sickofvirus
Topic Starter
Hi,
Re-posting the issue with logs as suggested.
I have a HP windows XP media center edition. Everything was going great….and then the system froze. Did a hard reboot and then the problem started, now I can't keep the PC running for more than 10min(some times it just hangs right after booting).
In safe mode it seems to run a little longer but eventually it'll just hang.
When I say the PC hangs this is the behavior - The PC boots..I can launch any application…after a while the application will stop responding, my mouse works, key board works(at least the caps/num key lights toggle), Alt+tab key works and I can switch between applications but the app itself will refuse to respond. If I continue to press the keys or move the mouse around after a few minutes everything will just stop and the internal speaker starts beeping continuously…then I just have to do a hard shutdown of the box
I was able to run spybot once and it didn't detect any virus. I am not sure what really is happening.
I recently added 2GB of ram and a new personal media drive hard disk. Now I've pulled out the disk still see the same problem. To make sure the RAM is in good condition I ran PC doctor utility and everything seemed fine.
This is really driving me crazy…any help will be much appreciated.
This is the logs of the malware bytes -
Malwarebytes' Anti-Malware 1.44
Database version: 3574
Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702
1/16/2010 1:30:45 AM
mbam-log-2010-01-16 (01-30-45).txt
Scan type: Quick Scan
Objects scanned: 139691
Time elapsed: 6 minute(s), 9 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
————————————————–
Couldn't get the gmer scan logs as the system hanged couple of times and was finally able to get it to complete the scan but coldn't get the logs to save.
————————-
DDS logs
DDS (Ver_09-06-26.01) - NTFSx86
Run by [removed] at 1:31:47.50 on Sat 01/16/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3070.2440 [GMT -6:00]
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\system32\msiexec.exe
c:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q405&bd=pavilion&pf=desktop&parm1=seconduser
uSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q405&bd=pavilion&pf=desktop&parm1=seconduser
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q405&bd=pavilion&pf=desktop&parm1=seconduser
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q405&bd=pavilion&pf=desktop&parm1=seconduser
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q405&bd=pavilion&pf=desktop&parm1=seconduser
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q405&bd=pavilion&pf=desktop&parm1=seconduser
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
mSearchAssistant = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q405&bd=pavilion&pf=desktop&parm1=seconduser
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
TB: {D0943516-5076-4020-A3B5-AEFAF26AB263} - No File
TB: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [AlwaysReady Power Message APP] ARPWRMSG.EXE
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime
mRun: [HPBootOp] "c:\program files\hewlett-packard\hp boot optimizer\HPBootOp.exe" /run
mRun: [LXCYCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCYtime.dll,_RunDLLEntry@16
mRun: [Acrobat Assistant 7.0] "c:\program files\adobe\acrobat 7.0\distillr\Acrotray.exe"
mRun: []
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\aticat~1.lnk - c:\program files\ati technologies\ati.ace\CLI.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\autoru~1\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
IE: &Google Search - c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IE: Backward Links - c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll/cmcache.html
IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office10\EXCEL.EXE/3000
IE: Similar Pages - c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate into English - c:\program files\google\GoogleToolbar1.dll/cmtrans.html
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0\bin\npjpi150.dll
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\hp_adm~1\applic~1\mozilla\firefox\profiles\52szjr72.default\
FF - plugin: c:\documents and settings\hp_administrator\local settings\application data\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre1.5.0\bin\NPJava11.dll
FF - plugin: c:\program files\java\jre1.5.0\bin\NPJava12.dll
FF - plugin: c:\program files\java\jre1.5.0\bin\NPJava13.dll
FF - plugin: c:\program files\java\jre1.5.0\bin\NPJava14.dll
FF - plugin: c:\program files\java\jre1.5.0\bin\NPJava32.dll
FF - plugin: c:\program files\java\jre1.5.0\bin\NPJPI150.dll
FF - plugin: c:\program files\java\jre1.5.0\bin\NPOJI610.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
—- FIREFOX POLICIES —-
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
============= SERVICES / DRIVERS ===============
R1 AvgArCln;Avg Anti-Rootkit Clean Driver;c:\windows\system32\drivers\AvgArCln.sys [2009-12-14 3968]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-5-26 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-5-26 72944]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R3 Eacfilt;Eacfilt Miniport;c:\windows\system32\drivers\eacfilt.sys [2008-11-20 9049]
R3 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service –> c:\windows\system32\lxcycoms.exe -service [?]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-5-26 7408]
S2 IPSECEXT;Nortel Extranet Access Protocol;c:\windows\system32\drivers\ipsecw2k.sys [2008-11-20 115008]
S3 ExtranetAccess;Contivity VPN Service;c:\program files\motorola mvp\Extranet_serv.exe [2008-11-20 626688]
=============== Created Last 30 ================
2010-01-16 00:48 38,224 a——- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-16 00:48 19,160 a——- c:\windows\system32\drivers\mbam.sys
2010-01-15 23:28 –d—– c:\windows\system32\wbem\Repository
2010-01-13 21:32 –d—– c:\docume~1\hp_adm~1\applic~1\Malwarebytes
2010-01-13 21:32 –d—– c:\program files\Malwarebytes' Anti-Malware
2010-01-13 21:32 –d—– c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-01-11 22:29 –d—– c:\program files\SpeedFan
2010-01-11 22:28 –d—– c:\program files\Hmonitor
2010-01-04 00:07 –d—– C:\temp
2010-01-03 10:23 129,520 ——– c:\windows\system32\pxafs.dll
2010-01-03 10:23 9,200 ——– c:\windows\system32\drivers\cdralw2k.sys
2010-01-03 10:23 9,072 ——– c:\windows\system32\drivers\cdr4_xp.sys
2010-01-03 00:59 –d—– c:\program files\common files\Adobe Systems Shared
2010-01-03 00:21 85 a——- c:\windows\system32\Run_XXClone.BAT
2010-01-02 18:55 –d—– c:\windows\xxclone.arc
2009-12-28 23:43 –d—– c:\docume~1\hp_adm~1\applic~1\Home Designer Pro 9.0 Trial Version
2009-12-28 23:41 –d—– c:\program files\Chief Architect
2009-12-28 23:41 –d—– c:\docume~1\alluse~1\applic~1\Home Designer Pro 9.0 Trial Version
2009-12-28 23:41 –d—– c:\documents and settings\hp_administrator\eee
2009-12-28 23:38 –d—– c:\program files\home plan software
2009-12-28 23:34 –d—– c:\program files\DesignWorkshop Lite
2009-12-28 12:22 233,472 a——- c:\windows\system32\lxcyinst.dll
2009-12-28 12:22 14,432 a——- c:\windows\system32\LexFiles.ulf
2009-12-28 12:10 9,600 a——- c:\windows\system32\drivers\hidusb.sys
2009-12-28 12:10 9,600 a——- c:\windows\system32\dllcache\hidusb.sys
2009-12-28 12:10 25,856 a——- c:\windows\system32\drivers\usbprint.sys
2009-12-28 12:10 25,856 a——- c:\windows\system32\dllcache\usbprint.sys
2009-12-28 12:09 87,040 a——- c:\windows\system32\wiafbdrv.dll
2009-12-28 12:09 87,040 a——- c:\windows\system32\dllcache\wiafbdrv.dll
2009-12-28 12:09 15,104 a——- c:\windows\system32\drivers\usbscan.sys
2009-12-28 12:09 15,104 a——- c:\windows\system32\dllcache\usbscan.sys
2009-12-28 12:08 31,616 a——- c:\windows\system32\drivers\usbccgp.sys
2009-12-28 12:08 31,616 a——- c:\windows\system32\dllcache\usbccgp.sys
2009-12-25 14:56 131 a——- C:\aw.dat
2009-12-25 14:16 –d—– c:\docume~1\hp_adm~1\applic~1\Safer Networking
2009-12-25 14:13 –d—– C:\WatchNow
2009-12-25 11:01 –d—– c:\program files\Open Workbench
2009-12-25 01:37 117,760 ——– c:\windows\system32\prntvpt.dll
2009-12-25 01:37 89,088 ——– c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-12-25 01:37 1,676,288 ——– c:\windows\system32\xpssvcs.dll
2009-12-25 01:37 1,676,288 ——– c:\windows\system32\dllcache\xpssvcs.dll
2009-12-25 01:37 597,504 ——– c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-12-25 01:37 575,488 ——– c:\windows\system32\xpsshhdr.dll
2009-12-25 01:37 575,488 ——– c:\windows\system32\dllcache\xpsshhdr.dll
2009-12-25 00:42 114,048 a——- c:\windows\system32\drivers\snapman.sys
2009-12-25 00:32 –d—– c:\program files\PartitionStar
2009-12-25 00:31 4,608 a——- c:\windows\system32\W95inf32.dll
2009-12-25 00:31 2,272 a——- c:\windows\system32\W95inf16.dll
2009-12-24 23:03 –d—– c:\program files\XXCLONE
2009-12-24 19:37 12,800 ——– c:\windows\system32\dllcache\xpshims.dll
2009-12-24 19:37 11,069,952 ——– c:\windows\system32\dllcache\ieframe.dll
2009-12-24 19:37 1,985,536 ——– c:\windows\system32\dllcache\iertutil.dll
2009-12-24 19:37 594,432 ——– c:\windows\system32\dllcache\msfeeds.dll
2009-12-24 19:37 246,272 ——– c:\windows\system32\dllcache\ieproxy.dll
2009-12-24 19:37 55,296 ——– c:\windows\system32\dllcache\msfeedsbs.dll
2009-12-24 19:36 92,160 ——– c:\windows\system32\dllcache\iecompat.dll
2009-12-24 10:05 14 a——- c:\windows\system32\poin2.ini
2009-12-24 00:34 –d—– c:\program files\CCleaner
2009-12-24 00:10 –d—– c:\docume~1\hp_adm~1\applic~1\TK8 Software
2009-12-24 00:06 –d-hr– C:\AHCache
2009-12-24 00:06 –d—– c:\docume~1\alluse~1\applic~1\ALM
2009-12-23 23:48 –d—– c:\docume~1\hp_adm~1\applic~1\Macromedia(2)
2009-12-23 20:11 –d—– c:\docume~1\hp_adm~1\applic~1\URSoft
2009-12-17 20:37 –d—– c:\docume~1\hp_adm~1\applic~1\HP SureStore Application
==================== Find3M ====================
2009-12-14 00:18 1,909 a–shr– c:\windows\system32\drivers\103C_HP_CPC_ED842AA-ABA M7250N_YC_0Pavi_QMXK538_E54NAemMPC1_48_ILITHIUM_SASUSTek Computer INC._V1.04_B3.07_T050829_WXP2_L409_M3071_J250_7Intel_8Pentium D_92.8_#051222_N808627DC_Z11C1048C_G10025B60.MRK
2009-11-21 10:36 470,528 a——- c:\windows\system32\dllcache\aclayers.dll
2009-11-21 10:36 470,528 a——- c:\windows\apppatch\aclayers.dll
2009-10-29 01:45 916,480 a——- c:\windows\system32\wininet.dll
2009-10-29 01:45 916,480 ——– c:\windows\system32\dllcache\wininet.dll
2009-10-29 01:45 5,940,736 ——– c:\windows\system32\dllcache\mshtml.dll
2009-10-29 01:45 1,208,832 ——– c:\windows\system32\dllcache\urlmon.dll
2009-10-29 01:45 206,848 ——– c:\windows\system32\dllcache\occache.dll
2009-10-29 01:45 25,600 ——– c:\windows\system32\dllcache\jsproxy.dll
2009-10-29 01:45 184,320 ——– c:\windows\system32\dllcache\iepeers.dll
2009-10-29 01:45 387,584 ——– c:\windows\system32\dllcache\iedkcs32.dll
2009-10-28 23:48 1,506,304 a——- c:\windows\system32\dllcache\shdocvw.dll
2009-10-28 23:48 662,016 a——- c:\windows\system32\wininet(3).dll
2009-10-28 23:48 624,640 a——- c:\windows\system32\urlmon(3).dll
2009-10-28 23:48 55,808 a——- c:\windows\system32\dllcache\extmgr.dll
2009-10-28 23:48 1,023,488 a——- c:\windows\system32\dllcache\browseui.dll
2009-10-28 23:48 151,040 a——- c:\windows\system32\dllcache\cdfview.dll
2009-10-28 08:40 173,056 ——– c:\windows\system32\dllcache\ie4uinit.exe
2009-10-27 05:06 18,432 a——- c:\windows\system32\dllcache\iedw.exe
2009-10-21 00:00 75,776 a——- c:\windows\system32\strmfilt.dll
2009-10-21 00:00 75,776 a——- c:\windows\system32\dllcache\strmfilt.dll
2009-10-21 00:00 25,088 a——- c:\windows\system32\httpapi.dll
2009-10-21 00:00 25,088 a——- c:\windows\system32\dllcache\httpapi.dll
2009-10-20 08:58 263,552 ——– c:\windows\system32\dllcache\http.sys
============= FINISH: 1:32:08.23 ===============
-Jim
