OTL logfile created on: 5/2/2011 8:59:43 AM - Run 2
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Documents and Settings\Administrator\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
510.00 Mb Total Physical Memory | 323.00 Mb Available Physical Memory | 63.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 27.91 Gb Total Space | 11.63 Gb Free Space | 41.67% Space Free | Partition Type: NTFS
Drive E: | 3.73 Gb Total Space | 3.72 Gb Free Space | 99.95% Space Free | Partition Type: FAT32
 
Computer Name: JOHNNY | User Name: ja3756 | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011/05/02 09:26:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- E:\OTL.exe
PRC - [2011/05/02 09:26:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
PRC - [2011/04/11 01:14:28 | 000,419,840 | ---- | M] (Igor Pavlov) -- C:\Program Files\7-Zip\7zFM.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | -H-- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011/05/02 09:26:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
MOD - [2010/08/23 11:12:02 | 001,054,208 | -H-- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2007/04/23 04:12:52 | 000,336,944 | -H-- | M] (Cisco Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe -- (vpnagent)
SRV - [2006/04/20 08:34:26 | 001,520,688 | -H-- | M] (Cisco Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2005/05/27 09:12:38 | 000,073,728 | -H-- | M] () [Auto | Stopped] -- c:\alice5\exe\asw_service.exe -- (AliceSleepware)
SRV - [2004/05/27 01:14:58 | 000,053,337 | -H-- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2004/05/27 01:13:00 | 000,069,718 | -H-- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2003/11/13 13:29:40 | 000,452,608 | -H-- | M] () [Auto | Stopped] -- C:\Program Files\Linksys\Wireless-N Network Monitor\NICServ.exe -- (NICSer_WPC300N)
SRV - [2003/08/21 17:06:56 | 000,245,760 | -H-- | M] (Networks Associates Technology, Inc) [On_Demand | Stopped] -- C:\Program Files\McAfee.com\Agent\mcupdmgr.exe -- (mcupdmgr.exe)
SRV - [2003/08/08 17:04:38 | 000,106,496 | -H-- | M] (Networks Associates Technology, Inc) [Auto | Stopped] -- c:\Program Files\McAfee.com\VSO\mcvsrte.exe -- (MCVSRte)
SRV - [2003/04/29 15:29:54 | 000,139,264 | -H-- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\NCS\Sync\NetSvc.exe -- (NetSvc)
SRV - [2002/03/13 08:50:34 | 000,225,375 | -H-- | M] () [On_Demand | Stopped] -- c:\Program Files\McAfee.com\VSO\McShield.exe -- (McShield)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010/01/25 11:38:27 | 000,816,672 | RH-- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\AE1000XP.sys -- (AE1000)
DRV - [2008/04/13 13:56:49 | 000,012,800 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\usb8023.sys -- (USB_RNDIS_XP)
DRV - [2008/04/13 13:56:06 | 000,088,320 | -H-- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/13 13:36:41 | 000,063,744 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\mf.sys -- (mf)
DRV - [2007/04/23 04:09:58 | 000,024,176 | -H-- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\vpnva.sys -- (vpnva)
DRV - [2007/03/22 12:57:14 | 000,028,672 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\elagopro.sys -- (elagopro)
DRV - [2007/03/22 12:57:14 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\elaunidr.sys -- (elaunidr)
DRV - [2006/04/24 23:51:08 | 000,543,104 | -H-- | M] (Linksys, A Division of Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\BCMWL5.SYS -- (BCM43XX)
DRV - [2006/04/20 08:33:40 | 000,303,740 | -H-- | M] (Cisco Systems, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2005/06/29 19:50:30 | 000,110,080 | -H-- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\dne2000.sys -- (DNE)
DRV - [2005/05/18 13:52:56 | 000,173,056 | -H-- | M] (Funk Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\odysseyIM4.sys -- (odysseyIM4)
DRV - [2005/05/17 04:51:34 | 000,005,315 | -H-- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\CVirtA.sys -- (CVirtA)
DRV - [2005/03/03 12:23:08 | 000,023,040 | -H-- | M] (Iomega) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\IABFilt.sys -- (IABFilt)
DRV - [2005/01/26 06:22:20 | 000,280,344 | -H-- | M] (Zone Labs LLC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\vsdatant.sys -- (vsdatant)
DRV - [2004/08/04 00:29:49 | 000,019,455 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wvchntxx.sys -- (iAimFP4)
DRV - [2004/08/04 00:29:47 | 000,012,063 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wsiintxx.sys -- (iAimFP3)
DRV - [2004/08/04 00:29:45 | 000,023,615 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wch7xxnt.sys -- (iAimTV4)
DRV - [2004/08/04 00:29:43 | 000,033,599 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\watv04nt.sys -- (iAimTV3)
DRV - [2004/08/04 00:29:42 | 000,019,551 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\watv02nt.sys -- (iAimTV1)
DRV - [2004/08/04 00:29:41 | 000,029,311 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\watv01nt.sys -- (iAimTV0)
DRV - [2004/08/04 00:29:37 | 000,012,415 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv01nt.sys -- (iAimFP0)
DRV - [2004/08/04 00:29:37 | 000,012,127 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv02nt.sys -- (iAimFP1)
DRV - [2004/08/04 00:29:37 | 000,011,775 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv05nt.sys -- (iAimFP2)
DRV - [2004/08/04 00:29:36 | 000,161,020 | -H-- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\i81xnt5.sys -- (i81x)
DRV - [2003/12/14 23:13:06 | 000,008,552 | -H-- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM)
DRV - [2003/11/28 10:35:33 | 000,206,464 | -H-- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys -- (UdfReadr_xp)
DRV - [2003/11/28 10:35:33 | 000,143,834 | -H-- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\pwd_2K.sys -- (pwd_2k)
DRV - [2003/11/28 10:35:33 | 000,030,630 | -H-- | M] (Roxio) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\Mmc_2k.sys -- (mmc_2K)
DRV - [2003/11/28 10:35:33 | 000,025,898 | -H-- | M] (Roxio) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\Dvd_2k.sys -- (dvd_2K)
DRV - [2003/07/16 22:28:02 | 000,017,142 | -H-- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\CBTNDIS5.SYS -- (CBTNDIS5)
DRV - [2003/06/10 22:35:58 | 000,093,700 | -H-- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\Apfiltr.sys -- (ApfiltrService)
DRV - [2003/05/30 19:45:16 | 000,477,403 | -H-- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\vpctcom.sys -- (Vpctcom)
DRV - [2003/05/30 18:50:46 | 000,690,973 | -H-- | M] (PCTEL, INC.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\vmodem.sys -- (Vmodem)
DRV - [2003/05/28 13:08:12 | 000,066,111 | -H-- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\vvoice.sys -- (Vvoice)
DRV - [2003/04/25 18:10:52 | 000,220,176 | -H-- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\STAC97.sys -- (STAC97) Audio Driver (WDM)
DRV - [2003/02/24 16:30:02 | 000,135,292 | -H-- | M] (PCTEL, INC.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ptserial.sys -- (Ptserial)
DRV - [2003/02/15 01:12:20 | 000,032,311 | -H-- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wa301b.sys -- ({E2B953A7-195A-44F9-9BA3-3D5F4E32BB55})
DRV - [2003/02/15 01:12:20 | 000,032,311 | -H-- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wa301a.sys -- ({E2B953A6-195A-44F9-9BA3-3D5F4E32BB55})
DRV - [2003/01/10 17:13:04 | 000,033,588 | -H-- | M] (America Online, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - [2003/01/07 16:19:26 | 000,017,217 | -H-- | M] (Dell Computer Corporation) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys -- (omci)
DRV - [2002/12/17 13:32:58 | 000,061,424 | -H-- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp)
DRV - [2002/12/17 13:32:46 | 000,023,436 | -H-- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k)
DRV - [2002/12/17 13:27:32 | 000,241,152 | -H-- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\cdudf_xp.sys -- (cdudf_xp)
DRV - [2002/11/22 21:01:26 | 000,020,096 | -H-- | M] (Intel Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\iqvw32.sys -- (NAL)
DRV - [2002/11/18 18:20:44 | 000,030,976 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\gv3.sys -- (gv3)
DRV - [2002/08/29 06:00:00 | 000,063,232 | -H-- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKNB.SYS -- (NwlnkNb)
DRV - [2002/08/29 06:00:00 | 000,055,936 | -H-- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKSPX.SYS -- (NwlnkSpx)
DRV - [2002/06/19 03:16:02 | 000,011,840 | -H-- | M] (Roxio) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\MRFilter.sys -- (MrFilter)
DRV - [2002/03/13 08:50:36 | 000,023,296 | -H-- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\NaiFiltr.sys -- (NaiFiltr)
DRV - [2001/08/17 13:12:12 | 000,002,944 | -H-- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\BrFilt.sys -- (brfilt)
DRV - [2001/08/17 13:11:06 | 000,066,591 | -H-- | M] (3Com Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\EL90XBC5.SYS -- (EL90XBC)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
 
O1 HOSTS File: ([2011/04/09 13:09:26 | 000,000,888 | RH-- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
O1 - Hosts: 209.172.52.73	www.google.com
O1 - Hosts: 209.172.52.74	search.yahoo.com
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: () - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - c:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKLM\..\Toolbar: (McAfee VirusScan) - {BA52B914-B692-46c4-B683-905236F6F655} - c:\Program Files\McAfee.com\VSO\mcvsshl.dll (Networks Associates Technology, Inc)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe ()
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe ()
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe ()
O4 - HKLM..\Run: [BearShare]  File not found
O4 - HKLM..\Run: [cleanhdd] C:\Documents and Settings\ja3756\Application Data\cleanhdd.exe ()
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DVDSentry] C:\WINDOWS\SYSTEM32\DSentry.exe (Dell - Advanced Desktop Engineering)
O4 - HKLM..\Run: [ezShieldProtector for Px] C:\WINDOWS\SYSTEM32\ezSP_Px.exe (Easy Systems Japan Ltd.)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files\Dell\Dell Laser MFP 1600n\PaperPort\IndexSearch.exe ()
O4 - HKLM..\Run: [Linksys Wireless-N Notebook Adapter] C:\Program Files\Linksys\Wireless-N Network Monitor\WPC300N.exe ()
O4 - HKLM..\Run: [MCAgentExe] c:\Program Files\McAfee.com\Agent\mcagent.exe ()
O4 - HKLM..\Run: [MCUpdateExe] C:\Program Files\McAfee.com\Agent\McUpdate.exe ()
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\Dell\Dell Laser MFP 1600n\PaperPort\pptd40nt.exe ()
O4 - HKLM..\Run: [PCTVOICE] C:\WINDOWS\System32\pctspk.exe ()
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask                      .exe ()
O4 - HKLM..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [VirusScan Online] c:\Program Files\McAfee.com\VSO\mcvsshld.exe ()
O4 - HKLM..\Run: [VSOCheckTask] c:\Program Files\McAfee.com\VSO\mcmnhdlr.exe ()
O4 - HKCU..\Run: [EasyLinkAdvisor] C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe ()
O4 - HKCU..\Run: [Iomega Automatic Backup Pro]  File not found
O4 - HKCU..\Run: [MsnMsgr]  File not found
O4 - HKCU..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe ()
O4 - HKCU..\Run: [XFPwmcpwlYCi] C:\Documents and Settings\All Users\Application Data\XFPwmcpwlYCi.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe (Cisco Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -  File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\SYSTEM32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains:   ([]msn in My Computer)
O15 - HKCU\..Trusted Domains: ameritrade.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range -  5)
O15 - HKCU\..Trusted Domains: tdameritrade.com ([]https in Trusted sites)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} http://download.av.aol.com/molbin/shared/mcinsctl/en-us/4,0,0,77/mcinsctl.cab (McAfee.com Operating System Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1192329505873 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2)
O16 - DPF: {9059F30F-4EB1-4BD2-9FDC-36F43A218F4A} http://206.30.161.128/tsweb/msrdp.cab (Microsoft RDP Client Control (redist))
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab (MsnMessengerSetupDownloadControl Class)
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} http://download.av.aol.com/molbin/shared/mcgdmgr/en-us/1,0,0,18/mcgdmgr.cab (DwnldGroupMgr Class)
O16 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2)
O16 - DPF: {D1ACD2D8-7312-4D06-BECD-90EB094D2277} http://mediaplayer.walmart.com/installer/install.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 74.128.17.114 74.128.19.102
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (VPNGina.dll) - C:\WINDOWS\System32\vpngina.dll (Cisco Systems, Inc.)
O20 - Winlogon\Notify\glowext: DllName - C:\Documents and Settings\NetworkService\Local Settings\Application Data\glowext.dll - C:\Documents and Settings\NetworkService\Local Settings\Application Data\glowext.dll ()
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\ja3756\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\ja3756\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2002/09/03 14:36:02 | 000,000,000 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/05/02 08:39:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\7-Zip
[2011/05/02 08:39:54 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2011/05/02 08:31:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ja3756\Recent
[2011/04/10 08:51:25 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ja3756\Start Menu\Programs\Windows Restore
[2011/04/10 07:38:15 | 000,050,000 | -H-- | C] (ООО Закриптуй) -- C:\WINDOWS\System32\a98ms7aca.dll
[2011/04/10 07:34:56 | 000,000,000 | -H-D | C] -- C:\Temp
[2011/04/10 07:34:46 | 000,557,056 | -H-- | C] (GPA) -- C:\Documents and Settings\All Users\Application Data\XFPwmcpwlYCi .exe
[2011/04/10 07:34:42 | 000,062,976 | -HS- | C] (Microsoft Corporation) -- C:\Documents and Settings\ja3756\Application Data\cleanhdd .exe
[2011/04/10 07:34:42 | 000,053,760 | -HS- | C] (Microsoft Corporation) -- C:\Documents and Settings\ja3756\Application Data\cleanhdd.dll
[2011/04/10 07:33:15 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NetworkService\Application Data\AdobeUM
[2011/04/10 07:30:48 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe
[2011/04/10 07:30:26 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2011/04/09 08:39:27 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2011/04/08 17:34:05 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NetworkService\Application Data\Apple Computer
[2008/03/14 23:39:47 | 045,144,176 | -H-- | C] (SleepEx Systems, Inc.                                       ) -- C:\Program Files\SleepEx.2.3.build.2.3.0.17.Install.AllUsers.exe
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/05/02 08:39:22 | 000,001,170 | -H-- | M] () -- C:\WINDOWS\System32\WPA.DBL
[2011/05/02 08:38:06 | 000,002,048 | -H-- | M] () -- C:\WINDOWS\BOOTSTAT.DAT
[2011/05/02 08:35:00 | 000,000,498 | -H-- | M] () -- C:\WINDOWS\tasks\McAfee.com Update Check (JOHNNY-obailey).job
[2011/05/02 08:34:06 | 000,000,496 | -H-- | M] () -- C:\WINDOWS\tasks\McAfee.com Update Check (JOHNNY-ja3756).job
[2011/05/02 08:34:00 | 000,000,498 | -H-- | M] () -- C:\WINDOWS\tasks\McAfee.com Update Check (JOHNNY-Valledo).job
[2011/04/10 08:59:53 | 000,000,104 | -H-- | M] () -- C:\Documents and Settings\All Users\Application Data\~18407220
[2011/04/10 08:52:01 | 000,000,136 | -H-- | M] () -- C:\Documents and Settings\All Users\Application Data\~18407220r
[2011/04/10 08:51:29 | 000,000,811 | -H-- | M] () -- C:\Documents and Settings\ja3756\Desktop\Windows Restore.lnk
[2011/04/10 08:51:08 | 000,000,344 | -H-- | M] () -- C:\Documents and Settings\All Users\Application Data\18407220
[2011/04/10 08:50:38 | 000,479,232 | -H-- | M] () -- C:\Documents and Settings\All Users\Application Data\18407220.exe
[2011/04/10 07:38:15 | 000,050,000 | -H-- | M] (ООО Закриптуй) -- C:\WINDOWS\System32\a98ms7aca.dll
[2011/04/10 07:35:06 | 000,073,732 | -H-- | M] () -- C:\Documents and Settings\All Users\Application Data\XFPwmcpwlYCi.exe
[2011/04/10 07:35:02 | 000,072,712 | -H-- | M] () -- C:\Documents and Settings\ja3756\Application Data\cleanhdd.exe
[2011/04/10 07:34:12 | 000,072,708 | -H-- | M] () -- C:\WINDOWS\System32\pctspk.exe
[2011/04/10 07:34:10 | 000,557,056 | -H-- | M] (GPA) -- C:\Documents and Settings\All Users\Application Data\XFPwmcpwlYCi .exe
[2011/04/09 13:09:26 | 000,000,888 | RH-- | M] () -- C:\WINDOWS\System32\drivers\ETC\hosts
[2011/04/06 23:00:29 | 000,423,936 | -H-- | M] () -- C:\Documents and Settings\ja3756\My Documents\pc_update107_2190.exe
[2011/04/03 20:02:56 | 000,054,996 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/04/10 08:52:01 | 000,000,136 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\~18407220r
[2011/04/10 08:52:01 | 000,000,104 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\~18407220
[2011/04/10 08:51:29 | 000,000,811 | -H-- | C] () -- C:\Documents and Settings\ja3756\Desktop\Windows Restore.lnk
[2011/04/10 08:51:08 | 000,000,344 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\18407220
[2011/04/10 08:50:37 | 000,479,232 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\18407220.exe
[2011/04/10 07:34:46 | 000,073,732 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\XFPwmcpwlYCi.exe
[2011/04/10 07:34:42 | 000,072,712 | -H-- | C] () -- C:\Documents and Settings\ja3756\Application Data\cleanhdd.exe
[2011/04/10 07:32:26 | 000,011,264 | -H-- | C] () -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\glowext.dll
[2011/04/06 23:00:28 | 000,423,936 | -H-- | C] () -- C:\Documents and Settings\ja3756\My Documents\pc_update107_2190.exe
[2011/04/03 20:02:56 | 000,054,996 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/06/27 15:07:51 | 000,683,801 | -H-- | C] () -- C:\WINDOWS\unins000.exe
[2010/06/27 15:07:51 | 000,001,067 | -H-- | C] () -- C:\WINDOWS\unins000.dat
[2010/05/24 08:55:41 | 000,013,931 | RH-- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2009/08/03 15:07:42 | 000,403,816 | -H-- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,230,768 | -H-- | C] () -- C:\WINDOWS\System32\OGAEXEC.exe
[2007/09/03 22:20:13 | 000,000,027 | -H-- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2007/09/03 22:18:58 | 000,000,225 | -H-- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2007/09/03 22:18:58 | 000,000,093 | -H-- | C] () -- C:\WINDOWS\brpcfx.ini
[2007/09/03 22:18:58 | 000,000,050 | -H-- | C] () -- C:\WINDOWS\System32\bridf06a.dat
[2007/09/03 22:16:04 | 000,106,496 | -H-- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2007/09/03 22:16:04 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\brdfxspd.dat
[2007/09/03 19:17:01 | 000,000,061 | -H-- | C] () -- C:\WINDOWS\init.ini
[2007/09/03 18:12:35 | 000,027,019 | -H-- | C] () -- C:\WINDOWS\maxlink.ini
[2007/09/03 15:41:53 | 000,001,155 | -H-- | C] () -- C:\WINDOWS\checkip.dat
[2007/02/26 09:29:38 | 000,197,680 | -H-- | C] () -- C:\WINDOWS\System32\vpnapi.dll
[2006/08/22 14:45:17 | 000,007,680 | -H-- | C] () -- C:\WINDOWS\System32\CNMVS64.DLL
[2006/08/22 09:07:08 | 000,029,752 | -H-- | C] () -- C:\WINDOWS\System32\InstHelper.dll
[2006/02/24 21:27:26 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\msoffice.ini
[2006/02/11 12:59:53 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\ja3756\Application Data\dm.ini
[2005/11/08 16:42:22 | 000,081,920 | RH-- | C] () -- C:\WINDOWS\System32\WIAEH.dll
[2005/11/08 16:42:22 | 000,077,824 | RH-- | C] () -- C:\WINDOWS\System32\WIAIPH.dll
[2005/11/08 16:42:22 | 000,053,315 | RH-- | C] () -- C:\WINDOWS\System32\Sswiadrv.dll
[2005/11/08 16:42:22 | 000,049,152 | RH-- | C] () -- C:\WINDOWS\System32\WIASTIIO.dll
[2005/11/04 10:21:24 | 000,193,584 | -H-- | C] () -- C:\WINDOWS\System32\CSGina.dll
[2005/09/20 19:57:19 | 000,000,419 | -H-- | C] () -- C:\WINDOWS\BRWMARK.INI
[2005/09/20 19:57:19 | 000,000,034 | -H-- | C] () -- C:\WINDOWS\System32\BD7820N.DAT
[2005/03/28 13:28:56 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\ja3756\Local Settings\Application Data\dlm.dat
[2004/12/25 19:38:07 | 000,049,152 | -H-- | C] () -- C:\WINDOWS\System32\pxhpinst.exe
[2004/11/18 07:44:41 | 000,000,129 | -H-- | C] () -- C:\Documents and Settings\ja3756\Local Settings\Application Data\fusioncache.dat
[2004/11/16 12:06:44 | 000,000,035 | -H-- | C] () -- C:\WINDOWS\webica.ini
[2004/09/07 11:00:26 | 000,004,569 | -H-- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/07/06 13:28:56 | 000,007,168 | -H-- | C] () -- C:\Documents and Settings\ja3756\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/05/24 12:44:38 | 000,000,407 | -H-- | C] () -- C:\WINDOWS\LEXSTAT.INI
[2004/05/23 09:45:23 | 000,000,050 | -H-- | C] () -- C:\WINDOWS\upth.ini
[2004/05/23 09:45:23 | 000,000,024 | -H-- | C] () -- C:\WINDOWS\atid.ini
[2004/05/19 11:16:52 | 000,023,296 | -H-- | C] () -- C:\WINDOWS\System32\drivers\NaiFiltr.sys
[2004/03/29 11:48:56 | 000,000,560 | -H-- | C] () -- C:\WINDOWS\DELLSTAT.INI
[2004/01/12 15:13:52 | 000,002,656 | -H-- | C] () -- C:\WINDOWS\ACTWIN2.INI
[2003/12/14 23:14:38 | 000,000,715 | -H-- | C] () -- C:\WINDOWS\aolback.exe.lnk
[2003/12/14 23:10:10 | 000,000,335 | -H-- | C] () -- C:\WINDOWS\nsreg.dat
[2003/11/28 10:38:01 | 000,000,061 | -H-- | C] () -- C:\WINDOWS\smscfg.ini
[2003/11/28 10:27:53 | 000,000,376 | -H-- | C] () -- C:\WINDOWS\ODBC.INI
[2003/11/28 10:16:00 | 000,000,791 | -H-- | C] () -- C:\WINDOWS\orun32.ini
[2003/11/28 10:07:50 | 000,028,768 | -H-- | C] () -- C:\WINDOWS\System32\javaw.exe
[2003/11/28 10:07:50 | 000,024,670 | -H-- | C] () -- C:\WINDOWS\System32\java.exe
[2003/11/28 09:59:48 | 000,002,048 | -H-- | C] () -- C:\WINDOWS\BOOTSTAT.DAT
[2003/11/28 09:58:50 | 000,401,652 | -H-- | C] () -- C:\WINDOWS\System32\PERFH009.DAT
[2003/11/28 09:58:50 | 000,061,660 | -H-- | C] () -- C:\WINDOWS\System32\PERFC009.DAT
[2003/11/28 09:57:35 | 000,001,536 | -H-- | C] () -- C:\WINDOWS\System32\TrueSoft.dat
[2003/11/28 09:45:32 | 000,000,545 | -H-- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2003/01/07 16:05:08 | 000,002,695 | -H-- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/09/03 14:42:36 | 000,262,232 | -H-- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2002/09/03 14:35:18 | 000,004,161 | -H-- | C] () -- C:\WINDOWS\ODBCINST.INI
[2002/09/03 14:31:48 | 000,021,640 | -H-- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2002/09/03 09:31:46 | 013,107,200 | -H-- | C] () -- C:\WINDOWS\System32\OEMBIOS.BIN
[2002/09/03 09:31:44 | 000,004,594 | -H-- | C] () -- C:\WINDOWS\System32\OEMBIOS.DAT
[2002/08/29 06:00:00 | 000,673,088 | -H-- | C] () -- C:\WINDOWS\System32\MLANG.DAT
[2002/08/29 06:00:00 | 000,272,128 | -H-- | C] () -- C:\WINDOWS\System32\PERFI009.DAT
[2002/08/29 06:00:00 | 000,218,003 | -H-- | C] () -- C:\WINDOWS\System32\DSSEC.DAT
[2002/08/29 06:00:00 | 000,046,258 | -H-- | C] () -- C:\WINDOWS\System32\MIB.BIN
[2002/08/29 06:00:00 | 000,028,626 | -H-- | C] () -- C:\WINDOWS\System32\PERFD009.DAT
[2002/08/29 06:00:00 | 000,001,804 | -H-- | C] () -- C:\WINDOWS\System32\dcache.bin
[2002/08/29 06:00:00 | 000,000,741 | -H-- | C] () -- C:\WINDOWS\System32\NOISE.DAT
[2002/03/04 10:16:34 | 000,110,592 | RH-- | C] () -- C:\WINDOWS\System32\Jpeg32.dll
[2001/10/24 16:00:40 | 000,524,288 | -H-- | C] () -- C:\WINDOWS\System32\TDI-SonyOMG.dll
[1980/01/01 01:00:00 | 000,163,840 | -H-- | C] () -- C:\WINDOWS\System32\pctspk .exe
[1980/01/01 01:00:00 | 000,072,708 | -H-- | C] () -- C:\WINDOWS\System32\pctspk.exe
[1980/01/01 01:00:00 | 000,045,056 | -H-- | C] () -- C:\WINDOWS\System32\mdmmoh.dll
[1980/01/01 01:00:00 | 000,016,384 | -H-- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[1980/01/01 01:00:00 | 000,000,456 | -H-- | C] () -- C:\WINDOWS\System32\pthsp.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2007/12/29 09:40:49 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Cisco
[2010/05/24 07:29:23 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Cisco Systems
[2010/06/27 15:17:32 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\myitlab
[2007/09/03 18:11:29 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\ScanSoft
[2008/07/18 14:12:41 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2011/03/27 18:30:11 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2004/11/16 12:07:12 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\ja3756\Application Data\ICAClient
[2004/02/11 21:12:09 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\ja3756\Application Data\InterVideo
[2006/02/24 07:21:24 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\ja3756\Application Data\Iomega Automatic Backup Pro
[2006/02/24 07:10:53 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\ja3756\Application Data\Leadertech
[2005/06/28 20:18:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\ja3756\Application Data\Learn2.com
[2005/07/07 21:43:54 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\ja3756\Application Data\Respironics
[2008/07/18 14:12:43 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\ja3756\Application Data\Viewpoint
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >