Backdoor Trojan Found by StopZilla

I had already run a full system scan with StopZilla which found 4 trojan files. I then ran Malwarebytes and it found and removed only one. I want to run through to make sure all of it is gone.

Here is my scan with OTL:

OTL logfile created on: 6/16/2011 10:44:32 AM - Run 1
OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\dreho00b\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.95 Gb Total Physical Memory | 0.69 Gb Available Physical Memory | 35.40% Memory free
3.80 Gb Paging File | 2.92 Gb Available in Paging File | 76.95% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINNT | %ProgramFiles% = C:\Program Files
Drive C: | 74.53 Gb Total Space | 43.21 Gb Free Space | 57.98% Space Free | Partition Type: NTFS

Computer Name: W72C-G55K6K1 | User Name: DREHO00B | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\dreho00b\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\STOPzilla!\STOPzilla.exe (iS3, Inc.)
PRC - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\BM\TMBMSRV.exe (Trend Micro Inc.)
PRC - C:\Program Files\Java\jre1.6.0_22\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\WINNT\CATPC\mosaic\MBEService\MBESrvS.exe (Siemens AG - SIS GO CS BAS C DT)
PRC - C:\Program Files\OfficeScan NT\TmListen.exe (Trend Micro Inc.)
PRC - C:\Program Files\OfficeScan NT\NTRtScan.exe (Trend Micro Inc.)
PRC - C:\Program Files\Siemens\CardOS API\bin\siecacst.exe (Siemens AG)
PRC - C:\Program Files\OfficeScan NT\TmProxy.exe (Trend Micro Inc.)
PRC - C:\Program Files\Ricoh\PCS Director\Client\pa6clint.exe (PJLM Software Inc.)
PRC - C:\WINNT\system32\CCM\CcmExec.exe (Microsoft Corporation)
PRC - C:\Program Files\OfficeScan NT\CNTAoSMgr.exe (Trend Micro Inc.)
PRC - C:\WINNT\CATPC\pgservice\SIMService.exe (Siemens E GIOIT SHS61)
PRC - C:\WINNT\CATPC\CATSYS\CatSystemSvc.exe (Siemens AG)
PRC - C:\Program Files\DellTPad\hidfind.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\ApntEx.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\ApMsgFwd.exe (Alps Electric Co., Ltd.)
PRC - c:\WINNT\CATPC\4\stacsv.exe (IDT, Inc.)
PRC - C:\WINNT\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe (Diskeeper Corporation)
PRC - C:\Program Files\Utimaco\SafeGuard Easy\ecview.exe (Utimaco Safeware AG)
PRC - C:\Program Files\Utimaco\SafeGuard Easy\SgeCtl.exe (Utimaco Safeware AG)
PRC - C:\Program Files\Utimaco\SafeGuard Easy\WksCfgSrv.exe (Utimaco Safeware AG)
PRC - C:\WINNT\CATPC\pgservice\PGSensCom.exe ()
PRC - C:\WINNT\system32\SgLogPlayer.exe (Utimaco Safeware AG)
PRC - C:\Program Files\AccessManager\Client\sygman.exe (MCI, Inc.)
PRC - C:\Program Files\AccessManager\Client\AMBroker.exe (MCI, Inc.)
PRC - C:\Program Files\AccessManager\PMAC\sp_SWIns.exe (Smartpipes, Inc.)
PRC - C:\Program Files\Siemens\CAT Bulletin Board\CBB.exe (Siemens AG)
PRC - C:\Program Files\Siemens\CAT Bulletin Board\CBBS.exe ()


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\dreho00b\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINNT\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Ricoh\PCS Director\Client\pa6wtrak.dll (Print Audit Inc.)
MOD - C:\Program Files\Ricoh\PCS Director\Client\pa6hook.dll ()
MOD - C:\WINNT\system32\hccutils.dll (Intel Corporation)
MOD - C:\Program Files\Utimaco\SafeGuard Easy\SgMsgBhk.dll (Utimaco Safeware AG)


========== Win32 Services (SafeList) ==========

SRV - (szserver) – C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)
SRV - (MBAMService) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (TMBMServer) – C:\Program Files\BM\TMBMSRV.exe (Trend Micro Inc.)
SRV - (JavaQuickStarterService) – C:\Program Files\Java\jre1.6.0_22\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (MBEService) – C:\WINNT\CATPC\mosaic\MBEService\MBESrvS.exe (Siemens AG - SIS GO CS BAS C DT)
SRV - (tmlisten) – C:\Program Files\OfficeScan NT\tmlisten.exe (Trend Micro Inc.)
SRV - (ntrtscan) – C:\Program Files\OfficeScan NT\ntrtscan.exe (Trend Micro Inc.)
SRV - (ATTRcAppSvc) – C:\Program Files\AT&T;\Communication Manager\RcAppSvc.exe (SmithMicro Inc.)
SRV - (TmProxy) – C:\Program Files\OfficeScan NT\TmProxy.exe (Trend Micro Inc.)
SRV - (BrYNSvc) – C:\Program Files\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (CcmExec) – C:\WINNT\system32\CCM\CcmExec.exe (Microsoft Corporation)
SRV - (smstsmgr) – C:\WINNT\System32\CCM\TSManager.exe (Microsoft Corporation)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (SMSIRcAppSvc) – C:\Program Files\US Cellular\QuickLink Mobile\RcAppSvc.exe (SmithMicro Inc.)
SRV - (SIMService) – C:\WINNT\CATPC\pgservice\SIMService.exe (Siemens E GIOIT SHS61)
SRV - (CatSystemSvc) – C:\WINNT\CATPC\CATSYS\CatSystemSvc.exe (Siemens AG)
SRV - (STacSV) – c:\WINNT\CATPC\4\stacsv.exe (IDT, Inc.)
SRV - (Diskeeper) – C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe (Diskeeper Corporation)
SRV - (SgeCtl) – C:\Program Files\Utimaco\SafeGuard Easy\SgeCtl.exe (Utimaco Safeware AG)
SRV - (WksCfgSrv) – C:\Program Files\Utimaco\SafeGuard Easy\WksCfgSrv.exe (Utimaco Safeware AG)
SRV - (SgLogPlayer) – C:\WINNT\system32\SgLogPlayer.exe (Utimaco Safeware AG)
SRV - (DAPlugin) – C:\Program Files\AccessManager\Client\DAPlugin.exe (MCI, Inc.)
SRV - (Sygman) – C:\Program Files\AccessManager\Client\sygman.exe (MCI, Inc.)
SRV - (AMBroker) – C:\Program Files\AccessManager\Client\AMBroker.exe (MCI, Inc.)
SRV - (sp_spi_da) – C:\Program Files\AccessManager\SMOC\spi_da.exe (Smartpipes, Inc.)
SRV - (SP Software Installer) – C:\Program Files\AccessManager\PMAC\sp_SWIns.exe (Smartpipes, Inc.)
SRV - (ExtranetAccess) – C:\Program Files\Nortel Networks\Extranet_serv.exe (Nortel Networks NA, Inc.)
SRV - (CBBS) – C:\Program Files\Siemens\CAT Bulletin Board\CBBS.exe ()
SRV - (OracleOraHome92ClientCache) – C:\Oracle\Ora92\bin\ONRSD.EXE ()


========== Driver Services (SafeList) ==========

DRV - (MBAMProtector) – C:\WINNT\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (tmcomm) – C:\WINNT\system32\drivers\tmcomm.sys (Trend Micro Inc.)
DRV - (tmevtmgr) – C:\WINNT\system32\drivers\tmevtmgr.sys (Trend Micro Inc.)
DRV - (tmactmon) – C:\WINNT\system32\drivers\tmactmon.sys (Trend Micro Inc.)
DRV - (tmtdi) – C:\WINNT\system32\drivers\tmtdi.sys (Trend Micro Inc.)
DRV - (TmFilter) – C:\Program Files\OfficeScan NT\TmXpflt.sys (Trend Micro Inc.)
DRV - (TmPreFilter) – C:\Program Files\OfficeScan NT\TmPreflt.sys (Trend Micro Inc.)
DRV - (VSApiNt) – C:\Program Files\OfficeScan NT\VsapiNT.sys (Trend Micro Inc.)
DRV - (tcpipBM) – C:\WINNT\system32\drivers\tcpipBM.sys (Bytemobile, Inc.)
DRV - (PCTINDIS5) – C:\WINNT\system32\PCTINDIS5.sys (Smith Micro Inc.)
DRV - (szkgfs) – C:\WINNT\system32\drivers\szkgfs.sys (iS3, Inc.)
DRV - (swmsflt) – C:\WINNT\System32\drivers\swmsflt.sys ()
DRV - (szkg5) – C:\WINNT\system32\DRIVERS\szkg.sys (iS3 Inc.)
DRV - (is3srv) – C:\WINNT\system32\drivers\is3srv.sys (iS3 Inc.)
DRV - (BrUsbSIb) Brother Serial USB Driver(WDM) – C:\WINNT\system32\drivers\BrUsbSib.sys (Brother Industries Ltd.)
DRV - (BrSerIb) Brother Serial Interface Driver(WDM) – C:\WINNT\system32\drivers\BrSerIb.sys (Brother Industries Ltd.)
DRV - (prepdrvr) – C:\WINNT\system32\CCM\PrepDrv.sys (Microsoft Corporation)
DRV - (SWNC8UA3) Sierra Wireless MUX NDIS Driver (UMTSA3) – C:\WINNT\system32\drivers\swnc8ua3.sys (Sierra Wireless Inc.)
DRV - (SWNC8U51) Sierra Wireless MUX NDIS Driver (UMTS51) – C:\WINNT\system32\drivers\swnc8u51.sys (Sierra Wireless Inc.)
DRV - (SWUMXA3) Sierra Wireless USB MUX Driver (UMTSA3) – C:\WINNT\system32\drivers\swumxa3.sys (Sierra Wireless Inc.)
DRV - (SWUMX51) Sierra Wireless USB MUX Driver (UMTS51) – C:\WINNT\system32\drivers\swumx51.sys (Sierra Wireless Inc.)
DRV - (Ser2pl) – C:\WINNT\system32\drivers\ser2pl.sys (Prolific Technology Inc.)
DRV - (IntcHdmiAddService) Intel® – C:\WINNT\system32\drivers\IntcHdmi.sys (Intel® Corporation)
DRV - (cvusbdrv) – C:\WINNT\system32\drivers\cvusbdrv.sys (Broadcom Corporation)
DRV - (USBCCID) – C:\WINNT\system32\drivers\usbccid.sys (Microsoft Corporation)
DRV - (ApfiltrService) – C:\WINNT\system32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (rimmptsk) – C:\WINNT\system32\drivers\rimmptsk.sys (REDC)
DRV - (e1yexpress) Intel® – C:\WINNT\system32\drivers\e1y5132.sys (Intel Corporation)
DRV - (STHDA) – C:\WINNT\system32\drivers\sthda.sys (IDT, Inc.)
DRV - (AESTAud) – C:\WINNT\system32\drivers\AESTAud.sys (Andrea Electronics Corporation)
DRV - (BCM43XX) – C:\WINNT\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (smsmdd) – C:\WINNT\system32\drivers\smsmdm.sys (Microsoft Corporation)
DRV - (PTDUWWAN) – C:\WINNT\system32\drivers\PTDUWWAN.sys (DEVGURU Co,LTD.)
DRV - (PTDUVsp) – C:\WINNT\system32\drivers\PTDUVsp.sys (DEVGURU Co,LTD.)
DRV - (PTDUMdm) – C:\WINNT\system32\drivers\PTDUMdm.sys (DEVGURU Co,LTD.)
DRV - (PTDUBus) – C:\WINNT\system32\drivers\PTDUBus.sys (DEVGURU Co,LTD.)
DRV - (SgeFlt) – C:\WINNT\SYSTEM32\DRIVERS\SGEFLT.SYS (Utimaco Safeware AG)
DRV - (AES-256) – C:\WINNT\SYSTEM32\DRIVERS\AES256.SYS (Utimaco Safeware AG)
DRV - (AES-128) – C:\WINNT\SYSTEM32\DRIVERS\AES128.SYS (Utimaco Safeware AG)
DRV - (HPFXBULK) – C:\WINNT\system32\drivers\hpfxbulk.sys (Hewlett Packard)
DRV - (Eacfilt) – C:\WINNT\system32\drivers\eacfilt.sys (Nortel Networks)
DRV - (IPSECSHM) – C:\WINNT\system32\drivers\ipsecw2k.sys (Nortel Networks)
DRV - (IPSECEXT) – C:\WINNT\system32\drivers\ipsecw2k.sys (Nortel Networks)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://intranet-energy.eps.siemens.com
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = http://proxyconf-w702.ww007.siemens.net/

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: vshareus@toolbar:1.0.0
FF - prefs.js..network.proxy.autoconfig_url: "http://proxyconf-w702.ww007.siemens.net/"
FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1"
FF - prefs.js..network.proxy.type: 2

FF - HKLM\software\mozilla\Firefox\extensions\\[removed]: C:\Program Files\Java\jre1.6.0_22\lib\deploy\jqs\ff [2011/02/02 14:11:07 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/04 05:03:35 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/05/04 05:03:35 | 000,000,000 | —D | M]

[2009/06/18 09:27:03 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\dreho00b\Application Data\Mozilla\Extensions
[2011/06/16 02:09:46 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\dreho00b\Application Data\Mozilla\Firefox\Profiles\uu5eba3n.default\extensions
[2010/10/31 20:28:00 | 000,000,000 | —D | M] (vShare Plugin) – C:\Documents and Settings\dreho00b\Application Data\Mozilla\Firefox\Profiles\uu5eba3n.default\extensions\vshareus@toolbar
[2011/06/15 01:59:48 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/04/18 09:07:44 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011/02/02 14:11:07 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE1.6.0_22\LIB\DEPLOY\JQS\FF
[2010/04/18 09:07:33 | 000,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2001/08/23 08:00:00 | 000,000,734 | —- | M]) - C:\WINNT\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.6.0_22\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (STOPzilla Browser Helper Object) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll (iS3, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre1.6.0_22\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (Pistolstar Web SSO) - {F01A34B2-0067-431C-A5E1-EFF58D85C9BE} - C:\Program Files\Pistolstar\Password Power Client\IE_SSO_Toolbar.dll ()
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (Pistolstar Web SSO) - {F01A34B2-0067-431C-A5E1-EFF58D85C9BE} - C:\Program Files\Pistolstar\Password Power Client\IE_SSO_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [DiskeeperSystray] C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe (Diskeeper Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [OfficeScanNT Monitor] C:\Program Files\OfficeScan NT\pccntmon.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [PrintAudit6] C:\Program Files\Ricoh\PCS Director\Client\pa6clint.exe (PJLM Software Inc.)
O4 - HKLM..\Run: [SgeEcView] C:\Program Files\Utimaco\SafeGuard Easy\Ecview.exe (Utimaco Safeware AG)
O4 - HKLM..\Run: [SIECAST] C:\Program Files\Siemens\CardOS API\bin\siecacst.exe (Siemens AG)
O4 - HKLM..\Run: [USM] C:\Program Files\Siemens\USM\USM.exe (Siemens AG)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Download present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Main present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\New Windows present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\SearchScopes present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Security present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\SQM present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPublishingWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWebServices = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoOnlinePrintsWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMSAppLogo5ChannelNotify = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disablecad = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: nointernetopenwith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: MaxGPOScriptWait = 1800
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Security present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThumbnailCache = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: GreyMSIAds = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetIcon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisablePersonalDirChange = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAutoUpdate = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartRunNoHOMEPATH = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowCpl = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 2 = Administrative Tools
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 3 = hdwwiz.cpl (Microsoft Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 4 = joy.cpl (Microsoft Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 5 = nusrmgr.cpl (Microsoft Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 6 = nwc.cpl (Microsoft Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConnectHomeDirToRoot = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O15 - HKLM\..Trusted Domains: bmw.de ([ikom] * is out of zone range - 6)
O15 - HKLM\..Trusted Domains: click-and-procure.com ([*.training] * is out of zone range - 6)
O15 - HKLM\..Trusted Domains: englishtown.com ([*.siemens] * is out of zone range - 6)
O15 - HKLM\..Trusted Domains: englishtown.com ([siemens] http is out of zone range - 6)
O15 - HKLM\..Trusted Domains: framatome-anp.de ([intranet] * in Trusted sites)
O15 - HKLM\..Trusted Domains: gepas.com ([*.erl] * in Trusted sites)
O15 - HKLM\..Trusted Domains: gsf.de ([awst] * is out of zone range - 6)
O15 - HKLM\..Trusted Domains: microsoft.com ([]* is out of zone range - 6)
O15 - HKLM\..Trusted Domains: NETgLearning.com ([]* is out of zone range - 6)
O15 - HKLM\..Trusted Domains: peopleclick.com ([]* is out of zone range - 6)
O15 - HKLM\..Trusted Domains: peopleclick.com ([my] * in Trusted sites)
O15 - HKLM\..Trusted Domains: sap.com ([]* is out of zone range - 6)
O15 - HKLM\..Trusted Domains: sap-ag.de ([]* is out of zone range - 6)
O15 - HKLM\..Trusted Domains: sbs.de ([]* in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.com ([]* in Local intranet)
O15 - HKLM\..Trusted Domains: siemens.com ([*.aphr] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.com ([*.cltw] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([]* in Local intranet)
O15 - HKLM\..Trusted Domains: siemens.de ([*.erlm] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([*.khe] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([*.kwu] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([*.kwu.erl] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([*.kwu.off] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([*.kwuf.erl] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([*.pg.erl] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([liveservices] * in Trusted sites)
O15 - HKLM\..Trusted Domains: siemens.de ([pacserver.kwu.erl] http is out of zone range - 5)
O15 - HKLM\..Trusted Domains: siemens.de ([pacserver.pg.erl] http is out of zone range - 5)
O15 - HKLM\..Trusted Domains: siemens.de ([scc.kwu.erl] * is out of zone range - 5)
O15 - HKLM\..Trusted Domains: siemens.de ([scc.pg.erl] * is out of zone range - 5)
O15 - HKLM\..Trusted Domains: siemens.net ([]* in Local intranet)
O15 - HKLM\..Trusted Domains: siemens.net ([*.chk.ww007] * is out of zone range - 6)
O15 - HKLM\..Trusted Domains: siemens.net ([*.scc.ww007] * is out of zone range - 5)
O15 - HKLM\..Trusted Domains: siemens.net ([*.ww007] * in Trusted sites)
O15 - HKLM\..Trusted Domains: sitest.net ([]* in Local intranet)
O15 - HKLM\..Trusted Domains: sitest.net ([*.chk.tww007] * is out of zone range - 6)
O15 - HKLM\..Trusted Domains: sitest.net ([*.scc.tww007] * is out of zone range - 5)
O15 - HKLM\..Trusted Domains: sitest.net ([*.tww007] * in Trusted sites)
O15 - HKLM\..Trusted Domains: smartforce.com ([]* is out of zone range - 6)
O15 - HKLM\..Trusted Domains: softwarespectrum.com ([shop] * in Trusted sites)
O15 - HKLM\..Trusted Domains: sun.com ([]* is out of zone range - 6)
O15 - HKLM\..Trusted Domains: xtremelearning.com ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Domains: bmw.de ([ikom] * is out of zone range - 6)
O15 - HKCU\..Trusted Domains: click-and-procure.com ([*.training] * is out of zone range - 6)
O15 - HKCU\..Trusted Domains: englishtown.com ([*.siemens] * is out of zone range - 6)
O15 - HKCU\..Trusted Domains: englishtown.com ([siemens] http is out of zone range - 6)
O15 - HKCU\..Trusted Domains: framatome-anp.de ([intranet] * in Trusted sites)
O15 - HKCU\..Trusted Domains: gepas.com ([*.erl] * in Trusted sites)
O15 - HKCU\..Trusted Domains: gsf.de ([awst] * is out of zone range - 6)
O15 - HKCU\..Trusted Domains: microsoft.com ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Domains: NETgLearning.com ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Domains: peopleclick.com ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Domains: peopleclick.com ([my] * in Trusted sites)
O15 - HKCU\..Trusted Domains: sap.com ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Domains: sap-ag.de ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Domains: sbs.de ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.com ([]* in Local intranet)
O15 - HKCU\..Trusted Domains: siemens.com ([*.aphr] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.com ([*.cltw] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([]* in Local intranet)
O15 - HKCU\..Trusted Domains: siemens.de ([*.erlm] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([*.khe] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([*.kwu] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([*.kwu.erl] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([*.kwu.off] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([*.kwuf.erl] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([*.pg.erl] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([liveservices] * in Trusted sites)
O15 - HKCU\..Trusted Domains: siemens.de ([pacserver.kwu.erl] http is out of zone range - 5)
O15 - HKCU\..Trusted Domains: siemens.de ([pacserver.pg.erl] http is out of zone range - 5)
O15 - HKCU\..Trusted Domains: siemens.de ([scc.kwu.erl] * is out of zone range - 5)
O15 - HKCU\..Trusted Domains: siemens.de ([scc.pg.erl] * is out of zone range - 5)
O15 - HKCU\..Trusted Domains: siemens.net ([]* in Local intranet)
O15 - HKCU\..Trusted Domains: siemens.net ([*.chk.ww007] * is out of zone range - 6)
O15 - HKCU\..Trusted Domains: siemens.net ([*.scc.ww007] * is out of zone range - 5)
O15 - HKCU\..Trusted Domains: siemens.net ([*.ww007] * in Trusted sites)
O15 - HKCU\..Trusted Domains: sitest.net ([*.chk.tww007] * is out of zone range - 6)
O15 - HKCU\..Trusted Domains: sitest.net ([*.scc.tww007] * is out of zone range - 5)
O15 - HKCU\..Trusted Domains: sitest.net ([*.tww007] * in Trusted sites)
O15 - HKCU\..Trusted Domains: smartforce.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: softwarespectrum.com ([shop] * in Trusted sites)
O15 - HKCU\..Trusted Domains: sun.com ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Domains: xtremelearning.com ([]* is out of zone range - 6)
O15 - HKCU\..Trusted Ranges: Range1 ([*]in Local intranet)

O15 - HKCU\..Trusted Ranges: Range2 ([*]in Trusted sites)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ww007.siemens.net
O18 - Protocol\Handler\saphtmlp {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\Program Files\SAP\Frontend\SAPgui\SAPHTMLP.DLL (SAP AG, Walldorf)
O18 - Protocol\Handler\sapr3 {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\Program Files\SAP\Frontend\SAPgui\SAPHTMLP.DLL (SAP AG, Walldorf)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINNT\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\NotLog: DllName - SGLogEx.dll - C:\WINNT\System32\SGLogEx.dll (Utimaco Safeware AG)
O20 - Winlogon\Notify\SGLogNotification: DllName - SGLogNotification.dll - C:\WINNT\System32\SGLogNotification.dll (Utimaco Safeware AG)
O20 - Winlogon\Notify\TPSvc: DllName - TPSvc.dll - File not found
O24 - Desktop WallPaper: C:\Documents and Settings\dreho00b\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\dreho00b\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/04 10:00:29 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – Reg Error: Key error. File not found

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINNT\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINNT\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINNT\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINNT\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINNT\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv41 - C:\WINNT\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINNT\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (60530730744152064)

========== Files/Folders - Created Within 30 Days ==========

[2011/06/16 10:42:49 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Documents and Settings\dreho00b\Desktop\OTL.exe
[2011/06/16 10:29:58 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\dreho00b\Desktop\HiJackThis.exe
[2011/06/15 02:03:10 | 000,000,000 | —D | C] – C:\Documents and Settings\dreho00b\Application Data\Malwarebytes
[2011/06/15 02:02:43 | 000,039,984 | —- | C] (Malwarebytes Corporation) – C:\WINNT\System32\drivers\mbamswissarmy.sys
[2011/06/15 02:02:43 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/06/15 02:02:43 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/06/15 02:02:39 | 000,022,712 | —- | C] (Malwarebytes Corporation) – C:\WINNT\System32\drivers\mbam.sys
[2011/06/15 02:02:39 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/06/10 16:17:59 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\STOPzilla
[2011/06/10 16:17:57 | 000,000,000 | —D | C] – C:\Program Files\STOPzilla!
[2011/06/10 16:17:57 | 000,000,000 | —D | C] – C:\Program Files\Common Files\iS3
[2011/06/10 16:17:55 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2011/06/08 19:07:24 | 000,132,560 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3HTUI5.dll
[2011/06/08 19:07:24 | 000,022,992 | R— | C] (iS3, Inc.) – C:\WINNT\System32\SZIO5.dll
[2011/06/08 19:07:22 | 000,546,256 | R— | C] (iS3, Inc.) – C:\WINNT\System32\SZComp5.dll
[2011/06/08 19:07:22 | 000,456,144 | R— | C] (iS3, Inc.) – C:\WINNT\System32\SZBase5.dll
[2011/06/08 19:07:22 | 000,398,800 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3DBA5.dll
[2011/06/08 19:07:22 | 000,099,792 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3Svc5.dll
[2011/06/08 19:07:22 | 000,067,024 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3Hks5.dll
[2011/06/08 19:07:22 | 000,028,624 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3XDat5.dll
[2011/06/08 19:07:20 | 000,738,768 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3Base5.dll
[2011/06/08 19:07:20 | 000,390,608 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3UI5.dll
[2011/06/08 19:07:20 | 000,230,864 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3Win325.dll
[2011/06/08 19:07:20 | 000,099,792 | R— | C] (iS3, Inc.) – C:\WINNT\System32\IS3Inet5.dll
[2011/05/26 08:51:08 | 000,000,000 | —D | C] – C:\Documents and Settings\dreho00b\Desktop\Palisades
[2010/07/20 13:43:33 | 003,145,728 | —- | C] (SAP Technology,Inc) – C:\Program Files\Common Files\sapxlhelper.dll
[2010/07/20 13:43:32 | 000,192,512 | —- | C] (SAP Tech Inc.) – C:\Program Files\Common Files\sapconsr3.dll
[2010/07/20 13:43:31 | 000,626,688 | —- | C] (SAP AG) – C:\Program Files\Common Files\sapconsaccess.dll
[2010/07/20 13:43:29 | 000,040,960 | —- | C] (SAP-TECHNOLOGY) – C:\Program Files\Common Files\DigitalSignature.ocx
[1 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/06/16 10:42:50 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\dreho00b\Desktop\OTL.exe
[2011/06/16 10:30:00 | 000,000,990 | —- | M] () – C:\WINNT\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-764733703-1417001333-423265UA.job
[2011/06/16 10:29:58 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\dreho00b\Desktop\HiJackThis.exe
[2011/06/16 00:30:00 | 000,000,938 | —- | M] () – C:\WINNT\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-764733703-1417001333-423265Core.job
[2011/06/15 23:55:05 | 000,001,848 | —- | M] () – C:\WINNT\System32\drivers\kgpcpy.cfg
[2011/06/15 02:02:43 | 000,000,796 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/06/15 02:00:21 | 000,144,536 | RHS- | M] () – C:\Documents and Settings\All Users\ntuser.pol
[2011/06/15 01:30:43 | 000,002,321 | —- | M] () – C:\Documents and Settings\dreho00b\Desktop\Google Chrome.lnk
[2011/06/15 01:30:43 | 000,002,299 | —- | M] () – C:\Documents and Settings\dreho00b\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/06/15 01:30:39 | 000,009,082 | —- | M] () – C:\WINNT\cfgall.ini
[2011/06/15 01:15:06 | 000,084,336 | RHS- | M] () – C:\Documents and Settings\dreho00b\ntuser.pol
[2011/06/10 16:40:53 | 000,000,297 | —- | M] () – C:\WINNT\SMSCFG.ini
[2011/06/10 16:37:07 | 000,002,206 | —- | M] () – C:\WINNT\System32\wpa.dbl
[2011/06/10 16:36:20 | 000,002,048 | –S- | M] () – C:\WINNT\bootstat.dat
[2011/06/10 16:36:14 | 2097,041,408 | -HS- | M] () – C:\hiberfil.sys
[2011/06/10 16:34:51 | 000,000,002 | —- | M] () – C:\Documents and Settings\dreho00b\ntuser.ok
[2011/06/08 19:07:24 | 000,132,560 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3HTUI5.dll
[2011/06/08 19:07:24 | 000,022,992 | R— | M] (iS3, Inc.) – C:\WINNT\System32\SZIO5.dll
[2011/06/08 19:07:22 | 000,546,256 | R— | M] (iS3, Inc.) – C:\WINNT\System32\SZComp5.dll
[2011/06/08 19:07:22 | 000,456,144 | R— | M] (iS3, Inc.) – C:\WINNT\System32\SZBase5.dll
[2011/06/08 19:07:22 | 000,398,800 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3DBA5.dll
[2011/06/08 19:07:22 | 000,099,792 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3Svc5.dll
[2011/06/08 19:07:22 | 000,067,024 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3Hks5.dll
[2011/06/08 19:07:22 | 000,028,624 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3XDat5.dll
[2011/06/08 19:07:20 | 000,738,768 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3Base5.dll
[2011/06/08 19:07:20 | 000,390,608 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3UI5.dll
[2011/06/08 19:07:20 | 000,230,864 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3Win325.dll
[2011/06/08 19:07:20 | 000,099,792 | R— | M] (iS3, Inc.) – C:\WINNT\System32\IS3Inet5.dll
[2011/06/08 08:37:07 | 000,451,444 | —- | M] () – C:\WINNT\System32\perfh009.dat
[2011/06/08 08:37:07 | 000,074,402 | —- | M] () – C:\WINNT\System32\perfc009.dat
[2011/06/06 11:43:13 | 000,001,682 | —- | M] () – C:\Documents and Settings\dreho00b\Desktop\W72C-G55K6K1 DREHO00B.lnk
[2011/06/04 20:05:02 | 000,000,284 | —- | M] () – C:\WINNT\tasks\AppleSoftwareUpdate.job
[2011/06/04 12:34:16 | 000,000,474 | —- | M] () – C:\WINNT\System32\mapisvc.inf
[2011/05/29 09:11:30 | 000,039,984 | —- | M] (Malwarebytes Corporation) – C:\WINNT\System32\drivers\mbamswissarmy.sys
[2011/05/29 09:11:20 | 000,022,712 | —- | M] (Malwarebytes Corporation) – C:\WINNT\System32\drivers\mbam.sys
[2011/05/19 10:37:29 | 000,047,521 | —- | M] () – C:\Documents and Settings\dreho00b\Desktop\AirTran Overcharge.JPG
[1 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/06/15 02:02:43 | 000,000,796 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/06/10 16:39:49 | 000,001,848 | —- | C] () – C:\WINNT\System32\drivers\kgpcpy.cfg
[2011/06/06 11:43:13 | 000,001,682 | —- | C] () – C:\Documents and Settings\dreho00b\Desktop\W72C-G55K6K1 DREHO00B.lnk
[2011/05/19 10:37:29 | 000,047,521 | —- | C] () – C:\Documents and Settings\dreho00b\Desktop\AirTran Overcharge.JPG
[2011/04/14 12:36:27 | 000,176,515 | —- | C] () – C:\WINNT\hpwins19.dat.temp
[2011/04/14 12:36:27 | 000,000,997 | —- | C] () – C:\WINNT\hpwmdl19.dat.temp
[2010/11/21 08:54:04 | 000,004,764 | —- | C] () – C:\WINNT\System32\CcmFramework.ini
[2010/11/19 14:00:03 | 000,000,297 | —- | C] () – C:\WINNT\SMSCFG.ini
[2010/11/09 09:43:09 | 000,040,408 | —- | C] () – C:\WINNT\System32\drivers\swmsflt.sys
[2010/10/26 21:17:10 | 000,000,050 | —- | C] () – C:\WINNT\System32\BRIDF10B.DAT
[2010/10/26 21:16:36 | 000,000,086 | —- | C] () – C:\WINNT\Brfaxrx.ini
[2010/10/12 06:41:38 | 000,000,664 | —- | C] () – C:\WINNT\System32\d3d9caps.dat
[2010/10/11 07:41:59 | 000,000,032 | —- | C] () – C:\WINNT\CD_Start.INI
[2010/10/09 15:45:26 | 000,186,704 | —- | C] () – C:\WINNT\hpwins23.dat
[2010/10/09 15:45:26 | 000,001,847 | —- | C] () – C:\WINNT\hpwmdl23.dat
[2010/08/29 17:41:29 | 000,000,116 | —- | C] () – C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc
[2010/08/03 03:53:45 | 000,000,957 | —- | C] () – C:\WINNT\Brpfx04a.ini
[2010/08/03 03:53:45 | 000,000,153 | —- | C] () – C:\WINNT\brpcfx.ini
[2010/08/03 03:53:32 | 000,000,050 | —- | C] () – C:\WINNT\System32\bridf08b.dat
[2010/08/03 03:53:30 | 000,000,419 | —- | C] () – C:\WINNT\BRWMARK.INI
[2010/08/03 03:53:10 | 000,000,000 | —- | C] () – C:\WINNT\brdfxspd.dat
[2010/07/20 13:43:30 | 001,167,872 | —- | C] () – C:\Program Files\Common Files\SAPActiveXL.xlt
[2010/07/20 13:43:30 | 000,949,760 | —- | C] () – C:\Program Files\Common Files\SAPActiveXL_nosig.xlt
[2010/07/20 13:31:32 | 000,175,616 | —- | C] () – C:\WINNT\System32\h5menu32.dll
[2010/07/20 13:31:32 | 000,095,744 | —- | C] () – C:\WINNT\System32\h5rtf32.dll
[2010/07/20 13:31:32 | 000,051,200 | —- | C] () – C:\WINNT\System32\h5tool32.dll
[2010/07/20 13:31:31 | 001,064,960 | —- | C] () – C:\WINNT\System32\h5krnl32.dll
[2010/07/20 13:31:31 | 000,188,928 | —- | C] () – C:\WINNT\System32\h5icon32.dll
[2010/04/16 10:55:09 | 000,000,418 | —- | C] () – C:\WINNT\hpwmdl28.dat.temp
[2010/04/16 10:22:56 | 000,206,463 | —- | C] () – C:\WINNT\hpwins28.dat
[2010/04/16 10:22:55 | 000,000,418 | —- | C] () – C:\WINNT\hpwmdl28.dat
[2010/03/15 15:35:11 | 000,010,563 | R— | C] () – C:\WINNT\hpwscr19.dat
[2010/03/15 15:32:53 | 000,176,140 | —- | C] () – C:\WINNT\hpwins19.dat
[2010/03/15 15:32:53 | 000,000,997 | —- | C] () – C:\WINNT\hpwmdl19.dat
[2010/03/11 11:59:58 | 000,000,131 | —- | C] () – C:\Documents and Settings\dreho00b\Local Settings\Application Data\fusioncache.dat
[2010/01/18 10:16:57 | 000,000,148 | —- | C] () – C:\WINNT\notesnsd.ini
[2009/09/25 13:55:59 | 000,000,314 | —- | C] () – C:\WINNT\hpbvspst.ini
[2009/09/25 13:55:48 | 000,001,027 | —- | C] () – C:\WINNT\hpbvnstp.ini
[2009/09/25 13:55:35 | 000,229,376 | R— | C] () – C:\WINNT\System32\HPPCPR01.DLL
[2009/09/25 13:55:35 | 000,000,630 | R— | C] () – C:\WINNT\System32\HPPCPR01.DAT
[2009/09/25 13:52:08 | 000,128,786 | —- | C] () – C:\WINNT\hppins02.dat
[2009/09/25 13:52:08 | 000,001,883 | —- | C] () – C:\WINNT\hppmdl02.dat
[2009/08/11 09:26:55 | 000,006,656 | —- | C] () – C:\Documents and Settings\dreho00b\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/07/31 08:59:19 | 000,000,218 | —- | C] () – C:\WINNT\oraodbc.ini
[2009/06/18 09:27:04 | 000,000,000 | —- | C] () – C:\WINNT\nsreg.dat
[2009/06/04 15:55:28 | 000,000,100 | —- | C] () – C:\WINNT\System32\C000046W.sys
[2009/06/04 13:50:57 | 000,009,082 | —- | C] () – C:\WINNT\cfgall.ini
[2009/06/04 12:12:53 | 000,147,456 | —- | C] () – C:\WINNT\System32\igfxCoIn_v4980.dll
[2009/06/04 12:12:52 | 002,026,604 | —- | C] () – C:\WINNT\System32\igkrng500.bin
[2009/06/04 12:12:47 | 000,442,964 | —- | C] () – C:\WINNT\System32\igcompkrng500.bin
[2009/06/04 12:07:29 | 000,004,569 | —- | C] () – C:\WINNT\System32\secupd.dat
[2009/06/04 12:07:02 | 000,451,444 | —- | C] () – C:\WINNT\System32\perfh009.dat
[2009/06/04 12:07:02 | 000,272,128 | —- | C] () – C:\WINNT\System32\perfi009.dat
[2009/06/04 12:07:02 | 000,074,402 | —- | C] () – C:\WINNT\System32\perfc009.dat
[2009/06/04 12:07:02 | 000,028,626 | —- | C] () – C:\WINNT\System32\perfd009.dat
[2009/06/04 12:06:56 | 000,004,463 | —- | C] () – C:\WINNT\System32\oembios.dat
[2009/06/04 12:06:53 | 013,107,200 | —- | C] () – C:\WINNT\System32\oembios.bin
[2009/06/04 12:06:46 | 000,000,741 | —- | C] () – C:\WINNT\System32\noise.dat
[2009/06/04 12:06:23 | 000,673,088 | —- | C] () – C:\WINNT\System32\mlang.dat
[2009/06/04 12:06:23 | 000,046,258 | —- | C] () – C:\WINNT\System32\mib.bin
[2009/06/04 12:06:00 | 000,218,003 | —- | C] () – C:\WINNT\System32\dssec.dat
[2009/06/04 12:05:47 | 000,001,804 | —- | C] () – C:\WINNT\System32\dcache.bin
[2009/06/04 12:00:36 | 000,000,704 | —- | C] () – C:\WINNT\ODBC.INI
[2009/06/04 11:10:07 | 000,122,880 | —- | C] () – C:\WINNT\System32\zLibDllA.dll
[2009/06/04 11:10:04 | 000,221,184 | —- | C] () – C:\WINNT\System32\zLibDll.dll
[2009/06/04 10:01:51 | 000,002,048 | –S- | C] () – C:\WINNT\bootstat.dat
[2009/06/04 09:59:15 | 000,021,640 | —- | C] () – C:\WINNT\System32\emptyregdb.dat
[2009/06/04 05:50:56 | 000,004,073 | —- | C] () – C:\WINNT\ODBCINST.INI
[2009/06/04 05:50:27 | 000,375,264 | —- | C] () – C:\WINNT\System32\FNTCACHE.DAT
[2008/04/18 10:56:18 | 000,311,296 | —- | C] () – C:\WINNT\System32\siecaces.dll
[2007/04/16 08:01:06 | 000,184,320 | —- | C] () – C:\WINNT\System32\gmp4_2_1.dll
[2007/04/12 03:48:40 | 000,028,672 | —- | C] () – C:\WINNT\System32\siecacsp.dll
[2005/03/31 11:27:18 | 000,073,728 | —- | C] () – C:\WINNT\System32\SGCleanLocalGPO.dll
[2004/03/02 08:29:30 | 000,036,943 | —- | C] () – C:\WINNT\System32\ActPanel.dll
[2003/01/07 10:05:08 | 000,002,695 | —- | C] () – C:\WINNT\System32\OUTLPERF.INI
[2001/07/07 04:00:00 | 000,003,399 | —- | C] () – C:\WINNT\System32\hptcpmon.ini
[2001/03/28 12:37:14 | 000,000,033 | —- | C] () – C:\WINNT\hppcap.ini
[2000/12/29 14:01:20 | 000,872,507 | —- | C] () – C:\WINNT\System32\mesa.dll
[2000/12/10 01:25:52 | 000,000,067 | —- | C] () – C:\WINNT\System32\OEMINFO.INI
[1997/01/13 10:04:36 | 000,102,400 | —- | C] () – C:\WINNT\System32\barcode.dll

========== LOP Check ==========

[2010/11/09 09:41:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AT&T;
[2011/03/13 06:29:19 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\CanonBJ
[2011/01/13 05:38:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EPSON
[2010/11/09 09:41:49 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LG
[2009/10/20 19:11:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2010/08/13 19:26:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Print Audit Inc
[2011/05/01 23:12:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ReaConverter
[2009/09/29 11:06:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SmithMicro
[2011/06/16 10:48:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2010/08/29 17:26:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\The Neat Company
[2009/09/29 11:01:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\US Cellular
[2010/11/09 09:43:26 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\AT&T;
[2009/09/28 10:13:12 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\InterVideo
[2009/06/05 08:42:49 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\Lotus
[2010/08/29 17:41:27 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\Neat
[2010/08/29 17:41:21 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\Nuance
[2010/08/03 03:54:29 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\PC-FAX TX
[2011/05/01 18:10:24 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\RCP 6
[2009/07/15 11:01:38 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\SAP
[2010/04/19 09:55:49 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\SCF
[2010/11/09 09:35:24 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\Sierra Wireless
[2009/09/29 11:01:41 | 000,000,000 | —D | M] – C:\Documents and Settings\dreho00b\Application Data\US Cellular

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009/06/04 10:00:29 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2009/06/04 09:54:26 | 000,000,207 | -HS- | M] () – C:\boot.ini
[2009/06/04 10:00:29 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/06/10 16:36:14 | 2097,041,408 | -HS- | M] () – C:\hiberfil.sys
[2009/06/04 10:00:29 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2009/06/04 10:00:29 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/03 16:38:34 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2010/07/17 08:50:40 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/06/10 16:36:12 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2009/11/13 10:13:35 | 000,028,064 | —- | M] () – C:\Rescued document.txt
[2011/05/11 21:21:28 | 000,000,021 | —- | M] () – C:\tmuninst.ini

< %systemroot%\Fonts\*.com >
[2006/04/18 10:39:28 | 000,026,040 | —- | M] () – C:\WINNT\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 09:53:56 | 000,026,489 | —- | M] () – C:\WINNT\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 10:39:28 | 000,029,779 | —- | M] () – C:\WINNT\Fonts\GlobalSerif.CompositeFont
[2006/06/29 09:58:52 | 000,030,808 | —- | M] () – C:\WINNT\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/04 10:00:15 | 000,000,067 | -HS- | M] () – C:\WINNT\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2010/08/25 05:00:00 | 000,027,648 | —- | M] (CANON INC.) – C:\WINNT\system32\spool\prtprocs\w32x86\CNMPDA9.DLL
[2010/08/25 05:00:00 | 000,073,216 | —- | M] (CANON INC.) – C:\WINNT\system32\spool\prtprocs\w32x86\CNMPPA9.DLL
[2006/10/14 16:43:18 | 000,027,648 | —- | M] (Microsoft Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/08/12 10:58:10 | 000,314,880 | —- | M] (Hewlett-Packard Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\hpfpp082.dll
[2009/06/09 01:43:12 | 000,316,928 | —- | M] (Hewlett-Packard Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\hpfpp092.dll
[2007/01/25 13:24:04 | 000,286,208 | —- | M] (Hewlett-Packard Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\hpzpp4wm.DLL
[2007/11/05 19:06:06 | 000,278,016 | —- | M] (Hewlett-Packard Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\hpzpp5mu.dll
[2009/12/10 04:24:06 | 000,082,168 | —- | M] (Microsoft Corporation.) – C:\WINNT\system32\spool\prtprocs\w32x86\lmdippr8.dll
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\mdippr.dll
[2006/10/14 16:44:44 | 000,671,744 | —- | M] (Microsoft Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\PrintFilterPipelineSvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2009/06/04 05:50:01 | 000,094,208 | —- | M] () – C:\WINNT\system32\config\default.sav
[2009/06/04 05:50:01 | 000,663,552 | —- | M] () – C:\WINNT\system32\config\software.sav
[2009/06/04 05:50:01 | 000,913,408 | —- | M] () – C:\WINNT\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/07/17 08:59:37 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/06/04 16:48:38 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\dreho00b\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2010/08/03 03:29:53 | 045,764,752 | —- | M] (A.I.SOFT,INC.) – C:\Documents and Settings\dreho00b\Desktop\295-INST-A.EXE
[2011/01/13 04:25:07 | 008,522,176 | —- | M] (Siemens Energy, Inc. ) – C:\Documents and Settings\dreho00b\Desktop\ePlotter Setup.exe
[2011/06/16 10:29:58 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\dreho00b\Desktop\HiJackThis.exe
[2011/06/16 10:42:50 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\dreho00b\Desktop\OTL.exe
[2010/01/07 22:36:13 | 537,872,064 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\dreho00b\Desktop\X16-18984.exe

< %PROGRAMFILES%\Common Files\*.* >
[2009/05/08 05:43:40 | 000,040,960 | —- | M] (SAP-TECHNOLOGY) – C:\Program Files\Common Files\DigitalSignature.ocx
[2010/01/11 23:22:32 | 001,167,872 | —- | M] () – C:\Program Files\Common Files\SAPActiveXL.xlt
[2010/01/11 23:22:32 | 000,949,760 | —- | M] () – C:\Program Files\Common Files\SAPActiveXL_nosig.xlt
[2009/05/08 05:43:40 | 000,626,688 | —- | M] (SAP AG) – C:\Program Files\Common Files\sapconsaccess.dll
[2009/05/08 05:43:40 | 000,192,512 | —- | M] (SAP Tech Inc.) – C:\Program Files\Common Files\sapconsr3.dll
[2009/05/08 05:43:40 | 003,145,728 | —- | M] (SAP Technology,Inc) – C:\Program Files\Common Files\sapxlhelper.dll

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
"UseWUServer" = 1
"NoAutoUpdate" = 1

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2009-12-03 01:38:58

< End of report >


Extras.txt:

OTL Extras logfile created on: 6/16/2011 10:44:55 AM - Run 1
OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\dreho00b\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.95 Gb Total Physical Memory | 0.69 Gb Available Physical Memory | 35.40% Memory free
3.80 Gb Paging File | 2.92 Gb Available in Paging File | 76.95% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINNT | %ProgramFiles% = C:\Program Files
Drive C: | 74.53 Gb Total Space | 43.21 Gb Free Space | 57.98% Space Free | Partition Type: NTFS

Computer Name: W72C-G55K6K1 | User Name: DREHO00B | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l
.js [@ = JSFile] – Reg Error: Key error. File not found
.jse [@ = JSEFile] – Reg Error: Key error. File not found
.vbe [@ = VBEFile] – Reg Error: Key error. File not found
.vbs [@ = VBSFile] – Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.exe [@ = exefile] – Reg Error: Key error. File not found
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
jsfile – Reg Error: Key error.
jsfile [open] – Reg Error: Key error.
jsfile [print] – Reg Error: Key error.
jsefile – Reg Error: Key error.
jsefile [open] – Reg Error: Key error.
jsefile [print] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
vbefile – Reg Error: Key error.
vbefile [open] – Reg Error: Key error.
vbefile [print] – Reg Error: Key error.
vbsfile – Reg Error: Key error.
vbsfile [open] – Reg Error: Key error.
vbsfile [print] – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall" = 0
"DisableUnicastResponseToMulticastBroadcast" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications]
"AllowUserPrefMerge" = 0
"Enabled" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List]
"%ProgramFiles%\Legato\nsr\bin\nsrexecd.exe:*:Enabled:NetWorker Client" = %ProgramFiles%\Legato\nsr\bin\nsrexecd.exe:*:Enabled:NetWorker Client
"%programfiles%\NetMeeting\conf.exe:*:enabled:Netmeeting" = %programfiles%\NetMeeting\conf.exe:*:enabled:Netmeeting – (Microsoft Corporation)
"%ProgramFiles%\nsr\bin\nsrexecd.exe:*:Enabled:NetWorker Client" = %ProgramFiles%\nsr\bin\nsrexecd.exe:*:Enabled:NetWorker Client
"%programfiles%\OfficeScan NT\tmlisten.exe:*:Enabled:TrendMicro Officescan" = %programfiles%\OfficeScan NT\tmlisten.exe:*:Enabled:TrendMicro Officescan – (Trend Micro Inc.)
"%programfiles%\Rational\Clearcase\bin\albd_server.exe:*:enabled:Clearcase" = %programfiles%\Rational\Clearcase\bin\albd_server.exe:*:enabled:Clearcase

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts]
"AllowUserPrefMerge" = 0
"Enabled" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List]
"2701:TCP:*:enabled:SMS Allows general contact, reboot, and ping" = 2701:TCP:*:enabled:SMS Allows general contact, reboot, and ping
"2702:TCP:*:enabled:SMS Remote Control" = 2702:TCP:*:enabled:SMS Remote Control
"2703:TCP:*:enabled:SMS Chat" = 2703:TCP:*:enabled:SMS Chat
"2704:TCP:*:enabled:SMS File Transfer" = 2704:TCP:*:enabled:SMS File Transfer
"32774:TCP:*:enabled:TrendMicro OfficeScan Listener" = 32774:TCP:*:enabled:TrendMicro OfficeScan Listener
"371:UDP:*:enabled:Clearcase" = 371:UDP:*:enabled:Clearcase
"6000:TCP:*:enabled:Exceed" = 6000:TCP:*:enabled:Exceed

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings]
"AllowOutboundDestinationUnreachable" = 1
"AllowOutboundSourceQuench" = 1
"AllowRedirect" = 0
"AllowInboundEchoRequest" = 1
"AllowInboundRouterRequest" = 0
"AllowOutboundTimeExceeded" = 1
"AllowOutboundParameterProblem" = 1
"AllowInboundTimestampRequest" = 1
"AllowInboundMaskRequest" = 0
"AllowOutboundPacketTooBig" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging]
"LogDroppedPackets" = 1
"LogSuccessfulConnections" = 1
"LogFilePath" = %windir%\wf.log – ()
"LogFileSize" = 4096

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings]
"Enabled" = 1
"RemoteAddresses" =

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint]
"Enabled" = 1
"RemoteAddresses" =

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop]
"Enabled" = 1
"RemoteAddresses" =

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework]
"Enabled" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
"DoNotAllowExceptions" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0
"EnableFirewall" = 1
"DisableUnicastResponseToMulticastBroadcast" = 0
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications]
"AllowUserPrefMerge" = 0
"Enabled" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications\List]
"%programfiles%\officescan nt\tmlisten.exe:*:enabled:TrendMicro Officescan" = %programfiles%\OfficeScan NT\tmlisten.exe:*:Enabled:TrendMicro Officescan – (Trend Micro Inc.)
"%programfiles%\Microsoft ActiveSync\CEAPPMGR.EXE:*:Enabled:Active Sync" = %programfiles%\Microsoft ActiveSync\CEAPPMGR.EXE:*:Enabled:Active Sync
"%programfiles%\Microsoft ActiveSync\rapimgr.exe:*:Enabled:Active Sync" = %programfiles%\Microsoft ActiveSync\rapimgr.exe:*:Enabled:Active Sync
"%programfiles%\Microsoft ActiveSync\wcescomm.exe:*:Enabled:Active Sync" = %programfiles%\Microsoft ActiveSync\wcescomm.exe:*:Enabled:Active Sync
"%programfiles%\Microsoft ActiveSync\WCESMgr.exe:*:Enabled:Active Sync" = %programfiles%\Microsoft ActiveSync\WCESMgr.exe:*:Enabled:Active Sync
"%programfiles%\NetMeeting\conf.exe:*:enabled:Netmeeting" = %programfiles%\NetMeeting\conf.exe:*:enabled:Netmeeting – (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts]
"AllowUserPrefMerge" = 0
"Enabled" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts\List]
"26675:TCP:*:enabled:Active Sync" = 26675:TCP:*:enabled:Active Sync
"32774:TCP:*:enabled:TrendMicro OfficeScan Listener" = 32774:TCP:*:enabled:TrendMicro OfficeScan Listener
"6000:TCP:*:enabled:Exceed X-Server0" = 6000:TCP:*:enabled:Exceed X-Server0

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings]
"AllowOutboundDestinationUnreachable" = 1
"AllowOutboundSourceQuench" = 1
"AllowRedirect" = 0
"AllowInboundEchoRequest" = 1
"AllowInboundRouterRequest" = 0
"AllowOutboundTimeExceeded" = 1
"AllowOutboundParameterProblem" = 1
"AllowInboundTimestampRequest" = 1
"AllowInboundMaskRequest" = 0
"AllowOutboundPacketTooBig" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging]
"LogDroppedPackets" = 1
"LogSuccessfulConnections" = 1
"LogFilePath" = %windir%\wf_ext.log – ()
"LogFileSize" = 4096

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework]
"Enabled" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DoNotAllowExceptions" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DoNotAllowExceptions" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
"24881:TCP" = 24881:TCP:*:Enabled:Trend Micro OfficeScan Listener

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"X:\setup\hpznui01.exe" = X:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – ()
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe – (TODO: )
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – ()
"C:\Program Files\HP\Digital Imaging\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}\setup\hpznui01.exe" = C:\Program Files\HP\Digital Imaging\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}\setup\hpznui01.exe:*:Enabled:hpznui01.exe – (Hewlett-Packard)
"C:\Program Files\Ricoh\PCS Director\Client\pa6clint.exe" = C:\Program Files\Ricoh\PCS Director\Client\pa6clint.exe:LocalSubNet:Enabled:Print Audit 6 Client – (PJLM Software Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"X:\setup\hpznui01.exe" = X:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – ()
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe – (TODO: )
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – ()
"C:\Program Files\HP\Digital Imaging\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}\setup\hpznui01.exe" = C:\Program Files\HP\Digital Imaging\{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}\setup\hpznui01.exe:*:Enabled:hpznui01.exe – (Hewlett-Packard)
"C:\Program Files\Ricoh\PCS Director\Client\pa6clint.exe" = C:\Program Files\Ricoh\PCS Director\Client\pa6clint.exe:LocalSubNet:Enabled:Print Audit 6 Client – (PJLM Software Inc.)
"C:\Program Files\AT&T;\Communication Manager\SwiApiMux.exe" = C:\Program Files\AT&T;\Communication Manager\SwiApiMux.exe:*:Enabled:SwiApiMux – (Sierra Wireless, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01CAD98A-79B1-43B2-8189-B834DFFF82BB}" = PCS Director
"{0A5825FD-0FB7-4e45-9037-858D463F2943}" = BPDSoftware
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP495_series" = Canon MP495 series MP Drivers
"{11A53AF3-CAA5-4C29-887E-CCA7CEE2689B}" = Neat Mobile Scanner Driver
"{12FE86D4-77FA-4FC7-8C23-A988E72FC5A5}" = hpp3390usg
"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService
"{195F2C6C-A343-4b10-B1A4-3F00AB9E9DD9}" = Fax
"{19E00662-723E-4049-5CC5-000000000004}" = PKI Basic Client 4.0
"{1A748F80-F0D9-4E0E-AA17-DA940E355864}" = Access Manager
"{1DD670BE-C678-4D83-89D0-E7CF65D8DB98}" = hppManuals3390
"{24739100-AD64-40C0-936C-03590B95C225}" = hppSendFax
"{2609EDF1-34C4-4B03-B634-55F3B3BC4931}" = Configuration Manager Client
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 20
"{2951A232-69BA-4925-BB9A-CEEB72B18B4F}" = BPDSoftware_Ini
"{2EE64949-117D-4539-A2B8-24C56C28CB6E}" = Flash Player 10.2
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{30C2913B-C65F-4D00-9BC3-65926E50D7B0}" = Java 2 Runtime Environment 1.6.0_22
"{3345D22C-4306-45D0-A290-2054FE1BD976}" = Siemens Corporate Forms
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant
"{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime
"{38DAE5F5-EC70-4aa5-801B-D11CA0A33B41}" = BPDSoftware
"{398E8625-6F3A-4C54-B54C-28F0ABB89774}" = BPD_HPSU
"{3A4D5E2D-988D-4ee9-8E7F-3AC200A2B8F5}" = 4500G510nz_Software_Min
"{3CBF4170-BE13-43D1-B74D-DC9E04C86836}" = Media Player 11.0
"{3FA5533E-FE61-445F-90E9-22927EEEF709}" = Java 2 Runtime Environment International 1.5.0_20
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{5031D7A2-C536-41EA-9E9C-1927F4741373}" = Office2003 upgrade Launcher
"{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery
"{53BA7B3C-6FE5-437C-AA6E-BA2758192F14}" = WW007 Basic Environment
"{572F2A62-70CD-4429-8758-6D4D6DC696E1}" = 4500_Help
"{57DA304D-27B0-40D1-A796-92CEFF20FA32}" = hppIOFiles
"{57F5920A-9897-4830-BD4A-BE85DA9734FF}" = Neat Mobile Scanner 2008 Driver
"{57F60D52-630B-43C5-BD20-176F5CD4EED6}" = bpd_scan
"{58155B30-6BE9-4268-A059-149629149C63}" = Neat ADF Scanner Driver
"{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp
"{5B05FF91-F20C-4832-A8DE-E1912639C17C}" = 4500G510nz
"{5B32A23C-2BB0-4767-8150-F977E43E7E2A}" = hppscan3390
"{5BB4D7C1-52F2-4BFD-9E40-0D419E2E3021}" = bpd_scan
"{5F2E94AE-BAC0-41A3-A974-AA91997CE842}" = Java Selector 1.5
"{65845D69-D23B-4BF6-A818-7B27C8227C72}" = Oracle SQL-Net Client
"{6697D99E-E550-4498-B793-4A8DD8A1821F}" = ProductContext
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67ADAC89-5261-4DBA-90E8-EF175C0B25B0}" = PMAC
"{690879A5-18EF-447B-98D6-B699D51008AB}" = 4500_G510nz_Help
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{695B7633-E613-4C30-AC74-FD8C1F7B8F40}" = Application Consistency Checker
"{6A1D78BC-99E4-49EB-9F2C-F8FD947294AE}" = Shockwave Player 11.5
"{6B2764B1-F062-4481-94FD-58B1C211C448}" = Lotus Notes
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6BCB9EBC-CF98-43AD-BAE7-4C8077E310D8}" = Desktop Restore
"{6BF66AED-3EA4-4106-B240-5CE96C9B76B0}" = Brother MFL-Pro Suite MFC-295CN
"{6C64AB8C-F78B-45C0-98E3-6DE9702E0225}" = Microsoft Office Live Meeting 2007
"{6CC080F1-2E00-41D5-BE47-A3BC784E9DFB}" = BPDSoftware_Ini
"{6D634543-B5D3-40B4-A336-E1761F92B2EC}" = GUI
"{6EDB3FC5-8B7C-422A-B4FB-1D919F44F2C0}" = Neat Mobile Scanner (Silver) Driver
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{721ABC3B-5F12-4332-9C0C-C11424EF666C}" = WIMGAPI
"{7642C5E3-0E6D-48E5-AE0B-A4878362711E}" = hppToolBoxFX
"{7854BCAB-BA49-4356-B2F9-AA6B3735603C}" = Live Automation Agent
"{789EB9AA-27E6-4720-8A56-167581F97F97}" = SafeGuard Easy
"{795A3A1E-E06A-4214-A2EF-3DDF3BA05C2B}" = STOPzilla
"{7BD1EAE4-2E08-4087-8600-44B0ACB0C887}" = NeatWorks Core Files
"{7C3CE5C5-EC36-484C-89A3-2AE1E298E65C}" = Diskeeper
"{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}" = HP Officejet 4500 G510n-z
"{7F74CEA1-42B0-4D9F-9041-024070F65EE1}" = WinDVD
"{7FB6B1B7-075B-4B7F-BEB6-97584F73C7B5}" = Brother MFL-Pro Suite MFC-J615W
"{8038AEF9-EF53-4B55-97CA-CF3D8574C135}" = hpzTLBXFX
"{82E0CA13-B3B2-46B9-AD60-AE10DBE891A1}" = US Cellular QuickLink Mobile
"{831C105F-582D-47AC-89AE-3AA387C4A708}" = Autovue for Java (JVue)
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83E016DD-1566-457E-B65C-B531186CED56}" = hppfaxdrv3390
"{83E45ABF-E9BD-4AE1-95FC-D0516ABA658E}" = Siemens LogCollector
"{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{901E0407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 German User Interface Pack
"{901E040C-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 French User Interface Pack
"{901E0C0A-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Spanish User Interface Pack
"{901F0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Proofing Tools
"{903B0409-6000-11D3-8CFE-0150048383C9}" = Project Professional 2003
"{90F80409-6000-11D3-8CFE-0150048383C9}" = Office 2003/XP Remove Hidden Data Tool
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{92F0B809-0D52-48CF-9694-23E500DF6AA6}" = hppLJ3390
"{95120000-0052-0409-0000-0000000FF1CE}" = Microsoft Office Visio Viewer 2007
"{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch
"{9651D2CF-B973-4F96-9D49-7D499000EC21}" = hppScanTo
"{98332721-FF62-45F6-99EA-7872C962BCAA}" = SMS Wrapper
"{987CAEDE-EB67-4D5A-B0C0-AE0640A17B5F}" = Microsoft Conferencing Add-in for Microsoft Office Outlook
"{98E8A2EF-4EAE-43B8-A172-74842B764777}" = InterVideo WinDVD 4
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status
"{A12C1A2B-3AD3-4165-B961-45D455701D30}" = SAPGUI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4A42670-82B9-4A58-8955-20271DBBF29F}" = Neat ADF Scanner 2008 Driver
"{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}" = SolutionCenter
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-1033-F400-BA7E-000000000004}" = Adobe Acrobat 9 Standard - English, Français, Deutsch
"{AC76BA86-1033-F400-BA7E-000000000004}_941" = Adobe Acrobat 9.4.1 - CPSID_83708
"{AC76BA86-1033-F400-BA7E-000000000004}{AC76BA86-1033-F400-BA7E-000000000004}" = Adobe Acrobat 9 Standard - English, Français, Deutsch
"{B2455727-ED8F-4643-8A6E-F4AB8DE3633D}" = Network
"{B3A6F8E3-068D-4522-9D4E-E750BEA5C889}" = WinZip 9.0 SR-1 English
"{B43357AA-3A6D-4D94-B56E-43C44D09E548}" = Microsoft .NET Framework (English)
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C355867A-F5BB-4F90-BE82-DA0FEBBBFE22}" = AT&T; Communication Manager
"{CA56FE36-091E-4914-A70A-93E3C09D3093}" = hppTooCool
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD0773D5-C18E-495c-B39B-21A96415EDD5}" = HP Officejet J4500 Series
"{CD906B13-633D-48E9-A949-E6454BD0AE13}" = Schriftart code_128ttf
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D1550003-77DB-489B-A6E9-41F1A8403A88}" = FileSync
"{D2169E0C-1C6A-4B83-BD30-9E8DADE1C391}" = hppFaxUtility
"{D4D8803A-A3DA-4A04-B738-EBF7830FBF1F}" = SMOC
"{D7AB1340-3DB1-4135-87D1-1E2DF0288393}" = Field Report Writer 5.2.0
"{D8AC1EB5-E8B0-44A0-B113-899407188A2F}" = hppFonts
"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component
"{D9FFE006-E043-4463-A3A0-D10B58A8314F}" = Password Power
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DE13432E-F0C1-4842-A5BA-CC997DA72A70}" = 6500_E709_eDocs
"{DEAECFA9-FC4E-4AE5-9B1B-14A3A7EC1DE8}" = Capicom
"{E5BA0430-919F-46DD-B656-0796F8A5ADFF}" = Microsoft Office Communicator 2007
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{ECEA7878-2100-4525-915D-B09174E36971}" = Trend Micro OfficeScan Client
"{EF964A78-078C-11D1-B7A7-0000C0134CE6}" = Nortel Networks Contivity VPN Client
"{FA0F0A01-4631-4161-A6C2-948BF694382E}" = HP Officejet 6500 E709 Series
"{FB45544C-E331-4046-941F-36540116A609}" = CAT Bulletin Board
"{FDEC11CC-4BD6-4a8c-A398-3CCD8E43EACA}" = J4500
"{FF0AA9D2-CAE9-4E68-B155-459E6CDC1C68}" = Oracle Jinitiator 1.3.1.18
"Access Manager" = Access Manager
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ePlotter 1.1.0" = ePlotter 1.1.0
"EPSON WorkForce 610 Series" = EPSON WorkForce 610 Series Printer Uninstall
"HDMI" = Intel® Graphics Media Accelerator Driver
"HP Imaging Device Functions" = HP Imaging Device Functions 10.0
"HP LaserJet 3050/3052/3055/3390/3392" = HP LaserJet 3050/3052/3055/3390/3392 4.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 10.0
"HPExtendedCapabilities" = HP Customer Participation Program 12.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"IE7-MUI" = Windows Internet Explorer 7 Multilingual User Interface (MUI)
"Lookout" = Lookout
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Visual Studio 2005 Tools for Office Runtime" = Microsoft Visual Studio 2005 Tools for Office Runtime
"Mozilla Firefox (3.5.19)" = Mozilla Firefox (3.5.19)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NeatWorks" = NeatWorks
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PowerShell" = Windows PowerShell™ 1.0
"RDC" = RDC
"ReaConverter 6.0 Pro_is1" = ReaConverter 6.0 Pro
"SAPBI" = SAP Business Explorer
"SAPGUI710" = SAP GUI 7.10
"ST6UNST #1" = PSDS Handheld
"ST6UNST #2" = Tap Test
"ST6UNST #3" = Tube to Tube
"ST6UNST #4" = DC Hipot Software
"ST6UNST #5" = PSDS PC Software
"ST6UNST #6" = Tube to Tube (C:\Program Files\Tube to Tube\)
"ST6UNST #7" = Tap Test (C:\Program Files\Tap Test\)
"ST6UNST #8" = PSDS PC Software (C:\Program Files\PSDS Handheld\)
"VLC media player" = VLC media player 1.1.4
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 6/16/2011 10:14:38 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\EUsers\E72\E72K\flag\U)-(Users.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:24:41 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\ECatComputers\E72\E72K\flag\C.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:24:41 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\EUsers\flag\U.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:24:41 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\EUsers\E72\E72K\flag\U)-(Users.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:34:38 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\ECatComputers\E72\E72K\flag\C.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:34:38 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\EUsers\flag\U.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:34:38 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\EUsers\E72\E72K\flag\U)-(Users.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:44:38 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\ECatComputers\E72\E72K\flag\C.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:44:38 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\EUsers\flag\U.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

Error - 6/16/2011 10:44:38 AM | Computer Name = W72C-G55K6K1 | Source = CBB | ID = 1
Description = Error polling flagfile. File: \\ww007.siemens.net\dfs\cbb\EUsers\E72\E72K\flag\U)-(Users.xml,
Errorcode: -2147024894, Errormessage: The system cannot find the file specified.

[ System Events ]
Error - 6/15/2011 7:18:52 PM | Computer Name = W72C-G55K6K1 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 29 minutes. NtpClient has no source of accurate
time.

Error - 6/15/2011 7:48:53 PM | Computer Name = W72C-G55K6K1 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 59 minutes. NtpClient has no source of accurate
time.

Error - 6/15/2011 8:48:55 PM | Computer Name = W72C-G55K6K1 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 119 minutes. NtpClient has no source of accurate
time.

Error - 6/15/2011 9:44:17 PM | Computer Name = W72C-G55K6K1 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain WW007 due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.

Error - 6/15/2011 9:49:35 PM | Computer Name = W72C-G55K6K1 | Source = DCOM | ID = 10010
Description = The server {80EE4901-33A8-11D1-A213-0080C88593A5} did not register
with DCOM within the required timeout.

Error - 6/15/2011 10:48:58 PM | Computer Name = W72C-G55K6K1 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 239 minutes. NtpClient has no source of accurate
time.

Error - 6/16/2011 2:49:01 AM | Computer Name = W72C-G55K6K1 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 479 minutes. NtpClient has no source of accurate
time.

Error - 6/16/2011 3:47:39 AM | Computer Name = W72C-G55K6K1 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain WW007 due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.

Error - 6/16/2011 9:50:59 AM | Computer Name = W72C-G55K6K1 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain WW007 due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.

Error - 6/16/2011 10:49:03 AM | Computer Name = W72C-G55K6K1 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 959 minutes. NtpClient has no source of accurate
time.


< End of report >