OTL logfile created on: 1/30/2013 4:51:10 PM - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Andrew Conkling\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.24 Gb Total Physical Memory | 0.34 Gb Available Physical Memory | 27.13% Memory free
2.34 Gb Paging File | 1.52 Gb Available in Paging File | 64.98% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 25.05 Gb Total Space | 2.91 Gb Free Space | 11.62% Space Free | Partition Type: NTFS
Drive E: | 1.86 Gb Total Space | 1.85 Gb Free Space | 99.21% Space Free | Partition Type: FAT
Drive F: | 60.36 Mb Total Space | 60.36 Mb Free Space | 99.99% Space Free | Partition Type: FAT
Computer Name: NOTEBOOK | User Name: Andrew Conkling | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/01/30 16:50:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andrew Conkling\Desktop\OTL.exe
PRC - [2012/11/29 02:27:34 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/08/02 13:21:52 | 001,506,536 | ---- | M] (Defender Pro) -- C:\Program Files\Defender Pro\Defender Pro\vsserv.exe
PRC - [2011/08/02 13:21:48 | 000,050,128 | ---- | M] (Defender Pro) -- C:\Program Files\Defender Pro\Defender Pro\updatesrv.exe
PRC - [2011/08/02 13:21:38 | 000,923,520 | ---- | M] (Defender Pro) -- C:\Program Files\Defender Pro\Defender Pro\seccenter.exe
PRC - [2011/08/02 13:21:06 | 000,066,608 | ---- | M] (Defender Pro) -- C:\Program Files\Defender Pro\Defender Pro Safebox\safeboxservice.exe
PRC - [2011/08/02 13:21:04 | 000,065,560 | ---- | M] (Defender Pro) -- C:\Program Files\Defender Pro\Defender Pro\pchooklaunch32.exe
PRC - [2011/08/02 13:19:56 | 001,053,336 | ---- | M] (Defender Pro) -- C:\Program Files\Defender Pro\Defender Pro\bdagent.exe
PRC - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004/11/10 11:54:48 | 000,598,016 | ---- | M] () -- C:\Program Files\Dell\QuickSet\quickset.exe
PRC - [2004/09/15 01:01:00 | 000,086,016 | ---- | M] () -- C:\Program Files\Dell\Media Experience\DMXLauncher.exe
PRC - [2004/05/13 10:23:56 | 000,098,304 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
========== Modules (No Company Name) ==========
MOD - [2012/11/29 02:27:37 | 002,397,152 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012/07/07 23:35:45 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\494e536022ee1a0d2fe124c3d2500f74\System.Xml.ni.dll
MOD - [2012/07/07 23:22:52 | 007,953,408 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\2448ec34d1e318a77a0d32704961c646\System.ni.dll
MOD - [2012/07/07 23:21:39 | 011,492,352 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll
MOD - [2012/03/12 15:03:21 | 008,527,520 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2011/08/02 12:47:52 | 000,186,880 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\UI\popup.ui
MOD - [2011/08/02 12:47:50 | 000,212,992 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\UI\bdidntconp.ui
MOD - [2011/08/02 12:47:50 | 000,009,216 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\UI\imsecurityal.ui
MOD - [2011/08/02 12:47:48 | 000,007,680 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\UI\accessl.ui
MOD - [2011/07/22 19:20:05 | 000,337,992 | ---- | M] () -- \\?\C:\Program Files\Common Files\Defender Pro\Defender Pro Threat Scanner\trufos.dll
MOD - [2011/07/22 17:53:36 | 000,126,360 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\popup.dll
MOD - [2011/07/22 17:51:24 | 000,060,416 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\excludemgr.dll
MOD - [2011/07/22 17:51:22 | 000,109,856 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\accessl.dll
MOD - [2011/07/22 14:00:30 | 000,239,136 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\avc3al.dll
MOD - [2011/07/22 12:59:42 | 000,319,952 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\bdidntconp.dll
MOD - [2011/07/22 12:53:14 | 000,035,208 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\procinfo.dll
MOD - [2011/07/22 12:39:24 | 000,109,856 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\connector.dll
MOD - [2011/07/22 12:38:50 | 000,151,592 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\framework.dll
MOD - [2011/07/22 12:37:56 | 000,202,032 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\txmlutil.dll
MOD - [2011/07/22 12:37:48 | 000,059,392 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\bdmltusrsrv.dll
MOD - [2011/07/22 12:37:44 | 000,035,720 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\strdecoder.dll
MOD - [2011/07/22 12:22:34 | 002,035,712 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\ashttpf.mdl
MOD - [2011/07/22 12:22:34 | 001,975,296 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\ashttpph.mdl
MOD - [2011/07/22 12:22:34 | 001,903,104 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\ashttpfr.mdl
MOD - [2011/07/22 12:22:34 | 001,850,368 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\asimf.mdl
MOD - [2011/07/22 12:22:34 | 001,090,048 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\ashttprbl.mdl
MOD - [2011/07/22 12:22:34 | 000,855,040 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\ashttpdsp.mdl
MOD - [2011/07/22 12:22:34 | 000,793,600 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\asimdsp.mdl
MOD - [2011/07/22 12:22:34 | 000,770,560 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\ashttpbr.mdl
MOD - [2011/07/22 12:22:34 | 000,739,840 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\as2core\asimbr.mdl
MOD - [2011/07/13 13:10:30 | 000,130,456 | ---- | M] () -- C:\Program Files\Common Files\Defender Pro\Defender Pro Threat Scanner\bdsmartdb.dll
MOD - [2011/03/01 17:46:16 | 000,132,176 | ---- | M] () -- C:\Program Files\Defender Pro\Defender Pro\bdfwcore.dll
MOD - [2004/11/10 11:54:48 | 000,598,016 | ---- | M] () -- C:\Program Files\Dell\QuickSet\quickset.exe
MOD - [2004/09/15 01:01:00 | 000,086,016 | ---- | M] () -- C:\Program Files\Dell\Media Experience\DMXLauncher.exe
MOD - [2003/06/17 10:50:08 | 000,073,728 | ---- | M] () -- C:\Program Files\Dell\QuickSet\dadkeyb.dll
========== Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012/11/29 02:27:36 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/09/01 21:15:36 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2011/08/02 13:21:52 | 001,506,536 | ---- | M] (Defender Pro) [Auto | Running] -- C:\Program Files\Defender Pro\Defender Pro\vsserv.exe -- (VSSERV)
SRV - [2011/08/02 13:21:48 | 000,050,128 | ---- | M] (Defender Pro) [Auto | Running] -- C:\Program Files\Defender Pro\Defender Pro\updatesrv.exe -- (UPDATESRV)
SRV - [2011/08/02 13:21:06 | 000,066,608 | ---- | M] (Defender Pro) [Auto | Running] -- C:\Program Files\Defender Pro\Defender Pro Safebox\safeboxservice.exe -- (SafeBox)
SRV - [2008/11/09 14:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\wanatw4.sys -- (wanatw)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SBREdrv.sys -- (SBRE)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\SPCA561.SYS -- (CA561)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (bvrp_pci)
DRV - [2011/07/22 19:20:05 | 000,311,248 | ---- | M] (BitDefender S.R.L.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\trufos.sys -- (trufos)
DRV - [2011/07/19 15:20:36 | 000,127,056 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Defender Pro\Defender Pro\bdselfpr.sys -- (bdselfpr)
DRV - [2011/07/15 15:11:48 | 000,451,864 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avckf.sys -- (avckf)
DRV - [2011/07/15 15:11:46 | 000,596,600 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avc3.sys -- (avc3)
DRV - [2011/07/15 15:11:46 | 000,240,184 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avchv.sys -- (avchv)
DRV - [2011/06/17 19:54:44 | 000,063,568 | ---- | M] (Windows ® Win 7 DDK provider) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bdsandbox.sys -- (bdsandbox)
DRV - [2011/03/24 14:36:18 | 000,353,096 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfsfltr.sys -- (bdfsfltr)
DRV - [2011/03/01 17:45:34 | 000,113,232 | ---- | M] (BitDefender LLC) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Defender Pro\Defender Pro Firewall\bdfndisf.sys -- (Bdfndisf)
DRV - [2011/03/01 17:45:32 | 000,130,640 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\Defender Pro\Defender Pro Firewall\bdftdif.sys -- (bdftdif)
DRV - [2010/02/11 06:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2010/01/19 18:32:40 | 000,085,128 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\bdvedisk.sys -- (BDVEDISK)
DRV - [2005/03/10 14:56:06 | 000,273,168 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\STAC97.sys -- (STAC97)
DRV - [2004/12/11 20:28:20 | 000,371,584 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcmwl5.sys -- (BCM43XX)
DRV - [2004/08/18 14:53:54 | 000,016,128 | ---- | M] (Dell Inc) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\APPDRV.SYS -- (APPDRV)
DRV - [2004/06/17 20:57:02 | 000,200,064 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2004/06/17 20:55:38 | 000,685,056 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004/06/17 20:55:04 | 001,041,536 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
DRV - [2004/02/13 16:46:00 | 000,017,153 | ---- | M] (Dell Inc) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\omci.sys -- (omci)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?}
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search...p={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo....=utf-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {4561B2A9-163D-4076-981E-5E1B4CC84EC6}
IE - HKCU\..\SearchScopes\{4561B2A9-163D-4076-981E-5E1B4CC84EC6}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search...p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..extensions.enabledAddons: %7B4DC70064-89E2-4a55-8FC6-E8CDEAE3618C%7D:0.7.7
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.1: C:\Documents and Settings\Andrew Conkling\Application Data\Facebook\npfbplugin_1_0_1.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/01/02 13:41:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\Defender Pro\Defender Pro\bdtbext\ [2012/12/22 10:28:56 | 000,000,000 | ---D | M]
[2012/12/03 19:18:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andrew Conkling\Application Data\Mozilla\Extensions
[2010/06/07 10:06:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andrew Conkling\Application Data\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2013/01/02 13:51:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andrew Conkling\Application Data\Mozilla\Firefox\Profiles\n3nhs33a.default\extensions
[2012/12/03 19:18:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andrew Conkling\Application Data\Mozilla\Firefox\Profiles\x6qo5si3.default\extensions
[2012/12/03 19:18:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andrew Conkling\Application Data\Mozilla\Firefox\Profiles\x6qo5si3.default\extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d}
[2013/01/02 13:49:12 | 000,013,345 | ---- | M] () (No name found) -- C:\Documents and Settings\Andrew Conkling\Application Data\Mozilla\Firefox\Profiles\n3nhs33a.default\extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi
[2013/01/02 13:51:45 | 000,804,627 | ---- | M] () (No name found) -- C:\Documents and Settings\Andrew Conkling\Application Data\Mozilla\Firefox\Profiles\n3nhs33a.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013/01/02 13:41:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/11/29 02:27:51 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/11/29 02:27:12 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/11/29 02:27:12 | 000,002,058 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
O1 HOSTS File: ([2010/03/31 07:33:26 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [BDAgent] C:\Program Files\Defender Pro\Defender Pro\bdagent.exe (Defender Pro)
O4 - HKLM..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe ()
O4 - HKLM..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe ()
O4 - HKLM..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe (Intel® Corporation)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil11g_Plugin.exe (Adobe Systems, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 0
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.micros...n/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support....veX/MSDcode.cab (Microsoft Data Collection Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.micros...b?1249795892625 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_05)
O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_05)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B02CE3E5-0662-4868-9015-75384E835392}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Andrew Conkling\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Andrew Conkling\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 13:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013/01/30 16:50:12 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Andrew Conkling\Desktop\OTL.exe
[2013/01/26 23:12:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2013/01/26 23:11:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Yahoo! Messenger
[2013/01/26 22:59:05 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2013/01/22 18:53:50 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Andrew Conkling\Recent
[2013/01/22 17:23:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andrew Conkling\Desktop\Resume Information
[2013/01/09 20:39:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andrew Conkling\Desktop\Taylor Swift
[2013/01/02 13:42:30 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Documents and Settings\LocalService\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\LocalService\Local Settings\Application Data\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/01/30 16:50:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andrew Conkling\Desktop\OTL.exe
[2013/01/30 16:15:05 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/01/30 12:59:48 | 000,000,442 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{9428CBF6-0627-40EE-826A-E289221FE899}.job
[2013/01/29 10:18:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/01/28 05:11:02 | 000,003,120 | ---- | M] () -- C:\WINDOWS\FDK47J7J.ocx
[2013/01/27 08:29:53 | 000,003,120 | ---- | M] () -- C:\WINDOWS\System32\FEHXUQ9Q.ocx
[2013/01/26 23:11:12 | 000,000,820 | ---- | M] () -- C:\Documents and Settings\Andrew Conkling\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2013/01/26 23:11:12 | 000,000,802 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
[2013/01/25 19:09:24 | 000,000,311 | ---- | M] () -- C:\WINDOWS\System32\checkdnsid.xml
[2013/01/09 15:53:52 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013/01/04 15:25:16 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2013/01/02 13:42:38 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Andrew Conkling\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/01/02 13:42:38 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/01/28 05:11:02 | 000,003,120 | ---- | C] () -- C:\WINDOWS\FDK47J7J.ocx
[2013/01/27 08:29:53 | 000,003,120 | ---- | C] () -- C:\WINDOWS\System32\FEHXUQ9Q.ocx
[2013/01/26 23:11:12 | 000,000,820 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2013/01/26 23:11:12 | 000,000,802 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
[2013/01/02 13:42:38 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/01/02 13:42:37 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2013/01/02 13:42:37 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2012/12/22 10:55:17 | 000,149,168 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1356193371.bdinstall.bin
[2012/08/15 09:14:14 | 000,102,285 | ---- | C] () -- C:\WINDOWS\hpoins05.dat
[2012/08/15 09:14:13 | 000,017,505 | ---- | C] () -- C:\WINDOWS\hpomdl07.dat
[2012/07/22 05:35:27 | 000,000,385 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Application Datauser_gensett.xml
[2012/07/21 09:06:58 | 000,000,376 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Application Dataprivacy.xml
[2012/07/07 16:18:36 | 000,177,320 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1341698476.bdinstall.bin
[2010/04/07 18:37:48 | 000,038,480 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Application Data\Comma Separated Values (Windows).ADR
[2009/12/11 16:06:42 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Application Data\PnkBstrK.sys
[2009/09/27 09:28:58 | 000,000,138 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Local Settings\Application Data\fusioncache.dat
[2009/03/16 08:05:20 | 000,010,240 | ---- | C] () -- C:\Documents and Settings\Andrew Conkling\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/03 16:10:40 | 010,747,904 | -H-- | C] () -- C:\Documents and Settings\Andrew Conkling\NTUSER.bak
[2009/03/03 16:10:40 | 004,718,592 | -H-- | C] () -- C:\Documents and Settings\Andrew Conkling\NTUSER.BK1
[2005/01/28 17:57:50 | 000,000,004 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\QSLLPSVCShare
========== ZeroAccess Check ==========
[2004/08/10 13:09:48 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/13 18:12:05 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 06:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 18:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2012/07/07 16:17:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Bitdefender
[2012/12/22 10:27:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Defender Pro
[2011/09/05 11:38:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\f-secure
[2010/04/13 14:45:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\fssg
[2010/01/16 05:19:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SITEguard
[2010/01/16 21:40:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2010/01/18 16:49:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2005/01/28 18:09:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/08/08 20:34:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\Avanquest
[2012/07/07 16:27:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\BitDefender
[2012/08/30 13:10:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\com.amazon.music.uploader
[2012/07/07 16:10:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\Defender Pro
[2010/06/29 17:37:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\ElevatedDiagnostics
[2010/04/15 14:40:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\f-secure
[2009/08/13 14:08:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\FoxPlayerAIR.01F2E49DE175CC541F416F2DF78BDD5E63AD0096.1
[2010/06/22 16:11:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\GARMIN
[2010/06/01 13:17:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\HorizonWimba
[2012/11/25 17:36:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\IDM
[2010/05/08 16:30:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\Image Zone Express
[2010/03/04 20:07:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\My Games
[2012/07/05 15:24:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\Oracle
[2012/07/07 16:06:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\QuickScan
[2010/06/07 10:06:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\Thunderbird
[2009/08/02 12:51:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andrew Conkling\Application Data\Windows Search
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 16 bytes -> C:\WINDOWS\WindowsUpdate.log:BDU
@Alternate Data Stream - 16 bytes -> C:\WINDOWS\Sti_Trace.log:BDU
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Andrew Conkling\Desktop\OTL.exe:BDU
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >