[Resolved] access to directories denied by windows XP

I have recently weathered what was apparently a virus attack, although I never was able to determine the culprit.

I ended up having to get a new hard drive and do a full reinstall on one of our desktops.

I have now found a problem on my son's desktop, it appears to be very similar to the first one.

This computer is an HP a1020n with 2GB RAM, 120GB WD HDD, and most of the bells and whistles.
It is about three (3) years old.

At some point in an attempt to rid himself of a very slow running system, my son reinstalled windows home edition right over the top of the existing installation thinking it would speed up if everything was renewed. ( A 23year old who thinks he knows everything.)

It is somewhat faster, but in the process, the directory containing all his data files, documents, spreadsheets etc has been changed by windows.

The directory is still there, but when you try to open it the screen comes back with saying that the directory is not accessible and Access is Denied.

When the mouse pointer is played over the directory, The Screen says "Folder is Empty".
I have loaded HijackThis, AVG Free, Malwarebytes Anti Malware and Zone Alarm Firewall onto his computer.
I can scan the directory and subdirectories with these scanners and there are over a thousand files there.

There are no bad guys, luckily.

I have tried accessing from safe mode without success either.
I have tried accessing from the c prompt as well and access is still denied.

Prior to reinstalling windows he did have windows password protected and that is no longer there.
I suspect that this is the root of the problem, but i do not know how to fix it, please help me.

I have included a log from HijackThis, although I do not think this will help too much in this case.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:07:35 AM, on 3/23/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18372)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\tools\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\tools\AVG\AVG8\avgemc.exe
C:\tools\AVG\AVG8\avgrsx.exe
C:\tools\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\tools\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\kmw_run.exe
C:\tools\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Tools\Pure Networks\Network Magic\nmapp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WordPerfect Office 12\Programs\CorUpd.exe
C:\WINDOWS\system32\KMW_SHOW.EXE
C:\WINDOWS\System32\svchost.exe
C:\tools\AVG\AVG8\avgnsx.exe
C:\Tools\IObit\Advanced SystemCare 3\AWC.exe
C:\Tools\Mozilla Tri-Pack\Firefox\firefox.exe
C:\Tools\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\tools\AVG\AVG8\avgssie.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NitroPDFBHO Class - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - C:\Program Files\Nitro PDF\PDF Download\NitroPDF.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google; - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AVG8_TRAY] C:\tools\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [kmw_run.exe] kmw_run.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\tools\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [nmapp] "C:\Tools\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [WordPerfect Office 1215] C:\Program Files\WordPerfect Office 12\Programs\Registration.exe /title="WordPerfect Office 12" /date=040309 serial=WS12WCX-0203227-XWJ
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [c:_program files_wordperfe3a] C:\Program Files\WordPerfect Office 12\Programs\CorUpd.exe /Watch /r="SOFTWARE\Corel\WordPerfect Suite\12"
O8 - Extra context menu item: &Google; Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate; English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Save Page As PDF … - file://C:\Program Files\Nitro PDF\PDF Download\nitroweb.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {AD9E6088-E00B-42f9-9F0C-8480525D234E} - C:\Program Files\Nitro PDF\PDF Download\NitroPDF.dll
O9 - Extra 'Tools' menuitem: PDF Download - Options - {AD9E6088-E00B-42f9-9F0C-8480525D234E} - C:\Program Files\Nitro PDF\PDF Download\NitroPDF.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: PDF Download - {F1C0FD6C-A6A0-49a7-A932-71A56461867F} - C:\Program Files\Nitro PDF\PDF Download\NitroPDF.dll (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1237271591195
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1237296730125
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\tools\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\tools\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\tools\AVG\AVG8\avgwdsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

–
End of file - 6733 bytes


Here is a MBAM log as well:


Malwarebytes' Anti-Malware 1.34
Database version: 1887
Windows 5.1.2600 Service Pack 2

3/23/2009 11:37:44 AM
mbam-log-2009-03-23 (11-37-44).txt

Scan type: Quick Scan
Objects scanned: 93317
Time elapsed: 5 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\Tasks\MalwareRemovalBot Scheduled Scan.job (Rogue.MalwareRemovalBot) -> Quarantined and deleted successfully.

as you can see there was a small nagging issue, that MBAM hopefully solved.

Thank you.

Respectfully,

Bob Bush


here is an OTListIt2 log

OTListIt logfile created on: 3/23/2009 7:16:34 PM - Run 4
OTListIt2 by OldTimer - Version 2.0.7.1 Folder = C:\Documents and Settings\bob bush.BOB\Desktop
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18372)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.50 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 66.97% Memory free
3.35 Gb Paging File | 2.99 Gb Available in Paging File | 89.07% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 55.45 Gb Free Space | 74.41% Space Free | Partition Type: NTFS
Drive D: | 28.61 Gb Total Space | 26.53 Gb Free Space | 92.72% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: BOB
Current User Name: bob bush
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD)
PRC - C:\tools\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
PRC - C:\tools\AVG\AVG8\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\tools\AVG\AVG8\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\tools\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\tools\AVG\AVG8\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\system32\kmw_run.exe (Kensington Technology Group)
PRC - C:\tools\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
PRC - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
PRC - C:\Tools\Pure Networks\Network Magic\nmapp.exe (Cisco Systems, Inc.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\WordPerfect Office 12\Programs\CorUpd.exe (Corel Corporation)
PRC - C:\WINDOWS\system32\KMW_SHOW.EXE ()
PRC - C:\Documents and Settings\bob bush.BOB\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) – C:\WINDOWS\System32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (avg8emc [Auto | Running]) – C:\tools\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg8wd [Auto | Running]) – C:\tools\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (idsvc [Unknown | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (JavaQuickStarterService [Auto | Running]) – C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (Lavasoft Ad-Aware Service [Auto | Stopped]) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (nmservice [Auto | Running]) – C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (vsmon [Auto | Running]) – C:\WINDOWS\system32\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (ati2mtag [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (AvgLdx86 [System | Running]) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86 [System | Running]) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX [System | Running]) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (ctsfm2k [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys (Creative Technology Ltd)
DRV - (KMW_KBD [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\KMW_KBD.sys (Kensington Technology Group)
DRV - (KMW_SYS [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\KMW_SYS.sys (Kensington Technology Group)
DRV - (KMW_USB [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\KMW_USB.sys (Kensington Technology Group)
DRV - (Lbd [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (ossrv [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ctoss2k.sys (Creative Technology Ltd.)
DRV - (P17 [On_Demand | Running]) – C:\WINDOWS\system32\drivers\P17.sys (Creative Technology Ltd.)
DRV - (pnarp [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\pnarp.sys (Pure Networks, Inc.)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (purendis [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\purendis.sys (Pure Networks, Inc.)
DRV - (rtl8139 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\RTL8139.SYS (Realtek Semiconductor Corporation)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (srescan [Boot | Running]) – C:\WINDOWS\system32\ZoneLabs\srescan.sys (Check Point Software Technologies LTD)
DRV - (vsdatant [System | Running]) – C:\WINDOWS\System32\vsdatant.sys (Check Point Software Technologies LTD)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie


IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
IE - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\S-1-5-21-2025429265-436374069-1343024091-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.comcast.net/"
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.0
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\ [2009/03/17 19:05:48 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009/03/18 21:55:23 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components: C:\TOOLS\MOZILLA TRI-PACK\FIREFOX\COMPONENTS [2009/03/18 22:45:27 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\TOOLS\MOZILLA TRI-PACK\FIREFOX\PLUGINS [2009/03/20 07:03:34 | 00,000,000 | —D | M]

[2009/03/18 22:41:28 | 00,000,000 | —D | M] – C:\Documents and Settings\bob bush.BOB\Application Data\mozilla\Extensions
[2009/03/18 22:41:28 | 00,000,000 | —D | M] – C:\Documents and Settings\bob bush.BOB\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/17 22:18:22 | 00,000,000 | —D | M] – C:\Documents and Settings\bob bush.BOB\Application Data\mozilla\Firefox\Profiles\t41mmfxu.default\extensions

O1 HOSTS File: (734 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\tools\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (Google Inc.)
O2 - BHO: (no name) - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - Reg Error: Key error. File not found
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&Google;) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (Google Inc.)
O3 - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (Google Inc.)
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [AVG8_TRAY] C:\tools\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [kmw_run.exe] kmw_run.exe (Kensington Technology Group)
O4 - HKLM..\Run: [nmapp] "C:\Tools\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash (Cisco Systems, Inc.)
O4 - HKLM..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe" (Cisco Systems, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WordPerfect Office 1215] C:\Program Files\WordPerfect Office 12\Programs\Registration.exe /title="WordPerfect Office 12" /date=040309 serial=WS12WCX-0203227-XWJ (Corel Corporation)
O4 - HKLM..\Run: [ZoneAlarm Client] "C:\tools\Zone Labs\ZoneAlarm\zlclient.exe" (Check Point Software Technologies LTD)
O4 - HKU\S-1-5-21-2025429265-436374069-1343024091-1004..\Run: [c:_program files_wordperfe3a] C:\Program Files\WordPerfect Office 12\Programs\CorUpd.exe /Watch /r="SOFTWARE\Corel\WordPerfect Suite\12" (Corel Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O8 - Extra context menu item: &Google; Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate; English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Save Page As PDF … - file://C:\Program Files\Nitro PDF\PDF Download\nitroweb.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : PDF Download - Options - {AD9E6088-E00B-42f9-9F0C-8480525D234E} - Reg Error: Key error. File not found
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-2025429265-436374069-1343024091-1004\..Trusted Domains: 8 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/…b?1237271591195 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1237296730125 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\tools\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O32 - Autorun File - D:\AUTOEXEC.BAT () - [ FAT32 ]
O32 - Autorun File - D:\AUTOEXEC.BAR () - [ FAT32 ]
O33 - MountPoints2\{d1ab1a6b-136a-11de-95d7-000d8819a54b}\Shell - "" = AutoRun
O33 - MountPoints2\{d1ab1a6b-136a-11de-95d7-000d8819a54b}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{d1ab1a6b-136a-11de-95d7-000d8819a54b}\Shell\AutoRun\command - "" = G:\LaunchU3.exe – File not found
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()

========== Files/Folders - Created Within 30 Days ==========

[5 C:\WINDOWS\*.tmp files]
[2009/03/23 16:19:22 | 00,499,200 | —- | C] (OldTimer Tools) – C:\Documents and Settings\bob bush.BOB\Desktop\OTListIt2.exe
[2009/03/19 23:31:35 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\My Documents\Corel User Files
[2009/03/19 23:31:23 | 00,061,678 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Application Data\PFP120JPR.{PB
[2009/03/19 23:31:23 | 00,012,358 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Application Data\PFP120JCM.{PB
[2009/03/19 23:31:21 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Corel
[2009/03/19 23:31:12 | 00,002,429 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Desktop\WordPerfect.lnk
[2009/03/19 23:28:34 | 00,000,000 | —D | C] – C:\Program Files\WordPerfect Office 12
[2009/03/19 23:01:26 | 00,002,004 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Desktop\MS Access.lnk
[2009/03/19 23:00:11 | 00,002,044 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Desktop\MS Excel.lnk
[2009/03/19 22:58:42 | 00,002,036 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Desktop\MS Word.lnk
[2009/03/19 21:42:42 | 00,028,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mdimon.dll
[2009/03/19 21:30:09 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Adobe
[2009/03/19 21:26:58 | 00,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2009/03/19 11:44:08 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\ACDPhotoEditor
[2009/03/18 22:54:24 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Malwarebytes
[2009/03/18 22:54:22 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/03/18 22:54:19 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/03/18 22:54:08 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
[2009/03/18 22:45:28 | 00,001,674 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS\Desktop\Internet.lnk
[2009/03/18 22:37:48 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\My Documents\My Received Files
[2009/03/18 22:21:01 | 00,015,688 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2009/03/18 21:54:21 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Sun
[2009/03/18 20:12:04 | 00,064,160 | —- | C] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/03/18 20:11:47 | 00,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/03/18 20:08:26 | 00,000,000 | -H-D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2009/03/18 20:08:07 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft
[2009/03/18 19:48:03 | 00,090,112 | —- | C] (Software Design) – C:\WINDOWS\SDUnInst.exe
[2009/03/18 19:43:48 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\Google
[2009/03/18 15:36:53 | 00,026,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\USBSTOR.SYS
[2009/03/18 15:36:53 | 00,026,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbstor.sys
[2009/03/18 15:35:28 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\ACDSee
[2009/03/18 15:35:21 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\ACD Systems
[2009/03/18 15:34:41 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems
[2009/03/18 15:22:27 | 00,294,912 | —- | C] (ACD Systems Inc.) – C:\Documents and Settings\bob bush.BOB\Application Data\ACDInTouch50.dll
[2009/03/18 15:22:02 | 00,294,912 | —- | C] (ACD Systems Inc.) – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\ACDInTouch50.dll
[2009/03/18 15:18:27 | 00,294,912 | —- | C] (ACD Systems Inc.) – C:\WINDOWS\System32\ACDInTouch50.dll
[2009/03/18 15:17:50 | 00,294,912 | —- | C] (ACD Systems Inc.) – C:\WINDOWS\System\ACDInTouch50.dll
[2009/03/18 02:36:42 | 00,006,656 | —- | C] () – C:\WINDOWS\System32\CNMVSyd.DLL
[2009/03/18 02:33:39 | 00,000,104 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Desktop\My Network Places.lnk
[2009/03/18 01:01:33 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\Help
[2009/03/18 01:01:33 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Help
[2009/03/18 01:01:15 | 00,266,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\TweakUI.exe
[2009/03/18 01:01:15 | 00,160,217 | —- | C] () – C:\WINDOWS\System32\PowerToysLicense.rtf
[2009/03/17 23:37:12 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\Identities
[2009/03/17 22:57:08 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\IObit
[2009/03/17 22:48:53 | 00,737,280 | —- | C] (Indigo Rose Corporation) – C:\WINDOWS\iun6002.exe
[2009/03/17 22:39:34 | 00,023,992 | —- | C] (Pure Networks, Inc.) – C:\WINDOWS\System32\drivers\pnarp.sys
[2009/03/17 22:39:26 | 00,025,272 | —- | C] (Pure Networks, Inc.) – C:\WINDOWS\System32\drivers\purendis.sys
[2009/03/17 22:38:33 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Pure Networks
[2009/03/17 22:18:52 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Macromedia
[2009/03/17 22:18:25 | 00,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/03/17 22:18:10 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\Mozilla
[2009/03/17 22:18:10 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Mozilla
[2009/03/17 22:05:43 | 00,000,686 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Desktop\Perfect General.lnk
[2009/03/17 21:51:59 | 00,004,212 | -H– | C] () – C:\WINDOWS\System32\zllictbl.dat
[2009/03/17 21:51:14 | 00,348,371 | —- | C] () – C:\WINDOWS\System32\vsconfig.xml
[2009/03/17 21:47:14 | 00,268,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2009/03/17 21:47:14 | 00,027,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2009/03/17 19:44:31 | 01,089,601 | —- | C] () – C:\WINDOWS\System32\dllcache\ntprint.cat
[2009/03/17 19:31:49 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Kensington
[2009/03/17 19:30:54 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iecompat.dll
[2009/03/17 19:29:47 | 00,176,128 | —- | C] () – C:\WINDOWS\System32\kmw_show.exe
[2009/03/17 19:29:47 | 00,110,592 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\kmw_dll.dll
[2009/03/17 19:29:47 | 00,106,496 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\kmw_run.exe
[2009/03/17 19:29:47 | 00,010,112 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\drivers\KMW_USB.sys
[2009/03/17 19:29:47 | 00,005,376 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\drivers\KMW_KBD.sys
[2009/03/17 19:29:47 | 00,004,736 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\drivers\KMW_LIB.sys
[2009/03/17 19:26:16 | 00,000,000 | —D | C] – C:\Program Files\Nitro PDF
[2009/03/17 19:19:38 | 10,963,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/03/17 19:19:38 | 03,698,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2009/03/17 19:19:38 | 01,975,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/03/17 19:19:38 | 01,228,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2009/03/17 19:19:38 | 00,593,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/03/17 19:19:38 | 00,445,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2009/03/17 19:19:38 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icardie.dll
[2009/03/17 19:19:38 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/03/17 19:19:38 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieudinit.exe
[2009/03/17 19:17:37 | 00,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xmllite.dll
[2009/03/17 19:16:12 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2009/03/17 19:03:50 | 00,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2009/03/17 19:03:50 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2009/03/17 19:03:49 | 01,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2009/03/17 19:03:49 | 01,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2009/03/17 19:03:49 | 00,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2009/03/17 19:03:49 | 00,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsshhdr.dll
[2009/03/17 19:03:49 | 00,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2009/03/17 19:03:48 | 00,000,000 | —D | C] – C:\09ac3158889dffed87dd
[2009/03/17 18:58:36 | 01,197,294 | —- | C] () – C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009/03/17 18:58:36 | 00,764,868 | —- | C] () – C:\WINDOWS\System32\dllcache\apph_sp.sdb
[2009/03/17 18:58:36 | 00,217,118 | —- | C] () – C:\WINDOWS\System32\dllcache\apphelp.sdb
[2009/03/17 18:58:31 | 00,016,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2009/03/17 18:56:11 | 00,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\splitter.sys
[2009/03/17 18:56:11 | 00,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\splitter.sys
[2009/03/17 18:56:09 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\wdmaud.sys
[2009/03/17 18:56:09 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdmaud.sys
[2009/03/17 18:56:06 | 00,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\DMusic.sys
[2009/03/17 18:56:06 | 00,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dmusic.sys
[2009/03/17 18:56:01 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\swmidi.sys
[2009/03/17 18:56:01 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swmidi.sys
[2009/03/17 18:55:58 | 00,142,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\aec.sys
[2009/03/17 18:55:58 | 00,142,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aec.sys
[2009/03/17 18:55:56 | 00,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\kmixer.sys
[2009/03/17 18:55:56 | 00,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kmixer.sys
[2009/03/17 18:55:54 | 00,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmkaud.sys
[2009/03/17 18:55:54 | 00,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmkaud.sys
[2009/03/17 18:55:51 | 00,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sysaudio.sys
[2009/03/17 18:55:51 | 00,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sysaudio.sys
[2009/03/17 18:55:49 | 00,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\MSKSSRV.sys
[2009/03/17 18:55:49 | 00,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mskssrv.sys
[2009/03/17 18:55:47 | 00,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\MSPQM.sys
[2009/03/17 18:55:47 | 00,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspqm.sys
[2009/03/17 18:55:44 | 00,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\MSPCLOCK.sys
[2009/03/17 18:55:44 | 00,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspclock.sys
[2009/03/17 18:55:32 | 00,145,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2009/03/17 18:55:32 | 00,145,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\portcls.sys
[2009/03/17 18:55:32 | 00,130,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2009/03/17 18:55:32 | 00,130,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksproxy.ax
[2009/03/17 18:55:32 | 00,060,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2009/03/17 18:55:32 | 00,060,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmk.sys
[2009/03/17 18:55:32 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2009/03/17 18:55:32 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksuser.dll
[2009/03/17 18:54:50 | 00,128,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fltmgr.sys
[2009/03/17 18:54:50 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fltmc.exe
[2009/03/17 18:54:50 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fltlib.dll
[2009/03/17 18:54:41 | 00,376,832 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\exshow.exe
[2009/03/17 18:54:41 | 00,122,880 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\shw95dll.dll
[2009/03/17 18:54:41 | 00,045,056 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\exshow95.exe
[2009/03/17 18:54:38 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mouclass.sys
[2009/03/17 18:54:37 | 00,012,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mouhid.sys
[2009/03/17 18:51:54 | 00,584,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2009/03/17 18:35:01 | 00,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/03/17 18:32:17 | 00,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2009/03/17 16:06:17 | 00,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2009/03/17 16:06:08 | 00,138,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\afd.sys
[2009/03/17 16:06:01 | 00,348,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxtmsft.dll
[2009/03/17 16:06:01 | 00,216,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxtrans.dll
[2009/03/17 16:06:01 | 00,183,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2009/03/17 16:06:01 | 00,133,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\extmgr.dll
[2009/03/17 16:06:01 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedw.exe
[2009/03/17 16:06:01 | 00,066,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2009/03/17 16:06:01 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2009/03/17 16:06:00 | 00,911,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2009/03/17 16:06:00 | 00,193,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msrating.dll
[2009/03/17 16:06:00 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inseng.dll
[2009/03/17 16:05:59 | 01,182,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2009/03/17 16:05:59 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pngfilt.dll
[2009/03/17 16:05:58 | 00,474,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shlwapi.dll
[2009/03/17 16:05:58 | 00,151,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdfview.dll
[2009/03/17 16:05:57 | 01,054,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\danim.dll
[2009/03/17 16:05:57 | 01,023,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browseui.dll
[2009/03/17 16:05:57 | 00,611,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2009/03/17 16:05:00 | 02,136,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2009/03/17 16:04:58 | 02,180,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2009/03/17 16:04:56 | 02,015,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2009/03/17 16:04:55 | 02,057,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2009/03/17 16:04:24 | 05,888,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2009/03/17 16:01:21 | 00,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2009/03/17 16:00:53 | 00,683,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2009/03/17 16:00:30 | 00,247,326 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmdll.dll
[2009/03/17 15:57:30 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Desktop\Tools
[2009/03/17 08:52:29 | 00,010,520 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2009/03/17 08:52:28 | 00,107,272 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/03/17 08:52:20 | 00,325,128 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/03/17 08:52:18 | 00,027,656 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/03/17 08:51:58 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\avg8
[2009/03/17 05:00:32 | 24,768,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MRT.exe
[2009/03/17 05:00:24 | 00,046,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\setdebug.exe
[2009/03/17 05:00:23 | 00,139,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\javaee.dll
[2009/03/17 05:00:23 | 00,007,315 | —- | C] () – C:\WINDOWS\System32\javasup.vxd
[2009/03/17 05:00:23 | 00,006,550 | —- | C] () – C:\WINDOWS\jautoexp.dat
[2009/03/17 05:00:18 | 00,000,113 | —- | C] () – C:\WINDOWS\System32\zonedon.reg
[2009/03/17 05:00:18 | 00,000,113 | —- | C] () – C:\WINDOWS\System32\zonedoff.reg
[2009/03/17 04:51:23 | 00,013,104 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/03/17 04:50:39 | 00,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2009/03/17 04:11:56 | 00,000,000 | —- | C] () – C:\WINDOWS\ativpsrm.bin
[2009/03/17 03:05:38 | 00,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2009/03/17 03:03:09 | 00,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2009/03/17 02:58:00 | 00,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2009/03/17 02:35:56 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spnpinst.exe
[2009/03/17 02:35:55 | 00,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2009/03/17 02:35:55 | 00,007,208 | —- | C] () – C:\WINDOWS\System32\secupd.sig
[2009/03/17 02:35:55 | 00,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2009/03/17 02:24:50 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Windows Genuine Advantage
[2009/03/17 02:20:59 | 06,960,418 | -H– | C] () – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\IconCache.db
[2009/03/17 01:43:23 | 00,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2009/03/17 01:41:49 | 00,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2009/03/17 01:41:38 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2009/03/17 01:41:38 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2009/03/17 01:41:38 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2009/03/17 01:41:37 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2009/03/17 01:41:37 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2009/03/17 01:41:36 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2009/03/17 01:41:35 | 00,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2009/03/17 01:41:35 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2009/03/17 01:41:34 | 00,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2009/03/17 01:41:34 | 00,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2009/03/17 01:41:34 | 00,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2009/03/17 01:41:31 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2009/03/17 01:41:31 | 00,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2009/03/17 01:41:30 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2009/03/17 01:41:29 | 00,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2009/03/17 01:41:29 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2009/03/17 01:41:29 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2009/03/17 01:41:28 | 00,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2009/03/17 01:41:28 | 00,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2009/03/17 01:41:27 | 00,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2009/03/17 01:41:27 | 00,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2009/03/17 01:41:27 | 00,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2009/03/17 01:41:24 | 00,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2009/03/17 01:41:23 | 00,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2009/03/17 01:41:23 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2009/03/17 01:41:22 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2009/03/17 01:41:21 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2009/03/17 01:41:20 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2009/03/17 01:41:20 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2009/03/17 01:41:20 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpapi.dll
[2009/03/17 01:41:20 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2009/03/17 01:41:20 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2009/03/17 01:41:19 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2009/03/17 01:41:19 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2009/03/17 01:41:19 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2009/03/17 01:41:19 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2009/03/17 01:41:19 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2009/03/17 01:41:19 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2009/03/17 01:41:18 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2009/03/17 01:41:18 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2009/03/17 01:41:18 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2009/03/17 01:41:18 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2009/03/17 01:41:18 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2009/03/17 01:41:18 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2009/03/17 01:41:17 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2009/03/17 01:41:14 | 00,205,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seo.dll
[2009/03/17 01:41:14 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2009/03/17 01:41:13 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2009/03/17 01:41:12 | 00,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2009/03/17 01:41:12 | 00,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2009/03/17 01:41:12 | 00,026,624 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw330ext.dll
[2009/03/17 01:41:12 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rw001ext.dll
[2009/03/17 01:41:12 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_rwnh.dll
[2009/03/17 01:41:11 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2009/03/17 01:41:10 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2009/03/17 01:41:10 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2009/03/17 01:41:08 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2009/03/17 01:41:08 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2009/03/17 01:41:08 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2009/03/17 01:41:06 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2009/03/17 01:41:06 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2009/03/17 01:41:06 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2009/03/17 01:41:06 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2009/03/17 01:41:05 | 00,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2009/03/17 01:41:05 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2009/03/17 01:41:04 | 00,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2009/03/17 01:41:04 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2009/03/17 01:41:04 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2009/03/17 01:41:03 | 00,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2009/03/17 01:41:03 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2009/03/17 01:41:03 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2009/03/17 01:41:03 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2009/03/17 01:41:01 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2009/03/17 01:40:58 | 00,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2009/03/17 01:40:57 | 00,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtstocom.exe
[2009/03/17 01:40:53 | 01,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2009/03/17 01:40:53 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2009/03/17 01:40:47 | 00,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2009/03/17 01:40:47 | 00,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2009/03/17 01:40:47 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2009/03/17 01:40:44 | 01,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2009/03/17 01:40:43 | 00,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2009/03/17 01:40:43 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2009/03/17 01:40:43 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2009/03/17 01:40:43 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2009/03/17 01:40:42 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2009/03/17 01:40:42 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2009/03/17 01:40:42 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2009/03/17 01:40:42 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2009/03/17 01:40:41 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2009/03/17 01:40:41 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2009/03/17 01:40:41 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2009/03/17 01:40:41 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlk41j.dll
[2009/03/17 01:40:41 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2009/03/17 01:40:41 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2009/03/17 01:40:40 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlk41a.dll
[2009/03/17 01:40:40 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2009/03/17 01:40:40 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2009/03/17 01:40:40 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2009/03/17 01:40:40 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2009/03/17 01:40:39 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2009/03/17 01:40:39 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2009/03/17 01:40:39 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2009/03/17 01:40:39 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2009/03/17 01:40:38 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdibm02.dll
[2009/03/17 01:40:38 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2009/03/17 01:40:38 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2009/03/17 01:40:38 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2009/03/17 01:40:38 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2009/03/17 01:40:37 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdax2.dll
[2009/03/17 01:40:37 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2009/03/17 01:40:37 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2009/03/17 01:40:37 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2009/03/17 01:40:37 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2009/03/17 01:40:36 | 00,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2009/03/17 01:40:36 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106n.dll
[2009/03/17 01:40:36 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2009/03/17 01:40:36 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101.dll
[2009/03/17 01:40:36 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2009/03/17 01:40:36 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2009/03/17 01:40:33 | 00,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2009/03/17 01:40:33 | 00,315,452 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2009/03/17 01:40:32 | 00,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2009/03/17 01:40:32 | 00,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2009/03/17 01:40:32 | 00,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2009/03/17 01:40:32 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2009/03/17 01:40:32 | 00,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2009/03/17 01:40:31 | 00,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2009/03/17 01:40:31 | 00,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2009/03/17 01:40:31 | 00,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2009/03/17 01:40:31 | 00,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2009/03/17 01:40:30 | 00,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2009/03/17 01:40:30 | 00,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2009/03/17 01:40:30 | 00,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2009/03/17 01:40:30 | 00,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2009/03/17 01:40:30 | 00,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2009/03/17 01:40:29 | 00,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2009/03/17 01:40:28 | 00,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2009/03/17 01:40:28 | 00,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2009/03/17 01:40:28 | 00,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2009/03/17 01:40:28 | 00,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2009/03/17 01:40:28 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2009/03/17 01:40:27 | 00,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2009/03/17 01:40:27 | 00,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2009/03/17 01:40:27 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2009/03/17 01:40:27 | 00,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2009/03/17 01:40:17 | 10,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2009/03/17 01:40:05 | 13,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2009/03/17 01:39:56 | 10,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2009/03/17 01:39:55 | 00,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2009/03/17 01:39:55 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2009/03/17 01:39:52 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2009/03/17 01:39:52 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2009/03/17 01:39:51 | 00,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2009/03/17 01:39:50 | 00,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2009/03/17 01:39:50 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2009/03/17 01:39:48 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2009/03/17 01:39:48 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2009/03/17 01:39:48 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\f3ahvoas.dll
[2009/03/17 01:39:47 | 00,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2009/03/17 01:39:46 | 00,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2009/03/17 01:39:46 | 00,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2009/03/17 01:39:46 | 00,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2009/03/17 01:39:45 | 00,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2009/03/17 01:39:40 | 00,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2009/03/17 01:39:39 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2009/03/17 01:39:38 | 00,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2009/03/17 01:39:36 | 00,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2009/03/17 01:39:36 | 00,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2009/03/17 01:39:36 | 00,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2009/03/17 01:39:36 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2009/03/17 01:39:35 | 00,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2009/03/17 01:39:35 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2009/03/17 01:39:35 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2009/03/17 01:39:34 | 01,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2009/03/17 01:39:33 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2009/03/17 01:39:33 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2009/03/17 01:39:33 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2009/03/17 01:39:33 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2009/03/17 01:39:32 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2009/03/17 01:39:31 | 00,218,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_g18030.dll
[2009/03/17 01:39:31 | 00,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2009/03/17 01:39:31 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2009/03/17 01:39:31 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2009/03/17 01:39:29 | 00,312,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqueue.dll
[2009/03/17 01:39:29 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2009/03/17 01:39:28 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0804.dll
[2009/03/17 01:39:28 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0412.dll
[2009/03/17 01:39:28 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0411.dll
[2009/03/17 01:39:28 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt040d.dll
[2009/03/17 01:39:28 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0404.dll
[2009/03/17 01:39:28 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0401.dll
[2009/03/17 01:39:27 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2009/03/17 01:39:21 | 02,134,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpsnap.dll
[2009/03/17 01:39:21 | 00,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpadm.dll
[2009/03/17 01:38:53 | 00,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2009/03/17 01:38:53 | 00,000,000 | —- | C] () – C:\WINDOWS\control.ini
[2009/03/17 01:38:50 | 00,025,065 | —- | C] () – C:\WINDOWS\System32\wmpscheme.xml
[2009/03/17 01:38:50 | 00,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2009/03/17 01:38:50 | 00,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2009/03/17 01:38:48 | 00,299,552 | —- | C] () – C:\WINDOWS\WMSysPrx.prx
[2009/03/17 01:38:34 | 00,000,006 | -H– | C] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/17 01:38:31 | 00,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2009/03/17 01:37:24 | 00,000,488 | RH– | C] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/03/17 01:37:24 | 00,000,488 | RH– | C] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | C] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/03/17 01:36:50 | 04,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2009/03/17 01:36:33 | 00,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2009/03/17 01:36:04 | 00,000,000 | -H-D | C] – C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2009/03/17 01:36:02 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msoobe.exe
[2009/03/17 01:36:00 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2009/03/17 01:35:59 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2009/03/17 01:35:59 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2009/03/17 01:35:59 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2009/03/17 01:35:59 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2009/03/17 01:35:59 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2009/03/17 01:35:59 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2009/03/17 01:35:58 | 00,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2009/03/17 01:35:58 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2009/03/17 01:35:58 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2009/03/17 01:35:55 | 00,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2009/03/17 01:35:55 | 00,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2009/03/17 01:35:55 | 00,000,002 | —- | C] () – C:\WINDOWS\System32\desktop.ini
[2009/03/17 01:35:55 | 00,000,002 | —- | C] () – C:\WINDOWS\desktop.ini
[2009/03/17 01:35:47 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2009/03/17 01:35:47 | 00,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2009/03/17 01:35:46 | 00,118,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg723.acm
[2009/03/17 01:35:46 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmsrvc.exe
[2009/03/17 01:35:46 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2009/03/17 01:35:46 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2009/03/17 01:35:45 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2009/03/17 01:35:45 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2009/03/17 01:35:44 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2009/03/17 01:35:42 | 00,000,065 | RH– | C] () – C:\WINDOWS\tasks\desktop.ini
[2009/03/17 01:35:41 | 00,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2009/03/17 01:35:41 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2009/03/17 01:35:41 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2009/03/17 01:35:41 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2009/03/17 01:35:41 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2009/03/17 01:35:41 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2009/03/17 01:35:40 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2009/03/17 01:35:39 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2009/03/17 01:35:38 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2009/03/17 01:35:38 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2009/03/17 01:35:28 | 00,520,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpvis.dll
[2009/03/17 01:35:27 | 00,382,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgr.dll
[2009/03/17 01:35:26 | 00,319,542 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmres.dll
[2009/03/17 01:35:26 | 00,163,897 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmutil.dll
[2009/03/17 01:35:26 | 00,110,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmfilt.dll
[2009/03/17 01:35:18 | 00,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2009/03/17 01:35:18 | 00,170,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srsvc.dll
[2009/03/17 01:35:18 | 00,073,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\sr.sys
[2009/03/17 01:35:18 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srclient.dll
[2009/03/17 01:35:17 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2009/03/17 01:35:16 | 00,188,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msh261.drv
[2009/03/17 01:35:16 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2009/03/17 01:35:16 | 00,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2009/03/17 01:35:16 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2009/03/17 01:35:11 | 00,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2009/03/17 01:35:11 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2009/03/17 01:35:10 | 00,683,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcomm.dll
[2009/03/17 01:35:08 | 00,274,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstask.dll
[2009/03/17 01:35:08 | 00,190,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\schedsvc.dll
[2009/03/17 01:35:08 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2009/03/17 01:35:06 | 00,438,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpob2res.dll
[2009/03/17 01:35:06 | 00,351,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winhttp.dll
[2009/03/17 01:35:06 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2009/03/17 01:35:06 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2009/03/17 01:35:06 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2009/03/17 01:34:48 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users.WINDOWS\Documents\My Pictures
[2009/03/17 01:34:48 | 00,000,000 | R–D | C] – C:\Documents and Settings\All Users.WINDOWS\Documents\My Music
[2009/03/17 01:34:42 | 00,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/03/17 01:34:30 | 00,000,037 | —- | C] () – C:\WINDOWS\vbaddin.ini
[2009/03/17 01:34:30 | 00,000,036 | —- | C] () – C:\WINDOWS\vb.ini
[2009/03/17 01:33:41 | 00,323,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2009/03/17 01:33:41 | 00,043,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups2.dll
[2009/03/17 01:33:41 | 00,034,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2009/03/17 01:33:41 | 00,031,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll.mui
[2009/03/17 01:33:41 | 00,018,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll.mui
[2009/03/17 01:33:40 | 00,561,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2009/03/17 01:33:40 | 00,213,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl
[2009/03/17 01:33:40 | 00,023,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaucpl.cpl.mui
[2009/03/17 01:33:40 | 00,023,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll.mui
[2009/03/17 01:33:34 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2009/03/17 01:33:34 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2009/03/17 01:33:28 | 00,183,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2009/03/17 01:33:28 | 00,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2009/03/17 01:33:28 | 00,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2009/03/17 01:33:28 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2009/03/17 01:33:27 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2009/03/17 01:33:27 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2009/03/17 01:33:27 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2009/03/17 01:33:27 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2009/03/17 01:33:27 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2009/03/17 01:33:26 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2009/03/17 01:33:26 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2009/03/17 01:33:25 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2009/03/17 01:33:25 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2009/03/17 01:33:21 | 00,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2009/03/17 01:33:20 | 00,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2009/03/17 01:33:20 | 00,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2009/03/17 01:33:20 | 00,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2009/03/17 01:33:20 | 00,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2009/03/17 01:33:20 | 00,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2009/03/17 01:33:20 | 00,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2009/03/17 01:33:20 | 00,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2009/03/17 01:33:20 | 00,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2009/03/17 01:33:19 | 00,093,702 | —- | C] () – C:\WINDOWS\System32\subrange.uce
[2009/03/17 01:33:19 | 00,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2009/03/17 01:33:19 | 00,016,740 | —- | C] () – C:\WINDOWS\System32\shiftjis.uce
[2009/03/17 01:33:19 | 00,012,876 | —- | C] () – C:\WINDOWS\System32\korean.uce
[2009/03/17 01:33:19 | 00,008,484 | —- | C] () – C:\WINDOWS\System32\kanji_2.uce
[2009/03/17 01:33:19 | 00,006,948 | —- | C] () – C:\WINDOWS\System32\kanji_1.uce
[2009/03/17 01:33:19 | 00,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2009/03/17 01:33:18 | 00,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2009/03/17 01:33:18 | 00,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2009/03/17 01:33:18 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2009/03/17 01:33:18 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2009/03/17 01:33:18 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2009/03/17 01:33:18 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2009/03/17 01:33:18 | 00,060,458 | —- | C] () – C:\WINDOWS\System32\ideograf.uce
[2009/03/17 01:33:18 | 00,024,006 | —- | C] () – C:\WINDOWS\System32\gb2312.uce
[2009/03/17 01:33:18 | 00,022,984 | —- | C] () – C:\WINDOWS\System32\bopomofo.uce
[2009/03/17 01:33:17 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2009/03/17 01:33:17 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2009/03/17 01:33:17 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2009/03/17 01:33:17 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2009/03/17 01:33:17 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2009/03/17 01:33:17 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2009/03/17 01:33:16 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2009/03/17 01:33:16 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2009/03/17 01:33:16 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2009/03/17 01:33:16 | 00,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tdtcp.sys
[2009/03/17 01:33:16 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2009/03/17 01:33:16 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2009/03/17 01:33:16 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2009/03/17 01:33:16 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2009/03/17 01:33:16 | 00,013,223 | —- | C] () – C:\WINDOWS\System32\tslabels.ini
[2009/03/17 01:33:16 | 00,012,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\tdpipe.sys
[2009/03/17 01:33:16 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2009/03/17 01:33:16 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2009/03/17 01:33:16 | 00,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2009/03/17 01:33:16 | 00,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2009/03/17 01:33:15 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2009/03/17 01:33:15 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2009/03/17 01:33:15 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2009/03/17 01:33:15 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2009/03/17 01:33:15 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2009/03/17 01:33:15 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2009/03/17 01:33:15 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2009/03/17 01:33:15 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2009/03/17 01:33:15 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2009/03/17 01:33:15 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2009/03/17 01:33:15 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2009/03/17 01:33:15 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2009/03/17 01:33:15 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2009/03/17 01:33:15 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2009/03/17 01:33:15 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2009/03/17 01:33:15 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2009/03/17 01:33:15 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2009/03/17 01:33:15 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2009/03/17 01:33:15 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2009/03/17 01:33:15 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2009/03/17 01:33:15 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2009/03/17 01:33:14 | 00,956,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2009/03/17 01:33:14 | 00,161,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2009/03/17 01:33:14 | 00,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2009/03/17 01:33:14 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2009/03/17 01:33:14 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2009/03/17 01:33:13 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2009/03/17 01:33:13 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2009/03/17 01:33:13 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtc.exe
[2009/03/17 01:33:13 | 00,001,931 | —- | C] () – C:\WINDOWS\System32\msdtcprf.ini
[2009/03/17 01:33:13 | 00,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2009/03/17 01:33:12 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2009/03/17 01:33:12 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtxlegih.dll
[2009/03/17 01:33:12 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2009/03/17 01:33:12 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtxdm.dll
[2009/03/17 01:33:12 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2009/03/17 01:33:12 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dcomcnfg.exe
[2009/03/17 01:33:12 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comrereg.exe
[2009/03/17 01:33:12 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2009/03/17 01:33:12 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2009/03/17 01:33:12 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtxex.dll
[2009/03/17 01:33:11 | 00,110,080 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2009/03/17 01:33:11 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comrepl.dll
[2009/03/17 01:33:11 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2009/03/17 01:33:11 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2009/03/17 01:33:11 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2009/03/17 01:33:11 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2009/03/17 01:33:11 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\stclient.dll
[2009/03/17 01:33:11 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comaddin.dll
[2009/03/17 01:33:11 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2009/03/17 01:33:10 | 00,540,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2009/03/17 01:33:10 | 00,225,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2009/03/17 01:33:10 | 00,147,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comsnap.dll
[2009/03/17 01:33:10 | 00,147,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2009/03/17 01:33:09 | 00,498,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatq.dll
[2009/03/17 01:33:09 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2009/03/17 01:33:05 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2009/03/17 01:33:05 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2009/03/17 01:33:05 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2009/03/17 01:33:04 | 00,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2009/03/17 01:33:04 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2009/03/17 01:33:04 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2009/03/17 01:33:04 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2009/03/17 01:33:04 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2009/03/17 01:33:04 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2009/03/17 01:33:03 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2009/03/17 01:33:03 | 00,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2009/03/17 01:33:03 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2009/03/17 01:33:03 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2009/03/17 01:33:02 | 00,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2009/03/17 01:33:02 | 00,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2009/03/17 01:33:02 | 00,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2009/03/17 01:33:02 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2009/03/17 01:33:02 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2009/03/17 01:33:01 | 00,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2009/03/17 01:33:01 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2009/03/17 01:32:50 | 00,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2009/03/17 01:32:50 | 00,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2009/03/17 01:32:50 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2009/03/17 01:32:49 | 01,809,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng.dll
[2009/03/17 01:32:49 | 01,809,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/03/17 01:32:49 | 00,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2009/03/17 01:32:49 | 00,051,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt.exe
[2009/03/17 01:32:49 | 00,051,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/03/17 01:32:49 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauserv.dll
[2009/03/17 01:32:48 | 00,655,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstscax.dll
[2009/03/17 01:32:48 | 00,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstsc.exe
[2009/03/17 01:32:48 | 00,139,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rdpwd.sys
[2009/03/17 01:32:48 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2009/03/17 01:32:47 | 00,295,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\termsrv.dll
[2009/03/17 01:32:47 | 00,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2009/03/17 01:32:47 | 00,140,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sessmgr.exe
[2009/03/17 01:32:47 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\remotepg.dll
[2009/03/17 01:32:47 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2009/03/17 01:32:47 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2009/03/17 01:32:46 | 00,426,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2009/03/17 01:32:46 | 00,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2009/03/17 01:32:46 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2009/03/17 01:32:46 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2009/03/17 01:32:46 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2009/03/17 01:32:46 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2009/03/17 01:32:45 | 00,625,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2009/03/17 01:32:44 | 01,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2009/03/17 01:32:39 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2009/03/17 01:32:37 | 00,196,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rdpdr.sys
[2009/03/17 01:32:37 | 00,040,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\termdd.sys
[2009/03/17 00:50:15 | 00,000,104 | —- | C] () – C:\Documents and Settings\bob bush.BOB\Desktop\My Computer.lnk
[2009/03/17 00:45:58 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Identities
[2009/03/17 00:45:53 | 00,000,000 | R–D | C] – C:\Documents and Settings\bob bush.BOB\My Documents\My Music
[2009/03/17 00:45:52 | 00,000,079 | -HS- | C] () – C:\Documents and Settings\bob bush.BOB\My Documents\desktop.ini
[2009/03/17 00:45:52 | 00,000,000 | R–D | C] – C:\Documents and Settings\bob bush.BOB\My Documents\My Pictures
[2009/03/17 00:45:49 | 00,000,000 | —D | C] – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\Microsoft
[2009/03/17 00:45:48 | 00,000,084 | -HS- | C] () – C:\Documents and Settings\bob bush.BOB\Start Menu\Programs\Startup\desktop.ini
[2009/03/17 00:45:48 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\bob bush.BOB\Application Data\desktop.ini
[2009/03/17 00:45:48 | 00,000,000 | –SD | C] – C:\Documents and Settings\bob bush.BOB\Application Data\Microsoft
[2009/03/17 00:45:25 | 00,013,588 | —- | C] () – C:\WINDOWS\System32\wpa.bak
[2009/03/16 21:00:33 | 00,000,000 | —D | C] – C:\_OTListIt
[2009/03/16 19:26:28 | 00,003,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\audstub.sys
[2009/03/16 19:26:14 | 00,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbprint.sys
[2009/03/16 19:26:06 | 00,057,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\redbook.sys
[2009/03/16 19:25:24 | 00,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2009/03/16 19:25:21 | 00,042,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\viaagp.sys
[2009/03/16 19:25:19 | 00,020,992 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\drivers\rtl8139.sys
[2009/03/16 19:23:27 | 00,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2009/03/16 19:23:23 | 00,488,244 | —- | C] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/03/16 19:23:22 | 00,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2009/03/16 19:23:18 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_28603.nls
[2009/03/16 19:23:18 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt041f.dll
[2009/03/16 19:23:16 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_857.nls
[2009/03/16 19:23:16 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_28599.nls
[2009/03/16 19:23:16 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10081.nls
[2009/03/16 19:23:16 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2009/03/16 19:23:16 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2009/03/16 19:23:16 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2009/03/16 19:23:16 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2009/03/16 19:23:16 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2009/03/16 19:23:16 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2009/03/16 19:23:15 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0419.dll
[2009/03/16 19:23:14 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2009/03/16 19:23:14 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2009/03/16 19:23:14 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2009/03/16 19:23:14 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2009/03/16 19:23:14 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2009/03/16 19:23:14 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2009/03/16 19:23:14 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2009/03/16 19:23:14 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2009/03/16 19:23:14 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2009/03/16 19:23:14 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2009/03/16 19:23:13 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28595.NLS
[2009/03/16 19:23:13 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10017.nls
[2009/03/16 19:23:13 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10007.nls
[2009/03/16 19:23:13 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0408.dll
[2009/03/16 19:23:13 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2009/03/16 19:23:13 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2009/03/16 19:23:13 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2009/03/16 19:23:13 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2009/03/16 19:23:13 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2009/03/16 19:23:13 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2009/03/16 19:23:13 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2009/03/16 19:23:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2009/03/16 19:23:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2009/03/16 19:23:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2009/03/16 19:23:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2009/03/16 19:23:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2009/03/16 19:23:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2009/03/16 19:23:13 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2009/03/16 19:23:11 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_869.nls
[2009/03/16 19:23:11 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_737.nls
[2009/03/16 19:23:11 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_875.nls
[2009/03/16 19:23:11 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28597.NLS
[2009/03/16 19:23:11 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10006.nls
[2009/03/16 19:23:11 | 00,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2009/03/16 19:23:11 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2009/03/16 19:23:11 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2009/03/16 19:23:11 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2009/03/16 19:23:11 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2009/03/16 19:23:11 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2009/03/16 19:23:11 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2009/03/16 19:23:11 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2009/03/16 19:23:11 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2009/03/16 19:23:11 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2009/03/16 19:23:11 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2009/03/16 19:23:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2009/03/16 19:23:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2009/03/16 19:23:11 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2009/03/16 19:23:09 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_866.nls
[2009/03/16 19:23:09 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_855.nls
[2009/03/16 19:23:09 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\C_28594.NLS
[2009/03/16 19:23:09 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt040e.dll
[2009/03/16 19:23:09 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0415.dll
[2009/03/16 19:23:09 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0405.dll
[2009/03/16 19:23:09 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2009/03/16 19:23:09 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2009/03/16 19:23:09 | 00,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2009/03/16 19:23:09 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2009/03/16 19:23:09 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2009/03/16 19:23:09 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2009/03/16 19:23:09 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2009/03/16 19:23:09 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2009/03/16 19:23:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2009/03/16 19:23:09 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2009/03/16 19:23:07 | 00,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2009/03/16 19:23:07 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2009/03/16 19:23:07 | 00,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2009/03/16 19:23:07 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2009/03/16 19:23:07 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2009/03/16 19:23:07 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2009/03/16 19:23:07 | 00,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2009/03/16 19:23:07 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2009/03/16 19:23:07 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2009/03/16 19:23:07 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2009/03/16 19:23:06 | 00,066,594 | —- | C] () – C:\WINDOWS\System32\c_852.nls
[2009/03/16 19:23:06 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10082.nls
[2009/03/16 19:23:06 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10029.nls
[2009/03/16 19:23:06 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_10010.nls
[2009/03/16 19:23:05 | 00,066,082 | —- | C] () – C:\WINDOWS\System32\c_20127.nls
[2009/03/16 19:23:04 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2009/03/16 19:23:04 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2009/03/16 19:23:04 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irenum.sys
[2009/03/16 19:23:03 | 00,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2009/03/16 19:23:03 | 00,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2009/03/16 19:23:03 | 00,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wfwnet.drv
[2009/03/16 19:23:03 | 00,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2009/03/16 19:23:03 | 00,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ver.dll
[2009/03/16 19:23:03 | 00,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2009/03/16 19:23:03 | 00,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\timer.drv
[2009/03/16 19:23:03 | 00,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2009/03/16 19:23:03 | 00,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vga.drv
[2009/03/16 19:23:03 | 00,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2009/03/16 19:23:02 | 00,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msvideo.dll
[2009/03/16 19:23:02 | 00,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2009/03/16 19:23:02 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\olecli.dll
[2009/03/16 19:23:02 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2009/03/16 19:23:02 | 00,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\mmsystem.dll
[2009/03/16 19:23:02 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciwave.drv
[2009/03/16 19:23:02 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2009/03/16 19:23:02 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\olesvr.dll
[2009/03/16 19:23:02 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2009/03/16 19:23:02 | 00,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tapi.dll
[2009/03/16 19:23:02 | 00,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2009/03/16 19:23:02 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shell.dll
[2009/03/16 19:23:02 | 00,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2009/03/16 19:23:02 | 00,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\system.drv
[2009/03/16 19:23:02 | 00,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2009/03/16 19:23:02 | 00,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mouse.drv
[2009/03/16 19:23:02 | 00,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2009/03/16 19:23:02 | 00,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sound.drv
[2009/03/16 19:23:02 | 00,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2009/03/16 19:23:02 | 00,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mmtask.tsk
[2009/03/16 19:23:02 | 00,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2009/03/16 19:23:01 | 00,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avifile.dll
[2009/03/16 19:23:01 | 00,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2009/03/16 19:23:01 | 00,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciavi.drv
[2009/03/16 19:23:01 | 00,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2009/03/16 19:23:01 | 00,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avicap.dll
[2009/03/16 19:23:01 | 00,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2009/03/16 19:23:01 | 00,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\commdlg.dll
[2009/03/16 19:23:01 | 00,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2009/03/16 19:23:01 | 00,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciseq.drv
[2009/03/16 19:23:01 | 00,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2009/03/16 19:23:01 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2009/03/16 19:23:01 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2009/03/16 19:23:01 | 00,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lzexpand.dll
[2009/03/16 19:23:01 | 00,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2009/03/16 19:23:01 | 00,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\keyboard.drv
[2009/03/16 19:23:01 | 00,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2009/03/16 19:23:00 | 00,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2009/03/16 19:23:00 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\notepad.exe
[2009/03/16 19:23:00 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2009/03/16 19:23:00 | 00,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2009/03/16 19:22:59 | 00,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2009/03/16 19:22:49 | 00,000,126 | -HS- | C] () – C:\Documents and Settings\All Users.WINDOWS\Documents\desktop.ini
[2009/03/16 19:22:49 | 00,000,084 | -HS- | C] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\desktop.ini
[2009/03/16 19:22:49 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\All Users.WINDOWS\Application Data\desktop.ini
[2009/03/16 19:22:48 | 00,390,168 | —- | C] () – C:\WINDOWS\System32\dllcache\WFC.CAT
[2009/03/16 19:22:48 | 00,056,081 | —- | C] () – C:\WINDOWS\System32\dllcache\DAJAVAC.CAT
[2009/03/16 19:22:48 | 00,052,311 | —- | C] () – C:\WINDOWS\System32\dllcache\DX3.CAT
[2009/03/16 19:22:48 | 00,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2009/03/16 19:22:48 | 00,022,151 | —- | C] () – C:\WINDOWS\System32\dllcache\TCLASSES.CAT
[2009/03/16 19:22:48 | 00,021,281 | —- | C] () – C:\WINDOWS\System32\dllcache\XMLDSOC.CAT
[2009/03/16 19:22:48 | 00,014,031 | —- | C] () – C:\WINDOWS\System32\dllcache\MSJDBC.CAT
[2009/03/16 19:22:48 | 00,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2009/03/16 19:22:48 | 00,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2009/03/16 19:22:48 | 00,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2009/03/16 19:22:47 | 00,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2009/03/16 19:22:47 | 00,657,548 | —- | C] () – C:\WINDOWS\System32\dllcache\CLASSES.CAT
[2009/03/16 19:22:47 | 00,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2009/03/16 19:22:27 | 00,000,000 | –SD | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft
[2009/03/16 19:21:29 | 00,247,904 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/16 19:19:55 | 00,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2009/03/16 16:02:21 | 00,000,000 | -HSD | C] – C:\Config.Msi
[2009/03/13 00:11:25 | 00,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2009/03/12 20:40:35 | 00,000,000 | —D | C] – C:\2009-03-12
[2009/03/12 00:39:38 | 00,000,000 | —D | C] – C:\Program Files\Lavasoft
[2009/03/04 16:36:35 | 00,000,000 | —D | C] – C:\WINDOWS\Intuit
[2009/03/04 15:07:27 | 00,000,000 | —D | C] – C:\Program Files\Common Files\supportsoft
[2009/03/04 14:45:52 | 00,000,000 | —D | C] – C:\Program Files\Akamai
[2009/03/01 15:49:01 | 00,181,170 | —- | C] () – C:\bears1_800[1].jpg

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[5 C:\WINDOWS\*.tmp files]
[2009/03/23 16:19:23 | 00,499,200 | —- | M] (OldTimer Tools) – C:\Documents and Settings\bob bush.BOB\Desktop\OTListIt2.exe
[2009/03/23 14:55:06 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/23 14:55:04 | 00,348,371 | —- | M] () – C:\WINDOWS\System32\vsconfig.xml
[2009/03/23 14:54:38 | 00,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/03/23 14:54:31 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/03/21 05:24:37 | 34,273,102 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/03/21 05:24:37 | 00,046,680 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/03/20 21:59:36 | 06,960,418 | -H– | M] () – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\IconCache.db
[2009/03/19 23:34:10 | 00,247,904 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/19 23:31:23 | 00,061,678 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Application Data\PFP120JPR.{PB
[2009/03/19 23:31:23 | 00,012,358 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Application Data\PFP120JCM.{PB
[2009/03/19 23:31:18 | 00,002,429 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Desktop\WordPerfect.lnk
[2009/03/19 23:01:26 | 00,002,004 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Desktop\MS Access.lnk
[2009/03/19 23:00:11 | 00,002,044 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Desktop\MS Excel.lnk
[2009/03/19 22:58:42 | 00,002,036 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Desktop\MS Word.lnk
[2009/03/19 21:26:58 | 00,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/03/18 22:45:28 | 00,001,674 | —- | M] () – C:\Documents and Settings\All Users.WINDOWS\Desktop\Internet.lnk
[2009/03/18 20:11:48 | 00,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/03/18 19:54:42 | 00,000,599 | —- | M] () – C:\WINDOWS\win.ini
[2009/03/18 02:33:50 | 00,000,104 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Desktop\My Network Places.lnk
[2009/03/18 01:20:35 | 00,000,126 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Documents\desktop.ini
[2009/03/17 22:47:37 | 00,737,280 | —- | M] (Indigo Rose Corporation) – C:\WINDOWS\iun6002.exe
[2009/03/17 22:18:25 | 00,000,000 | —- | M] () – C:\WINDOWS\nsreg.dat
[2009/03/17 22:05:43 | 00,000,686 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Desktop\Perfect General.lnk
[2009/03/17 21:51:59 | 00,004,212 | -H– | M] () – C:\WINDOWS\System32\zllictbl.dat
[2009/03/17 19:48:04 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/03/17 19:29:48 | 00,000,258 | —- | M] () – C:\WINDOWS\system.ini
[2009/03/17 19:09:16 | 00,488,244 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/03/17 19:09:16 | 00,432,356 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/03/17 19:09:16 | 00,067,312 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/03/17 18:58:22 | 00,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2009/03/17 18:58:22 | 00,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2009/03/17 18:56:43 | 00,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2009/03/17 18:36:32 | 00,000,079 | -HS- | M] () – C:\Documents and Settings\bob bush.BOB\My Documents\desktop.ini
[2009/03/17 08:57:47 | 00,325,128 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/03/17 08:57:47 | 00,027,656 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/03/17 08:57:47 | 00,010,520 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\avgrsstx.dll
[2009/03/17 08:57:44 | 00,107,272 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/03/17 08:55:27 | 06,061,540 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/03/17 08:55:27 | 00,401,372 | —- | M] () – C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/03/17 04:51:41 | 00,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2009/03/17 04:51:23 | 00,013,104 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/03/17 04:11:56 | 00,000,000 | —- | M] () – C:\WINDOWS\ativpsrm.bin
[2009/03/17 03:05:51 | 00,000,211 | RHS- | M] () – C:\boot.ini
[2009/03/17 03:01:00 | 00,250,032 | RHS- | M] () – C:\ntldr
[2009/03/17 03:01:00 | 00,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2009/03/17 01:43:23 | 00,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2009/03/17 01:41:49 | 00,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2009/03/17 01:39:00 | 00,000,084 | -HS- | M] () – C:\Documents and Settings\bob bush.BOB\Start Menu\Programs\Startup\desktop.ini
[2009/03/17 01:39:00 | 00,000,084 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\desktop.ini
[2009/03/17 01:38:53 | 00,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2009/03/17 01:38:53 | 00,000,000 | —- | M] () – C:\WINDOWS\control.ini
[2009/03/17 01:38:48 | 00,299,552 | —- | M] () – C:\WINDOWS\WMSysPrx.prx
[2009/03/17 01:38:31 | 00,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2009/03/17 01:37:24 | 00,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2009/03/17 01:37:24 | 00,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/03/17 01:37:14 | 00,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/03/17 01:34:42 | 00,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/03/17 01:34:30 | 00,000,037 | —- | M] () – C:\WINDOWS\vbaddin.ini
[2009/03/17 01:34:30 | 00,000,036 | —- | M] () – C:\WINDOWS\vb.ini
[2009/03/17 00:50:15 | 00,000,104 | —- | M] () – C:\Documents and Settings\bob bush.BOB\Desktop\My Computer.lnk
[2009/03/17 00:45:59 | 00,025,065 | —- | M] () – C:\WINDOWS\System32\wmpscheme.xml
[2009/03/17 00:45:25 | 00,013,588 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2009/03/16 19:22:49 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\bob bush.BOB\Application Data\desktop.ini
[2009/03/16 19:22:49 | 00,000,062 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Application Data\desktop.ini
[2009/03/12 00:43:39 | 00,015,688 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2009/03/09 14:06:56 | 00,064,160 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/02/25 13:55:00 | 24,768,960 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MRT.exe
< End of report >