I also ran OTL version 3.2.9.0
and it generated two files at the end of the scan:
OTL.txt
Extras.txt
CONTENTS OF OTL.txt:
OTL logfile created on: 6/28/2010 7:26:54 AM - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Documents and Settings\ROBINSON\My Documents
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
190.00 Mb Total Physical Memory | 52.00 Mb Available Physical Memory | 27.00% Memory free
466.00 Mb Paging File | 172.00 Mb Available in Paging File | 37.00% Paging File free
Paging file location(s): C:\pagefile.sys 288 576 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 5.86 Gb Total Space | 0.03 Gb Free Space | 0.59% Space Free | Partition Type: NTFS
Drive D: | 12.78 Gb Total Space | 0.29 Gb Free Space | 2.23% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: WHITE-5DD55B871
Current User Name: ROBINSON
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ========== PRC - [2010/06/28 07:04:17 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ROBINSON\My Documents\OTL.exe
PRC - [2009/03/10 22:18:14 | 000,934,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WgaTray.exe
PRC - [2007/06/13 18:23:07 | 001,033,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005/07/16 18:00:00 | 000,651,264 | ---- | M] (Seifert) -- C:\Program Files\WinDirStat\windirstat.exe
========== Modules (SafeList) ========== MOD - [2010/06/28 07:04:17 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ROBINSON\My Documents\OTL.exe
MOD - [2006/08/25 23:45:55 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
MOD - [2005/01/07 08:00:00 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- E:\NTGLM7X.sys -- (SetupNTGLM7X)
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\NTACCESS.sys -- (NTACCESS)
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\install4\MSICPL.sys -- (MSICPL)
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - [2006/11/06 16:01:50 | 004,024,832 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://uk.yahoo.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL =
http://www.google.com/ieIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://onlinecyber/main/index.jspIE - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.com/ieIE - HKU\S-1-5-21-299502267-1177238915-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O1 HOSTS File: ([2005/01/07 08:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [FinePrint Dispatcher v5] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe (FinePrint Software, LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NotoolBarsOnTaskBar = 0
O7 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButto = 0
O7 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0
O7 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKU\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
http://download.bitd...can8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166}
http://cdn.scan.onec...lscbase6087.cab (Windows Live Safety Center Base Module)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.ma...t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539}
http://www.crucial.c.../cpcScanner.cab (Crucial cpcScan)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload.ma...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\ROBINSON\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\ROBINSON\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/03/16 14:31:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{42d4b2d6-0f5d-11dd-bd02-0019db69a829}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{42d4b2d6-0f5d-11dd-bd02-0019db69a829}\Shell\Explore\command - "" = F:\Flash.10.Setup.exe -- File not found
O33 - MountPoints2\{42d4b2d6-0f5d-11dd-bd02-0019db69a829}\Shell\Open\command - "" = F:\Flash.10.Setup.exe -- File not found
O33 - MountPoints2\{42d4b2d6-0f5d-11dd-bd02-0019db69a829}\Shell\Scan for Viruses\command - "" = F:\Scanner.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: tdlwdmp - C:\WINDOWS\System32\xxvin.dll File not found
Drivers32: msacm.ac3acm - C:\Program Files\K-Lite Codec Pack\codecs\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\Program Files\K-Lite Codec Pack\codecs\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: VIDC.3iv2 - C:\Program Files\K-Lite Codec Pack\codecs\3ivxVfWCodec.dll (3ivx.com)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ffdshow.ax ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax ()
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll ()
Drivers32: VIDC.VP31 - C:\Program Files\K-Lite Codec Pack\codecs\vp31vfw.dll (On2.com)
Drivers32: VIDC.VP60 - C:\Program Files\K-Lite Codec Pack\codecs\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP61 - C:\Program Files\K-Lite Codec Pack\codecs\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP62 - C:\Program Files\K-Lite Codec Pack\codecs\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP70 - C:\Program Files\K-Lite Codec Pack\codecs\vp7vfw.dll (On2.com)
Drivers32: VIDC.wmv3 - C:\WINDOWS\System32\WMV9VCM.dll (Microsoft Corporation)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
CREATERESTOREPOINT
Error starting restore point: System Restore is in Standby Mode because disk space is low.
Error closing restore point: The sequence number is invalid.
========== Files/Folders - Created Within 30 Days ========== [2010/06/28 07:04:14 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\ROBINSON\My Documents\OTL.exe
[2010/06/28 06:22:29 | 000,000,000 | ---D | C] -- C:\Program Files\WinDirStat
[2004/11/25 02:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[26 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/06/28 07:04:17 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ROBINSON\My Documents\OTL.exe
[2010/06/28 07:01:00 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010/06/28 06:46:28 | 004,980,736 | -H-- | M] () -- C:\Documents and Settings\ROBINSON\NTUSER.DAT
[2010/06/28 03:29:55 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/06/28 03:29:53 | 000,000,318 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2010/06/28 03:28:59 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/06/28 03:28:56 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/06/25 11:52:56 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\ROBINSON\ntuser.ini
[2010/06/25 11:37:17 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\ROBINSON\Desktop\Google Toolbar.url
[2010/06/22 11:36:48 | 000,044,608 | ---- | M] () -- C:\Documents and Settings\ROBINSON\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[26 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/06/25 11:37:17 | 000,000,168 | ---- | C] () -- C:\Documents and Settings\ROBINSON\Desktop\Google Toolbar.url
[2009/07/03 20:20:50 | 000,000,127 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2009/01/05 15:44:10 | 000,000,453 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2008/05/19 00:17:23 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll
[2008/04/07 13:43:21 | 000,000,156 | ---- | C] () -- C:\WINDOWS\matlab.ini
[2008/03/16 19:33:49 | 000,147,456 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2008/03/16 19:33:26 | 000,000,164 | R--- | C] () -- C:\WINDOWS\avrack.ini
[2008/03/16 18:58:32 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008/03/16 18:58:27 | 000,843,776 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008/03/16 18:58:27 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008/03/16 18:58:23 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2008/03/16 18:31:36 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/01/07 08:00:00 | 000,755,200 | ---- | C] () -- C:\WINDOWS\System32\ir50_32.dll
[2005/01/07 08:00:00 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcx.dll
[2005/01/07 08:00:00 | 000,200,192 | ---- | C] () -- C:\WINDOWS\System32\ir50_qc.dll
[2005/01/07 08:00:00 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\ir50_qcx.dll
[2005/01/07 08:00:00 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\ir41_qc.dll
[2004/10/12 13:40:58 | 002,255,360 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2004/10/12 13:39:48 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2004/10/12 13:39:08 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2004/10/09 13:40:16 | 000,454,144 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2004/10/05 15:16:08 | 000,395,776 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2004/10/04 00:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
[2003/01/07 15:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
========== Custom Scans ========== < %SYSTEMDRIVE%\*.* >[2008/03/16 14:31:28 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2008/03/16 14:22:10 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2010/05/26 15:36:53 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2008/03/16 14:31:28 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2008/03/16 14:31:28 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2008/03/16 14:31:28 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2005/01/07 08:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2005/01/07 08:00:00 | 000,250,032 | RHS- | M] () -- C:\ntldr
[2010/06/28 03:28:53 | 301,989,888 | -HS- | M] () -- C:\pagefile.sys
[2009/08/18 19:24:15 | 000,000,268 | -H-- | M] () -- C:\sqmdata00.sqm
[2009/08/20 00:26:57 | 000,000,268 | -H-- | M] () -- C:\sqmdata01.sqm
[2009/07/21 15:10:57 | 000,000,268 | -H-- | M] () -- C:\sqmdata02.sqm
[2009/07/23 22:05:11 | 000,000,268 | -H-- | M] () -- C:\sqmdata03.sqm
[2009/07/25 02:49:36 | 000,000,268 | -H-- | M] () -- C:\sqmdata04.sqm
[2009/07/25 12:38:26 | 000,000,268 | -H-- | M] () -- C:\sqmdata05.sqm
[2009/07/25 19:52:40 | 000,000,268 | -H-- | M] () -- C:\sqmdata06.sqm
[2009/07/26 01:15:31 | 000,000,268 | -H-- | M] () -- C:\sqmdata07.sqm
[2009/07/26 15:49:13 | 000,000,268 | -H-- | M] () -- C:\sqmdata08.sqm
[2009/08/01 01:57:12 | 000,000,268 | -H-- | M] () -- C:\sqmdata09.sqm
[2009/08/02 17:17:05 | 000,000,268 | -H-- | M] () -- C:\sqmdata10.sqm
[2009/08/02 23:59:32 | 000,000,268 | -H-- | M] () -- C:\sqmdata11.sqm
[2009/08/03 00:45:06 | 000,000,268 | -H-- | M] () -- C:\sqmdata12.sqm
[2009/08/04 15:23:06 | 000,000,268 | -H-- | M] () -- C:\sqmdata13.sqm
[2009/08/06 13:12:48 | 000,000,268 | -H-- | M] () -- C:\sqmdata14.sqm
[2009/08/15 14:59:23 | 000,000,268 | -H-- | M] () -- C:\sqmdata15.sqm
[2009/08/15 19:00:39 | 000,000,268 | -H-- | M] () -- C:\sqmdata16.sqm
[2009/08/16 02:22:28 | 000,000,268 | -H-- | M] () -- C:\sqmdata17.sqm
[2009/08/16 15:19:30 | 000,000,268 | -H-- | M] () -- C:\sqmdata18.sqm
[2009/08/16 19:10:34 | 000,000,268 | -H-- | M] () -- C:\sqmdata19.sqm
[2009/08/18 19:24:15 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2009/08/20 00:26:57 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2009/07/21 15:10:56 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2009/07/23 22:05:11 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2009/07/25 02:49:36 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2009/07/25 12:38:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2009/07/25 19:52:39 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2009/07/26 01:15:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2009/07/26 15:49:13 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2009/08/01 01:57:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2009/08/02 17:17:05 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2009/08/02 23:59:32 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
[2009/08/03 00:45:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2009/08/04 15:23:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2009/08/06 13:12:48 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2009/08/15 14:59:23 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2009/08/15 19:00:39 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2009/08/16 02:22:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2009/08/16 15:19:30 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2009/08/16 19:10:34 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2010/05/28 05:07:15 | 000,000,150 | ---- | M] () -- C:\YServer.txt
< %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles >[2009/10/29 13:48:03 | 000,357,888 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\WINDOWS\system32\dxtmsft.dll
[2009/10/29 13:48:03 | 000,205,312 | ---- | M] (Microsoft Corporation)
Unable to obtain MD5 -- C:\WINDOWS\system32\dxtrans.dll
< %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav >[2008/03/16 22:04:37 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2008/03/16 22:04:37 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2008/03/16 22:04:37 | 000,892,928 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\system32\drivers\*.sys /180 >[2010/02/24 20:31:30 | 000,454,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\mrxsmb.sys
[2010/01/01 00:14:12 | 000,352,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\srv.sys
[2010/02/11 20:01:43 | 000,226,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\tcpip6.sys
< End of report >
CONTENTS OF Extras.txt:
OTL Extras logfile created on: 6/28/2010 7:26:54 AM - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Documents and Settings\ROBINSON\My Documents
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
190.00 Mb Total Physical Memory | 52.00 Mb Available Physical Memory | 27.00% Memory free
466.00 Mb Paging File | 172.00 Mb Available in Paging File | 37.00% Paging File free
Paging file location(s): C:\pagefile.sys 288 576 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 5.86 Gb Total Space | 0.03 Gb Free Space | 0.59% Space Free | Partition Type: NTFS
Drive D: | 12.78 Gb Total Space | 0.29 Gb Free Space | 2.23% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: WHITE-5DD55B871
Current User Name: ROBINSON
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"7781:TCP" = 7781:TCP:*:Enabled:rzipyhsj
========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Winamp Remote\bin\Orb.exe" = C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb -- File not found
"C:\Program Files\Winamp Remote\bin\OrbTray.exe" = C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray -- File not found
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe" = C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client -- File not found
"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- File not found
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger -- File not found
"C:\Program Files\Yahoo!\Messenger\YServer.exe" = C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server -- File not found
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP1800_series" = Canon iP1800 series
"{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90510409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Visio Professional 2003
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{AC76BA86-7AD7-1033-7B44-A81200000003}" = Adobe Reader 8.1.2
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Easy-PhotoPrint" = Canon Utilities Easy-PhotoPrint
"Easy-PrintToolBox" = Canon Utilities Easy-PrintToolBox
"FinePrint" = FinePrint
"Glary Utilities_is1" = Glary Utilities 2.23.0.923
"KLiteCodecPack_is1" = K-Lite Codec Pack 2.65 Full
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"TreeSize Free_is1" = TreeSize Free V2.4
"VLC media player" = VideoLAN VLC media player 0.8.6e
"WIC" = Windows Imaging Component
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinRAR archiver" = WinRAR archiver
"XP Codec Pack" = XP Codec Pack
========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-299502267-1177238915-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"WinDirStat" = WinDirStat 1.1.2
========== Last 10 Event Log Errors ========== [ Application Events ]
Error - 6/26/2010 1:01:42 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:01:49 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:01:55 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:02:02 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:02:09 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:02:15 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:02:22 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:02:29 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/26/2010 1:02:35 AM | Computer Name = WHITE-5DD55B871 | Source = MsiInstaller | ID = 11711
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 -- Error 1711.An
error occurred while writing installation information to disk. Check to make sure
enough disk space is available, and click Retry, or Cancel to end the install.
Error - 6/27/2010 4:46:34 PM | Computer Name = WHITE-5DD55B871 | Source = Application Error | ID = 1005
Description = Windows cannot access the file C:\Documents and Settings\ROBINSON\UserData\index.dat
for one of the following reasons: there is a problem with the network connection,
the disk that the file is stored on, or the storage drivers installed on this computer;
or the disk is missing. Windows closed the program index.dat because of this error.
Program:
index.dat File: C:\Documents and Settings\ROBINSON\UserData\index.dat The error value
is listed in the Additional Data section. User Action 1. Open the file again. This
situation might be a temporary problem that corrects itself when the program runs
again. 2. If the file still cannot be accessed and - It is on the network, your network
administrator should verify that there is not a problem with the network and that
the server can be contacted. - It is on a removable disk, for example, a floppy
disk or CD-ROM, verify that the disk is fully inserted into the computer. 3. Check
and repair the file system by running CHKDSK. To run CHKDSK, click Start, click
Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then
press ENTER. 4. If the problem persists, restore the file from a backup copy. 5.
Determine whether other files on the same disk can be opened. If not, the disk might
be damaged. If it is a hard disk, contact your administrator or computer hardware
vendor for further assistance. Additional Data Error value: C000007F Disk type: 3
[ System Events ]
Error - 6/25/2010 11:35:40 PM | Computer Name = WHITE-5DD55B871 | Source = Service Control Manager | ID = 7023
Description = The Network Windows service terminated with the following error: %%126
Error - 6/25/2010 11:35:53 PM | Computer Name = WHITE-5DD55B871 | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)
Error - 6/25/2010 11:35:53 PM | Computer Name = WHITE-5DD55B871 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.
Error - 6/25/2010 11:36:08 PM | Computer Name = WHITE-5DD55B871 | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)
Error - 6/25/2010 11:36:08 PM | Computer Name = WHITE-5DD55B871 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.
Error - 6/25/2010 11:50:53 PM | Computer Name = WHITE-5DD55B871 | Source = W32Time | ID = 39452706
Description = The time service has detected that the system time needs to be changed
by +1057429 seconds. The time service will not change the system time by more than
+54000 seconds. Verify that your time and time zone are correct, and that the time
source time.windows.com (ntp.m|0x1|192.168.1.100:123->207.46.197.32:123) is working
properly.
Error - 6/27/2010 7:52:41 AM | Computer Name = WHITE-5DD55B871 | Source = Service Control Manager | ID = 7023
Description = The Network Windows service terminated with the following error: %%126
Error - 6/27/2010 3:29:25 PM | Computer Name = WHITE-5DD55B871 | Source = Service Control Manager | ID = 7023
Description = The Network Windows service terminated with the following error: %%126
Error - 6/27/2010 3:29:40 PM | Computer Name = WHITE-5DD55B871 | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)
Error - 6/27/2010 3:29:40 PM | Computer Name = WHITE-5DD55B871 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.
< End of report >
DISK_SPACE_ANALYSISIII.bmp 982.37KB
130 downloads
Sign In
Create Account
