Please help - IE Locks up, slow PC - Tool/Kex?

My IE is locking up and my computer is running really slow. McAfee found something called tool/kex but it wasn't able to remove it. Here are my reports. Thanks.

OTL logfile created on: 7/1/2011 4:50:06 PM - Run 1
OTL by OldTimer - Version 3.2.25.0 Folder = C:Documents and SettingsJimDesktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1023.00 Mb Total Physical Memory | 363.28 Mb Available Physical Memory | 35.51% Memory free
2.40 Gb Paging File | 1.87 Gb Available in Paging File | 77.93% Paging File free
Paging file location(s): C:pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 111.72 Gb Total Space | 26.61 Gb Free Space | 23.82% Space Free | Partition Type: NTFS

Computer Name: DADSOFFICE | User Name: Jim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:Documents and SettingsJimDesktopOTL.exe (OldTimer Tools)
PRC - C:Program FilesCommon FilesMcAfeeSystemCoremfefire.exe (McAfee, Inc.)
PRC - C:Program FilesCommon FilesMcAfeeSystemCoremcshield.exe (McAfee, Inc.)
PRC - C:WINDOWSSYSTEM32mfevtps.exe (McAfee, Inc.)
PRC - C:Program FilesMcAfee.comAgentmcagent.exe (McAfee, Inc.)
PRC - c:Program FilesMcAfeeMSCmcupdmgr.exe (McAfee, Inc.)
PRC - c:Program FilesMcAfee.comAgentmcupdate.exe (McAfee, Inc.)
PRC - C:Program FilesDivXDivX UpdateDivXUpdate.exe ()
PRC - C:Program FilesMcAfeeVirusScanmcods.exe (McAfee, Inc.)
PRC - C:Program FilesMcAfee Online BackupMOBKbackup.exe (McAfee, Inc.)
PRC - C:Program FilesCommon FilesMcAfeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
PRC - C:WINDOWSexplorer.exe (Microsoft Corporation)
PRC - C:Program FilesViewpointCommonViewpointService.exe (Viewpoint Corporation)
PRC - C:WINDOWSUMStorRes.exe (ali)
PRC - C:Program FilesViewpointViewpoint ManagerViewMgr.exe (Viewpoint Corporation)


========== Modules (SafeList) ==========

MOD - C:Documents and SettingsJimDesktopOTL.exe (OldTimer Tools)
MOD - c:Program FilesMcAfeeSiteAdvisorsahook.dll (McAfee, Inc.)
MOD - C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (mfefire) – C:Program FilesCommon FilesMcAfeeSystemCoremfefire.exe (McAfee, Inc.)
SRV - (McShield) – C:Program FilesCommon FilesMcAfeeSystemCoremcshield.exe ()
SRV - (mfevtp) – C:WINDOWSSYSTEM32mfevtps.exe (McAfee, Inc.)
SRV - (0029611309525111mcinstcleanup) McAfee Application Installer Cleanup (0029611309525111) – C:WINDOWSTemp\0029611309525111mcinst.exe (McAfee, Inc.)
SRV - (McODS) – C:Program FilesMcAfeeVirusScanmcods.exe (McAfee, Inc.)
SRV - (nosGetPlusHelper) getPlus® – C:Program FilesNOSbingetPlus_Helper_3004.dll (NOS Microsystems Ltd.)
SRV - (MOBKbackup) – C:Program FilesMcAfee Online BackupMOBKbackup.exe (McAfee, Inc.)
SRV - (MSK80Service) – C:Program FilesCommon FilesMcafeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
SRV - (McProxy) – C:Program FilesCommon FilesMcAfeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
SRV - (McNASvc) – C:Program FilesCommon FilesMcAfeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
SRV - (McNaiAnn) – C:Program FilesCommon FilesMcAfeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
SRV - (mcmscsvc) – C:Program FilesCommon FilesMcAfeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
SRV - (McMPFSvc) – C:Program FilesCommon FilesMcafeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
SRV - (McAfee SiteAdvisor Service) – C:Program FilesCommon FilesMcafeeMcSvcHostMcSvHost.exe (McAfee, Inc.)
SRV - (getPlusHelper) getPlus® – C:Program FilesNOSbingetPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (DSBrokerService) – C:Program FilesDellSupportbrkrsvc.exe ()
SRV - (Viewpoint Manager Service) – C:Program FilesViewpointCommonViewpointService.exe (Viewpoint Corporation)
SRV - (NetSvc) – C:Program FilesIntelNCSSyncNetSvc.exe (Intel® Corporation)


========== Driver Services (SafeList) ==========

DRV - (mfehidk) – C:WINDOWSsystem32driversmfehidk.sys (McAfee, Inc.)
DRV - (mfefirek) – C:WINDOWSSYSTEM32DRIVERSmfefirek.sys (McAfee, Inc.)
DRV - (mfeavfk) – C:WINDOWSSYSTEM32DRIVERSmfeavfk.sys (McAfee, Inc.)
DRV - (mfeapfk) – C:WINDOWSSYSTEM32DRIVERSmfeapfk.sys (McAfee, Inc.)
DRV - (mfendiskmp) – C:WINDOWSSYSTEM32DRIVERSmfendisk.sys (McAfee, Inc.)
DRV - (mfendisk) – C:WINDOWSSYSTEM32DRIVERSmfendisk.sys (McAfee, Inc.)
DRV - (mferkdet) – C:WINDOWSSYSTEM32DRIVERSmferkdet.sys (McAfee, Inc.)
DRV - (mfetdi2k) – C:WINDOWSSYSTEM32DRIVERSmfetdi2k.sys (McAfee, Inc.)
DRV - (cfwids) – C:WINDOWSSYSTEM32DRIVERScfwids.sys (McAfee, Inc.)
DRV - (mfebopk) – C:WINDOWSSYSTEM32DRIVERSmfebopk.sys (McAfee, Inc.)
DRV - (MOBKFilter) – C:WINDOWSSYSTEM32DRIVERSMOBK.sys (Mozy, Inc.)
DRV - (mfesmfk) – C:WINDOWSSYSTEM32DRIVERSmfesmfk.sys (McAfee, Inc.)
DRV - (mferkdk) – C:WINDOWSSYSTEM32DRIVERSmferkdk.sys (McAfee, Inc.)
DRV - (RT80x86) – C:WINDOWSSYSTEM32DRIVERSrt2860.sys (Ralink Technology, Corp.)
DRV - (gameenum) – C:WINDOWSSYSTEM32DRIVERSgameenum.sys (Microsoft Corporation)
DRV - (dsunidrv) – C:WINDOWSSYSTEM32DRIVERSdsunidrv.sys (Gteko Ltd.)
DRV - (ASTRA32) – C:Program FilesASTRA32astra32.sys (Licensed for Sysinfo Lab)
DRV - (DSproct) – C:Program FilesDellSupportGTActiontriggersDSproct.sys (Gteko Ltd.)
DRV - (RT61) Linksys Wireless-G PCI Adapter Driver(RT61) – C:WINDOWSSYSTEM32DRIVERSrt61.sys (Ralink Technology Inc.)
DRV - (iAimFP4) – C:WINDOWSSYSTEM32DRIVERSwvchntxx.sys (Intel® Corporation)
DRV - (iAimFP3) – C:WINDOWSSYSTEM32DRIVERSwsiintxx.sys (Intel® Corporation)
DRV - (iAimTV4) – C:WINDOWSSYSTEM32DRIVERSwch7xxnt.sys (Intel® Corporation)
DRV - (iAimTV3) – C:WINDOWSSYSTEM32DRIVERSwatv04nt.sys (Intel® Corporation)
DRV - (iAimTV1) – C:WINDOWSSYSTEM32DRIVERSwatv02nt.sys (Intel® Corporation)
DRV - (iAimTV0) – C:WINDOWSSYSTEM32DRIVERSwatv01nt.sys (Intel® Corporation)
DRV - (iAimFP0) – C:WINDOWSSYSTEM32DRIVERSwadv01nt.sys (Intel® Corporation)
DRV - (iAimFP1) – C:WINDOWSSYSTEM32DRIVERSwadv02nt.sys (Intel® Corporation)
DRV - (iAimFP2) – C:WINDOWSSYSTEM32DRIVERSwadv05nt.sys (Intel® Corporation)
DRV - (i81x) – C:WINDOWSSYSTEM32DRIVERSi81xnt5.sys (Intel® Corporation)
DRV - (ati2mtag) – C:WINDOWSSYSTEM32DRIVERSati2mtag.sys (ATI Technologies Inc.)
DRV - (cdrbsdrv) – C:WINDOWSSystem32driversCDRBSDRV.SYS (B.H.A Corporation)
DRV - (GTNDIS5) – C:WINDOWSSYSTEM32GTNDIS5.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (P16X) Creative SB Live! Series (WDM) – C:WINDOWSSYSTEM32DRIVERSP16X.sys (Creative Technology Ltd.)
DRV - (HSFHWBS2) – C:WINDOWSSYSTEM32DRIVERSHSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:WINDOWSSYSTEM32DRIVERSHSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:WINDOWSSYSTEM32DRIVERSHSF_DP.sys (Conexant Systems, Inc.)
DRV - (omci) – C:WINDOWSSYSTEM32DRIVERSomci.sys (Dell Computer Corporation)
DRV - (sonypvs1) – C:WINDOWSSYSTEM32DRIVERSsonypvs1.sys (Sony Corporation)
DRV - (EL90XBC) – C:WINDOWSSYSTEM32DRIVERSEL90XBC5.SYS (3Com Corporation)
DRV - (PfModNT) – C:WINDOWSSYSTEM32PFMODNT.SYS (Creative Technology Ltd.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Search Bar = http://www.google.com/ie
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,SearchMigratedDefaultName = Google
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerm…tf8&oe;=utf8
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.google.com/
IE - HKCU..URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:Program FilesMcAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Secure Search"
FF - prefs.js..browser.search.selectedEngine: "Secure Search"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/ig?hl=en"
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.3.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=mcafee&p;="

FF - HKLMsoftwaremozillaFirefoxExtensions{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:Program FilesMcAfeeSiteAdvisor [2011/05/24 19:07:04 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaMozilla Firefox 3.6.18extensionsComponents: C:Program FilesMozilla Firefoxcomponents [2011/06/24 13:38:50 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaMozilla Firefox 3.6.18extensionsPlugins: C:Program FilesMozilla Firefoxplugins [2011/06/24 13:35:11 | 000,000,000 | —D | M]

[2010/10/20 13:50:30 | 000,000,000 | —D | M] (No name found) – C:Documents and SettingsJimApplication DataMozillaExtensions
[2011/07/01 09:22:34 | 000,000,000 | —D | M] (No name found) – C:Documents and SettingsJimApplication DataMozillaFirefoxProfilesece8zf91.defaultextensions
[2010/11/19 12:35:39 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:Documents and SettingsJimApplication DataMozillaFirefoxProfilesece8zf91.defaultextensions{20a82645-c095-46ed-80e3-08825760534b}
[2011/07/01 09:22:34 | 000,000,000 | —D | M] (No name found) – C:Program FilesMozilla Firefoxextensions
[2010/11/28 14:52:56 | 000,000,000 | —D | M] (Java Console) – C:Program FilesMozilla Firefoxextensions{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/02/05 22:15:21 | 000,000,000 | —D | M] (Java Console) – C:Program FilesMozilla Firefoxextensions{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/03/30 08:51:28 | 000,000,000 | —D | M] (Java Console) – C:Program FilesMozilla Firefoxextensions{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/06/29 08:44:13 | 000,000,000 | —D | M] (Java Console) – C:Program FilesMozilla Firefoxextensions{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2008/11/21 23:52:17 | 000,000,000 | —D | M] (Java Quick Starter) – C:PROGRAM FILESJAVAJRE6LIBDEPLOYJQSFF
[2011/05/24 19:07:04 | 000,000,000 | —D | M] (McAfee SiteAdvisor) – C:PROGRAM FILESMCAFEESITEADVISOR
[2011/04/14 14:01:38 | 000,024,376 | —- | M] (McAfee, Inc.) – C:Program Filesmozilla firefoxcomponentsScriptff.dll
[2011/05/04 04:52:23 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:Program Filesmozilla firefoxpluginsnpdeployJava1.dll
[2011/04/22 10:08:46 | 000,002,024 | —- | M] () – C:Program Filesmozilla firefoxsearchpluginsMcSiteAdvisor.xml

O1 HOSTS File: ([2005/10/03 20:08:07 | 000,000,734 | —- | M]) - C:WINDOWSSYSTEM32DRIVERSETCHOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:Program FilesMcAfeeMSKmskapbho.dll ()
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:Program FilesCommon FilesMcAfeeSystemCoreScriptSn.20110513182454.dll (McAfee, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.6.5805.1910swg.dll (Google Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:Program FilesMcAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
O3 - HKLM..Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:Program FilesMcAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
O3 - HKCU..ToolbarWebBrowser: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - No CLSID value found.
O3 - HKCU..ToolbarWebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..Run: [DivXUpdate] C:Program FilesDivXDivX UpdateDivXUpdate.exe ()
O4 - HKLM..Run: [mcui_exe] C:Program FilesMcAfee.comAgentmcagent.exe (McAfee, Inc.)
O4 - HKLM..Run: [USB Storage Toolbox] C:WINDOWSUMStorRes.exe (ali)
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: =
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = _ [binary data]
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoCDBurning = 0
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: HonorAutoRunSetting = 1
O7 - HKCUSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O7 - HKCUSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: NoDispScrSavPage = 0
O7 - HKCUSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: NoDispCPL = 0
O10 - NameSpace_Catalog5Catalog_Entries\000000000004 [] - C:Program FilesBonjourmdnsNSP.dll (Apple Inc.)
O15 - HKCU..Trusted Domains: internet ([]about in Trusted sites)
O15 - HKCU..Trusted Domains: mcafee.com ([]http in Trusted sites)
O15 - HKCU..Trusted Domains: mcafee.com ([]https in Trusted sites)
O15 - HKCU..Trusted Domains: microsoft.com ([*.update] http in Trusted sites)
O15 - HKCU..Trusted Domains: microsoft.com ([*.update] https in Trusted sites)
O15 - HKCU..Trusted Domains: windowsupdate.com ([download] http in Trusted sites)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/get/shock…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/b/e…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocache/f…etup1.0.1.1.cab (Reg Error: Key error.)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} http://bin.mcafee.com/molbin/shared/mcinsc…84/mcinsctl.cab (Reg Error: Key error.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1183115187156 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} http://web1.shutterfly.com/downloads/Uploader.cab (Shutterfly Picture Upload Plugin)
O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} http://h20264.www2.hp.com/ediags/dd/instal…nosticsxp2k.cab (DDRevision Class)
O16 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} http://a532.g.akamai.net/f/532/6712/5m/vir…l/installer.exe (Virtools WebPlayer Class)
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} Reg Error: Key error. (Reg Error: Key error.)
O17 - HKLMSystemCCSServicesTcpipParameters: DhcpNameServer = [removed] [removed] [removed]
O18 - ProtocolHandlerdssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program FilesMcAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
O18 - ProtocolHandlersacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program FilesMcAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:WINDOWSexplorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:Documents and SettingsJimLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O24 - Desktop BackupWallPaper: C:Documents and SettingsJimLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {00DBDAC8-4691-4797-8E6A-7C6AB89BC441} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/02/12 18:58:08 | 000,000,150 | —- | M] () - C:AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM..comfile [open] – "%1" %*
O35 - HKLM..exefile [open] – "%1" %*
O37 - HKLM…com [@ = comfile] – "%1" %*
O37 - HKLM…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3filter - C:WINDOWSSystem32ac3filter.acm ()
Drivers32: msacm.ctmp3 - C:WINDOWSSYSTEM32ctmp3.acm (Creative Technology Ltd.)
Drivers32: msacm.divxa32 - C:WINDOWSSystem32DivXa32.acm (Packed With Joy !)
Drivers32: msacm.g723 - g723.acm File not found
Drivers32: msacm.iac2 - C:WINDOWSSYSTEM32iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:WINDOWSSYSTEM32l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:WINDOWSSystem32lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:WINDOWSSystem32sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:WINDOWSSystem32TSSOFT32.ACM (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:WINDOWSSystem32vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:WINDOWSSystem32iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:WINDOWSSystem32DivX.dll (DivX, Inc.)
Drivers32: vidc.ffds - C:WINDOWSSystem32ff_vfw.dll ()
Drivers32: vidc.I263 - C:WINDOWSSystem32i263_32.drv (Intel Corporation)
Drivers32: VIDC.I420 - C:WINDOWSSystem32i263_32.drv (Intel Corporation)
Drivers32: vidc.iv31 - C:WINDOWSSystem32IR32_32.DLL ()
Drivers32: vidc.iv32 - C:WINDOWSSystem32IR32_32.DLL ()
Drivers32: vidc.iv41 - C:WINDOWSSystem32ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:WINDOWSSystem32ir50_32.dll (Intel Corporation)
Drivers32: VIDC.WMV3 - C:WINDOWSSystem32wmv9vcm.dll (Microsoft Corporation)
Drivers32: vidc.XVID - C:WINDOWSSystem32xvidvfw.dll ()
Drivers32: vidc.yv12 - C:WINDOWSSystem32DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/07/01 16:46:12 | 000,580,096 | —- | C] (OldTimer Tools) – C:Documents and SettingsJimDesktopOTL.exe
[2011/07/01 08:56:32 | 000,000,000 | —D | C] – C:WINDOWSLastGood
[2011/07/01 08:15:58 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersStart MenuProgramsMcAfee
[2011/06/29 08:44:04 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:WINDOWSSystem32javaws.exe
[2011/06/29 08:44:04 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:WINDOWSSystem32javaw.exe
[2011/06/29 08:44:04 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:WINDOWSSystem32java.exe
[2011/06/15 12:42:20 | 000,105,472 | —- | C] (Microsoft Corporation) – C:WINDOWSSystem32dllcachemup.sys
[2011/06/10 12:00:23 | 000,000,000 | —D | C] – C:Documents and SettingsJimDesktopMadyson
[2011/06/02 13:53:02 | 000,094,208 | —- | C] (DivX, Inc.) – C:WINDOWSSystem32dpl100.dll
[2004/04/26 08:50:40 | 000,065,536 | —- | C] ( ) – C:WINDOWSSystem32A3d.dll
[2 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
[1 C:WINDOWSSystem32*.tmp files -> C:WINDOWSSystem32*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/07/01 16:55:00 | 000,000,420 | -H– | M] () – C:WINDOWStasksUser_Feed_Synchronization-{A239763E-DCF2-4086-831B-395526BB8E44}.job
[2011/07/01 16:47:00 | 000,000,886 | —- | M] () – C:WINDOWStasksGoogleUpdateTaskMachineUA.job
[2011/07/01 16:46:12 | 000,580,096 | —- | M] (OldTimer Tools) – C:Documents and SettingsJimDesktopOTL.exe
[2011/07/01 08:47:00 | 000,000,882 | —- | M] () – C:WINDOWStasksGoogleUpdateTaskMachineCore.job
[2011/07/01 08:28:16 | 000,001,757 | —- | M] () – C:Documents and SettingsAll UsersDesktopDivX Plus Converter.lnk
[2011/07/01 08:28:15 | 000,001,445 | —- | M] () – C:Documents and SettingsJimDesktopDivX Movies.lnk
[2011/07/01 08:27:43 | 000,000,777 | —- | M] () – C:Documents and SettingsAll UsersDesktopDivX Plus Player.lnk
[2011/07/01 08:19:18 | 000,000,418 | -H– | M] () – C:WINDOWStasksUser_Feed_Synchronization-{2986539A-B1C8-4233-B423-8DA042916F35}.job
[2011/07/01 08:16:18 | 000,001,170 | —- | M] () – C:WINDOWSSystem32WPA.DBL
[2011/07/01 08:15:37 | 000,002,048 | –S- | M] () – C:WINDOWSBOOTSTAT.DAT
[2011/07/01 08:15:36 | 1072,762,880 | -HS- | M] () – C:hiberfil.sys
[2011/06/24 15:04:31 | 000,088,064 | —- | M] () – C:Documents and SettingsJimLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/06/20 08:58:52 | 000,003,402 | -HS- | M] () – C:WINDOWSSystem32KGyGaAvL.sys
[2011/06/17 16:53:38 | 000,009,662 | —- | M] () – C:WINDOWSEPISME00.SWB
[2011/06/15 16:36:35 | 000,000,792 | —- | M] () – C:Documents and SettingsJimApplication DataMicrosoftInternet ExplorerQuick LaunchLaunch Microsoft Office Outlook.lnk
[2011/06/15 16:36:30 | 000,445,830 | —- | M] () – C:WINDOWSSystem32PERFH009.DAT
[2011/06/15 16:36:30 | 000,073,036 | —- | M] () – C:WINDOWSSystem32PERFC009.DAT
[2011/06/15 14:10:32 | 000,001,729 | —- | M] () – C:Documents and SettingsAll UsersDesktopAdobe Reader 8.lnk
[2011/06/15 13:16:59 | 000,001,374 | —- | M] () – C:WINDOWSimsins.BAK
[2011/06/15 09:00:36 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:WINDOWSSystem32FlashPlayerCPLApp.cpl
[2011/06/14 18:02:37 | 000,000,000 | —- | M] () – C:Documents and SettingsJimLocal SettingsApplication Data{E85186B3-9CED-4F8F-A0D3-6EB8ACDF0A55}
[2011/06/10 16:42:27 | 000,002,399 | —- | M] () – C:Documents and SettingsJimDesktopCorel Photo Album 6.lnk
[2011/06/02 13:53:02 | 000,094,208 | —- | M] (DivX, Inc.) – C:WINDOWSSystem32dpl100.dll
[2 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
[1 C:WINDOWSSystem32*.tmp files -> C:WINDOWSSystem32*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/07/01 08:27:43 | 000,000,777 | —- | C] () – C:Documents and SettingsAll UsersDesktopDivX Plus Player.lnk
[2011/06/15 14:10:32 | 000,001,804 | —- | C] () – C:Documents and SettingsAll UsersStart MenuProgramsAdobe Reader 8.lnk
[2011/06/15 14:10:32 | 000,001,729 | —- | C] () – C:Documents and SettingsAll UsersDesktopAdobe Reader 8.lnk
[2011/06/14 18:02:37 | 000,000,000 | —- | C] () – C:Documents and SettingsJimLocal SettingsApplication Data{E85186B3-9CED-4F8F-A0D3-6EB8ACDF0A55}
[2010/10/18 20:29:53 | 000,015,312 | R— | C] () – C:WINDOWSSystem32RaCoInst.dat
[2010/09/06 13:28:44 | 000,087,552 | —- | C] () – C:WINDOWSSystem32cpwmon2k.dll
[2010/07/17 17:23:40 | 000,000,000 | —- | C] () – C:WINDOWSSystem32dotigdir.exe
[2010/07/17 17:23:40 | 000,000,000 | —- | C] () – C:WINDOWSSystem32binirole.dll
[2010/06/15 12:06:38 | 000,153,502 | —- | C] () – C:WINDOWSSystem32libmplayer.dll
[2010/06/15 12:05:02 | 005,002,416 | —- | C] () – C:WINDOWSSystem32libavcodec.dll
[2010/06/15 11:43:58 | 001,641,574 | —- | C] () – C:WINDOWSSystem32ffmpegmt.dll
[2010/05/24 15:39:50 | 000,289,065 | —- | C] () – C:WINDOWSSystem32ff_kernelDeint.dll
[2010/05/24 15:38:34 | 000,962,008 | —- | C] () – C:WINDOWSSystem32ff_x264.dll
[2010/05/24 15:38:22 | 000,901,509 | —- | C] () – C:WINDOWSSystem32xvidcore.dll
[2010/05/22 09:01:39 | 000,015,686 | —- | C] () – C:WINDOWSSystem32webuxext.dll
[2010/05/19 16:59:20 | 000,150,528 | —- | C] () – C:WINDOWSSystem32mkx.dll
[2010/05/19 16:59:10 | 000,109,568 | —- | C] () – C:WINDOWSSystem32avi.dll
[2010/05/19 16:59:02 | 000,141,824 | —- | C] () – C:WINDOWSSystem32mp4.dll
[2010/05/19 16:58:52 | 000,123,392 | —- | C] () – C:WINDOWSSystem32ogm.dll
[2010/05/19 16:58:24 | 000,113,152 | —- | C] () – C:WINDOWSSystem32dsmux.exe
[2010/05/19 16:58:18 | 000,154,112 | —- | C] () – C:WINDOWSSystem32ts.dll
[2010/05/19 16:58:08 | 000,249,856 | —- | C] () – C:WINDOWSSystem32dxr.dll
[2010/05/19 16:57:42 | 000,097,792 | —- | C] () – C:WINDOWSSystem32avs.dll
[2010/05/19 16:57:38 | 000,137,728 | —- | C] () – C:WINDOWSSystem32mkv2vfr.exe
[2010/05/19 16:57:26 | 000,093,184 | —- | C] () – C:WINDOWSSystem32avss.dll
[2010/05/19 16:57:20 | 000,358,400 | —- | C] () – C:WINDOWSSystem32gdsmux.exe
[2010/05/19 16:55:40 | 000,080,384 | —- | C] () – C:WINDOWSSystem32mkzlib.dll
[2010/05/19 16:55:36 | 000,024,576 | —- | C] () – C:WINDOWSSystem32mkunicode.dll
[2010/05/15 18:12:05 | 000,056,832 | —- | C] () – C:WINDOWSSystem32Iyvu9_32.dll
[2010/05/12 11:09:06 | 000,108,032 | —- | C] () – C:WINDOWSSystem32ff_vfw.dll
[2010/05/11 17:26:52 | 000,324,096 | —- | C] () – C:WINDOWSSystem32TomsMoComp_ff.dll
[2010/05/11 17:22:22 | 000,100,864 | —- | C] () – C:WINDOWSSystem32ff_wmv9.dll
[2010/05/10 18:10:04 | 000,178,688 | —- | C] () – C:WINDOWSSystem32ff_libmad.dll
[2010/05/10 18:09:50 | 000,257,024 | —- | C] () – C:WINDOWSSystem32ff_libdts.dll
[2010/05/10 18:09:42 | 000,142,848 | —- | C] () – C:WINDOWSSystem32ff_liba52.dll
[2010/05/10 18:09:30 | 000,484,864 | —- | C] () – C:WINDOWSSystem32ff_libfaad2.dll
[2010/05/10 18:07:24 | 001,556,992 | —- | C] () – C:WINDOWSSystem32ff_samplerate.dll
[2010/05/10 18:05:28 | 000,146,944 | —- | C] () – C:WINDOWSSystem32ff_tremor.dll
[2010/05/10 18:05:06 | 000,113,152 | —- | C] () – C:WINDOWSSystem32ff_unrar.dll
[2010/05/10 18:03:56 | 000,163,328 | —- | C] () – C:WINDOWSSystem32libmpeg2_ff.dll
[2010/02/06 19:01:04 | 000,081,812 | -H– | C] () – C:WINDOWSSystem32mlfcache.dat
[2009/09/18 09:07:45 | 000,000,042 | —- | C] () – C:WINDOWSAlchemyMindworksUpdateList.INI
[2009/09/18 09:06:57 | 000,212,992 | —- | C] () – C:WINDOWSALCHUNIN.EXE
[2009/08/11 17:21:26 | 000,087,552 | —- | C] () – C:WINDOWSSystem32ac3config.exe
[2009/06/07 12:24:04 | 000,180,224 | —- | C] () – C:WINDOWSSystem32xvidvfw.dll
[2009/01/10 18:15:44 | 000,159,744 | —- | C] () – C:WINDOWSSystem32mmfinfo.dll
[2008/11/06 11:37:32 | 003,596,288 | —- | C] () – C:WINDOWSSystem32qt-dx331.dll
[2007/11/15 22:32:03 | 000,001,156 | —- | C] () – C:WINDOWSmozver.dat
[2007/10/13 05:30:20 | 000,000,137 | —- | C] () – C:WINDOWSSystem32Registration.ini
[2007/04/17 15:48:39 | 000,000,274 | —- | C] () – C:WINDOWSDcmLtBox.ini
[2007/03/09 20:10:49 | 000,000,316 | —- | C] () – C:WINDOWSEReg515.dat
[2007/03/09 20:08:26 | 000,000,931 | —- | C] () – C:WINDOWSdisney.ini
[2007/03/02 20:29:24 | 000,000,214 | —- | C] () – C:WINDOWSTLCAPPS.INI
[2007/03/02 20:20:36 | 000,172,032 | —- | C] () – C:WINDOWSSystem32TTSServer.dll
[2007/03/02 20:17:04 | 000,000,000 | —- | C] () – C:WINDOWSSetup32.INI
[2006/09/20 14:07:25 | 005,763,072 | —- | C] () – C:Program FilesWindowsDefender.msi
[2006/08/07 19:44:45 | 000,000,664 | —- | C] () – C:WINDOWSSystem32d3d9caps.dat
[2006/08/01 15:20:52 | 000,094,208 | —- | C] () – C:WINDOWSSystem32GTW32N50.dll
[2006/06/25 18:26:51 | 001,414,755 | —- | C] () – C:Documents and SettingsJimApplication DataInstall.dat
[2006/03/06 11:08:37 | 000,000,008 | RHS- | C] () – C:WINDOWSSystem32BDC0213018.sys
[2006/02/12 11:57:47 | 000,003,654 | —- | C] () – C:WINDOWSSystem32driversSonyhcp.dll
[2006/01/21 17:27:03 | 000,004,148 | —- | C] () – C:Documents and SettingsAll UsersApplication DataQTSBandwidthCache
[2005/11/22 16:44:02 | 000,000,044 | —- | C] () – C:WINDOWSliveup.ini
[2005/10/05 13:10:26 | 000,000,056 | RHS- | C] () – C:WINDOWSSystem32183021C0BD.sys
[2005/10/05 13:10:25 | 000,003,402 | -HS- | C] () – C:WINDOWSSystem32KGyGaAvL.sys
[2005/10/04 08:02:24 | 000,021,312 | —- | C] () – C:WINDOWSchoice.exe
[2005/10/04 07:21:42 | 000,322,080 | -HS- | C] () – C:WINDOWSSystem32Copy of llnmp.ini
[2005/10/03 21:06:08 | 000,175,616 | —- | C] () – C:WINDOWSSystem32strings.exe
[2005/10/03 21:06:08 | 000,126,976 | —- | C] () – C:WINDOWSSystem32zip.exe
[2005/10/03 21:06:08 | 000,039,184 | —- | C] () – C:WINDOWSSystem32Ntrights.exe
[2005/10/03 21:06:08 | 000,011,254 | —- | C] () – C:WINDOWSSystem32locate.com
[2005/06/03 19:44:27 | 000,002,445 | —- | C] () – C:WINDOWScdPlayer.ini
[2005/05/15 09:44:52 | 000,000,000 | —- | C] () – C:WINDOWSiPlayer.INI
[2004/12/24 15:42:40 | 000,000,000 | —- | C] () – C:WINDOWSTextart.INI
[2004/12/04 16:16:00 | 000,000,126 | —- | C] () – C:Documents and SettingsJimLocal SettingsApplication Datafusioncache.dat
[2004/08/20 23:40:13 | 000,004,569 | —- | C] () – C:WINDOWSSystem32secupd.dat
[2004/06/06 14:56:04 | 000,000,021 | —- | C] () – C:WINDOWSDVDSentry.ini
[2004/05/22 15:08:20 | 000,088,064 | —- | C] () – C:Documents and SettingsJimLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/05/09 16:39:49 | 000,000,376 | —- | C] () – C:WINDOWSODBC.INI
[2004/04/29 09:35:35 | 000,000,182 | —- | C] () – C:WINDOWSSystem32EBPPORT4.DAT
[2004/04/29 09:34:06 | 000,000,093 | —- | C] () – C:WINDOWSR300.ini
[2004/04/28 22:22:40 | 000,000,002 | —- | C] () – C:WINDOWSmsoffice.ini
[2004/04/26 08:57:21 | 000,000,061 | —- | C] () – C:WINDOWSsmscfg.ini
[2004/04/26 08:53:48 | 000,149,504 | —- | C] () – C:WINDOWSUNWISE.EXE
[2004/04/26 08:51:01 | 000,000,335 | —- | C] () – C:WINDOWSnsreg.dat
[2004/04/26 08:50:55 | 001,048,576 | —- | C] () – C:WINDOWSSystem32SFMAN.DAT
[2004/04/26 08:50:55 | 000,000,231 | —- | C] () – C:WINDOWSAC3API.INI
[2004/04/26 08:50:40 | 000,047,616 | —- | C] () – C:WINDOWSSystem32P16X.dll
[2004/04/26 08:50:40 | 000,002,572 | —- | C] () – C:WINDOWSMIXDEF.INI
[2004/04/26 08:50:40 | 000,002,158 | —- | C] () – C:WINDOWSSystem32P16X.ini
[2004/04/26 08:50:40 | 000,000,064 | —- | C] () – C:WINDOWSP16x.ini
[2004/04/26 08:50:40 | 000,000,026 | —- | C] () – C:WINDOWSSystem32ctzapxx.ini
[2004/04/26 08:50:13 | 000,000,245 | —- | C] () – C:WINDOWSSBWIN.INI
[2004/04/26 08:49:16 | 000,000,138 | —- | C] () – C:WINDOWSwininit.ini
[2004/04/26 08:39:18 | 000,002,048 | –S- | C] () – C:WINDOWSBOOTSTAT.DAT
[2004/04/26 08:37:47 | 000,363,520 | —- | C] () – C:WINDOWSSystem32psisdecd.dll
[2004/04/26 08:37:42 | 000,445,830 | —- | C] () – C:WINDOWSSystem32PERFH009.DAT
[2004/04/26 08:37:42 | 000,073,036 | —- | C] () – C:WINDOWSSystem32PERFC009.DAT
[2004/04/26 08:37:30 | 000,001,793 | —- | C] () – C:WINDOWSSystem32fxsperf.ini
[2004/04/26 08:24:00 | 000,000,547 | —- | C] () – C:WINDOWSSystem32OEMINFO.INI
[2004/01/22 18:00:48 | 000,365,712 | —- | C] () – C:WINDOWSSystem32FNTCACHE.DAT
[2004/01/22 17:59:18 | 000,000,258 | —- | C] () – C:WINDOWSSystem32BDEMERGE.INI
[2004/01/22 17:58:10 | 000,000,831 | —- | C] () – C:WINDOWSORUN32.INI
[2003/01/07 15:05:08 | 000,002,695 | —- | C] () – C:WINDOWSSystem32OUTLPERF.INI
[2002/09/03 09:59:14 | 000,004,161 | —- | C] () – C:WINDOWSODBCINST.INI
[2002/09/03 09:56:30 | 000,021,640 | —- | C] () – C:WINDOWSSystem32emptyregdb.dat
[2002/09/03 09:31:46 | 013,107,200 | —- | C] () – C:WINDOWSSystem32OEMBIOS.BIN
[2002/09/03 09:31:44 | 000,004,594 | —- | C] () – C:WINDOWSSystem32OEMBIOS.DAT
[2002/08/29 06:00:00 | 000,673,088 | —- | C] () – C:WINDOWSSystem32MLANG.DAT
[2002/08/29 06:00:00 | 000,272,128 | —- | C] () – C:WINDOWSSystem32PERFI009.DAT
[2002/08/29 06:00:00 | 000,218,003 | —- | C] () – C:WINDOWSSystem32DSSEC.DAT
[2002/08/29 06:00:00 | 000,046,258 | —- | C] () – C:WINDOWSSystem32MIB.BIN
[2002/08/29 06:00:00 | 000,028,626 | —- | C] () – C:WINDOWSSystem32PERFD009.DAT
[2002/08/29 06:00:00 | 000,001,804 | —- | C] () – C:WINDOWSSystem32dcache.bin
[2002/08/29 06:00:00 | 000,000,741 | —- | C] () – C:WINDOWSSystem32NOISE.DAT
[1980/01/01 01:00:00 | 000,012,288 | —- | C] () – C:WINDOWSSystem32e100bmsg.dll

========== LOP Check ==========

[2008/07/09 22:36:04 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Dataacccore
[2010/06/30 19:50:00 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataCisco Systems
[2010/05/22 14:44:40 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataCitrix
[2009/09/22 14:41:43 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataTEMP
[2004/07/26 19:06:09 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataViewpoint
[2009/03/26 11:03:22 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2010/06/17 11:51:38 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/02/04 13:35:59 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/04/09 11:00:28 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008/07/09 22:26:58 | 000,000,000 | —D | M] – C:Documents and SettingsJimApplication DataAim
[2009/09/18 11:46:34 | 000,000,000 | —D | M] – C:Documents and SettingsJimApplication DataAlchemy Mindworks
[2004/04/29 09:44:27 | 000,000,000 | —D | M] – C:Documents and SettingsJimApplication DataLeadertech
[2006/01/21 17:48:10 | 000,000,000 | —D | M] – C:Documents and SettingsJimApplication DataMusicmatch
[2004/04/29 14:30:01 | 000,000,258 | —- | M] () – C:WINDOWSTasksISP signup reminder 1.job
[2011/07/01 08:19:18 | 000,000,418 | -H– | M] () – C:WINDOWSTasksUser_Feed_Synchronization-{2986539A-B1C8-4233-B423-8DA042916F35}.job
[2011/07/01 16:55:00 | 000,000,420 | -H– | M] () – C:WINDOWSTasksUser_Feed_Synchronization-{A239763E-DCF2-4086-831B-395526BB8E44}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%*.* >
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:\0AD31E8F65EF36C44D6CE8DB613D3EE313FC9CC1.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:2C4A5B3FC96EE1D439F68D6EA5024E7CE0D763B1.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:36AF033E819F51E134EEA77B6E7D73DD5BA65DC3.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:397C75D631DB725D2B2B9CB9A6A7A0E8F4E63DA1.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:3CB36F86C3B0296205B6A0BC959CADD00D25EED7.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:55B5EF2FDB1BFDF26FF094677FF0AE1452DF9A86.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:62C7ED6BCBEC4EE0B728AACF1F4603049C5CA93A.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:675A5CFE462F5484F3ED11F1DE90EC6A4AE4E3AB.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:6B478D6B6F96E16C463CF1EF8024B5C62AFE0F02.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:A0A7F7E6F3626CA5ED2E72666B1013DCF8269435.tpr
[2006/02/12 18:58:08 | 000,000,150 | —- | M] () – C:AUTOEXEC.BAT
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:B68AC9416BE04B8889B5121A77B0B47E5788F1A8.tpr
[2007/06/15 23:34:53 | 000,000,211 | RHS- | M] () – C:BOOT.INI
[2002/09/03 09:38:46 | 000,000,512 | -HS- | M] () – C:BOOTSECT.DOS
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:C9AAE728AE80BA85DE77F9D8CB424387C9DD968D.tpr
[2002/09/03 09:59:58 | 000,000,000 | —- | M] () – C:CONFIG.SYS
[2004/04/26 08:27:00 | 000,006,408 | RH– | M] () – C:DELL.SDR
[2006/07/12 14:01:55 | 000,017,098 | —- | M] () – C:drwtsn32.log
[2005/05/22 18:30:01 | 000,000,051 | —- | M] () – C:DVDPATH.TXT
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:FBE5E6A1CC1EDB8AB31CB8CE65E42B4BCD029D02.tpr
[2008/04/13 20:12:10 | 000,000,464 | -H– | M] () – C:FEBB10B286E7AB95E7B7D4C9432384BEF0086B96.tpr
[2011/07/01 08:15:36 | 1072,762,880 | -HS- | M] () – C:hiberfil.sys
[2002/09/03 09:59:58 | 000,000,000 | -H– | M] () – C:IO.SYS
[2008/07/09 22:36:32 | 000,001,448 | -H– | M] () – C:IPH.PH
[2002/09/03 09:59:58 | 000,000,000 | -H– | M] () – C:MSDOS.SYS
[2004/08/21 00:40:32 | 000,047,564 | RHS- | M] () – C:NTDETECT.COM
[2008/05/12 21:25:59 | 000,250,048 | RHS- | M] () – C:NTLDR
[2010/01/28 16:22:23 | 000,262,144 | —- | M] () – C:ntuser.dat
[2010/01/28 16:22:24 | 000,001,024 | -H– | M] () – C:ntuser.dat.LOG
[2011/07/01 08:15:34 | 1610,612,736 | -HS- | M] () – C:pagefile.sys
[2004/04/26 08:52:47 | 000,000,087 | —- | M] () – C:SystemInfo.ini

< %systemroot%Fonts*.com >
[2006/04/18 16:39:28 | 000,026,040 | —- | M] () – C:WINDOWSFontsGlobalMonospace.CompositeFont
[2006/06/29 15:53:56 | 000,026,489 | —- | M] () – C:WINDOWSFontsGlobalSansSerif.CompositeFont
[2006/04/18 16:39:28 | 000,029,779 | —- | M] () – C:WINDOWSFontsGlobalSerif.CompositeFont
[2006/06/29 15:58:52 | 000,030,808 | —- | M] () – C:WINDOWSFontsGlobalUserInterface.CompositeFont

< %systemroot%Fonts*.dll >

< %systemroot%Fonts*.ini >
[2002/09/03 09:59:02 | 000,000,067 | -HS- | M] () – C:WINDOWSFontsDESKTOP.INI

< %systemroot%Fonts*.ini2 >

< %systemroot%Fonts*.exe >

< %systemroot%system32spoolprtprocsw32x86*.* >
[2008/07/06 08:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:WINDOWSsystem32spoolprtprocsw32x86filterpipelineprintproc.dll
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:WINDOWSsystem32spoolprtprocsw32x86mdippr.dll
[2008/07/06 06:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:WINDOWSsystem32spoolprtprocsw32x86printfilterpipelinesvc.exe

< %systemroot%REPAIR*.bak1 >

< %systemroot%REPAIR*.ini >

< %systemroot%system32*.jpg >

< %systemroot%*.jpg >

< %systemroot%*.png >

< %systemroot%*.scr >
[2001/05/07 17:14:22 | 000,303,104 | —- | M] () – C:WINDOWSFilm Factory.scr
[2009/07/10 13:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:WINDOWSWLXPGSS.SCR
[2 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]

< %systemroot%*._sy >

< %APPDATA%AdobeUpdate*.* >

< %ALLUSERSPROFILE%Favorites*.* >

< %APPDATA%Microsoft*.* >

< %PROGRAMFILES%*.* >
[2006/09/20 14:07:40 | 005,763,072 | —- | M] () – C:Program FilesWindowsDefender.msi

< %APPDATA%Update*.* >

< %systemroot%*. /mp /s >

< %systemroot%System32config*.sav >
[2002/09/03 09:47:18 | 000,094,208 | —- | M] () – C:WINDOWSSystem32configDEFAULT.SAV
[2002/09/03 09:47:18 | 000,602,112 | —- | M] () – C:WINDOWSSystem32configSOFTWARE.SAV
[2002/09/03 09:47:18 | 000,380,928 | —- | M] () – C:WINDOWSSystem32configSYSTEM.SAV

< %PROGRAMFILES%bak. /s >

< %systemroot%system32bak. /s >

< %ALLUSERSPROFILE%Start Menu*.lnk /x >
[2008/05/12 21:33:12 | 000,000,272 | -HS- | M] () – C:Documents and SettingsAll UsersStart MenuDESKTOP.INI

< %systemroot%system32configsystemprofile*.dat /x >

< %systemroot%*.config >

< %systemroot%system32*.db >

< %PROGRAMFILES%Internet Explorer*.dat >

< %APPDATA%MicrosoftInternet ExplorerQuick Launch*.lnk /x >
[2006/09/23 14:13:38 | 000,000,177 | -HS- | M] () – C:Documents and SettingsJimApplication DataMicrosoftInternet ExplorerQuick LaunchDESKTOP.INI
[2004/04/28 22:13:17 | 000,000,079 | —- | M] () – C:Documents and SettingsJimApplication DataMicrosoftInternet ExplorerQuick LaunchShow Desktop.scf

< %USERPROFILE%Desktop*.exe >
[2011/07/01 16:46:12 | 000,580,096 | —- | M] (OldTimer Tools) – C:Documents and SettingsJimDesktopOTL.exe

< %PROGRAMFILES%Common Files*.* >

< %systemroot%*.src >

< %systemroot%install*.* >

< %systemroot%system32DLL*.* >

< %systemroot%system32HelpFiles*.* >

< %systemroot%system32rundll*.* >

< %systemroot%winn32*.* >

< %systemroot%Java*.* >

< %systemroot%system32test*.* >

< %systemroot%system32Rundll32*.* >

< %systemroot%AppPatchCustom*.* >

< HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU >

< HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstall|LastSuccessTime /rs >
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstallLastSuccessTime: 2011-06-29 18:29:22

========== Alternate Data Streams ==========

@Alternate Data Stream - 117 bytes -> C:Documents and SettingsAll UsersApplication DataTEMP:0E799D7F

< End of report >

Here is the other report.

OTL Extras logfile created on: 7/1/2011 4:50:06 PM - Run 1
OTL by OldTimer - Version 3.2.25.0 Folder = C:Documents and SettingsJimDesktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1023.00 Mb Total Physical Memory | 363.28 Mb Available Physical Memory | 35.51% Memory free
2.40 Gb Paging File | 1.87 Gb Available in Paging File | 77.93% Paging File free
Paging file location(s): C:pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 111.72 Gb Total Space | 26.61 Gb Free Space | 23.82% Space Free | Partition Type: NTFS

Computer Name: DADSOFFICE | User Name: Jim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINESOFTWAREClasses]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USERSOFTWAREClasses]
.html [@ = FirefoxHTML] – C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringAhnlabAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringKasperskyAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSophosAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTinyFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSr]
"Start" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfile]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfileGloballyOpenPortsList]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfileAuthorizedApplicationsList]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfileAuthorizedApplicationsList]
"C:WINDOWSSYSTEM32SPOOLDRIVERSW32X863SAGENT4.EXE" = C:WINDOWSSYSTEM32SPOOLDRIVERSW32X863SAGENT4.EXE:*:Enabled:SAgent4 – (SEIKO EPSON CORPORATION)
"C:Program FilesCommon FilesMcAfeeMcSvcHostMcSvHost.exe" = C:Program FilesCommon FilesMcAfeeMcSvcHostMcSvHost.exe:*:Enabled:McAfee Shared Service Host – (McAfee, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{04410044-9149-45C6-A806-F2BF9CFCE762}" = Microsoft Encarta Encyclopedia Standard 2004
"{0456ebd7-5f67-4ab6-852e-63781e3f389c}" = Macromedia Flash Player
"{109D28C7-FB38-483A-9C91-001CB59E2699}" = EPSON CardMonitor
"{11F1920A-56A2-4642-B6E0-3B31A12C9288}" = Dell Solution Center
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1D643CD7-4DD6-11D7-A4E0-000874180BB3}" = Microsoft Money 2004
"{1E2F8AE3-3437-44E6-BB75-E95751D6B83F}" = Picture Package
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Dell Media Experience
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java™ 6 Update 26
"{27C467F8-F8EF-4f68-BD72-D63632B2096C}" = McAfee Online Backup
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0150090}" = J2SE Runtime Environment 5.0 Update 9
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35BDEFF1-A610-4956-A00D-15453C116395}" = Internet Explorer Default Page
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{459E93B6-150E-45d5-8D4B-45C66FC035FE}" = getPlus® Download Manager for Corel
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B9F45E8-E3CE-40B4-9463-80A9B3481DEF}" = Banctec Service Agreement
"{4CCC7F68-A437-4559-A840-F5E010934951}" = HP Driver Diagnostics
"{4E868D3D-6EEB-4273-926C-2287236B5B79}" = 3DVIA player 4.1
"{54F90B55-BEB3-4F0D-8802-228822FA5921}" = WordPerfect Office 11
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5983C895-DDA4-45D9-A8D1-877D5DE7693E}" = EPSON PhotoStarter3.0
"{5BF5F9C5-E95B-4AFA-94BE-F2A9CA73B61D}" = Apple Mobile Device Support
"{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}" = Sony USB Driver
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68D60342-7686-45C9-B8EB-40EF843D0460}" = Dell Networking Guide
"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7148F0A8-6813-11D6-A77B-00B0D0142000}" = Java 2 Runtime Environment, SE v1.4.2
"{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}" = DellSupport
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{81A34902-9D0B-4920-A25C-4CDC5D14B328}" = Jasc Paint Shop Pro 8 Dell Edition
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8A9B8148-DDD7-448F-BD6C-358386D32354}" = Corel Photo Album 6
"{8C64E145-54BA-11D6-91B1-00500462BE80}" = Microsoft Money 2004 System Pack
"{8F1A20DC-251D-47B0-91B7-DCA2523EE6C9}" = McAfee Virtual Technician
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90D55A3F-1D99-4C94-A77E-46DC14F0BF08}" = Help and Support Customization
"{91E30409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{95120000-0038-0409-0000-0000000FF1CE}" = Time Zone Data Update Tool for Microsoft Office Outlook
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96E16100-A77F-4B31-B9AD-FFBA040EE1BD}" = Sound Blaster Live!
"{98DF85D9-96C0-4F57-A92E-C3539477EF5E}" = DVDSentry
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}" = Windows Defender Signatures
"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
"{A790BEB1-BCCF-4EC6-807B-5708B36E8A79}" = Intel® PROSet
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAD47011-8518-4608-9656-951DA35B587B}" = iTunes
"{AC76BA86-7AD7-1033-7B44-A83000000003}" = Adobe Reader 8.3.0
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{BD57EA4D-026E-4F08-9B93-080E282B81FE}" = iPod for Windows 2006-06-28
"{BF5EE349-90CD-4422-A43B-661778180173}" = USB Disk Win98 Driver
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C797EAF2-707A-4239-BDF3-F2672314A734}" = First Step Guide
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFF4500E-C5D6-695D-A027-B3D4DDED2CC3}" = McAfee Online Backup
"{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F8C6BABF-0837-4EA0-AD6C-8E5A392A7538}" = ImageMixer VCD2
"{FC4ED75D-916C-4A8C-BB67-3C6F6E06D62B}" = Banctec Service Agreement
"{FCD9CD52-7222-4672-94A0-A722BA702FD0}" = Dell Resource CD
"{FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4}" = EPSON Print CD
"3DGroove" = 3D Groove Playback Engine
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"ASTRA32_is1" = ASTRA32 - Advanced System Information Tool 2.06
"Cisco Connect" = Cisco Connect
"ClueFinders® 3rd Grade Adventures" = ClueFinders® 3rd Grade Adventures
"CNXT_MODEM_PCI_VEN_14F1&DEV;_2702" = Conexant SmartHSFi V.9x 56K DF PCI Modem
"CodInstl" = Intel A/V Codecs V2.0
"CutePDF Writer Installation" = CutePDF Writer 2.8
"Dell Digital Jukebox Driver" = Dell Digital Jukebox Driver
"DivX Setup.divx.com" = DivX Setup
"Dora's Carnival 2: Boardwalk Adventure" = Dora's Carnival 2: Boardwalk Adventure
"EPSON Printer and Utilities" = EPSON Printer Software
"ExamForce Engine Installation CM 7.7" = ExamForce Engine Installation CM 7.7
"Eyles_Comprehensive_Review" = Mosby's Comprehensive Review of Nursing for the NCLEX-RN®, 18th Edition
"Film Factory" = Film Factory
"Graphic Workshop Professional 3" = Graphic Workshop Professional 3
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"IHMC CmapTools v4.03" = IHMC CmapTools v4.03
"InstallShield_{BD57EA4D-026E-4F08-9B93-080E282B81FE}" = iPod for Windows 2006-06-28
"InterActual Player" = InterActual Player
"Kid Pix Deluxe 3" = Kid Pix Deluxe 3
"LegalSounds Music Downloader_is1" = LegalSounds Music Downloader 1.4
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.18)" = Mozilla Firefox (3.6.18)
"MSC" = McAfee SecurityCenter
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSTTS" = Microsoft Text-to-Speech Engine 4.0 (English)
"MyPublisher" = MyPublisher
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA" = NVIDIA Windows 2000/XP Display Drivers
"Oregon Trail® 5" = Oregon Trail® 5
"PlayFLV" = PlayFLV
"PROSet" = Intel® PRO Network Adapters and Drivers
"Registry Fix_is1" = RegistryFix v6.4
"Saunders NCLEX-RN4e" = Saunders NCLEX-RN4e
"Silent Package Run-Time Sample" = EPSON SPR300 Reference Guide
"StreetPlugin" = Learn2 Player (Uninstall Only)
"tv_enua" = Lernout & Hauspie TruVoice American English TTS Engine
"Viewpoint Manager" = Viewpoint Manager (Remove Only)
"ViewpointMediaPlayer" = Viewpoint Media Player
"Windows 7 - Codec Pack" = Windows 7 Codec Pack 2.6.1
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Yahoo! Mail" = Yahoo! Internet Mail

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 6/24/2011 1:31:20 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:31:20 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:31:20 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:31:20 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:31:20 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:31:20 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:31:37 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:31:37 PM | Computer Name = DADSOFFICE | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 6/24/2011 1:49:18 PM | Computer Name = DADSOFFICE | Source = VSS | ID = 12302
Description = Volume Shadow Copy Service error: An internal inconsistency was detected
in trying to contact shadow copy service writers. Please check to see that the
Event Service and Volume Shadow Copy Service are operating properly.

Error - 6/29/2011 11:57:02 AM | Computer Name = DADSOFFICE | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module unknown, version 0.0.0.0, fault address 0x08637ac0.

[ System Events ]
Error - 6/26/2011 9:48:17 AM | Computer Name = DADSOFFICE | Source = DCOM | ID = 10010
Description = The server {209500FC-6B45-4693-8871-6296C4843751} did not register
with DCOM within the required timeout.

Error - 6/27/2011 6:52:58 PM | Computer Name = DADSOFFICE | Source = DCOM | ID = 10010
Description = The server {209500FC-6B45-4693-8871-6296C4843751} did not register
with DCOM within the required timeout.

Error - 6/28/2011 9:37:00 AM | Computer Name = DADSOFFICE | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.128 for the Network Card with network
address 00259C005257 has been denied by the DHCP server 192.168.33.1 (The DHCP Server
sent a DHCPNACK message).

Error - 6/28/2011 9:39:52 AM | Computer Name = DADSOFFICE | Source = DCOM | ID = 10010
Description = The server {3A185DDE-E020-4985-A8F2-E27CDC4A0F3A} did not register
with DCOM within the required timeout.

Error - 6/29/2011 8:07:59 AM | Computer Name = DADSOFFICE | Source = PSched | ID = 14103
Description = QoS [Adapter {9F96A176-49CF-4464-8FB2-15BC6CB87ED4}]: The netcard driver
failed the query for OID_GEN_LINK_SPEED.

Error - 6/29/2011 2:18:39 PM | Computer Name = DADSOFFICE | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.128 for the Network Card with network
address 00259C005257 has been denied by the DHCP server 192.168.33.1 (The DHCP Server
sent a DHCPNACK message).

Error - 6/29/2011 2:21:36 PM | Computer Name = DADSOFFICE | Source = DCOM | ID = 10010
Description = The server {209500FC-6B45-4693-8871-6296C4843751} did not register
with DCOM within the required timeout.

Error - 6/29/2011 8:28:37 PM | Computer Name = DADSOFFICE | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.128 for the Network Card with network
address 00259C005257 has been denied by the DHCP server 192.168.33.1 (The DHCP Server
sent a DHCPNACK message).

Error - 6/29/2011 8:31:49 PM | Computer Name = DADSOFFICE | Source = DCOM | ID = 10010
Description = The server {209500FC-6B45-4693-8871-6296C4843751} did not register
with DCOM within the required timeout.

Error - 7/1/2011 8:18:37 AM | Computer Name = DADSOFFICE | Source = DCOM | ID = 10010
Description = The server {209500FC-6B45-4693-8871-6296C4843751} did not register
with DCOM within the required timeout.


< End of report >

Hi Tom, thanks for the help.
Here is my ComboFix log;

ComboFix 11-07-06.03 - Jim 07/06/2011 17:06:08.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.678 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Jim\Application Data\Install.dat
c:\documents and settings\Jim\WINDOWS
c:\documents and settings\Tina\WINDOWS
c:\windows\system32\comrepl.exe
c:\windows\system32\Copy of llnmp.ini
.
.
((((((((((((((((((((((((( Files Created from 2011-06-06 to 2011-07-06 )))))))))))))))))))))))))))))))
.
.
2011-07-06 19:51 . 2011-07-06 19:51 ——– d—–w- C:\_OTL
2011-06-15 16:42 . 2011-04-21 13:37 105472 ——w- c:\windows\system32\dllcache\mup.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-15 13:00 . 2011-06-01 12:15 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-02 17:53 . 2011-06-02 17:53 94208 —-a-w- c:\windows\system32\dpl100.dll
2011-05-04 08:52 . 2010-07-30 23:14 472808 —-a-w- c:\windows\system32\deployJava1.dll
2011-05-04 06:25 . 2008-12-10 14:10 73728 —-a-w- c:\windows\system32\javacpl.cpl
2011-05-02 15:31 . 2004-06-07 18:19 692736 —-a-w- c:\windows\system32\inetcomm.dll
2011-04-29 17:25 . 2004-03-30 01:48 151552 —-a-w- c:\windows\system32\schannel.dll
2011-04-29 16:19 . 2002-08-29 10:00 456320 —-a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-25 16:11 . 2004-02-06 22:05 916480 —-a-w- c:\windows\system32\wininet.dll
2011-04-25 16:11 . 2002-08-29 10:00 43520 ——w- c:\windows\system32\licmgr10.dll
2011-04-25 16:11 . 2002-08-29 10:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2011-04-25 12:01 . 2004-08-04 05:59 385024 —-a-w- c:\windows\system32\html.iec
2011-04-21 13:37 . 2002-08-29 10:00 105472 —-a-w- c:\windows\system32\drivers\mup.sys
2011-04-14 18:01 . 2011-04-22 13:18 9344 —-a-w- c:\windows\system32\drivers\mfeclnk.sys
2011-04-14 18:01 . 2011-04-22 13:18 88736 —-a-w- c:\windows\system32\drivers\mfendisk.sys
2011-04-14 18:01 . 2011-04-22 13:18 84200 —-a-w- c:\windows\system32\drivers\mfetdi2k.sys
2011-04-14 18:01 . 2011-04-22 13:18 84488 —-a-w- c:\windows\system32\drivers\mferkdet.sys
2011-04-14 18:01 . 2011-04-22 13:18 56064 —-a-w- c:\windows\system32\drivers\cfwids.sys
2011-04-14 18:01 . 2011-04-22 13:18 52320 —-a-w- c:\windows\system32\drivers\mfebopk.sys
2011-04-14 18:01 . 2011-04-22 13:18 314088 —-a-w- c:\windows\system32\drivers\mfefirek.sys
2011-04-14 18:01 . 2011-04-22 13:18 153280 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
2011-04-14 18:01 . 2011-04-22 12:53 141792 —-a-w- c:\windows\system32\mfevtps.exe
2011-04-14 18:01 . 2010-10-14 02:28 95824 —-a-w- c:\windows\system32\drivers\mfeapfk.sys
2011-04-14 18:01 . 2010-10-14 02:28 387480 —-a-w- c:\windows\system32\drivers\mfehidk.sys
2006-09-20 18:07 . 2006-09-20 18:07 5763072 —-a-w- c:\program files\WindowsDefender.msi
2011-04-14 18:01 . 2011-04-22 13:18 24376 —-a-w- c:\program files\mozilla firefox\components\Scriptff.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK]
@="{3c3f3c1a-9153-7c05-f938-622e7003894d}"
[HKEY_CLASSES_ROOT\CLSID\{3c3f3c1a-9153-7c05-f938-622e7003894d}]
2010-04-14 00:11 2872120 —-a-w- c:\program files\McAfee Online Backup\MOBKshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK2]
@="{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}"
[HKEY_CLASSES_ROOT\CLSID\{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}]
2010-04-14 00:11 2872120 —-a-w- c:\program files\McAfee Online Backup\MOBKshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK3]
@="{b4caf489-1eec-c617-49ad-8d7088598c06}"
[HKEY_CLASSES_ROOT\CLSID\{b4caf489-1eec-c617-49ad-8d7088598c06}]
2010-04-14 00:11 2872120 —-a-w- c:\program files\McAfee Online Backup\MOBKshell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2007-08-30 205480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2007-08-28 73728]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2007-08-30 205480]
"USB Storage Toolbox"="c:\windows\UMStor\Res.EXE" [2005-09-15 65536]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-12-14 47904]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-01-25 421160]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-04-05 1195408]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-05-27 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
backup=c:\windows\pss\Digital Line Detect.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package Menu.lnk]
backup=c:\windows\pss\Picture Package Menu.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package VCD Maker.lnk]
backup=c:\windows\pss\Picture Package VCD Maker.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
2006-02-09 22:34 106496 —-a-w- c:\program files\Corel\Corel Photo Album 6\MediaDetect.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\diagent]
2002-04-03 06:01 135264 —-a-w- c:\program files\Creative\SBLive\Diagnostics\diagent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDSentry]
2003-08-13 15:27 28672 —-a-w- c:\windows\SYSTEM32\DSentry.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus Photo R300 Series]
2003-06-04 07:00 99840 —-a-w- c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_S4I2F1.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyAgent]
2003-06-18 17:00 200704 —-a-w- c:\program files\Microsoft Money\System\MNYEXPR.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 —-a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2003-11-03 18:46 4800512 —-a-w- c:\windows\SYSTEM32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
2003-08-27 00:47 204800 ——w- c:\program files\Dell\Media Experience\PCMService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
2000-05-11 06:00 90112 ——w- c:\windows\Updreg.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ViewMgr]
2004-11-11 04:15 111816 —-a-w- c:\program files\Viewpoint\Viewpoint Manager\ViewMgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\SYSTEM32\\SPOOL\\DRIVERS\\W32X86\\3\\SAGENT4.EXE"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"=
.
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\SYSTEM32\DRIVERS\mfetdi2k.sys [4/22/2011 9:18 AM 84200]
R1 MOBKFilter;MOBKFilter;c:\windows\SYSTEM32\DRIVERS\MOBK.sys [4/22/2011 9:21 AM 54776]
R2 ASTRA32;ASTRA32 Kernel Driver 5.2.1.0;c:\program files\ASTRA32\astra32.sys [2/22/2007 11:28 AM 30864]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [4/22/2011 9:17 AM 271480]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [4/22/2011 9:17 AM 271480]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [4/22/2011 9:17 AM 271480]
R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [4/22/2011 9:18 AM 188136]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\SYSTEM32\mfevtps.exe [4/22/2011 8:53 AM 141792]
R2 MOBKbackup;McAfee Online Backup;c:\program files\McAfee Online Backup\MOBKbackup.exe [4/13/2010 8:11 PM 229688]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [7/9/2008 10:36 PM 24652]
R3 cfwids;McAfee Inc. cfwids;c:\windows\SYSTEM32\DRIVERS\cfwids.sys [4/22/2011 9:18 AM 56064]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\SYSTEM32\DRIVERS\mfefirek.sys [4/22/2011 9:18 AM 314088]
R3 mfendiskmp;mfendiskmp;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [4/22/2011 9:18 AM 88736]
R3 RT80x86;Linksys WPC600N/WMP600N Wireless-N Card Driver;c:\windows\SYSTEM32\DRIVERS\rt2860.sys [10/18/2010 8:29 PM 712704]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [3/15/2010 10:08 AM 135664]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [3/15/2010 10:08 AM 135664]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [4/22/2011 9:18 AM 88736]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\SYSTEM32\DRIVERS\mferkdet.sys [4/22/2011 9:18 AM 84488]
S3 nosGetPlusHelper;getPlus® Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [8/29/2002 6:00 AM 14336]
.
— Other Services/Drivers In Memory —
.
*Deregistered* - mfeavfk01
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 15:50]
.
2011-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-15 14:08]
.
2011-07-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-15 14:08]
.
2004-04-29 c:\windows\Tasks\ISP signup reminder 1.job
- c:\windows\System32\OOBE\OOBEBALN.EXE [2002-08-29 00:12]
.
2011-07-06 c:\windows\Tasks\User_Feed_Synchronization-{2986539A-B1C8-4233-B423-8DA042916F35}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 09:31]
.
2011-07-06 c:\windows\Tasks\User_Feed_Synchronization-{A239763E-DCF2-4086-831B-395526BB8E44}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 09:31]
.
.
——- Supplementary Scan ——-
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: microsoft.com\*.update
Trusted Zone: windowsupdate.com\download
TCP: DhcpNameServer = [removed] [removed] [removed]
FF - ProfilePath - c:\documents and settings\Jim\Application Data\Mozilla\Firefox\Profiles\ece8zf91.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig?hl=en
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: [removed] - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\program files\McAfee\SiteAdvisor
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-06 17:18
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
.
c:\docume~1\Jim\LOCALS~1\Temp\catchme.dll 53248 bytes executable
.
scan completed successfully
hidden files: 1
.
**************************************************************************
.
Completion time: 2011-07-06 17:23:16
ComboFix-quarantined-files.txt 2011-07-06 21:23
.
Pre-Run: 31,823,319,040 bytes free
Post-Run: 31,811,014,656 bytes free
.
WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 504ACE61B1955156379CCE4063B7F740