What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Major problems

15 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
Hello all!

I hope someone can help. Yesterday, I formatted my hard drive and reinstalled and updated everything. Everything was fine until this morning while I was running Firefox 3. I run AVG and Ad-Aware. AVG detected 2 threats within a couple minutes. Then everything went down hill. Now I can't get registered at any antivirus sites through IE and Firefox won't even load. The pop ups are insane in IE even with the pop up blocker on high. AVG found adware generic.vdm, but could only move it to the vault.

Any help with this would be greatly appreciated. After spending all that time yesterday fixing the computer, this is really frustrating.

Here is my hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:20:25 PM, on 3/21/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\dldwcoms.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://login.yahoo.com/config/login_verify…rizon.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: AIM Toolbar Search Class - {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: {d8293689-361e-241a-f2b4-4041b55aa825} - {528aa55b-1404-4b2f-a142-e1639863928d} - C:\WINDOWS\system32\bslbur.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: (no name) - {ae5e4abc-f768-40a1-bb31-bf717c6272bb} - C:\WINDOWS\system32\totodele.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: AIM Toolbar Loader - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_9993303B90FE6C1D.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Dell Toolbar - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AIM Toolbar - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [witurivoka] Rundll32.exe "C:\WINDOWS\system32\jipapema.dll",s
O4 - HKLM\..\Run: [a49c1a25] rundll32.exe "C:\WINDOWS\system32\kevupavo.dll",b
O4 - HKLM\..\Run: [CPMa7af29b9] Rundll32.exe "c:\windows\system32\kasivaga.dll",a
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &AIM Toolbar Search - C:\Documents and Settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flas…ent/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_9993303B90FE6C1D.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\kuhumepe.dll bslbur.dll c:\windows\system32\kasivaga.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kasivaga.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kasivaga.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: dldwCATSCustConnectService - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\dldwserv.exe
O23 - Service: dldw_device - - C:\WINDOWS\system32\dldwcoms.exe
O23 - Service: Google Update Service (gupdate1c9a9ce21a1be18) (gupdate1c9a9ce21a1be18) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

–
End of file - 8714 bytes
Post #2
hello

  • Download OTListIt2 to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Under Custom Scan paste this in

    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    activex
    %systemroot%\System32\antiwpa.dll
    %systemroot%\SYSTEM32\wpa.dll
    %systemroot%\setup\scripts\biestart.exe
    %systemroot%\system32\drivers\royal.sys
    %systemroot%\system32\serauth1.dll
    %systemroot%\system32\serauth2.dll
    %systemroot%\system32\sysaudio.sys
    %systemroot%\system32\wdmaud.sys
    %systemroot%\system32\aeaudio.sys

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTListIt.Txt and Extras.Txt. These are saved in the same location as OTListIt2.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them all in.
Post #3
Thank you! Here's the OTListIt2.Txt

OTListIt logfile created on: 3/21/2009 4:21:01 PM - Run 1
OTListIt2 by OldTimer - Version 2.0.7.0 Folder = C:\Documents and Settings\BrownHouse\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.07 Mb Total Physical Memory | 336.58 Mb Available Physical Memory | 65.99% Memory free
1.22 Gb Paging File | 0.63 Gb Available in Paging File | 51.98% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 69.79 Gb Total Space | 57.08 Gb Free Space | 81.78% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: BROWN
Current User Name: BrownHouse
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
PRC - C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\system32\dldwcoms.exe ( )
PRC - C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
PRC - C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
PRC - C:\Program Files\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
PRC - C:\Program Files\AVG\AVG8\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\system32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\WINDOWS\eHome\ehmsas.exe (Microsoft Corporation)
PRC - C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe (Adobe Systems Incorporated)
PRC - C:\Documents and Settings\BrownHouse\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) – C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (ATI Smart [Auto | Stopped]) – C:\WINDOWS\system32\ati2sgag.exe ()
SRV - (avg8emc [Auto | Running]) – C:\Program Files\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg8wd [Auto | Running]) – C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (dldwCATSCustConnectService [Auto | Stopped]) – C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\dldwserv.exe ()
SRV - (dldw_device [Auto | Running]) – C:\WINDOWS\system32\dldwcoms.exe ( )
SRV - (ehRecvr [Auto | Running]) – C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [Auto | Running]) – C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (gupdate1c9a9ce21a1be18 [Auto | Stopped]) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (gusvc [Auto | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (idsvc [Unknown | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (JavaQuickStarterService [Auto | Running]) – C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (Lavasoft Ad-Aware Service [Auto | Running]) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (McrdSvc [Auto | Running]) – C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
SRV - (MHN [On_Demand | Stopped]) – C:\WINDOWS\System32\mhn.dll (Microsoft Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (UMWdf [On_Demand | Stopped]) – C:\WINDOWS\system32\wdfmgr.exe (Microsoft Corporation)
SRV - (Viewpoint Manager Service [Auto | Running]) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)

========== Driver Services (SafeList) ==========

DRV - (ati2mtag [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (ATMhelpr [System | Running]) – C:\WINDOWS\System32\drivers\ATMHELPR.SYS (Adobe Systems Incorporated)
DRV - (AvgLdx86 [System | Running]) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86 [System | Running]) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX [System | Running]) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (cercsr6 [Boot | Stopped]) – C:\WINDOWS\System32\drivers\cercsr6.sys (Adaptec, Inc.)
DRV - (E100B [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\e100b325.sys (Intel Corporation)
DRV - (HDAudBus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (Windows ® Server 2003 DDK provider)
DRV - (HSFHWBS2 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (HSF_DP [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (Lbd [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (mdmxsdk [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys (Conexant)
DRV - (MODEMCSA [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (STHDA [On_Demand | Running]) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (winachsf [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys (Conexant Systems, Inc.)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://login.yahoo.com/config/login_verify…rizon.yahoo.com
IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrie7&query;="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://login.yahoo.com/config/login_verify2?.partner=vz-acs&.done=http%3a//verizon.yahoo.com"
FF - prefs.js..extensions.enabledItems: {c2f863cd-0429-48c7-bb54-db756a951760}:5.20.1.1
FF - prefs.js..extensions.enabledItems: {3112ca9c-de6d-4884-a869-9855de68056c}:5.0.20090122Wb2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.0
FF - prefs.js..extensions.enabledItems: {29c4afe1-db19-4298-8785-fcc94d1d6c1d}:0.5.2008112201
FF - prefs.js..extensions.enabledItems: [removed]:1.0.4
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.2.20080910
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7
FF - prefs.js..google.toolbar.linkdoctor.backup.keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrab&query;="
FF - prefs.js..google.toolbar.linkdoctor.backup.keyword.enabled: true
FF - prefs.js..keyword.URL: "about:neterror?e=query&u;="


FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\ [2009/03/20 20:53:07 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009/03/21 00:30:16 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/03/21 08:55:49 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/03/21 09:02:14 | 00,000,000 | —D | M]

[2009/03/20 22:44:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Extensions
[2009/03/20 22:44:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/21 08:58:51 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions
[2009/03/21 08:40:29 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d}
[2009/03/20 22:47:52 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009/03/20 23:58:55 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/03/20 23:59:13 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{c2f863cd-0429-48c7-bb54-db756a951760}
[2009/03/21 08:58:48 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\[removed]
[2009/03/20 23:59:15 | 00,001,739 | —- | M] () – C:\Documents and Settings\BrownHouse\Application Data\Mozilla\FireFox\Profiles\psje42g2.default\searchplugins\aim-search.xml
[2009/03/21 08:40:32 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/03/20 21:40:57 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/03/20 23:55:51 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
[2009/03/21 00:30:28 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
[2009/02/19 21:43:33 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/02/19 21:43:34 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/02/19 15:33:08 | 00,001,394 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/02/19 15:33:08 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/02/19 15:33:08 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/02/19 15:33:08 | 00,002,343 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/02/19 15:33:08 | 00,001,706 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/02/19 15:33:08 | 00,001,178 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/02/19 15:33:08 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: (734 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Dell Toolbar) - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {528aa55b-1404-4b2f-a142-e1639863928d} - C:\WINDOWS\system32\bslbur.dll ()
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]—————————-)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (no name) - {ae5e4abc-f768-40a1-bb31-bf717c6272bb} - C:\WINDOWS\system32\totodele.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_9993303B90FE6C1D.dll (Google Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Dell Toolbar) - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (&Google; Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]—————————-)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {09B71986-2AC5-482D-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {09B71986-2AC5-482D-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]—————————-)
O4 - HKLM..\Run: [a49c1a25] rundll32.exe "C:\WINDOWS\system32\kevupavo.dll",b ()
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" (ATI Technologies, Inc.)
O4 - HKLM..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CPMa7af29b9] Rundll32.exe "c:\windows\system32\kasivaga.dll",a ()
O4 - HKLM..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
O4 - HKLM..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN (FUJI PHOTO FILM CO., LTD.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [witurivoka] Rundll32.exe "C:\WINDOWS\system32\jipapema.dll",s ()
O4 - HKCU..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp (AOL LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &AIM; Toolbar Search - C:\Documents and Settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra Button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flas…ent/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Filter: - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_9993303B90FE6C1D.dll (Google Inc.)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\kuhumepe.dll) - C:\WINDOWS\system32\kuhumepe.dll ()
O20 - AppInit_DLLs: (bslbur.dll) - C:\WINDOWS\system32\bslbur.dll ()
O20 - AppInit_DLLs: (c:\windows\system32\kasivaga.dll) - c:\windows\system32\kasivaga.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kasivaga.dll ()
O22 - SharedTaskScheduler: {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - STS - c:\windows\system32\kasivaga.dll ()
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
NetSvcs: 6to4:
NetSvcs: AppMgmt: C:\WINDOWS\System32\appmgmts.dll (Microsoft Corporation)
NetSvcs: AudioSrv: C:\WINDOWS\System32\audiosrv.dll (Microsoft Corporation)
NetSvcs: Browser: C:\WINDOWS\System32\browser.dll (Microsoft Corporation)
NetSvcs: CryptSvc: C:\WINDOWS\System32\cryptsvc.dll (Microsoft Corporation)
NetSvcs: DMServer: C:\WINDOWS\System32\dmserver.dll (Microsoft Corp.)
NetSvcs: DHCP: C:\WINDOWS\System32\dhcpcsvc.dll (Microsoft Corporation)
NetSvcs: ERSvc: C:\WINDOWS\System32\ersvc.dll (Microsoft Corporation)
NetSvcs: EventSystem: C:\WINDOWS\system32\es.dll (Microsoft Corporation)
NetSvcs: FastUserSwitchingCompatibility: C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation)
NetSvcs: HidServ: C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias:
NetSvcs: Iprip:
NetSvcs: Irmon:
NetSvcs: LanmanServer: C:\WINDOWS\System32\srvsvc.dll (Microsoft Corporation)
NetSvcs: LanmanWorkstation: C:\WINDOWS\System32\wkssvc.dll (Microsoft Corporation)
NetSvcs: Messenger: C:\WINDOWS\System32\msgsvc.dll (Microsoft Corporation)
NetSvcs: Netman: C:\WINDOWS\System32\netman.dll (Microsoft Corporation)
NetSvcs: Nla: C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation)
NetSvcs: Ntmssvc: C:\WINDOWS\system32\ntmssvc.dll (Microsoft Corporation)
NetSvcs: NWCWorkstation:
NetSvcs: Nwsapagent:
NetSvcs: Rasauto: C:\WINDOWS\System32\rasauto.dll (Microsoft Corporation)
NetSvcs: Rasman: C:\WINDOWS\System32\rasmans.dll (Microsoft Corporation)
NetSvcs: Remoteaccess: C:\WINDOWS\System32\mprdim.dll (Microsoft Corporation)
NetSvcs: Schedule: C:\WINDOWS\system32\schedsvc.dll (Microsoft Corporation)
NetSvcs: Seclogon: C:\WINDOWS\System32\seclogon.dll (Microsoft Corporation)
NetSvcs: SENS: C:\WINDOWS\system32\sens.dll (Microsoft Corporation)
NetSvcs: Sharedaccess: C:\WINDOWS\System32\ipnathlp.dll (Microsoft Corporation)
NetSvcs: SRService: C:\WINDOWS\system32\srsvc.dll (Microsoft Corporation)
NetSvcs: Tapisrv: C:\WINDOWS\System32\tapisrv.dll (Microsoft Corporation)
NetSvcs: Themes: C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation)
NetSvcs: TrkWks: C:\WINDOWS\system32\trkwks.dll (Microsoft Corporation)
NetSvcs: W32Time: C:\WINDOWS\system32\w32time.dll (Microsoft Corporation)
NetSvcs: WZCSVC: C:\WINDOWS\System32\wzcsvc.dll (Microsoft Corporation)
NetSvcs: Wmi: C:\WINDOWS\System32\advapi32.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp:
NetSvcs: winmgmt: C:\WINDOWS\system32\wbem\WMIsvc.dll (Microsoft Corporation)
NetSvcs: wscsvc: C:\WINDOWS\system32\wscsvc.dll (Microsoft Corporation)
NetSvcs: xmlprov: C:\WINDOWS\System32\xmlprov.dll (Microsoft Corporation)
NetSvcs: MHN: C:\WINDOWS\System32\mhn.dll (Microsoft Corporation)
NetSvcs: BITS: C:\WINDOWS\system32\qmgr.dll (Microsoft Corporation)
NetSvcs: wuauserv: C:\WINDOWS\system32\wuauserv.dll (Microsoft Corporation)
NetSvcs: ShellHWDetection: C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation)
NetSvcs: helpsvc: C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
NetSvcs: WmdmPmSN: C:\WINDOWS\system32\MsPMSNSv.dll (Microsoft Corporation)
NetSvcs: napagent: C:\WINDOWS\System32\qagentrt.dll (Microsoft Corporation)
NetSvcs: hkmsvc: C:\WINDOWS\System32\kmsvc.dll (Microsoft Corporation)
MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk - %ProgramFiles%\Kodak\Kodak EasyShare software\bin\EasyShare.exe - (Eastman Kodak Company)
MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk - %ProgramFiles%\Microsoft Office\Office\OSA9.EXE - (Microsoft Corporation)
MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Photags AutoDetect.lnk - %ProgramFiles%\PhoTags Express\Photags AutoDetect.exe - ()
MsConfig - StartUpFolder: C:^Documents and Settings^BrownHouse^Start Menu^Programs^Startup^Memento.lnk - %ProgramFiles%\Memento\Memento.exe - (Guys With Towels)
MsConfig - StartUpReg: Aim6 - hkey=HKCU - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %ProgramFiles%\AIM6\aim6.exe (AOL LLC)
MsConfig - StartUpReg: Dell V505 Fax Server - hkey=HKLM - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %ProgramFiles%\Dell V505\fm3032.exe ()
MsConfig - StartUpReg: dldwamon - hkey=HKLM - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %ProgramFiles%\Dell V505\dldwamon.exe ()
MsConfig - StartUpReg: dldwmon.exe - hkey=HKLM - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %ProgramFiles%\Dell V505\dldwmon.exe ()
MsConfig - StartUpReg: Google Quick Search Box - hkey=HKLM - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %ProgramFiles%\Google\Quick Search Box\qsb.exe (Google Inc.)
MsConfig - StartUpReg: Messenger (Yahoo!) - hkey=HKCU - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %ProgramFiles%\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
MsConfig - StartUpReg: QuickTime Task - hkey=HKLM - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %ProgramFiles%\QuickTime\QTTask.exe (Apple Inc.)
MsConfig - StartUpReg: TkBellExe - hkey=HKLM - key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run - %CommonProgramFiles%\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 2
SafeBootMin: AppMgmt - %SystemRoot%\System32\appmgmts.dll (Microsoft Corporation)
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: CryptSvc - %SystemRoot%\System32\cryptsvc.dll (Microsoft Corporation)
SafeBootMin: DcomLaunch - %SystemRoot%\system32\rpcss.dll (Microsoft Corporation)
SafeBootMin: dmadmin - %SystemRoot%\System32\dmadmin.exe (Microsoft Corp., Veritas Software)
SafeBootMin: dmboot.sys - %SystemRoot%\System32\drivers\dmboot.sys (Microsoft Corp., Veritas Software)
SafeBootMin: dmio.sys - %SystemRoot%\System32\drivers\dmio.sys (Microsoft Corp., Veritas Software)
SafeBootMin: dmload.sys - %SystemRoot%\System32\drivers\dmload.sys (Microsoft Corp., Veritas Software.)
SafeBootMin: dmserver - %SystemRoot%\System32\dmserver.dll (Microsoft Corp.)
SafeBootMin: EventLog - %SystemRoot%\system32\services.exe (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - %SystemRoot%\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SafeBootMin: Lavasoft Ad-Aware Service - %ProgramFiles%\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootMin: Netlogon - %SystemRoot%\system32\lsass.exe (Microsoft Corporation)
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PlugPlay - %SystemRoot%\system32\services.exe (Microsoft Corporation)
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: RpcSs - %SystemRoot%\system32\rpcss.dll (Microsoft Corporation)
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: sr.sys - %SystemRoot%\system32\DRIVERS\sr.sys (Microsoft Corporation)
SafeBootMin: SRService - %SystemRoot%\system32\srsvc.dll (Microsoft Corporation)
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: vgasave.sys - %SystemRoot%\System32\drivers\vga.sys (Microsoft Corporation)
SafeBootMin: WinMgmt - %SystemRoot%\system32\wbem\WMIsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: AFD - %SystemRoot%\System32\drivers\afd.sys (Microsoft Corporation)
SafeBootNet: AppMgmt - %SystemRoot%\System32\appmgmts.dll (Microsoft Corporation)
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: Browser - %SystemRoot%\System32\browser.dll (Microsoft Corporation)
SafeBootNet: CryptSvc - %SystemRoot%\System32\cryptsvc.dll (Microsoft Corporation)
SafeBootNet: DcomLaunch - %SystemRoot%\system32\rpcss.dll (Microsoft Corporation)
SafeBootNet: Dhcp - %SystemRoot%\System32\dhcpcsvc.dll (Microsoft Corporation)
SafeBootNet: dmadmin - %SystemRoot%\System32\dmadmin.exe (Microsoft Corp., Veritas Software)
SafeBootNet: dmboot.sys - %SystemRoot%\System32\drivers\dmboot.sys (Microsoft Corp., Veritas Software)
SafeBootNet: dmio.sys - %SystemRoot%\System32\drivers\dmio.sys (Microsoft Corp., Veritas Software)
SafeBootNet: dmload.sys - %SystemRoot%\System32\drivers\dmload.sys (Microsoft Corp., Veritas Software.)
SafeBootNet: dmserver - %SystemRoot%\System32\dmserver.dll (Microsoft Corp.)
SafeBootNet: DnsCache - %SystemRoot%\System32\dnsrslvr.dll (Microsoft Corporation)
SafeBootNet: EventLog - %SystemRoot%\system32\services.exe (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - %SystemRoot%\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SafeBootNet: ip6fw.sys - %SystemRoot%\system32\drivers\ip6fw.sys (Microsoft Corporation)
SafeBootNet: ipnat.sys - %SystemRoot%\system32\DRIVERS\ipnat.sys (Microsoft Corporation)
SafeBootNet: LanmanServer - %SystemRoot%\System32\srvsvc.dll (Microsoft Corporation)
SafeBootNet: LanmanWorkstation - %SystemRoot%\System32\wkssvc.dll (Microsoft Corporation)
SafeBootNet: Lavasoft Ad-Aware Service - %ProgramFiles%\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootNet: LmHosts - %SystemRoot%\System32\lmhsvc.dll (Microsoft Corporation)
SafeBootNet: Messenger - %SystemRoot%\System32\msgsvc.dll (Microsoft Corporation)
SafeBootNet: NDIS - %SystemRoot%\System32\drivers\ndis.sys (Microsoft Corporation)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: Ndisuio - %SystemRoot%\system32\DRIVERS\ndisuio.sys (Microsoft Corporation)
SafeBootNet: NetBIOS - %SystemRoot%\system32\DRIVERS\netbios.sys (Microsoft Corporation)
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetBT - %SystemRoot%\system32\DRIVERS\netbt.sys (Microsoft Corporation)
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Netlogon - %SystemRoot%\system32\lsass.exe (Microsoft Corporation)
SafeBootNet: NetMan - %SystemRoot%\System32\netman.dll (Microsoft Corporation)
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NtLmSsp - %SystemRoot%\system32\lsass.exe (Microsoft Corporation)
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PlugPlay - %SystemRoot%\system32\services.exe (Microsoft Corporation)
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpcdd.sys - %SystemRoot%\System32\DRIVERS\RDPCDD.sys (Microsoft Corporation)
SafeBootNet: rdpdd.sys - %SystemRoot%\System32\rdpdd.dll (Microsoft Corporation)
SafeBootNet: rdpwd.sys - %SystemRoot%\System32\drivers\rdpwd.sys (Microsoft Corporation)
SafeBootNet: rdsessmgr - %SystemRoot%\system32\sessmgr.exe (Microsoft Corporation)
SafeBootNet: RpcSs - %SystemRoot%\system32\rpcss.dll (Microsoft Corporation)
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: SharedAccess - %SystemRoot%\System32\ipnathlp.dll (Microsoft Corporation)
SafeBootNet: sr.sys - %SystemRoot%\system32\DRIVERS\sr.sys (Microsoft Corporation)
SafeBootNet: SRService - %SystemRoot%\system32\srsvc.dll (Microsoft Corporation)
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: Tcpip - %SystemRoot%\system32\DRIVERS\tcpip.sys (Microsoft Corporation)
SafeBootNet: TDI - Driver Group
SafeBootNet: tdpipe.sys - %SystemRoot%\System32\drivers\tdpipe.sys (Microsoft Corporation)
SafeBootNet: tdtcp.sys - %SystemRoot%\System32\drivers\tdtcp.sys (Microsoft Corporation)
SafeBootNet: termservice - %SystemRoot%\System32\termsrv.dll (Microsoft Corporation)
SafeBootNet: vga.sys - Driver
SafeBootNet: vgasave.sys - %SystemRoot%\System32\drivers\vga.sys (Microsoft Corporation)
SafeBootNet: WinMgmt - %SystemRoot%\system32\wbem\WMIsvc.dll (Microsoft Corporation)
SafeBootNet: WZCSVC - %SystemRoot%\System32\wzcsvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {407408d4-94ed-4d86-ab69-a7f649d112ee} - %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection QuickLaunchShortcut 640 %systemroot%\inf\mcdftreg.inf
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {8D1D0E9A-C799-4D28-9E29-0061D1E66E43} - Microsoft .NET Framework 1.1 Hotfix (KB928366)
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {BDE0FA43-6952-4BA8-8C58-09AF690F88E1} - Microsoft .NET Framework 1.0 Hotfix (KB930494)
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Reg Error: Value error.
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {EA29D410-CE41-4953-A862-2DE706A1DAD7} - Microsoft .NET Framework 1.0 Service Pack 3
ActiveX: {FDC11A6F-17D1-48f9-9EA3-9051954BAA24} - .NET Framework
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
ActiveX: KB910393 - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\EasyCDBlock.inf,PerUserInstall

========== Files/Folders - Created Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2009/03/21 16:17:47 | 00,499,200 | —- | C] (OldTimer Tools) – C:\Documents and Settings\BrownHouse\Desktop\OTListIt2.exe
[2009/03/21 16:17:27 | 00,020,992 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\OTListIt2 directions.doc
[2009/03/21 15:10:28 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Opera
[2009/03/21 15:10:28 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Opera
[2009/03/21 15:01:21 | 00,171,004 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\HijackThis Logfileauswertung.htm
[2009/03/21 14:54:17 | 00,001,734 | —- | C] () – C:\Documents and Settings\BrownHouse\Desktop\HijackThis.lnk
[2009/03/21 14:54:13 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/03/21 14:43:06 | 00,015,688 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2009/03/21 13:12:21 | 00,000,000 | -H-D | C] – C:\$AVG8.VAULT$
[2009/03/21 12:21:32 | 01,791,165 | -HS- | C] () – C:\WINDOWS\System32\ovapuvek.ini
[2009/03/21 12:21:09 | 00,127,488 | -HS- | C] () – C:\WINDOWS\System32\bslbur.dll
[2009/03/21 08:55:27 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/03/21 08:54:58 | 00,000,000 | -HSD | C] – C:\Config.Msi
[2009/03/21 08:53:47 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Apple
[2009/03/21 08:53:40 | 00,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2009/03/21 08:53:40 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Apple
[2009/03/21 01:25:13 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\acccore
[2009/03/21 01:24:48 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\AOL OCP
[2009/03/21 01:24:45 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\AOL
[2009/03/21 01:21:13 | 00,003,584 | —- | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/21 01:16:48 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\AIM Toolbar
[2009/03/21 01:08:23 | 00,515,803 | —- | C] (Digital Camera) – C:\WINDOWS\System32\drivers\Ca533av.sys
[2009/03/21 01:08:23 | 00,131,072 | —- | C] (Sunplus) – C:\WINDOWS\System32\Sp5x_32.dll
[2009/03/21 01:08:23 | 00,118,784 | —- | C] () – C:\WINDOWS\ShowBmp.exe
[2009/03/21 01:08:23 | 00,065,536 | —- | C] (DSC CAMERA) – C:\WINDOWS\amcap533.exe
[2009/03/21 01:08:23 | 00,010,986 | —- | C] (USB BULK) – C:\WINDOWS\System32\drivers\Bulk533.sys
[2009/03/21 01:08:23 | 00,001,325 | —- | C] () – C:\WINDOWS\Remove.ini
[2009/03/21 01:08:23 | 00,000,000 | —D | C] – C:\WINDOWS\Setup533
[2009/03/21 01:07:06 | 00,000,000 | —D | C] – C:\Program Files\PhoTags Express
[2009/03/21 00:52:13 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\KodakGallery
[2009/03/21 00:48:32 | 00,693,248 | R— | C] () – C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2009/03/21 00:48:32 | 00,359,424 | R— | C] () – C:\Documents and Settings\All Users\Documents\ESBK.mb
[2009/03/21 00:48:20 | 00,006,978 | —- | C] () – C:\logfile
[2009/03/21 00:45:04 | 00,000,000 | —D | C] – C:\Program Files\QuickTime
[2009/03/21 00:44:59 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Apple Computer
[2009/03/21 00:44:00 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusb.dll
[2009/03/21 00:43:59 | 00,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusd.dll
[2009/03/21 00:43:54 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Kodak
[2009/03/21 00:42:36 | 00,000,000 | —D | C] – C:\Program Files\Kodak
[2009/03/21 00:42:11 | 00,000,446 | —- | C] () – C:\WINDOWS\tasks\EasyShare Registration Task.job
[2009/03/21 00:41:34 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Kodak
[2009/03/21 00:36:22 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\FUJIFILM
[2009/03/21 00:32:44 | 00,274,432 | —- | C] (FUJI PHOTO FILM CO., LTD.) – C:\WINDOWS\System32\FFTIFF16.dll
[2009/03/21 00:32:44 | 00,155,648 | —- | C] (FUJI PHOTO FILM CO., LTD.) – C:\WINDOWS\System32\FFRAFLIB.DLL
[2009/03/21 00:32:38 | 00,000,000 | —D | C] – C:\Program Files\FinePixViewer
[2009/03/21 00:32:12 | 00,081,924 | —- | C] (FUJI PHOTO FILM CO.,LTD.) – C:\WINDOWS\System32\drivers\VC4CB104.SYS
[2009/03/21 00:32:11 | 00,000,000 | —D | C] – C:\Program Files\REGSHAVE
[2009/03/21 00:32:10 | 00,069,632 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FREGSHEX.DLL
[2009/03/21 00:32:10 | 00,065,536 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FINFCHECK.dll
[2009/03/21 00:32:10 | 00,045,056 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FINFCOPY.dll
[2009/03/21 00:32:10 | 00,045,056 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FCLKBTN.DLL
[2009/03/21 00:17:07 | 00,000,000 | —D | C] – C:\WINDOWS\pss
[2009/03/20 23:55:11 | 00,000,000 | —D | C] – C:\Program Files\Java
[2009/03/20 23:55:10 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2009/03/20 23:54:53 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Sun
[2009/03/20 23:50:37 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\mp3rocket
[2009/03/20 23:50:36 | 00,000,000 | —D | C] – C:\Program Files\MP3 Rocket
[2009/03/20 23:48:55 | 00,000,000 | —D | C] – C:\Program Files\PhotoScape
[2009/03/20 23:48:09 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Software Update Utility
[2009/03/20 23:48:04 | 00,000,000 | —D | C] – C:\Program Files\AIM Toolbar
[2009/03/20 23:48:04 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AIM Toolbar
[2009/03/20 23:47:55 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/03/20 23:47:54 | 00,000,000 | —D | C] – C:\Program Files\Viewpoint
[2009/03/20 23:47:54 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\acccore
[2009/03/20 23:47:45 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2009/03/20 23:47:45 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AOL
[2009/03/20 23:47:29 | 00,000,000 | —D | C] – C:\Program Files\Common Files\AOL
[2009/03/20 23:47:11 | 00,000,000 | —D | C] – C:\Program Files\AIM6
[2009/03/20 23:47:08 | 00,000,366 | -H– | C] () – C:\IPH.PH
[2009/03/20 23:46:58 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\ashampoo
[2009/03/20 23:46:58 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\ashampoo
[2009/03/20 23:46:53 | 00,000,000 | —D | C] – C:\Program Files\Ashampoo
[2009/03/20 23:45:57 | 00,000,000 | —D | C] – C:\Program Files\Deluxe Pacman
[2009/03/20 23:39:54 | 01,089,593 | —- | C] () – C:\WINDOWS\System32\dllcache\ntprint.cat
[2009/03/20 23:36:20 | 00,002,867 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\Memento.notes
[2009/03/20 23:33:29 | 05,353,274 | -H– | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\IconCache.db
[2009/03/20 23:33:03 | 00,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/03/20 23:30:01 | 00,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2009/03/20 23:27:19 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iecompat.dll
[2009/03/20 23:15:11 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Yahoo!
[2009/03/20 23:15:11 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2009/03/20 23:13:28 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2009/03/20 23:13:14 | 00,000,000 | —D | C] – C:\Program Files\Yahoo!
[2009/03/20 22:44:29 | 00,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/03/20 22:44:21 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Mozilla
[2009/03/20 22:44:21 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Mozilla
[2009/03/20 22:43:26 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2009/03/20 22:43:23 | 00,000,000 | —D | C] – C:\Program Files\NCH Swift Sound
[2009/03/20 22:43:23 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\NCH Swift Sound
[2009/03/20 22:43:15 | 00,000,000 | —D | C] – C:\Program Files\Memento
[2009/03/20 22:43:00 | 00,000,000 | —D | C] – C:\Program Files\Moffsoft FreeCalc
[2009/03/20 22:42:03 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Google
[2009/03/20 22:40:12 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google
[2009/03/20 22:38:35 | 00,000,890 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/03/20 22:38:24 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Google
[2009/03/20 22:35:18 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google Updater
[2009/03/20 22:35:15 | 00,000,868 | —- | C] () – C:\WINDOWS\tasks\Google Software Updater.job
[2009/03/20 22:35:13 | 00,000,000 | —D | C] – C:\Program Files\Google
[2009/03/20 22:08:46 | 00,000,000 | —D | C] – C:\My Games
[2009/03/20 22:08:00 | 00,000,000 | —D | C] – C:\users
[2009/03/20 22:07:21 | 00,000,000 | —D | C] – C:\Program Files\RealArcade
[2009/03/20 21:59:57 | 00,000,000 | R–D | C] – C:\Documents and Settings\BrownHouse\My Documents\My Videos
[2009/03/20 21:58:18 | 00,000,000 | —D | C] – C:\Program Files\Common Files\xing shared
[2009/03/20 21:58:03 | 00,499,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msvcp71.dll
[2009/03/20 21:58:03 | 00,348,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msvcr71.dll
[2009/03/20 21:58:03 | 00,278,528 | —- | C] (Real Networks, Inc) – C:\WINDOWS\System32\pncrt.dll
[2009/03/20 21:58:03 | 00,000,000 | —D | C] – C:\Program Files\Real
[2009/03/20 21:57:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Real
[2009/03/20 21:57:52 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Real
[2009/03/20 21:44:01 | 00,000,000 | —D | C] – C:\Program Files\Opera
[2009/03/20 21:40:56 | 00,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2009/03/20 21:27:49 | 00,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2009/03/20 21:25:59 | 00,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio
[2009/03/20 21:25:56 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Designer
[2009/03/20 21:25:04 | 00,000,000 | —D | C] – C:\WINDOWS\ShellNew
[2009/03/20 21:23:48 | 00,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2009/03/20 21:23:48 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft Web Folders
[2009/03/20 21:20:26 | 00,000,000 | —D | C] – C:\PSFONTS
[2009/03/20 21:20:24 | 00,000,000 | —D | C] – C:\Program Files\Adobe Type Manager
[2009/03/20 21:17:23 | 00,212,480 | —- | C] (Eastman Kodak) – C:\WINDOWS\pcdlib32.dll
[2009/03/20 21:17:23 | 00,210,944 | —- | C] () – C:\WINDOWS\System32\MSVCRT10.DLL
[2009/03/20 21:17:23 | 00,199,168 | —- | C] (Eastman Kodak Company) – C:\WINDOWS\kpcp32.dll
[2009/03/20 21:17:23 | 00,083,968 | —- | C] (Eastman Kodak Company) – C:\WINDOWS\kpapi32.dll
[2009/03/20 21:17:23 | 00,039,424 | —- | C] (Eastman Kodak Company) – C:\WINDOWS\kpsys32.dll
[2009/03/20 21:17:23 | 00,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\CTL3D32.DLL
[2009/03/20 21:17:23 | 00,000,629 | —- | C] () – C:\WINDOWS\Adobereg.db
[2009/03/20 21:17:23 | 00,000,114 | —- | C] () – C:\WINDOWS\kpcms.ini
[2009/03/20 21:17:23 | 00,000,000 | —D | C] – C:\KPCMS
[2009/03/20 21:17:22 | 00,249,856 | —- | C] (Play Incorporated) – C:\WINDOWS\System32\Snap32n.dll
[2009/03/20 21:17:22 | 00,020,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\CTL3D.DLL
[2009/03/20 21:17:21 | 00,415,232 | —- | C] (Storm Technology, Inc.) – C:\WINDOWS\System32\EZIMG25.dll
[2009/03/20 21:17:21 | 00,054,272 | —- | C] (Storm Technology, Inc.) – C:\WINDOWS\EasyPhoto Slide Show.scr
[2009/03/20 21:17:21 | 00,027,648 | —- | C] (Storm Technology, Inc.) – C:\WINDOWS\System32\cppenv25.dll
[2009/03/20 21:17:21 | 00,004,080 | —- | C] (Storm Software, Inc.) – C:\WINDOWS\System32\WINSIZE.DLL
[2009/03/20 21:17:21 | 00,000,742 | —- | C] () – C:\WINDOWS\EZPHOTO.INI
[2009/03/20 21:17:15 | 00,000,000 | —D | C] – C:\Program Files\PhotoDeluxe 2.0
[2009/03/20 21:16:43 | 00,299,008 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\uninst.exe
[2009/03/20 20:51:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2009/03/20 20:51:39 | 00,000,000 | —D | C] – C:\Program Files\MSBuild
[2009/03/20 20:51:29 | 00,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2009/03/20 20:50:24 | 00,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2009/03/20 20:50:24 | 00,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2009/03/20 20:50:24 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2009/03/20 20:50:23 | 01,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2009/03/20 20:50:23 | 01,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2009/03/20 20:50:23 | 00,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsshhdr.dll
[2009/03/20 20:50:23 | 00,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2009/03/20 20:50:22 | 00,000,000 | —D | C] – C:\2395c2d3281a424c5e4e95ff
[2009/03/20 19:13:20 | 00,001,165 | —- | C] () – C:\WINDOWS\ipconfig.dat
[2009/03/20 19:12:58 | 00,000,299 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\Linksys settings.htm
[2009/03/20 19:09:12 | 00,001,165 | —- | C] () – C:\WINDOWS\checkip.dat
[2009/03/20 18:58:39 | 00,000,000 | —D | C] – C:\Program Files\WinRAR
[2009/03/20 18:53:57 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/03/20 18:49:30 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Dell Imaging Toolbox
[2009/03/20 18:47:18 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\V505 Series
[2009/03/20 18:46:09 | 00,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2009/03/20 18:36:46 | 00,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2009/03/20 18:36:46 | 00,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2009/03/20 18:36:45 | 00,000,000 | —D | C] – C:\WINDOWS\System32\en
[2009/03/20 18:36:45 | 00,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2009/03/20 18:33:24 | 00,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2009/03/20 18:26:18 | 00,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2009/03/20 18:16:10 | 00,026,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbstor.sys
[2009/03/20 18:16:06 | 00,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbprint.sys
[2009/03/20 18:15:52 | 00,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbccgp.sys
[2009/03/20 18:10:56 | 00,000,000 | —D | C] – C:\logs
[2009/03/20 18:10:41 | 00,040,960 | —- | C] () – C:\WINDOWS\System32\dldwvs.dll
[2009/03/20 18:10:35 | 00,360,448 | —- | C] () – C:\WINDOWS\System32\dldwcoin.dll
[2009/03/20 18:10:21 | 00,072,625 | —- | C] () – C:\WINDOWS\System32\dldwprpr.chm
[2009/03/20 18:09:51 | 00,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbscan.sys
[2009/03/20 18:09:51 | 00,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2009/03/20 18:09:32 | 00,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wiafbdrv.dll
[2009/03/20 18:09:32 | 00,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2009/03/20 18:09:12 | 00,014,664 | —- | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/03/20 18:08:52 | 00,081,920 | —- | C] () – C:\WINDOWS\System32\dldwcaps.dll
[2009/03/20 18:08:51 | 01,036,288 | —- | C] () – C:\WINDOWS\System32\dldwdrs.dll
[2009/03/20 18:08:50 | 00,069,632 | —- | C] () – C:\WINDOWS\System32\dldwcnv4.dll
[2009/03/20 18:08:07 | 00,000,000 | —D | C] – C:\Program Files\Abbyy FineReader 6.0 Sprint
[2009/03/20 18:07:53 | 00,000,000 | —D | C] – C:\Program Files\Dell Toolbar
[2009/03/20 18:07:25 | 00,045,056 | —- | C] () – C:\WINDOWS\System32\DLDWPMON.DLL
[2009/03/20 18:07:25 | 00,032,768 | —- | C] () – C:\WINDOWS\System32\DLDWFXPU.DLL
[2009/03/20 18:07:05 | 00,339,968 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IMGMAN32.DLL
[2009/03/20 18:07:05 | 00,098,345 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IMHOST32.DLL
[2009/03/20 18:07:05 | 00,098,304 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IM31XPNG.DEL
[2009/03/20 18:07:05 | 00,069,632 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IM31XTIF.DEL
[2009/03/20 18:07:05 | 00,057,344 | —- | C] () – C:\WINDOWS\System32\dldwoem.dll
[2009/03/20 18:07:05 | 00,049,152 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IM31IMG.DIL
[2009/03/20 18:06:41 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\V505 Series
[2009/03/20 18:06:40 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\V505
[2009/03/20 18:01:46 | 00,352,256 | —- | C] () – C:\WINDOWS\System32\DLDWwupd.dll
[2009/03/20 18:01:46 | 00,017,648 | —- | C] () – C:\WINDOWS\System32\DLDWwupd.exe
[2009/03/20 18:01:20 | 00,000,000 | —D | C] – C:\Program Files\Dell V505
[2009/03/20 18:01:07 | 00,520,192 | —- | C] () – C:\WINDOWS\System32\dldwutil.dll
[2009/03/20 18:01:07 | 00,438,272 | —- | C] ( ) – C:\WINDOWS\System32\DLDWhcp.dll
[2009/03/20 18:01:07 | 00,389,120 | —- | C] () – C:\WINDOWS\System32\DLDWinst.dll
[2009/03/20 18:01:07 | 00,364,544 | —- | C] ( ) – C:\WINDOWS\System32\dldwinpa.dll
[2009/03/20 18:01:07 | 00,339,968 | —- | C] ( ) – C:\WINDOWS\System32\dldwiesc.dll
[2009/03/20 18:01:06 | 01,069,056 | —- | C] ( ) – C:\WINDOWS\System32\dldwserv.dll
[2009/03/20 18:01:06 | 00,851,968 | —- | C] ( ) – C:\WINDOWS\System32\dldwusb1.dll
[2009/03/20 18:01:06 | 00,651,264 | —- | C] ( ) – C:\WINDOWS\System32\dldwpmui.dll
[2009/03/20 18:01:06 | 00,577,536 | —- | C] ( ) – C:\WINDOWS\System32\dldwlmpm.dll
[2009/03/20 18:01:06 | 00,147,456 | —- | C] () – C:\WINDOWS\System32\dldwjswr.dll
[2009/03/20 18:01:05 | 00,983,121 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dldwgf.dll
[2009/03/20 18:01:05 | 00,679,936 | —- | C] ( ) – C:\WINDOWS\System32\dldwhbn3.dll
[2009/03/20 18:01:05 | 00,328,944 | —- | C] ( ) – C:\WINDOWS\System32\dldwih.exe
[2009/03/20 18:01:05 | 00,208,896 | —- | C] () – C:\WINDOWS\System32\dldwgrd.dll
[2009/03/20 18:01:05 | 00,180,224 | —- | C] () – C:\WINDOWS\System32\dldwinsb.dll
[2009/03/20 18:01:05 | 00,176,128 | —- | C] () – C:\WINDOWS\System32\dldwins.dll
[2009/03/20 18:01:05 | 00,106,496 | —- | C] () – C:\WINDOWS\System32\dldwinsr.dll
[2009/03/20 18:01:04 | 00,765,952 | —- | C] ( ) – C:\WINDOWS\System32\dldwcomc.dll
[2009/03/20 18:01:04 | 00,595,184 | —- | C] ( ) – C:\WINDOWS\System32\dldwcoms.exe
[2009/03/20 18:01:04 | 00,376,832 | —- | C] ( ) – C:\WINDOWS\System32\dldwcomm.dll
[2009/03/20 18:01:04 | 00,086,016 | —- | C] () – C:\WINDOWS\System32\dldwcub.dll
[2009/03/20 18:01:04 | 00,077,824 | —- | C] () – C:\WINDOWS\System32\dldwcu.dll
[2009/03/20 18:01:04 | 00,036,864 | —- | C] () – C:\WINDOWS\System32\dldwcur.dll
[2009/03/20 18:01:03 | 00,369,904 | —- | C] ( ) – C:\WINDOWS\System32\dldwcfg.exe
[2009/03/20 18:01:03 | 00,150,258 | —- | C] () – C:\WINDOWS\System32\LexFiles.ulf
[2009/03/20 18:01:03 | 00,077,906 | —- | C] () – C:\WINDOWS\System32\DLDWcfg.dll
[2009/03/20 18:01:03 | 00,001,957 | —- | C] () – C:\WINDOWS\System32\dldw.loc
[2009/03/20 17:47:45 | 00,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2009/03/20 17:40:51 | 00,000,000 | —D | C] – C:\WINDOWS\ie7updates
[2009/03/20 17:40:33 | 00,594,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/03/20 17:40:33 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/03/20 17:40:32 | 01,985,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/03/20 17:40:32 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieudinit.exe
[2009/03/20 17:40:31 | 11,063,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/03/20 17:40:31 | 03,698,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2009/03/20 17:40:31 | 01,241,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2009/03/20 17:40:31 | 00,445,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2009/03/20 17:40:30 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icardie.dll
[2009/03/20 17:40:16 | 00,000,000 | —D | C] – C:\WINDOWS\WBEM
[2009/03/20 17:40:16 | 00,000,000 | —D | C] – C:\WINDOWS\System32\en-US
[2009/03/20 17:39:08 | 00,000,000 | -H-D | C] – C:\WINDOWS\ie7
[2009/03/20 17:38:47 | 00,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2009/03/20 17:38:30 | 00,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
[2009/03/20 17:38:03 | 00,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xmllite.dll
[2009/03/20 17:36:39 | 00,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2009/03/20 17:33:12 | 00,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2009/03/20 17:33:09 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2009/03/20 17:33:08 | 00,712,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecs.dll
[2009/03/20 17:33:08 | 00,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2009/03/20 17:33:06 | 00,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\wacompen.sys
[2009/03/20 17:33:04 | 00,042,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\viaagp.sys
[2009/03/20 17:33:04 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2009/03/20 17:33:04 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2009/03/20 17:33:02 | 00,121,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbvideo.sys
[2009/03/20 17:33:02 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usb8023x.sys
[2009/03/20 17:32:59 | 00,050,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tspkg.dll
[2009/03/20 17:32:59 | 00,044,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\uagp35.sys
[2009/03/20 17:32:58 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2009/03/20 17:32:57 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcptsat.dll
[2009/03/20 17:32:56 | 00,032,827 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcptest.exe
[2009/03/20 17:32:49 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdwxp.exe
[2009/03/20 17:32:48 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spdwnwxp.exe
[2009/03/20 17:32:46 | 00,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2009/03/20 17:32:45 | 00,020,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shtml.dll
[2009/03/20 17:32:45 | 00,016,437 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shtml.exe
[2009/03/20 17:32:43 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2009/03/20 17:32:43 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sffp_mmc.sys
[2009/03/20 17:32:38 | 00,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2009/03/20 17:32:38 | 00,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rfcomm.sys
[2009/03/20 17:32:38 | 00,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2009/03/20 17:32:35 | 00,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qutil.dll
[2009/03/20 17:32:35 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rasqec.dll
[2009/03/20 17:32:34 | 00,291,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagentrt.dll
[2009/03/20 17:32:34 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2009/03/20 17:32:33 | 00,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2009/03/20 17:32:31 | 00,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2009/03/20 17:32:28 | 00,144,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\onex.dll
[2009/03/20 17:32:19 | 00,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2009/03/20 17:32:16 | 00,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2009/03/20 17:32:16 | 00,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2009/03/20 17:32:16 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2009/03/20 17:32:16 | 00,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2009/03/20 17:32:15 | 00,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2009/03/20 17:32:15 | 00,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2009/03/20 17:32:14 | 01,307,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6.dll
[2009/03/20 17:32:14 | 01,307,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2009/03/20 17:32:12 | 00,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2009/03/20 17:32:12 | 00,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2009/03/20 17:31:53 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2009/03/20 17:31:52 | 00,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2009/03/20 17:31:52 | 00,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2009/03/20 17:31:51 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2009/03/20 17:31:39 | 00,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2009/03/20 17:31:32 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kmsvc.dll
[2009/03/20 17:31:31 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2009/03/20 17:31:30 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2009/03/20 17:31:30 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2009/03/20 17:31:30 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2009/03/20 17:31:09 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smtpapi.dll
[2009/03/20 17:31:08 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwnh.dll
[2009/03/20 17:31:08 | 00,000,974 | —- | C] () – C:\WINDOWS\System32\pid.inf
[2009/03/20 17:31:03 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsdupd.exe
[2009/03/20 17:30:54 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidbth.sys
[2009/03/20 17:30:50 | 00,046,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\gagp30kx.sys
[2009/03/20 17:30:48 | 00,598,071 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpmmc.dll
[2009/03/20 17:30:48 | 00,208,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2009/03/20 17:30:48 | 00,020,541 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpexedll.dll
[2009/03/20 17:30:48 | 00,020,538 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpremadm.exe
[2009/03/20 17:30:47 | 00,876,653 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4awel.dll
[2009/03/20 17:30:47 | 00,188,494 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpcount.exe
[2009/03/20 17:30:47 | 00,109,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp98swin.exe
[2009/03/20 17:30:47 | 00,094,208 | —- | C] () – C:\WINDOWS\System32\dllcache\fpencode.dll
[2009/03/20 17:30:47 | 00,049,212 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4awebs.dll
[2009/03/20 17:30:47 | 00,041,020 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4avnb.dll
[2009/03/20 17:30:47 | 00,032,826 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4avss.dll
[2009/03/20 17:30:47 | 00,015,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp98sadm.exe
[2009/03/20 17:30:46 | 00,184,435 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4amsft.dll
[2009/03/20 17:30:46 | 00,147,513 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4apws.dll
[2009/03/20 17:30:46 | 00,102,509 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4atxt.dll
[2009/03/20 17:30:46 | 00,082,035 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4anscp.dll
[2009/03/20 17:30:46 | 00,049,210 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4areg.dll
[2009/03/20 17:30:44 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\faxpatch.exe
[2009/03/20 17:30:42 | 00,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2009/03/20 17:30:42 | 00,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2009/03/20 17:30:42 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappprxy.dll
[2009/03/20 17:30:42 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapsvc.dll
[2009/03/20 17:30:41 | 00,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2009/03/20 17:30:41 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappcfg.dll
[2009/03/20 17:30:41 | 00,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2009/03/20 17:30:41 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapolqec.dll
[2009/03/20 17:30:39 | 00,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2009/03/20 17:30:39 | 00,132,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3svc.dll
[2009/03/20 17:30:39 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2009/03/20 17:30:39 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2009/03/20 17:30:39 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2009/03/20 17:30:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3api.dll
[2009/03/20 17:30:39 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3dlg.dll
[2009/03/20 17:30:38 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2009/03/20 17:30:38 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsntfy.dll
[2009/03/20 17:30:37 | 00,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2009/03/20 17:30:34 | 00,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2009/03/20 17:30:33 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\credssp.dll
[2009/03/20 17:30:30 | 00,188,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cfgwiz.exe
[2009/03/20 17:30:29 | 00,101,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthpan.sys
[2009/03/20 17:30:29 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthmodem.sys
[2009/03/20 17:30:29 | 00,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2009/03/20 17:30:29 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthusb.sys
[2009/03/20 17:30:29 | 00,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthenum.sys
[2009/03/20 17:30:28 | 00,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2009/03/20 17:30:28 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2009/03/20 17:30:27 | 00,020,540 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\author.dll
[2009/03/20 17:30:27 | 00,016,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\author.exe
[2009/03/20 17:30:26 | 00,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2009/03/20 17:30:22 | 00,042,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\alim1541.sys
[2009/03/20 17:30:21 | 00,044,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\agpcpq.sys
[2009/03/20 17:30:21 | 00,042,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\agp440.sys
[2009/03/20 17:30:19 | 00,020,540 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admin.dll
[2009/03/20 17:30:19 | 00,016,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admin.exe
[2009/03/20 17:30:18 | 00,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2009/03/20 16:51:24 | 00,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthport.sys
[2009/03/20 16:51:24 | 00,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2009/03/20 16:46:26 | 02,145,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2009/03/20 16:46:25 | 02,189,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2009/03/20 16:46:25 | 02,023,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2009/03/20 16:46:24 | 02,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2009/03/20 16:42:48 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\kb913800.exe
[2009/03/20 16:38:28 | 00,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/03/20 16:38:14 | 00,064,160 | —- | C] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/03/20 16:38:14 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2009/03/20 16:37:42 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Macromedia
[2009/03/20 16:37:05 | 00,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2009/03/20 16:36:56 | 00,000,000 | —D | C] – C:\Program Files\Lavasoft
[2009/03/20 16:36:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Lavasoft
[2009/03/20 16:35:52 | 00,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2009/03/20 16:35:44 | 00,455,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2009/03/20 16:35:39 | 00,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2009/03/20 16:30:57 | 00,333,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2009/03/20 16:30:20 | 00,000,000 | —D | C] – C:\WINDOWS\VerizonOnline
[2009/03/20 16:30:17 | 00,313,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dx3j.dll
[2009/03/20 16:30:17 | 00,171,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\jit.dll
[2009/03/20 16:30:17 | 00,139,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javaee.dll
[2009/03/20 16:30:17 | 00,046,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\setdebug.exe
[2009/03/20 16:30:17 | 00,007,315 | —- | C] () – C:\WINDOWS\System32\javasup.vxd
[2009/03/20 16:30:17 | 00,006,550 | —- | C] () – C:\WINDOWS\jautoexp.dat
[2009/03/20 16:30:14 | 00,286,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vmhelper.dll
[2009/03/20 16:30:14 | 00,171,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wjview.exe
[2009/03/20 16:30:14 | 00,021,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjdbc10.dll
[2009/03/20 16:30:14 | 00,000,113 | —- | C] () – C:\WINDOWS\System32\zonedon.reg
[2009/03/20 16:30:14 | 00,000,113 | —- | C] () – C:\WINDOWS\System32\zonedoff.reg
[2009/03/20 16:30:13 | 00,947,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjava.dll
[2009/03/20 16:30:13 | 00,404,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javart.dll
[2009/03/20 16:30:13 | 00,187,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javacypt.dll
[2009/03/20 16:30:13 | 00,172,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\jview.exe
[2009/03/20 16:30:13 | 00,154,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msawt.dll
[2009/03/20 16:30:13 | 00,063,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javaprxy.dll
[2009/03/20 16:30:13 | 00,015,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\jdbgmgr.exe
[2009/03/20 16:30:12 | 00,049,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clspack.exe
[2009/03/20 16:30:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FinePointLib
[2009/03/20 16:30:00 | 00,287,808 | —- | C] (Verizon Internet Solutions) – C:\WINDOWS\System32\VerizonUninstaller.exe
[2009/03/20 16:30:00 | 00,128,064 | —- | C] (Verizon Internet Solutions) – C:\WINDOWS\System32\VZGUninstall.dll
[2009/03/20 16:30:00 | 00,049,210 | —- | C] (Verizon Internet Solutions) – C:\WINDOWS\System32\vzServices.dll
[2009/03/20 16:29:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Verizon Online
[2009/03/20 16:29:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Motive
[2009/03/20 16:28:11 | 00,691,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2009/03/20 16:23:46 | 00,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2009/03/20 16:20:39 | 00,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\splitter.sys
[2009/03/20 16:20:38 | 00,083,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\wdmaud.sys
[2009/03/20 16:20:37 | 00,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\dmusic.sys
[2009/03/20 16:20:34 | 00,056,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\swmidi.sys
[2009/03/20 16:20:32 | 00,142,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\aec.sys
[2009/03/20 16:20:31 | 00,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\kmixer.sys
[2009/03/20 16:20:30 | 00,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmkaud.sys
[2009/03/20 16:20:28 | 00,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sysaudio.sys
[2009/03/20 16:20:05 | 00,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2009/03/20 16:19:49 | 00,000,000 | —D | C] – C:\Program Files\SigmaTel
[2009/03/20 16:19:45 | 00,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2009/03/20 16:19:44 | 00,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2009/03/20 16:19:43 | 00,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2009/03/20 16:15:33 | 00,107,912 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/03/20 16:15:33 | 00,010,520 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2009/03/20 16:15:28 | 00,325,640 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/03/20 16:15:27 | 00,027,656 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/03/20 16:15:26 | 34,273,102 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/03/20 16:15:26 | 06,061,540 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/03/20 16:15:26 | 00,401,372 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/03/20 16:15:26 | 00,046,680 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/03/20 16:15:26 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers\Avg
[2009/03/20 16:15:26 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\AVGTOOLBAR
[2009/03/20 16:15:20 | 00,000,000 | —D | C] – C:\Program Files\AVG
[2009/03/20 16:15:20 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\avg8
[2009/03/20 16:15:10 | 00,516,096 | —- | C] () – C:\WINDOWS\System32\ati2sgag.exe
[2009/03/20 16:14:59 | 00,000,000 | —D | C] – C:\Program Files\ATI Technologies
[2009/03/20 16:14:57 | 00,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2009/03/20 16:14:50 | 00,073,728 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\Oemdspif.dll
[2009/03/20 16:14:50 | 00,058,560 | —- | C] () – C:\WINDOWS\System32\drivers\ativckxx.vp
[2009/03/20 16:14:50 | 00,024,064 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\ativcoxx.dll
[2009/03/20 16:14:50 | 00,021,712 | —- | C] () – C:\WINDOWS\System32\drivers\ativvpxx.vp
[2009/03/20 16:14:50 | 00,000,929 | —- | C] () – C:\WINDOWS\System32\drivers\ativcaxx.vp
[2009/03/20 16:14:49 | 00,524,850 | —- | C] () – C:\WINDOWS\System32\drivers\ativcaxx.cpa
[2009/03/20 16:14:49 | 00,106,496 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\atipdlxx.dll
[2009/03/20 16:14:48 | 00,095,617 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2009/03/20 16:14:48 | 00,039,936 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\ati2edxx.dll
[2009/03/20 16:14:48 | 00,025,088 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\Ati2mdxx.exe
[2009/03/20 16:14:48 | 00,005,496 | —- | C] () – C:\WINDOWS\System32\atifglpf.xml
[2009/03/20 16:14:14 | 00,001,902 | —- | C] () – C:\WINDOWS\System32\SetupBD.din
[2009/03/20 16:13:57 | 00,005,110 | —- | C] () – C:\WINDOWS\System32\e100b325.din
[2009/03/20 16:13:56 | 00,000,000 | —D | C] – C:\drvrtmp
[2009/03/20 16:12:51 | 00,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mskssrv.sys
[2009/03/20 16:12:49 | 00,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mspqm.sys
[2009/03/20 16:12:48 | 00,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mspclock.sys
[2009/03/20 16:12:44 | 00,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2009/03/20 16:12:44 | 00,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\MODEMCSA.sys
[2009/03/20 16:12:44 | 00,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2009/03/20 16:12:44 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2009/03/20 16:12:35 | 00,000,000 | —D | C] – C:\Program Files\CONEXANT
[2009/03/20 16:12:29 | 00,128,398 | —- | C] () – C:\WINDOWS\System32\drivers\del200f.cty
[2009/03/20 16:08:33 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2009/03/20 16:08:32 | 00,000,000 | —D | C] – C:\Program Files\Intel
[2009/03/20 16:06:50 | 00,000,000 | —D | C] – C:\WINDOWS\System32\vmm32
[2009/03/20 16:06:50 | 00,000,000 | —D | C] – C:\Program Files\Dell
[2009/03/20 16:06:14 | 00,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2009/03/20 16:04:25 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Adobe
[2009/03/20 16:04:25 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\AdobeUM
[2009/03/20 16:04:03 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\My Documents\My eBooks
[2009/03/20 16:03:59 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Adobe
[2009/03/20 16:03:58 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2009/03/20 16:02:14 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2009/03/20 16:02:12 | 00,000,000 | —D | C] – C:\Program Files\Adobe
[2009/03/20 16:00:55 | 00,000,000 | —D | C] – C:\WINDOWS\Cache
[2009/03/20 15:55:00 | 00,000,000 | -HSD | C] – C:\RECYCLER
[2009/03/20 15:53:41 | 00,000,081 | -HS- | C] () – C:\Documents and Settings\BrownHouse\My Documents\desktop.ini
[2009/03/20 15:53:41 | 00,000,000 | R–D | C] – C:\Documents and Settings\BrownHouse\My Documents\My Pictures
[2009/03/20 15:53:41 | 00,000,000 | R–D | C] – C:\Documents and Settings\BrownHouse\My Documents\My Music
[2009/03/20 15:53:30 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Identities
[2009/03/20 15:51:19 | 00,000,000 | —D | C] – C:\WINDOWS\RegisteredPackages
[2009/03/20 15:49:35 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2009/03/20 15:49:35 | 00,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidir.sys
[2009/03/20 15:49:18 | 00,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2009/03/20 15:48:49 | 00,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2009/03/20 15:46:55 | 00,000,000 | —D | C] – C:\WINDOWS\System32\URTTemp
[2009/03/20 15:46:33 | 00,000,000 | —D | C] – C:\Program Files\RGB
[2009/03/20 15:45:03 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\DIGStream
[2009/03/20 15:45:02 | 00,000,000 | —D | C] – C:\Program Files\DIGStream
[2009/03/20 15:45:01 | 00,000,000 | —D | C] – C:\Program Files\ESPNMotion
[2009/03/20 15:44:59 | 00,000,133 | —- | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\fusioncache.dat
[2009/03/20 15:44:58 | 00,000,000 | —D | C] – C:\Program Files\GemMaster
[2009/03/20 15:44:58 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\ApplicationHistory
[2009/03/20 15:44:55 | 00,000,000 | —D | C] – C:\Program Files\EnglishOtto
[2009/03/20 15:41:55 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\BrownHouse\Application Data\desktop.ini
[2009/03/20 15:41:54 | 00,000,084 | -HS- | C] () – C:\Documents and Settings\BrownHouse\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 15:41:54 | 00,000,000 | –SD | C] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft
[2009/03/20 15:41:54 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Microsoft
[2009/03/20 15:40:35 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Recorded TV
[2009/03/20 15:40:28 | 00,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2009/03/20 15:40:24 | 00,000,006 | -H– | C] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/20 15:40:24 | 00,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2009/03/20 15:40:06 | 00,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2009/03/20 15:39:26 | 00,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2009/03/20 15:39:16 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresja.dll
[2009/03/20 15:39:16 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresko.dll
[2009/03/20 15:39:16 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresfr.dll
[2009/03/20 15:39:15 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresde.dll
[2009/03/20 15:39:04 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehreschs.dll
[2009/03/20 15:38:58 | 00,028,288 | —- | C] () – C:\WINDOWS\System32\dllcache\xjis.nls
[2009/03/20 15:38:56 | 00,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2009/03/20 15:38:53 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2009/03/20 15:38:53 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2009/03/20 15:38:53 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2009/03/20 15:38:53 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2009/03/20 15:38:52 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2009/03/20 15:38:52 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2009/03/20 15:38:51 | 00,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2009/03/20 15:38:51 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2009/03/20 15:38:50 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2009/03/20 15:38:50 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2009/03/20 15:38:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2009/03/20 15:38:50 | 00,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2009/03/20 15:38:49 | 00,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2009/03/20 15:38:49 | 00,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2009/03/20 15:38:49 | 00,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2009/03/20 15:38:48 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2009/03/20 15:38:48 | 00,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2009/03/20 15:38:47 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2009/03/20 15:38:46 | 00,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2009/03/20 15:38:46 | 00,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2009/03/20 15:38:46 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2009/03/20 15:38:46 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2009/03/20 15:38:45 | 00,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2009/03/20 15:38:45 | 00,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2009/03/20 15:38:45 | 00,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2009/03/20 15:38:45 | 00,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2009/03/20 15:38:43 | 00,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2009/03/20 15:38:43 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2009/03/20 15:38:42 | 00,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2009/03/20 15:38:41 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2009/03/20 15:38:41 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2009/03/20 15:38:40 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2009/03/20 15:38:40 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2009/03/20 15:38:40 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2009/03/20 15:38:39 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2009/03/20 15:38:39 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2009/03/20 15:38:39 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2009/03/20 15:38:39 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2009/03/20 15:38:39 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2009/03/20 15:38:39 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2009/03/20 15:38:39 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2009/03/20 15:38:38 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2009/03/20 15:38:38 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2009/03/20 15:38:38 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2009/03/20 15:38:38 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2009/03/20 15:38:36 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2009/03/20 15:38:35 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2009/03/20 15:38:34 | 00,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2009/03/20 15:38:34 | 00,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2009/03/20 15:38:33 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2009/03/20 15:38:33 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2009/03/20 15:38:33 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2009/03/20 15:38:31 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2009/03/20 15:38:31 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2009/03/20 15:38:31 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2009/03/20 15:38:30 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2009/03/20 15:38:30 | 00,083,748 | —- | C] () – C:\WINDOWS\System32\dllcache\prcp.nls
[2009/03/20 15:38:30 | 00,083,748 | —- | C] () – C:\WINDOWS\System32\dllcache\prc.nls
[2009/03/20 15:38:29 | 00,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2009/03/20 15:38:29 | 00,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2009/03/20 15:38:29 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2009/03/20 15:38:29 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2009/03/20 15:38:29 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2009/03/20 15:38:29 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2009/03/20 15:38:29 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2009/03/20 15:38:28 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2009/03/20 15:38:28 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2009/03/20 15:38:28 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2009/03/20 15:38:28 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2009/03/20 15:38:28 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2009/03/20 15:38:27 | 00,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2009/03/20 15:38:27 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2009/03/20 15:38:26 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2009/03/20 15:38:25 | 00,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2009/03/20 15:38:24 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2009/03/20 15:38:23 | 00,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2009/03/20 15:38:20 | 01,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2009/03/20 15:38:20 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2009/03/20 15:38:15 | 00,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2009/03/20 15:38:15 | 00,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2009/03/20 15:38:15 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2009/03/20 15:38:14 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2009/03/20 15:38:13 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2009/03/20 15:38:12 | 01,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2009/03/20 15:38:12 | 00,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2009/03/20 15:38:12 | 00,047,066 | —- | C] () – C:\WINDOWS\System32\dllcache\ksc.nls
[2009/03/20 15:38:11 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2009/03/20 15:38:11 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2009/03/20 15:38:10 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2009/03/20 15:38:10 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2009/03/20 15:38:10 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2009/03/20 15:38:10 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2009/03/20 15:38:09 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2009/03/20 15:38:09 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2009/03/20 15:38:09 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2009/03/20 15:38:08 | 00,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2009/03/20 15:38:08 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2009/03/20 15:38:08 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2009/03/20 15:38:08 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2009/03/20 15:38:08 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2009/03/20 15:38:08 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2009/03/20 15:38:07 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2009/03/20 15:38:07 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2009/03/20 15:38:06 | 00,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2009/03/20 15:38:06 | 00,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2009/03/20 15:38:06 | 00,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2009/03/20 15:38:06 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2009/03/20 15:38:06 | 00,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2009/03/20 15:38:05 | 00,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2009/03/20 15:38:05 | 00,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2009/03/20 15:38:05 | 00,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2009/03/20 15:38:05 | 00,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2009/03/20 15:38:05 | 00,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2009/03/20 15:38:05 | 00,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2009/03/20 15:38:05 | 00,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2009/03/20 15:38:05 | 00,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2009/03/20 15:38:04 | 00,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2009/03/20 15:38:04 | 00,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2009/03/20 15:38:04 | 00,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2009/03/20 15:38:04 | 00,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2009/03/20 15:38:04 | 00,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2009/03/20 15:38:04 | 00,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2009/03/20 15:38:04 | 00,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2009/03/20 15:38:03 | 00,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2009/03/20 15:38:03 | 00,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2009/03/20 15:38:03 | 00,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2009/03/20 15:38:03 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2009/03/20 15:38:03 | 00,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2009/03/20 15:38:03 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2009/03/20 15:38:03 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2009/03/20 15:38:03 | 00,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2009/03/20 15:38:02 | 00,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2009/03/20 15:38:02 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2009/03/20 15:37:58 | 10,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2009/03/20 15:37:53 | 13,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2009/03/20 15:37:50 | 10,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2009/03/20 15:37:48 | 00,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2009/03/20 15:37:48 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2009/03/20 15:37:46 | 00,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2009/03/20 15:37:46 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2009/03/20 15:37:46 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2009/03/20 15:37:45 | 00,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2009/03/20 15:37:45 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2009/03/20 15:37:45 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2009/03/20 15:37:44 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2009/03/20 15:37:43 | 00,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2009/03/20 15:37:43 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2009/03/20 15:37:43 | 00,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2009/03/20 15:37:42 | 00,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2009/03/20 15:37:42 | 00,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2009/03/20 15:37:42 | 00,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2009/03/20 15:37:38 | 00,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2009/03/20 15:37:37 | 00,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2009/03/20 15:37:37 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2009/03/20 15:37:37 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2009/03/20 15:37:37 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2009/03/20 15:37:37 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2009/03/20 15:37:35 | 00,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2009/03/20 15:37:35 | 00,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2009/03/20 15:37:35 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2009/03/20 15:37:34 | 00,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2009/03/20 15:37:34 | 00,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2009/03/20 15:37:34 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2009/03/20 15:37:34 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2009/03/20 15:37:33 | 01,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2009/03/20 15:37:33 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2009/03/20 15:37:33 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2009/03/20 15:37:33 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2009/03/20 15:37:33 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2009/03/20 15:37:33 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2009/03/20 15:37:32 | 00,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2009/03/20 15:37:32 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2009/03/20 15:37:32 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_864.nls
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_862.nls
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_858.nls
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_720.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_870.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_708.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28596.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_21027.nls
[2009/03/20 15:37:30 | 00,180,770 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20932.nls
[2009/03/20 15:37:30 | 00,177,698 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20949.nls
[2009/03/20 15:37:30 | 00,173,602 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20936.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_21025.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20924.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20880.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20871.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20838.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20833.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20424.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20423.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20420.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20297.nls
[2009/03/20 15:37:29 | 00,187,938 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20005.nls
[2009/03/20 15:37:29 | 00,185,378 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20003.nls
[2009/03/20 15:37:29 | 00,180,258 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20004.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20290.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20285.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20284.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20280.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20278.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20277.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20273.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20269.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20108.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20107.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20106.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20105.nls
[2009/03/20 15:37:28 | 00,189,986 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1361.nls
[2009/03/20 15:37:28 | 00,186,402 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20001.nls
[2009/03/20 15:37:28 | 00,180,258 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20000.nls
[2009/03/20 15:37:28 | 00,173,602 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20002.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1149.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1148.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1147.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1146.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1145.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1144.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1143.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1142.nls
[2009/03/20 15:37:27 | 00,195,618 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10002.nls
[2009/03/20 15:37:27 | 00,177,698 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10003.nls
[2009/03/20 15:37:27 | 00,173,602 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10008.nls
[2009/03/20 15:37:27 | 00,162,850 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10001.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1141.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1140.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1047.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10021.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10005.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10004.nls
[2009/03/20 15:37:26 | 00,082,172 | —- | C] () – C:\WINDOWS\System32\dllcache\bopomofo.nls
[2009/03/20 15:37:26 | 00,066,728 | —- | C] () – C:\WINDOWS\System32\dllcache\big5.nls
[2009/03/20 15:37:26 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2009/03/20 15:37:25 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2009/03/20 15:37:24 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2009/03/20 15:37:24 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2009/03/20 15:37:24 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2009/03/20 15:37:22 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2009/03/20 15:37:22 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2009/03/20 15:37:22 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2009/03/20 15:37:21 | 00,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2009/03/20 15:37:21 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2009/03/20 15:37:19 | 00,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2009/03/20 15:37:18 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2009/03/20 15:37:13 | 00,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2009/03/20 15:37:13 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2009/03/20 15:37:13 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2009/03/20 15:37:13 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2009/03/20 15:37:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2009/03/20 15:37:12 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2009/03/20 15:37:09 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2009/03/20 15:37:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2009/03/20 15:37:01 | 00,000,000 | —D | C] – C:\Program Files\xerox
[2009/03/20 15:37:01 | 00,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2009/03/20 15:36:29 | 00,000,000 | —D | C] – C:\DELL
[2009/03/20 15:36:22 | 00,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2009/03/20 15:36:22 | 00,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2009/03/20 15:36:22 | 00,000,000 | RHS- | C] () – C:\IO.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | C] () – C:\WINDOWS\control.ini
[2009/03/20 15:36:22 | 00,000,000 | —- | C] () – C:\CONFIG.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2009/03/20 15:36:16 | 00,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2009/03/20 15:36:16 | 00,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2009/03/20 15:36:15 | 00,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2009/03/20 15:36:06 | 00,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2009/03/20 15:34:54 | 00,000,488 | RH– | C] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/03/20 15:34:54 | 00,000,488 | RH– | C] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/03/20 15:34:54 | 00,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2009/03/20 15:34:54 | 00,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/03/20 15:34:42 | 00,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2009/03/20 15:34:31 | 04,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2009/03/20 15:34:25 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2009/03/20 15:34:08 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2009/03/20 15:34:08 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2009/03/20 15:34:08 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2009/03/20 15:34:08 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2009/03/20 15:34:07 | 00,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2009/03/20 15:34:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2009/03/20 15:34:06 | 00,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2009/03/20 15:34:06 | 00,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2009/03/20 15:34:06 | 00,000,002 | —- | C] () – C:\WINDOWS\System32\desktop.ini
[2009/03/20 15:34:06 | 00,000,002 | —- | C] () – C:\WINDOWS\desktop.ini
[2009/03/20 15:34:02 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2009/03/20 15:34:02 | 00,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2009/03/20 15:34:01 | 00,118,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg723.acm
[2009/03/20 15:34:01 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2009/03/20 15:34:01 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2009/03/20 15:34:01 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2009/03/20 15:34:00 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2009/03/20 15:33:58 | 00,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2009/03/20 15:33:58 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2009/03/20 15:33:58 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2009/03/20 15:33:58 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2009/03/20 15:33:58 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2009/03/20 15:33:58 | 00,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2009/03/20 15:33:58 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2009/03/20 15:33:58 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2009/03/20 15:33:58 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2009/03/20 15:33:58 | 00,000,065 | RH– | C] () – C:\WINDOWS\tasks\desktop.ini
[2009/03/20 15:33:58 | 00,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2009/03/20 15:33:57 | 00,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2009/03/20 15:33:57 | 00,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2009/03/20 15:33:55 | 00,000,000 | —D | C] – C:\WINDOWS\srchasst
[2009/03/20 15:33:54 | 00,759,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\VGX.dll
[2009/03/20 15:33:54 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2009/03/20 15:33:52 | 00,991,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2009/03/20 15:33:52 | 00,819,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2009/03/20 15:33:52 | 00,356,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2009/03/20 15:33:52 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2009/03/20 15:33:52 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2009/03/20 15:33:51 | 01,809,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll
[2009/03/20 15:33:51 | 01,809,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/03/20 15:33:51 | 00,323,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2009/03/20 15:33:51 | 00,323,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2009/03/20 15:33:51 | 00,202,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuweb.dll
[2009/03/20 15:33:51 | 00,202,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2009/03/20 15:33:51 | 00,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2009/03/20 15:33:51 | 00,034,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2009/03/20 15:33:51 | 00,034,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2009/03/20 15:33:51 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauserv.dll
[2009/03/20 15:33:50 | 00,561,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2009/03/20 15:33:50 | 00,561,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2009/03/20 15:33:50 | 00,409,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgr.dll
[2009/03/20 15:33:50 | 00,213,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl
[2009/03/20 15:33:50 | 00,213,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009/03/20 15:33:50 | 00,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2009/03/20 15:33:50 | 00,051,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt.exe
[2009/03/20 15:33:50 | 00,051,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/03/20 15:33:50 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2009/03/20 15:33:50 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2009/03/20 15:33:50 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2009/03/20 15:33:44 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2009/03/20 15:33:44 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2009/03/20 15:33:44 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2009/03/20 15:33:44 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2009/03/20 15:33:41 | 00,129,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\fltmgr.sys
[2009/03/20 15:33:41 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2009/03/20 15:33:41 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltlib.dll
[2009/03/20 15:33:40 | 00,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2009/03/20 15:33:40 | 00,171,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srsvc.dll
[2009/03/20 15:33:40 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2009/03/20 15:33:40 | 00,073,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sr.sys
[2009/03/20 15:33:40 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srclient.dll
[2009/03/20 15:33:40 | 00,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2009/03/20 15:33:40 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2009/03/20 15:33:39 | 00,188,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msh261.drv
[2009/03/20 15:33:39 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2009/03/20 15:33:39 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmsrvc.exe
[2009/03/20 15:33:39 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2009/03/20 15:33:37 | 00,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2009/03/20 15:33:37 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2009/03/20 15:33:37 | 00,000,000 | —D | C] – C:\Program Files\NetMeeting
[2009/03/20 15:33:36 | 00,691,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcomm.dll
[2009/03/20 15:33:36 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2009/03/20 15:33:35 | 00,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\schedsvc.dll
[2009/03/20 15:33:35 | 00,000,000 | —D | C] – C:\Program Files\Outlook Express
[2009/03/20 15:33:34 | 00,274,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstask.dll
[2009/03/20 15:33:34 | 00,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2009/03/20 15:33:34 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2009/03/20 15:33:34 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2009/03/20 15:33:34 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2009/03/20 15:33:34 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2009/03/20 15:33:30 | 00,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2009/03/20 15:33:29 | 00,638,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iexplore.exe
[2009/03/20 15:33:29 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedw.exe
[2009/03/20 15:33:29 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hmmapi.dll
[2009/03/20 15:33:29 | 00,000,000 | —D | C] – C:\Program Files\Common Files\System
[2009/03/20 15:33:28 | 00,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2009/03/20 15:33:27 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2009/03/20 15:32:53 | 00,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2009/03/20 15:32:29 | 00,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/03/20 15:32:21 | 00,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2009/03/20 15:32:19 | 00,000,059 | —- | C] () – C:\WINDOWS\vbaddin.ini
[2009/03/20 15:32:19 | 00,000,036 | —- | C] () – C:\WINDOWS\vb.ini
[2009/03/20 15:32:14 | 00,000,000 | —D | C] – C:\WINDOWS\Registration
[2009/03/20 15:32:07 | 00,000,000 | —D | C] – C:\Program Files\Online Services
[2009/03/20 15:31:50 | 00,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2009/03/20 15:31:47 | 00,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2009/03/20 15:31:29 | 01,742,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mypixdx.scr
[2009/03/20 15:31:29 | 00,011,452 | —- | C] () – C:\WINDOWS\System32\mypixdx.chm
[2009/03/20 15:31:29 | 00,000,000 | —D | C] – C:\Program Files\Windows Plus
[2009/03/20 15:31:28 | 07,093,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\space.scr
[2009/03/20 15:31:27 | 04,396,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wpgldfsh.scr
[2009/03/20 15:31:26 | 03,343,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nature.scr
[2009/03/20 15:31:25 | 05,068,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\davinci.scr
[2009/03/20 15:31:20 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mhn.dll
[2009/03/20 15:31:20 | 00,011,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mhndrv.sys
[2009/03/20 15:31:20 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\igdetect.dll
[2009/03/20 15:31:16 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2ext.dll
[2009/03/20 15:31:16 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2eres.dll
[2009/03/20 15:31:16 | 00,000,000 | —D | C] – C:\Program Files\Movie Maker
[2009/03/20 15:30:31 | 00,462,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqqp20.dll
[2009/03/20 15:30:31 | 00,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqdb20.dll
[2009/03/20 15:30:31 | 00,117,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdatunepia.dll
[2009/03/20 15:30:31 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqse20.dll
[2009/03/20 15:30:30 | 00,063,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\medctrro.exe
[2009/03/20 15:30:30 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehmsas.exe
[2009/03/20 15:30:29 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2009/03/20 15:30:24 | 10,604,352 | —- | C] () – C:\WINDOWS\System32\dllcache\ehcir.ird
[2009/03/20 15:30:24 | 01,370,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehchsime.dll
[2009/03/20 15:30:24 | 00,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehcommon.dll
[2009/03/20 15:30:24 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehjpnime.dll
[2009/03/20 15:30:24 | 00,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehentt.dll
[2009/03/20 15:30:24 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiuserxp.dll
[2009/03/20 15:30:23 | 03,219,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehshell.exe
[2009/03/20 15:30:23 | 01,863,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehcm.dll
[2009/03/20 15:30:23 | 00,492,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehui.dll
[2009/03/20 15:30:23 | 00,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdrop.dll
[2009/03/20 15:30:23 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehSched.exe
[2009/03/20 15:30:23 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRec.exe
[2009/03/20 15:30:23 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehtray.exe
[2009/03/20 15:30:23 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdebug.dll
[2009/03/20 15:30:19 | 08,843,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehres.dll
[2009/03/20 15:30:19 | 01,349,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehuihlp.dll
[2009/03/20 15:30:19 | 00,864,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepg.dll
[2009/03/20 15:30:19 | 00,278,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiVidCtl.dll
[2009/03/20 15:30:19 | 00,269,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehglid.dll
[2009/03/20 15:30:19 | 00,152,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\debugsvc.dll
[2009/03/20 15:30:19 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdat.dll
[2009/03/20 15:30:19 | 00,097,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehProxy.dll
[2009/03/20 15:30:19 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdec.dll
[2009/03/20 15:30:19 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgnet.dll
[2009/03/20 15:30:18 | 00,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRecObj.dll
[2009/03/20 15:30:18 | 00,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiProxy.dll
[2009/03/20 15:30:18 | 00,307,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehPlayer.dll
[2009/03/20 15:30:18 | 00,204,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiPlay.dll
[2009/03/20 15:30:18 | 00,122,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiwmp.dll
[2009/03/20 15:30:18 | 00,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehCIR.dll
[2009/03/20 15:30:18 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiExtens.dll
[2009/03/20 15:30:16 | 00,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2009/03/20 15:30:16 | 00,000,000 | —D | C] – C:\Program Files\Messenger
[2009/03/20 15:30:15 | 02,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2009/03/20 15:30:15 | 01,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2009/03/20 15:30:15 | 01,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2009/03/20 15:30:15 | 00,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2009/03/20 15:30:15 | 00,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2009/03/20 15:30:15 | 00,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2009/03/20 15:30:15 | 00,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2009/03/20 15:30:15 | 00,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2009/03/20 15:30:15 | 00,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2009/03/20 15:30:15 | 00,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2009/03/20 15:30:15 | 00,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2009/03/20 15:30:15 | 00,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2009/03/20 15:30:15 | 00,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2009/03/20 15:30:15 | 00,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2009/03/20 15:30:14 | 01,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2009/03/20 15:30:14 | 00,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2009/03/20 15:30:14 | 00,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2009/03/20 15:30:14 | 00,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2009/03/20 15:30:14 | 00,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2009/03/20 15:30:14 | 00,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2009/03/20 15:30:14 | 00,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2009/03/20 15:30:14 | 00,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2009/03/20 15:30:14 | 00,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2009/03/20 15:30:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2009/03/20 15:30:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2009/03/20 15:30:13 | 00,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2009/03/20 15:30:06 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2009/03/20 15:30:06 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2009/03/20 15:30:06 | 00,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2009/03/20 15:30:06 | 00,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2009/03/20 15:30:06 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2009/03/20 15:30:06 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2009/03/20 15:30:06 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2009/03/20 15:30:06 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2009/03/20 15:30:06 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2009/03/20 15:30:06 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2009/03/20 15:30:02 | 00,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2009/03/20 15:30:02 | 00,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2009/03/20 15:30:02 | 00,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2009/03/20 15:30:02 | 00,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2009/03/20 15:30:02 | 00,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2009/03/20 15:30:01 | 00,093,702 | —- | C] () – C:\WINDOWS\System32\subrange.uce
[2009/03/20 15:30:01 | 00,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2009/03/20 15:30:01 | 00,060,458 | —- | C] () – C:\WINDOWS\System32\ideograf.uce
[2009/03/20 15:30:01 | 00,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2009/03/20 15:30:01 | 00,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2009/03/20 15:30:01 | 00,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2009/03/20 15:30:01 | 00,016,740 | —- | C] () – C:\WINDOWS\System32\shiftjis.uce
[2009/03/20 15:30:01 | 00,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2009/03/20 15:30:01 | 00,012,876 | —- | C] () – C:\WINDOWS\System32\korean.uce
[2009/03/20 15:30:01 | 00,008,484 | —- | C] () – C:\WINDOWS\System32\kanji_2.uce
[2009/03/20 15:30:01 | 00,006,948 | —- | C] () – C:\WINDOWS\System32\kanji_1.uce
[2009/03/20 15:30:01 | 00,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2009/03/20 15:30:00 | 00,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2009/03/20 15:30:00 | 00,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2009/03/20 15:30:00 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2009/03/20 15:30:00 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2009/03/20 15:30:00 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2009/03/20 15:30:00 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2009/03/20 15:30:00 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2009/03/20 15:30:00 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2009/03/20 15:30:00 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2009/03/20 15:30:00 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2009/03/20 15:30:00 | 00,024,006 | —- | C] () – C:\WINDOWS\System32\gb2312.uce
[2009/03/20 15:30:00 | 00,022,984 | —- | C] () – C:\WINDOWS\System32\bopomofo.uce
[2009/03/20 15:29:59 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2009/03/20 15:29:59 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2009/03/20 15:29:59 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2009/03/20 15:29:59 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2009/03/20 15:29:59 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2009/03/20 15:29:59 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2009/03/20 15:29:59 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2009/03/20 15:29:59 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2009/03/20 15:29:59 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2009/03/20 15:29:59 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2009/03/20 15:29:59 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2009/03/20 15:29:59 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2009/03/20 15:29:59 | 00,013,223 | —- | C] () – C:\WINDOWS\System32\tslabels.ini
[2009/03/20 15:29:59 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2009/03/20 15:29:59 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2009/03/20 15:29:59 | 00,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2009/03/20 15:29:59 | 00,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2009/03/20 15:29:58 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2009/03/20 15:29:58 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2009/03/20 15:29:58 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2009/03/20 15:29:58 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2009/03/20 15:29:58 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2009/03/20 15:29:58 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2009/03/20 15:29:58 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2009/03/20 15:29:58 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2009/03/20 15:29:58 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2009/03/20 15:29:58 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2009/03/20 15:29:58 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2009/03/20 15:29:58 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2009/03/20 15:29:58 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2009/03/20 15:29:58 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2009/03/20 15:29:58 | 00,001,931 | —- | C] () – C:\WINDOWS\System32\msdtcprf.ini
[2009/03/20 15:29:58 | 00,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2009/03/20 15:29:57 | 00,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2009/03/20 15:29:57 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2009/03/20 15:29:57 | 00,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2009/03/20 15:29:57 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2009/03/20 15:29:57 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2009/03/20 15:29:57 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2009/03/20 15:29:57 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2009/03/20 15:29:57 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2009/03/20 15:29:55 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2009/03/20 15:29:55 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2009/03/20 15:29:54 | 00,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2009/03/20 15:29:54 | 00,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2009/03/20 15:29:54 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2009/03/20 15:29:54 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2009/03/20 15:29:54 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2009/03/20 15:29:54 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2009/03/20 15:29:54 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2009/03/20 15:29:54 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2009/03/20 15:29:54 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2009/03/20 15:29:54 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2009/03/20 15:29:54 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2009/03/20 15:29:54 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2009/03/20 15:29:53 | 00,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2009/03/20 15:29:53 | 00,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2009/03/20 15:29:53 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2009/03/20 15:29:43 | 00,000,000 | —D | C] – C:\Program Files\MSN
[2009/03/20 15:29:42 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2009/03/20 15:29:42 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2009/03/20 15:29:42 | 00,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2009/03/20 15:29:42 | 00,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2009/03/20 15:29:42 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2009/03/20 15:29:41 | 00,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2009/03/20 15:29:41 | 00,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2009/03/20 15:29:41 | 00,139,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rdpwd.sys
[2009/03/20 15:29:41 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2009/03/20 15:29:41 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2009/03/20 15:29:41 | 00,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tdtcp.sys
[2009/03/20 15:29:41 | 00,012,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tdpipe.sys
[2009/03/20 15:29:41 | 00,000,000 | —D | C] – C:\Program Files\Windows NT
[2009/03/20 15:29:40 | 02,061,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstscax.dll
[2009/03/20 15:29:40 | 00,677,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstsc.exe
[2009/03/20 15:29:40 | 00,655,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2009/03/20 15:29:40 | 00,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2009/03/20 15:29:40 | 00,295,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\termsrv.dll
[2009/03/20 15:29:40 | 00,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2009/03/20 15:29:40 | 00,141,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sessmgr.exe
[2009/03/20 15:29:40 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2009/03/20 15:29:40 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\remotepg.dll
[2009/03/20 15:29:40 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2009/03/20 15:29:40 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2009/03/20 15:29:40 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2009/03/20 15:29:39 | 00,427,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2009/03/20 15:29:39 | 00,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2009/03/20 15:29:39 | 00,091,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2009/03/20 15:29:39 | 00,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2009/03/20 15:29:39 | 00,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2009/03/20 15:29:39 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2009/03/20 15:29:39 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2009/03/20 15:29:39 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2009/03/20 15:29:39 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2009/03/20 15:29:39 | 00,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2009/03/20 15:29:38 | 00,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2009/03/20 15:29:38 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2009/03/20 15:29:38 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2009/03/20 15:29:38 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2009/03/20 15:29:38 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2009/03/20 15:29:38 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtc.exe
[2009/03/20 15:29:38 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2009/03/20 15:29:37 | 01,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2009/03/20 15:29:37 | 00,625,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2009/03/20 15:29:37 | 00,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2009/03/20 15:29:37 | 00,226,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2009/03/20 15:29:37 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2009/03/20 15:29:36 | 00,498,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatq.dll
[2009/03/20 15:29:32 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2009/03/20 15:29:31 | 00,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2009/03/20 15:29:31 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2009/03/20 15:29:31 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2009/03/20 15:29:26 | 00,040,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\termdd.sys
[2009/03/20 15:29:25 | 00,196,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rdpdr.sys
[2009/03/20 15:29:24 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2009/03/20 10:27:12 | 00,003,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\audstub.sys
[2009/03/20 10:26:48 | 00,057,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\redbook.sys
[2009/03/20 10:26:15 | 00,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2009/03/20 10:25:03 | 00,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2009/03/20 10:25:00 | 00,501,230 | —- | C] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/03/20 10:25:00 | 00,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2009/03/20 10:24:59 | 00,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2009/03/20 10:24:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2009/03/20 10:24:58 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2009/03/20 10:24:58 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2009/03/20 10:24:57 | 01,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2009/03/20 10:24:57 | 00,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2009/03/20 10:24:57 | 00,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2009/03/20 10:24:57 | 00,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2009/03/20 10:24:56 | 00,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2009/03/20 10:24:56 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2009/03/20 10:24:56 | 00,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2009/03/20 10:24:56 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2009/03/20 10:24:55 | 00,000,000 | R–D | C] – C:\Program Files
[2009/03/20 10:24:55 | 00,000,000 | —D | C] – C:\Program Files\Common Files
[2009/03/20 10:24:54 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28603.nls
[2009/03/20 10:24:54 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_28603.nls
[2009/03/20 10:24:53 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_857.nls
[2009/03/20 10:24:53 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_857.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28599.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10081.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_28599.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10081.nls
[2009/03/20 10:24:53 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2009/03/20 10:24:53 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2009/03/20 10:24:53 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2009/03/20 10:24:53 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2009/03/20 10:24:53 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2009/03/20 10:24:53 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28595.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10017.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10007.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28595.NLS
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10017.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10007.nls
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2009/03/20 10:24:50 | 00,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2009/03/20 10:24:50 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2009/03/20 10:24:50 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2009/03/20 10:24:50 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2009/03/20 10:24:50 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2009/03/20 10:24:50 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2009/03/20 10:24:50 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2009/03/20 10:24:50 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2009/03/20 10:24:50 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2009/03/20 10:24:50 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2009/03/20 10:24:50 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2009/03/20 10:24:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2009/03/20 10:24:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2009/03/20 10:24:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_869.nls
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_737.nls
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_869.nls
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_737.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_875.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28597.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10006.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_875.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28597.NLS
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10006.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_866.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_855.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_866.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_855.nls
[2009/03/20 10:24:48 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28594.nls
[2009/03/20 10:24:48 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28594.NLS
[2009/03/20 10:24:48 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2009/03/20 10:24:48 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2009/03/20 10:24:48 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2009/03/20 10:24:48 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2009/03/20 10:24:48 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2009/03/20 10:24:48 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2009/03/20 10:24:48 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2009/03/20 10:24:48 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2009/03/20 10:24:48 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2009/03/20 10:24:48 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2009/03/20 10:24:47 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_852.nls
[2009/03/20 10:24:47 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_852.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10082.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10029.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10010.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10082.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10029.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10010.nls
[2009/03/20 10:24:47 | 00,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2009/03/20 10:24:47 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2009/03/20 10:24:47 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2009/03/20 10:24:47 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2009/03/20 10:24:47 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2009/03/20 10:24:47 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2009/03/20 10:24:47 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2009/03/20 10:24:47 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2009/03/20 10:24:45 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20127.nls
[2009/03/20 10:24:45 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_20127.nls
[2009/03/20 10:24:45 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2009/03/20 10:24:45 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2009/03/20 10:24:44 | 00,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2009/03/20 10:24:44 | 00,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2009/03/20 10:24:44 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2009/03/20 10:24:44 | 00,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2009/03/20 10:24:44 | 00,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2009/03/20 10:24:44 | 00,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2009/03/20 10:24:44 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2009/03/20 10:24:44 | 00,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2009/03/20 10:24:44 | 00,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2009/03/20 10:24:44 | 00,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2009/03/20 10:24:44 | 00,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2009/03/20 10:24:43 | 00,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2009/03/20 10:24:43 | 00,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2009/03/20 10:24:43 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2009/03/20 10:24:43 | 00,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2009/03/20 10:24:43 | 00,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2009/03/20 10:24:43 | 00,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2009/03/20 10:24:43 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2009/03/20 10:24:43 | 00,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2009/03/20 10:24:43 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2009/03/20 10:24:43 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2009/03/20 10:24:43 | 00,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2009/03/20 10:24:43 | 00,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2009/03/20 10:24:43 | 00,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2009/03/20 10:24:43 | 00,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2009/03/20 10:24:42 | 00,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2009/03/20 10:24:42 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\notepad.exe
[2009/03/20 10:24:42 | 00,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2009/03/20 10:24:42 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irenum.sys
[2009/03/20 10:24:42 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2009/03/20 10:24:42 | 00,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2009/03/20 10:24:41 | 00,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2009/03/20 10:24:33 | 00,077,881 | —- | C] () – C:\WINDOWS\System32\dllcache\plus.cat
[2009/03/20 10:24:33 | 00,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2009/03/20 10:24:33 | 00,017,916 | —- | C] () – C:\WINDOWS\System32\dllcache\sonic.cat
[2009/03/20 10:24:33 | 00,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2009/03/20 10:24:33 | 00,007,710 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2009/03/20 10:24:33 | 00,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2009/03/20 10:24:33 | 00,000,084 | -HS- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\All Users\Documents\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\desktop.ini
[2009/03/20 10:24:32 | 00,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2009/03/20 10:24:32 | 00,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2009/03/20 10:24:32 | 00,106,147 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2009/03/20 10:24:32 | 00,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2009/03/20 10:24:22 | 00,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2009/03/20 10:24:22 | 00,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2009/03/20 10:24:17 | 00,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/03/20 10:23:57 | 00,000,000 | -HSD | C] – C:\System Volume Information
[2009/03/20 10:23:57 | 00,000,000 | —D | C] – C:\Documents and Settings
[2009/03/20 10:23:56 | 00,229,600 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/20 10:23:07 | 00,000,209 | -HS- | C] () – C:\boot.ini
[2009/03/20 10:23:04 | 00,000,237 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2009/03/20 10:17:37 | 00,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2009/03/20 10:17:37 | 00,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2009/03/20 10:17:37 | 00,000,000 | R–D | C] – C:\WINDOWS\Web
[2009/03/20 10:17:37 | 00,000,000 | -H-D | C] – C:\WINDOWS\inf
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\twain_32
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Temp
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\export
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\config
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1025
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\system32
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\system
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\security
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Resources
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\repair
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\pchealth
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\mui
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\msapps
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\msagent
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Media
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\java
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\ime
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Help
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\ehome
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\dell
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Debug
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Cursors
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Config
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\addins
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS
[2009/03/08 14:22:30 | 00,049,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrating.dll.mui
[2009/03/08 14:22:18 | 00,002,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshta.exe.mui
[2009/03/08 14:21:06 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe.mui
[2009/03/08 14:20:54 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll.mui
[2009/03/08 04:33:40 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\corpol.dll

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2009/03/21 16:29:32 | 00,011,168 | -H– | M] () – C:\WINDOWS\System32\pijidefa
[2009/03/21 16:17:51 | 00,499,200 | —- | M] (OldTimer Tools) – C:\Documents and Settings\BrownHouse\Desktop\OTListIt2.exe
[2009/03/21 16:17:28 | 00,020,992 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\OTListIt2 directions.doc
[2009/03/21 15:01:21 | 00,171,004 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\HijackThis Logfileauswertung.htm
[2009/03/21 14:54:40 | 00,001,734 | —- | M] () – C:\Documents and Settings\BrownHouse\Desktop\HijackThis.lnk
[2009/03/21 14:44:52 | 01,791,165 | -HS- | M] () – C:\WINDOWS\System32\ovapuvek.ini
[2009/03/21 14:11:23 | 00,000,868 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2009/03/21 12:24:41 | 00,002,867 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\Memento.notes
[2009/03/21 12:21:18 | 00,091,648 | -HS- | M] () – C:\WINDOWS\System32\kevupavo.dll
[2009/03/21 12:21:04 | 00,127,488 | -HS- | M] () – C:\WINDOWS\System32\bslbur.dll
[2009/03/21 12:21:04 | 00,095,232 | -HS- | M] () – C:\WINDOWS\System32\kasivaga.dll
[2009/03/21 09:18:20 | 00,000,890 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/03/21 09:18:19 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/21 09:18:16 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/03/21 09:16:57 | 00,000,573 | —- | M] () – C:\WINDOWS\win.ini
[2009/03/21 09:16:57 | 00,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2009/03/21 09:16:57 | 00,000,209 | -HS- | M] () – C:\boot.ini
[2009/03/21 09:03:46 | 00,006,978 | —- | M] () – C:\logfile
[2009/03/21 01:21:13 | 00,003,584 | —- | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/21 01:03:52 | 00,359,424 | R— | M] () – C:\Documents and Settings\All Users\Documents\ESBK.mb
[2009/03/21 01:00:23 | 00,693,248 | R— | M] () – C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2009/03/21 00:42:12 | 00,000,446 | —- | M] () – C:\WINDOWS\tasks\EasyShare Registration Task.job
[2009/03/20 23:48:17 | 00,000,366 | -H– | M] () – C:\IPH.PH
[2009/03/20 23:39:27 | 00,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/03/20 23:34:48 | 00,000,081 | -HS- | M] () – C:\Documents and Settings\BrownHouse\My Documents\desktop.ini
[2009/03/20 23:34:36 | 00,229,600 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/20 23:33:29 | 05,353,274 | -H– | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\IconCache.db
[2009/03/20 23:33:07 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/03/20 22:44:29 | 00,000,000 | —- | M] () – C:\WINDOWS\nsreg.dat
[2009/03/20 21:58:03 | 00,499,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msvcp71.dll
[2009/03/20 21:58:03 | 00,348,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msvcr71.dll
[2009/03/20 21:58:03 | 00,278,528 | —- | M] (Real Networks, Inc) – C:\WINDOWS\System32\pncrt.dll
[2009/03/20 21:27:50 | 00,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/03/20 21:26:56 | 00,000,059 | —- | M] () – C:\WINDOWS\vbaddin.ini
[2009/03/20 21:20:29 | 00,000,629 | —- | M] () – C:\WINDOWS\Adobereg.db
[2009/03/20 21:17:30 | 00,000,742 | —- | M] () – C:\WINDOWS\EZPHOTO.INI
[2009/03/20 21:17:23 | 00,000,114 | —- | M] () – C:\WINDOWS\kpcms.ini
[2009/03/20 20:57:10 | 00,501,230 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/03/20 20:57:10 | 00,441,124 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/03/20 20:57:10 | 00,071,060 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/03/20 19:13:21 | 00,001,165 | —- | M] () – C:\WINDOWS\ipconfig.dat
[2009/03/20 19:12:58 | 00,000,299 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\Linksys settings.htm
[2009/03/20 19:09:12 | 00,001,165 | —- | M] () – C:\WINDOWS\checkip.dat
[2009/03/20 18:49:28 | 00,014,664 | —- | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/03/20 18:49:00 | 00,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2009/03/20 18:30:49 | 00,250,048 | RHS- | M] () – C:\ntldr
[2009/03/20 18:14:36 | 34,273,102 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/03/20 18:14:21 | 00,046,680 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/03/20 18:10:59 | 00,150,258 | —- | M] () – C:\WINDOWS\System32\LexFiles.ulf
[2009/03/20 16:38:28 | 00,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/03/20 16:15:33 | 00,107,912 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/03/20 16:15:33 | 00,010,520 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2009/03/20 16:15:28 | 00,325,640 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/03/20 16:15:27 | 00,027,656 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/03/20 16:15:26 | 06,061,540 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/03/20 16:15:26 | 00,401,372 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/03/20 15:44:59 | 00,000,133 | —- | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\fusioncache.dat
[2009/03/20 15:40:06 | 00,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2009/03/20 15:39:32 | 00,000,237 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2009/03/20 15:36:27 | 00,000,084 | -HS- | M] () – C:\Documents and Settings\BrownHouse\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 15:36:27 | 00,000,084 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 15:36:22 | 00,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2009/03/20 15:36:22 | 00,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2009/03/20 15:36:22 | 00,000,000 | RHS- | M] () – C:\IO.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | M] () – C:\WINDOWS\control.ini
[2009/03/20 15:36:22 | 00,000,000 | —- | M] () – C:\CONFIG.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2009/03/20 15:36:16 | 00,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2009/03/20 15:36:16 | 00,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2009/03/20 15:36:07 | 00,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2009/03/20 15:34:54 | 00,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/03/20 15:34:54 | 00,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/03/20 15:32:29 | 00,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/03/20 15:32:19 | 00,000,036 | —- | M] () – C:\WINDOWS\vb.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\BrownHouse\Application Data\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\All Users\Documents\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\All Users\Application Data\desktop.ini
[2009/03/09 15:06:57 | 00,015,688 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2009/03/09 15:06:56 | 00,064,160 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/03/08 14:22:46 | 01,241,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieframe.dll.mui
[2009/03/08 14:22:46 | 01,241,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2009/03/08 14:22:30 | 00,049,152 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msrating.dll.mui
[2009/03/08 14:22:18 | 00,002,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshta.exe.mui
[2009/03/08 14:21:06 | 00,010,240 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\advpack.dll.mui
[2009/03/08 14:21:06 | 00,004,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe.mui
[2009/03/08 14:20:54 | 00,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll.mui
[2009/03/08 14:09:26 | 00,638,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iexplore.exe
[2009/03/08 14:09:26 | 00,391,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2009/03/08 14:09:26 | 00,391,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2009/03/08 04:41:16 | 05,937,152 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtml.dll
[2009/03/08 04:41:16 | 05,937,152 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2009/03/08 04:39:48 | 11,063,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieframe.dll
[2009/03/08 04:39:48 | 11,063,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/03/08 04:35:10 | 00,385,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec
[2009/03/08 04:34:58 | 00,914,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wininet.dll
[2009/03/08 04:34:58 | 00,914,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2009/03/08 04:34:56 | 01,206,784 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\urlmon.dll
[2009/03/08 04:34:56 | 01,206,784 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2009/03/08 04:34:52 | 01,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2009/03/08 04:34:52 | 01,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2009/03/08 04:34:48 | 00,236,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\webcheck.dll
[2009/03/08 04:34:48 | 00,236,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\webcheck.dll
[2009/03/08 04:34:48 | 00,208,384 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\WinFXDocObj.exe
[2009/03/08 04:34:30 | 00,043,008 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\licmgr10.dll
[2009/03/08 04:34:30 | 00,043,008 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licmgr10.dll
[2009/03/08 04:34:28 | 00,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\url.dll
[2009/03/08 04:34:28 | 00,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\url.dll
[2009/03/08 04:34:18 | 00,193,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msrating.dll
[2009/03/08 04:34:18 | 00,193,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msrating.dll
[2009/03/08 04:34:18 | 00,109,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\occache.dll
[2009/03/08 04:34:18 | 00,109,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2009/03/08 04:33:48 | 00,759,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\VGX.dll
[2009/03/08 04:33:40 | 00,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\corpol.dll
[2009/03/08 04:33:40 | 00,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\corpol.dll
[2009/03/08 04:33:26 | 00,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2009/03/08 04:33:26 | 00,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2009/03/08 04:33:16 | 00,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jscript.dll
[2009/03/08 04:33:16 | 00,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jscript.dll
[2009/03/08 04:33:08 | 00,229,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieaksie.dll
[2009/03/08 04:33:08 | 00,229,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieaksie.dll
[2009/03/08 04:33:06 | 00,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\vbscript.dll
[2009/03/08 04:33:06 | 00,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vbscript.dll
[2009/03/08 04:33:02 | 00,125,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieakeng.dll
[2009/03/08 04:33:02 | 00,125,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieakeng.dll
[2009/03/08 04:32:56 | 00,072,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admparse.dll
[2009/03/08 04:32:56 | 00,072,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\admparse.dll
[2009/03/08 04:32:54 | 00,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2009/03/08 04:32:54 | 00,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2009/03/08 04:32:52 | 00,163,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieakui.dll
[2009/03/08 04:32:52 | 00,163,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieakui.dll
[2009/03/08 04:32:52 | 00,036,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieudinit.exe
[2009/03/08 04:32:50 | 00,071,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iesetup.dll
[2009/03/08 04:32:50 | 00,071,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iesetup.dll
[2009/03/08 04:32:50 | 00,055,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iernonce.dll
[2009/03/08 04:32:50 | 00,055,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iernonce.dll
[2009/03/08 04:32:48 | 00,128,512 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\advpack.dll
[2009/03/08 04:32:48 | 00,128,512 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\advpack.dll
[2009/03/08 04:32:46 | 00,094,720 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inseng.dll
[2009/03/08 04:32:46 | 00,094,720 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inseng.dll
[2009/03/08 04:32:26 | 00,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2009/03/08 04:32:26 | 00,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/03/08 04:32:22 | 01,985,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iertutil.dll
[2009/03/08 04:32:22 | 01,985,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/03/08 04:32:04 | 00,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2009/03/08 04:32:04 | 00,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2009/03/08 04:31:56 | 00,183,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2009/03/08 04:31:56 | 00,183,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2009/03/08 04:31:54 | 00,013,312 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedssync.exe
[2009/03/08 04:31:52 | 00,059,904 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\icardie.dll
[2009/03/08 04:31:52 | 00,059,904 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icardie.dll
[2009/03/08 04:31:52 | 00,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2009/03/08 04:31:52 | 00,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/03/08 04:31:44 | 00,348,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dxtmsft.dll
[2009/03/08 04:31:44 | 00,348,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxtmsft.dll
[2009/03/08 04:31:38 | 00,216,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dxtrans.dll
[2009/03/08 04:31:38 | 00,216,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxtrans.dll
[2009/03/08 04:31:38 | 00,034,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imgutil.dll
[2009/03/08 04:31:38 | 00,034,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imgutil.dll
[2009/03/08 04:31:36 | 00,046,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\pngfilt.dll
[2009/03/08 04:31:36 | 00,046,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pngfilt.dll
[2009/03/08 04:31:26 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtmled.dll
[2009/03/08 04:31:26 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2009/03/08 04:31:18 | 00,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtmler.dll
[2009/03/08 04:31:18 | 00,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmler.dll
[2009/03/08 04:31:02 | 01,638,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtml.tlb
[2009/03/08 04:31:02 | 01,638,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.tlb
[2009/03/08 04:31:02 | 00,045,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshta.exe
[2009/03/08 04:31:02 | 00,045,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshta.exe
[2009/03/08 04:30:56 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\tdc.ocx
[2009/03/08 04:30:56 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdc.ocx
[2009/03/08 04:24:28 | 00,068,608 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hmmapi.dll
[2009/03/08 04:22:46 | 00,164,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieui.dll
[2009/03/08 04:22:38 | 00,156,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msls31.dll
[2009/03/08 04:22:38 | 00,156,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msls31.dll
[2009/03/08 04:15:06 | 00,057,667 | —- | M] () – C:\WINDOWS\System32\ieuinit.inf
[2009/03/08 04:11:12 | 00,445,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieapfltr.dll
[2009/03/08 04:11:12 | 00,445,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2009/02/28 00:55:00 | 00,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iecompat.dll

========== LOP Check ==========

[2009/03/21 08:55:27 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2009/03/20 16:37:06 | 00,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2009/03/20 23:47:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\acccore
[2009/03/20 16:02:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Adobe
[2009/03/20 23:48:04 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AIM Toolbar
[2009/03/20 23:47:45 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL
[2009/03/21 01:25:01 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2009/03/21 08:53:40 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple
[2009/03/21 08:55:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/03/20 23:46:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ashampoo
[2009/03/20 16:15:20 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg8
[2009/03/20 15:45:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DIGStream
[2009/03/20 22:41:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google
[2009/03/20 23:36:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google Updater
[2009/03/21 00:46:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Kodak
[2009/03/20 16:36:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Lavasoft
[2009/03/21 15:09:45 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/03/20 22:43:26 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2009/03/20 18:06:40 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\V505
[2009/03/20 18:06:41 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\V505 Series
[2009/03/20 23:47:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/03/20 18:53:57 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/03/20 23:13:28 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2009/03/20 23:38:15 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2009/03/21 15:10:28 | 00,000,000 | -H-D | M] – C:\Documents and Settings\BrownHouse\Application Data
[2009/03/21 01:25:17 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\acccore
[2009/03/20 21:04:55 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Adobe
[2009/03/20 16:04:25 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\AdobeUM
[2009/03/20 16:19:27 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\AVGTOOLBAR
[2009/03/20 18:49:31 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Dell Imaging Toolbox
[2009/03/21 00:36:53 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\FUJIFILM
[2009/03/20 22:42:05 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Google
[2009/03/20 15:53:30 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Identities
[2009/03/20 16:37:42 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Macromedia
[2009/03/21 16:14:02 | 00,000,000 | –SD | M] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft
[2009/03/20 21:23:48 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft Web Folders
[2009/03/20 22:44:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Mozilla
[2009/03/21 01:26:22 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mp3rocket
[2009/03/20 22:43:23 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\NCH Swift Sound
[2009/03/21 15:10:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Opera
[2009/03/21 10:44:34 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Real
[2009/03/20 23:54:53 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Sun
[2009/03/20 18:47:19 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\V505 Series
[2009/03/20 23:15:11 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Yahoo!
[2009/03/20 16:38:28 | 00,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2004/08/10 07:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/03/21 00:42:12 | 00,000,446 | —- | M] () – C:\WINDOWS\Tasks\EasyShare Registration Task.job
[2009/03/21 14:11:23 | 00,000,868 | —- | M] () – C:\WINDOWS\Tasks\Google Software Updater.job
[2009/03/21 09:18:20 | 00,000,890 | —- | M] () – C:\WINDOWS\Tasks\GoogleUpdateTaskMachine.job
[2009/03/21 09:18:19 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT

========== Purity Check ==========


========== Custom Scans ==========


< %systemroot%\System32\antiwpa.dll >

< %systemroot%\SYSTEM32\wpa.dll >

< %systemroot%\setup\scripts\biestart.exe >

< %systemroot%\system32\drivers\royal.sys >

< %systemroot%\system32\serauth1.dll >

< %systemroot%\system32\serauth2.dll >

< %systemroot%\system32\sysaudio.sys >

< %systemroot%\system32\wdmaud.sys >

< %systemroot%\system32\aeaudio.sys >
< End of report >
Post #4
And the Extras.Txt

Thank you in advance for all your help!

OTListIt Extras logfile created on: 3/21/2009 4:21:01 PM - Run 1
OTListIt2 by OldTimer - Version 2.0.7.0 Folder = C:\Documents and Settings\BrownHouse\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.07 Mb Total Physical Memory | 336.58 Mb Available Physical Memory | 65.99% Memory free
1.22 Gb Paging File | 0.63 Gb Available in Paging File | 51.98% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 69.79 Gb Total Space | 57.08 Gb Free Space | 81.78% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: BROWN
Current User Name: BrownHouse
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = htmlfile] – C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe (AVG Technologies CZ, s.r.o.)
C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe (AVG Technologies CZ, s.r.o.)
C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe (AVG Technologies CZ, s.r.o.)
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\Dell V505\dldwamon.exe:*:Enabled:Dell Device Monitor ()
C:\Program Files\Dell V505\frun.exe:*:Enabled:Dell Imaging Toolbox ()
C:\Program Files\Dell V505\dldwfax.exe:*:Enabled:Fax software ()
C:\Program Files\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe:*:Enabled:ABBYY FineReader (ABBYY (BIT Software))
C:\WINDOWS\system32\dldwcoms.exe:*:Enabled:Lexmark Communications System ( )
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger (Yahoo! Inc.)
C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader (AOL LLC)
C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM (AOL LLC)
C:\Program Files\Java\jre1.6.0_01\bin\javaw.exe:*:Enabled:Java™ Platform SE binary (Sun Microsystems, Inc.)
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare (Eastman Kodak Company)
C:\WINDOWS\explorer.exe:*:Enabled:Explorer (Microsoft Corporation)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000409-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{03EDED24-8375-407D-A721-4643D9768BE1}" = kgchlwn
"{073F22CE-9A5B-4A40-A604-C7270AC6BF34}" = ESSSONIC
"{09B71986-2AC5-482d-B6CB-42EA34F4F85B}" = Dell Toolbar
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{11F3F858-4131-4FFA-A560-3FE282933B6E}" = kgchday
"{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}" = ESSPCD
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24ED4D80-8294-11D5-96CD-0040266301AD}" = FinePixViewer Ver.4.3
"{25EF00BE-F17B-11D6-88EA-000476CD2443}" = Verizon Online
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 11
"{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}" = essvatgt
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{42938595-0D83-404D-9F73-F8177FDD531A}" = ESScore
"{4537EA4B-F603-4181-89FB-2953FC695AB1}" = netbrdg
"{5316DFC9-CE99-4458-9AB3-E8726EDE0210}" = skin0001
"{548EAC70-EE00-11DD-908C-005056806466}" = Google Earth
"{5490882C-6961-11D5-BAE5-00E0188E010B}" = FUJIFILM USB Driver
"{605A4E39-613C-4A12-B56F-DEFBE6757237}" = SHASTA
"{608D2A3C-6889-4C11-9B54-A42F45ACBFDB}" = fflink
"{643EAE81-920C-4931-9F0B-4B343B225CA6}" = ESSBrwr
"{693C08A7-9E76-43FF-B11E-9A58175474C4}" = kgckids
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{8943CE61-53BD-475E-90E1-A580869E98A2}" = staticcr
"{8A502E38-29C9-49FA-BCFA-D727CA062589}" = ESSTOOLS
"{8A8664E1-84C8-4936-891C-BC1F07797549}" = kgcvday
"{8E92D746-CD9F-4B90-9668-42B74C14F765}" = ESSini
"{91517631-A9F3-4B7C-B482-43E0068FD55A}" = ESSgui
"{9941F0AA-B903-4AF4-A055-83A9815CC011}" = Sonic Encoders
"{999D43F4-9709-4887-9B1A-83EBB15A8370}" = VPRINTOL
"{9BD54685-1496-46A5-AB62-357CD140ED8B}" = kgcinvt
"{A1588373-1D86-4D44-86C9-78ABD190F9CC}" = kgcmove
"{A2A60894-E3ED-46FE-9A6A-7CF7A87572A0}" = Opera 9.64
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A00000000001}" = Adobe Reader 6.0.1
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}" = ESSCDBK
"{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}" = OfotoXMI
"{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}" = CCScore
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D00353E1-9A80-11D8-A6E6-0000E24CCC1B}" = Digital Camera
"{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Kodak EasyShare software
"{DB02F716-6275-42E9-B8D2-83BA2BF5100B}" = SFR
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E18B549C-5D15-45DA-8D8F-8FD2BD946344}" = kgcbaby
"{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}" = tooltips
"{F22C222C-3CE2-4A4B-A83F-AF4681371ABE}" = kgcbase
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}" = SKINXSDK
"{F9593CFB-D836-49BC-BFF1-0E669A411D9F}" = WIRELESS
"{FCD9CD52-7222-4672-94A0-A722BA702FD0}" = Dell Resource CD
"{FCDB1C92-03C6-4C76-8625-371224256091}" = ESSPDock
"12133444-BF36-4d4e-B7FB-A3424C645DE4" = GemMaster Mystic
"Ad-Aware" = Ad-Aware
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe PhotoDeluxe 2.0" = Adobe PhotoDeluxe 2.0
"Adobe Type Manager 4.0" = Adobe Type Manager 4.0
"AIM Toolbar" = AIM Toolbar
"AIM_6" = AIM 6
"All ATI Software" = ATI - Software Uninstall Utility
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE
"ATI Display Driver" = ATI Display Driver
"AVG8Uninstall" = AVG 8.5
"B3EE3001-DC24-4cd1-8743-5692C716659F" = Otto
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1" = Conexant D850 56K V.9x DFVc Modem
"Dell V505" = Dell V505
"Deluxe Pacman_is1" = Deluxe Pacman (1.70)
"dinerdash2restaurantrescue" = Diner Dash 2 - Restaurant Rescue
"ESPNMotion" = ESPNMotion
"Google Updater" = Google Updater
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Memento_is1" = Memento v1.09
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MoffFreeCalc_is1" = Moffsoft FreeCalc
"Mozilla Firefox (3.0.7)" = Mozilla Firefox (3.0.7)
"MP3 Rocket" = MP3 Rocket
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PhoTagsExpress" = PhoTags Express
"PhotoScape" = PhotoScape
"PROSet" = Intel® PRO Network Connections Drivers
"RealArcade" = RealArcade
"RealPlayer 6.0" = RealPlayer
"Scribe" = Express Scribe
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"supercollapseii" = Super Collapse! II
"supercollapseiiplatinum" = Super Collapse! II Platinum
"teddyfactory" = Teddy Factory
"ViewpointMediaPlayer" = Viewpoint Media Player
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3/20/2009 3:33:01 PM | Computer Name = BROWN | Source = ASP.NET 1.0.3705.6018 | ID = 1031
Description =

Error - 3/20/2009 4:37:31 PM | Computer Name = BROWN | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 3/21/2009 12:49:10 AM | Computer Name = BROWN | Source = Application Hang | ID = 1002
Description = Hanging application EasyShare.exe, version 6.40.53.95, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 3/21/2009 12:49:11 AM | Computer Name = BROWN | Source = Application Hang | ID = 1002
Description = Hanging application EasyShare.exe, version 6.40.53.95, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 3/21/2009 12:49:12 AM | Computer Name = BROWN | Source = Application Hang | ID = 1002
Description = Hanging application EasyShare.exe, version 6.40.53.95, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 3/21/2009 3:09:36 PM | Computer Name = BROWN | Source = Application Error | ID = 1000
Description = Faulting application firefox.exe, version 1.9.0.3334, faulting module
kasivaga.dll, version 0.0.0.0, fault address 0x0000be3b.

Error - 3/21/2009 3:18:46 PM | Computer Name = BROWN | Source = Application Error | ID = 1000
Description = Faulting application firefox.exe, version 1.9.0.3334, faulting module
kasivaga.dll, version 0.0.0.0, fault address 0x0000be3b.

[ System Events ]
Error - 3/21/2009 12:47:53 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7000
Description = The dldwCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 3/21/2009 3:08:46 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the dldwCATSCustConnectService
service to connect.

Error - 3/21/2009 3:08:46 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7000
Description = The dldwCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 3/21/2009 7:27:50 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the dldwCATSCustConnectService
service to connect.

Error - 3/21/2009 7:27:50 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7000
Description = The dldwCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 3/21/2009 9:02:55 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the dldwCATSCustConnectService
service to connect.

Error - 3/21/2009 9:02:55 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7000
Description = The dldwCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 3/21/2009 9:18:41 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the dldwCATSCustConnectService
service to connect.

Error - 3/21/2009 9:18:41 AM | Computer Name = BROWN | Source = Service Control Manager | ID = 7000
Description = The dldwCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 3/21/2009 12:23:23 PM | Computer Name = BROWN | Source = DCOM | ID = 10010
Description = The server {0002DF01-0000-0000-C000-000000000046} did not register
with DCOM within the required timeout.


< End of report >
Post #5
hello

Run OTList2.exe
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

    :OTLI
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O2 - BHO: (no name) - {528aa55b-1404-4b2f-a142-e1639863928d} - C:\WINDOWS\system32\bslbur.dll ()
O2 - BHO: (no name) - {ae5e4abc-f768-40a1-bb31-bf717c6272bb} - C:\WINDOWS\system32\totodele.dll ()
O4 - HKLM..\Run: [a49c1a25] rundll32.exe "C:\WINDOWS\system32\kevupavo.dll",b ()
O4 - HKLM..\Run: [CPMa7af29b9] Rundll32.exe "c:\windows\system32\kasivaga.dll",a ()
O4 - HKLM..\Run: [witurivoka] Rundll32.exe "C:\WINDOWS\system32\jipapema.dll",s ()
O20 - AppInit_DLLs: (C:\WINDOWS\system32\kuhumepe.dll) - C:\WINDOWS\system32\kuhumepe.dll ()
O20 - AppInit_DLLs: (bslbur.dll) - C:\WINDOWS\system32\bslbur.dll ()
O20 - AppInit_DLLs: (c:\windows\system32\kasivaga.dll) - c:\windows\system32\kasivaga.dll ()
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kasivaga.dll ()
O22 - SharedTaskScheduler: {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - STS - c:\windows\system32\kasivaga.dll ()
[2009/03/21 12:21:32 | 01,791,165 | -HS- | C] () – C:\WINDOWS\System32\ovapuvek.ini
[2009/03/21 12:21:09 | 00,127,488 | -HS- | C] () – C:\WINDOWS\System32\bslbur.dll

:Services

:Reg

:Files

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL2 log ( don't check the boxes beside LOP Check or Purity this time )



Please download ATF Cleaner by Atribune.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.




Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.






Go to Kaspersky website and perform an online antivirus scan.

  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As….
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button. Then post it here.
Post #6
Here is the new OTL2 log ========== OTLISTIT ========== Process explorer.exe killed successfully! No active process named AAWService.exe was found! Process AAWTray.exe killed successfully! Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{528aa55b-1404-4b2f-a142-e1639863928d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{528aa55b-1404-4b2f-a142-e1639863928d}\ not found. DllUnregisterServer procedure not found in C:\WINDOWS\system32\bslbur.dll C:\WINDOWS\system32\bslbur.dll NOT unregistered. C:\WINDOWS\system32\bslbur.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae5e4abc-f768-40a1-bb31-bf717c6272bb}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ae5e4abc-f768-40a1-bb31-bf717c6272bb}\ deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\totodele.dll C:\WINDOWS\system32\totodele.dll NOT unregistered. C:\WINDOWS\system32\totodele.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\a49c1a25 deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\kevupavo.DLL C:\WINDOWS\system32\kevupavo.DLL NOT unregistered. C:\WINDOWS\system32\kevupavo.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\CPMa7af29b9 deleted successfully. DllUnregisterServer procedure not found in c:\windows\system32\kasivaga.DLL c:\windows\system32\kasivaga.DLL NOT unregistered. c:\windows\system32\kasivaga.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\witurivoka deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\jipapema.DLL C:\WINDOWS\system32\jipapema.DLL NOT unregistered. C:\WINDOWS\system32\jipapema.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\WINDOWS\system32\kuhumepe.dll deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\kuhumepe.dll C:\WINDOWS\system32\kuhumepe.dll NOT unregistered. C:\WINDOWS\system32\kuhumepe.dll moved successfully. Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:bslbur.dll scheduled to be deleted on reboot. File C:\WINDOWS\system32\bslbur.dll not found. Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\windows\system32\kasivaga.dll scheduled to be deleted on reboot. File c:\windows\system32\kasivaga.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\SSODL deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}\ deleted successfully. File c:\windows\system32\kasivaga.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\\{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}\ deleted successfully. File c:\windows\system32\kasivaga.dll not found. C:\WINDOWS\System32\ovapuvek.ini moved successfully. File C:\WINDOWS\System32\bslbur.dll not found. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== ========== COMMANDS ========== File delete failed. C:\Documents and Settings\BrownHouse\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\BrownHouse\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\BrownHouse\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\History\History.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Cookies\index.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_84.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. FireFox cache emptied. Opera cache emptied. Temp folders emptied. Explorer started successfully OTListIt2 by OldTimer - Version 2.0.7.0 log created on 03222009_091548 Files moved on Reboot… C:\Documents and Settings\BrownHouse\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat moved successfully. C:\Documents and Settings\BrownHouse\Local Settings\Temp\History\History.IE5\index.dat moved successfully. C:\Documents and Settings\BrownHouse\Local Settings\Temp\Cookies\index.dat moved successfully. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat moved successfully. C:\WINDOWS\temp\Temporary Internet Files\Content.IE5\index.dat moved successfully. C:\WINDOWS\temp\History\History.IE5\index.dat moved successfully. C:\WINDOWS\temp\Cookies\index.dat moved successfully. File C:\WINDOWS\temp\Perflib_Perfdata_84.dat not found! Registry entries deleted on Reboot… Registry delete failed. :HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:bslbur.dll scheduled to be deleted on reboot. Registry value :HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\windows\system32\kasivaga.dll deleted successfully.
Post #7
MBAM log Malwarebytes' Anti-Malware 1.34 Database version: 1883 Windows 5.1.2600 Service Pack 3 3/22/2009 9:42:41 AM mbam-log-2009-03-22 (09-42-41).txt Scan type: Quick Scan Objects scanned: 62980 Time elapsed: 5 minute(s), 12 second(s) Memory Processes Infected: 0 Memory Modules Infected: 3 Registry Keys Infected: 10 Registry Values Infected: 5 Registry Data Items Infected: 3 Folders Infected: 0 Files Infected: 5 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: C:\WINDOWS\system32\dubuwemo.dll (Trojan.Vundo.H) -> Delete on reboot. c:\WINDOWS\system32\hidumule.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\cxirmw.dll (Trojan.Vundo.H) -> Delete on reboot. Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f8d7c8ea-f50d-4b53-9b9d-ad76b86bc9bb} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{f8d7c8ea-f50d-4b53-9b9d-ad76b86bc9bb} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae5e4abc-f768-40a1-bb31-bf717c6272bb} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{ae5e4abc-f768-40a1-bb31-bf717c6272bb} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f8d7c8ea-f50d-4b53-9b9d-ad76b86bc9bb} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a49c1a25 (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpma7af29b9 (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\witurivoka (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.Vundo.H) -> Quarantined and deleted successfully. Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\hidumule.dll -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\hidumule.dll -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\system32\cxirmw.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\dubuwemo.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\omewubud.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. c:\WINDOWS\system32\hidumule.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\fivipute.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
Post #8
Kapersky report ——————————————————————————– KASPERSKY ONLINE SCANNER 7 REPORT Sunday, March 22, 2009 Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Sunday, March 22, 2009 14:38:10 Records in database: 1949907 ——————————————————————————– Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ Scan statistics: Files scanned: 52648 Threat name: 0 Infected objects: 0 Suspicious objects: 0 Duration of the scan: 01:20:39 No malware has been detected. The scan area is clean. The selected area was scanned.
Post #9
Hi Ethel1975,

Rorschach112 asked me if I would look after you as he had something unexpected come up.

Could you please do the following:

Download ComboFix from one of these locations:
Link 1
Link 2
Link 3

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

  • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]
  • Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please advise.
5. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now


Thank-you
CB
Post #10
I want to thank you in advance for your help. I greatly appreciate it. I downloaded ComboFix. I turned off my AVG and AdAware and attempted to run ComboFix. While trying to run Combo Fix, I received 3 error windows with the computer beeping each time followed by a ComboFix trying to run and then a window about correct usage. I even double-checked my AVG to make sure it was off before running the program so I'm not sure why it was still picking up that it was running. I have attached the images of each of the errors as JPEG files. Let me know if you have any problems with them. The first error was the "Incompatible OS", followed by the "AVG Warning1", then the "AVG warning 2" and then the ComboFix proper usage message.

Attachments:

Post #12
Okay, it ran this time. For some reason, after I closed out of AVG last time, it kicked back on. The computer seems to be running fine, but I haven't used IE or Firefox since this started. I'm using Opera to access everything right now.

Here's the log

ComboFix 09-03-19.02 - BrownHouse 2009-03-22 15:38:52.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.283 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated)
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\e100bmsg.dll
c:\windows\system32\fulemege.dll

.
((((((((((((((((((((((((( Files Created from 2009-02-22 to 2009-03-22 )))))))))))))))))))))))))))))))
.

2009-03-22 09:31 . 2009-03-22 09:31 d——– c:\documents and settings\BrownHouse\Application Data\Malwarebytes
2009-03-22 09:30 . 2009-03-22 09:30 d——– c:\program files\Malwarebytes' Anti-Malware
2009-03-22 09:30 . 2009-03-22 09:30 d——– c:\documents and settings\All Users\Application Data\Malwarebytes
2009-03-22 09:30 . 2009-02-11 10:19 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-22 09:30 . 2009-02-11 10:19 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2009-03-22 09:15 . 2009-03-22 09:15 d——– C:\_OTListIt
2009-03-21 14:54 . 2009-03-21 14:54 d——– c:\program files\Trend Micro
2009-03-21 14:43 . 2009-03-09 15:06 15,688 –a—— c:\windows\system32\lsdelete.exe
2009-03-21 13:12 . 2009-03-21 14:24 d–h—– C:\$AVG8.VAULT$
2009-03-21 11:19 . 2009-03-21 11:19 d–hs—- c:\documents and settings\LocalService\IETldCache
2009-03-21 08:55 . 2009-03-21 08:55 d——– c:\documents and settings\All Users\Application Data\Apple Computer
2009-03-21 08:53 . 2009-03-21 08:53 d——– c:\program files\Apple Software Update
2009-03-21 08:53 . 2009-03-21 08:53 d——– c:\documents and settings\All Users\Application Data\Apple
2009-03-21 01:25 . 2009-03-21 01:25 d——– c:\documents and settings\BrownHouse\Application Data\acccore
2009-03-21 01:08 . 2009-03-21 01:08 d——– c:\windows\Setup533
2009-03-21 01:08 . 2002-10-20 20:37 515,803 –a—— c:\windows\system32\drivers\Ca533av.sys
2009-03-21 01:08 . 2002-01-19 00:33 131,072 –a—— c:\windows\system32\Sp5x_32.dll
2009-03-21 01:08 . 2000-04-11 21:25 118,784 –a—— c:\windows\ShowBmp.exe
2009-03-21 01:08 . 2003-05-29 20:06 65,536 –a—— c:\windows\amcap533.exe
2009-03-21 01:08 . 2002-07-30 04:40 16,384 –a—— c:\windows\system32\Dext533.ax
2009-03-21 01:08 . 2002-07-24 20:19 10,986 –a—— c:\windows\system32\drivers\Bulk533.sys
2009-03-21 01:08 . 2003-01-05 22:33 1,325 –a—— c:\windows\Remove.ini
2009-03-21 01:07 . 2009-03-21 01:11 d——– c:\program files\PhoTags Express
2009-03-21 00:48 . 2009-03-21 09:03 6,978 –a—— C:\logfile
2009-03-21 00:45 . 2009-03-21 08:55 d——– c:\program files\QuickTime
2009-03-21 00:44 . 2001-08-17 22:36 5,632 –a—— c:\windows\system32\ptpusb.dll
2009-03-21 00:43 . 2009-03-21 00:43 d——– c:\program files\Common Files\Kodak
2009-03-21 00:43 . 2008-04-13 20:12 159,232 –a—— c:\windows\system32\ptpusd.dll
2009-03-21 00:42 . 2009-03-21 00:44 d——– c:\program files\Kodak
2009-03-21 00:41 . 2009-03-21 00:46 d——– c:\documents and settings\All Users\Application Data\Kodak
2009-03-21 00:36 . 2009-03-21 00:36 d——– c:\documents and settings\BrownHouse\Application Data\FUJIFILM
2009-03-21 00:32 . 2009-03-21 00:32 d——– c:\program files\REGSHAVE
2009-03-21 00:32 . 2009-03-21 00:32 d——– c:\program files\FinePixViewer
2009-03-21 00:32 . 2003-09-04 01:45 274,432 –a—— c:\windows\system32\FFTIFF16.dll
2009-03-21 00:32 . 2004-07-24 12:28 155,648 –a—— c:\windows\system32\FFRAFLIB.DLL
2009-03-21 00:32 . 2001-11-25 07:11 81,924 ——— c:\windows\system32\drivers\VC4CB104.SYS
2009-03-21 00:32 . 2002-02-05 12:33 69,632 ——— c:\windows\system32\FREGSHEX.DLL
2009-03-21 00:32 . 2002-02-27 07:27 65,536 ——— c:\windows\system32\FINFCHECK.dll
2009-03-21 00:32 . 2002-06-25 10:06 45,056 ——— c:\windows\system32\FINFCOPY.dll
2009-03-21 00:32 . 2002-02-13 06:00 45,056 ——— c:\windows\system32\FCLKBTN.DLL
2009-03-21 00:30 . 2009-03-21 00:30 410,984 –a—— c:\windows\system32\deploytk.dll
2009-03-20 23:57 . 2009-03-22 13:34 d——– c:\documents and settings\BrownHouse\Shared
2009-03-20 23:57 . 2009-03-22 13:35 d——– c:\documents and settings\BrownHouse\Incomplete
2009-03-20 23:55 . 2009-03-21 00:30 d——– c:\program files\Java
2009-03-20 23:55 . 2009-03-20 23:55 d——– c:\program files\Common Files\Java
2009-03-20 23:55 . 2009-03-21 00:30 73,728 –a—— c:\windows\system32\javacpl.cpl
2009-03-20 23:50 . 2009-03-20 23:57 d——– c:\program files\MP3 Rocket
2009-03-20 23:50 . 2009-03-21 01:26 d——– c:\documents and settings\BrownHouse\Application Data\mp3rocket
2009-03-20 23:48 . 2009-03-20 23:49 d——– c:\program files\PhotoScape
2009-03-20 23:48 . 2009-03-20 23:48 d——– c:\program files\Common Files\Software Update Utility
2009-03-20 23:48 . 2009-03-20 23:48 d——– c:\program files\AIM Toolbar
2009-03-20 23:48 . 2009-03-20 23:48 d——– c:\documents and settings\All Users\Application Data\AIM Toolbar
2009-03-20 23:47 . 2009-03-20 23:47 d——– c:\program files\Viewpoint
2009-03-20 23:47 . 2009-03-20 23:47 d——– c:\program files\Common Files\AOL
2009-03-20 23:47 . 2009-03-20 23:48 d——– c:\program files\AIM6
2009-03-20 23:47 . 2009-03-20 23:47 d——– c:\documents and settings\All Users\Application Data\Viewpoint
2009-03-20 23:47 . 2009-03-21 01:25 d——– c:\documents and settings\All Users\Application Data\AOL OCP
2009-03-20 23:47 . 2009-03-20 23:47 d——– c:\documents and settings\All Users\Application Data\AOL
2009-03-20 23:47 . 2009-03-20 23:47 d——– c:\documents and settings\All Users\Application Data\acccore
2009-03-20 23:47 . 2009-03-20 23:48 366 –ah—– C:\IPH.PH
2009-03-20 23:46 . 2009-03-20 23:46 d——– c:\program files\Ashampoo
2009-03-20 23:46 . 2009-03-20 23:46 d——– c:\documents and settings\All Users\Application Data\ashampoo
2009-03-20 23:45 . 2009-03-20 23:46 d——– c:\program files\Deluxe Pacman
2009-03-20 23:45 . 2009-03-20 23:45 d——– c:\documents and settings\BrownHouse\Deluxe Pacman
2009-03-20 23:39 . 2009-01-09 15:19 1,089,593 —–c— c:\windows\system32\dllcache\ntprint.cat
2009-03-20 23:37 . 2009-03-20 23:37 d–hs—- c:\documents and settings\BrownHouse\PrivacIE
2009-03-20 23:34 . 2009-03-20 23:34 d–hs—- c:\documents and settings\BrownHouse\IETldCache
2009-03-20 23:33 . 2009-03-20 23:33 d——– c:\windows\ie8updates
2009-03-20 23:30 . 2009-03-20 23:31 d–h-c— c:\windows\ie8
2009-03-20 23:27 . 2009-02-28 00:55 105,984 —–c— c:\windows\system32\dllcache\iecompat.dll
2009-03-20 23:15 . 2009-03-20 23:15 d——– c:\documents and settings\BrownHouse\Application Data\Yahoo!
2009-03-20 23:15 . 2009-03-20 23:38 d——– c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-03-20 23:13 . 2009-03-20 23:15 d——– c:\program files\Yahoo!
2009-03-20 23:13 . 2009-03-20 23:13 d——– c:\documents and settings\All Users\Application Data\Yahoo!
2009-03-20 22:44 . 2009-03-20 22:44 0 –a—— c:\windows\nsreg.dat
2009-03-20 22:43 . 2009-03-20 22:43 d——– c:\program files\NCH Swift Sound
2009-03-20 22:43 . 2009-03-20 22:43 d——– c:\program files\Moffsoft FreeCalc
2009-03-20 22:43 . 2009-03-20 22:43 d——– c:\program files\Memento
2009-03-20 22:43 . 2009-03-20 22:43 d——– c:\documents and settings\BrownHouse\Application Data\NCH Swift Sound
2009-03-20 22:43 . 2009-03-20 22:43 d——– c:\documents and settings\All Users\Application Data\NCH Swift Sound
2009-03-20 22:35 . 2009-03-20 22:41 d——– c:\program files\Google
2009-03-20 22:35 . 2009-03-22 08:54 d——– c:\documents and settings\All Users\Application Data\Google Updater
2009-03-20 22:08 . 2009-03-20 22:08 d——– C:\users
2009-03-20 22:08 . 2009-03-20 22:25 d——– C:\My Games
2009-03-20 22:07 . 2009-03-20 22:25 d——– c:\program files\RealArcade
2009-03-20 21:58 . 2009-03-20 21:58 d——– c:\program files\Real
2009-03-20 21:58 . 2009-03-20 21:58 d——– c:\program files\Common Files\xing shared
2009-03-20 21:58 . 2009-03-20 21:58 499,712 –a—— c:\windows\system32\msvcp71.dll
2009-03-20 21:58 . 2009-03-20 21:58 348,160 –a—— c:\windows\system32\msvcr71.dll
2009-03-20 21:57 . 2009-03-20 21:58 d——– c:\program files\Common Files\Real
2009-03-20 21:44 . 2009-03-20 21:44 d——– c:\program files\Opera
2009-03-20 21:27 . 2009-03-20 21:27 376 –a—— c:\windows\ODBC.INI
2009-03-20 21:25 . 2009-03-20 21:25 d——– c:\windows\ShellNew
2009-03-20 21:23 . 2009-03-20 21:23 d——– c:\documents and settings\BrownHouse\Application Data\Microsoft Web Folders
2009-03-20 21:20 . 2009-03-20 21:20 d——– C:\PSFONTS
2009-03-20 21:20 . 2009-03-20 21:20 d——– c:\program files\Adobe Type Manager
2009-03-20 21:20 . 1997-06-17 04:00 212,352 –a—— c:\windows\system32\ATMDRVR.DLL
2009-03-20 21:20 . 1997-06-17 04:00 4,064 –a—— c:\windows\system32\drivers\ATMHELPR.SYS
2009-03-20 21:17 . 2009-03-20 21:17 d——– c:\program files\PhotoDeluxe 2.0
2009-03-20 21:16 . 2009-03-20 21:16 d——– c:\documents and settings\BrownHouse\WINDOWS
2009-03-20 21:16 . 1997-06-13 15:28 299,008 –a—— c:\windows\uninst.exe
2009-03-20 20:51 . 2009-03-20 20:51 d——– c:\windows\system32\XPSViewer
2009-03-20 20:51 . 2009-03-20 20:51 d——– c:\program files\Reference Assemblies
2009-03-20 20:51 . 2009-03-20 20:51 d——– c:\program files\MSBuild
2009-03-20 20:50 . 2009-03-20 20:51 d——– C:\2395c2d3281a424c5e4e95ff
2009-03-20 20:50 . 2008-07-06 08:06 1,676,288 ——— c:\windows\system32\xpssvcs.dll
2009-03-20 20:50 . 2008-07-06 08:06 1,676,288 —–c— c:\windows\system32\dllcache\xpssvcs.dll
2009-03-20 20:50 . 2008-07-06 06:50 597,504 —–c— c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-03-20 20:50 . 2008-07-06 08:06 575,488 ——— c:\windows\system32\xpsshhdr.dll
2009-03-20 20:50 . 2008-07-06 08:06 575,488 —–c— c:\windows\system32\dllcache\xpsshhdr.dll
2009-03-20 20:50 . 2008-07-06 08:06 117,760 ——— c:\windows\system32\prntvpt.dll
2009-03-20 20:50 . 2008-07-06 08:06 89,088 —–c— c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-03-20 19:13 . 2009-03-20 19:13 1,165 –a—— c:\windows\ipconfig.dat
2009-03-20 19:09 . 2009-03-20 19:09 1,165 –a—— c:\windows\checkip.dat
2009-03-20 18:49 . 2009-03-20 18:49 d——– c:\documents and settings\BrownHouse\Application Data\Dell Imaging Toolbox
2009-03-20 18:47 . 2009-03-20 18:47 d——– c:\documents and settings\BrownHouse\Application Data\V505 Series
2009-03-20 18:36 . 2009-03-20 18:36 d——– c:\windows\system32\scripting
2009-03-20 18:36 . 2009-03-20 18:36 d——– c:\windows\system32\en
2009-03-20 18:36 . 2009-03-20 18:36 d——– c:\windows\system32\bits
2009-03-20 18:36 . 2009-03-20 18:36 d——– c:\windows\l2schemas
2009-03-20 18:33 . 2009-03-20 18:37 d——– c:\windows\ServicePackFiles
2009-03-20 18:16 . 2009-03-22 14:27 d——– c:\documents and settings\All Users\Dl_cats
2009-03-20 18:16 . 2008-04-13 14:47 25,856 –a—— c:\windows\system32\drivers\usbprint.sys
2009-03-20 18:15 . 2008-04-13 14:45 32,128 –a—— c:\windows\system32\drivers\usbccgp.sys
2009-03-20 18:10 . 2009-03-20 18:10 d——– C:\logs

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-21 17:21 ——— d—–w c:\program files\DIGStream
2009-03-21 01:23 ——— d—–w c:\program files\microsoft frontpage
2009-03-20 19:46 ——— d—–w c:\program files\RGB
2009-03-20 19:45 ——— d—–w c:\program files\ESPNMotion
2009-03-20 19:45 ——— d—–w c:\documents and settings\All Users\Application Data\DIGStream
2009-03-20 19:44 ——— d—–w c:\program files\GemMaster
2009-03-20 19:44 ——— d—–w c:\program files\EnglishOtto
2009-03-20 19:31 ——— d—–w c:\program files\Windows Plus
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{09B71986-2AC5-482d-B6CB-42EA34F4F85B}]
2008-05-19 14:37 253952 –a—— c:\program files\Dell Toolbar\toolband.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{09B71986-2AC5-482d-B6CB-42EA34F4F85B}"= "c:\program files\Dell Toolbar\toolband.dll" [2008-05-19 253952]

[HKEY_CLASSES_ROOT\clsid\{09b71986-2ac5-482d-b6cb-42ea34f4f85b}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{09B71986-2AC5-482D-B6CB-42EA34F4F85B}"= "c:\program files\Dell Toolbar\toolband.dll" [2008-05-19 253952]

[HKEY_CLASSES_ROOT\clsid\{09b71986-2ac5-482d-b6cb-42ea34f4f85b}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"Aim6"="c:\program files\AIM6\aim6.exe" [2008-10-21 50472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 344064]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-03-20 1932568]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-03-09 515416]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-21 136600]
"REGSHAVE"="c:\program files\REGSHAVE\REGSHAVE.EXE" [2002-02-04 53248]
"SigmatelSysTrayApp"="stsystra.exe" [2005-03-22 c:\windows\stsystra.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-03-20 16:15 10520 c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.SP54"= SP5X_32.DLL

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk
backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Photags AutoDetect.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Photags AutoDetect.lnk
backup=c:\windows\pss\Photags AutoDetect.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^BrownHouse^Start Menu^Programs^Startup^Memento.lnk]
path=c:\documents and settings\BrownHouse\Start Menu\Programs\Startup\Memento.lnk
backup=c:\windows\pss\Memento.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
–a—— 2008-10-21 13:09 50472 c:\program files\AIM6\aim6.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell V505 Fax Server]
–a—— 2008-06-05 00:49 312560 c:\program files\Dell V505\fm3032.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dldwamon]
–a—— 2008-06-05 00:49 16624 c:\program files\Dell V505\dldwamon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dldwmon.exe]
–a—— 2008-06-05 00:49 677104 c:\program files\Dell V505\dldwmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Quick Search Box]
–a—— 2009-03-20 22:41 68592 c:\program files\Google\Quick Search Box\qsb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]
–a—— 2009-02-20 14:22 4363504 c:\program files\Yahoo!\Messenger\YahooMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2009-01-05 16:18 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
–a—— 2009-03-20 21:58 198160 c:\program files\Common Files\Real\Update_OB\realsched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Dell V505\\dldwamon.exe"=
"c:\\Program Files\\Dell V505\\frun.exe"=
"c:\\Program Files\\Dell V505\\dldwfax.exe"=
"c:\\Program Files\\Abbyy FineReader 6.0 Sprint\\Scan\\ScanMan6.exe"=
"c:\\WINDOWS\\system32\\dldwcoms.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\Program Files\\Java\\jre1.6.0_01\\bin\\javaw.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-03-20 64160]
R1 ATMhelpr;ATMhelpr;c:\windows\system32\drivers\ATMHELPR.SYS [2009-03-20 4064]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-03-20 325640]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-03-20 107912]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-03-20 908056]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-03-20 298264]
R2 dldw_device;dldw_device;c:\windows\system32\dldwcoms.exe -service –> c:\windows\system32\dldwcoms.exe -service [?]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-03-09 951632]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2009-03-20 24652]
S2 dldwCATSCustConnectService;dldwCATSCustConnectService;c:\windows\system32\spool\drivers\w32x86\3\dldwserv.exe [2009-03-20 99568]
S2 gupdate1c9a9ce21a1be18;Google Update Service (gupdate1c9a9ce21a1be18);c:\program files\Google\Update\GoogleUpdate.exe [2009-03-20 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-03-20 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 15:06]

2009-03-21 c:\windows\Tasks\EasyShare Registration Task.job
- c:\docume~1\ALLUSE~1\APPLIC~1\Kodak\EasyShareSetup\$REGIS~1\Registration_7.5.20.2.sxt _RegistrationOffer@16 []

2009-03-22 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-20 22:35]

2009-03-22 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-20 22:38]
.
.
——- Supplementary Scan ——-
.
uStart Page = https://login.yahoo.com/config/login_verify…rizon.yahoo.com
IE: &AIM Toolbar Search - c:\documents and settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_9993303B90FE6C1D.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\BrownHouse\Application Data\Mozilla\Firefox\Profiles\psje42g2.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&query=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxps://login.yahoo.com/config/login_verify2?.partner=vz-acs&.done=http%3a//verizon.yahoo.com
FF - prefs.js: keyword.URL - about:neterror?e=query&u=
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.141.5\npGoogleOneClick7.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-22 15:42:02
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

c:\windows\explorer.exe [1864] 0x8260ADA0

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
———————— Other Running Processes ————————
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\dldwcoms.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\ehome\mcrdsvc.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\wscntfy.exe
c:\windows\ehome\ehmsas.exe
c:\windows\system32\dllhost.exe
c:\program files\AIM6\aolsoftware.exe
c:\windows\system32\msiexec.exe
.
**************************************************************************
.
Completion time: 2009-03-22 15:47:02 - machine was rebooted [BrownHouse]
ComboFix-quarantined-files.txt 2009-03-22 19:46:59

Pre-Run: 61,827,862,528 bytes free
Post-Run: 61,788,549,120 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect

308 — E O F — 2009-03-22 19:44:39
Post #13
Hi Ethel975,

That makes me happy, looks like Combo fix cleaned up the last of the infection.

If you would run OTListIt again so I can ensure you are clean.

  • please openOTListIt2 again
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTListIt.Txt and Extras.Txt.
    Note:These logs can be located in the OTListIt2. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

Please advise how your computer is running now and any other issues you may be experiencing
Thanks

CB
Post #14
I sure hope so!

After going through all of this, is there something you can recommend to keep my computer safer than Ad-Aware and AVG? I can't afford to pay for programs right now, nor do I think that paying for a program necessarily makes it better. I have used many free programs that blow the paid competition away.

Here's the OTListIt.Txt. It did not give me an Extras.txt logfile this time. I tried looking for one, but the only one in my computer is the one from yesterday.



OTListIt logfile created on: 3/22/2009 4:07:13 PM - Run 6
OTListIt2 by OldTimer - Version 2.0.7.0 Folder = C:\Documents and Settings\BrownHouse\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.07 Mb Total Physical Memory | 264.19 Mb Available Physical Memory | 51.79% Memory free
1.22 Gb Paging File | 0.90 Gb Available in Paging File | 73.65% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 69.79 Gb Total Space | 57.56 Gb Free Space | 82.47% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: BROWN
Current User Name: BrownHouse
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
PRC - C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\system32\dldwcoms.exe ( )
PRC - C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
PRC - C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
PRC - C:\Program Files\AVG\AVG8\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
PRC - C:\Program Files\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
PRC - C:\Program Files\AVG\AVG8\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
PRC - C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\eHome\ehmsas.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\AIM6\aim6.exe (AOL LLC)
PRC - C:\Program Files\AIM6\aolsoftware.exe (AOL LLC)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\BrownHouse\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) – C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (ATI Smart [Auto | Stopped]) – C:\WINDOWS\system32\ati2sgag.exe ()
SRV - (avg8emc [Auto | Running]) – C:\Program Files\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg8wd [Auto | Running]) – C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (dldwCATSCustConnectService [Auto | Stopped]) – C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\dldwserv.exe ()
SRV - (dldw_device [Auto | Running]) – C:\WINDOWS\system32\dldwcoms.exe ( )
SRV - (ehRecvr [Auto | Running]) – C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [Auto | Running]) – C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (gupdate1c9a9ce21a1be18 [Auto | Stopped]) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (gusvc [Auto | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (idsvc [Unknown | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (JavaQuickStarterService [Auto | Running]) – C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (Lavasoft Ad-Aware Service [Auto | Running]) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (McrdSvc [Auto | Running]) – C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
SRV - (MHN [On_Demand | Stopped]) – C:\WINDOWS\System32\mhn.dll (Microsoft Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (UMWdf [On_Demand | Stopped]) – C:\WINDOWS\system32\wdfmgr.exe (Microsoft Corporation)
SRV - (Viewpoint Manager Service [Auto | Running]) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)

========== Driver Services (SafeList) ==========

DRV - (ati2mtag [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (ATMhelpr [System | Running]) – C:\WINDOWS\System32\drivers\ATMHELPR.SYS (Adobe Systems Incorporated)
DRV - (AvgLdx86 [System | Running]) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86 [System | Running]) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX [System | Running]) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (cercsr6 [Boot | Stopped]) – C:\WINDOWS\System32\drivers\cercsr6.sys (Adaptec, Inc.)
DRV - (E100B [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\e100b325.sys (Intel Corporation)
DRV - (HDAudBus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (Windows ® Server 2003 DDK provider)
DRV - (HSFHWBS2 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (HSF_DP [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (Lbd [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (mdmxsdk [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys (Conexant)
DRV - (MODEMCSA [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (STHDA [On_Demand | Running]) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (winachsf [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys (Conexant Systems, Inc.)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://login.yahoo.com/config/login_verify…rizon.yahoo.com
IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrie7&query;="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://login.yahoo.com/config/login_verify2?.partner=vz-acs&.done=http%3a//verizon.yahoo.com"
FF - prefs.js..extensions.enabledItems: {c2f863cd-0429-48c7-bb54-db756a951760}:5.20.1.1
FF - prefs.js..extensions.enabledItems: {3112ca9c-de6d-4884-a869-9855de68056c}:5.0.20090122Wb2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.0
FF - prefs.js..extensions.enabledItems: {29c4afe1-db19-4298-8785-fcc94d1d6c1d}:0.5.2008112201
FF - prefs.js..extensions.enabledItems: [removed]:1.0.4
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.2.20080910
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7
FF - prefs.js..google.toolbar.linkdoctor.backup.keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrab&query;="
FF - prefs.js..google.toolbar.linkdoctor.backup.keyword.enabled: true
FF - prefs.js..keyword.URL: "about:neterror?e=query&u;="


FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\ [2009/03/20 20:53:07 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009/03/21 00:30:16 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/03/21 08:55:49 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/03/21 09:02:14 | 00,000,000 | —D | M]

[2009/03/20 22:44:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Extensions
[2009/03/20 22:44:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/21 08:58:51 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions
[2009/03/21 08:40:29 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d}
[2009/03/20 22:47:52 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009/03/20 23:58:55 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/03/20 23:59:13 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\{c2f863cd-0429-48c7-bb54-db756a951760}
[2009/03/21 08:58:48 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mozilla\Firefox\Profiles\psje42g2.default\extensions\[removed]
[2009/03/20 23:59:15 | 00,001,739 | —- | M] () – C:\Documents and Settings\BrownHouse\Application Data\Mozilla\FireFox\Profiles\psje42g2.default\searchplugins\aim-search.xml
[2009/03/21 08:40:32 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/03/20 21:40:57 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/03/20 23:55:51 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
[2009/03/21 00:30:28 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
[2009/02/19 21:43:33 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/02/19 21:43:34 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/02/19 15:33:08 | 00,001,394 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/02/19 15:33:08 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/02/19 15:33:08 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/02/19 15:33:08 | 00,002,343 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/02/19 15:33:08 | 00,001,706 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/02/19 15:33:08 | 00,001,178 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/02/19 15:33:08 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: (27 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Dell Toolbar) - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]—————————-)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_9993303B90FE6C1D.dll (Google Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Dell Toolbar) - {09B71986-2AC5-482d-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (&Google; Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]—————————-)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {09B71986-2AC5-482D-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {09B71986-2AC5-482D-B6CB-42EA34F4F85B} - C:\Program Files\Dell Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Program Files\AVG\AVG8\avgtoolbar.dll ([[[COMPANYNAME]]]—————————-)
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" (ATI Technologies, Inc.)
O4 - HKLM..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
O4 - HKLM..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN (FUJI PHOTO FILM CO., LTD.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp (AOL LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &AIM; Toolbar Search - C:\Documents and Settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra Button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flas…ent/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Filter: - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_9993303B90FE6C1D.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()

========== Files/Folders - Created Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2009/03/22 15:44:33 | 00,000,000 | —D | C] – C:\Program Files\MSXML 4.0
[2009/03/22 15:38:35 | 00,000,209 | —- | C] () – C:\Boot.bak
[2009/03/22 15:38:33 | 00,260,272 | —- | C] () – C:\cmldr
[2009/03/22 15:38:31 | 00,000,000 | RHSD | C] – C:\cmdcons
[2009/03/22 15:35:34 | 00,029,696 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2009/03/22 15:35:33 | 00,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2009/03/22 15:35:33 | 00,161,792 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2009/03/22 15:35:33 | 00,136,704 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2009/03/22 15:35:33 | 00,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2009/03/22 15:35:33 | 00,089,504 | —- | C] (Smallfrogs Studio) – C:\WINDOWS\fdsv.exe
[2009/03/22 15:35:33 | 00,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2009/03/22 15:35:33 | 00,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2009/03/22 15:35:33 | 00,049,152 | —- | C] () – C:\WINDOWS\VFIND.exe
[2009/03/22 14:34:12 | 00,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2009/03/22 14:30:56 | 00,000,000 | —D | C] – C:\Qoobox
[2009/03/22 14:28:56 | 02,934,169 | R— | C] () – C:\Documents and Settings\BrownHouse\Desktop\ComboFix.exe
[2009/03/22 09:31:00 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Malwarebytes
[2009/03/22 09:30:51 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/03/22 09:30:51 | 00,000,696 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/22 09:30:48 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/03/22 09:30:47 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/03/22 09:30:47 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/03/22 09:15:48 | 00,000,000 | —D | C] – C:\_OTListIt
[2009/03/21 16:17:47 | 00,499,200 | —- | C] (OldTimer Tools) – C:\Documents and Settings\BrownHouse\Desktop\OTListIt2.exe
[2009/03/21 16:17:27 | 00,020,992 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\OTListIt2 directions.doc
[2009/03/21 15:10:28 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Opera
[2009/03/21 15:10:28 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Opera
[2009/03/21 15:01:21 | 00,171,004 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\HijackThis Logfileauswertung.htm
[2009/03/21 14:54:17 | 00,001,734 | —- | C] () – C:\Documents and Settings\BrownHouse\Desktop\HijackThis.lnk
[2009/03/21 14:54:13 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/03/21 14:43:06 | 00,015,688 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2009/03/21 13:12:21 | 00,000,000 | -H-D | C] – C:\$AVG8.VAULT$
[2009/03/21 08:55:27 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/03/21 08:53:47 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Apple
[2009/03/21 08:53:40 | 00,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2009/03/21 08:53:40 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Apple
[2009/03/21 01:25:13 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\acccore
[2009/03/21 01:24:48 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\AOL OCP
[2009/03/21 01:24:45 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\AOL
[2009/03/21 01:21:13 | 00,003,584 | —- | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/21 01:16:48 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\AIM Toolbar
[2009/03/21 01:08:23 | 00,515,803 | —- | C] (Digital Camera) – C:\WINDOWS\System32\drivers\Ca533av.sys
[2009/03/21 01:08:23 | 00,131,072 | —- | C] (Sunplus) – C:\WINDOWS\System32\Sp5x_32.dll
[2009/03/21 01:08:23 | 00,118,784 | —- | C] () – C:\WINDOWS\ShowBmp.exe
[2009/03/21 01:08:23 | 00,065,536 | —- | C] (DSC CAMERA) – C:\WINDOWS\amcap533.exe
[2009/03/21 01:08:23 | 00,010,986 | —- | C] (USB BULK) – C:\WINDOWS\System32\drivers\Bulk533.sys
[2009/03/21 01:08:23 | 00,001,325 | —- | C] () – C:\WINDOWS\Remove.ini
[2009/03/21 01:08:23 | 00,000,000 | —D | C] – C:\WINDOWS\Setup533
[2009/03/21 01:07:06 | 00,000,000 | —D | C] – C:\Program Files\PhoTags Express
[2009/03/21 00:52:13 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\KodakGallery
[2009/03/21 00:48:32 | 00,693,248 | R— | C] () – C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2009/03/21 00:48:32 | 00,359,424 | R— | C] () – C:\Documents and Settings\All Users\Documents\ESBK.mb
[2009/03/21 00:48:20 | 00,006,978 | —- | C] () – C:\logfile
[2009/03/21 00:45:04 | 00,000,000 | —D | C] – C:\Program Files\QuickTime
[2009/03/21 00:44:59 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Apple Computer
[2009/03/21 00:44:00 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusb.dll
[2009/03/21 00:43:59 | 00,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusd.dll
[2009/03/21 00:43:54 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Kodak
[2009/03/21 00:42:36 | 00,000,000 | —D | C] – C:\Program Files\Kodak
[2009/03/21 00:42:11 | 00,000,446 | —- | C] () – C:\WINDOWS\tasks\EasyShare Registration Task.job
[2009/03/21 00:41:34 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Kodak
[2009/03/21 00:36:22 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\FUJIFILM
[2009/03/21 00:32:44 | 00,274,432 | —- | C] (FUJI PHOTO FILM CO., LTD.) – C:\WINDOWS\System32\FFTIFF16.dll
[2009/03/21 00:32:44 | 00,155,648 | —- | C] (FUJI PHOTO FILM CO., LTD.) – C:\WINDOWS\System32\FFRAFLIB.DLL
[2009/03/21 00:32:38 | 00,000,000 | —D | C] – C:\Program Files\FinePixViewer
[2009/03/21 00:32:12 | 00,081,924 | —- | C] (FUJI PHOTO FILM CO.,LTD.) – C:\WINDOWS\System32\drivers\VC4CB104.SYS
[2009/03/21 00:32:11 | 00,000,000 | —D | C] – C:\Program Files\REGSHAVE
[2009/03/21 00:32:10 | 00,069,632 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FREGSHEX.DLL
[2009/03/21 00:32:10 | 00,065,536 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FINFCHECK.dll
[2009/03/21 00:32:10 | 00,045,056 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FINFCOPY.dll
[2009/03/21 00:32:10 | 00,045,056 | —- | C] (FUJIFILM) – C:\WINDOWS\System32\FCLKBTN.DLL
[2009/03/21 00:17:07 | 00,000,000 | —D | C] – C:\WINDOWS\pss
[2009/03/20 23:55:11 | 00,000,000 | —D | C] – C:\Program Files\Java
[2009/03/20 23:55:10 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2009/03/20 23:54:53 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Sun
[2009/03/20 23:50:37 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\mp3rocket
[2009/03/20 23:50:36 | 00,000,000 | —D | C] – C:\Program Files\MP3 Rocket
[2009/03/20 23:48:55 | 00,000,000 | —D | C] – C:\Program Files\PhotoScape
[2009/03/20 23:48:09 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Software Update Utility
[2009/03/20 23:48:04 | 00,000,000 | —D | C] – C:\Program Files\AIM Toolbar
[2009/03/20 23:48:04 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AIM Toolbar
[2009/03/20 23:47:55 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/03/20 23:47:54 | 00,000,000 | —D | C] – C:\Program Files\Viewpoint
[2009/03/20 23:47:54 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\acccore
[2009/03/20 23:47:45 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2009/03/20 23:47:45 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AOL
[2009/03/20 23:47:29 | 00,000,000 | —D | C] – C:\Program Files\Common Files\AOL
[2009/03/20 23:47:11 | 00,000,000 | —D | C] – C:\Program Files\AIM6
[2009/03/20 23:47:08 | 00,000,366 | -H– | C] () – C:\IPH.PH
[2009/03/20 23:46:58 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\ashampoo
[2009/03/20 23:46:58 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\ashampoo
[2009/03/20 23:46:53 | 00,000,000 | —D | C] – C:\Program Files\Ashampoo
[2009/03/20 23:45:57 | 00,000,000 | —D | C] – C:\Program Files\Deluxe Pacman
[2009/03/20 23:39:54 | 01,089,593 | —- | C] () – C:\WINDOWS\System32\dllcache\ntprint.cat
[2009/03/20 23:36:20 | 00,002,867 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\Memento.notes
[2009/03/20 23:33:29 | 05,353,274 | -H– | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\IconCache.db
[2009/03/20 23:33:03 | 00,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/03/20 23:30:01 | 00,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2009/03/20 23:27:19 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iecompat.dll
[2009/03/20 23:15:11 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Yahoo!
[2009/03/20 23:15:11 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2009/03/20 23:13:28 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2009/03/20 23:13:14 | 00,000,000 | —D | C] – C:\Program Files\Yahoo!
[2009/03/20 22:44:29 | 00,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/03/20 22:44:21 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Mozilla
[2009/03/20 22:44:21 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Mozilla
[2009/03/20 22:43:26 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2009/03/20 22:43:23 | 00,000,000 | —D | C] – C:\Program Files\NCH Swift Sound
[2009/03/20 22:43:23 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\NCH Swift Sound
[2009/03/20 22:43:15 | 00,000,000 | —D | C] – C:\Program Files\Memento
[2009/03/20 22:43:00 | 00,000,000 | —D | C] – C:\Program Files\Moffsoft FreeCalc
[2009/03/20 22:42:03 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Google
[2009/03/20 22:40:12 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google
[2009/03/20 22:38:35 | 00,000,890 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/03/20 22:38:24 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Google
[2009/03/20 22:35:18 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google Updater
[2009/03/20 22:35:15 | 00,000,868 | —- | C] () – C:\WINDOWS\tasks\Google Software Updater.job
[2009/03/20 22:35:13 | 00,000,000 | —D | C] – C:\Program Files\Google
[2009/03/20 22:08:46 | 00,000,000 | —D | C] – C:\My Games
[2009/03/20 22:08:00 | 00,000,000 | —D | C] – C:\users
[2009/03/20 22:07:21 | 00,000,000 | —D | C] – C:\Program Files\RealArcade
[2009/03/20 21:59:57 | 00,000,000 | R–D | C] – C:\Documents and Settings\BrownHouse\My Documents\My Videos
[2009/03/20 21:58:18 | 00,000,000 | —D | C] – C:\Program Files\Common Files\xing shared
[2009/03/20 21:58:03 | 00,499,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msvcp71.dll
[2009/03/20 21:58:03 | 00,348,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msvcr71.dll
[2009/03/20 21:58:03 | 00,278,528 | —- | C] (Real Networks, Inc) – C:\WINDOWS\System32\pncrt.dll
[2009/03/20 21:58:03 | 00,000,000 | —D | C] – C:\Program Files\Real
[2009/03/20 21:57:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Real
[2009/03/20 21:57:52 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Real
[2009/03/20 21:44:01 | 00,000,000 | —D | C] – C:\Program Files\Opera
[2009/03/20 21:40:56 | 00,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2009/03/20 21:27:49 | 00,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2009/03/20 21:25:59 | 00,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio
[2009/03/20 21:25:56 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Designer
[2009/03/20 21:25:04 | 00,000,000 | —D | C] – C:\WINDOWS\ShellNew
[2009/03/20 21:23:48 | 00,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2009/03/20 21:23:48 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft Web Folders
[2009/03/20 21:20:26 | 00,000,000 | —D | C] – C:\PSFONTS
[2009/03/20 21:20:24 | 00,000,000 | —D | C] – C:\Program Files\Adobe Type Manager
[2009/03/20 21:17:23 | 00,212,480 | —- | C] (Eastman Kodak) – C:\WINDOWS\pcdlib32.dll
[2009/03/20 21:17:23 | 00,210,944 | —- | C] () – C:\WINDOWS\System32\MSVCRT10.DLL
[2009/03/20 21:17:23 | 00,199,168 | —- | C] (Eastman Kodak Company) – C:\WINDOWS\kpcp32.dll
[2009/03/20 21:17:23 | 00,083,968 | —- | C] (Eastman Kodak Company) – C:\WINDOWS\kpapi32.dll
[2009/03/20 21:17:23 | 00,039,424 | —- | C] (Eastman Kodak Company) – C:\WINDOWS\kpsys32.dll
[2009/03/20 21:17:23 | 00,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\CTL3D32.DLL
[2009/03/20 21:17:23 | 00,000,629 | —- | C] () – C:\WINDOWS\Adobereg.db
[2009/03/20 21:17:23 | 00,000,114 | —- | C] () – C:\WINDOWS\kpcms.ini
[2009/03/20 21:17:23 | 00,000,000 | —D | C] – C:\KPCMS
[2009/03/20 21:17:22 | 00,249,856 | —- | C] (Play Incorporated) – C:\WINDOWS\System32\Snap32n.dll
[2009/03/20 21:17:22 | 00,020,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\CTL3D.DLL
[2009/03/20 21:17:21 | 00,415,232 | —- | C] (Storm Technology, Inc.) – C:\WINDOWS\System32\EZIMG25.dll
[2009/03/20 21:17:21 | 00,054,272 | —- | C] (Storm Technology, Inc.) – C:\WINDOWS\EasyPhoto Slide Show.scr
[2009/03/20 21:17:21 | 00,027,648 | —- | C] (Storm Technology, Inc.) – C:\WINDOWS\System32\cppenv25.dll
[2009/03/20 21:17:21 | 00,004,080 | —- | C] (Storm Software, Inc.) – C:\WINDOWS\System32\WINSIZE.DLL
[2009/03/20 21:17:21 | 00,000,742 | —- | C] () – C:\WINDOWS\EZPHOTO.INI
[2009/03/20 21:17:15 | 00,000,000 | —D | C] – C:\Program Files\PhotoDeluxe 2.0
[2009/03/20 21:16:43 | 00,299,008 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\uninst.exe
[2009/03/20 20:51:52 | 00,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2009/03/20 20:51:39 | 00,000,000 | —D | C] – C:\Program Files\MSBuild
[2009/03/20 20:51:29 | 00,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2009/03/20 20:50:24 | 00,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2009/03/20 20:50:24 | 00,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2009/03/20 20:50:24 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2009/03/20 20:50:23 | 01,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2009/03/20 20:50:23 | 01,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2009/03/20 20:50:23 | 00,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsshhdr.dll
[2009/03/20 20:50:23 | 00,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2009/03/20 20:50:22 | 00,000,000 | —D | C] – C:\2395c2d3281a424c5e4e95ff
[2009/03/20 19:13:20 | 00,001,165 | —- | C] () – C:\WINDOWS\ipconfig.dat
[2009/03/20 19:12:58 | 00,000,299 | —- | C] () – C:\Documents and Settings\BrownHouse\My Documents\Linksys settings.htm
[2009/03/20 19:09:12 | 00,001,165 | —- | C] () – C:\WINDOWS\checkip.dat
[2009/03/20 18:58:39 | 00,000,000 | —D | C] – C:\Program Files\WinRAR
[2009/03/20 18:53:57 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/03/20 18:49:30 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Dell Imaging Toolbox
[2009/03/20 18:47:18 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\V505 Series
[2009/03/20 18:46:09 | 00,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2009/03/20 18:36:46 | 00,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2009/03/20 18:36:46 | 00,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2009/03/20 18:36:45 | 00,000,000 | —D | C] – C:\WINDOWS\System32\en
[2009/03/20 18:36:45 | 00,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2009/03/20 18:33:24 | 00,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2009/03/20 18:26:18 | 00,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2009/03/20 18:16:10 | 00,026,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbstor.sys
[2009/03/20 18:16:06 | 00,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbprint.sys
[2009/03/20 18:15:52 | 00,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbccgp.sys
[2009/03/20 18:10:56 | 00,000,000 | —D | C] – C:\logs
[2009/03/20 18:10:41 | 00,040,960 | —- | C] () – C:\WINDOWS\System32\dldwvs.dll
[2009/03/20 18:10:35 | 00,360,448 | —- | C] () – C:\WINDOWS\System32\dldwcoin.dll
[2009/03/20 18:10:21 | 00,072,625 | —- | C] () – C:\WINDOWS\System32\dldwprpr.chm
[2009/03/20 18:09:51 | 00,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbscan.sys
[2009/03/20 18:09:51 | 00,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2009/03/20 18:09:32 | 00,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wiafbdrv.dll
[2009/03/20 18:09:32 | 00,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2009/03/20 18:09:12 | 00,014,664 | —- | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/03/20 18:08:52 | 00,081,920 | —- | C] () – C:\WINDOWS\System32\dldwcaps.dll
[2009/03/20 18:08:51 | 01,036,288 | —- | C] () – C:\WINDOWS\System32\dldwdrs.dll
[2009/03/20 18:08:50 | 00,069,632 | —- | C] () – C:\WINDOWS\System32\dldwcnv4.dll
[2009/03/20 18:08:07 | 00,000,000 | —D | C] – C:\Program Files\Abbyy FineReader 6.0 Sprint
[2009/03/20 18:07:53 | 00,000,000 | —D | C] – C:\Program Files\Dell Toolbar
[2009/03/20 18:07:25 | 00,045,056 | —- | C] () – C:\WINDOWS\System32\DLDWPMON.DLL
[2009/03/20 18:07:25 | 00,032,768 | —- | C] () – C:\WINDOWS\System32\DLDWFXPU.DLL
[2009/03/20 18:07:05 | 00,339,968 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IMGMAN32.DLL
[2009/03/20 18:07:05 | 00,098,345 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IMHOST32.DLL
[2009/03/20 18:07:05 | 00,098,304 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IM31XPNG.DEL
[2009/03/20 18:07:05 | 00,069,632 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IM31XTIF.DEL
[2009/03/20 18:07:05 | 00,057,344 | —- | C] () – C:\WINDOWS\System32\dldwoem.dll
[2009/03/20 18:07:05 | 00,049,152 | —- | C] (Data Techniques, Inc.) – C:\WINDOWS\System32\IM31IMG.DIL
[2009/03/20 18:06:41 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\V505 Series
[2009/03/20 18:06:40 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\V505
[2009/03/20 18:01:46 | 00,352,256 | —- | C] () – C:\WINDOWS\System32\DLDWwupd.dll
[2009/03/20 18:01:46 | 00,017,648 | —- | C] () – C:\WINDOWS\System32\DLDWwupd.exe
[2009/03/20 18:01:20 | 00,000,000 | —D | C] – C:\Program Files\Dell V505
[2009/03/20 18:01:07 | 00,520,192 | —- | C] () – C:\WINDOWS\System32\dldwutil.dll
[2009/03/20 18:01:07 | 00,438,272 | —- | C] ( ) – C:\WINDOWS\System32\DLDWhcp.dll
[2009/03/20 18:01:07 | 00,389,120 | —- | C] () – C:\WINDOWS\System32\DLDWinst.dll
[2009/03/20 18:01:07 | 00,364,544 | —- | C] ( ) – C:\WINDOWS\System32\dldwinpa.dll
[2009/03/20 18:01:07 | 00,339,968 | —- | C] ( ) – C:\WINDOWS\System32\dldwiesc.dll
[2009/03/20 18:01:06 | 01,069,056 | —- | C] ( ) – C:\WINDOWS\System32\dldwserv.dll
[2009/03/20 18:01:06 | 00,851,968 | —- | C] ( ) – C:\WINDOWS\System32\dldwusb1.dll
[2009/03/20 18:01:06 | 00,651,264 | —- | C] ( ) – C:\WINDOWS\System32\dldwpmui.dll
[2009/03/20 18:01:06 | 00,577,536 | —- | C] ( ) – C:\WINDOWS\System32\dldwlmpm.dll
[2009/03/20 18:01:06 | 00,147,456 | —- | C] () – C:\WINDOWS\System32\dldwjswr.dll
[2009/03/20 18:01:05 | 00,983,121 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dldwgf.dll
[2009/03/20 18:01:05 | 00,679,936 | —- | C] ( ) – C:\WINDOWS\System32\dldwhbn3.dll
[2009/03/20 18:01:05 | 00,328,944 | —- | C] ( ) – C:\WINDOWS\System32\dldwih.exe
[2009/03/20 18:01:05 | 00,208,896 | —- | C] () – C:\WINDOWS\System32\dldwgrd.dll
[2009/03/20 18:01:05 | 00,180,224 | —- | C] () – C:\WINDOWS\System32\dldwinsb.dll
[2009/03/20 18:01:05 | 00,176,128 | —- | C] () – C:\WINDOWS\System32\dldwins.dll
[2009/03/20 18:01:05 | 00,106,496 | —- | C] () – C:\WINDOWS\System32\dldwinsr.dll
[2009/03/20 18:01:04 | 00,765,952 | —- | C] ( ) – C:\WINDOWS\System32\dldwcomc.dll
[2009/03/20 18:01:04 | 00,595,184 | —- | C] ( ) – C:\WINDOWS\System32\dldwcoms.exe
[2009/03/20 18:01:04 | 00,376,832 | —- | C] ( ) – C:\WINDOWS\System32\dldwcomm.dll
[2009/03/20 18:01:04 | 00,086,016 | —- | C] () – C:\WINDOWS\System32\dldwcub.dll
[2009/03/20 18:01:04 | 00,077,824 | —- | C] () – C:\WINDOWS\System32\dldwcu.dll
[2009/03/20 18:01:04 | 00,036,864 | —- | C] () – C:\WINDOWS\System32\dldwcur.dll
[2009/03/20 18:01:03 | 00,369,904 | —- | C] ( ) – C:\WINDOWS\System32\dldwcfg.exe
[2009/03/20 18:01:03 | 00,150,258 | —- | C] () – C:\WINDOWS\System32\LexFiles.ulf
[2009/03/20 18:01:03 | 00,077,906 | —- | C] () – C:\WINDOWS\System32\DLDWcfg.dll
[2009/03/20 18:01:03 | 00,001,957 | —- | C] () – C:\WINDOWS\System32\dldw.loc
[2009/03/20 17:47:45 | 00,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2009/03/20 17:40:51 | 00,000,000 | —D | C] – C:\WINDOWS\ie7updates
[2009/03/20 17:40:33 | 00,594,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/03/20 17:40:33 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/03/20 17:40:32 | 01,985,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/03/20 17:40:32 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieudinit.exe
[2009/03/20 17:40:31 | 11,063,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/03/20 17:40:31 | 03,698,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2009/03/20 17:40:31 | 01,241,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2009/03/20 17:40:31 | 00,445,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2009/03/20 17:40:30 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icardie.dll
[2009/03/20 17:40:16 | 00,000,000 | —D | C] – C:\WINDOWS\WBEM
[2009/03/20 17:40:16 | 00,000,000 | —D | C] – C:\WINDOWS\System32\en-US
[2009/03/20 17:39:08 | 00,000,000 | -H-D | C] – C:\WINDOWS\ie7
[2009/03/20 17:38:47 | 00,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2009/03/20 17:38:30 | 00,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
[2009/03/20 17:38:03 | 00,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xmllite.dll
[2009/03/20 17:36:39 | 00,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2009/03/20 17:33:12 | 00,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2009/03/20 17:33:09 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2009/03/20 17:33:08 | 00,712,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecs.dll
[2009/03/20 17:33:08 | 00,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2009/03/20 17:33:06 | 00,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\wacompen.sys
[2009/03/20 17:33:04 | 00,042,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\viaagp.sys
[2009/03/20 17:33:04 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2009/03/20 17:33:04 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2009/03/20 17:33:02 | 00,121,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbvideo.sys
[2009/03/20 17:33:02 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usb8023x.sys
[2009/03/20 17:32:59 | 00,050,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tspkg.dll
[2009/03/20 17:32:59 | 00,044,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\uagp35.sys
[2009/03/20 17:32:58 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2009/03/20 17:32:57 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcptsat.dll
[2009/03/20 17:32:56 | 00,032,827 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcptest.exe
[2009/03/20 17:32:49 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdwxp.exe
[2009/03/20 17:32:48 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spdwnwxp.exe
[2009/03/20 17:32:46 | 00,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2009/03/20 17:32:45 | 00,020,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shtml.dll
[2009/03/20 17:32:45 | 00,016,437 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shtml.exe
[2009/03/20 17:32:43 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2009/03/20 17:32:43 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sffp_mmc.sys
[2009/03/20 17:32:38 | 00,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2009/03/20 17:32:38 | 00,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rfcomm.sys
[2009/03/20 17:32:38 | 00,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2009/03/20 17:32:35 | 00,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qutil.dll
[2009/03/20 17:32:35 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rasqec.dll
[2009/03/20 17:32:34 | 00,291,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagentrt.dll
[2009/03/20 17:32:34 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2009/03/20 17:32:33 | 00,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2009/03/20 17:32:31 | 00,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2009/03/20 17:32:28 | 00,144,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\onex.dll
[2009/03/20 17:32:19 | 00,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2009/03/20 17:32:16 | 00,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2009/03/20 17:32:16 | 00,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2009/03/20 17:32:16 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2009/03/20 17:32:16 | 00,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2009/03/20 17:32:15 | 00,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2009/03/20 17:32:15 | 00,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2009/03/20 17:32:14 | 01,307,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6.dll
[2009/03/20 17:32:14 | 01,307,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2009/03/20 17:32:12 | 00,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2009/03/20 17:32:12 | 00,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2009/03/20 17:31:53 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2009/03/20 17:31:52 | 00,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2009/03/20 17:31:52 | 00,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2009/03/20 17:31:51 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2009/03/20 17:31:39 | 00,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2009/03/20 17:31:32 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kmsvc.dll
[2009/03/20 17:31:31 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2009/03/20 17:31:30 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2009/03/20 17:31:30 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2009/03/20 17:31:30 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2009/03/20 17:31:09 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smtpapi.dll
[2009/03/20 17:31:08 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwnh.dll
[2009/03/20 17:31:08 | 00,000,974 | —- | C] () – C:\WINDOWS\System32\pid.inf
[2009/03/20 17:31:03 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsdupd.exe
[2009/03/20 17:30:54 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidbth.sys
[2009/03/20 17:30:50 | 00,046,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\gagp30kx.sys
[2009/03/20 17:30:48 | 00,598,071 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpmmc.dll
[2009/03/20 17:30:48 | 00,208,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2009/03/20 17:30:48 | 00,020,541 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpexedll.dll
[2009/03/20 17:30:48 | 00,020,538 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpremadm.exe
[2009/03/20 17:30:47 | 00,876,653 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4awel.dll
[2009/03/20 17:30:47 | 00,188,494 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpcount.exe
[2009/03/20 17:30:47 | 00,109,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp98swin.exe
[2009/03/20 17:30:47 | 00,094,208 | —- | C] () – C:\WINDOWS\System32\dllcache\fpencode.dll
[2009/03/20 17:30:47 | 00,049,212 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4awebs.dll
[2009/03/20 17:30:47 | 00,041,020 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4avnb.dll
[2009/03/20 17:30:47 | 00,032,826 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4avss.dll
[2009/03/20 17:30:47 | 00,015,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp98sadm.exe
[2009/03/20 17:30:46 | 00,184,435 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4amsft.dll
[2009/03/20 17:30:46 | 00,147,513 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4apws.dll
[2009/03/20 17:30:46 | 00,102,509 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4atxt.dll
[2009/03/20 17:30:46 | 00,082,035 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4anscp.dll
[2009/03/20 17:30:46 | 00,049,210 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4areg.dll
[2009/03/20 17:30:44 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\faxpatch.exe
[2009/03/20 17:30:42 | 00,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2009/03/20 17:30:42 | 00,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2009/03/20 17:30:42 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappprxy.dll
[2009/03/20 17:30:42 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapsvc.dll
[2009/03/20 17:30:41 | 00,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2009/03/20 17:30:41 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappcfg.dll
[2009/03/20 17:30:41 | 00,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2009/03/20 17:30:41 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapolqec.dll
[2009/03/20 17:30:39 | 00,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2009/03/20 17:30:39 | 00,132,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3svc.dll
[2009/03/20 17:30:39 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2009/03/20 17:30:39 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2009/03/20 17:30:39 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2009/03/20 17:30:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3api.dll
[2009/03/20 17:30:39 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3dlg.dll
[2009/03/20 17:30:38 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2009/03/20 17:30:38 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsntfy.dll
[2009/03/20 17:30:37 | 00,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2009/03/20 17:30:34 | 00,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2009/03/20 17:30:33 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\credssp.dll
[2009/03/20 17:30:30 | 00,188,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cfgwiz.exe
[2009/03/20 17:30:29 | 00,101,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthpan.sys
[2009/03/20 17:30:29 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthmodem.sys
[2009/03/20 17:30:29 | 00,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2009/03/20 17:30:29 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthusb.sys
[2009/03/20 17:30:29 | 00,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthenum.sys
[2009/03/20 17:30:28 | 00,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2009/03/20 17:30:28 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2009/03/20 17:30:27 | 00,020,540 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\author.dll
[2009/03/20 17:30:27 | 00,016,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\author.exe
[2009/03/20 17:30:26 | 00,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2009/03/20 17:30:22 | 00,042,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\alim1541.sys
[2009/03/20 17:30:21 | 00,044,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\agpcpq.sys
[2009/03/20 17:30:21 | 00,042,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\agp440.sys
[2009/03/20 17:30:19 | 00,020,540 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admin.dll
[2009/03/20 17:30:19 | 00,016,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admin.exe
[2009/03/20 17:30:18 | 00,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2009/03/20 16:51:24 | 00,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthport.sys
[2009/03/20 16:51:24 | 00,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2009/03/20 16:46:26 | 02,145,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2009/03/20 16:46:25 | 02,189,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2009/03/20 16:46:25 | 02,023,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2009/03/20 16:46:24 | 02,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2009/03/20 16:42:48 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\kb913800.exe
[2009/03/20 16:38:28 | 00,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/03/20 16:38:14 | 00,064,160 | —- | C] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/03/20 16:38:14 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2009/03/20 16:37:42 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Macromedia
[2009/03/20 16:37:05 | 00,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2009/03/20 16:36:56 | 00,000,000 | —D | C] – C:\Program Files\Lavasoft
[2009/03/20 16:36:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Lavasoft
[2009/03/20 16:35:52 | 00,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2009/03/20 16:35:44 | 00,455,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2009/03/20 16:35:39 | 00,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2009/03/20 16:30:57 | 00,333,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2009/03/20 16:30:20 | 00,000,000 | —D | C] – C:\WINDOWS\VerizonOnline
[2009/03/20 16:30:17 | 00,313,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dx3j.dll
[2009/03/20 16:30:17 | 00,171,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\jit.dll
[2009/03/20 16:30:17 | 00,139,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javaee.dll
[2009/03/20 16:30:17 | 00,046,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\setdebug.exe
[2009/03/20 16:30:17 | 00,007,315 | —- | C] () – C:\WINDOWS\System32\javasup.vxd
[2009/03/20 16:30:17 | 00,006,550 | —- | C] () – C:\WINDOWS\jautoexp.dat
[2009/03/20 16:30:14 | 00,286,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vmhelper.dll
[2009/03/20 16:30:14 | 00,171,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wjview.exe
[2009/03/20 16:30:14 | 00,021,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjdbc10.dll
[2009/03/20 16:30:14 | 00,000,113 | —- | C] () – C:\WINDOWS\System32\zonedon.reg
[2009/03/20 16:30:14 | 00,000,113 | —- | C] () – C:\WINDOWS\System32\zonedoff.reg
[2009/03/20 16:30:13 | 00,947,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjava.dll
[2009/03/20 16:30:13 | 00,404,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javart.dll
[2009/03/20 16:30:13 | 00,187,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javacypt.dll
[2009/03/20 16:30:13 | 00,172,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\jview.exe
[2009/03/20 16:30:13 | 00,154,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msawt.dll
[2009/03/20 16:30:13 | 00,063,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javaprxy.dll
[2009/03/20 16:30:13 | 00,015,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\jdbgmgr.exe
[2009/03/20 16:30:12 | 00,049,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clspack.exe
[2009/03/20 16:30:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\FinePointLib
[2009/03/20 16:30:00 | 00,287,808 | —- | C] (Verizon Internet Solutions) – C:\WINDOWS\System32\VerizonUninstaller.exe
[2009/03/20 16:30:00 | 00,128,064 | —- | C] (Verizon Internet Solutions) – C:\WINDOWS\System32\VZGUninstall.dll
[2009/03/20 16:30:00 | 00,049,210 | —- | C] (Verizon Internet Solutions) – C:\WINDOWS\System32\vzServices.dll
[2009/03/20 16:29:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Verizon Online
[2009/03/20 16:29:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Motive
[2009/03/20 16:28:11 | 00,691,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2009/03/20 16:23:46 | 00,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2009/03/20 16:20:39 | 00,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\splitter.sys
[2009/03/20 16:20:38 | 00,083,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\wdmaud.sys
[2009/03/20 16:20:37 | 00,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\dmusic.sys
[2009/03/20 16:20:34 | 00,056,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\swmidi.sys
[2009/03/20 16:20:32 | 00,142,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\aec.sys
[2009/03/20 16:20:31 | 00,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\kmixer.sys
[2009/03/20 16:20:30 | 00,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmkaud.sys
[2009/03/20 16:20:28 | 00,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sysaudio.sys
[2009/03/20 16:20:05 | 00,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2009/03/20 16:19:49 | 00,000,000 | —D | C] – C:\Program Files\SigmaTel
[2009/03/20 16:19:45 | 00,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2009/03/20 16:19:44 | 00,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2009/03/20 16:19:43 | 00,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2009/03/20 16:15:33 | 00,107,912 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/03/20 16:15:33 | 00,010,520 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2009/03/20 16:15:28 | 00,325,640 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/03/20 16:15:27 | 00,027,656 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/03/20 16:15:26 | 34,282,483 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/03/20 16:15:26 | 06,061,540 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/03/20 16:15:26 | 00,401,372 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/03/20 16:15:26 | 00,048,700 | —- | C] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/03/20 16:15:26 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers\Avg
[2009/03/20 16:15:26 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\AVGTOOLBAR
[2009/03/20 16:15:20 | 00,000,000 | —D | C] – C:\Program Files\AVG
[2009/03/20 16:15:20 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\avg8
[2009/03/20 16:15:10 | 00,516,096 | —- | C] () – C:\WINDOWS\System32\ati2sgag.exe
[2009/03/20 16:14:59 | 00,000,000 | —D | C] – C:\Program Files\ATI Technologies
[2009/03/20 16:14:57 | 00,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2009/03/20 16:14:50 | 00,073,728 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\Oemdspif.dll
[2009/03/20 16:14:50 | 00,058,560 | —- | C] () – C:\WINDOWS\System32\drivers\ativckxx.vp
[2009/03/20 16:14:50 | 00,024,064 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\ativcoxx.dll
[2009/03/20 16:14:50 | 00,021,712 | —- | C] () – C:\WINDOWS\System32\drivers\ativvpxx.vp
[2009/03/20 16:14:50 | 00,000,929 | —- | C] () – C:\WINDOWS\System32\drivers\ativcaxx.vp
[2009/03/20 16:14:49 | 00,524,850 | —- | C] () – C:\WINDOWS\System32\drivers\ativcaxx.cpa
[2009/03/20 16:14:49 | 00,106,496 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\atipdlxx.dll
[2009/03/20 16:14:48 | 00,095,617 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2009/03/20 16:14:48 | 00,039,936 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\ati2edxx.dll
[2009/03/20 16:14:48 | 00,025,088 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\Ati2mdxx.exe
[2009/03/20 16:14:48 | 00,005,496 | —- | C] () – C:\WINDOWS\System32\atifglpf.xml
[2009/03/20 16:14:14 | 00,001,902 | —- | C] () – C:\WINDOWS\System32\SetupBD.din
[2009/03/20 16:13:57 | 00,005,110 | —- | C] () – C:\WINDOWS\System32\e100b325.din
[2009/03/20 16:13:56 | 00,000,000 | —D | C] – C:\drvrtmp
[2009/03/20 16:12:51 | 00,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mskssrv.sys
[2009/03/20 16:12:49 | 00,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mspqm.sys
[2009/03/20 16:12:48 | 00,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mspclock.sys
[2009/03/20 16:12:44 | 00,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2009/03/20 16:12:44 | 00,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\MODEMCSA.sys
[2009/03/20 16:12:44 | 00,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2009/03/20 16:12:44 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2009/03/20 16:12:35 | 00,000,000 | —D | C] – C:\Program Files\CONEXANT
[2009/03/20 16:12:29 | 00,128,398 | —- | C] () – C:\WINDOWS\System32\drivers\del200f.cty
[2009/03/20 16:08:33 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2009/03/20 16:08:32 | 00,000,000 | —D | C] – C:\Program Files\Intel
[2009/03/20 16:06:50 | 00,000,000 | —D | C] – C:\WINDOWS\System32\vmm32
[2009/03/20 16:06:50 | 00,000,000 | —D | C] – C:\Program Files\Dell
[2009/03/20 16:06:14 | 00,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2009/03/20 16:04:25 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Adobe
[2009/03/20 16:04:25 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\AdobeUM
[2009/03/20 16:04:03 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\My Documents\My eBooks
[2009/03/20 16:03:59 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Adobe
[2009/03/20 16:03:58 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2009/03/20 16:02:14 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2009/03/20 16:02:12 | 00,000,000 | —D | C] – C:\Program Files\Adobe
[2009/03/20 16:00:55 | 00,000,000 | —D | C] – C:\WINDOWS\Cache
[2009/03/20 15:53:41 | 00,000,081 | -HS- | C] () – C:\Documents and Settings\BrownHouse\My Documents\desktop.ini
[2009/03/20 15:53:41 | 00,000,000 | R–D | C] – C:\Documents and Settings\BrownHouse\My Documents\My Pictures
[2009/03/20 15:53:41 | 00,000,000 | R–D | C] – C:\Documents and Settings\BrownHouse\My Documents\My Music
[2009/03/20 15:53:30 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Application Data\Identities
[2009/03/20 15:51:19 | 00,000,000 | —D | C] – C:\WINDOWS\RegisteredPackages
[2009/03/20 15:49:35 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2009/03/20 15:49:35 | 00,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidir.sys
[2009/03/20 15:49:18 | 00,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2009/03/20 15:48:49 | 00,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2009/03/20 15:46:55 | 00,000,000 | —D | C] – C:\WINDOWS\System32\URTTemp
[2009/03/20 15:46:33 | 00,000,000 | —D | C] – C:\Program Files\RGB
[2009/03/20 15:45:03 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\DIGStream
[2009/03/20 15:45:02 | 00,000,000 | —D | C] – C:\Program Files\DIGStream
[2009/03/20 15:45:01 | 00,000,000 | —D | C] – C:\Program Files\ESPNMotion
[2009/03/20 15:44:59 | 00,000,133 | —- | C] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\fusioncache.dat
[2009/03/20 15:44:58 | 00,000,000 | —D | C] – C:\Program Files\GemMaster
[2009/03/20 15:44:58 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\ApplicationHistory
[2009/03/20 15:44:55 | 00,000,000 | —D | C] – C:\Program Files\EnglishOtto
[2009/03/20 15:41:55 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\BrownHouse\Application Data\desktop.ini
[2009/03/20 15:41:54 | 00,000,084 | -HS- | C] () – C:\Documents and Settings\BrownHouse\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 15:41:54 | 00,000,000 | –SD | C] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft
[2009/03/20 15:41:54 | 00,000,000 | —D | C] – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\Microsoft
[2009/03/20 15:40:35 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Recorded TV
[2009/03/20 15:40:28 | 00,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2009/03/20 15:40:24 | 00,000,006 | -H– | C] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/20 15:40:24 | 00,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2009/03/20 15:40:06 | 00,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2009/03/20 15:39:26 | 00,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2009/03/20 15:39:16 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresja.dll
[2009/03/20 15:39:16 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresko.dll
[2009/03/20 15:39:16 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresfr.dll
[2009/03/20 15:39:15 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresde.dll
[2009/03/20 15:39:04 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehreschs.dll
[2009/03/20 15:38:58 | 00,028,288 | —- | C] () – C:\WINDOWS\System32\dllcache\xjis.nls
[2009/03/20 15:38:56 | 00,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2009/03/20 15:38:53 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2009/03/20 15:38:53 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2009/03/20 15:38:53 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2009/03/20 15:38:53 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2009/03/20 15:38:52 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2009/03/20 15:38:52 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2009/03/20 15:38:51 | 00,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2009/03/20 15:38:51 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2009/03/20 15:38:50 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2009/03/20 15:38:50 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2009/03/20 15:38:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2009/03/20 15:38:50 | 00,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2009/03/20 15:38:49 | 00,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2009/03/20 15:38:49 | 00,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2009/03/20 15:38:49 | 00,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2009/03/20 15:38:48 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2009/03/20 15:38:48 | 00,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2009/03/20 15:38:47 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2009/03/20 15:38:46 | 00,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2009/03/20 15:38:46 | 00,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2009/03/20 15:38:46 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2009/03/20 15:38:46 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2009/03/20 15:38:45 | 00,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2009/03/20 15:38:45 | 00,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2009/03/20 15:38:45 | 00,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2009/03/20 15:38:45 | 00,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2009/03/20 15:38:43 | 00,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2009/03/20 15:38:43 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2009/03/20 15:38:42 | 00,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2009/03/20 15:38:41 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2009/03/20 15:38:41 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2009/03/20 15:38:40 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2009/03/20 15:38:40 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2009/03/20 15:38:40 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2009/03/20 15:38:39 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2009/03/20 15:38:39 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2009/03/20 15:38:39 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2009/03/20 15:38:39 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2009/03/20 15:38:39 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2009/03/20 15:38:39 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2009/03/20 15:38:39 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2009/03/20 15:38:39 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2009/03/20 15:38:38 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2009/03/20 15:38:38 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2009/03/20 15:38:38 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2009/03/20 15:38:38 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2009/03/20 15:38:36 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2009/03/20 15:38:35 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2009/03/20 15:38:34 | 00,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2009/03/20 15:38:34 | 00,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2009/03/20 15:38:33 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2009/03/20 15:38:33 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2009/03/20 15:38:33 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2009/03/20 15:38:31 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2009/03/20 15:38:31 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2009/03/20 15:38:31 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2009/03/20 15:38:30 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2009/03/20 15:38:30 | 00,083,748 | —- | C] () – C:\WINDOWS\System32\dllcache\prcp.nls
[2009/03/20 15:38:30 | 00,083,748 | —- | C] () – C:\WINDOWS\System32\dllcache\prc.nls
[2009/03/20 15:38:29 | 00,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2009/03/20 15:38:29 | 00,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2009/03/20 15:38:29 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2009/03/20 15:38:29 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2009/03/20 15:38:29 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2009/03/20 15:38:29 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2009/03/20 15:38:29 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2009/03/20 15:38:28 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2009/03/20 15:38:28 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2009/03/20 15:38:28 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2009/03/20 15:38:28 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2009/03/20 15:38:28 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2009/03/20 15:38:27 | 00,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2009/03/20 15:38:27 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2009/03/20 15:38:26 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2009/03/20 15:38:25 | 00,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2009/03/20 15:38:24 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2009/03/20 15:38:23 | 00,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2009/03/20 15:38:20 | 01,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2009/03/20 15:38:20 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2009/03/20 15:38:15 | 00,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2009/03/20 15:38:15 | 00,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2009/03/20 15:38:15 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2009/03/20 15:38:14 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2009/03/20 15:38:13 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2009/03/20 15:38:12 | 01,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2009/03/20 15:38:12 | 00,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2009/03/20 15:38:12 | 00,047,066 | —- | C] () – C:\WINDOWS\System32\dllcache\ksc.nls
[2009/03/20 15:38:11 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2009/03/20 15:38:11 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2009/03/20 15:38:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2009/03/20 15:38:10 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2009/03/20 15:38:10 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2009/03/20 15:38:10 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2009/03/20 15:38:10 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2009/03/20 15:38:10 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2009/03/20 15:38:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2009/03/20 15:38:09 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2009/03/20 15:38:09 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2009/03/20 15:38:09 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2009/03/20 15:38:08 | 00,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2009/03/20 15:38:08 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2009/03/20 15:38:08 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2009/03/20 15:38:08 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2009/03/20 15:38:08 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2009/03/20 15:38:08 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2009/03/20 15:38:07 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2009/03/20 15:38:07 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2009/03/20 15:38:06 | 00,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2009/03/20 15:38:06 | 00,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2009/03/20 15:38:06 | 00,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2009/03/20 15:38:06 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2009/03/20 15:38:06 | 00,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2009/03/20 15:38:05 | 00,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2009/03/20 15:38:05 | 00,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2009/03/20 15:38:05 | 00,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2009/03/20 15:38:05 | 00,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2009/03/20 15:38:05 | 00,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2009/03/20 15:38:05 | 00,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2009/03/20 15:38:05 | 00,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2009/03/20 15:38:05 | 00,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2009/03/20 15:38:04 | 00,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2009/03/20 15:38:04 | 00,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2009/03/20 15:38:04 | 00,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2009/03/20 15:38:04 | 00,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2009/03/20 15:38:04 | 00,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2009/03/20 15:38:04 | 00,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2009/03/20 15:38:04 | 00,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2009/03/20 15:38:03 | 00,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2009/03/20 15:38:03 | 00,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2009/03/20 15:38:03 | 00,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2009/03/20 15:38:03 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2009/03/20 15:38:03 | 00,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2009/03/20 15:38:03 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2009/03/20 15:38:03 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2009/03/20 15:38:03 | 00,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2009/03/20 15:38:02 | 00,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2009/03/20 15:38:02 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2009/03/20 15:37:58 | 10,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2009/03/20 15:37:53 | 13,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2009/03/20 15:37:50 | 10,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2009/03/20 15:37:48 | 00,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2009/03/20 15:37:48 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2009/03/20 15:37:46 | 00,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2009/03/20 15:37:46 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2009/03/20 15:37:46 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2009/03/20 15:37:45 | 00,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2009/03/20 15:37:45 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2009/03/20 15:37:45 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2009/03/20 15:37:44 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2009/03/20 15:37:43 | 00,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2009/03/20 15:37:43 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2009/03/20 15:37:43 | 00,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2009/03/20 15:37:42 | 00,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2009/03/20 15:37:42 | 00,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2009/03/20 15:37:42 | 00,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2009/03/20 15:37:38 | 00,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2009/03/20 15:37:37 | 00,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2009/03/20 15:37:37 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2009/03/20 15:37:37 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2009/03/20 15:37:37 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2009/03/20 15:37:37 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2009/03/20 15:37:35 | 00,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2009/03/20 15:37:35 | 00,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2009/03/20 15:37:35 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2009/03/20 15:37:34 | 00,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2009/03/20 15:37:34 | 00,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2009/03/20 15:37:34 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2009/03/20 15:37:34 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2009/03/20 15:37:33 | 01,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2009/03/20 15:37:33 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2009/03/20 15:37:33 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2009/03/20 15:37:33 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2009/03/20 15:37:33 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2009/03/20 15:37:33 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2009/03/20 15:37:32 | 00,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2009/03/20 15:37:32 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2009/03/20 15:37:32 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_864.nls
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_862.nls
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_858.nls
[2009/03/20 15:37:31 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_720.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_870.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_708.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28596.nls
[2009/03/20 15:37:31 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_21027.nls
[2009/03/20 15:37:30 | 00,180,770 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20932.nls
[2009/03/20 15:37:30 | 00,177,698 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20949.nls
[2009/03/20 15:37:30 | 00,173,602 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20936.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_21025.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20924.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20880.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20871.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20838.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20833.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20424.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20423.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20420.nls
[2009/03/20 15:37:30 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20297.nls
[2009/03/20 15:37:29 | 00,187,938 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20005.nls
[2009/03/20 15:37:29 | 00,185,378 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20003.nls
[2009/03/20 15:37:29 | 00,180,258 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20004.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20290.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20285.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20284.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20280.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20278.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20277.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20273.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20269.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20108.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20107.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20106.nls
[2009/03/20 15:37:29 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20105.nls
[2009/03/20 15:37:28 | 00,189,986 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1361.nls
[2009/03/20 15:37:28 | 00,186,402 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20001.nls
[2009/03/20 15:37:28 | 00,180,258 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20000.nls
[2009/03/20 15:37:28 | 00,173,602 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20002.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1149.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1148.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1147.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1146.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1145.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1144.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1143.nls
[2009/03/20 15:37:28 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1142.nls
[2009/03/20 15:37:27 | 00,195,618 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10002.nls
[2009/03/20 15:37:27 | 00,177,698 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10003.nls
[2009/03/20 15:37:27 | 00,173,602 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10008.nls
[2009/03/20 15:37:27 | 00,162,850 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10001.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1141.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1140.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_1047.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10021.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10005.nls
[2009/03/20 15:37:27 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10004.nls
[2009/03/20 15:37:26 | 00,082,172 | —- | C] () – C:\WINDOWS\System32\dllcache\bopomofo.nls
[2009/03/20 15:37:26 | 00,066,728 | —- | C] () – C:\WINDOWS\System32\dllcache\big5.nls
[2009/03/20 15:37:26 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2009/03/20 15:37:25 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2009/03/20 15:37:24 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2009/03/20 15:37:24 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2009/03/20 15:37:24 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2009/03/20 15:37:22 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2009/03/20 15:37:22 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2009/03/20 15:37:22 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2009/03/20 15:37:21 | 00,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2009/03/20 15:37:21 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2009/03/20 15:37:19 | 00,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2009/03/20 15:37:18 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2009/03/20 15:37:13 | 00,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2009/03/20 15:37:13 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2009/03/20 15:37:13 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2009/03/20 15:37:13 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2009/03/20 15:37:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2009/03/20 15:37:12 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2009/03/20 15:37:09 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2009/03/20 15:37:01 | 00,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2009/03/20 15:37:01 | 00,000,000 | —D | C] – C:\Program Files\xerox
[2009/03/20 15:37:01 | 00,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2009/03/20 15:36:29 | 00,000,000 | —D | C] – C:\DELL
[2009/03/20 15:36:22 | 00,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2009/03/20 15:36:22 | 00,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2009/03/20 15:36:22 | 00,000,000 | RHS- | C] () – C:\IO.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | C] () – C:\WINDOWS\control.ini
[2009/03/20 15:36:22 | 00,000,000 | —- | C] () – C:\CONFIG.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2009/03/20 15:36:16 | 00,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2009/03/20 15:36:16 | 00,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2009/03/20 15:36:15 | 00,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2009/03/20 15:36:06 | 00,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2009/03/20 15:34:54 | 00,000,488 | RH– | C] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/03/20 15:34:54 | 00,000,488 | RH– | C] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/03/20 15:34:54 | 00,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2009/03/20 15:34:54 | 00,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/03/20 15:34:42 | 00,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2009/03/20 15:34:31 | 04,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2009/03/20 15:34:25 | 00,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2009/03/20 15:34:08 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2009/03/20 15:34:08 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2009/03/20 15:34:08 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2009/03/20 15:34:08 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2009/03/20 15:34:07 | 00,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2009/03/20 15:34:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2009/03/20 15:34:06 | 00,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2009/03/20 15:34:06 | 00,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2009/03/20 15:34:06 | 00,000,002 | —- | C] () – C:\WINDOWS\System32\desktop.ini
[2009/03/20 15:34:06 | 00,000,002 | —- | C] () – C:\WINDOWS\desktop.ini
[2009/03/20 15:34:02 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2009/03/20 15:34:02 | 00,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2009/03/20 15:34:01 | 00,118,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg723.acm
[2009/03/20 15:34:01 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2009/03/20 15:34:01 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2009/03/20 15:34:01 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2009/03/20 15:34:01 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2009/03/20 15:34:00 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2009/03/20 15:33:58 | 00,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2009/03/20 15:33:58 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2009/03/20 15:33:58 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2009/03/20 15:33:58 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2009/03/20 15:33:58 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2009/03/20 15:33:58 | 00,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2009/03/20 15:33:58 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2009/03/20 15:33:58 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2009/03/20 15:33:58 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2009/03/20 15:33:58 | 00,000,065 | RH– | C] () – C:\WINDOWS\tasks\desktop.ini
[2009/03/20 15:33:58 | 00,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2009/03/20 15:33:57 | 00,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2009/03/20 15:33:57 | 00,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2009/03/20 15:33:55 | 00,000,000 | —D | C] – C:\WINDOWS\srchasst
[2009/03/20 15:33:54 | 00,759,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\VGX.dll
[2009/03/20 15:33:54 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2009/03/20 15:33:52 | 00,991,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2009/03/20 15:33:52 | 00,819,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2009/03/20 15:33:52 | 00,356,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2009/03/20 15:33:52 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2009/03/20 15:33:52 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2009/03/20 15:33:51 | 01,809,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll
[2009/03/20 15:33:51 | 01,809,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/03/20 15:33:51 | 00,323,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2009/03/20 15:33:51 | 00,323,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2009/03/20 15:33:51 | 00,202,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuweb.dll
[2009/03/20 15:33:51 | 00,202,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2009/03/20 15:33:51 | 00,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2009/03/20 15:33:51 | 00,034,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2009/03/20 15:33:51 | 00,034,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2009/03/20 15:33:51 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauserv.dll
[2009/03/20 15:33:50 | 00,561,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2009/03/20 15:33:50 | 00,561,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2009/03/20 15:33:50 | 00,409,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgr.dll
[2009/03/20 15:33:50 | 00,213,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl
[2009/03/20 15:33:50 | 00,213,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009/03/20 15:33:50 | 00,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2009/03/20 15:33:50 | 00,051,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt.exe
[2009/03/20 15:33:50 | 00,051,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/03/20 15:33:50 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2009/03/20 15:33:50 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2009/03/20 15:33:50 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2009/03/20 15:33:44 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2009/03/20 15:33:44 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2009/03/20 15:33:44 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2009/03/20 15:33:44 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2009/03/20 15:33:41 | 00,129,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\fltmgr.sys
[2009/03/20 15:33:41 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2009/03/20 15:33:41 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltlib.dll
[2009/03/20 15:33:40 | 00,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2009/03/20 15:33:40 | 00,171,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srsvc.dll
[2009/03/20 15:33:40 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2009/03/20 15:33:40 | 00,073,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sr.sys
[2009/03/20 15:33:40 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srclient.dll
[2009/03/20 15:33:40 | 00,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2009/03/20 15:33:40 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2009/03/20 15:33:39 | 00,188,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msh261.drv
[2009/03/20 15:33:39 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2009/03/20 15:33:39 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmsrvc.exe
[2009/03/20 15:33:39 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2009/03/20 15:33:37 | 00,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2009/03/20 15:33:37 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2009/03/20 15:33:37 | 00,000,000 | —D | C] – C:\Program Files\NetMeeting
[2009/03/20 15:33:36 | 00,691,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcomm.dll
[2009/03/20 15:33:36 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2009/03/20 15:33:35 | 00,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\schedsvc.dll
[2009/03/20 15:33:35 | 00,000,000 | —D | C] – C:\Program Files\Outlook Express
[2009/03/20 15:33:34 | 00,274,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstask.dll
[2009/03/20 15:33:34 | 00,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2009/03/20 15:33:34 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2009/03/20 15:33:34 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2009/03/20 15:33:34 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2009/03/20 15:33:34 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2009/03/20 15:33:30 | 00,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2009/03/20 15:33:29 | 00,638,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iexplore.exe
[2009/03/20 15:33:29 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedw.exe
[2009/03/20 15:33:29 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hmmapi.dll
[2009/03/20 15:33:29 | 00,000,000 | —D | C] – C:\Program Files\Common Files\System
[2009/03/20 15:33:28 | 00,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2009/03/20 15:33:27 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2009/03/20 15:32:53 | 00,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2009/03/20 15:32:29 | 00,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/03/20 15:32:21 | 00,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2009/03/20 15:32:19 | 00,000,059 | —- | C] () – C:\WINDOWS\vbaddin.ini
[2009/03/20 15:32:19 | 00,000,036 | —- | C] () – C:\WINDOWS\vb.ini
[2009/03/20 15:32:14 | 00,000,000 | —D | C] – C:\WINDOWS\Registration
[2009/03/20 15:32:07 | 00,000,000 | —D | C] – C:\Program Files\Online Services
[2009/03/20 15:31:50 | 00,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2009/03/20 15:31:47 | 00,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2009/03/20 15:31:29 | 01,742,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mypixdx.scr
[2009/03/20 15:31:29 | 00,011,452 | —- | C] () – C:\WINDOWS\System32\mypixdx.chm
[2009/03/20 15:31:29 | 00,000,000 | —D | C] – C:\Program Files\Windows Plus
[2009/03/20 15:31:28 | 07,093,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\space.scr
[2009/03/20 15:31:27 | 04,396,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wpgldfsh.scr
[2009/03/20 15:31:26 | 03,343,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nature.scr
[2009/03/20 15:31:25 | 05,068,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\davinci.scr
[2009/03/20 15:31:20 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mhn.dll
[2009/03/20 15:31:20 | 00,011,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mhndrv.sys
[2009/03/20 15:31:20 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\igdetect.dll
[2009/03/20 15:31:16 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2ext.dll
[2009/03/20 15:31:16 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2eres.dll
[2009/03/20 15:31:16 | 00,000,000 | —D | C] – C:\Program Files\Movie Maker
[2009/03/20 15:30:31 | 00,462,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqqp20.dll
[2009/03/20 15:30:31 | 00,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqdb20.dll
[2009/03/20 15:30:31 | 00,117,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdatunepia.dll
[2009/03/20 15:30:31 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqse20.dll
[2009/03/20 15:30:30 | 00,063,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\medctrro.exe
[2009/03/20 15:30:30 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehmsas.exe
[2009/03/20 15:30:29 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2009/03/20 15:30:24 | 10,604,352 | —- | C] () – C:\WINDOWS\System32\dllcache\ehcir.ird
[2009/03/20 15:30:24 | 01,370,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehchsime.dll
[2009/03/20 15:30:24 | 00,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehcommon.dll
[2009/03/20 15:30:24 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehjpnime.dll
[2009/03/20 15:30:24 | 00,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehentt.dll
[2009/03/20 15:30:24 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiuserxp.dll
[2009/03/20 15:30:23 | 03,219,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehshell.exe
[2009/03/20 15:30:23 | 01,863,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehcm.dll
[2009/03/20 15:30:23 | 00,492,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehui.dll
[2009/03/20 15:30:23 | 00,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdrop.dll
[2009/03/20 15:30:23 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehSched.exe
[2009/03/20 15:30:23 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRec.exe
[2009/03/20 15:30:23 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehtray.exe
[2009/03/20 15:30:23 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdebug.dll
[2009/03/20 15:30:19 | 08,843,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehres.dll
[2009/03/20 15:30:19 | 01,349,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehuihlp.dll
[2009/03/20 15:30:19 | 00,864,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepg.dll
[2009/03/20 15:30:19 | 00,278,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiVidCtl.dll
[2009/03/20 15:30:19 | 00,269,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehglid.dll
[2009/03/20 15:30:19 | 00,152,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\debugsvc.dll
[2009/03/20 15:30:19 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdat.dll
[2009/03/20 15:30:19 | 00,097,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehProxy.dll
[2009/03/20 15:30:19 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdec.dll
[2009/03/20 15:30:19 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgnet.dll
[2009/03/20 15:30:18 | 00,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRecObj.dll
[2009/03/20 15:30:18 | 00,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiProxy.dll
[2009/03/20 15:30:18 | 00,307,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehPlayer.dll
[2009/03/20 15:30:18 | 00,204,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiPlay.dll
[2009/03/20 15:30:18 | 00,122,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiwmp.dll
[2009/03/20 15:30:18 | 00,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehCIR.dll
[2009/03/20 15:30:18 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiExtens.dll
[2009/03/20 15:30:16 | 00,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2009/03/20 15:30:16 | 00,000,000 | —D | C] – C:\Program Files\Messenger
[2009/03/20 15:30:15 | 02,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2009/03/20 15:30:15 | 01,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2009/03/20 15:30:15 | 01,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2009/03/20 15:30:15 | 00,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2009/03/20 15:30:15 | 00,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2009/03/20 15:30:15 | 00,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2009/03/20 15:30:15 | 00,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2009/03/20 15:30:15 | 00,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2009/03/20 15:30:15 | 00,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2009/03/20 15:30:15 | 00,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2009/03/20 15:30:15 | 00,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2009/03/20 15:30:15 | 00,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2009/03/20 15:30:15 | 00,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2009/03/20 15:30:15 | 00,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2009/03/20 15:30:14 | 01,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2009/03/20 15:30:14 | 00,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2009/03/20 15:30:14 | 00,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2009/03/20 15:30:14 | 00,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2009/03/20 15:30:14 | 00,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2009/03/20 15:30:14 | 00,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2009/03/20 15:30:14 | 00,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2009/03/20 15:30:14 | 00,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2009/03/20 15:30:14 | 00,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2009/03/20 15:30:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2009/03/20 15:30:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2009/03/20 15:30:13 | 00,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2009/03/20 15:30:06 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2009/03/20 15:30:06 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2009/03/20 15:30:06 | 00,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2009/03/20 15:30:06 | 00,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2009/03/20 15:30:06 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2009/03/20 15:30:06 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2009/03/20 15:30:06 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2009/03/20 15:30:06 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2009/03/20 15:30:06 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2009/03/20 15:30:06 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2009/03/20 15:30:02 | 00,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2009/03/20 15:30:02 | 00,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2009/03/20 15:30:02 | 00,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2009/03/20 15:30:02 | 00,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2009/03/20 15:30:02 | 00,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2009/03/20 15:30:01 | 00,093,702 | —- | C] () – C:\WINDOWS\System32\subrange.uce
[2009/03/20 15:30:01 | 00,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2009/03/20 15:30:01 | 00,060,458 | —- | C] () – C:\WINDOWS\System32\ideograf.uce
[2009/03/20 15:30:01 | 00,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2009/03/20 15:30:01 | 00,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2009/03/20 15:30:01 | 00,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2009/03/20 15:30:01 | 00,016,740 | —- | C] () – C:\WINDOWS\System32\shiftjis.uce
[2009/03/20 15:30:01 | 00,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2009/03/20 15:30:01 | 00,012,876 | —- | C] () – C:\WINDOWS\System32\korean.uce
[2009/03/20 15:30:01 | 00,008,484 | —- | C] () – C:\WINDOWS\System32\kanji_2.uce
[2009/03/20 15:30:01 | 00,006,948 | —- | C] () – C:\WINDOWS\System32\kanji_1.uce
[2009/03/20 15:30:01 | 00,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2009/03/20 15:30:00 | 00,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2009/03/20 15:30:00 | 00,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2009/03/20 15:30:00 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2009/03/20 15:30:00 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2009/03/20 15:30:00 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2009/03/20 15:30:00 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2009/03/20 15:30:00 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2009/03/20 15:30:00 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2009/03/20 15:30:00 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2009/03/20 15:30:00 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2009/03/20 15:30:00 | 00,024,006 | —- | C] () – C:\WINDOWS\System32\gb2312.uce
[2009/03/20 15:30:00 | 00,022,984 | —- | C] () – C:\WINDOWS\System32\bopomofo.uce
[2009/03/20 15:29:59 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2009/03/20 15:29:59 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2009/03/20 15:29:59 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2009/03/20 15:29:59 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2009/03/20 15:29:59 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2009/03/20 15:29:59 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2009/03/20 15:29:59 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2009/03/20 15:29:59 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2009/03/20 15:29:59 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2009/03/20 15:29:59 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2009/03/20 15:29:59 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2009/03/20 15:29:59 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2009/03/20 15:29:59 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2009/03/20 15:29:59 | 00,013,223 | —- | C] () – C:\WINDOWS\System32\tslabels.ini
[2009/03/20 15:29:59 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2009/03/20 15:29:59 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2009/03/20 15:29:59 | 00,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2009/03/20 15:29:59 | 00,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2009/03/20 15:29:58 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2009/03/20 15:29:58 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2009/03/20 15:29:58 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2009/03/20 15:29:58 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2009/03/20 15:29:58 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2009/03/20 15:29:58 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2009/03/20 15:29:58 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2009/03/20 15:29:58 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2009/03/20 15:29:58 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2009/03/20 15:29:58 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2009/03/20 15:29:58 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2009/03/20 15:29:58 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2009/03/20 15:29:58 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2009/03/20 15:29:58 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2009/03/20 15:29:58 | 00,001,931 | —- | C] () – C:\WINDOWS\System32\msdtcprf.ini
[2009/03/20 15:29:58 | 00,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2009/03/20 15:29:57 | 00,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2009/03/20 15:29:57 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2009/03/20 15:29:57 | 00,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2009/03/20 15:29:57 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2009/03/20 15:29:57 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2009/03/20 15:29:57 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2009/03/20 15:29:57 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2009/03/20 15:29:57 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2009/03/20 15:29:55 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2009/03/20 15:29:55 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2009/03/20 15:29:54 | 00,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2009/03/20 15:29:54 | 00,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2009/03/20 15:29:54 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2009/03/20 15:29:54 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2009/03/20 15:29:54 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2009/03/20 15:29:54 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2009/03/20 15:29:54 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2009/03/20 15:29:54 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2009/03/20 15:29:54 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2009/03/20 15:29:54 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2009/03/20 15:29:54 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2009/03/20 15:29:54 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2009/03/20 15:29:53 | 00,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2009/03/20 15:29:53 | 00,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2009/03/20 15:29:53 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2009/03/20 15:29:43 | 00,000,000 | —D | C] – C:\Program Files\MSN
[2009/03/20 15:29:42 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2009/03/20 15:29:42 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2009/03/20 15:29:42 | 00,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2009/03/20 15:29:42 | 00,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2009/03/20 15:29:42 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2009/03/20 15:29:41 | 00,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2009/03/20 15:29:41 | 00,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2009/03/20 15:29:41 | 00,139,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rdpwd.sys
[2009/03/20 15:29:41 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2009/03/20 15:29:41 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2009/03/20 15:29:41 | 00,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tdtcp.sys
[2009/03/20 15:29:41 | 00,012,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tdpipe.sys
[2009/03/20 15:29:41 | 00,000,000 | —D | C] – C:\Program Files\Windows NT
[2009/03/20 15:29:40 | 02,061,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstscax.dll
[2009/03/20 15:29:40 | 00,677,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstsc.exe
[2009/03/20 15:29:40 | 00,655,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2009/03/20 15:29:40 | 00,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2009/03/20 15:29:40 | 00,295,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\termsrv.dll
[2009/03/20 15:29:40 | 00,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2009/03/20 15:29:40 | 00,141,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sessmgr.exe
[2009/03/20 15:29:40 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2009/03/20 15:29:40 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\remotepg.dll
[2009/03/20 15:29:40 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2009/03/20 15:29:40 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2009/03/20 15:29:40 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2009/03/20 15:29:39 | 00,427,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2009/03/20 15:29:39 | 00,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2009/03/20 15:29:39 | 00,091,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2009/03/20 15:29:39 | 00,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2009/03/20 15:29:39 | 00,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2009/03/20 15:29:39 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2009/03/20 15:29:39 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2009/03/20 15:29:39 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2009/03/20 15:29:39 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2009/03/20 15:29:39 | 00,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2009/03/20 15:29:38 | 00,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2009/03/20 15:29:38 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2009/03/20 15:29:38 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2009/03/20 15:29:38 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2009/03/20 15:29:38 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2009/03/20 15:29:38 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtc.exe
[2009/03/20 15:29:38 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2009/03/20 15:29:37 | 01,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2009/03/20 15:29:37 | 00,625,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2009/03/20 15:29:37 | 00,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2009/03/20 15:29:37 | 00,226,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2009/03/20 15:29:37 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2009/03/20 15:29:36 | 00,498,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatq.dll
[2009/03/20 15:29:32 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2009/03/20 15:29:31 | 00,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2009/03/20 15:29:31 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2009/03/20 15:29:31 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2009/03/20 15:29:26 | 00,040,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\termdd.sys
[2009/03/20 15:29:25 | 00,196,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rdpdr.sys
[2009/03/20 15:29:24 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2009/03/20 10:27:12 | 00,003,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\audstub.sys
[2009/03/20 10:26:48 | 00,057,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\redbook.sys
[2009/03/20 10:26:15 | 00,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2009/03/20 10:25:03 | 00,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2009/03/20 10:25:00 | 00,501,230 | —- | C] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/03/20 10:25:00 | 00,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2009/03/20 10:24:59 | 00,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2009/03/20 10:24:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2009/03/20 10:24:58 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2009/03/20 10:24:58 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2009/03/20 10:24:57 | 01,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2009/03/20 10:24:57 | 00,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2009/03/20 10:24:57 | 00,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2009/03/20 10:24:57 | 00,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2009/03/20 10:24:56 | 00,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2009/03/20 10:24:56 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2009/03/20 10:24:56 | 00,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2009/03/20 10:24:56 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2009/03/20 10:24:55 | 00,000,000 | R–D | C] – C:\Program Files
[2009/03/20 10:24:55 | 00,000,000 | —D | C] – C:\Program Files\Common Files
[2009/03/20 10:24:54 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28603.nls
[2009/03/20 10:24:54 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_28603.nls
[2009/03/20 10:24:53 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_857.nls
[2009/03/20 10:24:53 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_857.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28599.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10081.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_28599.nls
[2009/03/20 10:24:53 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10081.nls
[2009/03/20 10:24:53 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2009/03/20 10:24:53 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2009/03/20 10:24:53 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2009/03/20 10:24:53 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2009/03/20 10:24:53 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2009/03/20 10:24:53 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28595.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10017.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10007.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28595.NLS
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10017.nls
[2009/03/20 10:24:51 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10007.nls
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2009/03/20 10:24:51 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2009/03/20 10:24:51 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2009/03/20 10:24:50 | 00,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2009/03/20 10:24:50 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2009/03/20 10:24:50 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2009/03/20 10:24:50 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2009/03/20 10:24:50 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2009/03/20 10:24:50 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2009/03/20 10:24:50 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2009/03/20 10:24:50 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2009/03/20 10:24:50 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2009/03/20 10:24:50 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2009/03/20 10:24:50 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2009/03/20 10:24:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2009/03/20 10:24:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2009/03/20 10:24:50 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_869.nls
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_737.nls
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_869.nls
[2009/03/20 10:24:49 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_737.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_875.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28597.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10006.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_875.nls
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28597.NLS
[2009/03/20 10:24:49 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10006.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_866.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_855.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_866.nls
[2009/03/20 10:24:48 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_855.nls
[2009/03/20 10:24:48 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_28594.nls
[2009/03/20 10:24:48 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28594.NLS
[2009/03/20 10:24:48 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2009/03/20 10:24:48 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2009/03/20 10:24:48 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2009/03/20 10:24:48 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2009/03/20 10:24:48 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2009/03/20 10:24:48 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2009/03/20 10:24:48 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2009/03/20 10:24:48 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2009/03/20 10:24:48 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2009/03/20 10:24:48 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2009/03/20 10:24:47 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\dllcache\c_852.nls
[2009/03/20 10:24:47 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_852.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10082.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10029.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_10010.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10082.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10029.nls
[2009/03/20 10:24:47 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10010.nls
[2009/03/20 10:24:47 | 00,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2009/03/20 10:24:47 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2009/03/20 10:24:47 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2009/03/20 10:24:47 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2009/03/20 10:24:47 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2009/03/20 10:24:47 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2009/03/20 10:24:47 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2009/03/20 10:24:47 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2009/03/20 10:24:47 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2009/03/20 10:24:47 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2009/03/20 10:24:45 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\dllcache\c_20127.nls
[2009/03/20 10:24:45 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_20127.nls
[2009/03/20 10:24:45 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2009/03/20 10:24:45 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2009/03/20 10:24:44 | 00,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2009/03/20 10:24:44 | 00,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2009/03/20 10:24:44 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2009/03/20 10:24:44 | 00,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2009/03/20 10:24:44 | 00,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2009/03/20 10:24:44 | 00,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2009/03/20 10:24:44 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2009/03/20 10:24:44 | 00,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2009/03/20 10:24:44 | 00,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2009/03/20 10:24:44 | 00,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2009/03/20 10:24:44 | 00,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2009/03/20 10:24:43 | 00,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2009/03/20 10:24:43 | 00,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2009/03/20 10:24:43 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2009/03/20 10:24:43 | 00,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2009/03/20 10:24:43 | 00,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2009/03/20 10:24:43 | 00,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2009/03/20 10:24:43 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2009/03/20 10:24:43 | 00,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2009/03/20 10:24:43 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2009/03/20 10:24:43 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2009/03/20 10:24:43 | 00,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2009/03/20 10:24:43 | 00,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2009/03/20 10:24:43 | 00,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2009/03/20 10:24:43 | 00,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2009/03/20 10:24:42 | 00,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2009/03/20 10:24:42 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\notepad.exe
[2009/03/20 10:24:42 | 00,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2009/03/20 10:24:42 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irenum.sys
[2009/03/20 10:24:42 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2009/03/20 10:24:42 | 00,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2009/03/20 10:24:41 | 00,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2009/03/20 10:24:33 | 00,077,881 | —- | C] () – C:\WINDOWS\System32\dllcache\plus.cat
[2009/03/20 10:24:33 | 00,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2009/03/20 10:24:33 | 00,017,916 | —- | C] () – C:\WINDOWS\System32\dllcache\sonic.cat
[2009/03/20 10:24:33 | 00,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2009/03/20 10:24:33 | 00,007,710 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2009/03/20 10:24:33 | 00,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2009/03/20 10:24:33 | 00,000,084 | -HS- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\All Users\Documents\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\desktop.ini
[2009/03/20 10:24:32 | 00,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2009/03/20 10:24:32 | 00,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2009/03/20 10:24:32 | 00,106,147 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2009/03/20 10:24:32 | 00,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2009/03/20 10:24:22 | 00,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2009/03/20 10:24:22 | 00,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2009/03/20 10:24:17 | 00,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/03/20 10:23:57 | 00,000,000 | -HSD | C] – C:\System Volume Information
[2009/03/20 10:23:57 | 00,000,000 | —D | C] – C:\Documents and Settings
[2009/03/20 10:23:56 | 00,229,600 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/20 10:23:07 | 00,000,279 | RHS- | C] () – C:\boot.ini
[2009/03/20 10:23:04 | 00,000,237 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2009/03/20 10:17:37 | 00,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2009/03/20 10:17:37 | 00,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2009/03/20 10:17:37 | 00,000,000 | R–D | C] – C:\WINDOWS\Web
[2009/03/20 10:17:37 | 00,000,000 | -H-D | C] – C:\WINDOWS\inf
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\twain_32
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Temp
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\export
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\config
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\System32\1025
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\system32
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\system
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\security
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Resources
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\repair
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\pchealth
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\mui
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\msapps
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\msagent
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Media
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\java
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\ime
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Help
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\ehome
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\dell
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Debug
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Cursors
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\Config
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS\addins
[2009/03/20 10:17:37 | 00,000,000 | —D | C] – C:\WINDOWS
[2009/03/08 14:22:30 | 00,049,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrating.dll.mui
[2009/03/08 14:22:18 | 00,002,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshta.exe.mui
[2009/03/08 14:21:06 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe.mui
[2009/03/08 14:20:54 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll.mui
[2009/03/08 04:33:40 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\corpol.dll

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2009/03/22 15:42:12 | 00,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2009/03/22 15:41:56 | 00,000,868 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2009/03/22 15:41:38 | 00,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2009/03/22 15:41:34 | 00,000,890 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/03/22 15:41:33 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/22 15:41:30 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/03/22 15:38:35 | 00,000,279 | RHS- | M] () – C:\boot.ini
[2009/03/22 14:29:38 | 02,934,169 | R— | M] () – C:\Documents and Settings\BrownHouse\Desktop\ComboFix.exe
[2009/03/22 09:30:51 | 00,000,696 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/22 09:14:35 | 00,011,168 | -H– | M] () – C:\WINDOWS\System32\pijidefa
[2009/03/21 17:13:36 | 34,282,483 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/03/21 17:13:19 | 00,048,700 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/03/21 16:17:51 | 00,499,200 | —- | M] (OldTimer Tools) – C:\Documents and Settings\BrownHouse\Desktop\OTListIt2.exe
[2009/03/21 16:17:28 | 00,020,992 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\OTListIt2 directions.doc
[2009/03/21 15:01:21 | 00,171,004 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\HijackThis Logfileauswertung.htm
[2009/03/21 14:54:40 | 00,001,734 | —- | M] () – C:\Documents and Settings\BrownHouse\Desktop\HijackThis.lnk
[2009/03/21 12:24:41 | 00,002,867 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\Memento.notes
[2009/03/21 09:16:57 | 00,000,573 | —- | M] () – C:\WINDOWS\win.ini
[2009/03/21 09:16:57 | 00,000,209 | —- | M] () – C:\Boot.bak
[2009/03/21 09:03:46 | 00,006,978 | —- | M] () – C:\logfile
[2009/03/21 01:21:13 | 00,003,584 | —- | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/21 01:03:52 | 00,359,424 | R— | M] () – C:\Documents and Settings\All Users\Documents\ESBK.mb
[2009/03/21 01:00:23 | 00,693,248 | R— | M] () – C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2009/03/21 00:42:12 | 00,000,446 | —- | M] () – C:\WINDOWS\tasks\EasyShare Registration Task.job
[2009/03/20 23:48:17 | 00,000,366 | -H– | M] () – C:\IPH.PH
[2009/03/20 23:39:27 | 00,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/03/20 23:34:48 | 00,000,081 | -HS- | M] () – C:\Documents and Settings\BrownHouse\My Documents\desktop.ini
[2009/03/20 23:34:36 | 00,229,600 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/20 23:33:29 | 05,353,274 | -H– | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\IconCache.db
[2009/03/20 23:33:07 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/03/20 22:44:29 | 00,000,000 | —- | M] () – C:\WINDOWS\nsreg.dat
[2009/03/20 21:58:03 | 00,499,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msvcp71.dll
[2009/03/20 21:58:03 | 00,348,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msvcr71.dll
[2009/03/20 21:58:03 | 00,278,528 | —- | M] (Real Networks, Inc) – C:\WINDOWS\System32\pncrt.dll
[2009/03/20 21:27:50 | 00,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/03/20 21:26:56 | 00,000,059 | —- | M] () – C:\WINDOWS\vbaddin.ini
[2009/03/20 21:20:29 | 00,000,629 | —- | M] () – C:\WINDOWS\Adobereg.db
[2009/03/20 21:17:30 | 00,000,742 | —- | M] () – C:\WINDOWS\EZPHOTO.INI
[2009/03/20 21:17:23 | 00,000,114 | —- | M] () – C:\WINDOWS\kpcms.ini
[2009/03/20 20:57:10 | 00,501,230 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/03/20 20:57:10 | 00,441,124 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/03/20 20:57:10 | 00,071,060 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/03/20 19:13:21 | 00,001,165 | —- | M] () – C:\WINDOWS\ipconfig.dat
[2009/03/20 19:12:58 | 00,000,299 | —- | M] () – C:\Documents and Settings\BrownHouse\My Documents\Linksys settings.htm
[2009/03/20 19:09:12 | 00,001,165 | —- | M] () – C:\WINDOWS\checkip.dat
[2009/03/20 18:49:28 | 00,014,664 | —- | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/03/20 18:49:00 | 00,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2009/03/20 18:30:49 | 00,250,048 | RHS- | M] () – C:\ntldr
[2009/03/20 18:10:59 | 00,150,258 | —- | M] () – C:\WINDOWS\System32\LexFiles.ulf
[2009/03/20 16:38:28 | 00,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/03/20 16:15:33 | 00,107,912 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/03/20 16:15:33 | 00,010,520 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2009/03/20 16:15:28 | 00,325,640 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/03/20 16:15:27 | 00,027,656 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/03/20 16:15:26 | 06,061,540 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/03/20 16:15:26 | 00,401,372 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/03/20 15:44:59 | 00,000,133 | —- | M] () – C:\Documents and Settings\BrownHouse\Local Settings\Application Data\fusioncache.dat
[2009/03/20 15:40:06 | 00,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2009/03/20 15:39:32 | 00,000,237 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2009/03/20 15:36:27 | 00,000,084 | -HS- | M] () – C:\Documents and Settings\BrownHouse\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 15:36:27 | 00,000,084 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini
[2009/03/20 15:36:22 | 00,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2009/03/20 15:36:22 | 00,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2009/03/20 15:36:22 | 00,000,000 | RHS- | M] () – C:\IO.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | M] () – C:\WINDOWS\control.ini
[2009/03/20 15:36:22 | 00,000,000 | —- | M] () – C:\CONFIG.SYS
[2009/03/20 15:36:22 | 00,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2009/03/20 15:36:16 | 00,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2009/03/20 15:36:16 | 00,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2009/03/20 15:36:07 | 00,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2009/03/20 15:34:54 | 00,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/03/20 15:34:54 | 00,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/03/20 15:34:47 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/03/20 15:32:29 | 00,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/03/20 15:32:19 | 00,000,036 | —- | M] () – C:\WINDOWS\vb.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\BrownHouse\Application Data\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\All Users\Documents\desktop.ini
[2009/03/20 10:24:33 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\All Users\Application Data\desktop.ini
[2009/03/09 15:06:57 | 00,015,688 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2009/03/09 15:06:56 | 00,064,160 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/03/08 14:22:46 | 01,241,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieframe.dll.mui
[2009/03/08 14:22:46 | 01,241,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2009/03/08 14:22:30 | 00,049,152 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msrating.dll.mui
[2009/03/08 14:22:18 | 00,002,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshta.exe.mui
[2009/03/08 14:21:06 | 00,010,240 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\advpack.dll.mui
[2009/03/08 14:21:06 | 00,004,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe.mui
[2009/03/08 14:20:54 | 00,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll.mui
[2009/03/08 14:09:26 | 00,638,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iexplore.exe
[2009/03/08 14:09:26 | 00,391,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2009/03/08 14:09:26 | 00,391,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2009/03/08 04:41:16 | 05,937,152 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtml.dll
[2009/03/08 04:41:16 | 05,937,152 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2009/03/08 04:39:48 | 11,063,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieframe.dll
[2009/03/08 04:39:48 | 11,063,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/03/08 04:35:10 | 00,385,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec
[2009/03/08 04:34:58 | 00,914,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wininet.dll
[2009/03/08 04:34:58 | 00,914,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2009/03/08 04:34:56 | 01,206,784 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\urlmon.dll
[2009/03/08 04:34:56 | 01,206,784 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2009/03/08 04:34:52 | 01,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2009/03/08 04:34:52 | 01,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2009/03/08 04:34:48 | 00,236,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\webcheck.dll
[2009/03/08 04:34:48 | 00,236,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\webcheck.dll
[2009/03/08 04:34:48 | 00,208,384 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\WinFXDocObj.exe
[2009/03/08 04:34:30 | 00,043,008 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\licmgr10.dll
[2009/03/08 04:34:30 | 00,043,008 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licmgr10.dll
[2009/03/08 04:34:28 | 00,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\url.dll
[2009/03/08 04:34:28 | 00,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\url.dll
[2009/03/08 04:34:18 | 00,193,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msrating.dll
[2009/03/08 04:34:18 | 00,193,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msrating.dll
[2009/03/08 04:34:18 | 00,109,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\occache.dll
[2009/03/08 04:34:18 | 00,109,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2009/03/08 04:33:48 | 00,759,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\VGX.dll
[2009/03/08 04:33:40 | 00,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\corpol.dll
[2009/03/08 04:33:40 | 00,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\corpol.dll
[2009/03/08 04:33:26 | 00,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2009/03/08 04:33:26 | 00,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2009/03/08 04:33:16 | 00,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jscript.dll
[2009/03/08 04:33:16 | 00,726,528 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jscript.dll
[2009/03/08 04:33:08 | 00,229,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieaksie.dll
[2009/03/08 04:33:08 | 00,229,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieaksie.dll
[2009/03/08 04:33:06 | 00,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\vbscript.dll
[2009/03/08 04:33:06 | 00,420,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vbscript.dll
[2009/03/08 04:33:02 | 00,125,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieakeng.dll
[2009/03/08 04:33:02 | 00,125,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieakeng.dll
[2009/03/08 04:32:56 | 00,072,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admparse.dll
[2009/03/08 04:32:56 | 00,072,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\admparse.dll
[2009/03/08 04:32:54 | 00,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2009/03/08 04:32:54 | 00,173,056 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2009/03/08 04:32:52 | 00,163,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieakui.dll
[2009/03/08 04:32:52 | 00,163,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieakui.dll
[2009/03/08 04:32:52 | 00,036,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieudinit.exe
[2009/03/08 04:32:50 | 00,071,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iesetup.dll
[2009/03/08 04:32:50 | 00,071,680 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iesetup.dll
[2009/03/08 04:32:50 | 00,055,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iernonce.dll
[2009/03/08 04:32:50 | 00,055,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iernonce.dll
[2009/03/08 04:32:48 | 00,128,512 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\advpack.dll
[2009/03/08 04:32:48 | 00,128,512 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\advpack.dll
[2009/03/08 04:32:46 | 00,094,720 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inseng.dll
[2009/03/08 04:32:46 | 00,094,720 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inseng.dll
[2009/03/08 04:32:26 | 00,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2009/03/08 04:32:26 | 00,594,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/03/08 04:32:22 | 01,985,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iertutil.dll
[2009/03/08 04:32:22 | 01,985,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/03/08 04:32:04 | 00,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2009/03/08 04:32:04 | 00,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2009/03/08 04:31:56 | 00,183,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2009/03/08 04:31:56 | 00,183,808 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2009/03/08 04:31:54 | 00,013,312 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedssync.exe
[2009/03/08 04:31:52 | 00,059,904 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\icardie.dll
[2009/03/08 04:31:52 | 00,059,904 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icardie.dll
[2009/03/08 04:31:52 | 00,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2009/03/08 04:31:52 | 00,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/03/08 04:31:44 | 00,348,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dxtmsft.dll
[2009/03/08 04:31:44 | 00,348,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxtmsft.dll
[2009/03/08 04:31:38 | 00,216,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dxtrans.dll
[2009/03/08 04:31:38 | 00,216,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxtrans.dll
[2009/03/08 04:31:38 | 00,034,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\imgutil.dll
[2009/03/08 04:31:38 | 00,034,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imgutil.dll
[2009/03/08 04:31:36 | 00,046,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\pngfilt.dll
[2009/03/08 04:31:36 | 00,046,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pngfilt.dll
[2009/03/08 04:31:26 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtmled.dll
[2009/03/08 04:31:26 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2009/03/08 04:31:18 | 00,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtmler.dll
[2009/03/08 04:31:18 | 00,048,128 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmler.dll
[2009/03/08 04:31:02 | 01,638,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtml.tlb
[2009/03/08 04:31:02 | 01,638,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.tlb
[2009/03/08 04:31:02 | 00,045,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshta.exe
[2009/03/08 04:31:02 | 00,045,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshta.exe
[2009/03/08 04:30:56 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\tdc.ocx
[2009/03/08 04:30:56 | 00,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdc.ocx
[2009/03/08 04:24:28 | 00,068,608 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hmmapi.dll
[2009/03/08 04:22:46 | 00,164,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieui.dll
[2009/03/08 04:22:38 | 00,156,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msls31.dll
[2009/03/08 04:22:38 | 00,156,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msls31.dll
[2009/03/08 04:15:06 | 00,057,667 | —- | M] () – C:\WINDOWS\System32\ieuinit.inf
[2009/03/08 04:11:12 | 00,445,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieapfltr.dll
[2009/03/08 04:11:12 | 00,445,952 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2009/02/28 00:55:00 | 00,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iecompat.dll

========== LOP Check ==========

[2009/03/22 09:30:47 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2009/03/20 16:37:06 | 00,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2009/03/20 23:47:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\acccore
[2009/03/20 16:02:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Adobe
[2009/03/20 23:48:04 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AIM Toolbar
[2009/03/20 23:47:45 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL
[2009/03/21 01:25:01 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2009/03/21 08:53:40 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple
[2009/03/21 08:55:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/03/20 23:46:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ashampoo
[2009/03/20 16:15:20 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg8
[2009/03/20 15:45:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DIGStream
[2009/03/20 22:41:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google
[2009/03/22 08:54:38 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google Updater
[2009/03/21 00:46:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Kodak
[2009/03/20 16:36:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Lavasoft
[2009/03/22 09:30:47 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/03/21 15:09:45 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/03/20 22:43:26 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2009/03/20 18:06:40 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\V505
[2009/03/20 18:06:41 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\V505 Series
[2009/03/20 23:47:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/03/20 18:53:57 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/03/20 23:13:28 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2009/03/20 23:38:15 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2009/03/22 09:31:00 | 00,000,000 | -H-D | M] – C:\Documents and Settings\BrownHouse\Application Data
[2009/03/21 01:25:17 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\acccore
[2009/03/20 21:04:55 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Adobe
[2009/03/20 16:04:25 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\AdobeUM
[2009/03/20 16:19:27 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\AVGTOOLBAR
[2009/03/20 18:49:31 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Dell Imaging Toolbox
[2009/03/21 00:36:53 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\FUJIFILM
[2009/03/20 22:42:05 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Google
[2009/03/20 15:53:30 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Identities
[2009/03/20 16:37:42 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Macromedia
[2009/03/22 09:31:00 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Malwarebytes
[2009/03/21 16:14:02 | 00,000,000 | –SD | M] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft
[2009/03/20 21:23:48 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Microsoft Web Folders
[2009/03/20 22:44:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Mozilla
[2009/03/21 01:26:22 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\mp3rocket
[2009/03/20 22:43:23 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\NCH Swift Sound
[2009/03/21 15:10:28 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Opera
[2009/03/21 10:44:34 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Real
[2009/03/20 23:54:53 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Sun
[2009/03/20 18:47:19 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\V505 Series
[2009/03/20 23:15:11 | 00,000,000 | —D | M] – C:\Documents and Settings\BrownHouse\Application Data\Yahoo!
[2009/03/20 16:38:28 | 00,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2004/08/10 07:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/03/21 00:42:12 | 00,000,446 | —- | M] () – C:\WINDOWS\Tasks\EasyShare Registration Task.job
[2009/03/22 15:41:56 | 00,000,868 | —- | M] () – C:\WINDOWS\Tasks\Google Software Updater.job
[2009/03/22 15:41:34 | 00,000,890 | —- | M] () – C:\WINDOWS\Tasks\GoogleUpdateTaskMachine.job
[2009/03/22 15:41:33 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT

========== Purity Check ==========

< End of report >
Post #15
Hi Ethel975,

Good news, your log is clean :thumbup:

Now we need to clean up after ourselves.
Please do the following:

Follow these steps to uninstall Combofix

  • Click START then RUN
  • Now type Combofix /u in the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.


[external image: Posted Image]



Next:

Download ToolsCleaner2 to your desktop and run it ( by de A.Rothstein & Dj Quiou )
  • Click the Pt. Restauration button and press OK to the prompts.
  • Click the Corbeille button and press OK to the prompt.
  • Click the Fichiers temp button and press OK to the prompt.
  • Click the Recherche button and let it run ( it may look like it freezes but let it continue )
  • Once it is done click the Suppression button and let it remove anything it finds.
  • Close the program


NEXT

Visit ADOBEand download the latest version of Acrobat Reader (version 9)

Next

The free version of AVG is highly recommended, but if you're not that happy with it. Avast and Avira AntiVir are excellent programs as well. As they are free, try them out one at a time, see which one suits your needs the most. Make sure you only install ONE antivirus at a time though. More than one can cause conflicts and system instability. The most important thing is to keep it updated to the latest virus definitions.




I also recommend using a third party firewall to protect your computer from hackers.
We don't recommend the firewall that comes built in to Windows.
It doesn't block everything that may try to get in, and the entire firewall is written to the registry.
As various kinds of malware hack the Registry in order to disable the Windows firewall, it's far preferable to install one of the excellent third party solutions.

Three excellent free firewalls are:

Comodo
Sunbelt Kerio
Sygate
NOTE: DO NOT install more than one firewall.

Note: If you choose Comodo - Please be careful with the installation of the Comodo program, it comes bundled with an adware toolbar which you need to de-select when you are going through the installation process. It's not a malicious program, but it may be a privacy risk and I don't think you want it on your system.

Now you are clean:

Below I have included a number of recommendations for how to protect your computer against malware infections.
  • Keep Windows updated by regularly checking their website at :
    http://windowsupdate.microsoft.com/
    This will ensure your computer has always the latest security updates available installed on your computer.
  • SpywareBlaster protects against bad ActiveX, it immunizes your PC against them.
  • SpywareGuard offers realtime protection from spyware installation attempts. Make sure you are only running one real-time anti-spyware protection program ( eg : TeaTimer, Windows Defender ) or there will be a conflict.
  • Make Internet Explorer more secure
    • Click Start > Run
    • Type Inetcpl.cpl & click OK
    • Click on the Security tab
    • Click Reset all zones to default level
    • Make sure the Internet Zone is selected & Click Custom level
    • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
    • Next Click OK, then Apply button and then OK to exit the Internet Properties page.
  • ATF Cleaner - Cleans temporary files from IE and Windows, empties the recycle bin and more.  Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
  • MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
  • For Firefox, I highly recommend these add-ons to keep your PC even more secure.
    • NoScript - for blocking ads and other potential website attacks
    • McAfee SiteAdvisor - this tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling
  • Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories.  This article is full of good information on alternatives for home backup solutions.
  • ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
  • Recovery Console - Recent trends appear to indicate that future infections will include attacks to the boot sector of the computer. The installation of the Recovery Console in the computer will be our only defense against this threat. For more information and steps to install the Recovery Console see This Article. Should you need assistance in installing the Recovery Console, please do not hesitate to ask.
  • Please read the guide by Rorschach112on how to prevent malware and about safe computing here
Thank you for your patience, and performing all of the procedures requested.

If you have any further questions please feel free to ask.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI