OTL.Txt LOG ( Part 1 )
OTL logfile created on: 20/12/2011 11:02:18 AM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\MADHAVI\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: dd/MM/yyyy
1014.80 Mb Total Physical Memory | 553.82 Mb Available Physical Memory | 54.57% Memory free
2.85 Gb Paging File | 2.37 Gb Available in Paging File | 83.14% Paging File free
Paging file location(s): C:\PAGEFILE.SYS 2000 4000 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 38.82 Gb Total Space | 25.00 Gb Free Space | 64.40% Space Free | Partition Type: NTFS
Drive D: | 37.87 Gb Total Space | 16.80 Gb Free Space | 44.36% Space Free | Partition Type: NTFS
Drive E: | 49.88 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 40.37 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: OFFCIE-E2E96FAA | User Name: MADHAVI | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/12/20 10:46:45 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\MADHAVI\Desktop\OTL.exe
PRC - [2011/12/09 12:40:53 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011/12/09 12:40:39 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2011/12/09 12:40:29 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011/12/09 12:40:29 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/09/08 16:44:16 | 000,008,704 | ---- | M] (Vodafone) -- C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
PRC - [2010/09/08 16:44:12 | 000,272,384 | ---- | M] (Vodafone) -- C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
PRC - [2010/05/06 19:09:06 | 000,415,638 | ---- | M] (Old McDonald's Farm) -- C:\Program Files\Autorun Eater\billy.exe
PRC - [2010/05/06 18:59:36 | 000,516,216 | ---- | M] (Old McDonald's Farm) -- C:\Program Files\Autorun Eater\oldmcdonald.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006/03/03 21:03:10 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2006/02/27 05:29:52 | 000,053,248 | ---- | M] ( Advanced Software Technologies) -- C:\WINDOWS\system32\AstSrv.exe
========== Modules (No Company Name) ==========
MOD - [2011/12/09 12:40:40 | 000,398,288 | ---- | M] () -- C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2011/07/06 11:58:45 | 001,945,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b9bef6d800f30c449bc2202839ea30a2\System.Web.Services.ni.dll
MOD - [2011/07/06 11:58:11 | 000,684,032 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\9aa4ce4ce0ae1b4492672cba081cec0b\System.Transactions.ni.dll
MOD - [2011/07/06 11:58:09 | 000,729,088 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\7c35422b74a0c747be88b6d00d8114e1\System.Security.ni.dll
MOD - [2011/07/06 11:57:59 | 000,962,560 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\8868f9a44a3b5644af357930471d28dc\System.Configuration.ni.dll
MOD - [2011/07/06 11:57:45 | 000,026,624 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\cb82a1a17636fa4eb7956b8bbfa127c8\Accessibility.ni.dll
MOD - [2011/07/06 11:10:26 | 010,723,328 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\62b77aa60fbb674caecba40a0ecb569e\System.Design.ni.dll
MOD - [2011/07/06 11:10:02 | 006,688,768 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5808500802e5244183e73c38098d9533\System.Data.ni.dll
MOD - [2011/07/06 11:09:40 | 005,640,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\9e4d38f828788849862bae84449a88c0\System.Xml.ni.dll
MOD - [2011/07/06 11:09:26 | 013,107,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\16dce3c27c67a547a3d23c363a91c23d\System.Windows.Forms.ni.dll
MOD - [2011/07/06 11:09:02 | 001,626,112 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\f3122f987d019746970718f02f820209\System.Drawing.ni.dll
MOD - [2011/07/06 11:08:57 | 008,093,696 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\7b6b0b111928cf4b9a23316836417fca\System.ni.dll
MOD - [2011/07/06 11:08:35 | 011,411,456 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\9920d7a0d1e30a448a231eda1674385e\mscorlib.ni.dll
MOD - [2011/07/06 11:08:02 | 000,260,096 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2011/07/06 11:08:00 | 000,368,640 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
MOD - [2011/07/06 11:08:00 | 000,299,008 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2011/07/06 11:07:56 | 002,878,976 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2011/07/06 11:07:54 | 000,114,688 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
MOD - [2010/08/23 19:16:22 | 001,097,728 | ---- | M] () -- C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\NDISAPI.dll
MOD - [2010/07/05 03:02:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll
MOD - [2009/08/16 17:06:02 | 000,141,312 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2009/06/21 23:26:00 | 000,305,664 | ---- | M] () -- C:\Program Files\TeraCopy\TeraCopyExt.dll
MOD - [2007/04/02 18:19:22 | 000,355,112 | ---- | M] () -- C:\WINDOWS\system32\msjetoledb40.dll
========== Win32 Services (SafeList) ==========
SRV - [2011/12/09 12:40:39 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/12/09 12:40:29 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/09/08 16:44:16 | 000,008,704 | ---- | M] (Vodafone) [Auto | Running] -- C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe -- (VmbService)
SRV - [2006/03/03 21:03:10 | 000,069,632 | ---- | M] (HP) [Unknown | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2006/02/27 05:29:52 | 000,053,248 | ---- | M] ( Advanced Software Technologies) [Auto | Running] -- C:\WINDOWS\system32\AstSrv.exe -- (astcc)
========== Driver Services (SafeList) ==========
DRV - [2011/12/09 12:40:53 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011/12/09 12:40:52 | 000,134,856 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/12/09 12:40:52 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/09/08 10:23:14 | 000,114,432 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2010/09/08 10:23:14 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010/09/08 10:23:14 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2010/06/17 14:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2004/08/04 04:01:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/
IE - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - No CLSID value found
IE - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://www.google.co.in/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems:
jqs@sun.com:1.0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/16 07:35:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/12/16 07:35:49 | 000,000,000 | ---D | M]
[2011/12/02 11:39:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MADHAVI\Application Data\Mozilla\Extensions
[2011/12/02 11:39:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MADHAVI\Application Data\Mozilla\Firefox\Profiles\vde0i0d5.default\extensions
[2011/12/19 01:17:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/07/08 01:04:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
[2011/07/06 10:51:37 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2011/07/06 10:51:29 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/07/06 10:51:29 | 000,423,656 | ---- | M] (Oracle) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google
riginalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\MADHAVI\Local Settings\Application Data\Google\Chrome\Application\17.0.938.0\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\MADHAVI\Local Settings\Application Data\Google\Chrome\Application\17.0.938.0\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\MADHAVI\Local Settings\Application Data\Google\Chrome\Application\17.0.938.0\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.210.6 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U21 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
O1 HOSTS File: ([2011/12/05 09:55:34 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O3 - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [Autorun Eater] C:\Program Files\Autorun Eater\oldmcdonald.exe (Old McDonald's Farm)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [MobileBroadband] C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe (Vodafone)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-842925246-1659004503-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://windowsupdate.microsoft.com/...ls/en/x86/client/wuweb_site.cab?1323884584031 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.169.30.244 10.169.30.245
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7BC337A3-7FF0-4E66-93E3-854C58D56605}: DhcpNameServer = 10.169.30.244 10.169.30.245
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxsrvc.dll) - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\MADHAVI\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\MADHAVI\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/07/06 10:43:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/09/13 23:39:13 | 000,000,122 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/12/20 10:46:44 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\MADHAVI\Desktop\OTL.exe
[2011/12/20 02:54:37 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\MADHAVI\Recent
[2011/12/20 02:54:16 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011/12/20 02:29:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Application Data\Avira
[2011/12/20 02:26:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Avira
[2011/12/20 02:25:51 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2011/12/20 02:25:48 | 000,134,856 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011/12/20 02:25:48 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011/12/20 02:25:48 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2011/12/20 02:25:47 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011/12/20 02:25:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2011/12/20 00:16:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2011/12/19 23:47:21 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/12/19 09:05:04 | 004,344,514 | R--- | C] (Swearware) -- C:\Documents and Settings\MADHAVI\Desktop\ComboFix.exe
[2011/12/19 01:44:12 | 001,916,416 | ---- | C] (AVAST Software) -- C:\Documents and Settings\MADHAVI\Desktop\aswMBR.exe
[2011/12/18 13:56:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Start Menu\Programs\NirSoft VideoCacheView
[2011/12/18 12:28:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Desktop\TechSpot Malware Removal Instructions
[2011/12/18 11:32:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Application Data\Malwarebytes
[2011/12/18 11:31:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/12/18 11:31:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/12/18 11:31:47 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/12/18 11:31:46 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/12/15 12:13:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2011/12/15 10:34:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2011/12/15 10:24:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2011/12/15 10:24:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2011/12/15 10:24:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2011/12/15 10:24:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2011/12/15 10:20:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2011/12/15 10:16:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2011/12/15 10:10:31 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2011/12/14 23:15:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2011/12/14 08:40:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2011/12/08 02:08:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner
[2011/12/08 00:39:51 | 000,000,000 | ---D | C] -- C:\Program Files\Autorun Eater
[2011/12/08 00:39:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Autorun Eater
[2011/12/06 11:29:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Swar Systems
[2011/12/05 13:59:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\McAfee
[2011/12/05 13:48:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\McAfee
[2011/12/05 10:08:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Autorun Eater
[2011/12/05 01:05:05 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/12/05 00:26:59 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/12/05 00:26:59 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/12/05 00:26:59 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/12/05 00:26:59 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/12/05 00:26:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011/12/04 20:13:37 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2011/12/04 20:13:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Start Menu\Programs\Unlocker
[2011/12/04 12:24:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\My Documents\Downloads
[2011/12/03 00:39:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2011/12/02 12:15:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2011/12/02 12:05:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Vodafone
[2011/12/02 12:05:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Vodafone
[2011/12/02 12:04:43 | 000,000,000 | ---D | C] -- C:\Program Files\Vodafone
[2011/12/02 11:45:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Application Data\Macromedia
[2011/12/02 11:39:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Local Settings\Application Data\Mozilla
[2011/12/02 11:39:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Application Data\Mozilla
[2011/12/02 11:37:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MADHAVI\Start Menu\Programs\Google Chrome
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/12/20 10:46:45 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\MADHAVI\Desktop\OTL.exe
[2011/12/20 07:35:31 | 000,002,048 | ---- | M] () -- C:\WINDOWS\bootstat.dat
[2011/12/20 02:26:07 | 000,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Avira Control Center.lnk
[2011/12/20 01:28:22 | 000,000,327 | ---- | M] () -- C:\boot.ini
[2011/12/20 00:53:47 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/12/20 00:34:47 | 004,344,514 | R--- | M] (Swearware) -- C:\Documents and Settings\MADHAVI\Desktop\ComboFix.exe
[2011/12/19 10:04:34 | 000,000,512 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Desktop\MBR.dat
[2011/12/19 09:51:21 | 001,008,141 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Desktop\rkill.exe
[2011/12/19 09:49:42 | 001,008,141 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Desktop\rkill.com
[2011/12/19 02:24:08 | 000,080,384 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/19 01:44:13 | 001,916,416 | ---- | M] (AVAST Software) -- C:\Documents and Settings\MADHAVI\Desktop\aswMBR.exe
[2011/12/18 02:02:13 | 000,000,804 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/12/16 10:19:42 | 000,017,408 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Local Settings\Application Data\WebpageIcons.db
[2011/12/15 17:21:42 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Desktop\Internet Explorer.lnk
[2011/12/15 10:43:06 | 001,082,332 | ---- | M] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2011/12/15 10:38:50 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2011/12/15 10:38:41 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/12/15 10:36:33 | 000,413,360 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/12/15 10:36:33 | 000,066,988 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/12/15 10:34:14 | 000,264,616 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/12/15 10:16:01 | 000,250,048 | ---- | M] () -- C:\ntldr
[2011/12/14 08:36:12 | 000,003,289 | ---- | M] () -- C:\clnuninst.ini
[2011/12/12 17:49:32 | 000,000,026 | ---- | M] () -- C:\NPAVSCN.DAT
[2011/12/09 12:40:53 | 000,036,000 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2011/12/09 12:40:52 | 000,134,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011/12/09 12:40:52 | 000,074,640 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011/12/05 09:55:34 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011/12/02 12:16:38 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2011/12/02 12:05:25 | 000,001,911 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Vodafone Mobile Broadband.lnk
[2011/12/02 12:05:23 | 000,001,982 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SMS.lnk
[2011/12/02 11:39:47 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2011/12/02 11:37:36 | 000,002,300 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Desktop\Google Chrome.lnk
[2011/12/02 11:37:36 | 000,002,278 | ---- | M] () -- C:\Documents and Settings\MADHAVI\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/11/23 17:36:59 | 000,038,400 | ---- | M] () -- C:\WINDOWS\System32\npzvft32.sys
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/12/20 02:26:07 | 000,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Avira Control Center.lnk
[2011/12/19 10:04:34 | 000,000,512 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Desktop\MBR.dat
[2011/12/19 09:51:21 | 001,008,141 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Desktop\rkill.exe
[2011/12/19 09:49:42 | 001,008,141 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Desktop\rkill.com
[2011/12/16 10:19:38 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Local Settings\Application Data\WebpageIcons.db
[2011/12/15 17:21:42 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Desktop\Internet Explorer.lnk
[2011/12/15 10:38:53 | 000,000,804 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/12/15 10:25:40 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta
[2011/12/15 10:25:40 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css
[2011/12/15 10:25:40 | 000,000,855 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf
[2011/12/15 10:25:39 | 000,613,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm
[2011/12/15 10:25:39 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2011/12/15 10:25:39 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2011/12/15 10:25:39 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2011/12/15 10:25:39 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2011/12/15 10:25:39 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2011/12/15 10:25:39 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2011/12/15 10:25:39 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2011/12/15 10:25:39 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2011/12/15 10:25:39 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2011/12/15 10:25:39 | 000,067,374 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm
[2011/12/15 10:25:39 | 000,023,195 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm
[2011/12/15 10:25:39 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js
[2011/12/15 10:25:38 | 000,029,070 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmp.inf
[2011/12/15 10:25:37 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv
[2011/12/15 10:25:37 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif
[2011/12/15 10:25:37 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif
[2011/12/15 10:25:37 | 000,017,272 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf
[2011/12/15 10:25:37 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif
[2011/12/15 10:25:37 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif
[2011/12/15 10:25:37 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif
[2011/12/15 10:25:37 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif
[2011/12/15 10:25:37 | 000,006,769 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2011/12/15 10:25:37 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif
[2011/12/15 10:25:37 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif
[2011/12/15 10:25:37 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif
[2011/12/15 10:25:37 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif
[2011/12/15 10:25:37 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif
[2011/12/15 10:25:37 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif
[2011/12/15 10:25:37 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif
[2011/12/15 10:25:37 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif
[2011/12/15 10:25:37 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif
[2011/12/15 10:25:37 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif
[2011/12/15 10:25:36 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js
[2011/12/15 10:25:36 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif
[2011/12/15 10:25:36 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif
[2011/12/15 10:25:36 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif
[2011/12/15 10:25:36 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif
[2011/12/15 10:25:36 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm
[2011/12/15 10:25:36 | 000,000,908 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf
[2011/12/15 10:25:35 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv
[2011/12/15 10:25:35 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv
[2011/12/15 10:25:35 | 000,077,307 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm
[2011/12/15 10:25:35 | 000,066,725 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz
[2011/12/15 10:25:35 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip
[2011/12/15 10:25:35 | 000,001,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst6.wpl
[2011/12/15 10:25:35 | 000,001,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst5.wpl
[2011/12/15 10:25:35 | 000,001,474 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst3.wpl
[2011/12/15 10:25:35 | 000,001,451 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst12.wpl
[2011/12/15 10:25:35 | 000,001,448 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst4.wpl
[2011/12/15 10:25:35 | 000,001,250 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst1.wpl
[2011/12/15 10:25:35 | 000,001,049 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst2.wpl
[2011/12/15 10:25:35 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst7.wpl
[2011/12/15 10:25:35 | 000,001,036 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst8.wpl
[2011/12/15 10:25:35 | 000,000,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst11.wpl
[2011/12/15 10:25:35 | 000,000,787 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst10.wpl
[2011/12/15 10:25:35 | 000,000,784 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst9.wpl
[2011/12/15 10:25:35 | 000,000,783 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst13.wpl
[2011/12/15 10:25:35 | 000,000,775 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst14.wpl
[2011/12/15 10:25:35 | 000,000,733 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst15.wpl
[2011/12/15 10:25:35 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2011/12/15 10:25:34 | 000,018,286 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf
[2011/12/15 10:25:34 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif
[2011/12/15 10:25:34 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif
[2011/12/15 10:25:33 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv
[2011/12/15 10:25:33 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js
[2011/12/15 10:25:32 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv
[2011/12/15 10:25:32 | 000,184,959 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz
[2011/12/15 10:25:32 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css
[2011/12/15 10:25:32 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm
[2011/12/15 10:25:32 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js
[2011/12/15 10:25:32 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif
[2011/12/15 10:25:32 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif
[2011/12/15 10:25:32 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif
[2011/12/15 10:25:32 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif
[2011/12/15 10:25:31 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif
[2011/12/15 10:25:31 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif
[2011/12/15 10:16:47 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2011/12/15 10:16:45 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2011/12/15 10:16:43 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2011/12/14 08:40:50 | 001,082,332 | ---- | C] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2011/12/14 08:36:12 | 000,003,289 | ---- | C] () -- C:\clnuninst.ini
[2011/12/05 01:05:10 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011/12/05 01:05:08 | 000,260,272 | ---- | C] () -- C:\cmldr
[2011/12/05 00:26:59 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/12/05 00:26:59 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/12/05 00:26:59 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/12/05 00:26:59 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/12/05 00:26:59 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/12/02 12:26:26 | 000,038,400 | ---- | C] () -- C:\WINDOWS\System32\npzvft32.sys
[2011/12/02 12:05:25 | 000,001,911 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Vodafone Mobile Broadband.lnk
[2011/12/02 12:05:23 | 000,001,982 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SMS.lnk
[2011/12/02 11:39:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011/12/02 11:37:36 | 000,002,300 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Desktop\Google Chrome.lnk
[2011/12/02 11:37:36 | 000,002,278 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/10/16 14:56:30 | 000,000,268 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2011/10/13 10:18:12 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2011/10/13 10:18:12 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2011/10/13 10:18:11 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\sysprs7.dll
[2011/07/21 03:58:15 | 000,000,710 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2011/07/16 13:24:11 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011/07/16 13:24:08 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011/07/16 13:23:59 | 000,810,496 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/07/16 13:23:59 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/07/16 13:23:56 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011/07/13 13:41:12 | 000,000,103 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011/07/13 13:41:12 | 000,000,075 | ---- | C] () -- C:\WINDOWS\System32\Ucfg.ini
[2011/07/13 13:35:29 | 000,036,939 | ---- | C] () -- C:\WINDOWS\System32\insrepim.exe
[2011/07/08 03:14:00 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011/07/08 00:52:22 | 000,080,384 | ---- | C] () -- C:\Documents and Settings\MADHAVI\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/07/08 00:23:21 | 000,056,136 | ---- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2011/07/06 16:04:31 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011/07/06 16:03:27 | 000,264,616 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/07/06 11:33:31 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2011/07/06 11:29:19 | 000,117,517 | ---- | C] () -- C:\WINDOWS\hpoins11.dat
[2011/07/06 10:53:44 | 000,000,132 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2011/07/06 10:51:41 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/07/06 10:45:29 | 000,002,048 | ---- | C] () -- C:\WINDOWS\bootstat.dat
[2011/07/06 10:40:00 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/09/08 11:07:40 | 000,159,464 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\DeviceManager.xml.rc4
[2009/01/09 11:17:38 | 000,249,859 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe
[2009/01/09 11:17:38 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2006/05/05 15:40:17 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
[2004/08/04 01:07:22 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/08/23 09:30:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 09:30:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 09:30:00 | 000,413,360 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 09:30:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 09:30:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 09:30:00 | 000,066,988 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 09:30:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 09:30:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 09:30:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 09:30:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001/07/07 03:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
========== LOP Check ==========
[2011/12/08 00:50:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Autorun Eater
[2011/07/21 03:56:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreeRIP
[2011/12/06 11:30:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Swar Systems
[2011/12/02 12:05:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Vodafone
[2011/09/24 12:06:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WebSecure
[2011/11/18 19:58:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MADHAVI\Application Data\CoSoSys
[2011/07/06 11:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MADHAVI\Application Data\TeamViewer
[2011/12/20 10:50:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MADHAVI\Application Data\TeraCopy
[2011/07/06 11:11:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MADHAVI\Application Data\Vodafone
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/07/06 10:43:02 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2011/12/02 12:16:38 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2011/12/20 01:28:22 | 000,000,327 | ---- | M] () -- C:\boot.ini
[2011/12/14 08:36:12 | 000,003,289 | ---- | M] () -- C:\clnuninst.ini
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2011/12/20 00:43:48 | 000,009,867 | ---- | M] () -- C:\ComboFix.txt
[2011/07/06 10:43:02 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2011/07/06 10:43:02 | 000,000,000 | ---- | M] () -- C:\IO.SYS
[2011/07/06 10:43:02 | 000,000,000 | ---- | M] () -- C:\MSDOS.SYS
[2011/12/12 17:49:32 | 000,000,026 | ---- | M] () -- C:\NPAVSCN.DAT
[2011/12/14 08:37:11 | 000,002,847 | ---- | M] () -- C:\NpAvUnInstall.log
[2011/12/02 12:11:59 | 000,000,074 | ---- | M] () -- C:\npkey.txt
[2011/12/14 08:37:11 | 000,000,221 | ---- | M] () -- C:\npsetup10.log
[2011/12/14 08:37:11 | 000,000,064 | ---- | M] () -- C:\npsetup11.log
[2004/08/03 22:38:34 | 000,047,564 | ---- | M] () -- C:\NTDETECT.COM
[2011/12/15 10:16:01 | 000,250,048 | ---- | M] () -- C:\ntldr
[2011/12/20 07:35:29 | 2097,152,000 | -HS- | M] () -- C:\pagefile.sys
[2011/12/14 08:36:12 | 000,000,005 | ---- | M] () -- C:\PROIN.txt
[2011/12/05 01:58:18 | 000,000,321 | ---- | M] () -- C:\QR.log
[2011/12/20 01:58:19 | 000,000,359 | ---- | M] () -- C:\rkill.log
[2011/12/16 08:05:36 | 000,046,088 | ---- | M] () -- C:\TDSSKiller.2.6.23.0_16.12.2011_08.04.29_log.txt