:OTL
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:6522
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:6522
IE - HKU\S-1-5-21-429705476-915702366-3214017248-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-429705476-915702366-3214017248-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
IE - HKU\S-1-5-21-429705476-915702366-3214017248-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:6522
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-429705476-915702366-3214017248-1006\..\Toolbar\WebBrowser: (no name) - {1C56E97B-A95F-47B2-93C0-3FEED24479A7} - No CLSID value found.
O3 - HKU\S-1-5-21-429705476-915702366-3214017248-1006\..\Toolbar\WebBrowser: (no name) - {6CD56C02-CB4D-41B5-A0FE-B479061CCB41} - No CLSID value found.
O4 - HKLM..\RunServices: [0.5429704596585395] C:\DOCUME~1\Walt\LOCALS~1\Temp\0.5429704596585395.exe File not found
O4 - HKLM..\RunServices: [pdfupd] c:\docume~1\walt\locals~1\temp\pdfupd.exe File not found
O4 - HKLM..\RunServices: [QuickTimeRecursosQuickTime] C:\program files\quicktime\qtsystem\quicktimeinternetextras.resources\pt.lproj\recursosquicktimequicktime7.6.6.exe File not found
O4 - HKLM..\RunServices: [update[2] c:\documents and settings\walt\local settings\temporary internet files\content.ie5\4ii4ix9y\update[2].exe File not found
:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"8085:TCP"=-
:Files
ipconfig /flushdns /c
:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV - [2010/05/31 20:32:58 | 000,088,480 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfendisk.sys -- (mfendiskmp)
DRV - [2010/05/31 20:32:58 | 000,088,480 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfendisk.sys -- (mfendisk)
DRV - [2009/09/16 10:22:48 | 000,040,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfesmfk.sys -- (mfesmfk)
DRV - [2009/09/16 10:22:14 | 000,034,248 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mferkdk.sys -- (mferkdk)
O4 - HKLM..\RunServices: [update[2] c:\documents and settings\walt\local settings\temporary internet files\content.ie5\4ii4ix9y\update[2].exe File not found
[2010/05/31 20:32:58 | 000,088,480 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfendisk.sys
[2008/09/28 00:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\jebcdena
[2009/02/27 09:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Walt\Application Data\.wyzo
:Files
ipconfig /flushdns /c
C:\Program Files\Enigma Software Group
:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]
System Info
Services
Boot Check
Tasklist
Startup Items
Event Log
Ipconfig
Ping
Netstat
Hosts file
Shares
Routing Table
Would appreciate if you can educate me about the usage of OTL & Sino or if you can provide me any documentation for the same.OTL Tutorial now made public