Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
This topic is locked
OTL.txt:
TOTL logfile created on: 04/26/11 3:55:27 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\mhumphrey\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: MM/dd/yy
1,023.00 Mb Total Physical Memory | 576.00 Mb Available Physical Memory | 56.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.85 Gb Total Space | 18.94 Gb Free Space | 33.92% Space Free | Partition Type: NTFS
Computer Name: DBGJDH31 | User Name: mgillikin | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\mhumphrey\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\SYSTEM32\ZCfgSvc.exe (Intel Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\mhumphrey\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (ScsiAccess) -- File not found
SRV - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (avg8wd) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (RoxLiveShare) -- C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe (Sonic Solutions)
SRV - (RoxMediaDB) -- C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe (Sonic Solutions)
SRV - (RoxWatch) -- C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe (Sonic Solutions)
SRV - (RoxUPnPRenderer) -- C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exe (Sonic Solutions)
SRV - (RoxUpnpServer) -- C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe (Sonic Solutions)
SRV - (FirebirdServerDefaultInstance) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe (The Firebird Project)
SRV - (FirebirdGuardianDefaultInstance) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe (The Firebird Project)
SRV - (DM1Service) -- C:\Program Files\Olympus\DeviceDetector\DM1Service.exe (OLYMPUS Corporation)
SRV - (RampartSvc) -- C:\Program Files\SonicWALL\SonicWALL Global VPN Client\RampartSvc.exe (SonicWALL, Inc.)
SRV - (SLService) -- C:\WINDOWS\System32\slserv.exe (Smart Link)
SRV - (NICSer_WPC54G) -- C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe ()
SRV - (BAsfIpM) -- C:\WINDOWS\SYSTEM32\BAsfIpM.exe (Broadcom Corp.)
SRV - (ICDSPTSV) -- C:\WINDOWS\SYSTEM32\IcdSptSv.exe (Sony Corporation)
SRV - (RoamMgr) -- C:\WINDOWS\SYSTEM32\RoamMgr.exe (Intel Corporation)
SRV - (S24EventMonitor) -- C:\WINDOWS\SYSTEM32\S24EvMon.exe (Intel Corporation )
SRV - (RegSrvc) -- C:\WINDOWS\SYSTEM32\RegSrvc.exe (Intel Corporation)
SRV - (IntelRoam) -- C:\Program Files\Intel\Switching\User\RoamSvc.exe (Intel Corporation)
SRV - (NetSvc) -- C:\Program Files\Intel\NCS\Sync\NetSvc.exe (Intel® Corporation)
========== Driver Services (SafeList) ==========
DRV - (AvgLdx86) -- C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) -- C:\WINDOWS\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX) -- C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (GoProto) -- C:\WINDOWS\SYSTEM32\DRIVERS\goprot51.sys (Gteko Ltd.)
DRV - (Cdralw2k) -- C:\WINDOWS\System32\drivers\cdralw2k.sys (Sonic Solutions)
DRV - (Cdr4_xp) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys (Sonic Solutions)
DRV - (P2k) -- C:\WINDOWS\SYSTEM32\DRIVERS\P2k.sys (Motorola Inc)
DRV - (MotoSwitchService) -- C:\WINDOWS\SYSTEM32\DRIVERS\motswch.sys (Motorola INC.)
DRV - (RxFilter) -- C:\WINDOWS\SYSTEM32\DRIVERS\RxFilter.sys (Sonic Solutions)
DRV - (cdudf_xp) -- C:\WINDOWS\System32\drivers\Cdudf_xp.sys (Sonic Solutions)
DRV - (pwd_2k) -- C:\WINDOWS\System32\drivers\Pwd_2k.sys (Sonic Solutions)
DRV - (dvd_2K) -- C:\WINDOWS\System32\drivers\dvd_2k.sys (Sonic Solutions)
DRV - (mmc_2K) -- C:\WINDOWS\System32\drivers\mmc_2k.sys (Sonic Solutions)
DRV - (BCM43XX) -- C:\WINDOWS\SYSTEM32\DRIVERS\BCMWL5.SYS (Broadcom Corporation)
DRV - (BCM42RLY) -- C:\WINDOWS\SYSTEM32\bcm42rly.sys (Broadcom Corporation)
DRV - (RCFOX) -- C:\WINDOWS\SYSTEM32\DRIVERS\RCFOX.SYS (SonicWALL, Inc.)
DRV - (odysseyIM4) -- C:\WINDOWS\SYSTEM32\DRIVERS\odysseyIM4.sys (Funk Software, Inc.)
DRV - (PCASp50) -- C:\WINDOWS\SYSTEM32\DRIVERS\PCASp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (SlNtHal) -- C:\WINDOWS\SYSTEM32\DRIVERS\slnthal.sys (Smart Link)
DRV - (NtMtlFax) -- C:\WINDOWS\SYSTEM32\DRIVERS\ntmtlfax.sys (Smart Link)
DRV - (RecAgent) -- C:\WINDOWS\system32\DRIVERS\RecAgent.sys (Smart Link)
DRV - (Mtlstrm) -- C:\WINDOWS\SYSTEM32\DRIVERS\mtlstrm.sys (Smart Link)
DRV - (iAimFP4) -- C:\WINDOWS\SYSTEM32\DRIVERS\wvchntxx.sys (Intel® Corporation)
DRV - (iAimFP3) -- C:\WINDOWS\SYSTEM32\DRIVERS\wsiintxx.sys (Intel® Corporation)
DRV - (iAimTV4) -- C:\WINDOWS\SYSTEM32\DRIVERS\wch7xxnt.sys (Intel® Corporation)
DRV - (iAimTV3) -- C:\WINDOWS\SYSTEM32\DRIVERS\watv04nt.sys (Intel® Corporation)
DRV - (iAimTV1) -- C:\WINDOWS\SYSTEM32\DRIVERS\watv02nt.sys (Intel® Corporation)
DRV - (iAimTV0) -- C:\WINDOWS\SYSTEM32\DRIVERS\watv01nt.sys (Intel® Corporation)
DRV - (iAimFP0) -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv01nt.sys (Intel® Corporation)
DRV - (iAimFP1) -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv02nt.sys (Intel® Corporation)
DRV - (iAimFP2) -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv05nt.sys (Intel® Corporation)
DRV - (i81x) -- C:\WINDOWS\SYSTEM32\DRIVERS\i81xnt5.sys (Intel® Corporation)
DRV - (SDDMI2) -- C:\WINDOWS\SYSTEM32\DDMI2.sys (Gteko Ltd.)
DRV - (DNE) -- C:\WINDOWS\SYSTEM32\DRIVERS\dne2000.sys (Deterministic Networks, Inc.)
DRV - (LMouFlt2) -- C:\WINDOWS\SYSTEM32\DRIVERS\lmouflt2.sys (Logitech, Inc.)
DRV - (L8042pr2) -- C:\WINDOWS\SYSTEM32\DRIVERS\L8042PR2.SYS (Logitech, Inc.)
DRV - (LHidUsb) -- C:\WINDOWS\SYSTEM32\DRIVERS\LHIDUSB.SYS (Logitech, Inc.)
DRV - (LHidFlt2) -- C:\WINDOWS\SYSTEM32\DRIVERS\LHIDFLT2.SYS (Logitech, Inc.)
DRV - (LCcfltr) -- C:\WINDOWS\SYSTEM32\DRIVERS\LCcfltr.sys (Logitech, Inc.)
DRV - (ICDSX) Sony IC Recorder (SX) -- C:\WINDOWS\SYSTEM32\DRIVERS\IcdSX.sys (Sony Corporation)
DRV - (rcvpn) -- C:\WINDOWS\SYSTEM32\DRIVERS\rcvpn.sys (SonicWALL, Inc.)
DRV - (CBTNDIS5) -- C:\WINDOWS\SYSTEM32\CBTNDIS5.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (b57w2k) -- C:\WINDOWS\SYSTEM32\DRIVERS\b57xp32.sys (Broadcom Corporation)
DRV - (STAC97) Audio Driver (WDM) -- C:\WINDOWS\SYSTEM32\DRIVERS\STAC97.sys (SigmaTel, Inc.)
DRV - (Mtlmnt5) -- C:\WINDOWS\SYSTEM32\DRIVERS\mtlmnt5.sys ( )
DRV - (GTICARD) -- C:\WINDOWS\SYSTEM32\DRIVERS\gticard.sys (Texas Instruments)
DRV - (tiumfwl) -- C:\WINDOWS\SYSTEM32\DRIVERS\tiumfwl.sys (Texas Instruments Inc.)
DRV - (DevUpper) -- C:\WINDOWS\System32\DRIVERS\tiumflt.sys (Texas Instruments Inc.)
DRV - (ApfiltrService) -- C:\WINDOWS\SYSTEM32\DRIVERS\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (Slnt7554) -- C:\WINDOWS\SYSTEM32\DRIVERS\slnt7554.sys ( )
DRV - (StreamDispatcher) -- C:\WINDOWS\SYSTEM32\DRIVERS\strmdisp.sys (Conexant Systems, Inc.)
DRV - (HSFHWICH) -- C:\WINDOWS\SYSTEM32\DRIVERS\HSFHWICH.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (SlWdmSup) -- C:\WINDOWS\SYSTEM32\DRIVERS\slwdmsup.sys (Vireo Software)
DRV - (s24trans) -- C:\WINDOWS\SYSTEM32\DRIVERS\s24trans.sys (Intel Corporation)
DRV - (w70n51) Intel® -- C:\WINDOWS\SYSTEM32\DRIVERS\w70n51.sys (Intel® Corporation)
DRV - (omci) -- C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys (Dell Computer Corporation)
DRV - (Intel_MIPMNMP) -- C:\WINDOWS\SYSTEM32\DRIVERS\mipmnxp.sys (Intel Corporation)
DRV - (gv3) -- C:\WINDOWS\SYSTEM32\DRIVERS\gv3.sys (Microsoft Corporation)
DRV - (EL90XBC) -- C:\WINDOWS\SYSTEM32\DRIVERS\EL90XBC5.SYS (3Com Corporation)
DRV - (WNTHW) -- C:\WINDOWS\SYSTEM32\DRIVERS\WNTHW.SYS ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,;CustomizeSearch = http://dnl.inbox.com...aspx?TbId=70026
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,;SearchAssistant = http://www.inbox.com...spx?tb_id=70026
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://smbusiness.dellnet.com/
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://smbusiness.dellnet.com/
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://smbusiness.dellnet.com/
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://smbusiness.dellnet.com/
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://smbusiness.dellnet.com/
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://smbusiness.dellnet.com/
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Internet Explorer\Main,;Start Page = http://my.freeze.com...mp;offerId=6288
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://smbusiness.dellnet.com/
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\URLSearchHook: *{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\URLSearchHook: *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\URLSearchHook: {b9b97401-98e1-4942-930d-c36652dab7f2} - C:\Program Files\TranslatorBar_5\prxtbTra2.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1123561945-842925246-854245398-2115\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O1 HOSTS File: ([2011/04/25 16:25:44 | 000,432,016 | R--- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14894 more lines...
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: () - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files\Inbox\ctbr.dll (Crawler.com)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.)
O2 - BHO: (TranslatorBar 5 Toolbar) - {b9b97401-98e1-4942-930d-c36652dab7f2} - C:\Program Files\TranslatorBar_5\prxtbTra2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (&Inbox.com Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files\Inbox\ctbr.dll (Crawler.com)
O3 - HKLM\..\Toolbar: (TranslatorBar 5 Toolbar) - {b9b97401-98e1-4942-930d-c36652dab7f2} - C:\Program Files\TranslatorBar_5\prxtbTra2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\Toolbar\ShellBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\Toolbar\ShellBrowser: (&Inbox.com Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files\Inbox\ctbr.dll (Crawler.com)
O3 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\Toolbar\WebBrowser: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\Toolbar\WebBrowser: (&Inbox.com Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files\Inbox\ctbr.dll (Crawler.com)
O3 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\Toolbar\WebBrowser: (TranslatorBar 5 Toolbar) - {B9B97401-98E1-4942-930D-C36652DAB7F2} - C:\Program Files\TranslatorBar_5\prxtbTra2.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CARPService] C:\WINDOWS\System32\carpserv.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-1123561945-842925246-854245398-2115..\Run: [CrawlerMail] c:\Program Files\Inbox\CMail.exe (Crawler.com)
O4 - HKU\S-1-5-21-1123561945-842925246-854245398-2115..\Run: [NVIEW] C:\WINDOWS\System32\nview.dll (NVIDIA Corporation)
O4 - HKU\S-1-5-21-1123561945-842925246-854245398-2115..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-1123561945-842925246-854245398-2115..\Run: [tAExRDJWhvf] C:\Documents and Settings\All Users\Application Data\tAExRDJWhvf.exe (WinSCP)
O4 - Startup: C:\Documents and Settings\All Users\start menu\programs\startup\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe ()
O4 - Startup: C:\Documents and Settings\All Users\start menu\programs\startup\Device Detector 3.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe (OLYMPUS IMAGING CORP.)
O4 - Startup: C:\Documents and Settings\All Users\start menu\programs\startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: C:\Documents and Settings\mhumphrey.office\start menu\programs\startup\ProMortgageFees.lnk = File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disablecad = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O7 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 1
O7 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0
O7 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: Start WebEx MeetMeNow - {F5AD6CC5-776C-4DBB-B38F-F5404A3582F3} - C:\WINDOWS\DOWNLO~1\MyWebEx\419\mwmie.dll ()
O9 - Extra 'Tools' menuitem : Start WebEx MeetMeNow - {F5AD6CC5-776C-4DBB-B38F-F5404A3582F3} - C:\WINDOWS\DOWNLO~1\MyWebEx\419\mwmie.dll ()
O15 - HKU\.DEFAULT\..Trusted Domains: ([]msn in My Computer)
O15 - HKU\S-1-5-18\..Trusted Domains: ([]msn in My Computer)
O15 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\..Trusted Domains: ([]msn in My Computer)
O16 - DPF: {00140000-B1BA-11CE-ABC6-F5B2E79D9E3F} file://D:\Scripts\LTOCX14N.cab (LEAD Main Control (14.0))
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} http://supportsoft.a...ad/tgctlins.cab (Support.com Installer)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.micros...tes/ieawsdc.cab (Microsoft Office Template and Media Control)
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} http://www.ipix.com/viewers/ipixx.cab (iPIX ActiveX Control)
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} https://www.taylorbe...criptx/smsx.cab (MeadCo ScriptX)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {254AA86E-5655-4518-AA87-185D7CC41801} https://secure.logme...scueControl.cab (Rescue Technician Console)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.micros...ntent/opuc2.cab (Office Update Installation Engine)
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} https://webresponse....iveX/winrep.cab (Microsoft.WinRep)
O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} http://www.webshots....SDownloader.ocx (WSDownloader Control)
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} http://w2k3svr1/Remote/msrdp.cab (Microsoft RDP Client Control (redist))
O16 - DPF: {7DD62E58-5FA8-11D2-AFB7-00104B64F126} http://www.swiftview...all_a_green.exe (Reg Error: Key error.)
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} http://www.vzwpix.co...loadControl.cab (Verizon Wireless Media Upload)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} http://63.241.168.23...lugins/ncs1.cab (NCSView Class)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} http://www.hihiltonh...sCamControl.ocx (CamImage Class)
O16 - DPF: {A1337CC4-FF8E-11D1-9C48-00A0CC20E0D0} http://www.therealye...ve/ezlistng.cab (EZListings)
O16 - DPF: {A1337CC4-FF8E-11D1-9C48-00A0CC20E0D2} http://www.therealye...live/ezinit.cab (Reg Error: Value error.)
O16 - DPF: {A662DA7E-CCB7-4743-B71A-D817F6D575DF} http://www.autodesk....ViewerSetup.cab (Reg Error: Key error.)
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} https://webresponse....eX/FileXfer.cab (WebResponseAttachments Control)
O16 - DPF: {BE5431D2-0F30-11D4-89D9-00C04F509C0A} http://www.stamps.co...file=stamps.cab (SDCInstaller Class)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macr...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://delmardb.web...ing/ieatgpc.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} http://download.abac...abasetup162.cab (Reg Error: Key error.)
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} http://www2.incredim...er/imloader.cab (IMDownloader Class)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logme...trl.cab?lmi=100 (Performance Viewer Activex Control)
O16 - DPF: CabBuilder http://www.imgag.com...llerControl.cab (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: EMWebAutomation https://www.elliemae...bAutomation.CAB (Reg Error: Key error.)
O16 - DPF: GPointDX https://www.elliemae...eX/GPointDX.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O16 - DPF: ViewCredit https://www.elliemae.../ViewCredit.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.221.32.125 209.221.32.124
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = office.southsolutions.com
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\mctp {d7b95390-b1c5-11d0-b111-0080c712fe82} - Reg Error: Key error. File not found
O18 - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Program Files\Inbox\ctbr.dll (Crawler.com)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\Sebring: DllName - C:\WINDOWS\System32\LgNotify.dll - C:\WINDOWS\SYSTEM32\LgNotify.dll (Intel Corporation)
O24 - Desktop Components:0 () - http://www.goncm.com...vity_01_sel.gif
O24 - Desktop Components:1 () - https://www.taylorbe...ages/header.jpg
O24 - Desktop Components:2 () - https://www.taylorbe...ages/import.gif
O24 - Desktop Components:3 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\mhumphrey\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\mhumphrey\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2002/09/03 14:36:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKU\S-1-5-21-1123561945-842925246-854245398-2115..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKU\S-1-5-21-1123561945-842925246-854245398-2115\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: MSACM.CEGSM - mobilev.acm File not found
Drivers32: msacm.iac2 - C:\WINDOWS\System32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\L3CODECX.ACM (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\TSSOFT32.ACM (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivXNetworks)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivXNetworks)
Drivers32: wave1 - C:\WINDOWS\System32\SERWVDRV.DLL (Microsoft Corporation)
Drivers32: wave2 - C:\WINDOWS\System32\SERWVDRV.DLL (Microsoft Corporation)
Drivers32: wave5 - C:\WINDOWS\System32\SERWVDRV.DLL (Microsoft Corporation)
Drivers32: wave6 - C:\WINDOWS\System32\SERWVDRV.DLL (Microsoft Corporation)
CREATERESTOREPOINT
Error starting restore point: The function was called in safe mode.
Error closing restore point: The sequence number is invalid.
========== Files/Folders - Created Within 30 Days ==========
[2011/04/26 15:34:02 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\mhumphrey\Desktop\OTL.exe
[2011/04/25 16:57:28 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\mhumphrey\Recent
[2011/04/25 14:37:08 | 016,409,960 | -H-- | C] (Safer Networking Limited ) -- C:\Documents and Settings\mhumphrey\Desktop\setup-spybotsd162.exe
[2011/04/25 14:36:53 | 000,000,000 | ---D | C] -- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
[2011/04/25 14:36:52 | 000,000,000 | ---D | C] -- C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[2011/04/25 14:36:51 | 000,000,000 | ---D | C] -- C:\Program Files\SDHelper (Spybot - Search & Destroy)
[2011/04/25 14:36:51 | 000,000,000 | ---D | C] -- C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
[2011/04/13 14:01:07 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\mhumphrey\Start Menu\Programs\Windows Fix Disk
[2011/04/13 13:51:06 | 000,561,152 | -H-- | C] (WinSCP) -- C:\Documents and Settings\All Users\Application Data\tAExRDJWhvf.exe
[2011/03/29 18:41:37 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\mhumphrey\Application Data\Skinux
[2006/08/03 19:32:22 | 000,014,976 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\winddx.sys
[2006/08/03 19:31:27 | 000,210,488 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slnt7554.sys
[2006/08/03 19:31:26 | 000,210,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2005/05/25 13:17:31 | 000,018,944 | ---- | C] ( ) -- C:\WINDOWS\System32\Implode.dll
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/04/26 15:34:02 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\mhumphrey\Desktop\OTL.exe
[2011/04/26 13:26:15 | 000,001,170 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL
[2011/04/26 13:25:02 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT
[2011/04/25 16:54:13 | 000,000,892 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/25 16:52:03 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2011/04/25 16:51:58 | 000,000,888 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/25 16:51:58 | 000,000,458 | ---- | M] () -- C:\WINDOWS\tasks\EasyShare Registration RunOnce Task.job
[2011/04/25 16:25:44 | 000,432,016 | R--- | M] () -- C:\WINDOWS\System32\drivers\ETC\hosts
[2011/04/25 15:32:07 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/04/25 15:02:30 | 000,000,951 | -H-- | M] () -- C:\Documents and Settings\mhumphrey\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2011/04/25 15:02:30 | 000,000,933 | -H-- | M] () -- C:\Documents and Settings\mhumphrey\Desktop\Spybot - Search & Destroy.lnk
[2011/04/25 14:54:48 | 016,409,960 | -H-- | M] (Safer Networking Limited ) -- C:\Documents and Settings\mhumphrey\Desktop\setup-spybotsd162.exe
[2011/04/23 10:33:30 | 000,013,460 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\3122837365
[2011/04/23 10:33:29 | 000,013,460 | -HS- | M] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\3122837365
[2011/04/13 16:00:02 | 000,000,398 | -H-- | M] () -- C:\WINDOWS\tasks\{CA45E155-63FE-40E1-A5F9-00635183B460}_OFFICE_mhumphrey.job
[2011/04/13 13:50:59 | 000,561,152 | -H-- | M] (WinSCP) -- C:\Documents and Settings\All Users\Application Data\tAExRDJWhvf.exe
[2011/04/13 09:35:06 | 000,014,566 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\jbh27swk8608knbyp822
[2011/04/13 09:35:05 | 000,014,566 | -HS- | M] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\jbh27swk8608knbyp822
[2011/04/13 09:34:21 | 000,002,335 | -H-- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
[2011/04/12 09:00:00 | 000,000,398 | -H-- | M] () -- C:\WINDOWS\tasks\{93508946-AE83-4345-83A8-5083A71FD435}_OFFICE_mhumphrey.job
[2011/04/10 15:10:33 | 000,323,363 | -H-- | M] () -- C:\Documents and Settings\mhumphrey\Desktop\null0.06808683154901729.exe
[2011/04/08 16:00:00 | 000,000,398 | -H-- | M] () -- C:\WINDOWS\tasks\{27BAFF4D-9ACF-43FB-AA15-32F59E7BB09A}_OFFICE_mhumphrey.job
[2011/04/04 14:41:00 | 000,000,444 | ---- | M] () -- C:\WINDOWS\tasks\EasyShare Registration Task.job
[2011/03/29 18:56:09 | 008,232,960 | RH-- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2011/03/29 18:56:09 | 005,258,240 | RH-- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mb
[2011/03/29 18:42:14 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2011/03/28 10:32:43 | 000,460,864 | ---- | M] () -- C:\WINDOWS\System32\PERFH009.DAT
[2011/03/28 10:32:42 | 000,079,580 | ---- | M] () -- C:\WINDOWS\System32\PERFC009.DAT
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/04/25 15:02:29 | 000,000,933 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Desktop\Spybot - Search & Destroy.lnk
[2011/04/13 15:09:49 | 000,013,460 | -HS- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\3122837365
[2011/04/13 15:09:49 | 000,013,460 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\3122837365
[2011/04/10 15:12:43 | 000,014,566 | -HS- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\jbh27swk8608knbyp822
[2011/04/10 15:12:43 | 000,014,566 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\jbh27swk8608knbyp822
[2011/04/10 15:09:54 | 000,323,363 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Desktop\null0.06808683154901729.exe
[2010/01/24 14:43:40 | 000,002,508 | -H-- | C] () -- C:\Documents and Settings\LocalService\Application Data\$_hpcst$.hpc
[2009/09/17 11:19:08 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\prvlcl.dat
[2009/08/05 12:19:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Viewer.INI
[2009/01/12 23:14:28 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2008/09/12 10:08:48 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2007/11/08 14:29:52 | 000,000,023 | ---- | C] () -- C:\WINDOWS\kodakpcd.mgillikin.ini
[2007/07/29 21:52:59 | 000,000,064 | ---- | C] () -- C:\WINDOWS\init.ini
[2006/11/08 03:30:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\DSSOLE.INI
[2006/11/07 17:10:10 | 000,042,160 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\rx_audio.Cache
[2006/10/23 11:30:48 | 000,002,508 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Application Data\$_hpcst$.hpc
[2006/09/02 08:39:59 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\OdiOlDVR.dll
[2006/09/02 08:39:59 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\OdiAPI.dll
[2006/09/02 08:39:53 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\DM1USBAPIVB.dll
[2006/08/29 12:32:45 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Application Data\WavCodec.wff
[2006/08/03 19:32:22 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\SLLights.dll
[2006/08/03 19:32:22 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\slmh.exe
[2006/08/03 19:32:22 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\minirec.exe
[2006/08/03 19:32:22 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\usb_cpl.dll
[2006/08/03 19:32:22 | 000,061,440 | ---- | C] () -- C:\WINDOWS\SmCfg.exe
[2006/08/03 19:31:25 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\coinst.dll
[2006/05/30 20:23:08 | 000,000,037 | ---- | C] () -- C:\WINDOWS\ipixActivex.ini
[2006/05/02 23:14:55 | 000,217,388 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\rx_image.Cache
[2006/05/01 17:34:30 | 000,008,636 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2006/02/18 01:49:40 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\WLTRYSVC.EXE
[2006/02/18 01:49:39 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2006/02/18 01:49:10 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\Cylon.dll
[2006/02/18 01:49:10 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\usrnicvw.dll
[2006/02/18 01:46:15 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2006/02/18 01:27:12 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\pnpchk.exe
[2006/02/11 20:04:46 | 000,000,104 | ---- | C] () -- C:\WINDOWS\usrwiz.ini
[2006/01/25 18:32:05 | 000,000,058 | ---- | C] () -- C:\WINDOWS\mchguid.ini
[2006/01/21 12:35:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\DVEdit.INI
[2006/01/21 12:07:41 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\dsp_trc.dll
[2006/01/21 12:07:41 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\IcdSptSvps.dll
[2005/12/01 14:05:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005/11/29 16:31:26 | 000,007,904 | ---- | C] () -- C:\WINDOWS\System32\ractrlkeyhook.dll
[2005/11/15 15:21:47 | 000,000,036 | ---- | C] () -- C:\WINDOWS\webica.ini
[2005/11/14 14:40:28 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2005/11/10 11:30:04 | 003,596,288 | R--- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2005/11/10 11:30:02 | 000,524,288 | R--- | C] () -- C:\WINDOWS\System32\divxsm.exe
[2005/08/24 16:06:15 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Application Data\dm.ini
[2005/07/22 15:31:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2005/07/15 14:35:56 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2005/07/15 14:35:56 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2005/04/05 17:55:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\uDrawFacePro.INI
[2005/04/05 17:54:45 | 001,454,168 | ---- | C] () -- C:\WINDOWS\System32\udfaedit.dll
[2005/04/05 17:54:44 | 001,454,168 | ---- | C] () -- C:\WINDOWS\System32\udfpro10.dll
[2005/02/25 10:25:07 | 000,009,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\WNTHW.SYS
[2005/02/01 13:02:38 | 000,000,043 | ---- | C] () -- C:\WINDOWS\POINTHelp.INI
[2004/11/30 04:10:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\besch.exe
[2004/11/30 04:10:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\besched.dll
[2004/11/03 15:08:46 | 000,051,392 | ---- | C] () -- C:\WINDOWS\System32\drivers\atnt40k.sys
[2004/11/01 14:54:29 | 000,000,131 | ---- | C] () -- C:\WINDOWS\ANS2000.INI
[2004/11/01 14:54:29 | 000,000,020 | -H-- | C] () -- C:\WINDOWS\akebook.ini
[2004/11/01 14:54:29 | 000,000,004 | -H-- | C] () -- C:\WINDOWS\a3kebook.ini
[2004/11/01 14:50:24 | 000,000,035 | ---- | C] () -- C:\WINDOWS\RidocPrn.ini
[2004/11/01 14:50:23 | 000,000,081 | ---- | C] () -- C:\WINDOWS\RiConv.ini
[2004/11/01 13:42:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\RPCS.ini
[2004/10/21 11:01:42 | 000,011,264 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/10/01 18:37:38 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/09/15 12:13:40 | 000,000,058 | ---- | C] () -- C:\WINDOWS\sview.ini
[2004/09/15 12:13:10 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\srfvdo.dat
[2004/08/30 15:55:18 | 000,006,688 | ---- | C] () -- C:\WINDOWS\MOVEXE.EXE
[2004/08/16 16:57:48 | 000,029,201 | ---- | C] () -- C:\WINDOWS\RicDB.ini
[2004/08/16 16:57:31 | 000,000,226 | ---- | C] () -- C:\WINDOWS\PMJobCli.ini
[2004/08/16 16:57:26 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\PMObservps.dll
[2004/08/16 16:57:20 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RLPR.dll
[2004/08/16 16:57:20 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\rtcpf.dll
[2004/08/16 16:57:18 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\rpnv2ui.dll
[2004/08/16 16:57:18 | 000,270,336 | ---- | C] () -- C:\WINDOWS\System32\rpnv2job.dll
[2004/08/16 16:57:13 | 000,001,727 | ---- | C] () -- C:\WINDOWS\PMRicSMb.ini
[2004/08/16 16:57:13 | 000,000,332 | ---- | C] () -- C:\WINDOWS\PMSnmpMb.ini
[2004/08/16 16:57:12 | 000,012,027 | ---- | C] () -- C:\WINDOWS\PMRicMb.ini
[2004/08/16 16:57:12 | 000,006,702 | ---- | C] () -- C:\WINDOWS\PMRicPMb.ini
[2004/08/16 16:57:12 | 000,005,390 | ---- | C] () -- C:\WINDOWS\PMPrtMb.ini
[2004/08/16 16:57:12 | 000,003,611 | ---- | C] () -- C:\WINDOWS\PMRicFMb.ini
[2004/08/16 16:57:12 | 000,003,005 | ---- | C] () -- C:\WINDOWS\PMDvPrn.ini
[2004/08/16 16:57:12 | 000,002,087 | ---- | C] () -- C:\WINDOWS\PMDvDev.ini
[2004/08/16 16:57:12 | 000,002,047 | ---- | C] () -- C:\WINDOWS\PMDIOMb.ini
[2004/08/16 16:57:12 | 000,002,036 | ---- | C] () -- C:\WINDOWS\PMHostMb.ini
[2004/08/16 16:57:12 | 000,001,885 | ---- | C] () -- C:\WINDOWS\PMPSIOMb.ini
[2004/08/16 16:57:12 | 000,001,706 | ---- | C] () -- C:\WINDOWS\PMRicCMb.ini
[2004/08/16 16:57:12 | 000,001,494 | ---- | C] () -- C:\WINDOWS\PMMib2Mb.ini
[2004/08/16 16:57:12 | 000,001,143 | ---- | C] () -- C:\WINDOWS\PMDPIMb.ini
[2004/08/16 16:57:12 | 000,001,094 | ---- | C] () -- C:\WINDOWS\PMAxsMb.ini
[2004/08/16 16:57:12 | 000,000,994 | ---- | C] () -- C:\WINDOWS\PMDvFax.ini
[2004/08/16 16:57:12 | 000,000,842 | ---- | C] () -- C:\WINDOWS\PMDvScan.ini
[2004/08/16 16:57:12 | 000,000,423 | ---- | C] () -- C:\WINDOWS\PMDvCopy.ini
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApisv.dll
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApipt.dll
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApipl.dll
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApino.dll
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApinl.dll
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApiit.dll
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApihu.dll
[2004/08/16 16:57:11 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApifr.dll
[2004/08/16 16:57:10 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApifi.dll
[2004/08/16 16:57:10 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApies.dll
[2004/08/16 16:57:10 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApide.dll
[2004/08/16 16:57:10 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApida.dll
[2004/08/16 16:57:10 | 000,028,672 | ---- | C] () -- C:\WINDOWS\PMApics.dll
[2004/08/05 14:32:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI
[2004/07/30 13:00:44 | 000,081,920 | R--- | C] () -- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
[2004/07/28 14:38:54 | 000,000,051 | ---- | C] () -- C:\WINDOWS\iTouch.ini
[2004/07/28 14:31:32 | 000,081,920 | R--- | C] () -- C:\WINDOWS\bwUnin-6.1.4.36-8876480L.exe
[2004/07/20 18:47:14 | 000,000,022 | ---- | C] () -- C:\WINDOWS\kodakpcd.mhumphrey.ini
[2004/06/16 10:57:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WfxSeh32.INI
[2004/05/27 15:04:15 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE
[2004/05/27 15:04:15 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\EMQuickLaunch.exe
[2004/05/27 15:04:15 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\BizCenterQuickLaunch.exe
[2004/04/09 16:30:50 | 000,000,112 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2004/03/15 11:49:49 | 000,037,027 | ---- | C] () -- C:\WINDOWS\atmoUn.exe
[2004/02/18 21:05:52 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\EmailShared.dll
[2004/02/02 18:45:33 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\lfkodak.dll
[2004/02/02 18:45:32 | 000,338,944 | ---- | C] () -- C:\WINDOWS\System32\lffpx7.dll
[2004/01/23 14:30:23 | 000,000,132 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\fusioncache.dat
[2004/01/14 16:34:54 | 000,000,195 | ---- | C] () -- C:\WINDOWS\import.INI
[2003/12/11 22:44:48 | 000,000,023 | ---- | C] () -- C:\WINDOWS\System32\sol.dll
[2003/11/26 13:53:22 | 000,000,062 | ---- | C] () -- C:\WINDOWS\GNEILTIMECLOCK.ini
[2003/11/24 13:52:29 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
[2003/11/24 13:52:29 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\hlinkprx.dll
[2003/11/23 13:28:57 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\prnunins.exe
[2003/11/18 05:09:13 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2003/11/17 13:47:21 | 000,162,304 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE
[2003/11/17 13:24:01 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2003/11/14 18:43:27 | 000,000,758 | ---- | C] () -- C:\WINDOWS\HRWARE.INI
[2003/11/14 17:08:25 | 000,002,200 | ---- | C] () -- C:\WINDOWS\SWWATER.INI
[2003/11/14 16:30:22 | 000,000,746 | -H-- | C] () -- C:\Documents and Settings\mhumphrey\Local Settings\Application Data\FASTWiz.html
[2003/11/12 10:16:58 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\GNetParserX.dll
[2003/10/02 01:00:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lockout.dll
[2003/10/02 01:00:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\lockres.dll
[2003/09/15 23:34:57 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2003/09/15 23:29:03 | 000,000,895 | ---- | C] () -- C:\WINDOWS\lrun32.ini
[2003/09/15 23:27:05 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2003/09/15 23:19:17 | 000,000,882 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2003/09/15 23:08:30 | 000,095,811 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2003/09/15 23:07:02 | 000,002,048 | --S- | C] () -- C:\WINDOWS\BOOTSTAT.DAT
[2003/09/15 23:05:34 | 000,460,864 | ---- | C] () -- C:\WINDOWS\System32\PERFH009.DAT
[2003/09/15 23:05:34 | 000,079,580 | ---- | C] () -- C:\WINDOWS\System32\PERFC009.DAT
[2003/09/15 23:05:23 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2003/09/15 22:51:32 | 000,000,545 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2003/09/15 22:47:20 | 000,005,202 | -HS- | C] () -- C:\WINDOWS\rreg64.dll
[2003/09/15 22:47:20 | 000,002,917 | -HS- | C] () -- C:\WINDOWS\utapi64.dll
[2003/07/04 17:51:00 | 000,044,544 | ---- | C] () -- C:\WINDOWS\SVUNINST.EXE
[2003/07/04 17:51:00 | 000,020,992 | ---- | C] () -- C:\WINDOWS\PICUNINS.DLL
[2003/07/04 17:51:00 | 000,000,059 | ---- | C] () -- C:\WINDOWS\FAX.INI
[2002/10/24 13:32:00 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\mipmnlog.dll
[2002/09/03 14:42:36 | 000,429,392 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2002/09/03 14:35:18 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2002/09/03 14:31:48 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2002/09/03 09:31:46 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\OEMBIOS.BIN
[2002/09/03 09:31:44 | 000,004,594 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2002/08/29 06:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\MLANG.DAT
[2002/08/29 06:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\PERFI009.DAT
[2002/08/29 06:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\DSSEC.DAT
[2002/08/29 06:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\MIB.BIN
[2002/08/29 06:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\PERFD009.DAT
[2002/08/29 06:00:00 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\k.dll
[2002/08/29 06:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2002/08/29 06:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\NOISE.DAT
[2002/05/22 13:59:17 | 000,184,320 | ---- | C] () -- C:\WINDOWS\System32\EMBEDDEDDX.DLL
[2001/11/30 19:40:23 | 000,475,136 | ---- | C] () -- C:\WINDOWS\System32\GENSYSIE.DLL
[2001/11/30 19:40:20 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\GREGOCX.EXE
[2001/11/30 19:40:13 | 000,249,216 | ---- | C] () -- C:\WINDOWS\System32\GN3.DLL
[2001/11/30 19:40:10 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\GENFON32.DLL
[2001/11/30 19:40:09 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\GNS2KZIP.DLL
[2001/11/30 19:40:09 | 000,001,327 | ---- | C] () -- C:\WINDOWS\GOLDCOM.INI
[2001/09/13 14:06:26 | 000,036,864 | ---- | C] () -- C:\WINDOWS\SETPWRCG.EXE
[2000/12/19 04:01:00 | 000,446,464 | ---- | C] () -- C:\WINDOWS\System32\Tx32.dll
[2000/11/10 16:57:04 | 000,005,025 | ---- | C] () -- C:\WINDOWS\System32\patterns.dat
[2000/10/06 03:24:00 | 000,000,151 | ---- | C] () -- C:\WINDOWS\System32\ic32.ini
[1999/10/20 15:04:56 | 000,225,280 | ---- | C] () -- C:\WINDOWS\System32\Gn32.dll
[1980/01/01 01:00:00 | 000,008,391 | ---- | C] () -- C:\WINDOWS\System32\drivers\tiumfw.bin
========== LOP Check ==========
[2010/02/25 18:52:15 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\agi
[2009/09/29 15:33:37 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2006/08/29 10:43:24 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2005/03/25 15:38:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Network Associates
[2011/03/16 17:25:25 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2004/12/21 14:10:29 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Sierra
[2008/03/19 11:41:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/06/23 08:23:29 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\LocalService\Application Data\AVGTOOLBAR
[2009/06/01 10:53:24 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\AVGTOOLBAR
[2010/08/27 18:09:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Elluminate
[2010/01/29 10:26:46 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Free Audio Editor
[2006/02/13 12:02:06 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\ICAClient
[2010/01/31 23:50:50 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\InfraRecorder
[2003/11/12 18:50:09 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Interact Commerce
[2003/09/02 20:39:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\InterTrust
[2006/05/01 18:04:58 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\InterVideo
[2005/06/20 16:12:53 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Mortgage Calculator
[2006/08/29 10:43:26 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\NCH Swift Sound
[2006/11/26 22:45:41 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Pixela
[2011/04/08 11:15:27 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\PriceGong
[2003/09/14 12:48:50 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Qualcomm
[2006/08/29 10:43:23 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\RecordPad
[2011/03/29 18:41:37 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Skinux
[2005/03/08 22:55:27 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\SmartDraw
[2005/03/08 22:59:08 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\SmartDraw Image Plugin
[2006/10/23 12:35:47 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Smith Micro
[2009/09/27 15:33:04 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Uniblue
[2010/02/09 17:26:57 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\uTorrent
[2008/03/19 11:41:36 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey\Application Data\Viewpoint
[2010/01/29 18:14:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey.office\Application Data\Interact Commerce
[2010/01/29 18:14:45 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey.office\Application Data\InterTrust
[2010/01/29 18:15:39 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey.office\Application Data\Qualcomm
[2010/01/29 18:16:30 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey.office\Application Data\SmartDraw
[2010/01/29 18:16:30 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\mhumphrey.office\Application Data\SmartDraw Image Plugin
[2011/04/25 16:51:58 | 000,000,458 | ---- | M] () -- C:\WINDOWS\Tasks\EasyShare Registration RunOnce Task.job
[2011/04/04 14:41:00 | 000,000,444 | ---- | M] () -- C:\WINDOWS\Tasks\EasyShare Registration Task.job
[2011/04/25 16:52:03 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
[2011/04/08 16:00:00 | 000,000,398 | -H-- | M] () -- C:\WINDOWS\Tasks\{27BAFF4D-9ACF-43FB-AA15-32F59E7BB09A}_OFFICE_mhumphrey.job
[2011/04/12 09:00:00 | 000,000,398 | -H-- | M] () -- C:\WINDOWS\Tasks\{93508946-AE83-4345-83A8-5083A71FD435}_OFFICE_mhumphrey.job
[2011/04/13 16:00:02 | 000,000,398 | -H-- | M] () -- C:\WINDOWS\Tasks\{CA45E155-63FE-40E1-A5F9-00635183B460}_OFFICE_mhumphrey.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2002/09/03 14:36:02 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2006/01/05 12:29:08 | 000,003,596 | ---- | M] () -- C:\BidsNotif.htm
[2009/11/17 20:10:16 | 000,000,211 | RHS- | M] () -- C:\BOOT.INI
[2002/09/03 14:13:28 | 000,000,512 | -HS- | M] () -- C:\BOOTSECT.DOS
[1994/07/11 09:55:54 | 000,000,000 | ---- | M] () -- C:\BORROWER.IDX
[2002/10/23 20:49:08 | 000,348,160 | ---- | M] (AMYUNI Consultants
http://www.amyuni.com) -- C:\cdintf.dll
[2002/09/03 14:36:02 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2005/10/11 18:28:44 | 000,000,231 | ---- | M] () -- C:\coreObjX.Log
[1999/04/23 09:27:04 | 001,229,056 | ---- | M] (Microsoft Corporation) -- C:\dcom95.exe
[2007/06/18 20:06:24 | 000,000,038 | ---- | M] () -- C:\debug.txt
[2003/09/15 22:57:50 | 000,004,474 | RH-- | M] () -- C:\DELL.SDR
[2003/11/14 14:17:08 | 000,001,460 | ---- | M] () -- C:\devicetable.log
[2004/08/30 01:00:00 | 000,000,000 | RH-- | M] () -- C:\DFLLOG.DAT
[2004/06/22 13:34:22 | 000,005,728 | ---- | M] () -- C:\dufile.txt
[2004/11/03 16:43:48 | 000,000,021 | ---- | M] () -- C:\dv_trace.log
[2004/06/08 16:02:12 | 000,000,528 | ---- | M] () -- C:\EMControlLog.txt
[2004/07/27 18:23:13 | 000,000,052 | ---- | M] () -- C:\encrypt.enc
[2004/01/27 19:30:15 | 000,001,096 | ---- | M] () -- C:\FDLOG.TXT
[1996/03/28 19:24:04 | 000,000,549 | ---- | M] () -- C:\FOLDER.INI
[1995/05/23 18:54:20 | 000,000,018 | ---- | M] () -- C:\FOLDER.SEC
[1995/05/23 18:54:20 | 000,000,004 | ---- | M] () -- C:\FOLDER.USR
[2006/02/19 02:03:41 | 000,114,026 | ---- | M] () -- C:\hpfr5550.log
[2006/01/05 12:26:00 | 000,007,332 | ---- | M] () -- C:\IMXPOINT.FNM
[2006/01/05 12:26:00 | 000,001,694 | ---- | M] () -- C:\IMXPOINT.FRD
[2006/01/05 12:26:00 | 000,004,455 | ---- | M] () -- C:\IMXPOINT.TXT
[2004/01/05 13:37:12 | 000,000,686 | ---- | M] () -- C:\install.log
[2002/09/03 14:36:02 | 000,000,000 | -H-- | M] () -- C:\IO.SYS
[2002/09/03 14:36:02 | 000,000,000 | -HS- | M] () -- C:\MSDOS.SYS
[2008/05/09 22:30:08 | 000,000,350 | ---- | M] () -- C:\networks.log
[2004/10/04 10:47:19 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2009/10/01 08:50:46 | 000,250,048 | RHS- | M] () -- C:\NTLDR
[2011/04/26 13:24:48 | 1609,396,224 | -HS- | M] () -- C:\pagefile.sys
[2005/09/08 15:38:14 | 000,001,835 | ---- | M] () -- C:\POINT.FRD
[1994/07/11 09:55:54 | 000,000,000 | ---- | M] () -- C:\PROSPECT.IDX
[2008/08/27 09:55:11 | 000,000,056 | ---- | M] () -- C:\PSK.txt
[2005/04/14 16:31:24 | 000,002,903 | ---- | M] () -- C:\RegAll.log
[2005/04/26 11:31:09 | 000,000,858 | ---- | M] () -- C:\search.log
[2003/11/18 04:33:18 | 000,015,526 | ---- | M] () -- C:\SSInst.log
[2005/01/06 14:42:54 | 000,004,456 | ---- | M] () -- C:\ug.fnm
[2005/05/06 14:44:27 | 000,000,108 | ---- | M] () -- C:\WebExMgr.log
[2003/11/19 22:23:08 | 000,000,147 | ---- | M] () -- C:\_DEISREG.ISR
< %systemroot%\Fonts\*.com >
[2006/04/18 16:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 15:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 16:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 15:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2002/09/03 14:35:02 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\DESKTOP.INI
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\filterpipelineprintproc.dll
[2008/07/06 06:50:04 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
[2005/04/05 18:26:44 | 000,001,729 | ---- | M] () -- C:\WINDOWS\SYSTEM32\uif_bkgd.jpg
[2005/04/05 18:26:45 | 000,015,834 | ---- | M] () -- C:\WINDOWS\SYSTEM32\uif_body.jpg
[2005/04/05 18:22:34 | 000,001,729 | ---- | M] () -- C:\WINDOWS\SYSTEM32\uif_tmp.jpg
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
[2006/03/28 10:43:25 | 000,001,514 | -H-- | M] () -- C:\Documents and Settings\mhumphrey\Application Data\Microsoft\LastFlashConfig.WFC
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2002/09/03 14:22:52 | 000,094,208 | ---- | M] () -- C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.SAV
[2002/09/03 14:22:52 | 000,626,688 | ---- | M] () -- C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.SAV
[2002/09/03 14:22:52 | 000,397,312 | ---- | M] () -- C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.SAV
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/10/01 09:27:02 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\DESKTOP.INI
< %systemroot%\system32\config\systemprofile\*.dat /x >
[2003/09/15 23:20:57 | 000,000,310 | ---- | M] () -- C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\convert.log
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2004/10/05 11:41:11 | 000,000,177 | -HS- | M] () -- C:\Documents and Settings\mhumphrey\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI
[2003/09/11 13:46:55 | 000,000,079 | -H-- | M] () -- C:\Documents and Settings\mhumphrey\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2005/05/03 11:30:58 | 000,000,227 | -H-- | M] () -- C:\Documents and Settings\mhumphrey\Application Data\Microsoft\Internet Explorer\Quick Launch\Welcome to TBDirect Online.url
< %USERPROFILE%\Desktop\*.exe >
[2011/04/10 15:10:33 | 000,323,363 | -H-- | M] () -- C:\Documents and Settings\mhumphrey\Desktop\null0.06808683154901729.exe
[2011/04/26 15:34:02 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\mhumphrey\Desktop\OTL.exe
[2011/04/25 14:54:48 | 016,409,960 | -H-- | M] (Safer Networking Limited ) -- C:\Documents and Settings\mhumphrey\Desktop\setup-spybotsd162.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
[2006/02/13 11:48:19 | 000,557,056 | ---- | M] (Citrix Online) -- C:\WINDOWS\JAVA\chatlnk.exe
[2008/04/23 18:15:54 | 000,060,968 | ---- | M] () -- C:\WINDOWS\JAVA\GoToAssistDownloadHelper.exe
[2009/11/13 20:14:22 | 000,000,466 | ---- | M] () -- C:\WINDOWS\JAVA\javalog.txt
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-03-24 16:09:14
< >
< >
========== Alternate Data Streams ==========
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\mhumphrey\My Documents\Pics:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\mhumphrey\My Documents\My Pictures:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\mhumphrey\My Documents\My Music:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\mhumphrey\My Documents\ImageMixer3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\mhumphrey\My Documents\DRConfig:Roxio EMC Stream
< End of report >
Extras.txt:
OTL Extras logfile created on: 04/26/11 3:55:33 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\mhumphrey\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: MM/dd/yy
1,023.00 Mb Total Physical Memory | 576.00 Mb Available Physical Memory | 56.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.85 Gb Total Space | 18.94 Gb Free Space | 33.92% Space Free | Partition Type: NTFS
Computer Name: DBGJDH31 | User Name: mgillikin | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_USERS\S-1-5-21-1123561945-842925246-854245398-2115\SOFTWARE\Classes\<extension>]
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" %*
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications]
"Enabled" = 0
"AllowUserPrefMerge" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts]
"Enabled" = 0
"AllowUserPrefMerge" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings]
"AllowOutboundDestinationUnreachable" = 0
"AllowOutboundSourceQuench" = 0
"AllowRedirect" = 0
"AllowInboundEchoRequest" = 0
"AllowInboundRouterRequest" = 0
"AllowOutboundTimeExceeded" = 0
"AllowOutboundParameterProblem" = 0
"AllowInboundTimestampRequest" = 0
"AllowInboundMaskRequest" = 0
"AllowOutboundPacketTooBig" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging]
"LogDroppedPackets" = 0
"LogSuccessfulConnections" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications]
"Enabled" = 0
"AllowUserPrefMerge" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts]
"Enabled" = 0
"AllowUserPrefMerge" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings]
"AllowOutboundDestinationUnreachable" = 0
"AllowOutboundSourceQuench" = 0
"AllowRedirect" = 0
"AllowInboundEchoRequest" = 0
"AllowInboundRouterRequest" = 0
"AllowOutboundTimeExceeded" = 0
"AllowOutboundParameterProblem" = 0
"AllowInboundTimestampRequest" = 0
"AllowInboundMaskRequest" = 0
"AllowOutboundPacketTooBig" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging]
"LogDroppedPackets" = 0
"LogSuccessfulConnections" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework]
"Enabled" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe" = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare -- (Eastman Kodak Company)
"C:\Program Files\AVG\AVG8\avgam.exe" = C:\Program Files\AVG\AVG8\avgam.exe:*:Enabled:avgam.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgdiag.exe" = C:\Program Files\AVG\AVG8\avgdiag.exe:*:Enabled:avgdiag.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgdiagex.exe" = C:\Program Files\AVG\AVG8\avgdiagex.exe:*:Enabled:avgdiagex.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{004F0409-78E1-11D2-B60F-006097C998E7}" = Microsoft Access 2000 SR-1 Runtime
"{00FC6799-866E-44A1-A60C-DCF394CF56FD}" = iTunes
"{073F22CE-9A5B-4A40-A604-C7270AC6BF34}" = ESSSONIC
"{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}" = WD Diagnostics
"{11F1920A-56A2-4642-B6E0-3B31A12C9288}" = Dell Solution Center
"{14374622-0900-4056-BA06-C87C900AF9E6}" = QuickBooks Pro 2005
"{146EF657-8F09-42AB-94BA-A9EC036081BC}" = DimpleArt Soft
"{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}" = ESSPCD
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1D532B73-1812-483C-8720-E3E24B582015}" = POINT
"{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}" = Rhapsody Player Engine
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24F009D2-7A41-4534-BA08-160E1E7E0DDB}" = msxml4SP2
"{2555F283-A782-4F9F-829F-268A9B0F9CC1}" = POINT
"{25D24E84-64A9-40D2-85CF-540B1C4A6D52}" = ASF
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 17
"{2870C53D-8E6F-49E0-AE49-1A852BD26FBB}" = Self Employed Borrower 2005
"{2A2EDF5F-F3C6-4919-AE34-C08A71AD034A}" = Wireless-G Notebook Adapter
"{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}" = essvatgt
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3730CCC0-A07B-4170-8761-AB068DDB46B8}" = Firebird 1.5
"{376CC79D-B30B-486A-8F0B-A25316392AEA}" = ESPWin
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{42938595-0D83-404D-9F73-F8177FDD531A}" = ESScore
"{432C3720-37BF-4BD7-8E49-F38E090246D0}" = CR2
"{44E5B47F-870E-4E38-A458-8A5FC4DCFECF}" = ImageMixer for HDD Camcorder
"{4537EA4B-F603-4181-89FB-2953FC695AB1}" = netbrdg
"{5316DFC9-CE99-4458-9AB3-E8726EDE0210}" = skin0001
"{53648F92-1CC5-22D2-A6DF-00A0C9A23BCD}" = SonicWALL Global VPN Client
"{5809E7CF-4DCF-11D4-9875-00105ACE7734}" = Logitech MouseWare 9.79.1
"{5C088418-0D63-4698-B2D0-7A3A171EE339}" = POINT
"{5C223195-5CB2-4FE1-AA1C-410716E0F8F5}_is1" = SSPPYY
"{5CD4F991-BA3E-4EC4-A7A1-EFB61F4D7291}" = Setup
"{605A4E39-613C-4A12-B56F-DEFBE6757237}" = SHASTA
"{643EAE81-920C-4931-9F0B-4B343B225CA6}" = ESSBrwr
"{684FD900-B874-4A02-90E1-E65305D72B6B}" = Microsoft Visual J# .NET Redistributable Package 1.1
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76E6BBAA-25E6-4BFC-9613-75A5CACE2940}" = Olympus DSS Player
"{795F2EA4-9798-4BA5-B31A-C8F41A124FC8}" = QBFC2
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{8404D896-FDB0-458E-8715-0BCECC0EAF5B}" = Simple DST Multimedia 1.8 BETA
"{8552A53D-5226-462B-8E7C-B3174C04E7BD}" = Intel® PROSet
"{85BC5C08-E73D-11D2-964D-444553540000}" = Point
"{868901EE-7807-4F89-A134-7C705D34F91F}" = Roxio Easy Media Creator 8 Suite
"{8943CE61-53BD-475E-90E1-A580869E98A2}" = staticcr
"{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Advanced Control Suite
"{8A502E38-29C9-49FA-BCFA-D727CA062589}" = ESSTOOLS
"{8E92D746-CD9F-4B90-9668-42B74C14F765}" = ESSini
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90300409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Media Content
"{90D55A3F-1D99-4C94-A77E-46DC14F0BF08}" = Help and Support Customization
"{91110409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional
"{91190409-6000-11D3-8CFE-0050048383C9}" = Microsoft Publisher 2002
"{91517631-A9F3-4B7C-B482-43E0068FD55A}" = ESSgui
"{98DF85D9-96C0-4F57-A92E-C3539477EF5E}" = DVDSentry
"{999D43F4-9709-4887-9B1A-83EBB15A8370}" = VPRINTOL
"{99D42EC7-652B-4819-B3E6-6450C815E03F}" = Odyssey Client
"{9F200129-3D01-4D9E-AD73-EDFF2CCB601D}" = SBA Module
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA428090-A5C2-11D4-8B8B-0050BA89596C}" = Ultimate Financial Calculator
"{ABE068DF-8DC4-4947-ABFC-DD2B40850225}" = SFR2
"{AC76BA86-1033-0000-7760-000000000002}" = Adobe Acrobat 7.0 Professional
"{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}" = ESSCDBK
"{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}" = OfotoXMI
"{B208806F-A231-4FA0-AB3F-5C1B8979223E}" = Microsoft ActiveSync 4.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B43357AA-3A6D-4D94-B56E-43C44D09E548}" = Microsoft .NET Framework (English)
"{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}" = CCScore
"{BB343510-2BBA-11D2-AB7B-006097C3ED71}" = IMX XpressPost
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C5074CC4-0E26-4716-A307-960272A90040}" = QuickSet
"{C62B0F3B-47C3-4BE8-B70D-73203B0EA766}" = Broker Pro Office
"{C70D8272-CDB8-4635-BD88-8828ACD60576}" = LoanSizer
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Kodak EasyShare software
"{D9952F01-1EBB-494B-AD8C-36BCA14B0FC4}" = POINT
"{DB02F716-6275-42E9-B8D2-83BA2BF5100B}" = SFR
"{DBFF98AD-258E-461B-A1CD-D45E564023F9}" = Font Manager
"{DD30D7C5-DD1A-46E7-9CA6-03CF6A398990}" = DeskTopBinder V2 Lite
"{DF1D5FEC-D67C-43C8-9230-41F5DF350196}" = MetaFrame Presentation Server Client
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}" = tooltips
"{F033B55E-54FA-46AD-8B7E-3EF65A6E9D7A}" = Hallmark Card Studio 2005
"{F0AE7C9A-C253-4CB2-BB6C-1445749DCE4D}" = WebEx MeetMeNow
"{F22C222C-3CE2-4A4B-A83F-AF4681371ABE}" = kgcbase
"{F3CA9611-CD42-4562-ADAB-A554CF8E17F1}" = Microsoft WSE 2.0 SP3 Runtime
"{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}" = SKINXSDK
"{F9593CFB-D836-49BC-BFF1-0E669A411D9F}" = WIRELESS
"{FCDB1C92-03C6-4C76-8625-371224256091}" = ESSPDock
"{FCE14E89-E472-4501-A87F-784CB7128AAB}" = POINT
"Abacast Client" = Abacast Client
"ACT!" = ACT!
"ActiveTouchMeetingClient" = WebEx
"Ad-Aware SE Personal" = Ad-Aware SE Personal
"Adobe Acrobat 7.0 Professional" = Adobe Acrobat 7.1.0 Professional
"Adobe Atmosphere Player" = Adobe Atmosphere Player for Acrobat and Adobe Reader
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Photoshop 7.0.1" = Adobe Photoshop 7.0.1
"AdobeESD" = Adobe Download Manager 2.0 (Remove Only)
"AVG8Uninstall" = AVG 8.5
"CNXT_MODEM_PCI_VEN_8086&DEV_24x6&SUBSYS_542214F1" = Conexant D480 MDC V.92 Modem
"conduitEngine" = Conduit Engine
"CToolbar_UNINSTALL" = Inbox.com Toolbar
"EasyLinkAdvisor" = Linksys EasyLink Advisor 1.5 (1044)
"EfntSSDSL" = Efficient Networks SpeedStream DSL
"eLynx Ltd. Web Post Printer" = eLynx Ltd. Web Post Printer
"ezlistng" = The Real Yellow Pages Live! v3.9.1 (ActiveX)
"EzPhone Recorder_is1" = EzPhone Recorder 1.1
"FBDBServer_1_5_is1" = Firebird 1.5.2.4731
"Free Audio Editor" = Free Audio Editor
"Google Chrome" = Google Chrome
"GSIM" = GSIM
"hp print screen utility" = hp print screen utility
"ie8" = Windows Internet Explorer 8
"Image Web Server IE Plugin" = Image Web Server IE Plugins 2,0,0,104
"InfraRecorder" = InfraRecorder
"InstallShield_{00FC6799-866E-44A1-A60C-DCF394CF56FD}" = iTunes
"InstallShield_{24F009D2-7A41-4534-BA08-160E1E7E0DDB}" = msxml4SP2
"InstallShield_{25D24E84-64A9-40D2-85CF-540B1C4A6D52}" = Broadcom ASF Management Applications
"InstallShield_{3730CCC0-A07B-4170-8761-AB068DDB46B8}" = Firebird 1.5
"InstallShield_{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Advanced Control Suite
"InstallShield_{99D42EC7-652B-4819-B3E6-6450C815E03F}" = Odyssey Client
"InstallShield_{DBFF98AD-258E-461B-A1CD-D45E564023F9}" = Font Manager
"InterActual Player" = InterActual Player
"IrfanView" = IrfanView (remove only)
"LAN-Fax Utilities" = LAN-Fax Utilities
"LiveReg" = LiveReg (Symantec Corporation)
"LiveUpdate" = LiveUpdate 2.0 (Symantec Corporation)
"Logitech Resource Center" = Logitech Resource Center
"Madonote_is1" = Madonote 2004
"McAfee Security Scan" = McAfee Security Scan Plus
"MetaFrame Presentation Server Web Client for Win32" = MetaFrame Presentation Server Web Client for Win32
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework Full v1.0.3705 (1033)" = Microsoft .NET Framework (English) v1.0.3705
"Microsoft Press Interactive Training" = Microsoft Interactive Training
"MSN Music Assistant" = MSN Music Assistant
"NVIDIA" = NVIDIA Windows 2000/XP Display Drivers
"PMClient" = SmartNetMonitor for Client
"PPT/ Free Loan Programs and CCS Edition" = PPT/ Free Loan Programs and CCS Edition
"ProMortgageFees v4.2" = ProMortgageFees v4.2
"ProMortgageManager" = ProMortgageManager
"ProMortgageTools - ProCCS / PMR" = ProMortgageTools - ProCCS / PMR
"ProposalSmartz Desktop trial version" = ProposalSmartz Desktop trial version
"QFlash 3.0 Client Prep" = QFlash 3.0 Client Prep
"QuickTime" = QuickTime
"RealPlayer 6.0" = RealPlayer
"RecordPad" = RecordPad Sound Recorder Uninstall
"Remote Administrator v2.1" = Remote Administrator v2.1
"Remote Administrator v2.2" = Remote Administrator v2.2
"Security Task Manager" = Security Task Manager 1.6f
"Shockwave" = Shockwave
"Sony Digital Voice Editor 2" = Sony Digital Voice Editor 2
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"SuperFax" = SuperFax
"SuperVoice" = SuperVoice
"Theme Editor 1.0" = Theme Editor 1.0
"TranslatorBar_5 Toolbar" = TranslatorBar 5 Toolbar
"TweakNow RegCleaner Standard_is1" = TweakNow RegCleaner Standard
"U.S. Robotics Wireless MAXg Adapter" = U.S. Robotics Wireless MAXg Adapter
"UninstallFinAlyst" = Compu-Share FinAlyst 4.0
"USB7554" = SmartUSB56 Voice Modem
"USI Client" = USI Client
"uTorrent" = µTorrent
"WavePad" = WavePad Uninstall
"WebPost" = Microsoft Web Publishing Wizard 1.52
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinZip" = WinZip
"WMFDist11" = Windows Media Format 11 runtime
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 04/25/11 4:37:11 PM | Computer Name = DBGJDH31 | Source = Application Hang | ID = 1002
Description = Hanging application rundll32.exe, version 5.1.2600.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 04/25/11 4:38:12 PM | Computer Name = DBGJDH31 | Source = Application Hang | ID = 1002
Description = Hanging application rundll32.exe, version 5.1.2600.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 04/25/11 4:39:43 PM | Computer Name = DBGJDH31 | Source = Application Hang | ID = 1002
Description = Hanging application rundll32.exe, version 5.1.2600.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 04/25/11 4:42:32 PM | Computer Name = DBGJDH31 | Source = Application Error | ID = 1000
Description = Faulting application , version 0.0.0.0, faulting module unknown, version
0.0.0.0, fault address 0x00000000.
Error - 04/25/11 4:51:17 PM | Computer Name = DBGJDH31 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 04/25/11 4:51:18 PM | Computer Name = DBGJDH31 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 04/25/11 4:51:32 PM | Computer Name = DBGJDH31 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 04/25/11 4:58:01 PM | Computer Name = DBGJDH31 | Source = Ci | ID = 4127
Description = Content index on c:\system volume information\catalog.wci could not
be initialized. Error 3221225477.
Error - 04/25/11 4:58:01 PM | Computer Name = DBGJDH31 | Source = Ci | ID = 4127
Description = Content index on c:\system volume information\catalog.wci could not
be initialized. Error 3221225477.
Error - 04/26/11 1:25:36 PM | Computer Name = DBGJDH31 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
[ System Events ]
Error - 04/26/11 1:25:36 PM | Computer Name = DBGJDH31 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain OFFICE due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.
Error - 04/26/11 1:26:30 PM | Computer Name = DBGJDH31 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 04/26/11 1:26:37 PM | Computer Name = DBGJDH31 | Source = Service Control Manager | ID = 7001
Description = The Adapter Switching service depends on the RoamMgr service which
failed to start because of the following error: %%1068
Error - 04/26/11 1:26:37 PM | Computer Name = DBGJDH31 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
AvgLdx86 AvgMfx86 cdudf_xp Fips intelppm RxFilter
Error - 04/26/11 1:26:58 PM | Computer Name = DBGJDH31 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error - 04/26/11 1:29:42 PM | Computer Name = DBGJDH31 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error - 04/26/11 1:47:57 PM | Computer Name = DBGJDH31 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error - 04/26/11 1:49:00 PM | Computer Name = DBGJDH31 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error - 04/26/11 3:32:42 PM | Computer Name = DBGJDH31 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
Error - 04/26/11 3:33:20 PM | Computer Name = DBGJDH31 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
< End of report >
