File. C:Winows/system 32/dla/tfsnifs.system
Infection. IRPHOOK/FileSystem/cdfs/IRP_...
and the information that the object was hidden. Many Thanks for any assistance.
OTL logfile created on: 06/01/2011 12:00:28 - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Derrick\My Documents
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
190.00 Mb Total Physical Memory | 15.00 Mb Available Physical Memory | 8.00% Memory free
752.00 Mb Paging File | 198.00 Mb Available in Paging File | 26.00% Paging File free
Paging file location(s): C:\pagefile.sys 575 900 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.89 Gb Total Space | 46.80 Gb Free Space | 83.73% Space Free | Partition Type: NTFS
Drive E: | 40.13 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: YOUR-E0367A1424 | User Name: Derrick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/01/06 11:51:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Derrick\My Documents\OTL.exe
PRC - [2010/11/10 19:08:04 | 000,724,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
PRC - [2010/11/10 19:08:02 | 006,127,184 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
PRC - [2010/10/27 05:15:24 | 001,073,504 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe
PRC - [2010/10/27 05:14:50 | 001,047,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgemcx.exe
PRC - [2010/10/25 05:15:46 | 003,988,320 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgui.exe
PRC - [2010/10/22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe
PRC - [2010/10/22 04:57:54 | 002,745,696 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe
PRC - [2010/10/22 04:57:38 | 000,652,640 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe
PRC - [2010/10/22 04:56:58 | 000,845,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe
PRC - [2010/10/22 04:56:56 | 000,647,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe
PRC - [2010/04/28 20:26:44 | 000,252,928 | ---- | M] (Vodafone) -- C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
PRC - [2008/04/14 00:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005/08/01 21:25:44 | 001,093,632 | ---- | M] (TOSHIBA Inc.) -- C:\Program Files\Toshiba\Windows Utilities\Hotkey.exe
PRC - [2005/07/08 00:13:14 | 000,036,864 | ---- | M] () -- C:\WINDOWS\system32\acs.exe
PRC - [2005/05/12 09:31:38 | 000,118,784 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\TOSHIBA Zooming Utility\SmoothView.exe
PRC - [2005/04/22 18:54:14 | 000,962,560 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
PRC - [2005/04/11 10:26:06 | 000,065,536 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
PRC - [2005/01/17 23:38:38 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
PRC - [2004/11/17 09:56:10 | 001,077,327 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\Touch and Launch\PadExe.exe
PRC - [2004/10/08 21:44:24 | 000,098,394 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
PRC - [2004/08/05 16:23:10 | 000,308,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
========== Modules (SafeList) ==========
MOD - [2011/01/06 11:51:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Derrick\My Documents\OTL.exe
MOD - [2010/08/23 16:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2004/10/08 21:44:16 | 000,069,722 | ---- | M] (Synaptics, Inc.) -- C:\WINDOWS\system32\SynTPFcs.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/11/10 19:08:02 | 006,127,184 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2010/10/22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2010/04/28 20:26:26 | 000,009,216 | ---- | M] (Vodafone) [Auto | Stopped] -- C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe -- (VmbService)
SRV - [2005/07/08 00:13:14 | 000,036,864 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS)
SRV - [2005/01/17 23:38:38 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2004/08/05 16:23:10 | 000,308,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe -- (SymWSC)
========== Driver Services (SafeList) ==========
DRV - [2010/11/09 22:20:58 | 000,299,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2010/09/13 15:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2010/09/07 03:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2010/09/07 03:48:54 | 000,249,424 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2010/09/07 03:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2010/08/19 20:42:38 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2010/08/19 20:42:36 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2010/08/19 20:42:34 | 000,026,192 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2010/04/19 15:42:40 | 000,105,856 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2010/04/19 15:42:40 | 000,105,856 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2010/04/19 15:42:38 | 000,105,856 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\zteusbvoice.sys -- (ZTEusbvoice)
DRV - [2010/04/19 15:42:38 | 000,105,856 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2010/03/25 18:09:48 | 000,114,688 | R--- | M] (ZTE Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZTEusbnet.sys -- (ZTEusbnet)
DRV - [2005/06/29 06:01:58 | 001,241,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005/06/17 22:17:48 | 000,352,000 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camc6hal.sys -- (CAMCHALA)
DRV - [2005/06/17 22:17:00 | 000,038,144 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camc6aud.sys -- (CAMCAUD)
DRV - [2005/06/11 04:42:40 | 000,005,504 | ---- | M] (Quanta Computer Corp) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BoiHwSetup.sys -- (BoiHwsetup)
DRV - [2005/05/31 04:33:00 | 000,100,605 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnudfa.sys -- (tfsnudfa)
DRV - [2005/05/31 04:33:00 | 000,098,716 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnudf.sys -- (tfsnudf)
DRV - [2005/05/31 04:33:00 | 000,086,876 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnifs.sys -- (tfsnifs)
DRV - [2005/05/31 04:33:00 | 000,034,845 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsncofs.sys -- (tfsncofs)
DRV - [2005/05/31 04:33:00 | 000,025,725 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnboio.sys -- (tfsnboio)
DRV - [2005/05/31 04:33:00 | 000,015,069 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnopio.sys -- (tfsnopio)
DRV - [2005/05/31 04:33:00 | 000,006,365 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnpool.sys -- (tfsnpool)
DRV - [2005/05/31 04:33:00 | 000,004,125 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsndrct.sys -- (tfsndrct)
DRV - [2005/05/31 04:33:00 | 000,002,241 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsndres.sys -- (tfsndres)
DRV - [2005/05/25 00:39:44 | 000,465,952 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2005/05/13 09:37:28 | 000,005,627 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\sscdbhk5.sys -- (sscdbhk5)
DRV - [2005/05/13 09:37:20 | 000,023,545 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\ssrtln.sys -- (ssrtln)
DRV - [2005/05/09 14:17:06 | 000,031,360 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\qkbfiltr.sys -- (qkbfiltr)
DRV - [2005/05/05 13:27:38 | 000,007,936 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\qmofiltr.sys -- (qmofiltr)
DRV - [2005/04/22 02:22:00 | 000,088,352 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\drvmcdb.sys -- (drvmcdb)
DRV - [2005/04/21 01:56:00 | 000,040,544 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\drvnddm.sys -- (drvnddm)
DRV - [2005/04/01 00:08:02 | 000,211,200 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWATI.sys -- (HSFHWATI)
DRV - [2005/03/31 23:08:46 | 001,034,240 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2005/03/31 23:08:00 | 000,714,880 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004/12/02 23:36:08 | 000,070,912 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2004/10/08 21:33:46 | 000,185,824 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2004/08/03 22:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2003/01/29 21:35:00 | 000,012,032 | ---- | M] (TOSHIBA Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.co.uk/0...S01?FORM=TOOLBR
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bbc.co.uk/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2010/12/22 20:22:37 | 000,000,000 | ---D | M]
O1 HOSTS File: ([2004/08/04 12:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [MobileBroadband] C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe (Vodafone)
O4 - HKLM..\Run: [NDSTray.exe] File not found
O4 - HKLM..\Run: [PadTouch] C:\Program Files\Toshiba\Touch and Launch\PadExe.exe (TOSHIBA)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\TOSHIBA Zooming Utility\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Toshiba Hotkey Utility] C:\Program Files\Toshiba\Windows Utilities\Hotkey.exe (TOSHIBA Inc.)
O4 - HKCU..\Run: [TOSCDSPD] C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\NPJPI150_02.dll (Sun Microsystems, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macr...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.206.65.68 10.206.65.68
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/08/04 12:37:42 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/04/28 22:49:17 | 000,000,118 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{875fe5b8-0de2-11e0-86fa-00c09fced352}\Shell - "" = AutoRun
O33 - MountPoints2\{875fe5b8-0de2-11e0-86fa-00c09fced352}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{875fe5b8-0de2-11e0-86fa-00c09fced352}\Shell\AutoRun\command - "" = E:\setup_vmb_lite.exe -- [2010/04/16 16:39:09 | 000,274,432 | R--- | M] (Vodafone)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/01/06 11:50:48 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Derrick\My Documents\OTL.exe
[2011/01/06 11:19:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2011/01/01 10:03:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Local Settings\Application Data\Identities
[2010/12/27 10:59:59 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2010/12/24 10:26:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works
[2010/12/24 10:15:17 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2010/12/23 07:58:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2010/12/23 07:58:37 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2010/12/23 07:58:12 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2010/12/23 07:56:49 | 000,000,000 | ---D | C] -- C:\decdb5cd91cf4f1214e47a1adaa6d4
[2010/12/22 21:25:34 | 000,000,000 | -H-D | C] -- C:\$AVG
[2010/12/22 20:34:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\AVG10
[2010/12/22 20:28:36 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2010/12/22 20:27:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2011
[2010/12/22 20:22:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2010/12/22 20:22:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\AVG
[2010/12/22 20:21:39 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2010/12/22 20:10:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2010/12/22 19:16:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010/12/22 18:59:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2010/12/22 18:59:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2010/12/22 18:59:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2010/12/22 18:59:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2010/12/22 18:55:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2010/12/22 18:50:45 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2010/12/22 18:50:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\EHome
[2010/12/22 18:18:03 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Derrick\IECompatCache
[2010/12/22 18:17:14 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Derrick\PrivacIE
[2010/12/22 18:15:10 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Derrick\IETldCache
[2010/12/22 18:02:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2010/12/22 18:01:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010/12/22 18:00:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010/12/22 18:00:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2010/12/22 17:54:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2010/12/22 17:20:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2010/12/22 17:19:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010/12/22 17:17:08 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Derrick\UserData
[2010/12/22 17:02:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\Macromedia
[2010/12/22 17:00:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\FLEXnet
[2010/12/22 16:56:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2010/12/22 15:52:37 | 000,114,688 | R--- | C] (ZTE Corporation) -- C:\WINDOWS\System32\drivers\ZTEusbnet.sys
[2010/12/22 15:52:31 | 000,105,856 | R--- | C] (ZTE Incorporated) -- C:\WINDOWS\System32\drivers\ZTEusbmdm6k.sys
[2010/12/22 15:52:27 | 000,105,856 | R--- | C] (ZTE Incorporated) -- C:\WINDOWS\System32\drivers\zteusbvoice.sys
[2010/12/22 15:52:23 | 000,105,856 | R--- | C] (ZTE Incorporated) -- C:\WINDOWS\System32\drivers\ZTEusbnmea.sys
[2010/12/22 15:52:19 | 000,105,856 | R--- | C] (ZTE Incorporated) -- C:\WINDOWS\System32\drivers\ZTEusbser6k.sys
[2010/12/22 15:51:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\Vodafone
[2010/12/22 15:51:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Vodafone
[2010/12/22 15:51:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2010/12/22 15:50:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Vodafone
[2010/12/22 15:50:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Vodafone
[2010/12/22 15:50:29 | 000,000,000 | ---D | C] -- C:\Program Files\Vodafone
[2010/12/22 15:50:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\FLEXnet
[2010/12/22 15:50:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Local Settings\Application Data\{FA6F1E64-A6BD-4822-A094-03171A37E8C6}
[2010/12/22 15:37:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Nethood
[2010/12/22 15:37:00 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Derrick\Application Data\Microsoft
[2010/12/22 15:37:00 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Derrick\Application Data
[2010/12/22 15:37:00 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Derrick\My Documents\My Pictures
[2010/12/22 15:37:00 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Derrick\My Documents\My Music
[2010/12/22 15:37:00 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Derrick\My Documents
[2010/12/22 15:37:00 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Derrick\Favorites
[2010/12/22 15:37:00 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Derrick\Cookies
[2010/12/22 15:37:00 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Derrick\Local Settings
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\toshiba
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\Symantec
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\Sonic
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Local Settings\Application Data\Microsoft
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\Identities
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Local Settings\Application Data\Help
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\Help
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Desktop
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Local Settings\Application Data\ApplicationHistory
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Local Settings\Application Data\Adobe
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Application Data\Adobe
[2010/12/22 15:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Derrick\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150020}
[2010/12/22 15:36:59 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Derrick\SendTo
[2010/12/22 15:36:59 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Derrick\Recent
[2010/12/22 15:36:59 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Derrick\Start Menu\Programs\Startup
[2010/12/22 15:36:59 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Derrick\Start Menu
[2010/12/22 15:36:59 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Derrick\Start Menu\Programs\Accessories
[2010/12/22 15:36:59 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Derrick\Templates
[2010/12/22 15:36:59 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Derrick\PrintHood
[2010/12/22 15:35:56 | 000,028,672 | ---- | C] (ASKEY COMPUTER CORP.) -- C:\WINDOWS\System32\DelRunOnceReg.exe
[2010/12/22 15:35:53 | 000,352,256 | ---- | C] (Atheros) -- C:\WINDOWS\System32\athcfg11.dll
[2010/12/22 15:35:53 | 000,237,568 | ---- | C] (Atheros) -- C:\WINDOWS\System32\wgapi.dll
[2010/12/22 15:35:53 | 000,233,472 | ---- | C] (Atheros) -- C:\WINDOWS\System32\wcapi.dll
[2010/12/22 15:35:53 | 000,077,824 | ---- | C] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\athcfg11res.dll
[2010/12/22 15:35:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Atheros
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/01/06 11:57:44 | 000,000,491 | ---- | M] () -- C:\Documents and Settings\Derrick\My Documents\Shortcut to OTL.lnk
[2011/01/06 11:51:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Derrick\My Documents\OTL.exe
[2011/01/06 11:03:30 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/01/06 11:03:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/01/06 11:03:00 | 199,479,296 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/01 10:05:34 | 103,143,768 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2011/01/01 09:43:01 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Derrick\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/12/31 22:30:42 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SMS.lnk
[2010/12/27 09:24:40 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/12/25 04:37:48 | 000,209,696 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/12/24 11:59:16 | 000,441,692 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/12/24 11:59:16 | 000,071,462 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/12/24 10:50:58 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Derrick\Application Data\wklnhst.dat
[2010/12/24 10:49:10 | 000,000,814 | ---- | M] () -- C:\Documents and Settings\Derrick\Desktop\Microsoft Works.LNK
[2010/12/22 20:27:44 | 000,000,690 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2010/12/22 19:16:34 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010/12/22 18:54:50 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/12/22 18:15:15 | 000,001,503 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Browser Choice.lnk
[2010/12/22 15:50:45 | 000,001,911 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Vodafone Mobile Broadband.lnk
[2010/12/22 15:37:35 | 000,000,786 | ---- | M] () -- C:\Documents and Settings\Derrick\Desktop\Windows Media Player.lnk
[2010/12/22 15:37:22 | 000,000,000 | RHS- | M] () -- C:\WINDOWS\System32\drivers\TOSHIBA_Satellite L20_03471000-EN_PSL2XE-01P00.MRK
[2010/12/22 15:36:03 | 000,000,332 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/12/22 15:35:37 | 000,000,597 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Additional Software.lnk
[2010/12/22 15:35:35 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2010/12/22 15:35:33 | 000,000,258 | ---- | M] () -- C:\WINDOWS\tasks\Registration reminder 3.job
[2010/12/22 15:35:33 | 000,000,258 | ---- | M] () -- C:\WINDOWS\tasks\Registration reminder 2.job
[2010/12/22 15:35:32 | 000,000,258 | ---- | M] () -- C:\WINDOWS\tasks\Registration reminder 1.job
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/01/06 11:57:42 | 000,000,491 | ---- | C] () -- C:\Documents and Settings\Derrick\My Documents\Shortcut to OTL.lnk
[2011/01/01 10:05:34 | 103,143,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2010/12/24 10:50:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Derrick\Application Data\wklnhst.dat
[2010/12/24 10:48:55 | 000,000,814 | ---- | C] () -- C:\Documents and Settings\Derrick\Desktop\Microsoft Works.LNK
[2010/12/22 20:27:44 | 000,000,690 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2010/12/22 18:42:16 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2010/12/22 18:42:06 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010/12/22 18:41:02 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2010/12/22 18:15:14 | 000,001,503 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Browser Choice.lnk
[2010/12/22 15:50:45 | 000,002,515 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SMS.lnk
[2010/12/22 15:50:45 | 000,001,911 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Vodafone Mobile Broadband.lnk
[2010/12/22 15:40:38 | 000,000,075 | ---- | C] () -- C:\Documents and Settings\Derrick\LuResult.txt
[2010/12/22 15:37:35 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\Derrick\Desktop\Windows Media Player.lnk
[2010/12/22 15:37:22 | 000,000,000 | RHS- | C] () -- C:\WINDOWS\System32\drivers\TOSHIBA_Satellite L20_03471000-EN_PSL2XE-01P00.MRK
[2010/12/22 15:37:01 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Derrick\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/12/22 15:37:01 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Derrick\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/12/22 15:35:56 | 000,266,240 | ---- | C] () -- C:\WINDOWS\System32\ControlWZCS.exe
[2010/12/22 15:35:53 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\acs.exe
[2010/12/22 15:35:45 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2010/12/22 15:35:37 | 000,000,597 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Additional Software.lnk
[2010/12/22 15:35:33 | 000,000,258 | ---- | C] () -- C:\WINDOWS\tasks\Registration reminder 3.job
[2010/12/22 15:35:32 | 000,000,258 | ---- | C] () -- C:\WINDOWS\tasks\Registration reminder 2.job
[2010/12/22 15:35:32 | 000,000,258 | ---- | C] () -- C:\WINDOWS\tasks\Registration reminder 1.job
[2010/12/22 15:31:37 | 199,479,296 | -HS- | C] () -- C:\hiberfil.sys
[2010/04/22 19:37:02 | 000,155,474 | R--- | C] () -- C:\Documents and Settings\All Users\Application Data\DeviceManager.xml.rc4
[2005/08/05 10:54:46 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/08/05 06:13:52 | 000,006,757 | ---- | C] () -- C:\WINDOWS\TcdsASC2.ini
[2005/08/05 06:00:25 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/08/04 13:51:26 | 000,000,228 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005/08/04 13:49:45 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2005/08/04 13:49:45 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2005/08/04 13:49:45 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2005/08/04 13:49:45 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2005/08/04 13:49:45 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2005/08/04 13:49:45 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2005/08/04 13:47:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI
[2005/08/04 13:45:38 | 000,011,122 | ---- | C] () -- C:\WINDOWS\HWSetupStr.ini
[2005/08/04 13:45:38 | 000,002,036 | R--- | C] () -- C:\WINDOWS\SVPW32Str.ini
[2005/08/04 13:40:57 | 000,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini
[2005/08/04 13:40:57 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll
[2005/08/04 13:40:57 | 000,009,362 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini
[2005/08/04 13:40:57 | 000,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini
[2005/08/04 13:28:44 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/08/04 12:40:58 | 000,000,780 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2005/08/04 11:21:40 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ToshBIOS.dll
[2005/08/04 11:21:40 | 000,000,083 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/06/30 20:15:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/11/12 04:08:36 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\tsbwls.dll
========== LOP Check ==========
[2010/12/22 20:31:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2010/12/22 20:28:36 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2010/12/22 20:21:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2010/12/22 15:50:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Vodafone
[2010/12/22 20:34:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Derrick\Application Data\AVG10
[2005/08/04 13:47:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Derrick\Application Data\toshiba
[2010/12/22 15:51:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Derrick\Application Data\Vodafone
[2010/12/22 15:35:32 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\Registration reminder 1.job
[2010/12/22 15:35:33 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\Registration reminder 2.job
[2010/12/22 15:35:33 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\Registration reminder 3.job
========== Purity Check ==========
< End of report >