Hi There ,
well the system restore is working again !!! and windows updates i can now log on to it without being redirected. I have also down loaded and up todate free copy of avg and it updates ok now so i think im on the road to being well again ,no freezes so far , but ive been a bit ginger about playing around to much as yet . ive still got all anti virus anti adaware et al disabled at the mo until you say its ok . here are the two logs i did them after your last set of instructions dragging cfscript into the cat logo, it didnt ask for reboot.
ComboFix 09-04-25.A3 - P Compton 26/04/2009 18:48.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3070.2498 [GMT 1:00]
Running from: c:\documents and settings\[removed]\Desktop\cf1.exe
Command switches used :: c:\_otscanit\MovedFiles\cfscript.txt
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
* Created a new restore point
FILE ::
c:\windows\Inf\COM136.tmp
c:\windows\Inf\COM204.tmp
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\Inf\COM136.tmp
c:\windows\Inf\COM204.tmp
.
((((((((((((((((((((((((( Files Created from 2009-05-26 to 2009-4-26 )))))))))))))))))))))))))))))))
.
2009-04-26 17:21 . 2009-04-26 17:21 ——– d—–w c:\windows\system32\CatRoot_bak
2009-04-26 17:06 . 2009-04-26 17:08 ——– d—–w c:\windows\LastGood
2009-04-26 16:18 . 2009-04-26 16:18 ——– d—–w C:\_OTScanIt
2009-04-25 23:45 . 2009-04-26 17:36 ——– d–h–w C:\$AVG8.VAULT$
2009-04-25 23:25 . 2009-04-25 23:25 10520 —-a-w c:\windows\system32\avgrsstx.dll
2009-04-25 23:25 . 2009-04-25 23:25 108552 —-a-w c:\windows\system32\drivers\avgtdix.sys
2009-04-25 23:25 . 2009-04-25 23:25 325640 —-a-w c:\windows\system32\drivers\avgldx86.sys
2009-04-25 23:25 . 2009-04-26 17:29 ——– d—–w c:\windows\system32\drivers\Avg
2009-04-25 22:59 . 2009-04-25 22:59 ——– d—–w c:\documents and settings\P Compton\Application Data\AVG8
2009-04-25 22:50 . 2009-04-25 22:50 0 —-a-w c:\windows\system32\commonpriv.log.lock
2009-04-25 22:48 . 2009-04-26 17:24 ——– d—–w c:\documents and settings\All Users\Application Data\avg8
2009-04-25 22:48 . 2009-04-25 22:48 ——– d—–w c:\program files\AVG
2009-04-25 21:00 . 2006-11-13 03:12 135168 ——r c:\windows\system32\RtlCPAPI.dll
2009-04-25 20:59 . 2006-11-13 03:12 69632 ——r c:\windows\Alcmtr.exe
2009-04-25 20:59 . 2006-11-13 03:12 51244 —-a-w c:\windows\system32\nvapps.nvb
2009-04-25 20:46 . 2006-11-13 03:12 81920 —-a-w c:\windows\system32\SynTPCo2.dll
2009-04-25 16:43 . 2007-07-27 12:00 7680 -c–a-w c:\windows\system32\dllcache\migregdb.exe
2009-04-25 16:42 . 2007-07-27 12:00 56320 -c–a-w c:\windows\system32\dllcache\convlog.exe
2009-04-25 16:40 . 2009-04-25 16:40 488 —ha-r c:\windows\system32\logonui.exe.manifest
2009-04-25 16:40 . 2009-04-25 16:40 749 —ha-r c:\windows\WindowsShell.Manifest
2009-04-25 16:40 . 2009-04-25 16:40 749 —ha-r c:\windows\system32\wuaucpl.cpl.manifest
2009-04-25 16:40 . 2009-04-25 16:40 749 —ha-r c:\windows\system32\sapi.cpl.manifest
2009-04-25 16:40 . 2009-04-25 16:40 749 —ha-r c:\windows\system32\nwc.cpl.manifest
2009-04-25 16:40 . 2009-04-25 16:40 749 —ha-r c:\windows\system32\ncpa.cpl.manifest
2009-04-25 16:38 . 2004-08-03 23:56 27136 —-a-w c:\windows\system32\irmon.dll
2009-04-25 16:38 . 2004-08-03 23:56 152576 —-a-w c:\windows\system32\irftp.exe
2009-04-25 16:38 . 2004-08-03 23:56 8192 —-a-w c:\windows\system32\wshirda.dll
2009-04-25 16:38 . 2004-08-03 22:00 87424 —-a-w c:\windows\system32\drivers\irda.sys
2009-04-25 16:32 . 2001-08-17 12:51 19584 —-a-w c:\windows\system32\drivers\rasirda.sys
2009-04-25 16:26 . 2007-07-27 12:00 24661 -c–a-w c:\windows\system32\dllcache\spxcoins.dll
2009-04-25 16:26 . 2007-07-27 12:00 24661 —-a-w c:\windows\system32\spxcoins.dll
2009-04-25 16:26 . 2007-07-27 12:00 13312 -c–a-w c:\windows\system32\dllcache\irclass.dll
2009-04-25 16:26 . 2007-07-27 12:00 13312 —-a-w c:\windows\system32\irclass.dll
2009-04-25 15:54 . 2007-07-27 12:00 16384 -c–a-w c:\windows\system32\dllcache\isignup.exe
2009-04-25 13:39 . 2004-08-03 21:59 105472 —-a-w c:\windows\hal.dll
2009-04-25 12:12 . 2009-04-25 12:12 0 —-a-w c:\windows\nsreg.dat
2009-04-25 09:22 . 2009-04-25 08:56 15688 —-a-w c:\windows\system32\lsdelete.exe
2009-04-25 08:56 . 2009-04-25 08:56 64160 —-a-w c:\windows\system32\drivers\Lbd.sys
2009-04-25 08:55 . 2009-04-25 08:55 ——– dc-h–w c:\documents and settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-04-25 00:35 . 2009-04-25 00:35 ——– d-sh–w c:\documents and settings\P Compton\IECompatCache
2009-04-25 00:16 . 2009-04-25 00:16 ——– d-sh–w c:\documents and settings\P Compton\PrivacIE
2009-04-25 00:16 . 2009-04-25 00:16 ——– d-sh–w c:\documents and settings\LocalService\IETldCache
2009-04-25 00:09 . 2009-04-25 00:09 ——– d-sh–w c:\documents and settings\P Compton\IETldCache
2009-04-24 22:48 . 2009-04-24 22:48 ——– d—–w c:\documents and settings\P Compton\Application Data\HP
2009-04-24 20:30 . 2009-04-24 20:30 ——– d—–w C:\MoTemp
2009-04-24 20:28 . 2009-04-24 20:28 ——– d—–w c:\documents and settings\All Users\Application Data\FLEXnet
2009-04-24 20:19 . 2009-04-24 20:19 ——– d—–w c:\program files\Adobe Media Player
2009-04-24 20:17 . 2009-04-24 20:17 ——– d—–w c:\program files\Common Files\Adobe AIR
2009-04-24 20:15 . 2009-04-24 20:15 ——– d—–w c:\program files\Common Files\Macrovision Shared
2009-04-24 20:02 . 2009-04-25 14:05 ——– d—–w c:\program files\UNICCodec
2009-04-24 20:02 . 2009-04-24 20:02 103750 —-a-w c:\documents and settings\P Compton\Local Settings\Application Data\codecsetup.exe
2009-04-24 20:02 . 2009-04-24 20:02 24576 —-a-w c:\documents and settings\P Compton\Local Settings\Application Data\cp_setup_assist.exe
2009-04-24 10:17 . 2009-04-24 10:17 ——– d—–w c:\documents and settings\All Users\Application Data\Hewlett-Packard
2009-04-23 18:32 . 2009-04-23 18:32 ——– d—–w c:\program files\NewBlue
2009-04-18 13:16 . 2009-04-18 13:16 ——– d—–w c:\documents and settings\All Users\Application Data\Office Genuine Advantage
2009-04-18 13:11 . 2003-10-25 17:46 1046 —-a-w c:\windows\system32\WPA_Kill.bat
2009-04-18 13:11 . 2003-10-25 17:11 5120 —-a-w c:\windows\system32\WPA_Kill.exe
2009-04-17 20:17 . 2009-04-17 20:17 ——– d—–w c:\documents and settings\All Users\Application Data\HP
2009-04-17 20:17 . 2009-04-17 20:17 ——– d—–w c:\program files\Common Files\HP
2009-04-17 20:17 . 2009-04-17 20:17 ——– d—–w c:\program files\Common Files\Hewlett-Packard
2009-04-17 20:17 . 2009-04-17 20:17 ——– d—–w c:\program files\Hewlett-Packard
2009-04-17 20:13 . 2009-04-17 20:13 ——– d—–w c:\windows\zhenghe2
2009-04-17 20:13 . 2009-04-17 20:18 ——– d—–w c:\program files\HP
2009-04-17 20:10 . 2009-04-17 20:29 144549 —-a-w c:\windows\hpwins16.dat
2009-04-17 17:02 . 2009-04-26 15:40 ——– d—–w c:\documents and settings\P Compton\Tracing
2009-04-16 22:11 . 2008-05-03 11:55 2560 —-a-w c:\windows\system32\xpsp4res.dll
2009-04-12 11:04 . 2009-04-12 11:04 ——– d—–w c:\program files\Microsoft
2009-04-12 11:04 . 2009-04-12 11:04 ——– d—–w c:\program files\Windows Live SkyDrive
2009-04-12 10:58 . 2009-04-12 10:58 ——– d—–w c:\program files\Common Files\Windows Live
2009-04-02 11:42 . 2009-04-17 13:21 ——– d—–w c:\documents and settings\P Compton\Incomplete
2009-03-30 10:29 . 2009-03-30 10:29 ——– d—–w c:\program files\GSpot270a
2009-03-29 21:55 . 2009-03-29 22:37 ——– d—–w c:\program files\IrfanView
2009-03-29 21:07 . 2009-03-29 21:07 1024 —-a-w c:\windows\system32\Image2PDF.dat
2009-03-29 21:07 . 2009-03-29 21:13 ——– d—–w c:\program files\Image2PDF OCR v3.2
2009-03-29 20:41 . 2009-03-29 20:47 ——– d—–w c:\program files\All Office Converter Pro
2009-03-28 16:12 . 2009-03-28 16:12 ——– d—–w c:\program files\TVAnts
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-26 16:44 . 2009-04-25 09:24 9770 —-a-w C:\aaw7boot.log
2009-04-26 11:37 . 2007-11-30 17:04 ——– d—–w c:\program files\DivX
2009-04-26 09:49 . 2007-11-21 11:13 ——– d—–w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-04-25 21:04 . 2007-11-21 10:41 ——– d–h–w c:\program files\InstallShield Installation Information
2009-04-25 20:59 . 2007-11-21 11:15 ——– d—–w c:\program files\Realtek
2009-04-25 16:39 . 2007-11-20 15:36 23376 —-a-w c:\windows\system32\emptyregdb.dat
2009-04-25 08:54 . 2007-11-30 17:01 ——– d—–w c:\program files\Lavasoft
2009-04-25 00:07 . 2008-02-03 21:59 ——– d—–w c:\documents and settings\P Compton\Application Data\Azureus
2009-04-25 00:07 . 2008-12-29 10:24 ——– d—–w c:\documents and settings\P Compton\Application Data\Yahoo!
2009-04-25 00:07 . 2007-12-01 22:54 ——– d—–w c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-02-01 21:39 . 2009-04-24 22:33 18531840 —-a-w c:\windows\system32\BCC6_AE_8Bit.dll
2008-01-18 00:36 . 2007-11-21 12:33 169920 —-a-w c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
.
((((((((((((((((((((((((((((( SnapShot@2009-04-26_16.46.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-20 15:37 . 2008-10-16 13:09 51224 c:\windows\system32\wuauclt.exe
+ 2008-11-15 18:32 . 2008-10-16 13:08 34328 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll
- 2008-11-15 18:32 . 2008-10-16 14:08 34328 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll
+ 2007-11-20 15:37 . 2008-10-16 13:09 51224 c:\windows\system32\dllcache\wuauclt.exe
+ 2007-07-27 12:00 . 2008-10-16 13:09 92696 c:\windows\system32\dllcache\cdm.dll
+ 2007-07-27 12:00 . 2008-10-16 13:09 92696 c:\windows\system32\cdm.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 26488 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\update\spcustom.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 17272 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\spmsg.dll
- 2008-06-12 14:09 . 2008-06-12 14:09 91648 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3qfe\mtxoci.dll
- 2008-06-12 14:09 . 2008-06-12 14:09 66560 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3qfe\mtxclu.dll
- 2008-06-12 14:09 . 2008-06-12 14:09 58880 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3qfe\msdtclog.dll
- 2008-06-12 14:23 . 2008-06-12 14:23 91648 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3gdr\mtxoci.dll
- 2008-06-12 14:23 . 2008-06-12 14:23 66560 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3gdr\mtxclu.dll
- 2008-06-12 14:23 . 2008-06-12 14:23 58880 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3gdr\msdtclog.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 26488 c:\windows\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\update\spcustom.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 17272 c:\windows\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\spmsg.dll
- 2009-04-16 22:11 . 2008-07-09 07:38 26488 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\update\spcustom.dll
- 2009-04-16 22:11 . 2008-07-09 07:38 17272 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\spmsg.dll
- 2009-04-16 22:11 . 2009-03-25 05:54 39424 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP2QFE\acadproc.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 26488 c:\windows\SoftwareDistribution\Download\5457b20e4d74937d47b86f91637bd134\update\spcustom.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 17272 c:\windows\SoftwareDistribution\Download\5457b20e4d74937d47b86f91637bd134\spmsg.dll
- 2009-04-16 22:13 . 2008-07-09 07:38 26488 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\spcustom.dll
- 2009-04-16 22:13 . 2008-07-09 07:38 26488 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\spupdsvc.exe
- 2009-04-16 22:13 . 2008-07-09 07:38 17272 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\spmsg.dll
- 2009-04-16 22:13 . 2009-02-06 10:36 35328 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\sc.exe
- 2009-04-16 22:13 . 2009-02-06 10:39 35328 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\sc.exe
- 2009-04-16 22:13 . 2009-02-06 09:54 35328 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\sc.exe
- 2009-04-16 22:13 . 2005-07-26 04:20 60416 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\colbact.dll
- 2009-04-16 22:13 . 2009-02-06 16:54 35328 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\sc.exe
- 2009-04-16 22:13 . 2005-07-26 04:39 60416 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\colbact.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 26488 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\update\spcustom.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 17272 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\spmsg.dll
- 2009-02-04 09:12 . 2009-02-04 09:12 56832 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\sp3qfe\secur32.dll
- 2009-02-03 19:59 . 2009-02-03 19:59 56832 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\sp3gdr\secur32.dll
+ 2009-04-26 17:06 . 2007-07-27 12:00 36864 c:\windows\LastGood\system32\wups.dll
+ 2009-04-26 17:06 . 2007-07-27 12:00 66560 c:\windows\LastGood\system32\cdm.dll
- 2009-04-16 22:11 . 2008-05-03 11:55 2560 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP3QFE\xpsp4res.dll
- 2009-04-16 22:11 . 2008-05-03 11:55 2560 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP3GDR\xpsp4res.dll
+ 2007-11-20 15:37 . 2008-10-16 13:12 202776 c:\windows\system32\wuweb.dll
+ 2007-11-20 15:37 . 2008-10-16 13:12 323608 c:\windows\system32\wucltui.dll
+ 2007-11-20 15:37 . 2008-10-16 13:12 561688 c:\windows\system32\wuapi.dll
+ 2007-11-20 15:37 . 2008-10-16 13:12 202776 c:\windows\system32\dllcache\wuweb.dll
+ 2007-11-20 15:37 . 2008-10-16 13:12 323608 c:\windows\system32\dllcache\wucltui.dll
+ 2007-11-20 15:37 . 2008-10-16 13:12 561688 c:\windows\system32\dllcache\wuapi.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 382840 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\update\updspapi.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 755576 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\update\update.exe
- 2009-04-16 22:14 . 2007-11-30 12:39 231288 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\spuninst.exe
- 2008-06-12 14:09 . 2008-06-12 14:09 161792 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3qfe\msdtcuiu.dll
- 2008-06-12 14:09 . 2008-06-12 14:09 956928 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3qfe\msdtctm.dll
- 2008-06-12 14:09 . 2008-06-12 14:09 428032 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3qfe\msdtcprx.dll
- 2008-06-12 14:23 . 2008-06-12 14:23 161792 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3gdr\msdtcuiu.dll
- 2008-06-12 14:23 . 2008-06-12 14:23 956928 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3gdr\msdtctm.dll
- 2008-06-12 14:23 . 2008-06-12 14:23 428032 c:\windows\SoftwareDistribution\Download\fae8bc4d2da2adc1b9109ef4e6cecd1f\sp3gdr\msdtcprx.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 382840 c:\windows\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\update\updspapi.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 755576 c:\windows\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\update\update.exe
- 2009-04-16 22:14 . 2007-11-30 12:39 231288 c:\windows\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\spuninst.exe
- 2008-12-16 12:22 . 2008-12-16 12:22 354304 c:\windows\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\sp3qfe\winhttp.dll
- 2008-12-16 12:30 . 2008-12-16 12:30 354304 c:\windows\SoftwareDistribution\Download\f6ae6c01481096f08117233982ca37f9\sp3gdr\winhttp.dll
- 2009-04-16 22:11 . 2008-07-09 07:38 382840 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\update\updspapi.dll
- 2009-04-16 22:11 . 2008-11-15 17:18 755576 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\update\update.exe
- 2009-04-16 22:11 . 2008-07-09 07:38 231288 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\spuninst.exe
- 2009-04-16 22:11 . 2008-04-21 12:15 215552 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP3QFE\wordpad.exe
- 2009-04-16 22:11 . 2008-04-21 12:08 215552 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP3GDR\wordpad.exe
- 2009-04-16 22:11 . 2008-02-15 09:06 351744 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP2QFE\xpsp3res.dll
- 2009-04-16 22:11 . 2008-04-21 09:26 215552 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP2QFE\wordpad.exe
- 2009-04-16 22:11 . 2008-02-15 09:06 351744 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP2GDR\xpsp3res.dll
- 2009-04-16 22:11 . 2008-04-21 10:02 215552 c:\windows\SoftwareDistribution\Download\593d5ddb620b1f1b4bef986c655fd062\SP2GDR\wordpad.exe
- 2009-04-16 22:14 . 2007-11-30 12:39 382840 c:\windows\SoftwareDistribution\Download\5457b20e4d74937d47b86f91637bd134\update\updspapi.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 755576 c:\windows\SoftwareDistribution\Download\5457b20e4d74937d47b86f91637bd134\update\update.exe
- 2009-04-16 22:14 . 2007-11-30 12:39 231288 c:\windows\SoftwareDistribution\Download\5457b20e4d74937d47b86f91637bd134\spuninst.exe
- 2009-04-16 22:13 . 2008-07-09 07:38 382840 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\updspapi.dll
- 2009-04-16 22:13 . 2008-07-09 07:38 755576 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\update\update.exe
- 2009-04-16 22:13 . 2008-07-09 07:38 231288 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\spuninst.exe
- 2009-04-16 22:13 . 2009-02-06 10:15 227840 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\wmiprvse.exe
- 2009-04-16 22:13 . 2009-02-09 10:56 453120 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\wmiprvsd.dll
- 2009-04-16 22:13 . 2009-02-06 11:06 110592 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\services.exe
- 2009-04-16 22:13 . 2009-02-09 10:56 401408 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\rpcss.dll
- 2009-04-16 22:13 . 2009-03-06 13:49 284160 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\pdh.dll
- 2009-04-16 22:13 . 2009-02-09 10:56 715264 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\ntdll.dll
- 2009-04-16 22:13 . 2009-02-09 10:56 729088 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\lsasrv.dll
- 2009-04-16 22:13 . 2009-02-09 10:56 473600 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\fastprox.dll
- 2009-02-10 18:26 . 2009-02-10 18:26 617472 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\advapi32.dll
- 2009-04-16 22:13 . 2009-02-06 10:10 227840 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\wmiprvse.exe
- 2009-04-16 22:13 . 2009-02-09 12:10 453120 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\wmiprvsd.dll
- 2009-04-16 22:13 . 2009-02-06 11:11 110592 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\services.exe
- 2009-04-16 22:13 . 2009-02-09 12:10 401408 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\rpcss.dll
- 2009-04-16 22:13 . 2009-03-06 14:22 284160 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\pdh.dll
- 2009-04-16 22:13 . 2009-02-09 12:10 714752 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\ntdll.dll
- 2009-04-16 22:13 . 2009-02-09 12:10 729088 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\lsasrv.dll
- 2009-04-16 22:13 . 2009-02-09 12:10 473600 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\fastprox.dll
- 2009-04-16 22:13 . 2009-02-09 12:10 617472 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\advapi32.dll
- 2009-04-16 22:13 . 2009-02-06 09:41 227840 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\wmiprvse.exe
- 2009-02-10 17:31 . 2009-02-10 17:31 453120 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\wmiprvsd.dll
- 2009-04-16 22:13 . 2009-02-06 10:22 110592 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\services.exe
- 2009-04-16 22:13 . 2009-02-09 10:01 401408 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\rpcss.dll
- 2009-04-16 22:13 . 2009-03-06 14:00 284160 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\pdh.dll
- 2009-04-16 22:13 . 2009-02-09 10:01 715264 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\ntdll.dll
- 2009-04-16 22:13 . 2009-02-09 10:01 728576 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\lsasrv.dll
- 2009-04-16 22:13 . 2009-02-09 10:01 473088 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\fastprox.dll
- 2009-04-16 22:13 . 2009-02-09 10:01 617984 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\advapi32.dll
- 2009-04-16 22:13 . 2009-02-06 16:39 227840 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\wmiprvse.exe
- 2009-04-16 22:13 . 2009-02-09 10:20 453120 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\wmiprvsd.dll
- 2009-04-16 22:13 . 2009-02-06 17:14 110592 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\services.exe
- 2009-04-16 22:13 . 2009-02-09 10:20 399360 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\rpcss.dll
- 2009-04-16 22:13 . 2009-03-06 14:44 283648 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\pdh.dll
- 2009-04-16 22:13 . 2009-02-09 10:20 714752 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\ntdll.dll
- 2009-04-16 22:13 . 2009-02-09 10:20 723456 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\lsasrv.dll
- 2009-04-16 22:13 . 2009-02-09 10:20 473088 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\fastprox.dll
- 2009-04-16 22:13 . 2009-02-09 10:20 616960 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\advapi32.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 382840 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\update\updspapi.dll
- 2009-04-16 22:14 . 2007-11-30 12:39 755576 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\update\update.exe
- 2009-04-16 22:14 . 2007-11-30 12:39 231288 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\spuninst.exe
- 2009-03-21 13:59 . 2009-03-21 13:59 991744 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\sp3qfe\kernel32.dll
- 2009-03-21 14:06 . 2009-03-21 14:06 989696 c:\windows\SoftwareDistribution\Download\
022593ca08eb4cd8e9681a7116f902d9\sp3gdr\kernel32.dll
+ 2009-04-26 17:06 . 2007-07-27 12:00 120320 c:\windows\LastGood\system32\wuweb.dll
+ 2009-04-26 17:06 . 2007-07-27 12:00 112640 c:\windows\LastGood\system32\wucltui.dll
+ 2009-04-26 17:06 . 2007-07-27 12:00 111104 c:\windows\LastGood\system32\wuauclt.exe
+ 2009-04-26 17:06 . 2007-07-27 12:00 430592 c:\windows\LastGood\system32\wuapi.dll
+ 2007-11-20 15:37 . 2008-10-16 13:13 1809944 c:\windows\system32\wuaueng.dll
+ 2007-11-20 15:37 . 2008-10-16 13:13 1809944 c:\windows\system32\dllcache\wuaueng.dll
- 2008-12-20 23:14 . 2008-12-20 23:14 1288192 c:\windows\SoftwareDistribution\Download\5457b20e4d74937d47b86f91637bd134\sp3qfe\quartz.dll
- 2008-12-20 22:14 . 2008-12-20 22:14 1288192 c:\windows\SoftwareDistribution\Download\5457b20e4d74937d47b86f91637bd134\sp3gdr\quartz.dll
- 2009-02-07 18:35 . 2009-02-07 18:35 2189184 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\ntoskrnl.exe
- 2009-04-16 22:13 . 2009-02-06 10:30 2023936 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\ntkrpamp.exe
- 2009-04-16 22:13 . 2009-02-06 10:30 2066176 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\ntkrnlpa.exe
- 2009-04-16 22:13 . 2009-02-06 11:03 2145280 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3QFE\ntkrnlmp.exe
- 2009-04-16 22:13 . 2009-02-06 11:08 2189056 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\ntoskrnl.exe
- 2009-04-16 22:13 . 2009-02-06 10:32 2023936 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\ntkrpamp.exe
- 2009-02-07 18:02 . 2009-02-07 18:02 2066048 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\ntkrnlpa.exe
- 2009-04-16 22:13 . 2009-02-06 11:06 2145280 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP3GDR\ntkrnlmp.exe
- 2009-04-16 22:13 . 2009-02-06 10:32 2186112 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\ntoskrnl.exe
- 2009-04-16 22:13 . 2009-02-06 09:49 2020864 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\ntkrpamp.exe
- 2009-04-16 22:13 . 2009-02-06 09:49 2062976 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\ntkrnlpa.exe
- 2009-04-16 22:13 . 2009-02-06 10:29 2142720 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2QFE\ntkrnlmp.exe
- 2009-04-16 22:13 . 2009-02-06 17:24 2180480 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\ntoskrnl.exe
- 2009-04-16 22:13 . 2009-02-06 16:49 2015744 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\ntkrpamp.exe
- 2009-04-16 22:13 . 2009-02-06 16:49 2057728 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\ntkrnlpa.exe
- 2009-04-16 22:13 . 2009-02-06 17:22 2136064 c:\windows\SoftwareDistribution\Download\51401b498f4675531d9efb941ee01ef3\SP2GDR\ntkrnlmp.exe
+ 2009-04-26 17:06 . 2007-07-27 12:00 1134592 c:\windows\LastGood\system32\wuaueng.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"= "c:\program files\Yahoo!\Companion\Installs\cpn0\yt.dll" [2008-07-28 882416]
[HKEY_CLASSES_ROOT\clsid\{ef99bd32-c1fb-11d2-892f-0090271d4f88}]
[HKEY_CLASSES_ROOT\yt.YToolbarBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{003028C2-EA1C-4676-A316-B5CB50917002}]
[HKEY_CLASSES_ROOT\yt.YToolbarBand]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"= "c:\program files\Yahoo!\Companion\Installs\cpn0\yt.dll" [2008-07-28 882416]
[HKEY_CLASSES_ROOT\clsid\{ef99bd32-c1fb-11d2-892f-0090271d4f88}]
[HKEY_CLASSES_ROOT\yt.YToolbarBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{003028C2-EA1C-4676-A316-B5CB50917002}]
[HKEY_CLASSES_ROOT\yt.YToolbarBand]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2007-07-27 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinPatrol"="c:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2007-10-26 292152]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-11-13 7585792]
"KTPWare"="c:\program files\Elantech\ktp.exe" [2009-01-14 512000]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-04-26 1932568]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-11-13 1519616]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-11-13 16208384]
"CHotkey"="mHotkey.exe" - c:\windows\mHotkey.exe [2001-12-26 472576]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"WPDShServiceObj"= {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-04-25 23:25 10520 —-a-w c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\
0lsdelete\
0sprestrt
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Azureus\\Azureus.exe"=
"c:\\StubInstaller.exe"=
"c:\\Program Files\\TVAnts\\Tvants.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
R1 cdrblock;cdrblock;c:\windows\system32\DRIVERS\cdrblock.sys [2007-05-31 20864]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-04-25 953168]
R3 Ktp;Elantech Touchpad;c:\windows\system32\DRIVERS\Ktp.sys [2005-11-28 27520]
R3 MotDev;Motorola Inc. USB Device;c:\windows\system32\DRIVERS\motodrv.sys [2007-05-07 42112]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2009-04-25 64160]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2009-04-25 325640]
S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2009-04-25 108552]
S1 cdrport;cdrport;c:\windows\system32\DRIVERS\cdrport.sys [2005-03-11 4608]
S2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-04-25 908056]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-04-25 298264]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9c305b1e-b817-11dd-af7b-160925044700}]
\Shell\AutoRun\command - E:\LaunchU3.exe -a
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,LaunchINFSectionEx c:\program files\Internet Explorer\clrtour.inf,DefaultInstall.ResetTour,,12
.
Contents of the 'Scheduled Tasks' folder
2009-04-25 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 08:56]
.
- - - - ORPHANS REMOVED - - - -
WebBrowser-{A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
SharedTaskScheduler-{8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll
ShellExecuteHooks-{AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
SSODL-CDBurn-{fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll
SSODL-WebCheck-{E6FB5E20-DE35-11CF-9C87-00AA005127ED} - %SystemRoot%\system32\webcheck.dll
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://uk.yahoo.co.uk
uInternet Settings,ProxyOverride =
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://uk.search.yahoo.com
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: {{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {{FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\Messenger\msmsgs.exe
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - c:\windows\system32\urlmon.dll
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - c:\windows\system32\urlmon.dll
Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} - c:\windows\system32\urlmon.dll
Handler: http\
0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\program files\Common Files\System\Ole DB\MSDAIPP.DLL
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - c:\program files\Common Files\System\Ole DB\MSDAIPP.DLL
Handler: https\
0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\program files\Common Files\System\Ole DB\MSDAIPP.DLL
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - c:\program files\Common Files\System\Ole DB\MSDAIPP.DLL
Handler: ipp\
0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\program files\Common Files\System\Ole DB\MSDAIPP.DLL
Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - c:\windows\system32\itss.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\AVG\AVG8\avgpp.dll
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - c:\progra~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - c:\windows\system32\itss.dll
Handler: msdaipp\
0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - c:\program files\Common Files\System\Ole DB\MSDAIPP.DLL
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - c:\program files\Common Files\System\Ole DB\MSDAIPP.DLL
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - c:\progra~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - c:\windows\system32\msvidctl.dll
Name-Space Handler: mk\* - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - c:\windows\system32\itss.dll
DPF: {8FEFF364-6A5F-4966-A917-A3AC28411659} - hxxp://download.sopcast.com/download/SOPCORE.CAB
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2009-04-26 18:49
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'explorer.exe'(3616)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Nero\Nero 7\Nero BackItUp\NBShell.dll
c:\program files\Nero\Nero 7\Nero BackItUp\MSVCR71.dll
c:\program files\Lavasoft\Ad-Aware\ShellExt.dll
c:\progra~1\WINZIP\WZSHLSTB.DLL
c:\progra~1\WINZIP\wzshlex1.dll
c:\progra~1\WINZIP\WZCAB3.DLL
c:\program files\7-Zip\7-zip.dll
c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll
c:\windows\system32\browselc.dll
c:\program files\Microsoft Office\Office10\msohev.dll
c:\windows\system32\shdoclc.dll
.
Completion time: 2009-04-26 18:50
ComboFix-quarantined-files.txt 2009-04-26 17:50
ComboFix2.txt 2009-04-26 16:47
Pre-Run: 10,863,005,696 bytes free
Post-Run: 10,971,799,552 bytes free
400 — E O F — 2009-04-25 14:56
and heres the ot scan
OTScanIt2 logfile created on: 26/04/2009 18:58:40 - Run 2
OTScanIt2 by OldTimer - Version 1.0.14.0 Folder = C:\Documents and Settings\P Compton\Desktop\OTScanIt2
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 40.00 Gb Total Space | 10.24 Gb Free Space | 25.59% Space Free | Partition Type: NTFS
Drive D: | 146.31 Gb Total Space | 121.12 Gb Free Space | 82.78% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: EDITMACHINE
Current User Name: P Compton
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Whitelist: On
File Age = 30 Days
[Processes - Safe List]
avgcsrvx.exe -> %ProgramFiles%\AVG\AVG8\avgcsrvx.exe -> [2009/04/26 00:25:32 | 00,691,992 | —- | M] (AVG Technologies CZ, s.r.o.)
avgemc.exe -> %ProgramFiles%\AVG\AVG8\avgemc.exe -> [2009/04/26 00:25:29 | 00,908,056 | —- | M] (AVG Technologies CZ, s.r.o.)
avgnsx.exe -> %ProgramFiles%\AVG\AVG8\avgnsx.exe -> [2009/04/26 00:25:32 | 00,594,200 | —- | M] (AVG Technologies CZ, s.r.o.)
avgrsx.exe -> %ProgramFiles%\AVG\AVG8\avgrsx.exe -> [2009/04/26 00:25:32 | 00,485,144 | —- | M] (AVG Technologies CZ, s.r.o.)
avgwdsvc.exe -> %ProgramFiles%\AVG\AVG8\avgwdsvc.exe -> [2009/04/26 00:25:29 | 00,298,264 | —- | M] (AVG Technologies CZ, s.r.o.)
btntservice.exe -> %ProgramFiles%\IVT Corporation\BlueSoleil\BTNtService.exe -> [2005/04/06 17:03:28 | 00,110,592 | —- | M] ()
explorer.exe -> %SystemRoot%\explorer.exe -> [2007/07/27 13:00:00 | 01,032,192 | —- | M] (Microsoft Corporation)
nvsvc32.exe -> %SystemRoot%\system32\nvsvc32.exe -> [2006/11/13 04:12:56 | 00,143,426 | —- | M] (NVIDIA Corporation)
otscanit2.exe -> %UserProfile%\Desktop\OTScanIt2\OTScanIt2.exe -> [2009/04/11 16:32:52 | 00,494,080 | —- | M] (OldTimer Tools)
[Win32 Services - Safe List]
(aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -> [2007/10/24 02:47:22 | 00,033,800 | —- | M] (Microsoft Corporation)
(avg8emc) AVG Free8 E-mail Scanner [Win32_Own | Auto | Running] -> %ProgramFiles%\AVG\AVG8\avgemc.exe -> [2009/04/26 00:25:29 | 00,908,056 | —- | M] (AVG Technologies CZ, s.r.o.)
(avg8wd) AVG Free8 WatchDog [Win32_Own | Auto | Running] -> %ProgramFiles%\AVG\AVG8\avgwdsvc.exe -> [2009/04/26 00:25:29 | 00,298,264 | —- | M] (AVG Technologies CZ, s.r.o.)
(BlueSoleil Hid Service) BlueSoleil Hid Service [Win32_Own | Auto | Running] -> %ProgramFiles%\IVT Corporation\BlueSoleil\BTNtService.exe -> [2005/04/06 17:03:28 | 00,110,592 | —- | M] ()
(clr_optimization_v2.0.50727_32) .NET Runtime Optimization Service v2.0.50727_X86 [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2007/10/24 02:47:40 | 00,070,144 | —- | M] (Microsoft Corporation)
(FLEXnet Licensing Service) FLEXnet Licensing Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -> [2009/04/24 21:15:22 | 00,655,624 | —- | M] (Acresso Software Inc.)
(FontCache3.0.0.0) Windows Presentation Foundation Font Cache 3.0.0.0 [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe -> [2007/10/09 13:58:12 | 00,036,864 | —- | M] (Microsoft Corporation)
(helpsvc) Help and Support [Win32_Shared | Auto | Running] -> %SystemRoot%\PCHealth\HelpCtr\Binaries\pchsvc.dll -> [2007/07/27 13:00:00 | 00,038,912 | —- | M] (Microsoft Corporation)
(hpqcxs08) hpqcxs08 [Win32_Shared | On_Demand | Running] -> %ProgramFiles%\HP\Digital Imaging\bin\hpqcxs08.dll -> [2007/01/02 22:46:54 | 00,225,280 | —- | M] (Hewlett-Packard Co.)
(hpqddsvc) HP CUE DeviceDiscovery Service [Win32_Shared | Auto | Running] -> %ProgramFiles%\HP\Digital Imaging\bin\hpqddsvc.dll -> [2006/12/10 23:29:24 | 00,131,072 | —- | M] (Hewlett-Packard Co.)
(idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -> [2007/10/11 10:55:10 | 00,864,256 | —- | M] (Microsoft Corporation)
(Irmon) Infrared Monitor [Win32_Shared | Auto | Running] -> %SystemRoot%\System32\irmon.dll -> [2004/08/04 00:56:44 | 00,027,136 | —- | M] (Microsoft Corporation)
(Lavasoft Ad-Aware Service) Lavasoft Ad-Aware Service [Win32_Own | Auto | Stopped] -> %ProgramFiles%\Lavasoft\Ad-Aware\AAWService.exe -> [2009/04/25 09:56:24 | 00,953,168 | —- | M] (Lavasoft)
(NBService) NBService [Win32_Own | On_Demand | Stopped] -> -> File not found
(Net Driver HPZ12) Net Driver HPZ12 [Win32_Own | Auto | Running] -> %SystemRoot%\system32\HPZinw12.dll -> [2006/11/08 16:35:36 | 00,043,520 | —- | M] (Hewlett-Packard)
(NetTcpPortSharing) Net.Tcp Port Sharing Service [Win32_Shared | Disabled | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -> [2007/10/11 10:55:14 | 00,122,880 | —- | M] (Microsoft Corporation)
(NMIndexingService) NMIndexingService [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Ahead\Lib\NMIndexingService.exe -> [2007/06/27 20:04:00 | 00,279,848 | —- | M] (Nero AG)
(NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %SystemRoot%\system32\nvsvc32.exe -> [2006/11/13 04:12:56 | 00,143,426 | —- | M] (NVIDIA Corporation)
(Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Running] -> %SystemRoot%\system32\HPZipm12.dll -> [2006/11/08 16:35:38 | 00,053,248 | —- | M] (Hewlett-Packard)
(UMWdf) Windows User Mode Driver Framework [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\system32\wdfmgr.exe -> [2005/01/28 14:44:28 | 00,038,912 | —- | M] (Microsoft Corporation)
(WMPNetworkSvc) Windows Media Player Network Sharing Service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Windows Media Player\WMPNetwk.exe -> [2006/10/18 21:05:24 | 00,913,408 | —- | M] (Microsoft Corporation)
[Driver Services - Safe List]
(61883) 61883 Unit Device [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\61883.sys -> [2004/08/03 23:10:12 | 00,048,128 | —- | M] (Microsoft Corporation)
(Afc) PPdus ASPI Shell [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\Afc.sys -> [2005/02/23 15:58:56 | 00,011,776 | —- | M] (Arcsoft, Inc.)
(akshasp) Aladdin HASP Key [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\akshasp.sys -> [2006/11/22 11:01:46 | 00,327,168 | —- | M] (Aladdin Knowledge Systems Ltd.)
(aksusb) Aladdin USB Key [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\aksusb.sys -> [2006/11/22 11:01:48 | 00,100,096 | —- | M] (Aladdin Knowledge Systems Ltd.)
(Avc) AVC Device [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\avc.sys -> [2004/08/03 23:10:12 | 00,038,912 | —- | M] (Microsoft Corporation)
(AVCSTRM) AVC Streaming Filter Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\avcstrm.sys -> [2004/08/03 23:10:00 | 00,013,696 | —- | M] (Microsoft Corporation)
(AvgLdx86) AVG Free AVI Loader Driver x86 [Kernel | System | Running] -> %SystemRoot%\System32\Drivers\avgldx86.sys -> [2009/04/26 00:25:42 | 00,325,640 | —- | M] (AVG Technologies CZ, s.r.o.)
(AvgMfx86) AVG Free On-access Scanner Minifilter Driver x86 [File_System | System | Running] -> %SystemRoot%\System32\Drivers\avgmfx86.sys -> [2009/04/26 00:25:41 | 00,027,656 | —- | M] (AVG Technologies CZ, s.r.o.)
(AvgTdiX) AVG Free8 Network Redirector [Kernel | System | Running] -> %SystemRoot%\System32\Drivers\avgtdix.sys -> [2009/04/26 00:25:43 | 00,108,552 | —- | M] (AVG Technologies CZ, s.r.o.)
(BlueletAudio) Bluetooth Audio Service [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\blueletaudio.sys -> [2006/06/23 17:00:26 | 00,031,488 | —- | M] (IVT Corporation)
(BlueletSCOAudio) Bluetooth SCO Audio Service [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\BlueletSCOAudio.sys -> [2005/08/31 11:34:52 | 00,020,480 | —- | M] (IVT Corporation)
(BT) Bluetooth PAN Network Adapter [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\btnetdrv.sys -> [2006/01/19 14:31:34 | 00,010,068 | —- | M] (IVT Corporation)
(Btcsrusb) Bluetooth USB For Bluetooth Service [Kernel | On_Demand | Stopped] -> %SystemRoot%\System32\Drivers\btcusb.sys -> [2006/07/16 17:06:16 | 00,023,040 | —- | M] (IVT Corporation)
(BTHidEnum) Bluetooth HID Enumerator [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\vbtenum.sys -> [2005/07/30 08:21:32 | 00,011,988 | —- | M] ()
(BTHidMgr) Bluetooth HID Manager Service [Kernel | Boot | Running] -> %SystemRoot%\System32\Drivers\BTHidMgr.sys -> [2005/05/01 06:50:10 | 00,028,271 | —- | M] (IVT Corporation)
(Cam5603D) BisonCam, NB Pro [Kernel | On_Demand | Stopped] -> %SystemRoot%\System32\Drivers\BisonCam.sys -> [2005/12/19 18:49:32 | 00,649,088 | —- | M] (Bison Electronics. Inc. )
(catchme) catchme [Kernel | Disabled | Running] -> -> File not found
(cdrblock) cdrblock [Kernel | System | Stopped] -> %SystemRoot%\system32\DRIVERS\cdrblock.sys -> [2007/05/31 11:40:58 | 00,020,864 | —- | M] (Canopus Co,. Ltd.)
(cdrport) cdrport [Kernel | System | Running] -> %SystemRoot%\system32\DRIVERS\cdrport.sys -> [2005/03/11 17:28:30 | 00,004,608 | —- | M] (Canopus Co,. Ltd.)
(Hardlock) Hardlock [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\hardlock.sys -> [2006/11/22 11:01:48 | 00,693,760 | —- | M] (Aladdin Knowledge Systems Ltd.)
(Haspnt) Haspnt [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\Haspnt.sys -> [2007/11/30 18:39:17 | 00,047,616 | —- | M] (Aladdin Knowledge Systems)
(HDAudBus) Microsoft UAA Bus Driver for High Definition Audio [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\HDAudBus.sys -> [2008/04/13 23:06:06 | 00,144,384 | —- | M] (Windows (R) Server 2003 DDK provider)
(HSFHWAZL) HSFHWAZL [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\HSFHWAZL.sys -> [2006/11/13 04:12:28 | 00,165,504 | R— | M] (Conexant Systems, Inc.)
(HSF_DPV) HSF_DPV [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\HSF_DPV.sys -> [2006/11/13 04:12:28 | 01,033,600 | R— | M] (Conexant Systems, Inc.)
(IntcAzAudAddService) Service for Realtek HD Audio (WDM) [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\RtkHDAud.sys -> [2006/11/13 04:12:34 | 04,284,928 | R— | M] (Realtek Semiconductor Corp.)
(Ktp) Elantech Touchpad [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\Ktp.sys -> [2005/11/28 19:33:00 | 00,027,520 | —- | M] (ELANTECH Devices Corp.)
(Lbd) Lbd [File_System | Boot | Running] -> %SystemRoot%\system32\DRIVERS\Lbd.sys -> [2009/04/25 09:56:36 | 00,064,160 | —- | M] (Lavasoft AB)
(mdmxsdk) mdmxsdk [Kernel | Auto | Running] -> %SystemRoot%\system32\DRIVERS\mdmxsdk.sys -> [2006/11/13 04:12:28 | 00,013,059 | R— | M] (Conexant)
(MotDev) Motorola Inc. USB Device [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\motodrv.sys -> [2007/05/07 15:11:22 | 00,042,112 | —- | M] (Motorola Inc)
(motmodem) Motorola USB CDC ACM Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\motmodem.sys -> [2007/06/18 15:18:26 | 00,023,680 | —- | M] (Motorola)
(MSDV) Microsoft DV Camera and VCR [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\msdv.sys -> [2004/08/03 23:10:00 | 00,051,328 | —- | M] (Microsoft Corporation)
(MSTAPE) Microsoft AV/C Tape Subunit Device [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\mstape.sys -> [2004/08/03 23:10:00 | 00,049,024 | —- | M] (Microsoft Corporation)
(n558) N558 Bluetooth USB Filter Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\System32\Drivers\n558.sys -> [2007/08/15 08:27:18 | 00,009,600 | —- | M] ()
(NSCIRDA) NSC Infrared Device Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\nscirda.sys -> [2004/08/03 23:00:52 | 00,028,672 | —- | M] (National Semiconductor Corporation)
(nv) nv [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\nv4_mini.sys -> [2006/11/13 04:12:54 | 03,686,400 | —- | M] (NVIDIA Corporation)
(Ptilink) Direct Parallel Link Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\ptilink.sys -> [2007/07/27 13:00:00 | 00,017,792 | —- | M] (Parallel Technologies, Inc.)
(ROOTMODEM) Microsoft Legacy Modem Driver [Kernel | On_Demand | Running] -> %SystemRoot%\System32\Drivers\RootMdm.sys -> [2007/07/27 13:00:00 | 00,005,888 | —- | M] (Microsoft Corporation)
(RTL8023xp) Realtek 10/100/1000 NIC Family all in one NDIS XP Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\Rtlnicxp.sys -> [2006/11/13 04:12:28 | 00,074,496 | —- | M] (Realtek Semiconductor Corporation )
(Secdrv) Secdrv [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\secdrv.sys -> [2007/07/27 13:00:00 | 00,027,440 | —- | M] ()
(SI3132) SiI-3132 SATALink Controller [Kernel | Boot | Running] -> %SystemRoot%\system32\DRIVERS\SI3132.sys -> [2007/10/03 22:55:08 | 00,080,424 | —- | M] (Silicon Image, Inc)
(SiFilter) SATALink driver accelerator [Kernel | Boot | Running] -> %SystemRoot%\system32\DRIVERS\SiWinAcc.sys -> [2007/10/03 22:55:36 | 00,019,240 | —- | M] (Silicon Image, Inc)
(SiRemFil) SATALink External Device Filter [Kernel | Boot | Running] -> %SystemRoot%\system32\DRIVERS\SiRemFil.sys -> [2007/10/03 22:55:28 | 00,015,400 | —- | M] (Silicon Image, Inc)
(StillCam) Still Serial Digital Camera Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\serscan.sys -> [2001/08/17 13:53:32 | 00,006,784 | —- | M] (Microsoft Corporation)
(SynTP) Synaptics TouchPad Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\SynTP.sys -> [2006/11/13 04:12:24 | 00,193,088 | —- | M] (Synaptics, Inc.)
(tifm21) tifm21 [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\tifm21.sys -> [2006/11/13 04:12:22 | 00,168,448 | —- | M] (Texas Instruments)
(VComm) Virtual Serial port driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\VComm.sys -> [2004/10/19 14:37:38 | 00,061,312 | —- | M] (IVT Corporation)
(VcommMgr) Bluetooth VComm Manager Service [Kernel | On_Demand | Running] -> %SystemRoot%\System32\Drivers\VcommMgr.sys -> [2006/02/28 17:57:22 | 00,084,836 | —- | M] (IVT Corporation)
(w39n51) Intel(R) PRO/Wireless 3945ABG Adapter Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\w39n51.sys -> [2006/11/13 04:13:44 | 01,428,096 | R— | M] (Intel® Corporation)
(w810bus) Sony Ericsson W810 Driver driver (WDM) [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\w810bus.sys -> [2005/10/07 13:25:34 | 00,058,288 | —- | M] (MCCI)
(w810mdfl) Sony Ericsson W810 USB WMC Modem Filter [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\w810mdfl.sys -> [2005/10/07 13:26:28 | 00,008,336 | —- | M] (MCCI)
(w810mdm) Sony Ericsson W810 USB WMC Modem Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\w810mdm.sys -> [2005/10/07 13:26:32 | 00,094,064 | —- | M] (MCCI)
(w810mgmt) Sony Ericsson W810 USB WMC Device Management Drivers (WDM) [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\w810mgmt.sys -> [2005/10/07 13:27:26 | 00,085,408 | —- | M] (MCCI)
(w810obex) Sony Ericsson W810 USB WMC OBEX Interface [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\DRIVERS\w810obex.sys -> [2005/10/07 13:28:18 | 00,083,344 | —- | M] (MCCI)
(winachsf) winachsf [Kernel | On_Demand | Running] -> %SystemRoot%\system32\DRIVERS\HSF_CNXT.sys -> [2006/11/13 04:12:28 | 00,705,280 | R— | M] (Conexant Systems, Inc.)
[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://go.microsoft.com/fwlink/?LinkId=69157 ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://go.microsoft.com/fwlink/?LinkId=54896 ->
HKEY_LOCAL_MACHINE\: Main\\"Default_Secondary_Page_URL" -> Reg Error: Invalid data type. ->
HKEY_LOCAL_MACHINE\: Main\\"Extensions Off Page" -> about:NoAdd-ons ->
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm ->
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://go.microsoft.com/fwlink/?LinkId=54896 ->
HKEY_LOCAL_MACHINE\: Main\\"Secondary Start Pages" -> Reg Error: Invalid data type. ->
HKEY_LOCAL_MACHINE\: Main\\"Security Risk Page" -> about:SecurityRisk ->
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid;={SUB_CLSID}&pver;={SUB_PVER}&ar;=home ->
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ->
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> ->
HKEY_CURRENT_USER\: Main\\"Local Page" -> C:\WINDOWS\system32\blank.htm ->
HKEY_CURRENT_USER\: Main\\"Page_Transitions" -> Reg Error: Invalid data type. ->
HKEY_CURRENT_USER\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar;=iesearch ->
HKEY_CURRENT_USER\: Main\\"SearchDefaultBranded" -> Reg Error: Invalid data type. ->
HKEY_CURRENT_USER\: Main\\"Start Page" -> http://uk.yahoo.co.uk ->
HKEY_CURRENT_USER\: SearchURL\\"" -> http://uk.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://uk.search.yahoo.com ->
HKEY_CURRENT_USER\: SearchURL\\"provider" -> yaho ->
HKEY_CURRENT_USER\: URLSearchHooks\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn0\yt.dll [Yahoo! Toolbar] -> [2008/07/28 11:47:40 | 00,882,416 | —- | M] (Yahoo! Inc.)
HKEY_CURRENT_USER\: "ProxyEnable" -> 0 ->
HKEY_CURRENT_USER\: "ProxyOverride" -> ->
< FireFox Settings [Prefs.js] > -> C:\Documents and Settings\P Compton\Application Data\Mozilla\FireFox\Profiles\jorb9q2r.default\prefs.js ->
extensions.enabledItems -> {000a9d1c-beef-4f90-9363-039d445309b8}:0.5.16.0 ->
extensions.enabledItems -> {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.9 ->
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Firefox\Extensions -> ->
< FireFox Extensions [User Folders] > ->
-> C:\Documents and Settings\P Compton\Application Data\mozilla\Extensions -> [2009/04/25 13:12:33 | 00,000,000 | —D | M]
-> C:\Documents and Settings\P Compton\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} -> [2009/04/25 13:12:33 | 00,000,000 | —D | M]
-> C:\Documents and Settings\P Compton\Application Data\mozilla\Extensions\[removed] -> [2009/04/25 13:12:33 | 00,000,000 | —D | M]
-> C:\Documents and Settings\P Compton\Application Data\mozilla\Firefox\Profiles\jorb9q2r.default\extensions -> [2009/04/25 13:12:50 | 00,096,669 | —- | M] ()
< HOSTS File > (767 bytes and 20 lines) -> C:\WINDOWS\System32\drivers\etc\Hosts ->
Reset Hosts
127.0.0.1 localhost
127.0.0.1 activate.adobe.com
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} [HKLM] -> %ProgramFiles%\AVG\AVG8\avgssie.dll [AVG Safe Search] -> [2009/04/26 00:25:33 | 01,078,552 | —- | M] (AVG Technologies CZ, s.r.o.)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn0\yt.dll [Yahoo! Toolbar] -> [2008/07/28 11:47:40 | 00,882,416 | —- | M] (Yahoo! Inc.)
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->
WebBrowser\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn0\yt.dll [Yahoo! Toolbar] -> [2008/07/28 11:47:40 | 00,882,416 | —- | M] (Yahoo! Inc.)
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"AVG8_TRAY" -> %ProgramFiles%\AVG\AVG8\avgtray.exe [C:\PROGRA~1\AVG\AVG8\avgtray.exe] -> [2009/04/26 18:26:02 | 01,932,568 | —- | M] (AVG Technologies CZ, s.r.o.)
"CHotkey" -> %SystemRoot%\mHotkey.exe [mHotkey.exe] -> [2001/12/26 01:12:26 | 00,472,576 | —- | M] (Chicony)
"KTPWare" -> %ProgramFiles%\Elantech\ktp.exe [C:\Program Files\Elantech\ktp.exe] -> [2009/01/14 14:05:38 | 00,512,000 | —- | M] (ELANTECH Devices Corp.)
"NvCplDaemon" -> %SystemRoot%\system32\NvCpl.DLL [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> [2006/11/13 04:12:54 | 07,585,792 | —- | M] (NVIDIA Corporation)
"nwiz" -> %SystemRoot%\system32\nwiz.exe [nwiz.exe /install] -> [2006/11/13 04:12:56 | 01,519,616 | —- | M] ()
"RTHDCPL" -> %SystemRoot%\RTHDCPL.EXE [RTHDCPL.EXE] -> [2006/11/13 04:12:34 | 16,208,384 | R— | M] (Realtek Semiconductor Corp.)
"WinPatrol" -> %ProgramFiles%\BillP Studios\WinPatrol\winpatrol.exe [C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe] -> [2007/10/26 17:06:47 | 00,292,152 | —- | M] (BillP Studios)
< Software Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer ->
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"HonorAutoRunSetting" -> [1] -> File not found
\\"NoDriveAutoRun" -> [67108863] -> File not found
\\"NoDriveTypeAutoRun" -> [323] -> File not found
\\"NoDrives" -> [0] -> File not found
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"dontdisplaylastusername" -> [0] -> File not found
\\"legalnoticecaption" -> [] -> File not found
\\"legalnoticetext" -> [] -> File not found
\\"shutdownwithoutlogon" -> [1] -> File not found
\\"undockwithoutlogon" -> [1] -> File not found
\\"DisableRegistryTools" -> [0] -> File not found
< CurrentVersion Policy Settings - Explorer [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoDriveTypeAutoRun" -> [323] -> File not found
\\"NoDriveAutoRun" -> [67108863] -> File not found
\\"NoDrives" -> [0] -> File not found
< CurrentVersion Policy Settings - System [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ ->
E&xport; to Microsoft Excel -> %ProgramFiles%\Microsoft Office\Office10\EXCEL.EXE [res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000] -> [2009/03/09 14:36:24 | 09,361,232 | R— | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}:{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} [HKLM] -> %ProgramFiles%\Java\jre1.6.0_03\bin\npjpi160_03.dll [Menu: Sun Java Console] -> [2007/09/25 02:11:34 | 00,132,496 | —- | M] (Sun Microsystems, Inc.)
{e2e2dd38-d088-4134-82b7-f2ba38496583}:Exec [HKLM] -> %SystemRoot%\Network Diagnostic\xpnetdiag.exe [Menu: @xpsp3res.dll,-20001] -> [2008/04/14 01:23:34 | 00,558,080 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Button: Messenger] -> [2008/04/14 06:42:30 | 01,695,232 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2008/04/14 06:42:30 | 01,695,232 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ ->
CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> %ProgramFiles%\Java\jre1.6.0_03\bin\npjpi160_03.dll [Sun Java Console] -> [2007/09/25 02:11:34 | 00,132,496 | —- | M] (Sun Microsystems, Inc.)
CmdMapping\\"{09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5}" [HKLM] -> [Reg Error: Key error.] -> File not found
CmdMapping\\"{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}" [HKLM] -> [Reg Error: Key error.] -> File not found
CmdMapping\\"{e2e2dd38-d088-4134-82b7-f2ba38496583}" [HKLM] -> %SystemRoot%\Network Diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/14 01:23:34 | 00,558,080 | —- | M] (Microsoft Corporation)
CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/14 06:42:30 | 01,695,232 | —- | M] (Microsoft Corporation)
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ ->
PluginsPageFriendlyName -> Microsoft ActiveX Gallery ->
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime;=%s ->
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. ->
1 domain(s) and sub-domain(s) not assigned to a zone.
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->
{166B1BCA-3F9C-11CF-8075-444553540000} [HKLM] -> http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab [Shockwave ActiveX Control] ->
{30528230-99f7-4bb4-88d8-fa1d4f56a2ab} [HKLM] -> C:\Program Files\Yahoo!\Common\yinsthelper.dll [YInstStarter Class] ->
{48DD0448-9209-4F81-9F6D-D83562940134} [HKLM] -> http://lads.myspace.com/upload/MySpaceUploader1006.cab [MySpace Uploader Control] ->
{6414512B-B978-451D-A0D8-FCFDF33E833C} [HKLM] -> http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1240765566187 [WUWebControl Class] ->
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [HKLM] -> http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1225792826437 [MUWebControl Class] ->
{8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab [Java Plug-in 1.6.0_03] ->
{8FEFF364-6A5F-4966-A917-A3AC28411659} [HKLM] -> http://download.sopcast.com/download/SOPCORE.CAB [SopCore Control] ->
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab [Java Plug-in 1.6.0_01] ->
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab [Java Plug-in 1.6.0_03] ->
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab [Java Plug-in 1.6.0_03] ->
< DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->
{0D71AFBD-AF13-4506-9A7A-8DEA7AD245E2} -> (Intel(R) PRO/Wireless 3945ABG Network Connection) ->
{0F07A004-006B-4FD2-BD7A-2EBB18CBF8B9} -> () ->
{41FAEE53-AE46-46EE-BC0E-9C91FB8AD0CA} -> () ->
{848BB795-CD83-4742-BDC4-784AA4162DBA} -> (1394 Net Adapter) ->
{866502F8-0C6B-469D-A4E3-FD7B3DF6FE50} -> () ->
{868F0CFC-0560-4444-A4A3-E25C12EE8779} -> () ->
{D1333FB9-A89A-469C-82C7-07CD7C8BA9D5} -> () ->
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
Explorer.exe -> %SystemRoot%\Explorer.exe -> [2007/07/27 13:00:00 | 01,032,192 | —- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ ->
avgrsstarter -> %SystemRoot%\system32\avgrsstx.dll -> [2009/04/26 00:25:44 | 00,010,520 | —- | M] (AVG Technologies CZ, s.r.o.)
< ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks ->
"{56F9679E-7826-4C84-81F3-532071A8BCC5}" [HKLM] -> %ProgramFiles%\Windows Desktop Search\MSNLNamespaceMgr.dll [] -> [2008/05/26 23:19:02 | 00,304,128 | —- | M] (Microsoft Corporation)
< Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List ->
"%windir%\Network Diagnostic\xpnetdiag.exe" -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> [2008/04/14 01:23:34 | 00,558,080 | —- | M] (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2007/07/27 13:00:00 | 00,140,800 | —- | M] (Microsoft Corporation)
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" -> C:\Program Files\Windows Live\Messenger\msnmsgr.exe [C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger] -> [2009/02/06 18:51:28 | 03,885,408 | —- | M] (Microsoft Corporation)
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" -> C:\Program Files\Windows Live\Messenger\wlcsdk.exe [C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call] -> [2009/02/06 18:21:00 | 00,583,024 | —- | M] (Microsoft Corporation)
< Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List ->
"%windir%\Network Diagnostic\xpnetdiag.exe" -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> [2008/04/14 01:23:34 | 00,558,080 | —- | M] (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2007/07/27 13:00:00 | 00,140,800 | —- | M] (Microsoft Corporation)
"C:\Program Files\AVG\AVG8\avgemc.exe" -> C:\Program Files\AVG\AVG8\avgemc.exe [C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe] -> [2009/04/26 00:25:29 | 00,908,056 | —- | M] (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgnsx.exe" -> C:\Program Files\AVG\AVG8\avgnsx.exe [C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe] -> [2009/04/26 00:25:32 | 00,594,200 | —- | M] (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgupd.exe" -> C:\Program Files\AVG\AVG8\avgupd.exe [C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe] -> [2009/04/26 00:25:29 | 01,057,048 | —- | M] (AVG Technologies CZ, s.r.o.)
"C:\Program Files\Azureus\Azureus.exe" -> C:\Program Files\Azureus\Azureus.exe [C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus] -> [2008/03/07 18:17:00 | 00,254,976 | —- | M] (Azureus Inc)
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe" -> C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe [C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil] -> [2006/07/16 18:33:36 | 00,626,176 | —- | M] (IVT Corporation)
"C:\Program Files\LimeWire\LimeWire.exe" -> C:\Program Files\LimeWire\LimeWire.exe [C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire] -> [2006/08/16 20:16:24 | 00,159,744 | —- | M] ()
"C:\Program Files\Messenger\msmsgs.exe" -> C:\Program Files\Messenger\msmsgs.exe [C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger] -> [2008/04/14 06:42:30 | 01,695,232 | —- | M] (Microsoft Corporation)
"C:\Program Files\SopCast\adv\SopAdver.exe" -> C:\Program Files\SopCast\adv\SopAdver.exe [C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver] -> [2007/03/07 11:27:12 | 00,567,384 | —- | M] (www.sopcast.com)
"C:\Program Files\SopCast\SopCast.exe" -> C:\Program Files\SopCast\SopCast.exe [C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application] -> [2008/04/30 09:32:48 | 01,892,352 | —- | M] (www.sopcast.com)
"C:\Program Files\TVAnts\Tvants.exe" -> C:\Program Files\TVAnts\Tvants.exe [C:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts] -> [2008/12/29 01:22:26 | 02,202,624 | —- | M] (Zhejiang University)
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" -> C:\Program Files\Windows Live\Messenger\msnmsgr.exe [C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger] -> [2009/02/06 18:51:28 | 03,885,408 | —- | M] (Microsoft Corporation)
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" -> C:\Program Files\Windows Live\Messenger\wlcsdk.exe [C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call] -> [2009/02/06 18:21:00 | 00,583,024 | —- | M] (Microsoft Corporation)
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -> C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger] -> [2007/08/30 18:43:18 | 04,670,704 | —- | M] (Yahoo! Inc.)
"C:\Program Files\Yahoo!\Messenger\YServer.exe" -> C:\Program Files\Yahoo!\Messenger\YServer.exe [C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server] -> [2007/08/30 18:43:18 | 00,091,376 | —- | M] (Yahoo! Inc.)
"C:\StubInstaller.exe" -> C:\StubInstaller.exe [C:\StubInstaller.exe:*:Disabled:LimeWire swarmed installer] -> [2005/10/31 16:56:00 | 00,700,416 | —- | M] (LimeWire)
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot ->
"AlternateShell" -> cmd.exe ->
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 ->
"DisplayName" -> CD-ROM Driver ->
"ImagePath" -> %SystemRoot%\system32\DRIVERS\cdrom.sys [system32\DRIVERS\cdrom.sys] -> [2007/07/27 13:00:00 | 00,049,536 | —- | M] (Microsoft Corporation)
< Drives with AutoRun files > -> ->
C:\AUTOEXEC.BAT [] -> %SystemDrive%\AUTOEXEC.BAT [ NTFS ] -> [2007/11/20 16:39:48 | 00,000,000 | —- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 ->
\{9a770e20-a025-11dc-9264-00030d000001}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9a770e20-a025-11dc-9264-00030d000001}\Shell
\{9a770e20-a025-11dc-9264-00030d000001}\Shell\\"" -> [Autorun] -> File not found
\{9c305b1e-b817-11dd-af7b-160925044700}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9c305b1e-b817-11dd-af7b-160925044700}\Shell
\{9c305b1e-b817-11dd-af7b-160925044700}\Shell\\"" -> [AutoRun] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9c305b1e-b817-11dd-af7b-160925044700}\Shell\AutoRun
\{9c305b1e-b817-11dd-af7b-160925044700}\Shell\AutoRun\\"" -> [Auto&Play;] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9c305b1e-b817-11dd-af7b-160925044700}\Shell\AutoRun\command
\{9c305b1e-b817-11dd-af7b-160925044700}\Shell\AutoRun\command\\"" -> E:\LaunchU3.exe [E:\LaunchU3.exe -a] -> File not found
[Files/Folders - Created Within 30 Days]
AVG Free 8.5.lnk -> %AllUsersProfile%\Desktop\AVG Free 8.5.lnk -> [2009/04/26 18:26:06 | 00,001,565 | —- | C] ()
CatRoot_bak -> %SystemRoot%\System32\CatRoot_bak -> [2009/04/26 18:21:04 | 00,000,000 | —D | C]
LastGood -> %SystemRoot%\LastGood -> [2009/04/26 18:06:12 | 00,000,000 | —D | C]
cmldr -> %SystemDrive%\cmldr -> [2009/04/26 17:36:19 | 00,260,272 | —- | C] ()
cmdcons -> %SystemDrive%\cmdcons -> [2009/04/26 17:36:19 | 00,000,000 | RHSD | C]
SWXCACLS.exe -> %SystemRoot%\SWXCACLS.exe -> [2009/04/26 17:34:18 | 00,212,480 | —- | C] (SteelWerX)
SWREG.exe -> %SystemRoot%\SWREG.exe -> [2009/04/26 17:34:18 | 00,161,792 | —- | C] (SteelWerX)
SWSC.exe -> %SystemRoot%\SWSC.exe -> [2009/04/26 17:34:18 | 00,136,704 | —- | C] (SteelWerX)
vFind.exe -> %SystemRoot%\vFind.exe -> [2009/04/26 17:34:18 | 00,111,104 | —- | C] ()
sed.exe -> %SystemRoot%\sed.exe -> [2009/04/26 17:34:18 | 00,098,816 | —- | C] ()
grep.exe -> %SystemRoot%\grep.exe -> [2009/04/26 17:34:18 | 00,080,412 | —- | C] ()
zip.exe -> %SystemRoot%\zip.exe -> [2009/04/26 17:34:18 | 00,068,096 | —- | C] ()
NIRCMD.exe -> %SystemRoot%\NIRCMD.exe -> [2009/04/26 17:34:18 | 00,029,696 | —- | C] (NirSoft)
ERDNT -> %SystemRoot%\ERDNT -> [2009/04/26 17:34:13 | 00,000,000 | —D | C]
cf1.exe -> %UserProfile%\Desktop\cf1.exe -> [2009/04/26 17:33:48 | 03,006,230 | R— | C] ()
Qoobox -> %SystemDrive%\Qoobox -> [2009/04/26 17:30:48 | 00,000,000 | —D | C]
_OTScanIt -> %SystemDrive%\_OTScanIt -> [2009/04/26 17:18:38 | 00,000,000 | —D | C]
OTScanIt2 -> %UserProfile%\Desktop\OTScanIt2 -> [2009/04/26 15:08:51 | 00,000,000 | —D | C]
hijack this log file -> %UserProfile%\My Documents\hijack this log file -> [2009/04/26 12:51:47 | 00,000,000 | —D | C]
Google -> %AllUsersProfile%\Application Data\Google -> [2009/04/26 10:36:41 | 00,000,000 | —D | C]
$AVG8.VAULT$ -> %SystemDrive%\$AVG8.VAULT$ -> [2009/04/26 00:45:44 | 00,000,000 | -H-D | C]
avgrsstx.dll -> %SystemRoot%\System32\avgrsstx.dll -> [2009/04/26 00:25:44 | 00,010,520 | —- | C] (AVG Technologies CZ, s.r.o.)
avgtdix.sys -> %SystemRoot%\System32\drivers\avgtdix.sys -> [2009/04/26 00:25:43 | 00,108,552 | —- | C] (AVG Technologies CZ, s.r.o.)
avgldx86.sys -> %SystemRoot%\System32\drivers\avgldx86.sys -> [2009/04/26 00:25:42 | 00,325,640 | —- | C] (AVG Technologies CZ, s.r.o.)
avgmfx86.sys -> %SystemRoot%\System32\drivers\avgmfx86.sys -> [2009/04/26 00:25:41 | 00,027,656 | —- | C] (AVG Technologies CZ, s.r.o.)
incavi.avm -> %SystemRoot%\System32\drivers\Avg\incavi.avm -> [2009/04/26 00:25:37 | 35,437,904 | —- | C] ()
avi7.avg -> %SystemRoot%\System32\drivers\Avg\avi7.avg -> [2009/04/26 00:25:37 | 06,061,540 | —- | C] ()
miniavi.avg -> %SystemRoot%\System32\drivers\Avg\miniavi.avg -> [2009/04/26 00:25:37 | 00,434,673 | —- | C] ()
microavi.avg -> %SystemRoot%\System32\drivers\Avg\microavi.avg -> [2009/04/26 00:25:37 | 00,032,111 | —- | C] ()
Avg -> %SystemRoot%\System32\drivers\Avg -> [2009/04/26 00:25:37 | 00,000,000 | —D | C]
AVG8 -> %AppData%\AVG8 -> [2009/04/25 23:59:37 | 00,000,000 | —D | C]
avg8 -> %AllUsersProfile%\Application Data\avg8 -> [2009/04/25 23:48:23 | 00,000,000 | —D | C]
AVG -> %ProgramFiles%\AVG -> [2009/04/25 23:48:23 | 00,000,000 | —D | C]
RtlCPAPI.dll -> %SystemRoot%\System32\RtlCPAPI.dll -> [2009/04/25 22:00:34 | 00,135,168 | R— | C] ()
nvapps.nvb -> %SystemRoot%\System32\nvapps.nvb -> [2009/04/25 21:59:27 | 00,051,244 | —- | C] ()
SynTPCo2.dll -> %SystemRoot%\System32\SynTPCo2.dll -> [2009/04/25 21:46:22 | 00,081,920 | —- | C] (Synaptics, Inc.)
Prefetch -> %SystemRoot%\Prefetch -> [2009/04/25 17:48:14 | 00,000,000 | —D | C]
xjis.nls -> %SystemRoot%\System32\dllcache\xjis.nls -> [2009/04/25 17:44:59 | 00,028,288 | —- | C] ()
winzm.ime -> %SystemRoot%\System32\dllcache\winzm.ime -> [2009/04/25 17:44:54 | 00,156,672 | —- | C] (Microsoft Corporation)
winsp.ime -> %SystemRoot%\System32\dllcache\winsp.ime -> [2009/04/25 17:44:54 | 00,156,672 | —- | C] (Microsoft Corporation)
winpy.ime -> %SystemRoot%\System32\dllcache\winpy.ime -> [2009/04/25 17:44:54 | 00,156,672 | —- | C] (Microsoft Corporation)
winar30.ime -> %SystemRoot%\System32\dllcache\winar30.ime -> [2009/04/25 17:44:53 | 00,079,360 | —- | C] (Microsoft Corporation)
wingb.ime -> %SystemRoot%\System32\dllcache\wingb.ime -> [2009/04/25 17:44:53 | 00,069,120 | —- | C] (Microsoft Corporation)
winime.ime -> %SystemRoot%\System32\dllcache\winime.ime -> [2009/04/25 17:44:53 | 00,065,536 | —- | C] (Microsoft Corporation)
weitekp9.dll -> %SystemRoot%\System32\dllcache\weitekp9.dll -> [2009/04/25 17:44:52 | 00,041,600 | —- | C] (Microsoft Corporation)
weitekp9.sys -> %SystemRoot%\System32\dllcache\weitekp9.sys -> [2009/04/25 17:44:52 | 00,031,232 | —- | C] (Microsoft Corporation)
wam51.dll -> %SystemRoot%\System32\dllcache\wam51.dll -> [2009/04/25 17:44:51 | 00,076,800 | —- | C] (Microsoft Corporation)
wamreg51.dll -> %SystemRoot%\System32\dllcache\wamreg51.dll -> [2009/04/25 17:44:51 | 00,053,248 | —- | C] (Microsoft Corporation)
wamps51.dll -> %SystemRoot%\System32\dllcache\wamps51.dll -> [2009/04/25 17:44:51 | 00,009,216 | —- | C] (Microsoft Corporation)
w3svc.dll -> %SystemRoot%\System32\dllcache\w3svc.dll -> [2009/04/25 17:44:50 | 00,363,520 | —- | C] (Microsoft Corporation)
w3ext.dll -> %SystemRoot%\System32\dllcache\w3ext.dll -> [2009/04/25 17:44:50 | 00,073,728 | —- | C] (Microsoft Corporation)
w3svapi.dll -> %SystemRoot%\System32\dllcache\w3svapi.dll -> [2009/04/25 17:44:50 | 00,005,632 | —- | C] (Microsoft Corporation)
w3ctrs51.dll -> %SystemRoot%\System32\dllcache\w3ctrs51.dll -> [2009/04/25 17:44:50 | 00,004,608 | —- | C] (Microsoft Corporation)
voicepad.dll -> %SystemRoot%\System32\dllcache\voicepad.dll -> [2009/04/25 17:44:49 | 00,426,041 | —- | C] (Microsoft Corporation)
voicesub.dll -> %SystemRoot%\System32\dllcache\voicesub.dll -> [2009/04/25 17:44:49 | 00,086,073 | —- | C] (Microsoft Corporation)
w32.dll -> %SystemRoot%\System32\dllcache\w32.dll -> [2009/04/25 17:44:49 | 00,048,256 | —- | C] (Microsoft Corporation)
uniime.dll -> %SystemRoot%\System32\dllcache\uniime.dll -> [2009/04/25 17:44:43 | 00,076,288 | —- | C] (Microsoft Corporation)
unicdime.ime -> %SystemRoot%\System32\dllcache\unicdime.ime -> [2009/04/25 17:44:43 | 00,065,024 | —- | C] (Microsoft Corporation)
uihelper.dll -> %SystemRoot%\System32\dllcache\uihelper.dll -> [2009/04/25 17:44:42 | 00,103,424 | —- | C] (Microsoft Corporation)
tsprof.exe -> %SystemRoot%\System32\dllcache\tsprof.exe -> [2009/04/25 17:44:41 | 00,014,336 | —- | C] (Microsoft Corporation)
tintsetp.exe -> %SystemRoot%\System32\dllcache\tintsetp.exe -> [2009/04/25 17:44:40 | 00,455,168 | —- | C] (Microsoft Corporation)
tintlphr.exe -> %SystemRoot%\System32\dllcache\tintlphr.exe -> [2009/04/25 17:44:40 | 00,044,032 | —- | C] (Microsoft Corporation)
tools.dll -> %SystemRoot%\System32\dllcache\tools.dll -> [2009/04/25 17:44:40 | 00,031,232 | —- | C] (Microsoft Corporation)
tmigrate.dll -> %SystemRoot%\System32\dllcache\tmigrate.dll -> [2009/04/25 17:44:40 | 00,010,240 | —- | C] (Microsoft Corporation)
tintlgnt.ime -> %SystemRoot%\System32\dllcache\tintlgnt.ime -> [2009/04/25 17:44:39 | 00,571,392 | —- | C] (Microsoft Corporation)
thawbrkr.dll -> %SystemRoot%\System32\dllcache\thawbrkr.dll -> [2009/04/25 17:44:39 | 00,185,344 | —- | C] (Microsoft Corporation)
tdipx.sys -> %SystemRoot%\System32\dllcache\tdipx.sys -> [2009/04/25 17:44:39 | 00,021,896 | —- | C] (Microsoft Corporation)
tdspx.sys -> %SystemRoot%\System32\dllcache\tdspx.sys -> [2009/04/25 17:44:39 | 00,019,464 | —- | C] (Microsoft Corporation)
tdasync.sys -> %SystemRoot%\System32\dllcache\tdasync.sys -> [2009/04/25 17:44:38 | 00,013,192 | —- | C] (Microsoft Corporation)
svcext51.dll -> %SystemRoot%\System32\dllcache\svcext51.dll -> [2009/04/25 17:44:37 | 00,046,592 | —- | C] (Microsoft Corporation)
status.dll -> %SystemRoot%\System32\dllcache\status.dll -> [2009/04/25 17:44:37 | 00,016,896 | —- | C] (Microsoft Corporation)
srusbusd.dll -> %SystemRoot%\System32\dllcache\srusbusd.dll -> [2009/04/25 17:44:36 | 00,101,376 | —- | C] (Microsoft Corporation)
sspifilt.dll -> %SystemRoot%\System32\dllcache\sspifilt.dll -> [2009/04/25 17:44:36 | 00,046,592 | —- | C] (Microsoft Corporation)
ssinc51.dll -> %SystemRoot%\System32\dllcache\ssinc51.dll -> [2009/04/25 17:44:36 | 00,045,056 | —- | C] (Microsoft Corporation)
softkey.dll -> %SystemRoot%\System32\dllcache\softkey.dll -> [2009/04/25 17:44:34 | 00,143,422 | —- | C] (Microsoft Corporation)
snmpincl.dll -> %SystemRoot%\System32\dllcache\snmpincl.dll -> [2009/04/25 17:44:33 | 00,358,400 | —- | C] (Microsoft Corporation)
snmpcl.dll -> %SystemRoot%\System32\dllcache\snmpcl.dll -> [2009/04/25 17:44:33 | 00,259,072 | —- | C] (Microsoft Corporation)
snmpsmir.dll -> %SystemRoot%\System32\dllcache\snmpsmir.dll -> [2009/04/25 17:44:33 | 00,188,416 | —- | C] (Microsoft Corporation)
snmpthrd.dll -> %SystemRoot%\System32\dllcache\snmpthrd.dll -> [2009/04/25 17:44:33 | 00,040,448 | —- | C] (Microsoft Corporation)
snmp.exe -> %SystemRoot%\System32\dllcache\snmp.exe -> [2009/04/25 17:44:33 | 00,032,768 | —- | C] (Microsoft Corporation)
snmpstup.dll -> %SystemRoot%\System32\dllcache\snmpstup.dll -> [2009/04/25 17:44:33 | 00,010,240 | —- | C] (Microsoft Corporation)
snmptrap.exe -> %SystemRoot%\System32\dllcache\snmptrap.exe -> [2009/04/25 17:44:33 | 00,008,704 | —- | C] (Microsoft Corporation)
EXCH_snprfdll.dll -> %SystemRoot%\System32\dllcache\EXCH_snprfdll.dll -> [2009/04/25 17:44:33 | 00,007,168 | —- | C] (Microsoft Corporation)
snmpmib.dll -> %SystemRoot%\System32\dllcache\snmpmib.dll -> [2009/04/25 17:44:33 | 00,006,144 | —- | C] (Microsoft Corporation)
smtpsvc.dll -> %SystemRoot%\System32\dllcache\smtpsvc.dll -> [2009/04/25 17:44:32 | 00,456,704 | —- | C] (Microsoft Corporation)
EXCH_smtpctrs.dll -> %SystemRoot%\System32\dllcache\EXCH_smtpctrs.dll -> [2009/04/25 17:44:32 | 00,012,288 | —- | C] (Microsoft Corporation)
smi2smir.exe -> %SystemRoot%\System32\dllcache\smi2smir.exe -> [2009/04/25 17:44:31 | 00,236,544 | —- | C] (Microsoft Corporation)
sm9aw.dll -> %SystemRoot%\System32\dllcache\sm9aw.dll -> [2009/04/25 17:44:31 | 00,038,912 | —- | C] (Microsoft Corporation)
smb6w.dll -> %SystemRoot%\System32\dllcache\smb6w.dll -> [2009/04/25 17:44:31 | 00,031,744 | —- | C] (Microsoft Corporation)
sma3w.dll -> %SystemRoot%\System32\dllcache\sma3w.dll -> [2009/04/25 17:44:31 | 00,031,744 | —- | C] (Microsoft Corporation)
sm8cw.dll -> %SystemRoot%\System32\dllcache\sm8cw.dll -> [2009/04/25 17:44:31 | 00,029,184 | —- | C] (Microsoft Corporation)
sm93w.dll -> %SystemRoot%\System32\dllcache\sm93w.dll -> [2009/04/25 17:44:31 | 00,026,624 | —- | C] (Microsoft Corporation)
sm92w.dll -> %SystemRoot%\System32\dllcache\sm92w.dll -> [2009/04/25 17:44:31 | 00,026,624 | —- | C] (Microsoft Corporation)
sm90w.dll -> %SystemRoot%\System32\dllcache\sm90w.dll -> [2009/04/25 17:44:31 | 00,026,112 | —- | C] (Microsoft Corporation)
sm8dw.dll -> %SystemRoot%\System32\dllcache\sm8dw.dll -> [2009/04/25 17:44:31 | 00,026,112 | —- | C] (Microsoft Corporation)
sm8aw.dll -> %SystemRoot%\System32\dllcache\sm8aw.dll -> [2009/04/25 17:44:31 | 00,026,112 | —- | C] (Microsoft Corporation)
smierrsm.dll -> %SystemRoot%\System32\dllcache\smierrsm.dll -> [2009/04/25 17:44:31 | 00,015,872 | —- | C] (Microsoft Corporation)
smimsgif.dll -> %SystemRoot%\System32\dllcache\smimsgif.dll -> [2009/04/25 17:44:31 | 00,005,632 | —- | C] (Microsoft Corporation)
smierrsy.dll -> %SystemRoot%\System32\dllcache\smierrsy.dll -> [2009/04/25 17:44:31 | 00,005,632 | —- | C] (Microsoft Corporation)
sm87w.dll -> %SystemRoot%\System32\dllcache\sm87w.dll -> [2009/04/25 17:44:30 | 00,030,208 | —- | C] (Microsoft Corporation)
sm81w.dll -> %SystemRoot%\System32\dllcache\sm81w.dll -> [2009/04/25 17:44:30 | 00,030,208 | —- | C] (Microsoft Corporation)
sm89w.dll -> %SystemRoot%\System32\dllcache\sm89w.dll -> [2009/04/25 17:44:30 | 00,026,112 | —- | C] (Microsoft Corporation)
sm59w.dll -> %SystemRoot%\System32\dllcache\sm59w.dll -> [2009/04/25 17:44:30 | 00,025,088 | —- | C] (Microsoft Corporation)
simptcp.dll -> %SystemRoot%\System32\dllcache\simptcp.dll -> [2009/04/25 17:44:28 | 00,018,944 | —- | C] (Microsoft Corporation)
EXCH_seos.dll -> %SystemRoot%\System32\dllcache\EXCH_seos.dll -> [2009/04/25 17:44:25 | 00,026,112 | —- | C] (Microsoft Corporation)
EXCH_scripto.dll -> %SystemRoot%\System32\dllcache\EXCH_scripto.dll -> [2009/04/25 17:44:24 | 00,057,856 | —- | C] (Microsoft Corporation)
rwia330.dll -> %SystemRoot%\System32\dllcache\rwia330.dll -> [2009/04/25 17:44:22 | 00,079,872 | —- | C] (Ricoh Co., Ltd.)
rwia001.dll -> %SystemRoot%\System32\dllcache\rwia001.dll -> [2009/04/25 17:44:22 | 00,079,872 | —- | C] (Ricoh Co., Ltd.)
rw330ext.dll -> %SystemRoot%\System32\dllcache\rw330ext.dll -> [2009/04/25 17:44:22 | 00,026,624 | —- | C] (Ricoh Co., Ltd.)
rw001ext.dll -> %SystemRoot%\System32\dllcache\rw001ext.dll -> [2009/04/25 17:44:22 | 00,024,576 | —- | C] (Microsoft Corporation)
romanime.ime -> %SystemRoot%\System32\dllcache\romanime.ime -> [2009/04/25 17:44:21 | 00,026,112 | —- | C] (Microsoft Corporation)
rpcref.dll -> %SystemRoot%\System32\dllcache\rpcref.dll -> [2009/04/25 17:44:21 | 00,004,096 | —- | C] (Microsoft Corporation)
EXCH_regtrace.exe -> %SystemRoot%\System32\dllcache\EXCH_regtrace.exe -> [2009/04/25 17:44:20 | 00,023,040 | —- | C] (Microsoft Corporation)
register.exe -> %SystemRoot%\System32\dllcache\register.exe -> [2009/04/25 17:44:20 | 00,014,848 | —- | C] (Microsoft Corporation)
quick.ime -> %SystemRoot%\System32\dllcache\quick.ime -> [2009/04/25 17:44:18 | 00,077,824 | —- | C] (Microsoft Corporation)
ramdisk.sys -> %SystemRoot%\System32\dllcache\ramdisk.sys -> [2009/04/25 17:44:18 | 00,020,736 | —- | C] (Microsoft Corporation)
quser.exe -> %SystemRoot%\System32\dllcache\quser.exe -> [2009/04/25 17:44:18 | 00,016,384 | —- | C] (Microsoft Corporation)
query.exe -> %SystemRoot%\System32\dllcache\query.exe -> [2009/04/25 17:44:18 | 00,009,728 | —- | C] (Microsoft Corporation)
pwsdata.dll -> %SystemRoot%\System32\dllcache\pwsdata.dll -> [2009/04/25 17:44:17 | 00,007,680 | —- | C] (Microsoft Corporation)
pmxviceo.dll -> %SystemRoot%\System32\dllcache\pmxviceo.dll -> [2009/04/25 17:44:16 | 00,131,584 | —- | C] (Microsoft Corporation)
prcp.nls -> %SystemRoot%\System32\dllcache\prcp.nls -> [2009/04/25 17:44:16 | 00,083,748 | —- | C] ()
prc.nls -> %SystemRoot%\System32\dllcache\prc.nls -> [2009/04/25 17:44:16 | 00,083,748 | —- | C] ()
pmigrate.dll -> %SystemRoot%\System32\dllcache\pmigrate.dll -> [2009/04/25 17:44:16 | 00,067,584 | —- | C] (Microsoft Corporation)
pmxmcro.dll -> %SystemRoot%\System32\dllcache\pmxmcro.dll -> [2009/04/25 17:44:16 | 00,011,264 | —- | C] (Microsoft Corporation)
pmxgl.dll -> %SystemRoot%\System32\dllcache\pmxgl.dll -> [2009/04/25 17:44:16 | 00,006,144 | —- | C] (Microsoft Corporation)
pintlgnt.ime -> %SystemRoot%\System32\dllcache\pintlgnt.ime -> [2009/04/25 17:44:15 | 00,482,304 | —- | C] (Microsoft Corporation)
pintlcsa.dll -> %SystemRoot%\System32\dllcache\pintlcsa.dll -> [2009/04/25 17:44:15 | 00,175,104 | —- | C] ()
phon.ime -> %SystemRoot%\System32\dllcache\phon.ime -> [2009/04/25 17:44:15 | 00,079,360 | —- | C] (Microsoft Corporation)
pintlphr.exe -> %SystemRoot%\System32\dllcache\pintlphr.exe -> [2009/04/25 17:44:15 | 00,070,144 | —- | C] (Microsoft Corporation)
pintlcsd.dll -> %SystemRoot%\System32\dllcache\pintlcsd.dll -> [2009/04/25 17:44:15 | 00,053,760 | —- | C] (Microsoft Corporation)
pagecnt.dll -> %SystemRoot%\System32\dllcache\pagecnt.dll -> [2009/04/25 17:44:14 | 00,031,744 | —- | C] (Microsoft Corporation)
permchk.dll -> %SystemRoot%\System32\dllcache\permchk.dll -> [2009/04/25 17:44:14 | 00,020,992 | —- | C] (Microsoft Corporation)
padrs411.dll -> %SystemRoot%\System32\dllcache\padrs411.dll -> [2009/04/25 17:44:13 | 00,036,927 | —- | C] (Microsoft Corporation)
padrs404.dll -> %SystemRoot%\System32\dllcache\padrs404.dll -> [2009/04/25 17:44:13 | 00,015,872 | —- | C] (Microsoft Corporation)
padrs804.dll -> %SystemRoot%\System32\dllcache\padrs804.dll -> [2009/04/25 17:44:13 | 00,015,360 | —- | C] (Microsoft Corporation)
padrs412.dll -> %SystemRoot%\System32\dllcache\padrs412.dll -> [2009/04/25 17:44:13 | 00,014,336 | —- | C] (Microsoft Corporation)
nsepm.dll -> %SystemRoot%\System32\dllcache\nsepm.dll -> [2009/04/25 17:44:10 | 00,044,544 | —- | C] (Microsoft Corporation)
EXCH_ntfsdrv.dll -> %SystemRoot%\System32\dllcache\EXCH_ntfsdrv.dll -> [2009/04/25 17:44:10 | 00,038,912 | —- | C] (Microsoft Corporation)
nextlink.dll -> %SystemRoot%\System32\dllcache\nextlink.dll -> [2009/04/25 17:44:09 | 00,053,248 | —- | C] (Microsoft Corporation)
multibox.dll -> %SystemRoot%\System32\dllcache\multibox.dll -> [2009/04/25 17:44:07 | 00,229,439 | —- | C] (Microsoft Corporation)
mtstocom.exe -> %SystemRoot%\System32\dllcache\mtstocom.exe -> [2009/04/25 17:44:06 | 00,111,104 | —- | C] (Microsoft Corporation)
msir3jp.lex -> %SystemRoot%\System32\dllcache\msir3jp.lex -> [2009/04/25 17:44:02 | 01,875,968 | —- | C] (Microsoft Corporation)
msir3jp.dll -> %SystemRoot%\System32\dllcache\msir3jp.dll -> [2009/04/25 17:44:02 | 00,098,304 | —- | C] (Microsoft Corporation)
migregdb.exe -> %SystemRoot%\System32\dllcache\migregdb.exe -> [2009/04/25 17:43:57 | 00,007,680 | —- | C] (Microsoft Corporation)
mga.sys -> %SystemRoot%\System32\dllcache\mga.sys -> [2009/04/25 17:43:56 | 00,092,416 | —- | C] (Microsoft Corporation)
mga.dll -> %SystemRoot%\System32\dllcache\mga.dll -> [2009/04/25 17:43:56 | 00,092,032 | —- | C] (Microsoft Corporation)
metada51.dll -> %SystemRoot%\System32\dllcache\metada51.dll -> [2009/04/25 17:43:56 | 00,085,504 | —- | C] (Microsoft Corporation)
md5filt.dll -> %SystemRoot%\System32\dllcache\md5filt.dll -> [2009/04/25 17:43:56 | 00,037,888 | —- | C] (Microsoft Corporation)
mdsync.dll -> %SystemRoot%\System32\dllcache\mdsync.dll -> [2009/04/25 17:43:56 | 00,026,624 | —- | C] (Microsoft Corporation)
EXCH_mailmsg.dll -> %SystemRoot%\System32\dllcache\EXCH_mailmsg.dll -> [2009/04/25 17:43:55 | 00,065,536 | —- | C] (Microsoft Corporation)
lpdsvc.dll -> %SystemRoot%\System32\dllcache\lpdsvc.dll -> [2009/04/25 17:43:54 | 00,022,528 | —- | C] (Microsoft Corporation)
logscrpt.dll -> %SystemRoot%\System32\dllcache\logscrpt.dll -> [2009/04/25 17:43:54 | 00,022,016 | —- | C] (Microsoft Corporation)
lprmon.dll -> %SystemRoot%\System32\dllcache\lprmon.dll -> [2009/04/25 17:43:54 | 00,018,944 | —- | C] (Microsoft Corporation)
lonsint.dll -> %SystemRoot%\System32\dllcache\lonsint.dll -> [2009/04/25 17:43:54 | 00,013,312 | —- | C] (Microsoft Corporation)
lmmib2.dll -> %SystemRoot%\System32\dllcache\lmmib2.dll -> [2009/04/25 17:43:53 | 00,033,792 | —- | C] (Microsoft Corporation)
ksc.nls -> %SystemRoot%\System32\dllcache\ksc.nls -> [2009/04/25 17:43:51 | 00,047,066 | —- | C] ()
korwbrkr.lex -> %SystemRoot%\System32\dllcache\korwbrkr.lex -> [2009/04/25 17:43:50 | 01,158,818 | —- | C] ()
korwbrkr.dll -> %SystemRoot%\System32\dllcache\korwbrkr.dll -> [2009/04/25 17:43:50 | 00,070,656 | —- | C] (Microsoft Corporation)
kbdvntc.dll -> %SystemRoot%\System32\dllcache\kbdvntc.dll -> [2009/04/25 17:43:50 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdusa.dll -> %SystemRoot%\System32\dllcache\kbdusa.dll -> [2009/04/25 17:43:50 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdnecat.dll -> %SystemRoot%\System32\dllcache\kbdnecat.dll -> [2009/04/25 17:43:49 | 00,009,216 | —- | C] (Microsoft Corporation)
kbdnecnt.dll -> %SystemRoot%\System32\dllcache\kbdnecnt.dll -> [2009/04/25 17:43:49 | 00,007,680 | —- | C] (Microsoft Corporation)
kbdnec95.dll -> %SystemRoot%\System32\dllcache\kbdnec95.dll -> [2009/04/25 17:43:49 | 00,007,168 | —- | C] (Microsoft Corporation)
kbdth3.dll -> %SystemRoot%\System32\dllcache\kbdth3.dll -> [2009/04/25 17:43:49 | 00,006,144 | —- | C] (Microsoft Corporation)
kbdth2.dll -> %SystemRoot%\System32\dllcache\kbdth2.dll -> [2009/04/25 17:43:49 | 00,006,144 | —- | C] (Microsoft Corporation)
kbdlk41j.dll -> %SystemRoot%\System32\dllcache\kbdlk41j.dll -> [2009/04/25 17:43:49 | 00,006,144 | —- | C] (Microsoft Corporation)
kbdurdu.dll -> %SystemRoot%\System32\dllcache\kbdurdu.dll -> [2009/04/25 17:43:49 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdth1.dll -> %SystemRoot%\System32\dllcache\kbdth1.dll -> [2009/04/25 17:43:49 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdth0.dll -> %SystemRoot%\System32\dllcache\kbdth0.dll -> [2009/04/25 17:43:49 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdsyr2.dll -> %SystemRoot%\System32\dllcache\kbdsyr2.dll -> [2009/04/25 17:43:49 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdsyr1.dll -> %SystemRoot%\System32\dllcache\kbdsyr1.dll -> [2009/04/25 17:43:49 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdibm02.dll -> %SystemRoot%\System32\dllcache\kbdibm02.dll -> [2009/04/25 17:43:48 | 00,007,168 | —- | C] (Microsoft Corporation)
kbdlk41a.dll -> %SystemRoot%\System32\dllcache\kbdlk41a.dll -> [2009/04/25 17:43:48 | 00,006,656 | —- | C] (Microsoft Corporation)
kbdinpun.dll -> %SystemRoot%\System32\dllcache\kbdinpun.dll -> [2009/04/25 17:43:48 | 00,006,144 | —- | C] (Microsoft Corporation)
kbdintel.dll -> %SystemRoot%\System32\dllcache\kbdintel.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdintam.dll -> %SystemRoot%\System32\dllcache\kbdintam.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdinmar.dll -> %SystemRoot%\System32\dllcache\kbdinmar.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdinkan.dll -> %SystemRoot%\System32\dllcache\kbdinkan.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdinhin.dll -> %SystemRoot%\System32\dllcache\kbdinhin.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdinguj.dll -> %SystemRoot%\System32\dllcache\kbdinguj.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdindev.dll -> %SystemRoot%\System32\dllcache\kbdindev.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdheb.dll -> %SystemRoot%\System32\dllcache\kbdheb.dll -> [2009/04/25 17:43:48 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdax2.dll -> %SystemRoot%\System32\dllcache\kbdax2.dll -> [2009/04/25 17:43:47 | 00,006,144 | —- | C] (Microsoft Corporation)
kbdfa.dll -> %SystemRoot%\System32\dllcache\kbdfa.dll -> [2009/04/25 17:43:47 | 00,005,632 | —- | C] (Microsoft Corporation)
kbddiv2.dll -> %SystemRoot%\System32\dllcache\kbddiv2.dll -> [2009/04/25 17:43:47 | 00,005,632 | —- | C] (Microsoft Corporation)
kbddiv1.dll -> %SystemRoot%\System32\dllcache\kbddiv1.dll -> [2009/04/25 17:43:47 | 00,005,632 | —- | C] (Microsoft Corporation)
kbda3.dll -> %SystemRoot%\System32\dllcache\kbda3.dll -> [2009/04/25 17:43:47 | 00,005,632 | —- | C] (Microsoft Corporation)
kbda2.dll -> %SystemRoot%\System32\dllcache\kbda2.dll -> [2009/04/25 17:43:47 | 00,005,632 | —- | C] (Microsoft Corporation)
kbdgeo.dll -> %SystemRoot%\System32\dllcache\kbdgeo.dll -> [2009/04/25 17:43:47 | 00,005,120 | —- | C] (Microsoft Corporation)
kbdarmw.dll -> %SystemRoot%\System32\dllcache\kbdarmw.dll -> [2009/04/25 17:43:47 | 00,005,120 | —- | C] (Microsoft Corporation)
kbdarme.dll -> %SystemRoot%\System32\dllcache\kbdarme.dll -> [2009/04/25 17:43:47 | 00,005,120 | —- | C] (Microsoft Corporation)
iscomlog.dll -> %SystemRoot%\System32\dllcache\iscomlog.dll -> [2009/04/25 17:43:46 | 00,026,624 | —- | C] (Microsoft Corporation)
jupiw.dll -> %SystemRoot%\System32\dllcache\jupiw.dll -> [2009/04/25 17:43:46 | 00,018,432 | —- | C] (Microsoft Corporation)
iwrps.dll -> %SystemRoot%\System32\dllcache\iwrps.dll -> [2009/04/25 17:43:46 | 00,009,216 | —- | C] (Microsoft Corporation)
kbd106n.dll -> %SystemRoot%\System32\dllcache\kbd106n.dll -> [2009/04/25 17:43:46 | 00,006,144 | —- | C] (Microsoft Corporation)
kbd101a.dll -> %SystemRoot%\System32\dllcache\kbd101a.dll -> [2009/04/25 17:43:46 | 00,006,144 | —- | C] (Microsoft Corporation)
kbd101.dll -> %SystemRoot%\System32\dllcache\kbd101.dll -> [2009/04/25 17:43:46 | 00,006,144 | —- | C] (Microsoft Corporation)
kbda1.dll -> %SystemRoot%\System32\dllcache\kbda1.dll -> [2009/04/25 17:43:46 | 00,005,632 | —- | C] (Microsoft Corporation)
isapips.dll -> %SystemRoot%\System32\dllcache\isapips.dll -> [2009/04/25 17:43:45 | 00,007,168 | —- | C] (Microsoft Corporation)
iprip.dll -> %SystemRoot%\System32\dllcache\iprip.dll -> [2009/04/25 17:43:44 | 00,035,328 | —- | C] (Microsoft Corporation)
infocomm.dll -> %SystemRoot%\System32\dllcache\infocomm.dll -> [2009/04/25 17:43:43 | 00,257,024 | —- | C] (Microsoft Corporation)
infoctrs.dll -> %SystemRoot%\System32\dllcache\infoctrs.dll -> [2009/04/25 17:43:43 | 00,008,704 | —- | C] (Microsoft Corporation)
imskdic.dll -> %SystemRoot%\System32\dllcache\imskdic.dll -> [2009/04/25 17:43:42 | 00,471,102 | —- | C] (Microsoft Corporation)
imskf.dll -> %SystemRoot%\System32\dllcache\imskf.dll -> [2009/04/25 17:43:42 | 00,315,452 | —- | C] (Microsoft Corporation)
inetin51.exe -> %SystemRoot%\System32\dllcache\inetin51.exe -> [2009/04/25 17:43:42 | 00,015,872 | —- | C] (Microsoft Corporation)
imjputyc.dll -> %SystemRoot%\System32\dllcache\imjputyc.dll -> [2009/04/25 17:43:41 | 00,274,489 | —- | C] (Microsoft Corporation)
imjputy.exe -> %SystemRoot%\System32\dllcache\imjputy.exe -> [2009/04/25 17:43:41 | 00,262,200 | —- | C] (Microsoft Corporation)
imjprw.exe -> %SystemRoot%\System32\dllcache\imjprw.exe -> [2009/04/25 17:43:41 | 00,233,527 | —- | C] (Microsoft Corporation)
imlang.dll -> %SystemRoot%\System32\dllcache\imlang.dll -> [2009/04/25 17:43:41 | 00,102,456 | —- | C] (Microsoft Corporation)
imkrinst.exe -> %SystemRoot%\System32\dllcache\imkrinst.exe -> [2009/04/25 17:43:41 | 00,059,904 | —- | C] (Microsoft Corporation)
imscinst.exe -> %SystemRoot%\System32\dllcache\imscinst.exe -> [2009/04/25 17:43:41 | 00,059,392 | —- | C] ()
imjpuex.exe -> %SystemRoot%\System32\dllcache\imjpuex.exe -> [2009/04/25 17:43:41 | 00,045,109 | —- | C] (Microsoft Corporation)
imjpcus.dll -> %SystemRoot%\System32\dllcache\imjpcus.dll -> [2009/04/25 17:43:40 | 00,716,856 | —- | C] (Microsoft Corporation)
imjpdct.exe -> %SystemRoot%\System32\dllcache\imjpdct.exe -> [2009/04/25 17:43:40 | 00,307,257 | —- | C] (Microsoft Corporation)
imjpmig.exe -> %SystemRoot%\System32\dllcache\imjpmig.exe -> [2009/04/25 17:43:40 | 00,208,952 | —- | C] (Microsoft Corporation)
imjpinst.exe -> %SystemRoot%\System32\dllcache\imjpinst.exe -> [2009/04/25 17:43:40 | 00,196,665 | —- | C] ()
imjpdsvr.exe -> %SystemRoot%\System32\dllcache\imjpdsvr.exe -> [2009/04/25 17:43:40 | 00,155,705 | —- | C] (Microsoft Corporation)
imjpdct.dll -> %SystemRoot%\System32\dllcache\imjpdct.dll -> [2009/04/25 17:43:40 | 00,081,976 | —- | C] (Microsoft Corporation)
imjpdadm.exe -> %SystemRoot%\System32\dllcache\imjpdadm.exe -> [2009/04/25 17:43:40 | 00,057,398 | —- | C] (Microsoft Corporation)
imjp81k.dll -> %SystemRoot%\System32\dllcache\imjp81k.dll -> [2009/04/25 17:43:39 | 00,811,064 | —- | C] (Microsoft Corporation)
imjpcic.dll -> %SystemRoot%\System32\dllcache\imjpcic.dll -> [2009/04/25 17:43:39 | 00,368,696 | —- | C] (Microsoft Corporation)
imjp81.ime -> %SystemRoot%\System32\dllcache\imjp81.ime -> [2009/04/25 17:43:39 | 00,340,023 | —- | C] (Microsoft Corporation)
imepadsv.exe -> %SystemRoot%\System32\dllcache\imepadsv.exe -> [2009/04/25 17:43:39 | 00,311,359 | —- | C] (Microsoft Corporation)
imepadsm.dll -> %SystemRoot%\System32\dllcache\imepadsm.dll -> [2009/04/25 17:43:39 | 00,102,463 | —- | C] (Microsoft Corporation)
imekr.lex -> %SystemRoot%\System32\dllcache\imekr.lex -> [2009/04/25 17:43:38 | 00,134,339 | —- | C] ()
imekrcic.dll -> %SystemRoot%\System32\dllcache\imekrcic.dll -> [2009/04/25 17:43:38 | 00,106,496 | —- | C] (Microsoft Corporation)
imekr61.ime -> %SystemRoot%\System32\dllcache\imekr61.ime -> [2009/04/25 17:43:38 | 00,094,720 | —- | C] (Microsoft Corporation)
imekrmbx.dll -> %SystemRoot%\System32\dllcache\imekrmbx.dll -> [2009/04/25 17:43:38 | 00,086,016 | —- | C] (Microsoft Corporation)
iislog51.dll -> %SystemRoot%\System32\dllcache\iislog51.dll -> [2009/04/25 17:43:38 | 00,079,872 | —- | C] (Microsoft Corporation)
imekrmig.exe -> %SystemRoot%\System32\dllcache\imekrmig.exe -> [2009/04/25 17:43:38 | 00,044,032 | —- | C] (Microsoft Corporation)
iissync.exe -> %SystemRoot%\System32\dllcache\iissync.exe -> [2009/04/25 17:43:38 | 00,006,656 | —- | C] (Microsoft Corporation)
iismui.dll -> %SystemRoot%\System32\dllcache\iismui.dll -> [2009/04/25 17:43:38 | 00,003,584 | —- | C] (Microsoft Corporation)
iische51.dll -> %SystemRoot%\System32\dllcache\iische51.dll -> [2009/04/25 17:43:37 | 00,145,408 | —- | C] (Microsoft Corporation)
iisclex4.dll -> %SystemRoot%\System32\dllcache\iisclex4.dll -> [2009/04/25 17:43:37 | 00,060,928 | —- | C] (Microsoft Corporation)
iisadmin.dll -> %SystemRoot%\System32\dllcache\iisadmin.dll -> [2009/04/25 17:43:37 | 00,025,088 | —- | C] (Microsoft Corporation)
iiscrmap.dll -> %SystemRoot%\System32\dllcache\iiscrmap.dll -> [2009/04/25 17:43:37 | 00,019,456 | —- | C] (Microsoft Corporation)
iisfecnv.dll -> %SystemRoot%\System32\dllcache\iisfecnv.dll -> [2009/04/25 17:43:37 | 00,007,168 | —- | C] (Microsoft Corporation)
hwxkor.dll -> %SystemRoot%\System32\dllcache\hwxkor.dll -> [2009/04/25 17:43:31 | 10,129,408 | —- | C] (Microsoft Corporation)
hwxjpn.dll -> %SystemRoot%\System32\dllcache\hwxjpn.dll -> [2009/04/25 17:43:23 | 13,463,552 | —- | C] ()
hwxcht.dll -> %SystemRoot%\System32\dllcache\hwxcht.dll -> [2009/04/25 17:43:18 | 10,096,640 | —- | C] (Microsoft Corporation)
httpext.dll -> %SystemRoot%\System32\dllcache\httpext.dll -> [2009/04/25 17:43:17 | 00,268,288 | —- | C] (Microsoft Corporation)
httpod51.dll -> %SystemRoot%\System32\dllcache\httpod51.dll -> [2009/04/25 17:43:17 | 00,061,440 | —- | C] (Microsoft Corporation)
httpmb51.dll -> %SystemRoot%\System32\dllcache\httpmb51.dll -> [2009/04/25 17:43:17 | 00,008,192 | —- | C] (Microsoft Corporation)
hostmib.dll -> %SystemRoot%\System32\dllcache\hostmib.dll -> [2009/04/25 17:43:16 | 00,039,936 | —- | C] (Microsoft Corporation)
hanja.lex -> %SystemRoot%\System32\dllcache\hanja.lex -> [2009/04/25 17:43:15 | 00,108,827 | —- | C] ()
hanjadic.dll -> %SystemRoot%\System32\dllcache\hanjadic.dll -> [2009/04/25 17:43:15 | 00,036,864 | —- | C] (Microsoft Corporation)
gzip.dll -> %SystemRoot%\System32\dllcache\gzip.dll -> [2009/04/25 17:43:14 | 00,032,256 | —- | C] (Microsoft Corporation)
fxsxp32.dll -> %SystemRoot%\System32\dllcache\fxsxp32.dll -> [2009/04/25 17:43:13 | 00,400,384 | —- | C] (Microsoft Corporation)
fxswzrd.dll -> %SystemRoot%\System32\dllcache\fxswzrd.dll -> [2009/04/25 17:43:13 | 00,192,512 | —- | C] (Microsoft Corporation)
fxsui.dll -> %SystemRoot%\System32\dllcache\fxsui.dll -> [2009/04/25 17:43:13 | 00,154,112 | —- | C] (Microsoft Corporation)
fxsst.dll -> %SystemRoot%\System32\dllcache\fxsst.dll -> [2009/04/25 17:43:12 | 00,562,176 | —- | C] (Microsoft Corporation)
fxstiff.dll -> %SystemRoot%\System32\dllcache\fxstiff.dll -> [2009/04/25 17:43:12 | 00,397,312 | —- | C] (Microsoft Corporation)
fxssvc.exe -> %SystemRoot%\System32\dllcache\fxssvc.exe -> [2009/04/25 17:43:12 | 00,267,776 | —- | C] (Microsoft Corporation)
fxst30.dll -> %SystemRoot%\System32\dllcache\fxst30.dll -> [2009/04/25 17:43:12 | 00,246,272 | —- | C] (Microsoft Corporation)
fxsroute.dll -> %SystemRoot%\System32\dllcache\fxsroute.dll -> [2009/04/25 17:43:12 | 00,031,744 | —- | C] (Microsoft Corporation)
fxsmon.dll -> %SystemRoot%\System32\dllcache\fxsmon.dll -> [2009/04/25 17:43:12 | 00,023,552 | —- | C] (Microsoft Corporation)
fxsext32.dll -> %SystemRoot%\System32\dllcache\fxsext32.dll -> [2009/04/25 17:43:12 | 00,023,552 | —- | C] (Microsoft Corporation)
fxssend.exe -> %SystemRoot%\System32\dllcache\fxssend.exe -> [2009/04/25 17:43:12 | 00,011,264 | —- | C] (Microsoft Corporation)
fxsperf.dll -> %SystemRoot%\System32\dllcache\fxsperf.dll -> [2009/04/25 17:43:12 | 00,008,704 | —- | C] (Microsoft Corporation)
fxsres.dll -> %SystemRoot%\System32\dllcache\fxsres.dll -> [2009/04/25 17:43:12 | 00,006,656 | —- | C] (Microsoft Corporation)
fxsapi.dll -> %SystemRoot%\System32\dllcache\fxsapi.dll -> [2009/04/25 17:43:11 | 00,452,096 | —- | C] (Microsoft Corporation)
fxscomex.dll -> %SystemRoot%\System32\dllcache\fxscomex.dll -> [2009/04/25 17:43:11 | 00,285,184 | —- | C] (Microsoft Corporation)
fxscover.exe -> %SystemRoot%\System32\dllcache\fxscover.exe -> [2009/04/25 17:43:11 | 00,229,376 | —- | C] (Microsoft Corporation)
fxsclnt.exe -> %SystemRoot%\System32\dllcache\fxsclnt.exe -> [2009/04/25 17:43:11 | 00,143,360 | —- | C] (Microsoft Corporation)
fxsclntr.dll -> %SystemRoot%\System32\dllcache\fxsclntr.dll -> [2009/04/25 17:43:11 | 00,132,608 | —- | C] (Microsoft Corporation)
fxscfgwz.dll -> %SystemRoot%\System32\dllcache\fxscfgwz.dll -> [2009/04/25 17:43:11 | 00,111,104 | —- | C] (Microsoft Corporation)
fxscom.dll -> %SystemRoot%\System32\dllcache\fxscom.dll -> [2009/04/25 17:43:11 | 00,072,192 | —- | C] (Microsoft Corporation)
fxsevent.dll -> %SystemRoot%\System32\dllcache\fxsevent.dll -> [2009/04/25 17:43:11 | 00,055,296 | —- | C] (Microsoft Corporation)
fxsdrv.dll -> %SystemRoot%\System32\dllcache\fxsdrv.dll -> [2009/04/25 17:43:11 | 00,027,136 | —- | C] (Microsoft Corporation)
ftpsv251.dll -> %SystemRoot%\System32\dllcache\ftpsv251.dll -> [2009/04/25 17:43:10 | 00,125,952 | —- | C] (Microsoft Corporation)
fpencode.dll -> %SystemRoot%\System32\dllcache\fpencode.dll -> [2009/04/25 17:43:10 | 00,094,208 | —- | C] ()
fpadmcgi.exe -> %SystemRoot%\System32\dllcache\fpadmcgi.exe -> [2009/04/25 17:43:10 | 00,024,632 | —- | C] (Microsoft Corporation)
fpadmdll.dll -> %SystemRoot%\System32\dllcache\fpadmdll.dll -> [2009/04/25 17:43:10 | 00,020,541 | —- | C] (Microsoft Corporation)
ftpctrs2.dll -> %SystemRoot%\System32\dllcache\ftpctrs2.dll -> [2009/04/25 17:43:10 | 00,007,680 | —- | C] (Microsoft Corporation)
ftpmib.dll -> %SystemRoot%\System32\dllcache\ftpmib.dll -> [2009/04/25 17:43:10 | 00,006,144 | —- | C] (Microsoft Corporation)
ftlx041e.dll -> %SystemRoot%\System32\dllcache\ftlx041e.dll -> [2009/04/25 17:43:10 | 00,006,144 | —- | C] (Microsoft Corporation)
flattemp.exe -> %SystemRoot%\System32\dllcache\flattemp.exe -> [2009/04/25 17:43:09 | 00,014,848 | —- | C] (Microsoft Corporation)
evntwin.exe -> %SystemRoot%\System32\dllcache\evntwin.exe -> [2009/04/25 17:43:08 | 00,092,160 | —- | C] (Microsoft Corporation)
EXCH_fcachdll.dll -> %SystemRoot%\System32\dllcache\EXCH_fcachdll.dll -> [2009/04/25 17:43:08 | 00,043,520 | —- | C] (Microsoft Corporation)
exstrace.dll -> %SystemRoot%\System32\dllcache\exstrace.dll -> [2009/04/25 17:43:08 | 00,014,336 | —- | C] (Microsoft Corporation)
f3ahvoas.dll -> %SystemRoot%\System32\dllcache\f3ahvoas.dll -> [2009/04/25 17:43:08 | 00,007,168 | —- | C] (Microsoft Corporation)
evntagnt.dll -> %SystemRoot%\System32\dllcache\evntagnt.dll -> [2009/04/25 17:43:07 | 00,101,888 | —- | C] (Microsoft Corporation)
esuimgd.dll -> %SystemRoot%\System32\dllcache\esuimgd.dll -> [2009/04/25 17:43:07 | 00,057,856 | —- | C] (SEIKO EPSON CORP.)
esunid.dll -> %SystemRoot%\System32\dllcache\esunid.dll -> [2009/04/25 17:43:07 | 00,045,056 | —- | C] (SEIKO EPSON CORP.)
esucmd.dll -> %SystemRoot%\System32\dllcache\esucmd.dll -> [2009/04/25 17:43:07 | 00,031,744 | —- | C] (SEIKO EPSON CORP.)
et4000.sys -> %SystemRoot%\System32\dllcache\et4000.sys -> [2009/04/25 17:43:07 | 00,025,856 | —- | C] (Microsoft Corporation)
evntcmd.exe -> %SystemRoot%\System32\dllcache\evntcmd.exe -> [2009/04/25 17:43:07 | 00,024,064 | —- | C] (Microsoft Corporation)
dayi.ime -> %SystemRoot%\System32\dllcache\dayi.ime -> [2009/04/25 17:43:02 | 00,078,848 | —- | C] (Microsoft Corporation)
davcdata.exe -> %SystemRoot%\System32\dllcache\davcdata.exe -> [2009/04/25 17:43:01 | 00,042,496 | —- | C] (Microsoft Corporation)
cplexe.exe -> %SystemRoot%\System32\dllcache\cplexe.exe -> [2009/04/25 17:43:00 | 00,057,399 | —- | C] (Microsoft Corporation)
counters.dll -> %SystemRoot%\System32\dllcache\counters.dll -> [2009/04/25 17:43:00 | 00,020,480 | —- | C] (Microsoft Corporation)
cprofile.exe -> %SystemRoot%\System32\dllcache\cprofile.exe -> [2009/04/25 17:43:00 | 00,018,944 | —- | C] (Microsoft Corporation)
convlog.exe -> %SystemRoot%\System32\dllcache\convlog.exe -> [2009/04/25 17:42:59 | 00,056,320 | —- | C] (Microsoft Corporation)
controt.dll -> %SystemRoot%\System32\dllcache\controt.dll -> [2009/04/25 17:42:59 | 00,033,792 | —- | C] (Microsoft Corporation)
compfilt.dll -> %SystemRoot%\System32\dllcache\compfilt.dll -> [2009/04/25 17:42:59 | 00,024,064 | —- | C] (Microsoft Corporation)
cintsetp.exe -> %SystemRoot%\System32\dllcache\cintsetp.exe -> [2009/04/25 17:42:58 | 00,480,256 | —- | C] (Microsoft Corporation)
cintlgnt.ime -> %SystemRoot%\System32\dllcache\cintlgnt.ime -> [2009/04/25 17:42:58 | 00,021,504 | —- | C] (Microsoft Corporation)
chtbrkr.dll -> %SystemRoot%\System32\dllcache\chtbrkr.dll -> [2009/04/25 17:42:57 | 00,838,144 | —- | C] (Microsoft Corporation)
cintime.dll -> %SystemRoot%\System32\dllcache\cintime.dll -> [2009/04/25 17:42:57 | 00,198,656 | —- | C] (Microsoft Corporation)
chtskf.dll -> %SystemRoot%\System32\dllcache\chtskf.dll -> [2009/04/25 17:42:57 | 00,173,568 | —- | C] ()
chtmbx.dll -> %SystemRoot%\System32\dllcache\chtmbx.dll -> [2009/04/25 17:42:57 | 00,097,792 | —- | C] (Microsoft Corporation)
chtskdic.dll -> %SystemRoot%\System32\dllcache\chtskdic.dll -> [2009/04/25 17:42:57 | 00,056,320 | —- | C] (Microsoft Corporation)
chsbrkr.dll -> %SystemRoot%\System32\dllcache\chsbrkr.dll -> [2009/04/25 17:42:56 | 01,677,824 | —- | C] (Microsoft Corporation)
chajei.ime -> %SystemRoot%\System32\dllcache\chajei.ime -> [2009/04/25 17:42:55 | 00,078,336 | —- | C] (Microsoft Corporation)
chgport.exe -> %SystemRoot%\System32\dllcache\chgport.exe -> [2009/04/25 17:42:55 | 00,015,872 | —- | C] (Microsoft Corporation)
chgusr.exe -> %SystemRoot%\System32\dllcache\chgusr.exe -> [2009/04/25 17:42:55 | 00,014,336 | —- | C] (Microsoft Corporation)
chglogon.exe -> %SystemRoot%\System32\dllcache\chglogon.exe -> [2009/04/25 17:42:55 | 00,013,312 | —- | C] (Microsoft Corporation)
change.exe -> %SystemRoot%\System32\dllcache\change.exe -> [2009/04/25 17:42:55 | 00,009,728 | —- | C] (Microsoft Corporation)
c_g18030.dll -> %SystemRoot%\System32\dllcache\c_g18030.dll -> [2009/04/25 17:42:53 | 00,218,112 | —- | C] (Microsoft Corporation)
c_870.nls -> %SystemRoot%\System32\dllcache\c_870.nls -> [2009/04/25 17:42:53 | 00,066,082 | —- | C] ()
cap7146.sys -> %SystemRoot%\System32\dllcache\cap7146.sys -> [2009/04/25 17:42:53 | 00,054,528 | —- | C] (Philips Semiconductors GmbH)
c_iscii.dll -> %SystemRoot%\System32\dllcache\c_iscii.dll -> [2009/04/25 17:42:53 | 00,010,752 | —- | C] (Microsoft Corporation)
c_is2022.dll -> %SystemRoot%\System32\dllcache\c_is2022.dll -> [2009/04/25 17:42:53 | 00,006,656 | —- | C] (Microsoft Corporation)
c_864.nls -> %SystemRoot%\System32\dllcache\c_864.nls -> [2009/04/25 17:42:52 | 00,066,594 | —- | C] ()
c_862.nls -> %SystemRoot%\System32\dllcache\c_862.nls -> [2009/04/25 17:42:52 | 00,066,594 | —- | C] ()
c_858.nls -> %SystemRoot%\System32\dllcache\c_858.nls -> [2009/04/25 17:42:52 | 00,066,594 | —- | C] ()
c_720.nls -> %SystemRoot%\System32\dllcache\c_720.nls -> [2009/04/25 17:42:52 | 00,066,594 | —- | C] ()
c_708.nls -> %SystemRoot%\System32\dllcache\c_708.nls -> [2009/04/25 17:42:52 | 00,066,082 | —- | C] ()
c_28596.nls -> %SystemRoot%\System32\dllcache\c_28596.nls -> [2009/04/25 17:42:52 | 00,066,082 | —- | C] ()
c_21027.nls -> %SystemRoot%\System32\dllcache\c_21027.nls -> [2009/04/25 17:42:52 | 00,066,082 | —- | C] ()
c_21025.nls -> %SystemRoot%\System32\dllcache\c_21025.nls -> [2009/04/25 17:42:52 | 00,066,082 | —- | C] ()
c_20932.nls -> %SystemRoot%\System32\dllcache\c_20932.nls -> [2009/04/25 17:42:51 | 00,180,770 | —- | C] ()
c_20949.nls -> %SystemRoot%\System32\dllcache\c_20949.nls -> [2009/04/25 17:42:51 | 00,177,698 | —- | C] ()
c_20936.nls -> %SystemRoot%\System32\dllcache\c_20936.nls -> [2009/04/25 17:42:51 | 00,173,602 | —- | C] ()
c_20924.nls -> %SystemRoot%\System32\dllcache\c_20924.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20880.nls -> %SystemRoot%\System32\dllcache\c_20880.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20871.nls -> %SystemRoot%\System32\dllcache\c_20871.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20838.nls -> %SystemRoot%\System32\dllcache\c_20838.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20833.nls -> %SystemRoot%\System32\dllcache\c_20833.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20424.nls -> %SystemRoot%\System32\dllcache\c_20424.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20423.nls -> %SystemRoot%\System32\dllcache\c_20423.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20420.nls -> %SystemRoot%\System32\dllcache\c_20420.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20297.nls -> %SystemRoot%\System32\dllcache\c_20297.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20290.nls -> %SystemRoot%\System32\dllcache\c_20290.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20285.nls -> %SystemRoot%\System32\dllcache\c_20285.nls -> [2009/04/25 17:42:51 | 00,066,082 | —- | C] ()
c_20005.nls -> %SystemRoot%\System32\dllcache\c_20005.nls -> [2009/04/25 17:42:50 | 00,187,938 | —- | C] ()
c_20003.nls -> %SystemRoot%\System32\dllcache\c_20003.nls -> [2009/04/25 17:42:50 | 00,185,378 | —- | C] ()
c_20004.nls -> %SystemRoot%\System32\dllcache\c_20004.nls -> [2009/04/25 17:42:50 | 00,180,258 | —- | C] ()
c_20284.nls -> %SystemRoot%\System32\dllcache\c_20284.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20280.nls -> %SystemRoot%\System32\dllcache\c_20280.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20278.nls -> %SystemRoot%\System32\dllcache\c_20278.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20277.nls -> %SystemRoot%\System32\dllcache\c_20277.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20273.nls -> %SystemRoot%\System32\dllcache\c_20273.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20269.nls -> %SystemRoot%\System32\dllcache\c_20269.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20108.nls -> %SystemRoot%\System32\dllcache\c_20108.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20107.nls -> %SystemRoot%\System32\dllcache\c_20107.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20106.nls -> %SystemRoot%\System32\dllcache\c_20106.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_20105.nls -> %SystemRoot%\System32\dllcache\c_20105.nls -> [2009/04/25 17:42:50 | 00,066,082 | —- | C] ()
c_1361.nls -> %SystemRoot%\System32\dllcache\c_1361.nls -> [2009/04/25 17:42:49 | 00,189,986 | —- | C] ()
c_20001.nls -> %SystemRoot%\System32\dllcache\c_20001.nls -> [2009/04/25 17:42:49 | 00,186,402 | —- | C] ()
c_20000.nls -> %SystemRoot%\System32\dllcache\c_20000.nls -> [2009/04/25 17:42:49 | 00,180,258 | —- | C] ()
c_20002.nls -> %SystemRoot%\System32\dllcache\c_20002.nls -> [2009/04/25 17:42:49 | 00,173,602 | —- | C] ()
c_1149.nls -> %SystemRoot%\System32\dllcache\c_1149.nls -> [2009/04/25 17:42:49 | 00,066,082 | —- | C] ()
c_1148.nls -> %SystemRoot%\System32\dllcache\c_1148.nls -> [2009/04/25 17:42:49 | 00,066,082 | —- | C] ()
c_1147.nls -> %SystemRoot%\System32\dllcache\c_1147.nls -> [2009/04/25 17:42:49 | 00,066,082 | —- | C] ()
c_1146.nls -> %SystemRoot%\System32\dllcache\c_1146.nls -> [2009/04/25 17:42:49 | 00,066,082 | —- | C] ()
c_10008.nls -> %SystemRoot%\System32\dllcache\c_10008.nls -> [2009/04/25 17:42:48 | 00,173,602 | —- | C] ()
c_1145.nls -> %SystemRoot%\System32\dllcache\c_1145.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_1144.nls -> %SystemRoot%\System32\dllcache\c_1144.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_1143.nls -> %SystemRoot%\System32\dllcache\c_1143.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_1142.nls -> %SystemRoot%\System32\dllcache\c_1142.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_1141.nls -> %SystemRoot%\System32\dllcache\c_1141.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_1140.nls -> %SystemRoot%\System32\dllcache\c_1140.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_1047.nls -> %SystemRoot%\System32\dllcache\c_1047.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_10021.nls -> %SystemRoot%\System32\dllcache\c_10021.nls -> [2009/04/25 17:42:48 | 00,066,082 | —- | C] ()
c_10002.nls -> %SystemRoot%\System32\dllcache\c_10002.nls -> [2009/04/25 17:42:47 | 00,195,618 | —- | C] ()
c_10003.nls -> %SystemRoot%\System32\dllcache\c_10003.nls -> [2009/04/25 17:42:47 | 00,177,698 | —- | C] ()
c_10001.nls -> %SystemRoot%\System32\dllcache\c_10001.nls -> [2009/04/25 17:42:47 | 00,162,850 | —- | C] ()
c_10005.nls -> %SystemRoot%\System32\dllcache\c_10005.nls -> [2009/04/25 17:42:47 | 00,066,082 | —- | C] ()
c_10004.nls -> %SystemRoot%\System32\dllcache\c_10004.nls -> [2009/04/25 17:42:47 | 00,066,082 | —- | C] ()
bopomofo.nls -> %SystemRoot%\System32\dllcache\bopomofo.nls -> [2009/04/25 17:42:46 | 00,082,172 | —- | C] ()
browscap.dll -> %SystemRoot%\System32\dllcache\browscap.dll -> [2009/04/25 17:42:46 | 00,045,568 | —- | C] (Microsoft Corporation)
big5.nls -> %SystemRoot%\System32\dllcache\big5.nls -> [2009/04/25 17:42:45 | 00,066,728 | —- | C] ()
authfilt.dll -> %SystemRoot%\System32\dllcache\authfilt.dll -> [2009/04/25 17:42:43 | 00,009,216 | —- | C] (Microsoft Corporation)
asptxn.dll -> %SystemRoot%\System32\dllcache\asptxn.dll -> [2009/04/25 17:42:35 | 00,029,184 | —- | C] (Microsoft Corporation)
aspperf.dll -> %SystemRoot%\System32\dllcache\aspperf.dll -> [2009/04/25 17:42:35 | 00,010,240 | —- | C] (Microsoft Corporation)
asp51.dll -> %SystemRoot%\System32\dllcache\asp51.dll -> [2009/04/25 17:42:34 | 00,369,664 | —- | C] (Microsoft Corporation)
aqueue.dll -> %SystemRoot%\System32\dllcache\aqueue.dll -> [2009/04/25 17:42:34 | 00,331,264 | —- | C] (Microsoft Corporation)
appconf.dll -> %SystemRoot%\System32\dllcache\appconf.dll -> [2009/04/25 17:42:34 | 00,108,544 | —- | C] (Microsoft Corporation)
EXCH_aqadmin.dll -> %SystemRoot%\System32\dllcache\EXCH_aqadmin.dll -> [2009/04/25 17:42:34 | 00,045,056 | —- | C] (Microsoft Corporation)
agt0804.dll -> %SystemRoot%\System32\dllcache\agt0804.dll -> [2009/04/25 17:42:32 | 00,019,456 | —- | C] (Microsoft Corporation)
agt0412.dll -> %SystemRoot%\System32\dllcache\agt0412.dll -> [2009/04/25 17:42:32 | 00,019,456 | —- | C] (Microsoft Corporation)
agt0411.dll -> %SystemRoot%\System32\dllcache\agt0411.dll -> [2009/04/25 17:42:32 | 00,019,456 | —- | C] (Microsoft Corporation)
agt040d.dll -> %SystemRoot%\System32\dllcache\agt040d.dll -> [2009/04/25 17:42:32 | 00,019,456 | —- | C] (Microsoft Corporation)
agt0404.dll -> %SystemRoot%\System32\dllcache\agt0404.dll -> [2009/04/25 17:42:32 | 00,019,456 | —- | C] (Microsoft Corporation)
agt0401.dll -> %SystemRoot%\System32\dllcache\agt0401.dll -> [2009/04/25 17:42:32 | 00,019,456 | —- | C] (Microsoft Corporation)
adrot.dll -> %SystemRoot%\System32\dllcache\adrot.dll -> [2009/04/25 17:42:26 | 00,049,664 | —- | C] (Microsoft Corporation)
admexs.dll -> %SystemRoot%\System32\dllcache\admexs.dll -> [2009/04/25 17:42:26 | 00,029,696 | —- | C] (Microsoft Corporation)
admxprox.dll -> %SystemRoot%\System32\dllcache\admxprox.dll -> [2009/04/25 17:42:26 | 00,006,144 | —- | C] (Microsoft Corporation)
EXCH_adsiisex.dll -> %SystemRoot%\System32\dllcache\EXCH_adsiisex.dll -> [2009/04/25 17:42:26 | 00,005,632 | —- | C] (Microsoft Corporation)
wamregps.dll -> %SystemRoot%\System32\dllcache\wamregps.dll -> [2009/04/25 17:42:23 | 00,007,168 | —- | C] (Microsoft Corporation)
tcptest.exe -> %SystemRoot%\System32\dllcache\tcptest.exe -> [2009/04/25 17:42:22 | 00,032,827 | —- | C] (Microsoft Corporation)
tcptsat.dll -> %SystemRoot%\System32\dllcache\tcptsat.dll -> [2009/04/25 17:42:22 | 00,016,384 | —- | C] (Microsoft Corporation)
staxmem.dll -> %SystemRoot%\System32\dllcache\staxmem.dll -> [2009/04/25 17:42:22 | 00,008,192 | —- | C] (Microsoft Corporation)
shtml.exe -> %SystemRoot%\System32\dllcache\shtml.exe -> [2009/04/25 17:42:21 | 00,016,437 | —- | C] (Microsoft Corporation)
shtml.dll -> %SystemRoot%\System32\dllcache\shtml.dll -> [2009/04/25 17:42:20 | 00,020,536 | —- | C] (Microsoft Corporation)
logui.ocx -> %SystemRoot%\System32\dllcache\logui.ocx -> [2009/04/25 17:42:17 | 00,076,800 | —- | C] (Microsoft Corporation)
isatq.dll -> %SystemRoot%\System32\dllcache\isatq.dll -> [2009/04/25 17:42:17 | 00,068,608 | —- | C] (Microsoft Corporation)
inetmgr.dll -> %SystemRoot%\System32\dllcache\inetmgr.dll -> [2009/04/25 17:42:16 | 00,829,440 | —- | C] (Microsoft Corporation)
iisui.dll -> %SystemRoot%\System32\dllcache\iisui.dll -> [2009/04/25 17:42:16 | 00,169,984 | —- | C] (Microsoft Corporation)
inetsloc.dll -> %SystemRoot%\System32\dllcache\inetsloc.dll -> [2009/04/25 17:42:16 | 00,019,968 | —- | C] (Microsoft Corporation)
infoadmn.dll -> %SystemRoot%\System32\dllcache\infoadmn.dll -> [2009/04/25 17:42:16 | 00,013,312 | —- | C] (Microsoft Corporation)
inetmgr.exe -> %SystemRoot%\System32\dllcache\inetmgr.exe -> [2009/04/25 17:42:16 | 00,007,680 | —- | C] (Microsoft Corporation)
iisrtl.dll -> %SystemRoot%\System32\dllcache\iisrtl.dll -> [2009/04/25 17:42:15 | 00,133,632 | —- | C] (Microsoft Corporation)
iisext51.dll -> %SystemRoot%\System32\dllcache\iisext51.dll -> [2009/04/25 17:42:15 | 00,068,608 | —- | C] (Microsoft Corporation)
iismap.dll -> %SystemRoot%\System32\dllcache\iismap.dll -> [2009/04/25 17:42:15 | 00,064,512 | —- | C] (Microsoft Corporation)
iisrstas.exe -> %SystemRoot%\System32\dllcache\iisrstas.exe -> [2009/04/25 17:42:15 | 00,030,720 | —- | C] (Microsoft Corporation)
fpremadm.exe -> %SystemRoot%\System32\dllcache\fpremadm.exe -> [2009/04/25 17:42:15 | 00,020,538 | —- | C] (Microsoft Corporation)
iisreset.exe -> %SystemRoot%\System32\dllcache\iisreset.exe -> [2009/04/25 17:42:15 | 00,014,336 | —- | C] (Microsoft Corporation)
ftpsapi2.dll -> %SystemRoot%\System32\dllcache\ftpsapi2.dll -> [2009/04/25 17:42:15 | 00,006,144 | —- | C] (Microsoft Corporation)
iisrstap.dll -> %SystemRoot%\System32\dllcache\iisrstap.dll -> [2009/04/25 17:42:15 | 00,005,632 | —- | C] (Microsoft Corporation)
fp4awel.dll -> %SystemRoot%\System32\dllcache\fp4awel.dll -> [2009/04/25 17:42:14 | 00,876,653 | —- | C] (Microsoft Corporation)
fpmmc.dll -> %SystemRoot%\System32\dllcache\fpmmc.dll -> [2009/04/25 17:42:14 | 00,598,071 | —- | C] (Microsoft Corporation)
fpmmcsat.dll -> %SystemRoot%\System32\dllcache\fpmmcsat.dll -> [2009/04/25 17:42:14 | 00,208,896 | —- | C] (Microsoft Corporation)
fpcount.exe -> %SystemRoot%\System32\dllcache\fpcount.exe -> [2009/04/25 17:42:14 | 00,188,494 | —- | C] (Microsoft Corporation)
fp98swin.exe -> %SystemRoot%\System32\dllcache\fp98swin.exe -> [2009/04/25 17:42:14 | 00,109,328 | —- | C] (Microsoft Corporation)
fpexedll.dll -> %SystemRoot%\System32\dllcache\fpexedll.dll -> [2009/04/25 17:42:14 | 00,020,541 | —- | C] (Microsoft Corporation)
fp98sadm.exe -> %SystemRoot%\System32\dllcache\fp98sadm.exe -> [2009/04/25 17:42:14 | 00,014,608 | —- | C] (Microsoft Corporation)
fp4amsft.dll -> %SystemRoot%\System32\dllcache\fp4amsft.dll -> [2009/04/25 17:42:13 | 00,184,435 | —- | C] (Microsoft Corporation)
fp4apws.dll -> %SystemRoot%\System32\dllcache\fp4apws.dll -> [2009/04/25 17:42:13 | 00,147,513 | —- | C] (Microsoft Corporation)
fp4atxt.dll -> %SystemRoot%\System32\dllcache\fp4atxt.dll -> [2009/04/25 17:42:13 | 00,102,509 | —- | C] (Microsoft Corporation)
fp4anscp.dll -> %SystemRoot%\System32\dllcache\fp4anscp.dll -> [2009/04/25 17:42:13 | 00,082,035 | —- | C] (Microsoft Corporation)
fp4awebs.dll -> %SystemRoot%\System32\dllcache\fp4awebs.dll -> [2009/04/25 17:42:13 | 00,049,212 | —- | C] (Microsoft Corporation)
fp4areg.dll -> %SystemRoot%\System32\dllcache\fp4areg.dll -> [2009/04/25 17:42:13 | 00,049,210 | —- | C] (Microsoft Corporation)
fp4avnb.dll -> %SystemRoot%\System32\dllcache\fp4avnb.dll -> [2009/04/25 17:42:13 | 00,041,020 | —- | C] (Microsoft Corporation)
fp4avss.dll -> %SystemRoot%\System32\dllcache\fp4avss.dll -> [2009/04/25 17:42:13 | 00,032,826 | —- | C] (Microsoft Corporation)
certwiz.ocx -> %SystemRoot%\System32\dllcache\certwiz.ocx -> [2009/04/25 17:42:12 | 00,275,968 | —- | C] (Microsoft Corporation)
cfgwiz.exe -> %SystemRoot%\System32\dllcache\cfgwiz.exe -> [2009/04/25 17:42:12 | 00,188,480 | —- | C] (Microsoft Corporation)
cnfgprts.ocx -> %SystemRoot%\System32\dllcache\cnfgprts.ocx -> [2009/04/25 17:42:12 | 00,076,288 | —- | C] (Microsoft Corporation)
coadmin.dll -> %SystemRoot%\System32\dllcache\coadmin.dll -> [2009/04/25 17:42:12 | 00,046,592 | —- | C] (Microsoft Corporation)
adsiis51.dll -> %SystemRoot%\System32\dllcache\adsiis51.dll -> [2009/04/25 17:42:11 | 00,290,816 | —- | C] (Microsoft Corporation)
certmap.ocx -> %SystemRoot%\System32\dllcache\certmap.ocx -> [2009/04/25 17:42:11 | 00,094,720 | —- | C] (Microsoft Corporation)
admwprox.dll -> %SystemRoot%\System32\dllcache\admwprox.dll -> [2009/04/25 17:42:11 | 00,043,520 | —- | C] (Microsoft Corporation)
author.dll -> %SystemRoot%\System32\dllcache\author.dll -> [2009/04/25 17:42:11 | 00,020,540 | —- | C] (Microsoft Corporation)
author.exe -> %SystemRoot%\System32\dllcache\author.exe -> [2009/04/25 17:42:11 | 00,016,439 | —- | C] (Microsoft Corporation)
admin.exe -> %SystemRoot%\System32\dllcache\admin.exe -> [2009/04/25 17:42:10 | 00,016,439 | —- | C] (Microsoft Corporation)
admin.dll -> %SystemRoot%\System32\dllcache\admin.dll -> [2009/04/25 17:42:09 | 00,020,540 | —- | C] (Microsoft Corporation)
logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [2009/04/25 17:40:45 | 00,000,488 | RH– | C] ()
wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | C] ()
WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | C] ()
sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | C] ()
nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | C] ()
ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | C] ()
irmon.dll -> %SystemRoot%\System32\irmon.dll -> [2009/04/25 17:38:50 | 00,027,136 | —- | C] (Microsoft Corporation)
irftp.exe -> %SystemRoot%\System32\irftp.exe -> [2009/04/25 17:38:49 | 00,152,576 | —- | C] (Microsoft Corporation)
irda.sys -> %SystemRoot%\System32\drivers\irda.sys -> [2009/04/25 17:38:49 | 00,087,424 | —- | C] (Microsoft Corporation)
wshirda.dll -> %SystemRoot%\System32\wshirda.dll -> [2009/04/25 17:38:49 | 00,008,192 | —- | C] (Microsoft Corporation)
rasirda.sys -> %SystemRoot%\System32\drivers\rasirda.sys -> [2009/04/25 17:32:49 | 00,019,584 | —- | C] (Microsoft Corporation)
spxcoins.dll -> %SystemRoot%\System32\spxcoins.dll -> [2009/04/25 17:26:55 | 00,024,661 | —- | C] (Perle Systems Ltd.)
spxcoins.dll -> %SystemRoot%\System32\dllcache\spxcoins.dll -> [2009/04/25 17:26:55 | 00,024,661 | —- | C] (Perle Systems Ltd.)
irclass.dll -> %SystemRoot%\System32\irclass.dll -> [2009/04/25 17:26:55 | 00,013,312 | —- | C] (Microsoft Corporation)
irclass.dll -> %SystemRoot%\System32\dllcache\irclass.dll -> [2009/04/25 17:26:55 | 00,013,312 | —- | C] (Microsoft Corporation)
isignup.exe -> %SystemRoot%\System32\dllcache\isignup.exe -> [2009/04/25 16:54:55 | 00,016,384 | —- | C] (Microsoft Corporation)
My Pictures -> %AllUsersProfile%\Documents\My Pictures -> [2009/04/25 16:54:01 | 00,000,000 | R–D | C]
My Videos -> %AllUsersProfile%\Documents\My Videos -> [2009/04/25 16:52:42 | 00,000,000 | R–D | C]
NTPRINT.CAT -> %SystemRoot%\System32\dllcache\NTPRINT.CAT -> [2009/04/25 16:31:55 | 01,086,058 | —- | C] ()
NT5IIS.CAT -> %SystemRoot%\System32\dllcache\NT5IIS.CAT -> [2009/04/25 16:31:55 | 00,797,189 | —- | C] ()
MAPIMIG.CAT -> %SystemRoot%\System32\dllcache\MAPIMIG.CAT -> [2009/04/25 16:31:55 | 00,399,645 | —- | C] ()
netfx.cat -> %SystemRoot%\System32\dllcache\netfx.cat -> [2009/04/25 16:31:55 | 00,141,702 | —- | C] ()
tabletpc.cat -> %SystemRoot%\System32\dllcache\tabletpc.cat -> [2009/04/25 16:31:55 | 00,110,116 | —- | C] ()
MW770.CAT -> %SystemRoot%\System32\dllcache\MW770.CAT -> [2009/04/25 16:31:55 | 00,037,484 | —- | C] ()
mediactr.cat -> %SystemRoot%\System32\dllcache\mediactr.cat -> [2009/04/25 16:31:55 | 00,031,965 | —- | C] ()
FP4.CAT -> %SystemRoot%\System32\dllcache\FP4.CAT -> [2009/04/25 16:31:55 | 00,031,281 | —- | C] ()
msn7.cat -> %SystemRoot%\System32\dllcache\msn7.cat -> [2009/04/25 16:31:55 | 00,024,209 | —- | C] ()
IMS.CAT -> %SystemRoot%\System32\dllcache\IMS.CAT -> [2009/04/25 16:31:55 | 00,013,753 | —- | C] ()
HPCRDP.CAT -> %SystemRoot%\System32\dllcache\HPCRDP.CAT -> [2009/04/25 16:31:55 | 00,013,472 | —- | C] ()
msn9.cat -> %SystemRoot%\System32\dllcache\msn9.cat -> [2009/04/25 16:31:55 | 00,011,651 | —- | C] ()
MSMSGS.CAT -> %SystemRoot%\System32\dllcache\MSMSGS.CAT -> [2009/04/25 16:31:55 | 00,009,581 | —- | C] ()
IASNT4.CAT -> %SystemRoot%\System32\dllcache\IASNT4.CAT -> [2009/04/25 16:31:55 | 00,008,574 | —- | C] ()
OEMBIOS.CAT -> %SystemRoot%\System32\dllcache\OEMBIOS.CAT -> [2009/04/25 16:31:55 | 00,007,382 | —- | C] ()
MSTSWEB.CAT -> %SystemRoot%\System32\dllcache\MSTSWEB.CAT -> [2009/04/25 16:31:55 | 00,007,245 | —- | C] ()
NT5.CAT -> %SystemRoot%\System32\dllcache\NT5.CAT -> [2009/04/25 16:31:54 | 02,025,425 | —- | C] ()
NT5INF.CAT -> %SystemRoot%\System32\dllcache\NT5INF.CAT -> [2009/04/25 16:31:54 | 00,508,255 | —- | C] ()
ie7 -> %SystemRoot%\ie7 -> [2009/04/25 15:16:59 | 00,000,000 | -H-D | C]
hal.dll -> %SystemRoot%\hal.dll -> [2009/04/25 14:39:37 | 00,105,472 | —- | C] (Microsoft Corporation)
hal.dll -> %UserProfile%\My Documents\hal.dll -> [2009/04/25 14:39:13 | 00,105,472 | —- | C] (Microsoft Corporation)
nsreg.dat -> %SystemRoot%\nsreg.dat -> [2009/04/25 13:12:33 | 00,000,000 | —- | C] ()
Boot.bak -> %SystemDrive%\Boot.bak -> [2009/04/25 11:39:24 | 00,000,211 | —- | C] ()
lsdelete.exe -> %SystemRoot%\System32\lsdelete.exe -> [2009/04/25 10:22:44 | 00,015,688 | —- | C] ()
Ad-Aware Update (Weekly).job -> %SystemRoot%\tasks\Ad-Aware Update (Weekly).job -> [2009/04/25 09:56:57 | 00,000,472 | —- | C] ()
Lbd.sys -> %SystemRoot%\System32\drivers\Lbd.sys -> [2009/04/25 09:56:50 | 00,064,160 | —- | C] (Lavasoft AB)
{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} -> %AllUsersProfile%\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} -> [2009/04/25 09:55:00 | 00,000,000 | -H-D | C]
Ad-Aware.lnk -> %AllUsersProfile%\Desktop\Ad-Aware.lnk -> [2009/04/25 09:54:58 | 00,000,925 | —- | C] ()
IECompatCache -> %UserProfile%\IECompatCache -> [2009/04/25 01:35:21 | 00,000,000 | -HSD | C]
PrivacIE -> %UserProfile%\PrivacIE -> [2009/04/25 01:16:14 | 00,000,000 | -HSD | C]
IETldCache -> %UserProfile%\IETldCache -> [2009/04/25 01:09:01 | 00,000,000 | -HSD | C]
HP -> %AppData%\HP -> [2009/04/24 23:48:34 | 00,000,000 | —D | C]
Boris TTK Renderer.dll -> %SystemRoot%\System32\Boris TTK Renderer.dll -> [2009/04/24 23:34:25 | 01,122,304 | —- | C] ()
Boris TTK Scene.dll -> %SystemRoot%\System32\Boris TTK Scene.dll -> [2009/04/24 23:34:25 | 00,813,056 | —- | C] ()
Boris TTK Utilities.dll -> %SystemRoot%\System32\Boris TTK Utilities.dll -> [2009/04/24 23:34:25 | 00,208,896 | —- | C] ()
Boris TTK Render Node.dll -> %SystemRoot%\System32\Boris TTK Render Node.dll -> [2009/04/24 23:34:25 | 00,094,720 | —- | C] ()
ScriptTO6.0.ini -> %SystemRoot%\ScriptTO6.0.ini -> [2009/04/24 23:34:22 | 00,000,000 | —- | C] ()
ScriptLD6.0.ini -> %SystemRoot%\ScriptLD6.0.ini -> [2009/04/24 23:34:22 | 00,000,000 | —- | C] ()
ScriptET6.0.ini -> %SystemRoot%\ScriptET6.0.ini -> [2009/04/24 23:34:22 | 00,000,000 | —- | C] ()
ScriptES6.0.ini -> %SystemRoot%\ScriptES6.0.ini -> [2009/04/24 23:34:22 | 00,000,000 | —- | C] ()
BCC6_AE_16Bit.dll -> %SystemRoot%\System32\BCC6_AE_16Bit.dll -> [2009/04/24 23:34:17 | 18,619,392 | —- | C] ()
BCC6_AE_8Bit.dll -> %SystemRoot%\System32\BCC6_AE_8Bit.dll -> [2009/04/24 23:33:59 | 18,531,840 | —- | C] ()
Boris Continuum Complete SwishPan 6.0 -> %ProgramFiles%\Boris Continuum Complete SwishPan 6.0 -> [2009/04/24 23:22:18 | 00,000,000 | —D | C]
BorisFX BCC6.ini -> %SystemRoot%\BorisFX BCC6.ini -> [2009/04/24 23:22:18 | 00,000,000 | —- | C] ()
Boris FX, Inc -> %ProgramFiles%\Boris FX, Inc -> [2009/04/24 23:22:15 | 00,000,000 | —D | C]
MoTemp -> %SystemDrive%\MoTemp -> [2009/04/24 21:30:28 | 00,000,000 | —D | C]
FLEXnet -> %AllUsersProfile%\Application Data\FLEXnet -> [2009/04/24 21:28:34 | 00,000,000 | —D | C]
Adobe Media Player -> %ProgramFiles%\Adobe Media Player -> [2009/04/24 21:19:20 | 00,000,000 | —D | C]
Adobe AIR -> %CommonProgramFiles%\Adobe AIR -> [2009/04/24 21:17:47 | 00,000,000 | —D | C]
Macrovision Shared -> %CommonProgramFiles%\Macrovision Shared -> [2009/04/24 21:15:22 | 00,000,000 | —D | C]
UNICCodec -> %ProgramFiles%\UNICCodec -> [2009/04/24 21:02:12 | 00,000,000 | —D | C]
codecsetup.exe -> %UserProfile%\Local Settings\Application Data\codecsetup.exe -> [2009/04/24 21:02:07 | 00,103,750 | —- | C] ()
cp_setup_assist.exe -> %UserProfile%\Local Settings\Application Data\cp_setup_assist.exe -> [2009/04/24 21:02:06 | 00,024,576 | —- | C] ()
Hewlett-Packard -> %AllUsersProfile%\Application Data\Hewlett-Packard -> [2009/04/24 11:17:22 | 00,000,000 | —D | C]
NewBlue -> %ProgramFiles%\NewBlue -> [2009/04/23 19:32:34 | 00,000,000 | —D | C]
tivaprobe.exe -> %UserProfile%\Desktop\tivaprobe.exe -> [2009/04/20 17:44:14 | 07,658,289 | —- | C] (PolyArtis)
Office Genuine Advantage -> %AllUsersProfile%\Application Data\Office Genuine Advantage -> [2009/04/18 14:16:29 | 00,000,000 | —D | C]
WPA_Kill.exe -> %SystemRoot%\System32\WPA_Kill.exe -> [2009/04/18 14:11:44 | 00,005,120 | —- | C] ()
WPA_Kill.bat -> %SystemRoot%\System32\WPA_Kill.bat -> [2009/04/18 14:11:44 | 00,001,046 | —- | C] ()
HP Solution Center.lnk -> %AllUsersProfile%\Desktop\HP Solution Center.lnk -> [2009/04/17 21:18:39 | 00,001,042 | —- | C] ()
HP -> %AllUsersProfile%\Application Data\HP -> [2009/04/17 21:17:48 | 00,000,000 | —D | C]
HP -> %CommonProgramFiles%\HP -> [2009/04/17 21:17:47 | 00,000,000 | —D | C]
Hewlett-Packard -> %CommonProgramFiles%\Hewlett-Packard -> [2009/04/17 21:17:11 | 00,000,000 | —D | C]
Hewlett-Packard -> %ProgramFiles%\Hewlett-Packard -> [2009/04/17 21:17:09 | 00,000,000 | —D | C]
zhenghe2 -> %SystemRoot%\zhenghe2 -> [2009/04/17 21:13:36 | 00,000,000 | —D | C]
HP -> %ProgramFiles%\HP -> [2009/04/17 21:13:11 | 00,000,000 | —D | C]
hpwins16.dat -> %SystemRoot%\hpwins16.dat -> [2009/04/17 21:10:51 | 00,144,549 | —- | C] ()
Tracing -> %UserProfile%\Tracing -> [2009/04/17 18:02:42 | 00,000,000 | —D | C]
xpsp4res.dll -> %SystemRoot%\System32\xpsp4res.dll -> [2009/04/16 23:11:21 | 00,002,560 | —- | C] (Microsoft Corporation)
Microsoft -> %ProgramFiles%\Microsoft -> [2009/04/12 12:04:36 | 00,000,000 | —D | C]
microsoft -> %AllUsersProfile%\Documents\microsoft -> [2009/04/12 12:04:17 | 00,000,000 | —D | C]
Windows Live SkyDrive -> %ProgramFiles%\Windows Live SkyDrive -> [2009/04/12 12:04:11 | 00,000,000 | —D | C]
Windows Live -> %CommonProgramFiles%\Windows Live -> [2009/04/12 11:58:02 | 00,000,000 | —D | C]
spider.sav -> %UserProfile%\My Documents\spider.sav -> [2009/04/08 20:16:45 | 00,000,372 | —- | C] ()
Incomplete -> %UserProfile%\Incomplete -> [2009/04/02 12:42:46 | 00,000,000 | —D | C]
GSpot.exe.lnk -> %UserProfile%\Desktop\GSpot.exe.lnk -> [2009/03/30 11:30:36 | 00,000,728 | —- | C] ()
GSpot270a -> %ProgramFiles%\GSpot270a -> [2009/03/30 11:29:31 | 00,000,000 | —D | C]
IrfanView -> %ProgramFiles%\IrfanView -> [2009/03/29 22:55:24 | 00,000,000 | —D | C]
Image2PDF.dat -> %SystemRoot%\System32\Image2PDF.dat -> [2009/03/29 22:07:56 | 00,001,024 | —- | C] ()
Image2PDF OCR v3.2 -> %ProgramFiles%\Image2PDF OCR v3.2 -> [2009/03/29 22:07:21 | 00,000,000 | —D | C]
All Office Converter Pro -> %ProgramFiles%\All Office Converter Pro -> [2009/03/29 21:41:12 | 00,000,000 | —D | C]
TVAnts -> %ProgramFiles%\TVAnts -> [2009/03/28 17:12:23 | 00,000,000 | —D | C]
mngui.INI -> %SystemRoot%\mngui.INI -> [2008/06/21 20:01:02 | 00,000,000 | —- | C] ()
MRT.INI -> %SystemRoot%\System32\MRT.INI -> [2008/05/16 10:11:23 | 00,000,118 | —- | C] ()
qtmlClient.dll -> %SystemRoot%\System32\qtmlClient.dll -> [2008/01/23 12:53:38 | 00,237,568 | R— | C] ()
ODBC.INI -> %SystemRoot%\ODBC.INI -> [2007/12/01 18:17:13 | 00,000,376 | —- | C] ()
haspdos.sys -> %SystemRoot%\System32\haspdos.sys -> [2007/11/30 18:39:17 | 00,000,383 | —- | C] ()
KGyGaAvL.sys -> %SystemRoot%\System32\KGyGaAvL.sys -> [2007/11/30 18:38:37 | 00,002,098 | -HS- | C] ()
cdplayer.ini -> %SystemRoot%\cdplayer.ini -> [2007/11/30 18:06:41 | 00,000,034 | —- | C] ()
NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [2007/11/30 00:33:06 | 00,000,069 | —- | C] ()
canopus.ini -> %SystemRoot%\canopus.ini -> [2007/11/27 15:12:18 | 00,000,000 | —- | C] ()
pavedius4db.dll -> %SystemRoot%\System32\pavedius4db.dll -> [2007/11/21 12:42:51 | 00,057,344 | —- | C] ()
pavedius.dll -> %SystemRoot%\System32\pavedius.dll -> [2007/11/21 12:42:51 | 00,057,344 | —- | C] ()
PIC.dll -> %SystemRoot%\PIC.dll -> [2007/11/21 12:05:52 | 00,532,544 | —- | C] ()
HKNTDLL.dll -> %SystemRoot%\HKNTDLL.dll -> [2007/11/21 12:05:52 | 00,024,576 | —- | C] ()
M2000Twn.ini -> %SystemRoot%\M2000Twn.ini -> [2007/11/21 11:41:36 | 00,015,190 | —- | C] ()
idxcntrs.ini -> %SystemRoot%\System32\idxcntrs.ini -> [2007/09/27 11:51:02 | 00,020,698 | —- | C] ()
gsrvctr.ini -> %SystemRoot%\System32\gsrvctr.ini -> [2007/09/27 11:48:48 | 00,030,628 | —- | C] ()
gthrctr.ini -> %SystemRoot%\System32\gthrctr.ini -> [2007/09/27 11:48:28 | 00,031,698 | —- | C] ()
n558.sys -> %SystemRoot%\System32\drivers\n558.sys -> [2007/08/15 08:27:18 | 00,009,600 | —- | C] ()
ieencode.dll -> %SystemRoot%\System32\ieencode.dll -> [2007/07/27 13:00:00 | 00,081,920 | —- | C] ()
secdrv.sys -> %SystemRoot%\System32\drivers\secdrv.sys -> [2007/07/27 13:00:00 | 00,027,440 | —- | C] ()
win.ini -> %SystemRoot%\win.ini -> [2007/07/27 13:00:00 | 00,000,669 | —- | C] ()
system.ini -> %SystemRoot%\system.ini -> [2007/07/27 13:00:00 | 00,000,227 | —- | C] ()
nvwdmcpl.dll -> %SystemRoot%\System32\nvwdmcpl.dll -> [2006/11/13 04:12:56 | 01,662,976 | —- | C] ()
nvwimg.dll -> %SystemRoot%\System32\nvwimg.dll -> [2006/11/13 04:12:56 | 01,019,904 | —- | C] ()
nvshell.dll -> %SystemRoot%\System32\nvshell.dll -> [2006/11/13 04:12:56 | 00,466,944 | —- | C] ()
nview.dll -> %SystemRoot%\System32\nview.dll -> [2006/11/13 04:12:54 | 01,470,464 | —- | C] ()
nvapi.dll -> %SystemRoot%\System32\nvapi.dll -> [2006/11/13 04:12:54 | 00,098,304 | —- | C] ()
BTNetFilter.sys -> %SystemRoot%\System32\drivers\BTNetFilter.sys -> [2006/04/14 10:14:12 | 00,014,312 | —- | C] ()
qt-dx331.dll -> %SystemRoot%\System32\qt-dx331.dll -> [2005/08/12 22:57:09 | 03,596,288 | —- | C] ()
vbtenum.sys -> %SystemRoot%\System32\drivers\vbtenum.sys -> [2005/07/30 08:21:32 | 00,011,988 | —- | C] ()
[Files/Folders - Modified Within 30 Days]
SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [2009/04/26 18:50:45 | 00,000,006 | -H– | M] ()
system.ini -> %SystemRoot%\system.ini -> [2009/04/26 18:49:44 | 00,000,227 | —- | M] ()
ntuser.dat -> %UserProfile%\ntuser.dat -> [2009/04/26 18:34:10 | 04,980,736 | —- | M] ()
incavi.avm -> %SystemRoot%\System32\drivers\Avg\incavi.avm -> [2009/04/26 18:28:54 | 35,437,904 | —- | M] ()
miniavi.avg -> %SystemRoot%\System32\drivers\Avg\miniavi.avg -> [2009/04/26 18:28:43 | 00,434,673 | —- | M] ()
microavi.avg -> %SystemRoot%\System32\drivers\Avg\microavi.avg -> [2009/04/26 18:28:43 | 00,032,111 | —- | M] ()
qmgr1.dat -> %AllUsersProfile%\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [2009/04/26 18:27:16 | 00,004,617 | —- | M] ()
qmgr0.dat -> %AllUsersProfile%\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [2009/04/26 18:27:16 | 00,004,232 | —- | M] ()
AVG Free 8.5.lnk -> %AllUsersProfile%\Desktop\AVG Free 8.5.lnk -> [2009/04/26 18:26:06 | 00,001,565 | —- | M] ()
wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [2009/04/26 18:07:56 | 00,013,646 | —- | M] ()
Perflib_Perfdata_158.dat -> %AllUsersProfile%\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Perflib_Perfdata_158.dat -> [2009/04/26 17:44:41 | 00,016,384 | —- | M] ()
bootstat.dat -> %SystemRoot%\bootstat.dat -> [2009/04/26 17:44:25 | 00,002,048 | –S- | M] ()
ntuser.ini -> %UserProfile%\ntuser.ini -> [2009/04/26 17:43:06 | 00,000,178 | -HS- | M] ()
boot.ini -> %SystemDrive%\boot.ini -> [2009/04/26 17:36:22 | 00,000,281 | RHS- | M] ()
cf1.exe -> %UserProfile%\Desktop\cf1.exe -> [2009/04/26 17:34:04 | 03,006,230 | R— | M] ()
NvwsApps.xml -> %SystemRoot%\System32\NvwsApps.xml -> [2009/04/26 17:20:30 | 00,000,000 | —- | M] ()
NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [2009/04/26 17:05:17 | 00,000,069 | —- | M] ()
avgrsstx.dll -> %SystemRoot%\System32\avgrsstx.dll -> [2009/04/26 00:25:44 | 00,010,520 | —- | M] (AVG Technologies CZ, s.r.o.)
avgtdix.sys -> %SystemRoot%\System32\drivers\avgtdix.sys -> [2009/04/26 00:25:43 | 00,108,552 | —- | M] (AVG Technologies CZ, s.r.o.)
avgldx86.sys -> %SystemRoot%\System32\drivers\avgldx86.sys -> [2009/04/26 00:25:42 | 00,325,640 | —- | M] (AVG Technologies CZ, s.r.o.)
avgmfx86.sys -> %SystemRoot%\System32\drivers\avgmfx86.sys -> [2009/04/26 00:25:41 | 00,027,656 | —- | M] (AVG Technologies CZ, s.r.o.)
avi7.avg -> %SystemRoot%\System32\drivers\Avg\avi7.avg -> [2009/04/26 00:25:37 | 06,061,540 | —- | M] ()
nvapps.xml -> %SystemRoot%\System32\nvapps.xml -> [2009/04/25 21:59:29 | 00,051,048 | —- | M] ()
PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [2009/04/25 17:51:05 | 00,551,928 | —- | M] ()
perfh009.dat -> %SystemRoot%\System32\perfh009.dat -> [2009/04/25 17:51:05 | 00,463,236 | —- | M] ()
perfc009.dat -> %SystemRoot%\System32\perfc009.dat -> [2009/04/25 17:51:05 | 00,078,764 | —- | M] ()
FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [2009/04/25 17:50:29 | 02,166,800 | —- | M] ()
$winnt$.inf -> %SystemRoot%\System32\$winnt$.inf -> [2009/04/25 17:46:01 | 00,000,287 | —- | M] ()
WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [2009/04/25 17:41:39 | 00,316,640 | —- | M] ()
nscompat.tlb -> %SystemRoot%\System32\nscompat.tlb -> [2009/04/25 17:41:38 | 00,023,392 | —- | M] ()
amcompat.tlb -> %SystemRoot%\System32\amcompat.tlb -> [2009/04/25 17:41:38 | 00,016,832 | —- | M] ()
ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [2009/04/25 17:41:29 | 00,004,161 | —- | M] ()
WindowsLogon.manifest -> %SystemRoot%\System32\WindowsLogon.manifest -> [2009/04/25 17:40:45 | 00,000,488 | RH– | M] ()
logonui.exe.manifest -> %SystemRoot%\System32\logonui.exe.manifest -> [2009/04/25 17:40:45 | 00,000,488 | RH– | M] ()
wuaucpl.cpl.manifest -> %SystemRoot%\System32\wuaucpl.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | M] ()
WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | M] ()
sapi.cpl.manifest -> %SystemRoot%\System32\sapi.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | M] ()
nwc.cpl.manifest -> %SystemRoot%\System32\nwc.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | M] ()
ncpa.cpl.manifest -> %SystemRoot%\System32\ncpa.cpl.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | M] ()
cdplayer.exe.manifest -> %SystemRoot%\System32\cdplayer.exe.manifest -> [2009/04/25 17:40:41 | 00,000,749 | RH– | M] ()
win.ini -> %SystemRoot%\win.ini -> [2009/04/25 17:40:30 | 00,000,669 | —- | M] ()
emptyregdb.dat -> %SystemRoot%\System32\emptyregdb.dat -> [2009/04/25 17:39:46 | 00,023,376 | —- | M] ()
Boot.bak -> %SystemDrive%\Boot.bak -> [2009/04/25 17:38:35 | 00,000,211 | —- | M] ()
desktop.ini -> %AllUsersProfile%\Documents\desktop.ini -> [2009/04/25 17:26:48 | 00,000,062 | -HS- | M] ()
desktop.ini -> %AllUsersProfile%\Application Data\desktop.ini -> [2009/04/25 17:26:48 | 00,000,062 | -HS- | M] ()
setupapi.old -> %SystemRoot%\setupapi.old -> [2009/04/25 16:55:43 | 00,417,582 | —- | M] ()
imsins.BAK -> %SystemRoot%\imsins.BAK -> [2009/04/25 16:54:05 | 00,004,345 | —- | M] ()
desktop.ini -> %UserProfile%\My Documents\desktop.ini -> [2009/04/25 15:19:58 | 00,000,080 | -HS- | M] ()
vFind.exe -> %SystemRoot%\vFind.exe -> [2009/04/25 13:59:03 | 00,111,104 | —- | M] ()
nsreg.dat -> %SystemRoot%\nsreg.dat -> [2009/04/25 13:12:33 | 00,000,000 | —- | M] ()
Ad-Aware Update (Weekly).job -> %SystemRoot%\tasks\Ad-Aware Update (Weekly).job -> [2009/04/25 09:56:57 | 00,000,472 | —- | M] ()
lsdelete.exe -> %SystemRoot%\System32\lsdelete.exe -> [2009/04/25 09:56:47 | 00,015,688 | —- | M] ()
Lbd.sys -> %SystemRoot%\System32\drivers\Lbd.sys -> [2009/04/25 09:56:36 | 00,064,160 | —- | M] (Lavasoft AB)
Ad-Aware.lnk -> %AllUsersProfile%\Desktop\Ad-Aware.lnk -> [2009/04/25 09:54:58 | 00,000,925 | —- | M] ()
GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [2009/04/24 21:28:39 | 00,091,736 | —- | M] ()
codecsetup.exe -> %UserProfile%\Local Settings\Application Data\codecsetup.exe -> [2009/04/24 21:02:09 | 00,103,750 | —- | M] ()
cp_setup_assist.exe -> %UserProfile%\Local Settings\Application Data\cp_setup_assist.exe -> [2009/04/24 21:02:07 | 00,024,576 | —- | M] ()
KGyGaAvL.sys -> %SystemRoot%\System32\KGyGaAvL.sys -> [2009/04/20 18:33:51 | 00,002,098 | -HS- | M] ()
hpwins16.dat -> %SystemRoot%\hpwins16.dat -> [2009/04/17 21:29:07 | 00,144,549 | —- | M] ()
HP Solution Center.lnk -> %AllUsersProfile%\Desktop\HP Solution Center.lnk -> [2009/04/17 21:18:39 | 00,001,042 | —- | M] ()
DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> %UserProfile%\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [2009/04/11 19:11:50 | 00,039,424 | —- | M] ()
spider.sav -> %UserProfile%\My Documents\spider.sav -> [2009/04/08 20:16:45 | 00,000,372 | —- | M] ()
MRT.exe -> %SystemRoot%\System32\MRT.exe -> [2009/04/06 15:57:24 | 24,921,544 | —- | M] (Microsoft Corporation)
GSpot.exe.lnk -> %UserProfile%\Desktop\GSpot.exe.lnk -> [2009/03/30 11:30:36 | 00,000,728 | —- | M] ()
Image2PDF.dat -> %SystemRoot%\System32\Image2PDF.dat -> [2009/03/29 22:07:56 | 00,001,024 | —- | M] ()
data.dat -> %AllUsersProfile%\Application Data\Microsoft\Office\Data\data.dat -> [2007/12/01 18:17:50 | 00,001,372 | —- | M] ()
[Alternate Data Streams]
@Alternate Data Stream - 0 bytes -> %ProgramFiles%\Elantech\ktp.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
@Alternate Data Stream - 88 bytes -> %ProgramFiles%\Elantech\ktp.exe:SummaryInformation
< End of report >
Not happy that GMER failed to run 
Now a final sweep for waifs and strays - re-enable all security software