[sandskipper]

Hello all,

I am suspecting that I have a computer bug that causes my Explorer browser to error when I view streaming videos. I have not noticed it while doing anything else yet. I read a prior post about a file in the %TEMP% folder that was thought to be involved and I have the same file. The file in question is: exe4jlib.jar

Here is a description of my problem:
When browsing the net, if i click to watch a video, the video will buffer for a second and then start to play. On some occasions I notice that the video stream is choppy and other times it plays normally. Usually the video will play anyware from 5 seconds to 1 minute then I get a pop-up error screen that says an unexpected error occured and the browser must close. I have the option to Degub, which will immediatly close the browser along with the error pop-up; Send the error report, which runs a 2 second macro before sending: or ignoring the report and closing the browser. I can reopen the browser again and navigate sites again without issues, it does appear as though my connection has slowed, but as soon as I try to stream video the problem reoccures.

I have run the OTL scan and am attaching the txt logs here:

OTL logfile created on: 4/8/2011 9:55:27 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = D:\Profiles\rp4900\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 76.00% Memory free
7.00 Gb Paging File | 6.00 Gb Available in Paging File | 89.00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 80.00 Gb Total Space | 63.57 Gb Free Space | 79.46% Space Free | Partition Type: NTFS
Drive D: | 69.01 Gb Total Space | 65.02 Gb Free Space | 94.22% Space Free | Partition Type: NTFS
Drive Z: | 534.58 Gb Total Space | 26.03 Gb Free Space | 4.87% Space Free | Partition Type: NTFS

Computer Name: RP4900-01 | User Name: rp4900 | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/04/08 21:54:59 | 000,580,608 | ---- | M] (OldTimer Tools) -- D:\Profiles\rp4900\Desktop\OTL.exe
PRC - [2011/01/16 02:47:32 | 000,028,768 | ---- | M] () -- C:\cim\webstart\cache\javaws\ext\E1292443367380\bin\javaw.exe
PRC - [2010/12/03 18:41:07 | 000,090,112 | ---- | M] (Scalable Software, Inc.) -- C:\Program Files\Scalable Software\Survey\SSI Survey Client\surveyclientnt.exe
PRC - [2010/11/12 18:53:19 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\javaw.exe
PRC - [2010/02/22 02:56:00 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2010/02/22 02:56:00 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2010/02/22 02:53:00 | 002,477,304 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2010/02/22 02:53:00 | 001,864,888 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2010/02/22 02:52:00 | 001,455,432 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2009/07/21 12:40:56 | 002,066,968 | ---- | M] (Intel Corporation) -- C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe
PRC - [2009/07/21 12:40:50 | 000,174,616 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\LMS.exe
PRC - [2009/04/02 15:33:16 | 000,128,232 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009/02/11 15:38:40 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2009/02/11 15:38:38 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/08/01 18:20:16 | 006,600,000 | ---- | M] (Iron Mountain Incorporated) -- C:\Program Files\Iron Mountain\Connected BackupPC\AgentService.exe
PRC - [2008/08/01 18:20:16 | 000,244,528 | ---- | M] (Iron Mountain Incorporated) -- C:\Program Files\Iron Mountain\Connected BackupPC\Agent.exe
PRC - [2008/07/28 14:38:01 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/05/30 20:38:14 | 000,241,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\CCM\clicomp\RemCtrl\Wuser32.exe
PRC - [2007/04/12 23:50:00 | 000,590,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\CCM\CcmExec.exe
PRC - [2003/07/23 11:19:52 | 000,053,248 | ---- | M] (Hummingbird Ltd.) -- C:\Program Files\Hummingbird\Connectivity\9.00\Exceed\HumDisplayServer.exe
PRC - [2002/04/30 15:23:46 | 000,057,603 | ---- | M] (Oracle Corporation) -- C:\oracle\ora92\bin\omtsreco.exe
PRC - [2001/08/15 19:36:30 | 001,114,112 | ---- | M] (Hummingbird Ltd.) -- c:\Program Files\Hummingbird\Connectivity\7.10\Exceed\exceed.exe
PRC - [2001/07/26 09:06:12 | 000,032,768 | ---- | M] (Hummingbird Ltd.) -- C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Inetd\inetd32.exe
PRC - [2001/07/23 17:52:28 | 000,028,672 | ---- | M] (Hummingbird Ltd.) -- C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Jconfig\jconfigdnt.exe
PRC - [2001/07/23 14:36:54 | 000,040,960 | ---- | M] (Hummingbird Ltd.) -- C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Jconfig\hjavaw.exe


========== Modules (SafeList) ==========

MOD - [2011/04/08 21:54:59 | 000,580,608 | ---- | M] (OldTimer Tools) -- D:\Profiles\rp4900\Desktop\OTL.exe
MOD - [2010/12/03 18:41:06 | 000,060,928 | ---- | M] (Scalable Software, Inc.) -- C:\WINDOWS\system32\ssihook7.dll
MOD - [2010/08/23 09:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010/02/22 02:57:00 | 000,357,704 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\sysfer.dll
MOD - [2009/06/25 05:51:42 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxdo.dll
MOD - [2008/07/28 14:38:01 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dbghelp.dll


========== Win32 Services (SafeList) ==========

SRV - [2010/12/03 18:41:07 | 000,090,112 | ---- | M] (Scalable Software, Inc.) [Auto | Running] -- C:\Program Files\Scalable Software\Survey\SSI Survey Client\surveyclientnt.exe -- (SSI Survey Client)
SRV - [2010/12/03 18:41:05 | 000,503,808 | ---- | M] (Scalable Software, Inc.) [On_Demand | Stopped] -- C:\WINDOWS\system32\SCInstallerNT.exe -- (SSI Client Installer)
SRV - [2010/02/22 02:56:00 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2010/02/22 02:56:00 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2010/02/22 02:53:00 | 002,477,304 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2010/02/22 02:53:00 | 001,864,888 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2010/02/22 02:52:00 | 000,341,320 | ---- | M] (Symantec Corporation) [Disabled | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009/07/21 12:40:56 | 002,066,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe -- (UNS) Intel®
SRV - [2009/07/21 12:40:50 | 000,174,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\AMT\LMS.exe -- (LMS) Intel®
SRV - [2009/07/13 09:06:15 | 003,093,880 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
SRV - [2009/02/11 15:38:40 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel®
SRV - [2008/08/01 18:20:16 | 006,600,000 | ---- | M] (Iron Mountain Incorporated) [Auto | Running] -- C:\Program Files\Iron Mountain\Connected BackupPC\AgentService.exe -- (AgentService)
SRV - [2007/05/30 20:38:14 | 000,241,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\CCM\clicomp\RemCtrl\Wuser32.exe -- (Wuser32)
SRV - [2007/04/12 23:50:00 | 000,590,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\CCM\CcmExec.exe -- (CcmExec)
SRV - [2003/07/23 11:19:52 | 000,053,248 | ---- | M] (Hummingbird Ltd.) [Auto | Running] -- C:\Program Files\Hummingbird\Connectivity\9.00\Exceed\HumDisplayServer.exe -- (HumDisplayServer)
SRV - [2002/04/30 15:23:46 | 000,057,603 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\oracle\ora92\bin\omtsreco.exe -- (OracleMTSRecoveryService)
SRV - [2002/04/26 19:34:38 | 000,242,328 | ---- | M] () [On_Demand | Stopped] -- C:\oracle\ora92\bin\ONRSD.EXE -- (OracleOra92ClientCache)
SRV - [2001/07/26 09:06:12 | 000,032,768 | ---- | M] (Hummingbird Ltd.) [Auto | Running] -- C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Inetd\inetd32.exe -- (HCLInetd)
SRV - [2001/07/23 17:52:28 | 000,028,672 | ---- | M] (Hummingbird Ltd.) [Auto | Running] -- C:\WINDOWS\system32\Hummingbird\Connectivity\7.10\Jconfig\jconfigdnt.exe -- (Jconfigd)


========== Driver Services (SafeList) ==========

DRV - [2011/03/30 01:00:00 | 001,393,144 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110407.035\NAVEX15.SYS -- (NAVEX15)
DRV - [2011/03/30 01:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110407.035\NAVENG.SYS -- (NAVENG)
DRV - [2010/11/17 10:42:56 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/11/03 13:58:54 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2010/10/31 22:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/09/10 22:32:20 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wpshelper.sys -- (WpsHelper)
DRV - [2010/02/22 02:57:00 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS)
DRV - [2010/02/22 02:56:00 | 000,320,560 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2010/02/22 02:56:00 | 000,281,648 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2010/02/22 02:56:00 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2010/02/22 02:52:00 | 000,092,488 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant)
DRV - [2010/02/22 02:52:00 | 000,050,064 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2)
DRV - [2010/02/22 02:51:00 | 000,421,424 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2010/02/22 02:51:00 | 000,188,080 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2010/02/22 02:51:00 | 000,026,416 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2010/02/22 02:50:00 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2009/12/10 07:33:34 | 000,167,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1k5132.sys -- (e1kexpress) Intel®
DRV - [2008/10/30 17:31:51 | 000,022,528 | R--- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmxnet.sys -- (vmxnet)
DRV - [2008/10/30 17:31:50 | 000,015,744 | R--- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmx_svga.sys -- (vmx_svga)
DRV - [2008/10/30 17:31:50 | 000,010,880 | R--- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\vmscsi.sys -- (vmscsi)
DRV - [2008/10/30 17:31:50 | 000,004,608 | R--- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmmouse.sys -- (vmmouse)
DRV - [2008/08/01 18:20:16 | 000,045,384 | ---- | M] () [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\LV_Tracker.sys -- (LV_Tracker)
DRV - [2008/07/28 14:38:01 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008/04/13 17:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008/03/28 09:14:02 | 000,024,064 | ---- | M] (Sonic Focus, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfaudio.sys -- (SFAUDIO)
DRV - [2007/05/30 20:38:08 | 000,011,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\kbstuff5.sys -- (kbstuff)
DRV - [2007/04/12 23:50:00 | 000,023,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\CCM\PrepDrv.sys -- (prepdrvr)
DRV - [2001/08/17 05:19:34 | 000,040,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\es1371mp.sys -- (es1371) Creative AudioPCI (ES1371,ES1373) (WDM)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://summit.freescale.net
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://summit.freescale.net

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://az84ap18v.am.freescale.net/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.freescale.net;*.mot.com;<local>;192.168.*.*
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = wwwgate0.freescale.net:1080
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = http://wwwgate0.free...ed_pac_base.pac



O1 HOSTS File: ([2006/11/27 11:28:34 | 000,001,077 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 10.64.37.29 compass.mot.com phx.compass.mot.com
O1 - Hosts: 10.67.14.138 HE183
O1 - Hosts: 10.67.14.9 HE200
O1 - Hosts: 10.67.14.10 HE127
O1 - Hosts: 10.67.13.15 HE268
O1 - Hosts: 10.67.7.75 GSD433
O1 - Hosts: 10.67.7.76 GSD438
O1 - Hosts: 10.67.7.77 GSD295
O1 - Hosts: 10.67.14.135 GSD316
O1 - Hosts: 10.67.14.136 GSD313
O1 - Hosts: 10.67.14.137 HE178
O1 - Hosts: 10.67.14.139 VHE073
O1 - Hosts: 10.67.13.93 HE284
O1 - Hosts: 10.67.13.133 GSD595
O2 - BHO: (IEBrowserHelperObject Class) - {86EA4148-BEE6-4CEE-A72F-DA27A5112BD1} - C:\WINDOWS\system32\ssibrowserhook5.dll (Scalable Software, Inc.)
O4 - HKLM..\Run: [AgentUiRunKey] C:\Program Files\Iron Mountain\Connected BackupPC\Agent.exe (Iron Mountain Incorporated)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Communicator] C:\Program Files\Microsoft Office Communicator\communicator.exe (Microsoft Corporation)
O4 - HKLM..\Run: [CSCLogonInfo] C:\WINDOWS\UsrLogon.exe ()
O4 - HKLM..\Run: [HRHCM] C:\Program Files\Internet Explorer\PLUGINS\iemod.exe ()
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [picon] C:\Program Files\Common Files\Intel\Privacy Icon\PrivacyIconClient.exe (Intel Corporation)
O4 - HKLM..\Run: [SecureScreenSaver] C:\ntutils\SecureScreen.exe (CSC)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMSAppLogo5ChannelNotify = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disablecad = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonType = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Home = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Fullscreen = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Tools = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Print = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Edit = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Cut = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Copy = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Paste = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Encoding = 0
O16 - DPF: {3AED1953-E7E9-418F-888C-7B497E038B77} http://az50mfgfgrd03...l/FgViewOcx.cab (FgViewOcx Control)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onec...lscbase6886.cab (Windows Live Safety Center Base Module)
O16 - DPF: {5FF6BD84-D9FA-497E-BD43-FAA0DE338754} http://az50mfgfgrd03...gStartupOcx.cab (FgStartupOcx Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {A97CF130-1C5E-4E07-A3FF-14BBE848DAC9} http://az50mfgfgrd03.../FgAlarmOcx.cab (FgAlarmOcx Control)
O16 - DPF: {B84BBE57-87E8-4335-8FD0-4B45A50E055E} http://az50mfgfgrd03...DbReportOcx.cab (FgDbReportOcx Control)
O16 - DPF: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA} http://kronos.freesc...dows-i586-p.exe (Java Plug-in)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_23)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.67.86.163 10.64.32.3 10.208.0.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = fsl.freescale.net
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: D:\Profiles\rp4900\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Profiles\rp4900\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/11/03 13:00:29 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/04/08 21:54:58 | 000,580,608 | ---- | C] (OldTimer Tools) -- D:\Profiles\rp4900\Desktop\OTL.exe
[2011/04/07 22:50:04 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/04/07 22:45:05 | 000,000,000 | ---D | C] -- D:\Profiles\All Users\Application Data\RegSERVO
[2011/04/07 02:40:00 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live Safety Center
[2011/04/01 10:49:40 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2011/03/30 17:08:39 | 000,000,000 | ---D | C] -- C:\Program Files\Self Help Icon
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/04/08 21:55:00 | 000,000,408 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{A196984B-C8E2-487D-9571-BD1FE9882AE9}.job
[2011/04/08 21:54:59 | 000,580,608 | ---- | M] (OldTimer Tools) -- D:\Profiles\rp4900\Desktop\OTL.exe
[2011/04/08 21:45:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/08 20:48:21 | 000,001,848 | ---- | M] () -- D:\Profiles\All Users\Application Data\SSIHistory.dat
[2011/04/08 16:48:01 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/07 23:09:57 | 000,437,312 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/07 23:09:57 | 000,068,936 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/07 23:06:36 | 000,000,456 | ---- | M] () -- C:\WINDOWS\SMSCFG.ini
[2011/04/07 23:05:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/07 22:58:53 | 000,001,714 | RHS- | M] () -- D:\Profiles\rp4900\ntuser.pol
[2011/04/07 22:45:44 | 000,001,447 | ---- | M] () -- D:\Profiles\rp4900\Application Data\Microsoft\Internet Explorer\Quick Launch\Command Prompt.lnk
[2011/04/07 22:45:44 | 000,001,385 | ---- | M] () -- D:\Profiles\rp4900\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Explorer.lnk
[2011/04/07 22:45:06 | 000,000,384 | ---- | M] () -- C:\WINDOWS\tasks\RegSERVO.job
[2011/04/07 18:34:42 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/04/07 01:52:48 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/04 12:25:00 | 000,119,548 | RHS- | M] () -- D:\Profiles\All Users\ntuser.pol
[2011/04/01 11:28:08 | 000,333,072 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/01 10:49:57 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/03/26 04:36:41 | 000,001,724 | -H-- | M] () -- D:\Profiles\rp4900\My Documents\Default.rdp
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/04/07 22:45:06 | 000,000,384 | ---- | C] () -- C:\WINDOWS\tasks\RegSERVO.job
[2011/03/25 09:00:38 | 000,000,074 | ---- | C] () -- C:\WINDOWS\brioqplg.ini
[2011/03/25 08:59:30 | 000,032,389 | ---- | C] () -- C:\WINDOWS\bqformat.ini
[2011/03/03 09:51:18 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/12/15 13:32:03 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/12/04 09:19:28 | 000,000,045 | ---- | C] () -- C:\WINDOWS\wwwbatch.ini
[2010/12/04 06:11:37 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\instsrv.exe
[2010/12/04 06:11:37 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\srvany.exe
[2010/12/04 06:00:38 | 000,127,079 | ---- | C] () -- C:\WINDOWS\UsrLogon.exe
[2010/12/04 06:00:37 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\logevent.exe
[2010/12/03 18:30:32 | 000,001,848 | ---- | C] () -- D:\Profiles\All Users\Application Data\SSIHistory.dat
[2010/12/02 11:31:07 | 000,000,428 | ---- | C] () -- C:\WINDOWS\System32\smsOU.ini
[2010/11/24 07:25:35 | 000,120,740 | ---- | C] () -- C:\WINDOWS\System32\FSIE.exe
[2010/11/03 17:13:49 | 000,051,716 | ---- | C] () -- C:\WINDOWS\System32\pdf995mon.dll
[2010/11/03 17:13:49 | 000,000,132 | ---- | C] () -- C:\WINDOWS\wpd99.drv
[2010/11/03 16:51:42 | 000,030,183 | R--- | C] () -- C:\WINDOWS\System32\drivers\lgtosync.sys
[2010/11/03 15:50:35 | 000,001,150 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2010/11/03 15:49:50 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2010/11/03 15:49:46 | 000,437,312 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2010/11/03 15:49:46 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2010/11/03 15:49:46 | 000,068,936 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2010/11/03 15:49:46 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2010/11/03 15:49:44 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2010/11/03 15:49:44 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2010/11/03 15:49:42 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2010/11/03 15:49:35 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2010/11/03 15:49:35 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2010/11/03 15:49:21 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2010/11/03 15:49:16 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2010/11/03 13:30:31 | 000,982,196 | ---- | C] () -- C:\WINDOWS\System32\igkrng500.bin
[2010/11/03 13:30:29 | 000,417,344 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng500.bin
[2010/11/03 13:23:50 | 000,000,456 | ---- | C] () -- C:\WINDOWS\SMSCFG.ini
[2010/11/03 13:22:33 | 000,245,840 | ---- | C] () -- D:\Profiles\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2010/11/03 13:08:23 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/11/03 12:58:31 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/11/03 07:55:10 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/11/03 07:54:34 | 000,333,072 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/08/01 18:20:16 | 000,045,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\LV_Tracker.sys
[1999/07/30 09:24:34 | 000,000,218 | ---- | C] () -- C:\WINDOWS\oraodbc.ini

========== LOP Check ==========

[2010/12/02 15:00:06 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\Email Backup Optimization
[2010/11/24 10:49:21 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\Hummingbird
[2010/11/03 17:13:49 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\pdf995
[2011/04/07 22:45:10 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\RegSERVO
[2010/12/03 18:30:36 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\Scalable Software
[2010/11/24 07:15:46 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\Uninstall
[2011/03/03 09:54:25 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\V CAST Media Manager
[2010/11/03 13:57:09 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\WinZip
[2011/02/12 04:29:38 | 000,000,000 | ---D | M] -- D:\Profiles\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011/04/07 22:45:06 | 000,000,384 | ---- | M] () -- C:\WINDOWS\Tasks\RegSERVO.job
[2011/04/08 21:55:00 | 000,000,408 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{A196984B-C8E2-487D-9571-BD1FE9882AE9}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> D:\Profiles\rp4900\Desktop\calc.exe:SummaryInformation

< End of report >


(Here is a second txt file that was also generated by OTL):


OTL Extras logfile created on: 4/8/2011 9:55:28 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = D:\Profiles\rp4900\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 76.00% Memory free
7.00 Gb Paging File | 6.00 Gb Available in Paging File | 89.00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 80.00 Gb Total Space | 63.57 Gb Free Space | 79.46% Space Free | Partition Type: NTFS
Drive D: | 69.01 Gb Total Space | 65.02 Gb Free Space | 94.22% Space Free | Partition Type: NTFS
Drive Z: | 534.58 Gb Total Space | 26.03 Gb Free Space | 4.87% Space Free | Partition Type: NTFS

Computer Name: RP4900-01 | User Name: rp4900 | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [CmdHere] -- C:\WINDOWS\system32\cmd.exe /k cd "%1" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 4

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint]
"Enabled" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint]
"Enabled" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe" = C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe:*:Enabled:SMC Service -- (Symantec Corporation)
"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE" = C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE:*:Enabled:SNAC Service -- (Symantec Corporation)
"C:\Program Files\Common Files\Symantec Shared\ccApp.exe" = C:\Program Files\Common Files\Symantec Shared\ccApp.exe:*:Enabled:Symantec Email -- (Symantec Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05B48BA3-BB11-44CD-9260-57726FD45068}" = FSL-ENG-SMS2003SP3_Client-1.0-GBL-R1
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE 10.3
"{1011C5D4-6734-419D-B4F5-FDCA24E79664}" = FSL-ENG-Self_Help_Icon-1.0-GBL-R1
"{132C698E-C462-4463-A221-6336772FBDD6}" = FSL-ENG-SymantecDelTemp-1.0-GBL-R1
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{21782663-B39B-4634-B07B-4C4D80662AA8}" = FSL-ENG-RealPlayer_Registry_Update-1.0-GBL-R1
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 23
"{2AC619CD-AB80-4607-AC27-9F53E2AD46BF}" = Hummingbird Exceed V9.0
"{2EFCC193-D915-4CCB-9201-31773A27BC06}" = Symantec Endpoint Protection
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0150070}" = J2SE Runtime Environment 5.0 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{393E4C89-67E9-43BF-AD29-94D19F7624F7}" = Connected Backup/PC Agent
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D56779F-EF0E-406D-A8AF-CEBF78A78E1A}" = FSL-ENG-OutlookResolveProxy-1.0-GBL-R1
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5AE5DB70-5CE6-4876-A83E-8246CC36FC28}" = Microsoft Office PowerPoint 2007 Get Started Tab
"{5E9B59DD-6348-43E6-B27B-5C73CB660221}" = Axcelis INO
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{68B52EFD-86CC-486E-A8D0-A3A1554CB5BC}" = Microsoft Office Word 2007 Get Started Tab
"{6E4D4E0B-02F6-46C1-BAE5-1B6B2E486A7B}" = Microsoft Office Live Meeting 2007
"{6F3D2F66-F050-45E3-BEB1-6523FE6D6690}" = MotoHelper MergeModules
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{794D8591-072C-4303-B5AD-DDE2B134E2E5}" = FSL-ENG-IE_Auto_Proxy-1.0-GBL-R1
"{7D0F2155-D7D3-42CE-903F-684ADD77FF89}" = Adobe Shockwave Player 11.5
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8F695E55-5E8B-440A-8DD2-228F594F09A3}" = FastLane ActiveRoles Extension Package
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{A8F2844C-C8CC-4CB7-BCC2-CADCD70922C0}" =
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUS_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{94CAC2F1-C856-47F4-AF24-65A1E75AEDB9}" = MotoHelper MergeModules
"{95120000-0052-0409-0000-0000000FF1CE}" = Microsoft Office Visio Viewer 2007
"{95468B00-C081-4B27-AC96-0A2A31359E60}" = Adobe Flash Player 10 ActiveX
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A6514D2E-BABB-44BD-86E1-72F14F2F116E}" = FSL-ENG-Office_Communicator_March2009hotfix-2007-GBL-R1
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAD47011-8518-4608-9656-951DA35B587B}" = iTunes
"{AB706D91-2242-4E1D-B4D0-1ED35387F5A7}" = Microsoft Office Excel 2007 Get Started Tab
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1.2
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2CDE75C-CA51-4335-9C13-84C00E6093A5}" = Windows Media Player Enterprise Deployment
"{C768790F-04FB-11E0-9B2C-001AA037B01E}" = Google Earth
"{C893ED02-C70C-43DC-9A56-5128C2A5B321}" = FSL-ENG-Survey_Client-3.7.6-GBL-R1
"{C8B274C3-3E4D-433D-BA0D-C27EB834AEA6}" = Microsoft Conferencing Add-in for Microsoft Office Outlook
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFBD3858-2164-42B0-84A2-576C18C85082}" = Hummingbird Exceed V7.1
"{D44D97D9-919B-4A6D-ABE8-C84B3DD757A9}" = Hyperion Interactive Reporting Web Client
"{E444F7DA-C812-4E71-B8C1-FFC5E6D1528F}" = Microsoft Office Communicator 2007, MUI
"{E5BA0430-919F-46DD-B656-0796F8A5ADFF}" = Microsoft Office Communicator 2007
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE 10.3
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"ffdshow_is1" = ffdshow [rev 2527] [2008-12-19]
"HDMI" = Intel® Graphics Media Accelerator Driver
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{5E9B59DD-6348-43E6-B27B-5C73CB660221}" = Axcelis INO
"LiveUpdate" = LiveUpdate 3.3 (Symantec Corporation)
"MESOL" = Intel® Active Management Technology
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Pdf995" = Pdf995
"PdfEdit995" = PdfEdit995
"PROPLUS" = Microsoft Office Professional Plus 2007
"RealPlayer Enterprise 6.0" = RealPlayer Enterprise
"Signature995" = Signature995
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinZip" = WinZip
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"JGraMMS CHD Production" = JGraMMS CHD Production

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4/7/2011 4:55:56 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.17095, faulting
module mshtml.dll, version 7.0.6000.17095, fault address 0x0007578a.

Error - 4/7/2011 4:59:33 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.17095, faulting
module mshtml.dll, version 7.0.6000.17095, fault address 0x0007578a.

Error - 4/7/2011 4:59:36 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1001
Description = Fault bucket -1991606454.

Error - 4/7/2011 8:42:23 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.17095, faulting
module ieui.dll, version 7.0.5730.13, fault address 0x000061b1.

Error - 4/8/2011 1:23:44 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.17095, faulting
module mshtml.dll, version 7.0.6000.17095, fault address 0x0007578a.

Error - 4/8/2011 1:23:48 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1001
Description = Fault bucket -1991606454.

Error - 4/8/2011 1:35:30 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.17095, faulting
module mshtml.dll, version 7.0.6000.17095, fault address 0x0007578a.

Error - 4/8/2011 1:37:04 AM | Computer Name = RP4900-01 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.17095, faulting
module mshtml.dll, version 7.0.6000.17095, fault address 0x0007578a.

Error - 4/8/2011 7:47:47 PM | Computer Name = RP4900-01 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (A socket operation was attempted to an unreachable host. ). Group Policy
processing aborted.

Error - 4/8/2011 7:47:54 PM | Computer Name = RP4900-01 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

[ OSession Events ]
Error - 4/2/2011 12:46:47 PM | Computer Name = RP4900-01 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 3/31/2011 1:32:23 AM | Computer Name = RP4900-01 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.

Error - 3/31/2011 10:58:02 AM | Computer Name = RP4900-01 | Source = TermServDevices | ID = 1111
Description = Driver Microsoft Office Live Meeting Document Writer Driver required
for printer Microsoft Office Live Meeting Document Writer is unknown. Contact the
administrator to install the driver before you log in again.

Error - 4/1/2011 1:11:32 AM | Computer Name = RP4900-01 | Source = TermServDevices | ID = 1111
Description = Driver Microsoft Office Live Meeting Document Writer Driver required
for printer Microsoft Office Live Meeting Document Writer is unknown. Contact the
administrator to install the driver before you log in again.

Error - 4/1/2011 12:31:49 PM | Computer Name = RP4900-01 | Source = TermServDevices | ID = 1111
Description = Driver Microsoft Office Live Meeting Document Writer Driver required
for printer Microsoft Office Live Meeting Document Writer is unknown. Contact the
administrator to install the driver before you log in again.

Error - 4/1/2011 7:16:50 PM | Computer Name = RP4900-01 | Source = TermServDevices | ID = 1111
Description = Driver Adobe PDF Converter required for printer Adobe PDF is unknown.
Contact the administrator to install the driver before you log in again.

Error - 4/2/2011 10:33:04 AM | Computer Name = RP4900-01 | Source = TermServDevices | ID = 1111
Description = Driver Microsoft Office Live Meeting Document Writer Driver required
for printer Microsoft Office Live Meeting Document Writer is unknown. Contact the
administrator to install the driver before you log in again.

Error - 4/2/2011 7:40:10 PM | Computer Name = RP4900-01 | Source = iastor | ID = 262153
Description = The device, \Device\Ide\iaStor0, did not respond within the timeout
period.

Error - 4/7/2011 4:49:58 AM | Computer Name = RP4900-01 | Source = Service Control Manager | ID = 7031
Description = The Apple Mobile Device service terminated unexpectedly. It has done
this 1 time(s). The following corrective action will be taken in 60000 milliseconds:
Restart the service.

Error - 4/7/2011 9:34:52 PM | Computer Name = RP4900-01 | Source = TermServDevices | ID = 1111
Description = Driver Microsoft Office Live Meeting Document Writer Driver required
for printer Microsoft Office Live Meeting Document Writer is unknown. Contact the
administrator to install the driver before you log in again.

Error - 4/8/2011 7:47:56 PM | Computer Name = RP4900-01 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.


< End of report >

Attached Files

•  Error_Report.bmp   960.05KB   190 downloads

Edited by sandskipper, 09 April 2011 - 04:22 AM.