.)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\All Users\Start Menu\Programs\Startup\gce.exe (Leithauser Research)
PRC - C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
PRC - C:\Program Files\EagleSoft\Shared Files\dbsrv7.exe (Sybase, Inc.)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (HidServ) – C:\WINDOWS\System32\hidserv.dll File not found
SRV - (LMIMaint) – C:\Program Files\LogMeIn\x86\RaMaint.exe (LogMeIn, Inc.)
SRV - (aawservice) – C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe (Lavasoft)
SRV - (LogMeIn) – C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (SavRoam) – C:\Program Files\Symantec AntiVirus\SavRoam.exe (symantec)
SRV - (Symantec AntiVirus) – C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (DefWatch) – C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
SRV - (ccPwdSvc) – C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
SRV - (SNDSrvc) – C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation)
SRV - (SPBBCSvc) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation)
SRV - (NetSvc) – C:\Program Files\Intel\NCS\Sync\NetSvc.exe (Intel® Corporation)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\hpzipm12.exe (HP)


========== Driver Services (SafeList) ==========

DRV - (NAVEX15) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101012.001\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101012.001\NAVENG.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (LMIRfsDriver) – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (LMIRfsClientNP) – C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (amdagp) – C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) – C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (LMIInfo) – C:\Program Files\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)
DRV - (SAVRTPEL) – C:\Program Files\Symantec AntiVirus\Savrtpel.sys (Symantec Corporation)
DRV - (SAVRT) – C:\Program Files\Symantec AntiVirus\savrt.sys (Symantec Corporation)
DRV - (SymEvent) – C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (drvmcdb) – C:\WINDOWS\system32\DRIVERS\drvmcdb.sys (Sonic Solutions)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (Sparrow) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) – C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) – C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) – C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) – C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) – C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) – C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) – C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) – C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (CmdIde) – C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =



O1 HOSTS File: ([2004/08/04 06:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: () - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [CarboniteSetupLite] C:\Program Files\Carbonite\CarbonitePreinstaller.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [ESInetConnect] C:\Program Files\EagleSoft\Shared Files\esinetconnect.exe (Patterson Dental Supply, Inc.)
O4 - HKLM..\Run: [ESServer] C:\Program Files\EagleSoft\Shared Files\startsrv.exe ()
O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [vptray] C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\gce.exe (Leithauser Research)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - LMIinit.dll - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O20 - Winlogon\Notify\NavLogon: DllName - C:\WINDOWS\system32\NavLogon.dll - C:\WINDOWS\system32\NavLogon.dll (Symantec Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/11 18:15:00 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2010/10/13 08:38:20 | 000,574,464 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe
[2010/10/06 09:44:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusb.dll
[2010/10/06 09:44:10 | 000,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2010/10/06 09:44:08 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusd.dll
[2010/09/29 03:00:17 | 000,000,000 | —D | C] – C:\WINDOWS\LastGood
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/10/13 08:38:25 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe
[2010/10/13 08:31:06 | 000,000,434 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1DB8F83C-8712-4BCF-9A50-5B4540DC32D9}.job
[2010/10/13 08:04:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/13 02:09:08 | 000,000,330 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/10/12 20:10:18 | 000,000,508 | —- | M] () – C:\WINDOWS\tasks\Daily_Append.job
[2010/10/12 11:04:00 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/06 09:46:14 | 000,000,804 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/05 03:05:53 | 000,442,466 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/10/05 03:05:53 | 000,071,732 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/09/15 09:04:19 | 000,000,260 | —- | M] () – C:\WINDOWS\tasks\WGASetup.job
[2010/09/15 09:03:02 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/09/15 03:21:31 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/09/15 03:21:18 | 1071,697,920 | -HS- | M] () – C:\hiberfil.sys
[2010/09/15 03:04:40 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/09/15 03:04:25 | 002,004,604 | —- | M] () – C:\WINDOWS\iis6.BAK
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/06 09:46:14 | 000,000,804 | —- | C] () – C:\Documents and Settings\Dr. LoSasso\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2005/12/30 21:00:01 | 000,000,031 | —- | C] () – C:\WINDOWS\sbewin32.INI
[2005/11/18 15:09:12 | 000,000,000 | —- | C] () – C:\WINDOWS\vpc32.INI
[2005/11/09 12:20:04 | 000,000,025 | —- | C] () – C:\WINDOWS\zzxcvgc.ini
[2005/10/14 10:40:23 | 000,009,889 | —- | C] () – C:\WINDOWS\hplj1010.ini
[2005/09/22 11:06:09 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2005/09/22 10:45:10 | 000,012,288 | —- | C] () – C:\WINDOWS\System32\e100bmsg.dll
[2005/09/22 10:45:02 | 000,000,390 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2005/01/12 04:11:00 | 000,028,672 | —- | C] () – C:\WINDOWS\System32\besched.dll
[2004/08/11 18:24:19 | 000,000,791 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/11 18:11:31 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/11 18:07:24 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2003/10/02 01:00:00 | 000,208,896 | —- | C] () – C:\WINDOWS\System32\lockout.dll
[2003/10/02 01:00:00 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\lockres.dll

========== LOP Check ==========

[2008/09/18 12:27:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LogMeIn
[2005/10/14 11:38:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Dr. LoSasso\Application Data\Backup MyPC
[2010/10/12 20:10:18 | 000,000,508 | —- | M] () – C:\WINDOWS\Tasks\Daily_Append.job
[2010/10/13 02:09:08 | 000,000,330 | -H– | M] () – C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2010/10/13 08:31:06 | 000,000,434 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{1DB8F83C-8712-4BCF-9A50-5B4540DC32D9}.job
[2010/09/15 09:04:19 | 000,000,260 | —- | M] () – C:\WINDOWS\Tasks\WGASetup.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2008/02/02 13:03:34 | 000,001,024 | —- | M] () – C:\.rnd
[2004/08/11 18:15:00 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2005/10/31 09:36:18 | 000,000,211 | RHS- | M] () – C:\boot.ini
[2004/08/11 18:15:00 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2005/09/22 10:45:38 | 000,003,182 | RH– | M] () – C:\dell.sdr
[2010/09/15 03:21:18 | 1071,697,920 | -HS- | M] () – C:\hiberfil.sys
[2005/09/30 14:44:26 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/11 18:15:00 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2004/08/11 18:15:00 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 06:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/10/09 07:46:40 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/09/15 03:21:16 | 1610,612,736 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/11 18:14:22 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/10/18 07:42:14 | 000,047,416 | —- | M] (LogMeIn, Inc.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\LMIproc.dll
[2008/07/06 06:50:04 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/08/11 18:06:14 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2004/08/11 18:06:14 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2004/08/11 18:06:14 | 000,876,544 | —- | M] () – C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/10/09 07:56:03 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/10/09 10:28:09 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Dr. LoSasso\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/08/11 18:20:42 | 000,000,079 | —- | M] () – C:\Documents and Settings\Dr. LoSasso\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2010/10/13 08:38:25 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Dr. LoSasso\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-10-05 07:07:52

< >

< End of report >