OTL.txt log:
OTL logfile created on: 6/28/2010 12:12:32 PM - Run 1
OTL by OldTimer - Version 3.2.7.0 Folder = C:\Documents and Settings\Traynham\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
894.00 Mb Total Physical Memory | 306.00 Mb Available Physical Memory | 34.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 70.00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 108.70 Gb Total Space | 83.20 Gb Free Space | 76.54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: TRAYNHAM-1
Current User Name: Traynham
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ========== PRC - C:\Documents and Settings\Traynham\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\MPF\MpfSrv.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\MSK\msksrver.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe ()
PRC - C:\Program Files\Java\jre6\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
PRC - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
PRC - C:\Program Files\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft ActiveSync\rapimgr.exe (Microsoft Corporation)
PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
PRC - C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.)
PRC - C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Sony\SonicStage\SSAAD.exe ()
PRC - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
PRC - C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
PRC - C:\Program Files\Digital Line Detect\DLG.exe (BVRP Software)
PRC - C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard)
========== Modules (SafeList) ========== MOD - C:\Documents and Settings\Traynham\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\McAfee\SiteAdvisor\sahook.dll ()
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ========== SRV - (mcmscsvc) -- C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (SupportSoft RemoteAssist) -- C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe (SupportSoft, Inc.)
SRV - (MpfService) -- C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SRV - (McODS) -- C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (McShield) -- C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
SRV - (McSysmon) -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (MSK80Service) -- C:\Program Files\McAfee\MSK\MskSrver.exe (McAfee, Inc.)
SRV - (McProxy) -- c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McNASvc) -- c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (McAfee SiteAdvisor Service) -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe ()
SRV - (YahooAUService) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (GoogleDesktopManager-061008-081103) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (WLSetupSvc) -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe (Microsoft Corporation)
SRV - (usnjsvc) -- C:\Program Files\Windows Live\Messenger\usnsvc.exe (Microsoft Corporation)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (SSScsiSV) -- C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe (Sony Corporation)
SRV - (MSCSPTISRV) -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe (Sony Corporation)
SRV - (PACSPTISVR) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation)
SRV - (SPTISRV) -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe (Sony Corporation)
SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)
========== Driver Services (SafeList) ========== DRV - (mfehidk) -- C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfeavfk) -- C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfesmfk) -- C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (mfebopk) -- C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mferkdk) -- C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (MPFP) -- C:\WINDOWS\system32\drivers\Mpfp.sys (McAfee, Inc.)
DRV - (SMSIVZAM5) -- C:\Program Files\Verizon Wireless\VZAccess Manager\SMSIVZAM5.sys (Smith Micro Inc.)
DRV - (MSHUSBVideo) -- C:\WINDOWS\system32\drivers\nx6000.sys (Microsoft Corporation)
DRV - (NwlnkIpx) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)
DRV - (usbaudio) USB Audio Driver (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (amdagp) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (SynTP) -- C:\WINDOWS\system32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (STHDA) -- C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (bcm4sbxp) -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (DSproct) -- C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys (GTek Technologies Ltd.)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSX_DPV.sys (Conexant Systems, Inc.)
DRV - (HSXHWAZL) -- C:\WINDOWS\system32\drivers\HSXHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSX_CNXT.sys (Conexant Systems, Inc.)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (DRVMCDB) -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS (Sonic Solutions)
DRV - (DLAUDFAM) -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Sonic Solutions)
DRV - (DLAUDF_M) -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Sonic Solutions)
DRV - (DLAIFS_M) -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Sonic Solutions)
DRV - (DLABOIOM) -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS (Sonic Solutions)
DRV - (DLAOPIOM) -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Sonic Solutions)
DRV - (DLAPoolM) -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS (Sonic Solutions)
DRV - (DLADResN) -- C:\WINDOWS\system32\DLA\DLADResN.SYS (Sonic Solutions)
DRV - (DLACDBHM) -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS (Sonic Solutions)
DRV - (DLARTL_N) -- C:\WINDOWS\system32\drivers\DLARTL_N.SYS (Sonic Solutions)
DRV - (APPDRV) -- C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS (Dell Inc)
DRV - (DRVNDDM) -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS (Sonic Solutions)
DRV - (rimmptsk) -- C:\WINDOWS\system32\drivers\rimmptsk.sys (REDC)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (NwlnkNb) -- C:\WINDOWS\system32\drivers\nwlnknb.sys (Microsoft Corporation)
DRV - (NwlnkSpx) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys (Microsoft Corporation)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (U2SP) USB to Serial Converter Driver(Philips) -- C:\WINDOWS\system32\drivers\U2S2KXP.SYS (Magic Control Technology Corp.)
DRV - (Sparrow) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) -- C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) -- C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) -- C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (CmdIde) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://us.rd.yahoo.c...//www.yahoo.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://us.rd.yahoo.c...//www.yahoo.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch =
http://us.rd.yahoo.c...rch/search.htmlIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2070611
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL =
http://www.google.com/ieIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.co...html?channel=usIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2070611
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2070611
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://us.rd.yahoo.c...//www.yahoo.comIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL =
http://search.yahoo....e...-8&fr=b1ie7IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.com/ieIE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2010/03/02 17:38:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{E8F02E29-4043-4A77-B6F0-1B683355EFA4}: C:\Documents and Settings\Traynham\Local Settings\Application Data\{E8F02E29-4043-4A77-B6F0-1B683355EFA4} [2010/06/22 12:59:16 | 000,000,000 | ---D | M]
O1 HOSTS File: ([2004/08/04 06:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll File not found
O2 - BHO: (Yahooo Search Protection) - {25BC7718-0BFA-40EA-B381-4B2D9732D686} - C:\Program Files\Yahoo!\Search Protection\ysp.dll (Yahoo! Inc.)
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Program Files\McAfee\MSK\mskapbho.dll ()
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe ()
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 3015_3020_3030_3380\SetConfig.exe (Hewlett-Packard Inc.)
O4 - HKLM..\Run: [ISUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard)
O4 - HKCU..\Run: [Aim6] File not found
O4 - HKCU..\Run: [DellSupport] C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.)
O4 - HKCU..\Run: [H/PC Connection Agent] C:\Program Files\Microsoft ActiveSync\Wcescomm.exe (Microsoft Corporation)
O4 - HKCU..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netwaiting.exe ()
O4 - HKCU..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe File not found
O4 - HKCU..\Run: [SsAAD.exe] C:\Program Files\Sony\SonicStage\SSAAD.exe ()
O4 - HKLM..\RunOnceEx: [Flags] Reg Error: Invalid data type. File not found
O4 - HKLM..\RunOnceEx: [Title] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe (BVRP Software)
O4 - Startup: C:\Documents and Settings\Traynham\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Yahoo! Search Protection - {BBF74FB9-ABCD-4678-880A-2511DAABB5E1} - C:\Program Files\Yahoo!\Search Protection\ysp.dll (Yahoo! Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F}
http://disney.go.com...OnlineGames.cab (Disney Online Games ActiveX Control)
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0}
http://photos.walmar...martActivia.cab (Snapfish Activia)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537}
http://gfx1.hotmail....es/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C}
http://www.kodakgall..._2/axofupld.cab (Kodak Gallery Easy Upload Manager Class)
O16 - DPF: {75AA409D-05F9-4F27-BD53-C7339D4B1D0A}
http://admin01.co.wa...c.us/dwa85W.cab (IBM Lotus iNotes 8.5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.ma...t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {983A9C21-8207-4B58-BBB8-0EBC3D7C5505}
http://admin01.co.wake.nc.us/dwa8W.cab (Domino Web Access 8 Control)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.m...ent/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll ()
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Traynham\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Traynham\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/11 18:15:00 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{9978e8da-1f87-11dc-a913-0019b97214df}\Shell\AutoRun\command - "" = E:\WD_Windows_Tools\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (MACHINE BootExecut) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2004/08/11 18:02:12 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: midi - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\WINDOWS\System32\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer2 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer3 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.imaadpcm - C:\WINDOWS\System32\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - C:\WINDOWS\System32\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msaudio1 - C:\WINDOWS\System32\msaud32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\WINDOWS\System32\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msg723 - C:\WINDOWS\System32\msg723.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\WINDOWS\System32\msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.siren - C:\WINDOWS\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.I420 - C:\WINDOWS\System32\msh263.drv (Microsoft Corporation)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.IYUV - C:\WINDOWS\System32\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.M261 - C:\WINDOWS\System32\msh261.drv (Microsoft Corporation)
Drivers32: vidc.M263 - C:\WINDOWS\System32\msh263.drv (Microsoft Corporation)
Drivers32: vidc.mrle - C:\WINDOWS\System32\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\WINDOWS\System32\msvidc32.dll (Microsoft Corporation)
Drivers32: VIDC.UYVY - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation)
Drivers32: VIDC.YUY2 - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation)
Drivers32: VIDC.YVU9 - C:\WINDOWS\System32\tsbyuv.dll (Microsoft Corporation)
Drivers32: VIDC.YVYU - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: wave2 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: wave3 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\WINDOWS\System32\msacm32.drv (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (17746534284132352)
========== Files/Folders - Created Within 30 Days ========== [2010/06/28 12:05:35 | 000,574,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Traynham\Desktop\OTL.exe
[2010/06/28 11:42:42 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/06/26 14:54:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Traynham\Local Settings\Application Data\Threat Expert
[2010/06/26 13:44:23 | 000,000,000 | ---D | C] -- C:\Program Files\Spyware Doctor
[2010/06/25 13:52:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Traynham\Application Data\SUPERAntiSpyware.com
[2010/06/25 13:52:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2010/06/25 12:49:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Traynham\My Documents\RegRun2
[2010/06/25 12:48:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/06/25 12:48:28 | 000,000,000 | ---D | C] -- C:\Program Files\UnHackMe
[2010/06/24 01:06:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\AdobeUM
[2010/06/24 01:05:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe
[2010/06/24 01:04:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2010/06/22 12:59:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Traynham\Local Settings\Application Data\{E8F02E29-4043-4A77-B6F0-1B683355EFA4}
[2010/06/22 12:51:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/06/22 06:06:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2010/06/21 14:39:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[1 C:\Documents and Settings\Traynham\My Documents\*.tmp files -> C:\Documents and Settings\Traynham\My Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/06/28 12:19:06 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/06/28 12:05:45 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Traynham\Desktop\OTL.exe
[2010/06/28 11:48:25 | 000,002,453 | ---- | M] () -- C:\Documents and Settings\Traynham\Desktop\HiJackThis.lnk
[2010/06/28 02:19:01 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/06/27 21:20:33 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/06/27 20:00:10 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/06/27 18:49:02 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Traynham\Desktop\Microsoft Office Word 2007.lnk
[2010/06/27 18:48:43 | 000,039,307 | ---- | M] () -- C:\WINDOWS\System32\Config.MPF
[2010/06/27 18:47:48 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/06/27 18:45:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/06/27 18:45:20 | 937,472,000 | -HS- | M] () -- C:\hiberfil.sys
[2010/06/27 18:37:59 | 000,027,136 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Defense Witness List.doc
[2010/06/27 18:37:32 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Traynham\My Documents\~$llard -Defense Witness List.doc
[2010/06/26 14:40:17 | 005,242,880 | ---- | M] () -- C:\Documents and Settings\Traynham\NTUSER.DAT
[2010/06/26 14:36:20 | 001,101,878 | -H-- | M] () -- C:\Documents and Settings\Traynham\Local Settings\Application Data\IconCache.db
[2010/06/25 20:39:27 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2010/06/25 20:39:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2010/06/25 18:14:51 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2010/06/25 18:14:51 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2010/06/25 13:19:37 | 000,000,024 | ---- | M] () -- C:\WINDOWS\System32\Partizan.RRI
[2010/06/25 12:49:57 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/06/25 12:49:57 | 000,000,002 | RHS- | M] () -- C:\WINDOWS\winstart.bat
[2010/06/25 12:49:56 | 000,001,792 | ---- | M] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010/06/25 11:32:24 | 000,000,120 | ---- | M] () -- C:\WINDOWS\Rzigexuyo.dat
[2010/06/25 11:32:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\Tbewowubucu.bin
[2010/06/24 23:07:20 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2010/06/24 23:07:20 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2010/06/24 21:34:07 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2010/06/24 21:34:07 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2010/06/24 01:04:50 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/06/23 20:06:31 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Traynham\My Documents\~$llard -OPENING ARGUMENT.doc
[2010/06/23 11:49:03 | 000,013,345 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\wirefly 6-23-10.docx
[2010/06/21 16:55:51 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2010/06/21 16:55:51 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2010/06/20 22:19:53 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2010/06/20 22:19:53 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2010/06/20 22:05:16 | 000,027,136 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of SBI Agent Ron Bakis.doc
[2010/06/20 17:37:39 | 000,030,208 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -OPENING ARGUMENT.doc
[2010/06/19 20:48:57 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2010/06/19 20:48:57 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2010/06/19 20:24:26 | 000,027,648 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of CCBI Agent Judd Manley.doc
[2010/06/19 17:08:18 | 000,028,672 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of Deputy Bradley P. Manville.doc
[2010/06/19 16:45:26 | 000,029,184 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of Sgt. James Landmarkdoc.doc
[2010/06/19 12:35:00 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2010/06/19 12:35:00 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm
[2010/06/18 19:05:22 | 005,714,454 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\incredible.pdf
[2010/06/16 17:38:28 | 000,186,368 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\offduty july2010.doc
[2010/06/15 18:45:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2010/06/15 18:45:33 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2010/06/15 01:19:28 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\McDefragTask.job
[2010/06/14 11:09:33 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2010/06/14 11:09:33 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm
[2010/06/13 22:00:09 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2010/06/13 22:00:09 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2010/06/13 21:23:38 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2010/06/13 21:23:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2010/06/13 21:17:35 | 000,036,352 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard-Cross Exam of Dep Frank.doc
[2010/06/13 15:19:02 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2010/06/13 15:19:02 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2010/06/13 15:07:36 | 000,030,208 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Dillard-Notice of Intent Pursuant to 15A-905(a).doc
[2010/06/12 19:26:32 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm
[2010/06/12 19:26:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2010/06/12 14:05:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2010/06/12 14:05:28 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2010/06/10 08:25:22 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2010/06/10 08:25:22 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2010/06/10 08:24:13 | 000,030,208 | ---- | M] () -- C:\Documents and Settings\Traynham\My Documents\Smith -Jury Selection Questions.doc
[2010/06/04 17:06:15 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2010/06/04 17:06:14 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2010/06/02 16:36:08 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
[2010/06/02 16:36:08 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm
[2010/06/02 16:29:17 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2010/06/02 16:29:17 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm
[2010/06/01 01:00:24 | 000,000,338 | ---- | M] () -- C:\WINDOWS\tasks\McQcTask.job
[2010/05/30 22:40:16 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm
[2010/05/30 22:40:15 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[1 C:\Documents and Settings\Traynham\My Documents\*.tmp files -> C:\Documents and Settings\Traynham\My Documents\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/06/28 11:42:44 | 000,002,453 | ---- | C] () -- C:\Documents and Settings\Traynham\Desktop\HiJackThis.lnk
[2010/06/27 18:37:32 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Traynham\My Documents\~$llard -Defense Witness List.doc
[2010/06/27 18:37:31 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Defense Witness List.doc
[2010/06/26 13:51:48 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll.old
[2010/06/25 13:19:37 | 000,000,024 | ---- | C] () -- C:\WINDOWS\System32\Partizan.RRI
[2010/06/25 12:49:57 | 000,000,002 | RHS- | C] () -- C:\WINDOWS\winstart.bat
[2010/06/24 01:04:50 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/06/23 20:06:31 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Traynham\My Documents\~$llard -OPENING ARGUMENT.doc
[2010/06/23 11:49:02 | 000,013,345 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\wirefly 6-23-10.docx
[2010/06/22 19:57:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Tbewowubucu.bin
[2010/06/22 19:57:41 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Rzigexuyo.dat
[2010/06/20 15:46:55 | 000,030,208 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -OPENING ARGUMENT.doc
[2010/06/19 20:39:29 | 000,027,136 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of SBI Agent Ron Bakis.doc
[2010/06/19 17:35:16 | 000,027,648 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of CCBI Agent Judd Manley.doc
[2010/06/19 16:46:20 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of Deputy Bradley P. Manville.doc
[2010/06/18 19:05:21 | 005,714,454 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\incredible.pdf
[2010/06/16 17:38:22 | 000,186,368 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\offduty july2010.doc
[2010/06/13 21:33:07 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard -Cross Examination of Sgt. James Landmarkdoc.doc
[2010/06/13 19:28:24 | 000,036,352 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard-Cross Exam of Dep Frank.doc
[2010/06/13 15:07:35 | 000,030,208 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Dillard-Notice of Intent Pursuant to 15A-905(a).doc
[2010/06/10 08:24:12 | 000,030,208 | ---- | C] () -- C:\Documents and Settings\Traynham\My Documents\Smith -Jury Selection Questions.doc
[2009/10/31 04:57:46 | 000,000,074 | ---- | C] () -- C:\WINDOWS\Pool3DWin.ini
[2008/10/05 21:42:05 | 000,000,021 | ---- | C] () -- C:\WINDOWS\atid.ini
[2008/03/09 15:12:58 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\CddbPlaylist2Sony.dll
[2007/09/16 18:43:44 | 000,003,654 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sonyhcp.dll
[2007/06/18 18:58:05 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\PRTSERV.dll
[2007/06/18 18:32:08 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\jst.dll
[2007/06/18 18:32:08 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\PMLJNI.dll
[2007/06/18 18:29:00 | 000,000,750 | ---- | C] () -- C:\WINDOWS\hpbvnstp.ini
[2007/06/18 18:28:48 | 000,221,184 | R--- | C] () -- C:\WINDOWS\System32\HP3AIOZ6.dll
[2007/06/18 18:13:18 | 000,000,103 | ---- | C] () -- C:\WINDOWS\System32\hptrace.ini
[2007/06/18 18:11:43 | 000,013,797 | ---- | C] () -- C:\WINDOWS\hplj3380.ini
[2007/06/11 22:41:45 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2007/06/11 22:35:17 | 000,000,126 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2007/06/11 21:58:36 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2007/06/11 21:58:32 | 000,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll
[2007/06/11 21:58:06 | 000,001,120 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/11/10 09:56:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/08/11 18:24:19 | 000,000,791 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/11 18:11:31 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2003/09/26 08:42:46 | 000,002,421 | ---- | C] () -- C:\WINDOWS\System32\scrubber.ini
[2002/05/03 17:40:32 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL
[2001/03/28 12:37:14 | 000,000,033 | ---- | C] () -- C:\WINDOWS\System32\hppcap.ini
[2001/03/28 12:37:14 | 000,000,033 | ---- | C] () -- C:\WINDOWS\hppcap.ini
========== LOP Check ========== [2008/11/11 21:04:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\acccore
[2010/06/26 15:13:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2008/11/11 21:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2008/09/13 19:35:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008/11/11 21:16:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Traynham\Application Data\acccore
[2008/04/09 22:11:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Traynham\Application Data\Butel
[2007/09/21 01:21:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Traynham\Application Data\iWin
[2007/08/21 22:16:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Traynham\Application Data\Leadertech
[2008/10/05 21:44:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Traynham\Application Data\QQ Games Plugin
[2008/01/06 16:44:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Traynham\Application Data\Snapfish
[2009/09/18 00:34:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Traynham\Application Data\Viewpoint
[2010/06/15 01:19:28 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\McDefragTask.job
[2010/06/01 01:00:24 | 000,000,338 | ---- | M] () -- C:\WINDOWS\Tasks\McQcTask.job
========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* >[2009/11/17 22:27:52 | 000,029,688 | ---- | M] () -- C:\ASLog.txt
[2004/08/11 18:15:00 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/03/30 20:39:27 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2004/08/11 18:15:00 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2007/06/11 22:01:04 | 000,006,002 | RH-- | M] () -- C:\dell.sdr
[2010/04/11 19:50:53 | 000,031,744 | ---- | M] () -- C:\Forester Company -MINUTES OF FIRST MEETING -Corp.doc
[2010/06/27 18:45:20 | 937,472,000 | -HS- | M] () -- C:\hiberfil.sys
[2007/06/18 19:18:56 | 000,004,128 | ---- | M] () -- C:\INFCACHE.1
[2004/08/11 18:15:00 | 000,000,000 | -H-- | M] () -- C:\IO.SYS
[2008/11/11 21:15:48 | 000,001,577 | -H-- | M] () -- C:\IPH.PH
[2008/02/04 13:16:24 | 000,000,000 | ---- | M] () -- C:\log1.txt
[2008/02/04 13:16:24 | 000,000,000 | ---- | M] () -- C:\log2.txt
[2004/08/11 18:15:00 | 000,000,000 | -H-- | M] () -- C:\MSDOS.SYS
[2004/08/04 06:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/10/14 19:11:26 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2008/10/14 22:31:04 | 000,262,144 | ---- | M] () -- C:\ntuser.dat
[2008/10/14 22:31:04 | 000,001,024 | -H-- | M] () -- C:\ntuser.dat.LOG
[2010/06/27 18:45:18 | 1409,286,144 | -HS- | M] () -- C:\pagefile.sys
[2007/06/18 18:37:50 | 000,000,329 | ---- | M] () -- C:\regdlls.txt
[2010/06/15 18:45:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2010/06/19 12:35:00 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm
[2010/06/19 20:48:57 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2010/06/20 22:19:53 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2010/06/21 16:55:51 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2010/06/24 21:34:07 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2010/06/24 23:07:20 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2010/06/25 18:14:51 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2010/06/25 20:39:27 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2010/05/30 22:40:16 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm
[2010/06/02 16:29:17 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm
[2010/06/02 16:36:08 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm
[2010/06/04 17:06:15 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2010/06/10 08:25:22 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2010/06/12 14:05:28 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2010/06/12 19:26:32 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm
[2010/06/13 15:19:02 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2010/06/13 21:23:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2010/06/13 22:00:09 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2010/06/14 11:09:33 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm
[2010/06/15 18:45:33 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2010/06/19 12:35:00 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2010/06/19 20:48:57 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2010/06/20 22:19:53 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2010/06/21 16:55:51 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2010/06/24 21:34:07 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2010/06/24 23:07:20 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2010/06/25 18:14:51 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2010/06/25 20:39:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2010/05/30 22:40:15 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2010/06/02 16:29:17 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2010/06/02 16:36:08 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
[2010/06/04 17:06:14 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2010/06/10 08:25:22 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2010/06/12 14:05:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2010/06/12 19:26:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2010/06/13 15:19:02 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2010/06/13 21:23:38 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2010/06/13 22:00:09 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2010/06/14 11:09:33 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2007/06/20 19:42:43 | 004,907,520 | ---- | M] () -- C:\WDSync_v6_3_130.exe
[2008/02/10 06:15:28 | 000,000,162 | ---- | M] () -- C:\YServer.txt
< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >[2008/07/06 08:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2003/07/24 19:15:06 | 000,063,488 | ---- | M] (Hewlett-Packard Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\HPPRN05.DLL
< %systemroot%\system32\*.wt > < %systemroot%\system32\*.ruy > < %systemroot%\Fonts\*.com >[2006/04/18 15:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\system32\spool\prtprocs\w32x86\*.tmp > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav >[2004/08/11 18:06:14 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2004/08/11 18:06:14 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2004/08/11 18:06:14 | 000,876,544 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\system32\user32.dll /md5 >[2008/04/13 20:12:08 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=B26B135FF1B9F60C9388B4A7D16F600B -- C:\WINDOWS\system32\user32.dll
< %systemroot%\system32\ws2_32.dll /md5 >[2008/04/13 20:12:10 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=2CCC474EB85CEAA3E1FA1726580A3E5A -- C:\WINDOWS\system32\ws2_32.dll
< %systemroot%\system32\ws2help.dll /md5 >[2008/04/13 20:12:10 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=9789E95E1D88EEB4B922BF3EA7779C28 -- C:\WINDOWS\system32\ws2help.dll
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-03-14 19:33:29
========== Alternate Data Streams ========== @Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:88ECFB91
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >