OTL logfile created on: 12/14/2010 11:09:09 AM - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Sabrina Trifilio\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1,015.00 Mb Total Physical Memory | 724.00 Mb Available Physical Memory | 71.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 93.00% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 144.12 Gb Total Space | 116.16 Gb Free Space | 80.60% Space Free | Partition Type: NTFS Drive D: | 3.73 Gb Total Space | 3.64 Gb Free Space | 97.78% Space Free | Partition Type: FAT32 Computer Name: YOUR-P2Y8Y8NSL1 | User Name: Sabrina Trifilio | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010/12/14 11:07:24 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe PRC - [2008/04/14 07:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010/12/14 11:07:24 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2010/11/19 12:18:14 | 000,061,720 | ---- | M] () [Auto | Stopped] -- C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer119.exe -- (QueryExplorer Service) SRV - [2010/05/14 10:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort) SRV - [2010/04/06 07:12:24 | 000,206,160 | ---- | M] (Computer Associates International, Inc.) [Auto | Stopped] -- C:\Program Files\CA\CA Internet Security Suite\ccschedulersvc.exe -- (ccSchedulerSVC) SRV - [2010/04/06 07:12:22 | 000,251,216 | ---- | M] (CA, Inc.) [On_Demand | Stopped] -- C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe -- (CaCCProvSP) SRV - [2010/03/20 04:41:08 | 000,212,992 | ---- | M] (Computer Associates International, Inc.) [Auto | Stopped] -- C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus Plus\isafe.exe -- (CAISafe) SRV - [2009/08/04 09:42:18 | 000,887,288 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe -- (UmxAgent) SRV - [2009/07/31 15:30:14 | 000,150,008 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe -- (UmxFwHlp) SRV - [2009/07/27 14:40:44 | 000,227,832 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe -- (UmxPol) SRV - [2009/07/13 09:39:14 | 000,760,664 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe -- (UmxCfg) SRV - [2009/02/06 20:08:58 | 000,533,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\ohtsed.sys -- (ocayvfg) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\btwusb.sys -- (BTWUSB) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btwhid.sys -- (btwhid) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btwdndis.sys -- (BTWDNDIS) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btport.sys -- (BTDriver) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\btaudio.sys -- (btaudio) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\AmUStor.SYS -- (AmUStor) DRV - [2009/12/23 10:29:36 | 000,132,088 | ---- | M] (CA) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\KmxAMRT.sys -- (KmxAMRT) DRV - [2009/12/23 10:29:36 | 000,078,840 | ---- | M] (CA) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\KmxAgent.sys -- (KmxAgent) DRV - [2009/09/30 15:51:00 | 000,239,608 | ---- | M] (CA) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KmxCfg.sys -- (KmxCfg) DRV - [2009/09/30 15:51:00 | 000,060,920 | ---- | M] (CA) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\KmxSbx.sys -- (KmxSbx) DRV - [2009/09/02 16:29:58 | 000,053,240 | ---- | M] (CA) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\KmxFile.sys -- (KmxFile) DRV - [2009/08/14 10:43:50 | 000,145,912 | ---- | M] (CA) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\KmxCF.sys -- (KmxCF) DRV - [2009/07/10 20:33:36 | 001,015,424 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86) DRV - [2009/07/06 09:48:02 | 000,011,448 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AsUpIO.sys -- (AsUpIO) DRV - [2009/06/08 09:02:04 | 000,115,704 | ---- | M] (CA) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\KmxFw.sys -- (KmxFw) DRV - [2009/06/08 09:02:02 | 000,108,024 | ---- | M] (CA) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\DRIVERS\kmxstart.sys -- (KmxStart) DRV - [2009/04/27 06:26:44 | 005,074,944 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2009/04/09 08:14:28 | 000,208,816 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2009/03/27 14:27:04 | 000,598,656 | ---- | M] (Computer Associates International, Inc.) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KmxAMVet.sys -- (KmxAMVet) DRV - [2009/03/14 01:05:26 | 001,528,928 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416) DRV - [2009/03/13 18:32:18 | 001,759,616 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV - [2009/03/02 00:03:47 | 000,038,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c) DRV - [2009/02/06 20:08:42 | 000,055,152 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr) DRV - [2008/11/19 03:21:28 | 000,039,040 | ---- | M] (GenesysLogic Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\uvclf.sys -- (uvclf) DRV - [2008/09/12 00:32:56 | 000,327,192 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\iaStor.sys -- (iaStor) DRV - [2008/08/05 07:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2008/04/14 07:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008/04/08 17:59:28 | 000,010,752 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASUSACPI.SYS -- (AsusACPI) DRV - [2007/12/19 10:32:12 | 005,854,688 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm) DRV - [2006/01/04 02:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z002&form=ZGAPHP IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555 FF - HKLM\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin File not found FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/09/05 19:32:45 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\ShopperReports@ShopperReports.com: C:\Program Files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions O1 HOSTS File: ([2008/04/14 07:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (ooVoo Toolbar) - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\oovoodx.dll () O2 - BHO: (Download Energy Toolbar) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDow0.dll (Conduit Ltd.) O2 - BHO: (MSN Toolbar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll (Microsoft Corporation) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (MSN Toolbar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found. O3 - HKLM\..\Toolbar: (ooVoo Toolbar) - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\oovoodx.dll () O3 - HKLM\..\Toolbar: (Download Energy Toolbar) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDow0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (ToggleEN Toolbar) - {038CB5C7-48EA-4AF9-94E0-A1646542E62B} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Download Energy Toolbar) - {AD708C09-D51B-45B3-9D28-4EBA2681FEBF} - C:\Program Files\Download_Energy\tbDow0.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O4 - HKLM..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe (CA, Inc.) O4 - HKLM..\Run: [cctray] C:\Program Files\CA\CA Internet Security Suite\casc.exe (CA, Inc.) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [LiveUpdate] C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe () O4 - HKLM..\Run: [MSN Toolbar] C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\mswinext.exe File not found O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [snp2uvc] C:\WINDOWS\vsnp2uvc.exe File not found O4 - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated) O4 - HKCU..\Run: [DW6] C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe File not found O4 - HKCU..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe () O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ SuperHybridEngine.lnk = C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (ASUSTeK Computer Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\VetRedir.dll (Computer Associates International, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\System32\VetRedir.dll (Computer Associates International, Inc.) O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 68.237.161.12 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O20 - AppInit_DLLs: (UmxSbxExw.dll) - C:\WINDOWS\System32\UmxSbxExw.dll (CA) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O20 - Winlogon\Notify\PFW: DllName - UmxWnp.Dll - C:\WINDOWS\System32\UmxWNP.dll (CA) O24 - Desktop WallPaper: C:\Documents and Settings\Sabrina Trifilio\Application Data\Microsoft\Windows Live Photo Gallery\Windows Live Photo Gallery Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sabrina Trifilio\Application Data\Microsoft\Windows Live Photo Gallery\Windows Live Photo Gallery Wallpaper.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/08/11 08:16:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/12/14 11:07:23 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe [2010/12/14 00:55:16 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/12/14 00:55:14 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/12/14 00:55:13 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010/12/14 00:16:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sabrina Trifilio\ShopperReports3 [2009/08/12 02:50:21 | 000,196,608 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll [2009/08/12 02:50:19 | 000,225,280 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/12/14 11:07:24 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe [2010/12/14 10:46:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/12/14 10:31:23 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{5F0E6D44-3077-41FB-8340-F45E75F16DAC}.job [2010/12/14 01:27:30 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/12/14 00:55:18 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/12/14 00:38:59 | 000,248,696 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/12/14 00:38:11 | 000,870,011 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k1 [2010/12/14 00:38:11 | 000,064,972 | ---- | M] () -- C:\WINDOWS\System32\drivers\KmxAgent.asc [2010/12/14 00:38:11 | 000,010,417 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k0 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k2 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k1 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k0 [2010/12/14 00:38:11 | 000,000,289 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k2 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k7 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k6 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k5 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k4 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k3 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k7 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k6 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k5 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k4 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k3 [2010/12/14 00:22:07 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010/12/13 23:54:54 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/11/20 09:30:21 | 000,473,308 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/11/20 09:30:21 | 000,084,880 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/12/14 01:23:48 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/12/14 00:55:18 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/09/05 22:44:14 | 000,000,007 | ---- | C] () -- C:\WINDOWS\System32\mkghj.dll [2010/09/05 20:10:49 | 000,011,448 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsUpIO.sys [2010/02/24 17:39:20 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2010/02/01 18:45:45 | 000,941,784 | ---- | C] () -- C:\WINDOWS\System32\drivers\CAMTHWDM.sys [2009/08/12 03:41:34 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2009/08/12 02:50:21 | 001,759,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys [2009/08/12 02:50:21 | 000,028,544 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys [2009/08/12 02:50:21 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2uvc.ini [2009/08/11 14:06:52 | 000,021,864 | ---- | C] () -- C:\WINDOWS\AsAcpiSvrLang.ini [2009/08/11 14:06:52 | 000,012,208 | ---- | C] () -- C:\WINDOWS\AsTrayLang.ini [2009/08/11 13:51:31 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll [2009/08/11 08:03:27 | 000,005,312 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2009/08/11 08:03:22 | 000,755,200 | ---- | C] () -- C:\WINDOWS\System32\ir50_32.dll [2009/08/11 08:03:22 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcx.dll [2009/08/11 08:03:22 | 000,200,192 | ---- | C] () -- C:\WINDOWS\System32\ir50_qc.dll [2009/08/11 08:03:22 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\ir50_qcx.dll [2009/08/11 08:03:22 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\ir41_qc.dll [2009/08/11 01:10:25 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [color=#E56717]========== LOP Check ==========[/color] [2010/09/05 22:38:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CA [2010/01/07 17:24:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EmailNotifier [2010/05/22 11:56:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LimeWire Music [2010/12/14 00:16:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QueryExplorer [2009/08/20 07:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ralink Driver [2010/03/08 23:14:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010/10/17 19:15:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\CallingID [2010/01/07 17:25:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\EmailNotifier [2010/05/22 13:15:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\LimeWire Music [2010/01/07 17:24:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\ooVoo Details [2010/03/04 17:04:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\oovootb [2010/02/01 20:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\Webcammax [2010/12/14 10:31:23 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{5F0E6D44-3077-41FB-8340-F45E75F16DAC}.job [color=#E56717]========== Purity Check ==========[/color] < End of report > SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2010/11/19 12:18:14 | 000,061,720 | ---- | M] () [Auto | Stopped] -- C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer119.exe -- (QueryExplorer Service) SRV - [2010/05/14 10:00:26 | 000,249,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort) SRV - [2010/04/06 07:12:24 | 000,206,160 | ---- | M] (Computer Associates International, Inc.) [Auto | Stopped] -- C:\Program Files\CA\CA Internet Security Suite\ccschedulersvc.exe -- (ccSchedulerSVC) SRV - [2010/04/06 07:12:22 | 000,251,216 | ---- | M] (CA, Inc.) [On_Demand | Stopped] -- C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe -- (CaCCProvSP) SRV - [2010/03/20 04:41:08 | 000,212,992 | ---- | M] (Computer Associates International, Inc.) [Auto | Stopped] -- C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus Plus\isafe.exe -- (CAISafe) SRV - [2009/08/04 09:42:18 | 000,887,288 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe -- (UmxAgent) SRV - [2009/07/31 15:30:14 | 000,150,008 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe -- (UmxFwHlp) SRV - [2009/07/27 14:40:44 | 000,227,832 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe -- (UmxPol) SRV - [2009/07/13 09:39:14 | 000,760,664 | ---- | M] (CA) [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe -- (UmxCfg) SRV - [2009/02/06 20:08:58 | 000,533,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\ohtsed.sys -- (ocayvfg) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\btwusb.sys -- (BTWUSB) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btwhid.sys -- (btwhid) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btwdndis.sys -- (BTWDNDIS) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btport.sys -- (BTDriver) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\btaudio.sys -- (btaudio) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\AmUStor.SYS -- (AmUStor) DRV - [2009/12/23 10:29:36 | 000,132,088 | ---- | M] (CA) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\KmxAMRT.sys -- (KmxAMRT) DRV - [2009/12/23 10:29:36 | 000,078,840 | ---- | M] (CA) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\KmxAgent.sys -- (KmxAgent) DRV - [2009/09/30 15:51:00 | 000,239,608 | ---- | M] (CA) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KmxCfg.sys -- (KmxCfg) DRV - [2009/09/30 15:51:00 | 000,060,920 | ---- | M] (CA) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\KmxSbx.sys -- (KmxSbx) DRV - [2009/09/02 16:29:58 | 000,053,240 | ---- | M] (CA) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\KmxFile.sys -- (KmxFile) DRV - [2009/08/14 10:43:50 | 000,145,912 | ---- | M] (CA) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\KmxCF.sys -- (KmxCF) DRV - [2009/07/10 20:33:36 | 001,015,424 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86) DRV - [2009/07/06 09:48:02 | 000,011,448 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AsUpIO.sys -- (AsUpIO) DRV - [2009/06/08 09:02:04 | 000,115,704 | ---- | M] (CA) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\KmxFw.sys -- (KmxFw) DRV - [2009/06/08 09:02:02 | 000,108,024 | ---- | M] (CA) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\DRIVERS\kmxstart.sys -- (KmxStart) DRV - [2009/04/27 06:26:44 | 005,074,944 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2009/04/09 08:14:28 | 000,208,816 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2009/03/27 14:27:04 | 000,598,656 | ---- | M] (Computer Associates International, Inc.) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KmxAMVet.sys -- (KmxAMVet) DRV - [2009/03/14 01:05:26 | 001,528,928 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416) DRV - [2009/03/13 18:32:18 | 001,759,616 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV - [2009/03/02 00:03:47 | 000,038,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c) DRV - [2009/02/06 20:08:42 | 000,055,152 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr) DRV - [2008/11/19 03:21:28 | 000,039,040 | ---- | M] (GenesysLogic Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\uvclf.sys -- (uvclf) DRV - [2008/09/12 00:32:56 | 000,327,192 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\iaStor.sys -- (iaStor) DRV - [2008/08/05 07:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2008/04/14 07:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008/04/08 17:59:28 | 000,010,752 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASUSACPI.SYS -- (AsusACPI) DRV - [2007/12/19 10:32:12 | 005,854,688 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm) DRV - [2006/01/04 02:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z002&form=ZGAPHP IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555 FF - HKLM\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin File not found FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/09/05 19:32:45 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\ShopperReports@ShopperReports.com: C:\Program Files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions O1 HOSTS File: ([2008/04/14 07:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (ooVoo Toolbar) - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\oovoodx.dll () O2 - BHO: (Download Energy Toolbar) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDow0.dll (Conduit Ltd.) O2 - BHO: (MSN Toolbar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll (Microsoft Corporation) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (ToggleEN Toolbar) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (MSN Toolbar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found. O3 - HKLM\..\Toolbar: (ooVoo Toolbar) - {A1FB2F9A-D35E-11DD-8935-E46A56D89593} - C:\Program Files\oovootb\oovoodx.dll () O3 - HKLM\..\Toolbar: (Download Energy Toolbar) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - C:\Program Files\Download_Energy\tbDow0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (ToggleEN Toolbar) - {038CB5C7-48EA-4AF9-94E0-A1646542E62B} - C:\Program Files\ToggleEN\tbTog1.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Download Energy Toolbar) - {AD708C09-D51B-45B3-9D28-4EBA2681FEBF} - C:\Program Files\Download_Energy\tbDow0.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O4 - HKLM..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe (CA, Inc.) O4 - HKLM..\Run: [cctray] C:\Program Files\CA\CA Internet Security Suite\casc.exe (CA, Inc.) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [LiveUpdate] C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe () O4 - HKLM..\Run: [MSN Toolbar] C:\Program Files\MSN Toolbar\Platform\4.0.0379.0\mswinext.exe File not found O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [snp2uvc] C:\WINDOWS\vsnp2uvc.exe File not found O4 - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated) O4 - HKCU..\Run: [DW6] C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe File not found O4 - HKCU..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe () O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ SuperHybridEngine.lnk = C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (ASUSTeK Computer Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\VetRedir.dll (Computer Associates International, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\System32\VetRedir.dll (Computer Associates International, Inc.) O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 68.237.161.12 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O20 - AppInit_DLLs: (UmxSbxExw.dll) - C:\WINDOWS\System32\UmxSbxExw.dll (CA) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O20 - Winlogon\Notify\PFW: DllName - UmxWnp.Dll - C:\WINDOWS\System32\UmxWNP.dll (CA) O24 - Desktop WallPaper: C:\Documents and Settings\Sabrina Trifilio\Application Data\Microsoft\Windows Live Photo Gallery\Windows Live Photo Gallery Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sabrina Trifilio\Application Data\Microsoft\Windows Live Photo Gallery\Windows Live Photo Gallery Wallpaper.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/08/11 08:16:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/12/14 11:07:23 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe [2010/12/14 00:55:16 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/12/14 00:55:14 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/12/14 00:55:13 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010/12/14 00:16:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sabrina Trifilio\ShopperReports3 [2009/08/12 02:50:21 | 000,196,608 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll [2009/08/12 02:50:19 | 000,225,280 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/12/14 11:07:24 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe [2010/12/14 10:46:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/12/14 10:31:23 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{5F0E6D44-3077-41FB-8340-F45E75F16DAC}.job [2010/12/14 01:27:30 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/12/14 00:55:18 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/12/14 00:38:59 | 000,248,696 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/12/14 00:38:11 | 000,870,011 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k1 [2010/12/14 00:38:11 | 000,064,972 | ---- | M] () -- C:\WINDOWS\System32\drivers\KmxAgent.asc [2010/12/14 00:38:11 | 000,010,417 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k0 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k2 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k1 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k0 [2010/12/14 00:38:11 | 000,000,289 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k2 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k7 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k6 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k5 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k4 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k3 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k7 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k6 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k5 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k4 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k3 [2010/12/14 00:22:07 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010/12/13 23:54:54 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/11/20 09:30:21 | 000,473,308 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/11/20 09:30:21 | 000,084,880 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/12/14 01:23:48 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/12/14 00:55:18 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/09/05 22:44:14 | 000,000,007 | ---- | C] () -- C:\WINDOWS\System32\mkghj.dll [2010/09/05 20:10:49 | 000,011,448 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsUpIO.sys [2010/02/24 17:39:20 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2010/02/01 18:45:45 | 000,941,784 | ---- | C] () -- C:\WINDOWS\System32\drivers\CAMTHWDM.sys [2009/08/12 03:41:34 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2009/08/12 02:50:21 | 001,759,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys [2009/08/12 02:50:21 | 000,028,544 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys [2009/08/12 02:50:21 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2uvc.ini [2009/08/11 14:06:52 | 000,021,864 | ---- | C] () -- C:\WINDOWS\AsAcpiSvrLang.ini [2009/08/11 14:06:52 | 000,012,208 | ---- | C] () -- C:\WINDOWS\AsTrayLang.ini [2009/08/11 13:51:31 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll [2009/08/11 08:03:27 | 000,005,312 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2009/08/11 08:03:22 | 000,755,200 | ---- | C] () -- C:\WINDOWS\System32\ir50_32.dll [2009/08/11 08:03:22 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcx.dll [2009/08/11 08:03:22 | 000,200,192 | ---- | C] () -- C:\WINDOWS\System32\ir50_qc.dll [2009/08/11 08:03:22 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\ir50_qcx.dll [2009/08/11 08:03:22 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\ir41_qc.dll [2009/08/11 01:10:25 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [color=#E56717]========== LOP Check ==========[/color] [2010/09/05 22:38:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CA [2010/01/07 17:24:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EmailNotifier [2010/05/22 11:56:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LimeWire Music [2010/12/14 00:16:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QueryExplorer [2009/08/20 07:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ralink Driver [2010/03/08 23:14:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010/10/17 19:15:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\CallingID [2010/01/07 17:25:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\EmailNotifier [2010/05/22 13:15:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\LimeWire Music [2010/01/07 17:24:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\ooVoo Details [2010/03/04 17:04:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\oovootb [2010/02/01 20:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\Webcammax [2010/12/14 10:31:23 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{5F0E6D44-3077-41FB-8340-F45E75F16DAC}.job [color=#E56717]========== Purity Check ==========[/color] < End of report > [2010/12/14 11:12:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Desktop [2010/12/14 11:07:45 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\Sabrina Trifilio\Cookies [2010/12/14 11:07:24 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe [2010/12/14 11:07:23 | 000,405,504 | -H-- | M] () -- C:\Documents and Settings\Sabrina Trifilio\ntuser.dat.LOG [2010/12/14 10:46:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/12/14 10:34:17 | 003,145,728 | ---- | M] () -- C:\Documents and Settings\Sabrina Trifilio\ntuser.dat [2010/12/14 10:31:23 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{5F0E6D44-3077-41FB-8340-F45E75F16DAC}.job [2010/12/14 10:28:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Tracing [2010/12/14 10:23:46 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/12/14 02:08:44 | 000,000,000 | ---D | M] -- C:\Program Files\ToggleEN [2010/12/14 01:33:09 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware [2010/12/14 01:27:30 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/12/14 00:55:18 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/12/14 00:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Desktop [2010/12/14 00:38:59 | 000,248,696 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/12/14 00:38:11 | 000,870,011 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k1 [2010/12/14 00:38:11 | 000,064,972 | ---- | M] () -- C:\WINDOWS\System32\drivers\KmxAgent.asc [2010/12/14 00:38:11 | 000,010,417 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k0 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k2 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k1 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k0 [2010/12/14 00:38:11 | 000,000,289 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k2 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k7 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k6 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k5 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k4 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k3 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k7 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k6 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k5 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k4 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k3 [2010/12/14 00:38:05 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Sabrina Trifilio\ntuser.ini [2010/12/14 00:22:07 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010/12/14 00:16:26 | 000,000,000 | ---D | M] -- C:\Program Files\QueryExplorer [2010/12/14 00:16:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QueryExplorer [2010/12/14 00:16:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\ShopperReports3 [2010/12/13 23:54:54 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/11/20 09:30:21 | 000,473,308 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/11/20 09:30:21 | 000,084,880 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010/11/20 09:29:33 | 000,567,052 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010/10/10 08:48:30 | 004,300,322 | -H-- | M] () -- C:\Documents and Settings\Sabrina Trifilio\Local Settings\Application Data\IconCache.db [2010/04/18 08:39:56 | 000,060,664 | ---- | M] () -- C:\Documents and Settings\Sabrina Trifilio\Local Settings\Application Data\GDIPFONTCACHEV1.DAT [2009/08/11 01:10:07 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Sabrina Trifilio\Application Data\desktop.ini [2009/08/11 01:10:07 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/12/14 11:07:24 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sabrina Trifilio\Desktop\OTL.exe [2010/12/14 10:46:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/12/14 10:31:23 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{5F0E6D44-3077-41FB-8340-F45E75F16DAC}.job [2010/12/14 01:27:30 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/12/14 00:55:18 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/12/14 00:38:59 | 000,248,696 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/12/14 00:38:11 | 000,870,011 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k1 [2010/12/14 00:38:11 | 000,064,972 | ---- | M] () -- C:\WINDOWS\System32\drivers\KmxAgent.asc [2010/12/14 00:38:11 | 000,010,417 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k0 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k2 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k1 [2010/12/14 00:38:11 | 000,000,363 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k0 [2010/12/14 00:38:11 | 000,000,289 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k2 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k7 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k6 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k5 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k4 [2010/12/14 00:38:11 | 000,000,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxcfg.u2k3 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k7 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k6 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k5 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k4 [2010/12/14 00:38:11 | 000,000,045 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmxzone.u2k3 [2010/12/14 00:22:07 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010/12/13 23:54:54 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/11/20 09:30:21 | 000,473,308 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/11/20 09:30:21 | 000,084,880 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [color=#E56717]========== LOP Check ==========[/color] [2010/09/05 22:38:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CA [2010/01/07 17:24:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EmailNotifier [2010/05/22 11:56:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LimeWire Music [2010/12/14 00:16:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QueryExplorer [2009/08/20 07:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ralink Driver [2010/03/08 23:14:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010/10/17 19:15:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\CallingID [2010/01/07 17:25:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\EmailNotifier [2010/05/22 13:15:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\LimeWire Music [2010/01/07 17:24:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\ooVoo Details [2010/03/04 17:04:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\oovootb [2010/02/01 20:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sabrina Trifilio\Application Data\Webcammax [2010/12/14 10:31:23 | 000,000,444 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{5F0E6D44-3077-41FB-8340-F45E75F16DAC}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >