The OTL hung a few times. And I only got 1 log from it. Didnt produce the Extra.txt.
Here is the OTL.exe:
OTL logfile created on: 2/25/2011 8:50:46 PM - Run 5
OTL by OldTimer - Version 3.2.22.0 Folder = C:\Documents and Settings\Ma Kimlyn\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1,014.00 Mb Total Physical Memory | 328.00 Mb Available Physical Memory | 32.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 142.05 Gb Total Space | 111.15 Gb Free Space | 78.25% Space Free | Partition Type: NTFS
Computer Name: KIMLYN | User Name: Ma Kimlyn | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Ma Kimlyn\Desktop\OTL(2).exe (OldTimer Tools)
PRC - C:\Program Files\Acer\Acer VCM\RS_Service.exe (Acer Incorporated)
PRC - C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
PRC - C:\WINDOWS\PLFSetL.exe (sonix)
PRC - C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe (Symantec Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Ma Kimlyn\Desktop\OTL(2).exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\sysfer.dll (Symantec Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AppMgmt) -- File not found
SRV - (getPlusHelper) getPlus(R) -- C:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (RS_Service) -- C:\Program Files\Acer\Acer VCM\RS_Service.exe (Acer Incorporated)
SRV - (SNAC) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE (Symantec Corporation)
SRV - (Symantec AntiVirus) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe (Symantec Corporation)
SRV - (SmcService) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe (Symantec Corporation)
SRV - (IAANTMON) Intel(R) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (ccSetMgr) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (LiveUpdate) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)
========== Driver Services (SafeList) ==========
DRV - (catchme) -- File not found
DRV - (NAVEX15) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110224.022\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110224.022\NAVENG.SYS (Symantec Corporation)
DRV - (WpsHelper) -- C:\WINDOWS\system32\drivers\wpshelper.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (MBAMSwissArmy) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (PSSDK42) -- C:\WINDOWS\system32\drivers\pssdk42.sys (microOLAP Technologies LTD)
DRV - (SymEvent) -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (AR5416) -- C:\WINDOWS\system32\drivers\athw.sys (Atheros Communications, Inc.)
DRV - (btwhid) -- C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.)
DRV - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\WINDOWS\system32\drivers\snp2uvc.sys ()
DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.)
DRV - (L1c) -- C:\WINDOWS\system32\drivers\l1c51x86.sys (Atheros Communications, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.)
DRV - (RSUSBSTOR) -- C:\WINDOWS\system32\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)
DRV - (DlinkUDSMBus) -- C:\WINDOWS\system32\drivers\DlinkUDSMBus.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (DlinkUDSTcpBus) -- C:\WINDOWS\system32\drivers\DlinkUDSTcpBus.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (COH_Mon) -- C:\WINDOWS\system32\drivers\COH_Mon.sys (Symantec Corporation)
DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.)
DRV - (SysPlant) -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys (Symantec Corporation)
DRV - (WPS) -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys (Symantec Corporation)
DRV - (SRTSPL) -- C:\WINDOWS\system32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) -- C:\WINDOWS\system32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) -- C:\WINDOWS\system32\drivers\srtspx.sys (Symantec Corporation)
DRV - (Teefer2) -- C:\WINDOWS\system32\drivers\Teefer2.sys (Symantec Corporation)
DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.)
DRV - (SPBBCDrv) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SYMTDI) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (DritekPortIO) -- C:\Program Files\Launch Manager\DPortIO.sys (Dritek System Inc.)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/
IE - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 82 7C 1D D7 F8 88 CA 01 [binary data]
IE - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "chrome://speeddial/content/speeddial.xul"
FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5.6
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - HKLM\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\Firefox [2010/11/29 15:08:29 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/11/30 21:02:13 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/23 13:15:01 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/23 16:24:10 | 000,000,000 | ---D | M]
[2010/05/29 00:56:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ma Kimlyn\Application Data\Mozilla\Extensions
[2010/05/29 00:56:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ma Kimlyn\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2011/02/25 14:26:59 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ma Kimlyn\Application Data\Mozilla\Firefox\Profiles\tgdjcn29.default\extensions
[2010/05/01 22:22:20 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Ma Kimlyn\Application Data\Mozilla\Firefox\Profiles\tgdjcn29.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/08/12 20:45:20 | 000,000,000 | ---D | M] (Speed Dial) -- C:\Documents and Settings\Ma Kimlyn\Application Data\Mozilla\Firefox\Profiles\tgdjcn29.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}
[2010/06/23 15:05:54 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\Ma Kimlyn\Application Data\Mozilla\Firefox\Profiles\tgdjcn29.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2011/02/24 23:02:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/02/23 14:01:17 | 000,001,919 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\bing-zugo.xml
O1 HOSTS File: ([2011/02/25 18:41:23 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - File not found
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [D-Link Network USB Utility] C:\Program Files\D-Link\SharePort\SharePort.exe (D-Link Corporation)
O4 - HKLM..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe (Google)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe (sonix)
O4 - HKLM..\Run: [snp2uvc] C:\WINDOWS\System32\csnp2uvc.dll ( )
O4 - HKU\S-1-5-21-4282951562-3757435101-538525854-1005..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Main present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-4282951562-3757435101-538525854-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345}
https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab (Symantec Script Runner Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1261764954765 (MUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5}
http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968}
http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147}
http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {FCB28D51-A017-46B2-9FB3-F7BFD53B2E42}
http://games.bigfishgames.com/en_ch...-by-design/online/Chocolatier3Web.1.0.0.6.cab (CPlayFirstChocolatieControl Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ma Kimlyn\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/03/11 21:07:49 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.clmp3enc - C:\Program Files\CyberLink\Power2Go\CLMP3Enc.ACM (CyberLink Corp.)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (61093680697573376)
========== Files/Folders - Created Within 30 Days ==========
[2011/02/25 20:49:09 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Ma Kimlyn\Desktop\OTL(2).exe
[2011/02/25 20:48:37 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011/02/25 14:50:30 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/02/24 19:42:24 | 001,372,248 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Ma Kimlyn\Desktop\TDSSKiller.exe
[2011/02/23 16:46:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\AdobeUM
[2011/02/23 16:45:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe
[2011/02/23 16:24:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Mozilla
[2011/02/23 16:24:12 | 000,000,000 | ---D | C] -- C:\Program Files\Drop Down Deals
[2011/02/23 14:01:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2011/02/23 12:04:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2011/02/23 12:04:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2011/02/20 13:23:05 | 000,000,000 | ---D | C] -- C:\Program Files\Datel
[2011/02/19 09:08:13 | 000,000,000 | ---D | C] -- C:\Program Files\Unity
[2011/02/16 06:30:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ma Kimlyn\My Documents\TaxACT 2010
[2011/02/16 06:30:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\2nd Story Software
[2011/02/16 06:30:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ma Kimlyn\Start Menu\Programs\2nd Story Software
[2011/02/16 06:30:19 | 000,000,000 | ---D | C] -- C:\2nd Story Software
[2009/07/18 07:08:57 | 000,196,608 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll
[2009/07/18 07:08:54 | 000,225,280 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll
[2009/03/11 04:53:14 | 000,049,152 | ---- | C] ( ) -- C:\WINDOWS\Interop.IWshRuntimeLibrary.dll
[1 C:\Documents and Settings\Ma Kimlyn\My Documents\*.tmp files -> C:\Documents and Settings\Ma Kimlyn\My Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/25 20:49:22 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ma Kimlyn\Desktop\OTL(2).exe
[2011/02/25 18:45:45 | 000,516,040 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/02/25 18:45:45 | 000,105,184 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/02/25 18:41:23 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011/02/25 18:40:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/25 18:40:17 | 1063,194,624 | -HS- | M] () -- C:\hiberfil.sys
[2011/02/25 18:22:58 | 004,274,990 | R--- | M] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\destyna.exe
[2011/02/25 14:50:34 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011/02/25 14:42:01 | 000,721,324 | ---- | M] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\rkill.com
[2011/02/24 19:41:28 | 001,257,772 | ---- | M] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\tdsskiller.zip
[2011/02/21 16:48:05 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/21 11:09:14 | 001,372,248 | ---- | M] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Ma Kimlyn\Desktop\TDSSKiller.exe
[2011/02/16 06:35:07 | 000,000,061 | ---- | M] () -- C:\WINDOWS\TaxACT10.ini
[2011/02/16 06:34:30 | 000,000,033 | ---- | M] () -- C:\WINDOWS\System32\msxkwn.vxp
[2011/02/16 06:30:29 | 000,000,700 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TaxACT 2010.lnk
[2011/02/15 02:02:45 | 000,000,264 | ---- | M] () -- C:\WINDOWS\tasks\Malwarebytes' Anti-Malware.job
[2011/02/12 08:05:26 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/02/09 21:32:17 | 000,345,808 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/02/09 21:12:21 | 000,000,127 | ---- | M] () -- C:\WINDOWS\System32\MRT.INI
[2011/02/07 17:09:50 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[1 C:\Documents and Settings\Ma Kimlyn\My Documents\*.tmp files -> C:\Documents and Settings\Ma Kimlyn\My Documents\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/25 14:41:56 | 000,721,324 | ---- | C] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\rkill.com
[2011/02/25 14:41:39 | 004,274,990 | R--- | C] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\destyna.exe
[2011/02/24 19:44:37 | 1063,194,624 | -HS- | C] () -- C:\hiberfil.sys
[2011/02/24 19:41:27 | 001,257,772 | ---- | C] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\tdsskiller.zip
[2011/02/16 06:34:30 | 000,000,033 | ---- | C] () -- C:\WINDOWS\System32\msxkwn.vxp
[2011/02/16 06:30:29 | 000,000,700 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TaxACT 2010.lnk
[2011/02/16 06:30:28 | 000,000,061 | ---- | C] () -- C:\WINDOWS\TaxACT10.ini
[2011/02/09 21:12:21 | 000,000,127 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2011/01/04 19:46:08 | 000,077,592 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/11/29 15:17:54 | 000,000,227 | ---- | C] () -- C:\WINDOWS\HP_CounterReport_Update_HPSU.ini
[2010/11/29 15:17:44 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2010/11/29 15:16:56 | 000,000,221 | ---- | C] () -- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini
[2010/10/31 10:33:10 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2010/10/31 10:33:10 | 000,000,000 | ---- | C] () -- C:\WINDOWS\popcreg.dat
[2010/06/14 00:22:18 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2010/01/24 23:56:54 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/01/24 19:07:27 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/01/08 14:55:54 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Application Data\$_hpcst$.hpc
[2010/01/02 15:17:56 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/01/02 15:17:56 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/01/02 15:17:56 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/01/02 15:17:56 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/01/02 15:17:56 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2009/12/28 23:16:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/12/25 23:55:12 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Ma Kimlyn\Application Data\$_hpcst$.hpc
[2009/12/25 20:47:47 | 000,112,985 | ---- | C] () -- C:\WINDOWS\hpoins07.dat
[2009/12/25 20:47:45 | 000,021,124 | ---- | C] () -- C:\WINDOWS\hpomdl07.dat
[2009/12/25 16:51:56 | 000,000,162 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/12/25 10:37:47 | 000,031,744 | ---- | C] () -- C:\Documents and Settings\Ma Kimlyn\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/07/18 07:08:57 | 001,759,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2009/07/18 07:08:57 | 000,028,544 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys
[2009/07/18 07:08:57 | 000,000,323 | ---- | C] () -- C:\WINDOWS\PidList.ini
[2009/05/08 14:08:42 | 002,854,976 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2009/03/11 22:47:07 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009/03/11 21:56:32 | 000,090,772 | ---- | C] () -- C:\WINDOWS\System32\drivers\RtConvEQ.DAT
[2009/03/11 21:56:32 | 000,000,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\RtHdatEx.dat
[2009/03/11 21:56:32 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX2.dat
[2009/03/11 21:56:32 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX1.dat
[2009/03/11 21:56:32 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX0.dat
[2009/03/11 21:56:32 | 000,000,164 | ---- | C] () -- C:\WINDOWS\System32\drivers\SamSfPa.dat
[2009/03/11 21:56:32 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\rtkhdaud.dat
[2009/03/11 21:55:36 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2009/03/11 21:10:15 | 000,032,768 | ---- | C] () -- C:\WINDOWS\AMove.exe
[2009/03/11 21:10:15 | 000,006,782 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2009/03/11 21:09:26 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/03/11 21:06:10 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/03/11 21:05:25 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2009/03/11 13:03:29 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/03/11 13:02:48 | 000,345,808 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/11 04:53:14 | 000,020,480 | ---- | C] () -- C:\WINDOWS\LauncheRyDiscCalc.exe
[2009/03/11 04:53:06 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2009/03/11 04:53:05 | 000,516,040 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2009/03/11 04:53:05 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2009/03/11 04:53:05 | 000,105,184 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2009/03/11 04:53:05 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2009/03/11 04:53:04 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2009/03/11 04:53:04 | 000,004,524 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2009/03/11 04:53:04 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2009/03/11 04:53:02 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2009/03/11 04:53:02 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2009/03/11 04:52:59 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2009/03/11 04:52:57 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2001/11/14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[2001/07/06 15:30:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
========== LOP Check ==========
[2009/03/11 22:32:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Acer
[2009/07/18 07:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Acer GameZone Console
[2009/03/11 22:27:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Super-Cow
[2010/06/13 23:13:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Artist Colony
[2010/06/13 16:14:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Buried In Time
[2010/06/15 07:56:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Cateia Games
[2010/05/29 01:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EasyMP3Downloader
[2009/03/11 22:31:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\eSobi
[2010/06/13 12:09:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\iWin Games
[2010/11/24 17:22:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Oberon Media
[2010/10/08 13:57:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PearlMountainSoft
[2010/06/15 07:46:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PlayFirst
[2010/06/15 06:37:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Playrix Entertainment
[2010/10/31 10:34:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap Games
[2010/11/27 08:55:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2011/02/23 14:01:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2010/11/26 06:27:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/04/26 16:08:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/12/31 13:46:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/03/11 22:32:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\Acer
[2009/07/18 07:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\Acer GameZone Console
[2009/03/11 22:27:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\Super-Cow
[2009/12/25 10:51:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\SACore
[2009/03/11 22:32:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Acer
[2009/07/18 07:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Acer GameZone Console
[2011/01/04 19:56:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Barnes & Noble
[2010/06/13 12:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Big Fish Games
[2010/01/09 23:14:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Bret Taylor
[2010/06/13 12:15:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Cat's Eye Games
[2009/12/30 13:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/06/13 16:46:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Deadly Sin
[2010/05/29 01:07:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\EasyMP3Downloader
[2010/10/15 21:58:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Efficient Diary Pro
[2009/12/25 15:38:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\eSobi
[2010/06/12 23:30:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Facebook
[2010/06/15 08:56:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Hotdog Hotshot
[2010/06/13 23:22:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Peace Craft
[2010/10/08 13:57:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\PearlMountainSoft
[2010/06/15 07:46:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\PlayFirst
[2010/05/24 17:50:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\SulusGames
[2009/12/25 20:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Super-Cow
[2009/12/25 23:12:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\ViiKiiDesktopPlugin.5E22EA0FF243470AB5EDDF282C0A5B52E9909C36.1
[2009/12/26 02:18:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Windows Desktop Search
[2009/12/26 02:51:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ma Kimlyn\Application Data\Windows Search
[2009/03/11 22:32:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\Acer
[2009/07/18 07:11:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\Acer GameZone Console
[2010/11/27 14:31:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\GetRightToGo
[2010/11/24 17:29:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\Oberon Media
[2010/11/24 17:30:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\Pogo Games
[2011/02/12 12:42:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\SPORE
[2009/03/11 22:27:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\Super-Cow
[2011/01/26 16:37:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Marc\Application Data\Windows Search
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2009/03/11 21:07:49 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/02/15 01:59:42 | 000,000,281 | ---- | M] () -- C:\Boot.bak
[2011/02/25 14:50:34 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | RHS- | M] () -- C:\cmldr
[2011/02/25 18:49:35 | 000,015,978 | ---- | M] () -- C:\ComboFix.txt
[2009/03/11 21:07:49 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2011/02/25 18:40:17 | 1063,194,624 | -HS- | M] () -- C:\hiberfil.sys
[2009/03/11 21:07:49 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/06/02 13:49:57 | 000,000,109 | ---- | M] () -- C:\mbam-error.txt
[2009/02/18 01:26:30 | 000,002,016 | ---- | M] () -- C:\MOD01SET0J00P2000K.enc
[2008/08/06 17:16:21 | 000,002,488 | ---- | M] () -- C:\MOD01WOS02ENP20001.enc
[2009/03/11 21:07:49 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008/04/14 04:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/04/14 04:00:00 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2011/02/25 18:40:14 | 1598,029,824 | -HS- | M] () -- C:\pagefile.sys
[2009/03/11 21:57:01 | 000,001,883 | ---- | M] () -- C:\RHDSetup.log
[2011/02/25 14:44:48 | 000,000,467 | ---- | M] () -- C:\rkill.log
[2009/07/18 07:07:41 | 000,000,190 | ---- | M] () -- C:\Setup.log
[2009/12/30 17:55:57 | 087,426,782 | ---- | M] () -- C:\SYM_REGISTRY_BACKUP.old
[2009/12/30 17:57:48 | 087,426,616 | ---- | M] () -- C:\SYM_REGISTRY_BACKUP.reg
[2011/02/24 19:43:29 | 000,056,580 | ---- | M] () -- C:\TDSSKiller.2.4.18.0_24.02.2011_19.42.30_log.txt
[2009/12/25 18:19:47 | 000,000,054 | ---- | M] () -- C:\TEST.ini
[2009/12/25 20:45:53 | 000,033,745 | ---- | M] () -- C:\WINDOWSHvc_____.pfb
< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2009/03/11 21:07:26 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 04:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2006/10/26 19:58:12 | 000,030,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2006/10/26 18:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2008/07/06 02:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2008/12/04 21:55:20 | 000,307,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WLXPGSS.SCR
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2009/03/11 13:02:31 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2009/03/11 13:02:31 | 001,064,960 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2009/03/11 13:02:31 | 000,901,120 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/03/11 21:07:50 | 000,000,294 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/12/26 00:02:22 | 000,000,119 | -HS- | M] () -- C:\Documents and Settings\Ma Kimlyn\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2009/03/11 21:10:30 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Ma Kimlyn\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2011/02/25 18:22:58 | 004,274,990 | R--- | M] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\destyna.exe
[2009/12/29 12:16:37 | 000,173,456 | ---- | M] (Symantec Corporation) -- C:\Documents and Settings\Ma Kimlyn\Desktop\FixVundo.exe
[2010/01/01 21:13:44 | 000,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Ma Kimlyn\Desktop\HJTInstall.exe
[2010/01/01 20:31:51 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Ma Kimlyn\Desktop\k6wg3exn.exe
[2011/02/25 20:49:22 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ma Kimlyn\Desktop\OTL(2).exe
[2011/02/21 11:09:14 | 001,372,248 | ---- | M] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Ma Kimlyn\Desktop\TDSSKiller.exe
[2010/08/10 22:30:56 | 000,327,984 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Ma Kimlyn\Desktop\utorrent.exe