OTL logfile created on: 6/28/2010 2:21:43 PM - Run 3
OTL by OldTimer - Version 3.2.7.0 Folder = C:\Documents and Settings\Brent\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 68.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 86.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 38.28 Gb Total Space | 2.17 Gb Free Space | 5.68% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 465.76 Gb Total Space | 437.94 Gb Free Space | 94.03% Space Free | Partition Type: NTFS
Computer Name: STADTS
Current User Name: Brent
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ========== PRC - [2010/06/28 14:14:04 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Brent\Desktop\OTL.exe
PRC - [2010/06/02 18:50:58 | 001,144,104 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/05/07 18:47:32 | 000,162,648 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
PRC - [2010/03/19 09:49:20 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2009/10/03 16:06:15 | 000,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\DNA\btdna.exe
PRC - [2009/09/09 15:33:06 | 000,065,536 | ---- | M] (New Boundary Technologies, Inc.) -- C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
PRC - [2008/04/14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/04/19 20:29:56 | 000,149,024 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe
PRC - [2007/04/19 20:29:44 | 000,411,168 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
PRC - [2004/08/02 10:50:36 | 000,806,912 | ---- | M] (U.S. Robotics) -- C:\U.S.R.TurboGWLAN\USRWLANG.exe
========== Modules (SafeList) ========== MOD - [2010/06/28 14:14:04 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Brent\Desktop\OTL.exe
MOD - [2008/04/14 04:40:22 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
========== Win32 Services (SafeList) ========== SRV - File not found [Auto | Stopped] -- -- (JavaQuickStarterService)
SRV - File not found [On_Demand | Stopped] -- -- (gusvc)
SRV - [2010/05/07 18:47:32 | 000,162,648 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2010/03/19 09:49:20 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009/09/09 15:33:06 | 000,065,536 | ---- | M] (New Boundary Technologies, Inc.) [Auto | Running] -- C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS -- (PrismXL)
SRV - [2009/05/25 04:26:40 | 000,303,376 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe -- (AVP)
SRV - [2007/04/19 20:29:44 | 000,411,168 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2004/12/23 19:19:40 | 000,202,448 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe -- (SNDSrvc)
SRV - [2004/12/10 18:02:34 | 000,243,312 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe -- (ccSetMgr)
SRV - [2004/12/10 18:02:32 | 000,087,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe -- (ccPwdSvc)
========== Driver Services (SafeList) ========== DRV - [2010/05/14 16:04:20 | 000,023,904 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lvuvcflt.sys -- (FilterService)
DRV - [2010/05/14 16:04:02 | 006,842,592 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lvuvc.sys -- (LVUVC) Logitech Webcam 250(UVC)
DRV - [2010/05/14 16:02:26 | 000,276,448 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lvrs.sys -- (LVRS)
DRV - [2010/05/14 16:02:14 | 000,114,784 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lvpopflt.sys -- (lvpopflt)
DRV - [2010/05/07 18:43:30 | 000,025,824 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2010/04/18 22:30:44 | 000,296,976 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2010/04/18 22:30:44 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2009/05/16 19:59:44 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009/05/13 16:46:52 | 000,031,760 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2008/12/15 19:41:32 | 000,033,808 | ---- | M] (Kaspersky Lab) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\klbg.sys -- (klbg)
DRV - [2008/09/24 09:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2008/08/20 22:52:41 | 003,299,840 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008/05/24 16:51:23 | 000,392,320 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2008/05/24 16:51:23 | 000,032,768 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2008/05/24 16:51:13 | 000,120,992 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2008/05/22 06:16:40 | 000,717,296 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008/04/14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008/04/13 23:10:32 | 000,096,512 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\atapi.sys -- (atapi)
DRV - [2008/04/13 10:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/07/20 17:40:10 | 000,084,992 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2006/12/28 11:44:44 | 000,084,992 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtiHdAud.sys -- (HdAudAddService)
DRV - [2006/05/10 10:27:00 | 000,036,864 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006/02/10 17:55:36 | 000,034,688 | ---- | M] (Dolphin, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\samfilt.sys -- (SAMFILT)
DRV - [2005/11/10 12:54:56 | 000,402,944 | R--- | M] (Belkin Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BLKWGU.sys -- (BLKWGU(Belkin)) Belkin Wireless G USB Network Adapter(Belkin)
DRV - [2005/09/29 22:52:22 | 000,013,056 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2005/09/29 22:52:20 | 000,034,048 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2005/08/18 02:52:06 | 000,093,568 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata)
DRV - [2004/08/12 20:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004/06/28 13:58:50 | 000,387,072 | ---- | M] (U.S. Robotics) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USR11G.SYS -- (USR11G)
DRV - [2004/03/11 20:16:32 | 000,062,865 | ---- | M] (Funk Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\odysseyIM3.sys -- (odysseyIM3)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://google.com/IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore =
http://www.google.com/firefox?client=firefox-a&rls=org.mozilla:en-US:officialIE - HKCU\..\URLSearchHook: {5E72625C-99E3-4644-BFF0-315AA91294FA} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ========== FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "bboy.org"
FF - prefs.js..extensions.enabledItems:
linkfilter@kaspersky.ru:9.0.0.459
FF - prefs.js..extensions.enabledItems: {C3945711-14EC-489D-BF2A-08E97087AF20}:1.0
FF - prefs.js..keyword.URL: "http://tmq.bingstart.com/s/?src=FF-Address&site=Bing&cfg=2-168-0-1j2rR&q="
FF - prefs.js..network.proxy.no_proxies_on: "127.0.0.1, local.swarmcast.net"
FF - HKLM\software\mozilla\eMusic Download Manager\Extensions\\Components: C:\Documents and Settings\Brent\Desktop\eMusic Download Manager\xulrunner\components
FF - HKLM\software\mozilla\eMusic Download Manager\Extensions\\Plugins: C:\Documents and Settings\Brent\Desktop\eMusic Download Manager\xulrunner\plugins
FF - HKLM\software\mozilla\Firefox\Extensions\\{C3945711-14EC-489D-BF2A-08E97087AF20}: C:\Documents and Settings\Brent\Local Settings\Application Data\{C3945711-14EC-489D-BF2A-08E97087AF20} [2008/12/21 02:54:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: I:\Java\lib\deploy\jqs\ff
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/06/24 20:26:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/06/24 20:26:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010/04/18 22:17:40 | 000,000,000 | ---D | M]
[2009/10/14 08:58:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brent\Application Data\Mozilla\Extensions
[2009/10/14 08:58:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brent\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2010/06/19 09:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brent\Application Data\Mozilla\Firefox\Profiles\vbripgx3.default\extensions
[2009/07/23 09:12:54 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Brent\Application Data\Mozilla\Firefox\Profiles\vbripgx3.default\searchplugins\ask.xml
[2009/10/09 03:55:07 | 000,002,255 | ---- | M] () -- C:\Documents and Settings\Brent\Application Data\Mozilla\Firefox\Profiles\vbripgx3.default\searchplugins\askcom.xml
[2010/06/07 02:56:47 | 000,001,949 | ---- | M] () -- C:\Documents and Settings\Brent\Application Data\Mozilla\Firefox\Profiles\vbripgx3.default\searchplugins\bing-zugo.xml
[2009/12/01 12:50:20 | 000,002,160 | ---- | M] () -- C:\Documents and Settings\Brent\Application Data\Mozilla\Firefox\Profiles\vbripgx3.default\searchplugins\MySpace.xml
[2010/06/28 01:33:36 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/04/18 22:18:26 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
O1 HOSTS File: ([2009/11/09 22:30:05 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (no name) - {5E72625B-99E3-4644-BFF0-315AA91294FA} - No CLSID value found.
O2 - BHO: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found.
O2 - BHO: (no name) - {BBD14491-A5A0-4809-9C5A-C9FC6DF0ACB0} - No CLSID value found.
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (no name) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found.
O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [LWS] C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [PrinTray] C:\WINDOWS\system32\spool\drivers\w32x86\2\printray.exe (Lexmark)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] I:\Java\bin\jusched.exe File not found
O4 - HKCU..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe File not found
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Vid\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Logitech Vid HD] C:\Program Files\Logitech\Vid\vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe ()
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\U.S. Robotics 802.11g Wireless Network Utility.lnk = C:\U.S.R.TurboGWLAN\USRWLANG.exe (U.S. Robotics)
O4 - Startup: C:\Documents and Settings\Brent\Start Menu\Programs\Startup\Logitech . Product Registration.lnk = C:\Program Files\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonscripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffscripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonscriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupscriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupscripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonscripts = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffscripts = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonscriptSync = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupscriptSync = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupscripts = 0
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O9 - Extra Button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1181071085625 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
http://java.sun.com/update/1.4.2/jinstall-1_4_2-windows-i586.cab (Java Plug-in 1.4.2)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\winlogon32.exe) - C:\WINDOWS\system32\winlogon32.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop WallPaper: C:\Documents and Settings\Brent\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Brent\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/09/05 23:57:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ========== [2010/06/28 14:14:04 | 000,574,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Brent\Desktop\OTL.exe
[2010/06/27 01:04:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brent\Local Settings\Application Data\VS Revo Group
[2010/06/24 14:05:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brent\My Documents\SightSpeed Recordings
[2010/06/23 16:10:57 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Brent\IETldCache
[2010/06/23 16:04:25 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010/06/12 16:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\logishrd
[2010/06/12 16:47:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LWS
[2010/06/12 16:47:15 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2010/06/12 16:00:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech
[2010/06/12 06:13:13 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users.WINDOWS\Application Data\GTek
[2010/06/12 06:01:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brent\Application Data\Help
[2010/06/12 05:59:03 | 000,048,640 | ---- | C] (Lexmark) -- C:\WINDOWS\System32\Lexunst1.exe
[2010/06/12 05:59:02 | 000,201,728 | ---- | C] (Lexmark International, Inc.) -- C:\WINDOWS\System32\Lexp2p32.dll
[2010/06/12 05:59:02 | 000,190,976 | ---- | C] (Lexmark International, Inc.) -- C:\WINDOWS\System32\lexlmpm.dll
[2010/06/12 05:59:02 | 000,177,152 | ---- | C] (Lexmark International, Inc.) -- C:\WINDOWS\System32\lex2kusb.dll
[2010/06/12 05:59:02 | 000,135,168 | ---- | C] (Lexmark International, Inc.) -- C:\WINDOWS\System32\LexBce.dll
[2010/06/12 05:59:02 | 000,041,472 | ---- | C] (Lexmark International, Inc.) -- C:\WINDOWS\System32\ldeei.dll
[2010/06/12 05:58:23 | 000,299,520 | ---- | C] (InstallShield Corporation, Inc.) -- C:\WINDOWS\uninst.exe
[2010/06/12 05:58:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brent\WINDOWS
[2010/06/10 21:52:39 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2010/06/10 21:52:39 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2010/06/10 21:52:39 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2010/06/10 21:52:39 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2010/06/10 21:52:38 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2010/06/10 21:52:38 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2010/06/09 17:25:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd
[2010/06/09 16:21:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brent\Local Settings\Application Data\LogiShrd
[2010/06/07 03:01:02 | 000,000,000 | ---D | C] -- C:\Program Files\QuizulousBar
[2010/06/07 02:56:40 | 000,000,000 | ---D | C] -- C:\Program Files\Mind Quiz
[2010/06/06 21:10:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brent\Application Data\Leadertech
[2010/06/06 21:08:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Application Data\LogiShrd
[2010/06/06 21:05:11 | 000,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys
[2010/06/06 21:05:11 | 000,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbaudio.sys
[2010/06/06 21:05:00 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2010/06/06 21:05:00 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2010/06/06 21:05:00 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dshowext.ax
[2010/06/06 21:05:00 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dshowext.ax
[2010/05/31 09:45:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Application Data\SpeedBit
[48 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[12 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/06/28 14:14:04 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Brent\Desktop\OTL.exe
[2010/06/28 14:08:25 | 000,002,137 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\iTunes.lnk
[2010/06/28 14:07:34 | 000,000,587 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\World of Warcraft.lnk
[2010/06/28 13:48:17 | 000,020,712 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/06/28 13:47:31 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/06/28 13:47:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/06/28 13:47:28 | 000,044,964 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap
[2010/06/28 13:47:09 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\lvuvc.hs
[2010/06/28 13:47:07 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\logiflt.iad
[2010/06/28 02:36:43 | 005,242,880 | ---- | M] () -- C:\Documents and Settings\Brent\ntuser.dat
[2010/06/28 02:36:43 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Brent\ntuser.ini
[2010/06/27 17:12:08 | 003,196,328 | ---- | M] () -- C:\Documents and Settings\Brent\Desktop\ventrilo-3.0.5-Windows-i386.exe
[2010/06/26 09:20:09 | 004,844,566 | -H-- | M] () -- C:\Documents and Settings\Brent\Local Settings\Application Data\IconCache.db
[2010/06/24 01:21:27 | 000,005,120 | ---- | M] () -- C:\Documents and Settings\Brent\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/23 16:10:56 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Brent\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/06/19 11:23:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/19 06:49:39 | 000,125,184 | ---- | M] () -- C:\Documents and Settings\Brent\Desktop\Schedule.June.12th.19th.and.26th.rev.3.61510.pdf
[2010/06/15 13:59:20 | 000,000,749 | ---- | M] () -- C:\Documents and Settings\Brent\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
[2010/06/12 16:47:15 | 000,001,261 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\Logitech Webcam Software .lnk
[2010/06/12 16:17:25 | 000,019,920 | ---- | M] () -- C:\Documents and Settings\Brent\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/06/12 05:59:12 | 000,002,409 | ---- | M] () -- C:\WINDOWS\System32\Lexmark Z42-Z43 Series ColorFine.AD2
[2010/06/11 10:52:12 | 000,118,952 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/06/10 22:36:57 | 000,443,384 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/06/10 22:36:57 | 000,397,060 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/06/10 22:36:57 | 000,059,532 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/06/09 02:09:31 | 000,000,760 | ---- | M] () -- C:\Documents and Settings\Brent\Application Data\setup_ldm.iss
[2010/06/08 18:24:35 | 000,044,208 | ---- | M] () -- C:\Documents and Settings\Brent\My Documents\Picture 24.jpg
[2010/06/08 00:10:48 | 000,001,469 | ---- | M] () -- C:\Documents and Settings\Brent\Desktop\DivX Movies.lnk
[2010/06/08 00:10:13 | 000,000,777 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\DivX Plus Player.lnk
[2010/06/08 00:09:28 | 000,000,817 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\DivX Plus Converter.lnk
[48 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[12 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/06/27 17:12:10 | 003,196,328 | ---- | C] () -- C:\Documents and Settings\Brent\Desktop\ventrilo-3.0.5-Windows-i386.exe
[2010/06/27 01:17:00 | 005,242,880 | ---- | C] () -- C:\Documents and Settings\Brent\ntuser.dat
[2010/06/23 16:30:29 | 000,000,587 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\World of Warcraft.lnk
[2010/06/19 06:48:32 | 000,125,184 | ---- | C] () -- C:\Documents and Settings\Brent\Desktop\Schedule.June.12th.19th.and.26th.rev.3.61510.pdf
[2010/06/15 13:59:20 | 000,000,749 | ---- | C] () -- C:\Documents and Settings\Brent\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
[2010/06/12 17:45:57 | 000,005,120 | ---- | C] () -- C:\Documents and Settings\Brent\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/12 16:47:15 | 000,001,261 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\Logitech Webcam Software .lnk
[2010/06/12 05:59:03 | 000,000,643 | ---- | C] () -- C:\WINDOWS\lexstat.ini
[2010/06/12 05:59:02 | 000,079,872 | ---- | C] () -- C:\WINDOWS\System32\lex_psu.exe
[2010/06/12 05:58:35 | 000,002,409 | ---- | C] () -- C:\WINDOWS\System32\Lexmark Z42-Z43 Series ColorFine.AD2
[2010/06/10 15:57:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\lvuvc.hs
[2010/06/10 15:55:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\logiflt.iad
[2010/06/09 02:09:31 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Brent\Application Data\setup_ldm.iss
[2010/06/08 18:26:15 | 000,044,208 | ---- | C] () -- C:\Documents and Settings\Brent\My Documents\Picture 24.jpg
[2010/06/08 00:10:13 | 000,000,777 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\DivX Plus Player.lnk
[2010/06/08 00:09:28 | 000,000,817 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Desktop\DivX Plus Converter.lnk
[2010/05/14 15:56:06 | 010,830,680 | ---- | C] () -- C:\WINDOWS\System32\LogiDPP.dll
[2010/05/14 15:55:58 | 000,290,648 | ---- | C] () -- C:\WINDOWS\System32\DevManagerCore.dll
[2010/05/14 15:47:00 | 000,090,071 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2010/05/07 18:46:36 | 000,014,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2010/05/07 18:43:30 | 000,025,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/11/15 09:40:07 | 000,000,000 | -HS- | C] () -- C:\WINDOWS\System32\calc.dll
[2009/10/15 16:58:05 | 000,081,332 | ---- | C] () -- C:\WINDOWS\System32\BASS.DLL
[2009/09/15 16:03:50 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2009/09/09 15:30:55 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009/05/03 21:26:09 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2008/11/12 03:02:32 | 000,000,206 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2008/05/16 13:00:46 | 000,000,250 | ---- | C] () -- C:\WINDOWS\gmer.ini
[2007/06/19 07:59:36 | 000,070,400 | ---- | C] () -- C:\WINDOWS\System32\PhysXLoader.dll
[2007/06/03 15:45:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI
[2007/04/26 18:54:59 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2007/04/26 09:33:56 | 000,000,087 | ---- | C] () -- C:\WINDOWS\usrwiz.ini
[2007/04/26 09:05:38 | 000,020,256 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2007/04/26 09:05:37 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2007/04/26 09:05:30 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007/04/20 06:57:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007/04/20 06:57:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2002/10/24 14:59:48 | 000,096,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\atapi.sys
[2002/07/05 08:12:06 | 000,027,136 | ---- | C] () -- C:\WINDOWS\System32\authdvd.dll
========== Alternate Data Streams ========== @Alternate Data Stream - 145 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:010ADD2C
< End of report >
However, it didn't creat an extras.txt to open and paste here.