What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Apparent "*.exe" infection

8 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
One of my external HDs seems to have a problem. When I double-click on its icon I get a message stating "Windows cannot find X.exe. Make sure you typed the name correctly…yadda…yadda…yadda…" where "X" is the username associated with my windows log in. I must use the open or explore feature to view contents of the drive. It only happens with this particular ext. HD. It appears more or less benign except I noticed that when I have a folder open the file icons sometimes shift/shuffle around like a file is being added/deleted in the folder even though it is not. Thanks.
Post #2
Hello.

Seems like you are having a flash-drive infection on there.

Let's do the following and help clear it up.

Download and Run FlashDisinfector

  • Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
  • The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
  • Wait until it has finished scanning and then exit the program.
  • Reboot your computer when done.
Note: Flash_Disinfector will create a hidden file named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.

Download and run DDS

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
    • DDS.scr
    • DDS.pif
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results soon.
  • Follow the instructions that pop up for posting the results and then click Ok.
  • The black and message box window shall then disappear.
  • Please save both log files on your desktop and post the DDS.txt and zip up and attach Attach.txt as instructed.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

Download and Run GMER

We will use GMER to scan for rootkits. This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop. Unzip/extract the file to its own folder. (Click here for information on how to do this if not sure. Win 2000 users click here.


  • Close any and all open programs, as this process may crash your computer.
  • Double click [external image: Posted Image] or [external image: Posted Image] on your desktop.
  • When you have done this, close all running programs.
    There is a small chance this application may crash your computer so save any work you have open.
  • Double-click on Gmer.exe to start the program. Right-click and select Run As Administrator… if you are using Vista
  • Allow the gmer.sys driver to load if asked.

    If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system… Click NO.

  • In the right panel, you will see several boxes that have been checked. Please UNCHECK the following:
    • Sections
    • Registry
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show all (Don't miss this one!)
  • Click on [external image: Posted Image] and wait for the scan to finish.
  • If you see a rootkit warning window, click OK.
  • Push [external image: Posted Image] and save the logfile to your desktop.
  • Copy and Paste the contents of that file in your next post.

If GMER doesn't work in Normal Mode try running it in Safe Mode

Note: Do Not run any program while GMER is running
*Note*: Rootkit scans often produce false positives. Do NOT take any actions on "<— ROOKIT" entries

It's getting late here, so I'll checkup on the results tomorrow.
Post #4
DDS (Ver_09-12-01.01) - NTFSx86
Run by [removed] at 23:32:33.05 on 21-Feb-10
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.167 [GMT -5:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
C:\Documents and Settings\BADDOG\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = https://webmail.us.army.mil/
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\progra~1\mcafee\viruss~1\scriptsn.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [AGRSMMSG] AGRSMMSG.exe
mRun: [Apoint] c:\program files\apoint2k\Apoint.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: internet
Trusted Zone: mcafee.com
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: igfxcui - igfxsrvc.dll

============= SERVICES / DRIVERS ===============

R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-5-13 214664]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2010-2-18 93320]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2010-2-18 359952]
R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2010-2-18 144704]
R3 CONAN;CONAN;c:\windows\system32\drivers\o2mmb.sys [2010-2-17 244367]
R3 mbxfilt;mbxfilt;c:\windows\system32\drivers\mbxfilt.sys [2010-2-17 5441]
R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2010-2-18 606736]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-2-18 79816]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2010-2-18 35272]
R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2010-2-18 40552]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2010-2-18 34248]

=============== Created Last 30 ================

2010-02-22 04:26:48 0 d-sha-r- C:\autorun.inf
2010-02-22 03:15:54 376 —-a-w- c:\windows\ODBC.INI
2010-02-22 03:15:45 17920 —-a-w- c:\windows\system32\mdimon.dll
2010-02-22 03:14:10 0 d—–w- c:\program files\Microsoft ActiveSync
2010-02-22 03:12:54 0 d—–w- c:\windows\SHELLNEW
2010-02-22 02:12:20 0 d—–w- c:\docume~1\alluse~1\applic~1\Citrix
2010-02-22 02:03:51 0 d—–w- c:\program files\Citrix
2010-02-22 01:56:27 0 d—–w- c:\docume~1\baddog\applic~1\McAfee
2010-02-21 18:28:14 0 d—–w- c:\windows\system32\scripting
2010-02-21 18:28:11 0 d—–w- c:\windows\l2schemas
2010-02-21 18:28:09 0 d—–w- c:\windows\system32\en
2010-02-21 18:28:09 0 d—–w- c:\windows\system32\bits
2010-02-21 18:17:12 0 d—–w- c:\windows\network diagnostic
2010-02-21 17:10:52 1148 -c—-w- c:\windows\system32\dllcache\snd.htm
2010-02-21 17:09:59 375519 -c—-w- c:\windows\system32\dllcache\nuskin.wmv
2010-02-21 17:08:59 397312 ——w- c:\windows\system32\mmcex.dll
2010-02-21 17:07:49 144384 ——w- c:\windows\system32\drivers\hdaudbus.sys
2010-02-21 17:06:59 760 -c—-w- c:\windows\system32\dllcache\cloapph.gif
2010-02-21 17:06:59 717 -c—-w- c:\windows\system32\dllcache\cloapp.gif
2010-02-21 17:06:56 159232 -c—-w- c:\windows\system32\dllcache\cewmdm.dll
2010-02-21 17:06:51 999 -c—-w- c:\windows\system32\dllcache\bktrh.gif
2010-02-21 17:06:51 7168 ——w- c:\windows\system32\bitsprx4.dll
2010-02-21 17:06:51 286720 -c—-w- c:\windows\system32\dllcache\blackbox.dll
2010-02-21 17:06:49 233472 ——w- c:\windows\system32\azroles.dll
2010-02-21 17:06:37 8192 -c—-w- c:\windows\system32\dllcache\asferror.dll
2010-02-21 17:06:24 136192 ——w- c:\windows\system32\aaclient.dll
2010-02-21 16:04:54 2560 ——w- c:\windows\system32\xpsp4res.dll
2010-02-21 16:04:52 1206508 -c—-w- c:\windows\system32\dllcache\sysmain.sdb
2010-02-21 16:04:51 215552 -c—-w- c:\windows\system32\dllcache\wordpad.exe
2010-02-21 16:03:06 153088 -c—-w- c:\windows\system32\dllcache\triedit.dll
2010-02-21 16:01:47 455424 -c—-w- c:\windows\system32\dllcache\mrxsmb.sys
2010-02-21 16:01:09 272128 -c—-w- c:\windows\system32\dllcache\bthport.sys
2010-02-21 15:59:01 81920 -c—-w- c:\windows\system32\dllcache\fontsub.dll
2010-02-21 15:59:01 119808 -c—-w- c:\windows\system32\dllcache\t2embed.dll
2010-02-21 15:58:45 203136 -c—-w- c:\windows\system32\dllcache\rmcast.sys
2010-02-21 15:57:43 331776 -c—-w- c:\windows\system32\dllcache\msadce.dll
2010-02-21 15:51:52 128512 -c—-w- c:\windows\system32\dllcache\dhtmled.ocx
2010-02-21 15:42:46 655872 -c—-w- c:\windows\system32\dllcache\mstscax.dll
2010-02-21 15:41:39 337408 -c—-w- c:\windows\system32\dllcache\netapi32.dll
2010-02-21 15:38:09 353792 -c—-w- c:\windows\system32\dllcache\srv.sys
2010-02-21 15:37:01 471552 -c—-w- c:\windows\system32\dllcache\aclayers.dll
2010-02-21 15:30:02 1315328 -c—-w- c:\windows\system32\dllcache\msoe.dll
2010-02-21 15:28:27 691712 -c—-w- c:\windows\system32\dllcache\inetcomm.dll
2010-02-21 15:26:38 1172480 -c—-w- c:\windows\system32\dllcache\msxml3.dll
2010-02-21 06:25:19 0 d—–w- c:\windows\system32\PreInstall
2010-02-21 06:22:13 0 d–h–w- c:\windows\$hf_mig$
2010-02-21 06:20:09 284160 -c—-w- c:\windows\system32\dllcache\pdh.dll
2010-02-21 06:20:07 401408 -c—-w- c:\windows\system32\dllcache\rpcss.dll
2010-02-21 06:20:07 110592 -c—-w- c:\windows\system32\dllcache\services.exe
2010-02-21 06:20:06 473600 -c—-w- c:\windows\system32\dllcache\fastprox.dll
2010-02-21 06:20:05 227840 -c—-w- c:\windows\system32\dllcache\wmiprvse.exe
2010-02-21 06:20:03 453120 -c—-w- c:\windows\system32\dllcache\wmiprvsd.dll
2010-02-21 06:20:01 730112 -c—-w- c:\windows\system32\dllcache\lsasrv.dll
2010-02-21 06:19:59 617472 -c—-w- c:\windows\system32\dllcache\advapi32.dll
2010-02-21 06:19:58 714752 -c—-w- c:\windows\system32\dllcache\ntdll.dll
2010-02-21 06:19:53 2145280 -c—-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-02-21 06:19:41 2189184 -c—-w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-02-21 06:19:32 2023936 -c—-w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-02-21 06:16:08 138496 -c—-w- c:\windows\system32\dllcache\afd.sys
2010-02-21 06:16:05 361600 -c—-w- c:\windows\system32\dllcache\tcpip.sys
2010-02-21 06:16:04 225856 -c—-w- c:\windows\system32\dllcache\tcpip6.sys
2010-02-21 06:16:01 245248 -c—-w- c:\windows\system32\dllcache\mswsock.dll
2010-02-21 06:16:01 147968 -c—-w- c:\windows\system32\dllcache\dnsapi.dll
2010-02-19 11:32:17 5945 —-a-w- c:\windows\system32\Config.MPF
2010-02-19 04:01:43 79816 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
2010-02-19 04:01:43 40552 —-a-w- c:\windows\system32\drivers\mfesmfk.sys
2010-02-19 04:01:43 35272 —-a-w- c:\windows\system32\drivers\mfebopk.sys
2010-02-19 04:01:38 120136 —-a-w- c:\windows\system32\drivers\Mpfp.sys
2010-02-19 04:01:06 0 d—–w- c:\program files\common files\McAfee
2010-02-19 04:01:04 0 d—–w- c:\program files\McAfee.com
2010-02-19 04:00:53 0 d—–w- c:\program files\McAfee
2010-02-19 03:59:53 34248 —-a-w- c:\windows\system32\drivers\mferkdk.sys
2010-02-19 03:08:59 0 d—–w- c:\program files\CCleaner
2010-02-19 03:00:05 0 d—–w- c:\windows\system32\Adobe
2010-02-17 05:22:05 0 d—–w- c:\program files\Apoint2K
2010-02-17 05:19:43 155648 —-a-w- c:\windows\system32\igfxres.dll
2010-02-17 05:18:08 8050 —-a-w- c:\windows\system32\drivers\o2mmb.cat
2010-02-17 05:18:08 5441 —-a-w- c:\windows\system32\drivers\mbxfilt.sys
2010-02-17 05:18:08 2548 —-a-w- c:\windows\system32\drivers\o2mmb.inf
2010-02-17 05:18:08 244367 —-a-w- c:\windows\system32\drivers\o2mmb.sys
2010-02-17 05:17:21 46976 —-a-w- c:\windows\system32\drivers\R8139n51.sys
2010-02-17 05:17:20 0 d—–w- c:\windows\OPTIONS
2010-02-17 05:11:50 69632 —-a-w- c:\windows\system32\oemdspif.dll
2010-02-16 02:36:44 995328 —-a-w- c:\windows\system32\W20MLRes.dll
2010-02-16 02:36:44 674560 —-a-w- c:\windows\system32\drivers\w70n51.sys
2010-02-16 02:36:44 430147 —-a-w- c:\windows\system32\W20NCPA.dll
2010-02-16 02:36:43 0 d—–w- C:\Drivers
2010-02-16 02:27:17 0 d—–w- c:\program files\VideoLAN
2010-02-14 20:11:21 0 d—–w- c:\program files\Nokia
2010-02-14 19:56:57 0 d—–w- c:\windows\system32\SoftwareDistribution
2010-02-14 19:56:01 0 d—–w- c:\windows\system32\wbem\AutoRecover
2010-02-14 09:11:45 0 d-s—w- c:\windows\system32\Microsoft
2010-02-14 08:56:48 316640 —-a-w- c:\windows\WMSysPr9.prx
2010-02-14 08:52:42 0 d—–w- c:\windows\ServicePackFiles
2010-02-14 08:50:12 2897920 ——w- c:\windows\system32\xpsp2res.dll
2010-02-14 08:48:28 19528 —-a-w- c:\windows\002244_.tmp
2010-02-14 08:48:24 0 d—–w- c:\windows\system32\ReinstallBackups
2010-02-14 08:48:10 26488 —-a-w- c:\windows\system32\spupdsvc.exe
2010-02-14 08:45:43 0 d—–w- c:\windows\EHome
2010-02-14 08:35:13 8192 —-a-w- c:\windows\REGLOCS.OLD
2010-02-14 07:26:05 0 d-sh–w- c:\documents and settings\all users\DRM
2010-02-14 07:24:10 0 d—–w- c:\program files\common files\MSSoap
2010-02-14 07:22:31 0 d–h–w- c:\program files\WindowsUpdate
2010-02-14 07:22:31 0 d—–w- c:\program files\Online Services
2010-02-14 07:22:22 0 d—–w- c:\program files\Messenger
2010-02-14 07:22:15 0 d—–w- c:\program files\MSN Gaming Zone
2010-02-14 07:21:26 0 d—–w- c:\program files\Windows NT
2010-02-13 22:18:28 0 d—–w- c:\program files\common files\ODBC
2010-02-13 22:18:23 0 d—–w- c:\program files\common files\SpeechEngines
2010-02-13 22:17:53 0 d—–r- c:\documents and settings\all users\Documents

==================== Find3M ====================
Post #5
Not zipped as I don't have any compression software: UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-12-01.01) Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 14-Feb-10 02:30:56 System Uptime: 21-Feb-10 22:00:21 (1 hours ago) Motherboard: FUJITSU | | FJNB16E Processor: Intel® Pentium® M processor 900MHz | Onboard | 899/400mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 68 GiB total, 60.985 GiB free. D: is FIXED (NTFS) - 6 GiB total, 3.174 GiB free. E: is CDROM (CDFS) F: is FIXED (FAT32) - 466 GiB total, 231.044 GiB free. G: is Removable ==== Disabled Device Manager Items ============= Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Device ID: ACPI\FUJ02B1\4&32D50C2&0 Manufacturer: Name: PNP Device ID: ACPI\FUJ02B1\4&32D50C2&0 Service: ==== System Restore Points =================== RP1: 14-Feb-10 03:37:51 - System Checkpoint RP2: 14-Feb-10 03:48:30 - Installed Windows XP Service Pack 2. RP3: 17-Feb-10 00:17:20 - Installed Realtek RTL8139/810x Fast Ethernet NIC Driver Setup RP4: 17-Feb-10 00:17:54 - Installed O2Micro SmartCardBus MultiMediaBay Windows Driver Inst RP5: 18-Feb-10 18:55:45 - System Checkpoint RP6: 18-Feb-10 21:57:00 - Installed Adobe Reader 9.3. RP7: 19-Feb-10 22:41:36 - System Checkpoint RP8: 21-Feb-10 01:21:12 - Software Distribution Service 3.0 RP9: 21-Feb-10 12:15:25 - Software Distribution Service 3.0 RP10: 21-Feb-10 12:45:04 - Software Distribution Service 3.0 RP11: 21-Feb-10 20:49:36 - Software Distribution Service 3.0 RP12: 21-Feb-10 22:06:21 - Installed Microsoft Office Professional Edition 2003 ==== Installed Programs ====================== Acrobat.com Adobe AIR Adobe Reader 9.3.1 Adobe Shockwave Player 11.5 Agere Systems AC'97 Modem CCleaner Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB976098-v2) Intel® Extreme Graphics Driver McAfee SecurityCenter McAfee Virtual Technician Microsoft Office Professional Edition 2003 O2Micro SmartCardBus MultiMediaBay Windows Driver Installer Realtek AC'97 Audio Realtek RTL8139/810x Fast Ethernet NIC Driver Setup Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB968816) Security Update for Windows Media Player (KB973540) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB969947) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971486) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973354) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978251) Security Update for Windows XP (KB978262) Security Update for Windows XP (KB978706) Update for Windows XP (KB955759) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB973687) Update for Windows XP (KB973815) Update for Windows XP (KB978207) VLC media player 1.0.5 WebFldrs XP Windows XP Service Pack 3 ==== Event Viewer Messages From Past Week ======== 21-Feb-10 21:21:47, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Internet Explorer 7 for Windows XP. 21-Feb-10 20:03:06, error: MRxSmb [8003] - The master browser has received a server announcement from the computer GINA-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{FBBE1157-34A3-4C95-9. The master browser is stopping or an election is being forced. 21-Feb-10 18:44:48, error: W32Time [34] - The time service has detected that the system time needs to be changed by -86387 seconds. The time service will not change the system time by more than -54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|10.71.0.105:123->207.46.197.32:123) is working properly. 21-Feb-10 14:02:46, error: Service Control Manager [7022] - The Windows Firewall/Internet Connection Sharing (ICS) service hung on starting. 21-Feb-10 12:25:13, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Genuine Advantage Notification (KB905474). 21-Feb-10 01:23:36, error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the Interface with IP address 10.71.0.105. The machine with the IP address 10.71.0.109 did not allow the name to be claimed by this machine. 21-Feb-10 01:02:21, error: NetBT [4319] - A duplicate name has been detected on the TCP network. The IP address of the machine that sent the message is in the data. Use nbtstat -n in a command window to see which name is in the Conflict state. 19-Feb-10 21:07:17, error: MRxSmb [8003] - The master browser has received a server announcement from the computer DADDY-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{FBBE1157-34A3-4C95-. The master browser is stopping or an election is being forced. 19-Feb-10 18:39:22, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0004234F07D8. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. ==== End Of File ===========================
Post #6
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-02-22 00:45:02
Windows 5.1.2600 Service Pack 3
Running: 9zj0ftde.exe; Driver: C:\DOCUME~1\BADDOG\LOCALS~1\Temp\kxrdapow.sys


—- System - GMER 1.0.15 —-

Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwCreateFile [0xEFB7278A]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwCreateProcess [0xEFB72738]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwCreateProcessEx [0xEFB7274C]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwMapViewOfSection [0xEFB727CA]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwOpenProcess [0xEFB72710]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwOpenThread [0xEFB72724]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwProtectVirtualMemory [0xEFB7279E]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwSetContextThread [0xEFB72776]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwSetInformationProcess [0xEFB72762]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwTerminateProcess [0xEFB727F9]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwUnmapViewOfSection [0xEFB727E0]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) ZwYieldExecution [0xEFB727B4]
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) NtCreateFile
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) NtMapViewOfSection
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) NtOpenProcess
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) NtOpenThread
Code \SystemRoot\system32\drivers\mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.) NtSetInformationProcess

—- Devices - GMER 1.0.15 —-

AttachedDevice \FileSystem\Ntfs \Ntfs mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)
AttachedDevice \Driver\Tcpip \Device\Ip Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice \Driver\Tcpip \Device\Tcp Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice \Driver\Tcpip \Device\Udp Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice \Driver\Tcpip \Device\RawIp Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice \FileSystem\Fastfat \Fat mfehidk.sys (Host Intrusion Detection Link Driver/McAfee, Inc.)

—- EOF - GMER 1.0.15 —-


THANKS FOR YOUR HELP
Post #7
How's your external hard-drive? Does the problem remain?

Download and run OTL

  • Download OTL by OldTimer and save it to your desktop.
  • Double click on the [external image: Posted Image] icon on your desktop. If you are using Vista, please right-click and select run as administrator
  • Click the "Scan All Users" checkbox.
  • Push the [external image: Posted Image] button.
  • It will now begin to scan, please be paitent while it scans.
  • Two reports will open once it's done.
  • Please copy and paste them in your next reply:
  • OTL.txt <– Will be opened
  • Extras.txt <– Will be minimized


Was that GMER scan ran in Normal Mode or Safe Mode?
Post #8 last edited
The problem seems to be fixed; the message no longer appears and the drive opens -> folders view. GMER ran in normal mode; no problems. Running OTL ATT
Post #9
Requested OTL results:

OTL logfile created on: 21-Feb-10 11:06:41 - Run 1
OTL by OldTimer - Version 3.1.30.1 Folder = C:\Documents and Settings\BADDOG\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: dd-MMM-yy

502.00 Mb Total Physical Memory | 180.00 Mb Available Physical Memory | 36.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.36 Gb Total Space | 60.73 Gb Free Space | 88.83% Space Free | Partition Type: NTFS
Drive D: | 6.17 Gb Total Space | 3.17 Gb Free Space | 51.47% Space Free | Partition Type: NTFS
Drive E: | 120.30 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 465.65 Gb Total Space | 231.04 Gb Free Space | 49.62% Space Free | Partition Type: FAT32
Drive G: | 1.95 Gb Total Space | 1.92 Gb Free Space | 98.36% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: LIFEBOOK
Current User Name: BADDOG
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010-02-21 11:06:32 | 000,549,376 | —- | M] (OldTimer Tools) – C:\Documents and Settings\BADDOG\Desktop\OTL.exe
PRC - [2010-02-11 12:36:12 | 001,497,704 | —- | M] (McAfee, Inc.) – c:\Program Files\McAfee\MSC\mcshell.exe
PRC - [2010-02-11 12:36:12 | 001,218,008 | —- | M] (McAfee, Inc.) – C:\Program Files\McAfee.com\Agent\mcagent.exe
PRC - [2010-02-11 12:36:12 | 000,865,832 | —- | M] (McAfee, Inc.) – C:\Program Files\McAfee\MSC\mcmscsvc.exe
PRC - [2010-01-25 09:03:04 | 000,365,072 | —- | M] (McAfee, Inc.) – C:\Program Files\McAfee\VirusScan\mcods.exe
PRC - [2009-12-22 03:57:30 | 000,349,616 | —- | M] (Adobe Systems Incorporated) – C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
PRC - [2009-12-18 08:05:43 | 000,634,648 | —- | M] (Microsoft Corporation) – C:\Program Files\Internet Explorer\iexplore.exe
PRC - [2009-12-08 14:25:28 | 000,093,320 | —- | M] (McAfee, Inc.) – C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
PRC - [2009-11-11 11:14:06 | 000,144,704 | —- | M] (McAfee, Inc.) – C:\Program Files\McAfee\VirusScan\Mcshield.exe
PRC - [2009-11-11 10:19:48 | 000,606,736 | —- | M] (McAfee, Inc.) – C:\Program Files\McAfee\VirusScan\mcsysmon.exe
PRC - [2009-10-27 11:19:46 | 000,895,696 | —- | M] (McAfee, Inc.) – C:\Program Files\McAfee\MPF\MpfSrv.exe
PRC - [2009-07-08 11:54:34 | 000,359,952 | —- | M] (McAfee, Inc.) – c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe
PRC - [2009-07-07 19:10:02 | 002,482,848 | —- | M] (McAfee, Inc.) – c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
PRC - [2008-04-13 19:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2003-02-27 01:29:26 | 000,047,104 | —- | M] (Realtek Semiconductor Corp.) – C:\WINDOWS\SOUNDMAN.EXE
PRC - [2003-01-23 11:05:06 | 000,114,688 | —- | M] (Intel Corporation) – C:\WINDOWS\system32\hkcmd.exe
PRC - [2002-11-21 01:17:54 | 000,087,751 | —- | M] (Agere Systems) – C:\WINDOWS\AGRSMMSG.exe
PRC - [2002-04-05 01:46:52 | 000,118,784 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint2K\Apoint.exe
PRC - [2001-07-12 21:44:24 | 000,032,768 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint2K\ApntEx.exe


========== Modules (SafeList) ==========

MOD - [2010-02-21 11:06:32 | 000,549,376 | —- | M] (OldTimer Tools) – C:\Documents and Settings\BADDOG\Desktop\OTL.exe
MOD - [2009-11-21 10:51:04 | 000,471,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\AppPatch\aclayers.dll
MOD - [2008-04-13 19:12:05 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\shimeng.dll


========== Win32 Services (SafeList) ==========

SRV - [2010-02-11 12:36:12 | 000,865,832 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files\McAfee\MSC\mcmscsvc.exe – (mcmscsvc)
SRV - [2010-01-25 09:03:04 | 000,365,072 | —- | M] (McAfee, Inc.) [On_Demand | Running] – C:\Program Files\McAfee\VirusScan\mcods.exe – (McODS)
SRV - [2009-12-08 14:25:28 | 000,093,320 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files\McAfee\SiteAdvisor\McSACore.exe – (McAfee SiteAdvisor Service)
SRV - [2009-11-11 11:14:06 | 000,144,704 | —- | M] (McAfee, Inc.) [Unknown | Running] – C:\Program Files\McAfee\VirusScan\Mcshield.exe – (McShield)
SRV - [2009-11-11 10:19:48 | 000,606,736 | —- | M] (McAfee, Inc.) [On_Demand | Running] – C:\Program Files\McAfee\VirusScan\mcsysmon.exe – (McSysmon)
SRV - [2009-10-27 11:19:46 | 000,895,696 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files\McAfee\MPF\MPFSrv.exe – (MpfService)
SRV - [2009-07-08 11:54:34 | 000,359,952 | —- | M] (McAfee, Inc.) [Auto | Running] – c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe – (McProxy)
SRV - [2009-07-07 19:10:02 | 002,482,848 | —- | M] (McAfee, Inc.) [Auto | Running] – c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe – (McNASvc)
SRV - [2003-07-28 12:28:22 | 000,089,136 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE – (ose)


========== Driver Services (SafeList) ==========

DRV - [2009-11-11 11:14:44 | 000,214,664 | —- | M] (McAfee, Inc.) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\mfehidk.sys – (mfehidk)
DRV - [2009-11-11 11:14:44 | 000,079,816 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\mfeavfk.sys – (mfeavfk)
DRV - [2009-11-11 11:14:44 | 000,040,552 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\mfesmfk.sys – (mfesmfk)
DRV - [2009-11-11 11:14:44 | 000,035,272 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\mfebopk.sys – (mfebopk)
DRV - [2009-11-11 11:14:12 | 000,034,248 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\mferkdk.sys – (mferkdk)
DRV - [2009-04-09 14:23:02 | 000,120,136 | —- | M] (McAfee, Inc.) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\Mpfp.sys – (MPFP)
DRV - [2008-04-13 11:39:15 | 000,020,480 | —- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\secdrv.sys – (Secdrv)
DRV - [2006-07-13 15:33:08 | 000,674,560 | —- | M] (Intel® Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\w70n51.sys – (w70n51) Intel®
DRV - [2003-03-14 09:06:08 | 000,707,596 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ALCXWDM.SYS – (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2003-02-20 08:16:00 | 000,244,367 | —- | M] (O2 Micro ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\o2mmb.sys – (CONAN)
DRV - [2003-02-14 03:13:22 | 000,109,344 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ialmsbw.sys – ({6080A529-897E-4629-A488-ABA0C29B635E}) Intel® Graphics Platform (SoftBIOS)
DRV - [2003-02-14 03:13:16 | 000,078,336 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ialmkchw.sys – ({D31A0762-0CEB-444e-ACFF-B049A1F6FE91}) Intel® Graphics Chipset (KCH)
DRV - [2003-02-14 03:12:20 | 000,032,311 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\wa301a.sys – ({E2B953A6-195A-44F9-9BA3-3D5F4E32BB55})
DRV - [2003-02-14 03:12:14 | 000,089,371 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ialmnt5.sys – (ialm)
DRV - [2002-12-09 02:29:00 | 000,005,441 | —- | M] (O2 Micro) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbxfilt.sys – (mbxfilt)
DRV - [2002-11-21 21:21:18 | 001,157,856 | —- | M] (Agere Systems) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\AGRSM.sys – (AgereSoftModem)
DRV - [2002-10-03 21:04:10 | 000,046,976 | —- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\R8139n51.sys – (rtl8139)
DRV - [2002-01-16 22:53:32 | 000,056,573 | —- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\Apfiltr.sys – (ApfiltrService)
DRV - [2001-10-04 14:16:00 | 000,017,792 | —- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ptilink.sys – (Ptilink)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://webmail.us.army.mil/
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2010-02-21 12:56:54 | 000,000,000 | —D | M]


O1 HOSTS File: ([2001-10-04 14:14:46 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems)
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF [binary data]
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: internet ([]about in Trusted sites)
O15 - HKCU\..Trusted Domains: mcafee.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: mcafee.com ([]https in Trusted sites)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.71.0.1
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-02-14 00:09:00 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2010-02-21 23:26:48 | 000,000,000 | RHSD | M] - C:\autorun.inf – [ NTFS ]
O32 - AutoRun File - [2010-02-21 23:26:48 | 000,000,000 | RHSD | M] - D:\autorun.inf – [ NTFS ]
O32 - AutoRun File - [2008-02-05 02:30:47 | 000,000,104 | R— | M] () - E:\autorun.inf – [ CDFS ]
O32 - AutoRun File - [2010-02-21 23:26:50 | 000,000,000 | RHSD | M] - F:\autorun.inf – [ FAT32 ]
O32 - AutoRun File - [2010-02-21 23:26:50 | 000,000,000 | RHSD | M] - G:\autorun.inf – [ FAT ]
O33 - MountPoints2\{43172680-18e1-11df-bdd0-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{43172680-18e1-11df-bdd0-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{43172680-18e1-11df-bdd0-806d6172696f}\Shell\AutoRun\command - "" = E:\Eseries.exe – [2006-12-06 06:27:55 | 001,581,266 | R— | M] (Macromedia, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] – "%1" %*
O35 - exefile [open] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010-02-22 08:12:58 | 000,000,000 | —D | C] – C:\WINDOWS\LastGood
[2010-02-22 01:05:01 | 000,000,000 | —D | C] – C:\WINDOWS\ie7updates
[2010-02-22 01:03:11 | 000,459,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010-02-22 01:03:11 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010-02-22 01:03:10 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2010-02-22 01:03:10 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieudinit.exe
[2010-02-22 01:03:09 | 000,991,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2010-02-22 01:03:07 | 006,067,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2010-02-22 01:03:06 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2010-02-22 01:03:05 | 002,452,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2010-02-22 01:03:04 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icardie.dll
[2010-02-22 01:01:04 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2010-02-22 00:58:04 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie7
[2010-02-22 00:57:07 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2010-02-22 00:56:02 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
[2010-02-22 00:46:00 | 000,000,000 | —D | C] – C:\WINDOWS\Minidump
[2010-02-21 23:27:24 | 000,000,000 | RH-D | C] – C:\Documents and Settings\BADDOG\Recent
[2010-02-21 23:26:48 | 000,000,000 | RHSD | C] – C:\autorun.inf
[2010-02-21 22:15:45 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mdimon.dll
[2010-02-21 22:14:10 | 000,000,000 | —D | C] – C:\Program Files\Microsoft ActiveSync
[2010-02-21 22:13:59 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DESIGNER
[2010-02-21 22:12:54 | 000,000,000 | —D | C] – C:\WINDOWS\SHELLNEW
[2010-02-21 22:11:22 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\My Documents\UH-1H MATERIAL
[2010-02-21 22:11:13 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\UH-1H MATERIAL
[2010-02-21 22:06:32 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2010-02-21 21:12:20 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Citrix
[2010-02-21 21:03:51 | 000,000,000 | —D | C] – C:\Program Files\Citrix
[2010-02-21 21:01:54 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Local Settings\Application Data\Citrix
[2010-02-21 20:56:27 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Application Data\McAfee
[2010-02-21 14:00:08 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2010-02-21 13:28:17 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2010-02-21 13:28:14 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2010-02-21 13:28:11 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2010-02-21 13:28:09 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2010-02-21 13:28:09 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2010-02-21 13:17:12 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2010-02-21 12:11:54 | 001,001,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmvdmoe2.dll
[2010-02-21 12:11:54 | 000,809,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmvdmod.dll
[2010-02-21 12:11:54 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmstream.dll
[2010-02-21 12:11:54 | 000,278,559 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmv8ds32.ax
[2010-02-21 12:11:54 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmvds32.ax
[2010-02-21 12:11:53 | 001,119,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmsdmoe2.dll
[2010-02-21 12:11:53 | 000,897,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmspdmoe.dll
[2010-02-21 12:11:53 | 000,759,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmsdmod.dll
[2010-02-21 12:11:53 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmsdmoe.dll
[2010-02-21 12:11:52 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpshell.dll
[2010-02-21 12:11:52 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpui.dll
[2010-02-21 12:11:51 | 002,940,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmploc.dll
[2010-02-21 12:11:51 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2010-02-21 12:11:51 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2010-02-21 12:11:51 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2010-02-21 12:11:51 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpcore.dll
[2010-02-21 12:11:51 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpcd.dll
[2010-02-21 12:11:50 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpasf.dll
[2010-02-21 12:11:50 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2010-02-21 12:11:50 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmp.ocx
[2010-02-21 12:11:46 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmidx.dll
[2010-02-21 12:11:44 | 000,670,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmadmoe.dll
[2010-02-21 12:11:44 | 000,408,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmadmod.dll
[2010-02-21 12:11:44 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmasf.dll
[2010-02-21 12:11:44 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmerror.dll
[2010-02-21 12:11:44 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmdmlog.dll
[2010-02-21 12:11:44 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmdmps.dll
[2010-02-21 12:11:42 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2010-02-21 12:11:39 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2010-02-21 12:11:38 | 000,712,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecs.dll
[2010-02-21 12:11:26 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2010-02-21 12:11:18 | 000,208,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unregmp2.exe
[2010-02-21 12:11:14 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2010-02-21 12:10:51 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2010-02-21 12:10:46 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shmedia.dll
[2010-02-21 12:10:42 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2010-02-21 12:10:42 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2010-02-21 12:10:30 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2010-02-21 12:10:26 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rasqec.dll
[2010-02-21 12:10:23 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qutil.dll
[2010-02-21 12:10:22 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2010-02-21 12:10:21 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2010-02-21 12:10:16 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2010-02-21 12:10:08 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\onex.dll
[2010-02-21 12:09:53 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2010-02-21 12:09:52 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2010-02-21 12:09:52 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2010-02-21 12:09:44 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2010-02-21 12:09:44 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2010-02-21 12:09:44 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2010-02-21 12:09:41 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2010-02-21 12:09:41 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2010-02-21 12:09:40 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2010-02-21 12:09:39 | 000,245,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mswmdm.dll
[2010-02-21 12:09:34 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2010-02-21 12:09:33 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msscp.dll
[2010-02-21 12:09:33 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2010-02-21 12:09:33 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msscds32.ax
[2010-02-21 12:09:31 | 000,201,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspmsp.dll
[2010-02-21 12:09:31 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspmsnsv.dll
[2010-02-21 12:09:26 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msnetobj.dll
[2010-02-21 12:09:09 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2010-02-21 12:09:08 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadds32.ax
[2010-02-21 12:09:05 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2010-02-21 12:09:05 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2010-02-21 12:09:05 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2010-02-21 12:09:04 | 000,384,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mp4sdmod.dll
[2010-02-21 12:09:04 | 000,310,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mp43dmod.dll
[2010-02-21 12:09:04 | 000,262,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpg4ds32.ax
[2010-02-21 12:09:04 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpg4dmod.dll
[2010-02-21 12:09:00 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2010-02-21 12:09:00 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2010-02-21 12:08:59 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2010-02-21 12:08:59 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2010-02-21 12:08:57 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2010-02-21 12:08:47 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\laprxy.dll
[2010-02-21 12:08:40 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2010-02-21 12:08:40 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2010-02-21 12:08:37 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2010-02-21 12:08:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2010-02-21 12:08:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2010-02-21 12:08:35 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2010-02-21 12:08:28 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpcdll.dll
[2010-02-21 12:08:28 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pidgen.dll
[2010-02-21 12:08:13 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smtpapi.dll
[2010-02-21 12:08:12 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwnh.dll
[2010-02-21 12:07:49 | 000,144,384 | —- | C] (Windows ® Server 2003 DDK provider) – C:\WINDOWS\System32\drivers\hdaudbus.sys
[2010-02-21 12:07:27 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2010-02-21 12:07:27 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappprxy.dll
[2010-02-21 12:07:26 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2010-02-21 12:07:26 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2010-02-21 12:07:26 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappcfg.dll
[2010-02-21 12:07:26 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2010-02-21 12:07:26 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapolqec.dll
[2010-02-21 12:07:22 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmv2clt.dll
[2010-02-21 12:07:21 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmclien.dll
[2010-02-21 12:07:21 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmstor.dll
[2010-02-21 12:07:19 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2010-02-21 12:07:19 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2010-02-21 12:07:19 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3dlg.dll
[2010-02-21 12:07:18 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2010-02-21 12:07:18 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2010-02-21 12:07:18 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3api.dll
[2010-02-21 12:07:15 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlimport.exe
[2010-02-21 12:07:14 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2010-02-21 12:07:12 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2010-02-21 12:07:07 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2010-02-21 12:06:56 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cewmdm.dll
[2010-02-21 12:06:51 | 000,286,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\blackbox.dll
[2010-02-21 12:06:51 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2010-02-21 12:06:49 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2010-02-21 12:06:37 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asferror.dll
[2010-02-21 12:06:24 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2010-02-21 11:05:12 | 000,549,376 | —- | C] (OldTimer Tools) – C:\Documents and Settings\BADDOG\Desktop\OTL.exe
[2010-02-21 11:04:51 | 000,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2010-02-21 11:01:47 | 000,455,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010-02-21 11:01:09 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2010-02-21 10:59:01 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2010-02-21 10:59:01 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2010-02-21 10:58:45 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2010-02-21 10:57:43 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2010-02-21 10:53:12 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\My Documents\DynCorp
[2010-02-21 10:42:46 | 000,655,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2010-02-21 10:41:39 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2010-02-21 10:38:09 | 000,353,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2010-02-21 10:37:01 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2010-02-21 10:28:27 | 000,691,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010-02-21 10:26:38 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2010-02-21 10:23:41 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Adobe
[2010-02-21 01:31:15 | 000,000,000 | -H-D | C] – C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2010-02-21 01:25:19 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2010-02-21 01:22:13 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2010-02-21 01:20:01 | 000,730,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2010-02-21 01:19:53 | 002,145,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010-02-21 01:19:41 | 002,189,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010-02-21 01:19:32 | 002,023,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010-02-21 01:16:08 | 000,138,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\afd.sys
[2010-02-21 01:16:05 | 000,361,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcpip.sys
[2010-02-21 01:16:04 | 000,225,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcpip6.sys
[2010-02-21 01:16:01 | 000,245,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mswsock.dll
[2010-02-21 01:16:01 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dnsapi.dll
[2010-02-21 00:55:37 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Local Settings\Application Data\Identities
[2010-02-19 10:42:55 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Application Data\vlc
[2010-02-19 10:28:41 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\SACore
[2010-02-18 23:05:31 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SiteAdvisor
[2010-02-18 23:01:43 | 000,079,816 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfeavfk.sys
[2010-02-18 23:01:43 | 000,040,552 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfesmfk.sys
[2010-02-18 23:01:43 | 000,035,272 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfebopk.sys
[2010-02-18 23:01:38 | 000,120,136 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\Mpfp.sys
[2010-02-18 23:01:06 | 000,000,000 | —D | C] – C:\Program Files\Common Files\McAfee
[2010-02-18 23:01:04 | 000,000,000 | —D | C] – C:\Program Files\McAfee.com
[2010-02-18 23:00:53 | 000,000,000 | —D | C] – C:\Program Files\McAfee
[2010-02-18 22:59:53 | 000,034,248 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mferkdk.sys
[2010-02-18 22:59:13 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\McAfee
[2010-02-18 22:08:59 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2010-02-18 22:00:05 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Adobe
[2010-02-18 21:57:07 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2010-02-18 21:56:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\SOFTWARE
[2010-02-18 21:41:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2010-02-18 21:41:21 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe AIR
[2010-02-18 21:41:14 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Application Data\Macromedia
[2010-02-18 21:41:13 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Application Data\Adobe
[2010-02-18 21:34:31 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Local Settings\Application Data\Adobe
[2010-02-18 21:34:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NOS
[2010-02-17 00:22:05 | 000,000,000 | —D | C] – C:\Program Files\Apoint2K
[2010-02-17 00:19:43 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxres.dll
[2010-02-17 00:18:08 | 000,244,367 | —- | C] (O2 Micro ) – C:\WINDOWS\System32\drivers\o2mmb.sys
[2010-02-17 00:18:08 | 000,005,441 | —- | C] (O2 Micro) – C:\WINDOWS\System32\drivers\mbxfilt.sys
[2010-02-17 00:17:21 | 000,046,976 | —- | C] (Realtek Semiconductor Corporation ) – C:\WINDOWS\System32\drivers\R8139n51.sys
[2010-02-17 00:17:20 | 000,000,000 | —D | C] – C:\WINDOWS\OPTIONS
[2010-02-17 00:16:16 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2010-02-17 00:16:16 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2010-02-17 00:16:15 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2010-02-17 00:16:15 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2010-02-17 00:16:11 | 000,765,952 | —- | C] (Sensaura Ltd) – C:\WINDOWS\System\crlds3d.dll
[2010-02-17 00:16:11 | 000,720,896 | —- | C] (Sensaura Ltd) – C:\WINDOWS\System32\Audio3D.dll
[2010-02-17 00:16:11 | 000,720,896 | —- | C] (Sensaura Ltd) – C:\WINDOWS\System32\dllcache\a3d.dll
[2010-02-17 00:16:11 | 000,720,896 | —- | C] (Sensaura Ltd) – C:\WINDOWS\System32\a3d.dll
[2010-02-17 00:16:11 | 000,707,596 | —- | C] (Realtek Semiconductor Corp.) – C:\WINDOWS\System32\drivers\ALCXWDM.SYS
[2010-02-17 00:16:11 | 000,047,104 | —- | C] (Realtek Semiconductor Corp.) – C:\WINDOWS\SOUNDMAN.EXE
[2010-02-17 00:16:10 | 003,554,304 | —- | C] (Realtek Semiconductor Corp.) – C:\WINDOWS\System32\ALSNDMGR.CPL
[2010-02-17 00:16:10 | 000,208,896 | —- | C] (Avance Logic, Inc.) – C:\WINDOWS\alcupd.exe
[2010-02-17 00:16:10 | 000,131,072 | —- | C] (Realtek Semiconductor Corp.) – C:\WINDOWS\alcrmv.exe
[2010-02-17 00:11:50 | 000,503,808 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxress.dll
[2010-02-17 00:11:50 | 000,315,392 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxsrvc.dll
[2010-02-17 00:11:50 | 000,204,800 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxpph.dll
[2010-02-17 00:11:50 | 000,163,840 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrell.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrptg.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrptb.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrplk.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrnld.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrita.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrhun.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrfrc.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrfra.lrc
[2010-02-17 00:11:50 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxresp.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrtrk.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrtha.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrsve.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrrus.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrnor.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrkor.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrjpn.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrheb.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrfin.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrenu.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxreng.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrdeu.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrdan.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrcsy.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrcht.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrchs.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrarb.lrc
[2010-02-17 00:11:50 | 000,155,648 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrara.lrc
[2010-02-17 00:11:50 | 000,069,632 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\oemdspif.dll
[2010-02-17 00:11:50 | 000,032,311 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\wa301b.sys
[2010-02-17 00:11:50 | 000,032,311 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\wa301a.sys
[2010-02-17 00:11:50 | 000,020,021 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\vch.sys
[2010-02-17 00:11:50 | 000,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2010-02-17 00:11:49 | 000,487,424 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxcfg.exe
[2010-02-17 00:11:49 | 000,221,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxeud.dll
[2010-02-17 00:11:49 | 000,151,552 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxdiag.exe
[2010-02-17 00:11:49 | 000,147,456 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxdev.dll
[2010-02-17 00:11:49 | 000,118,784 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxhk.dll
[2010-02-17 00:11:49 | 000,094,208 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxcpl.cpl
[2010-02-17 00:11:49 | 000,090,112 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxext.exe
[2010-02-17 00:11:49 | 000,086,016 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxdo.dll
[2010-02-17 00:11:49 | 000,045,056 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxdgps.dll
[2010-02-17 00:11:49 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxexps.dll
[2010-02-17 00:11:48 | 001,859,584 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ialmgicd.dll
[2010-02-17 00:11:48 | 000,459,842 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ialmdd5.dll
[2010-02-17 00:11:48 | 000,193,915 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ialmdev5.dll
[2010-02-17 00:11:48 | 000,188,416 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ialmgdev.dll
[2010-02-17 00:11:48 | 000,118,784 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\hccutils.dll
[2010-02-17 00:11:48 | 000,114,748 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ialmdnt5.dll
[2010-02-17 00:11:48 | 000,114,688 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\hkcmd.exe
[2010-02-17 00:11:48 | 000,109,344 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\ialmsbw.sys
[2010-02-17 00:11:48 | 000,089,371 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\ialmnt5.sys
[2010-02-17 00:11:48 | 000,078,336 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\ialmkchw.sys
[2010-02-17 00:11:48 | 000,061,440 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\iAlmCoIn_v12.dll
[2010-02-17 00:11:48 | 000,057,344 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ialmrem.dll
[2010-02-17 00:11:48 | 000,035,383 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a313.sys
[2010-02-17 00:11:48 | 000,033,792 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ialmrnt5.dll
[2010-02-17 00:11:48 | 000,017,463 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a314.sys
[2010-02-17 00:11:47 | 000,045,623 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a304.sys
[2010-02-17 00:11:47 | 000,033,335 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a310.sys
[2010-02-17 00:11:47 | 000,031,287 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a311.sys
[2010-02-17 00:11:47 | 000,027,703 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a303.sys
[2010-02-17 00:11:47 | 000,025,655 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a309.sys
[2010-02-17 00:11:47 | 000,020,535 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a307.sys
[2010-02-17 00:11:47 | 000,016,439 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a306.sys
[2010-02-17 00:11:47 | 000,011,831 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a305.sys
[2010-02-17 00:11:47 | 000,011,319 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a302.sys
[2010-02-17 00:11:47 | 000,010,807 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a312.sys
[2010-02-17 00:11:47 | 000,010,807 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\a308.sys
[2010-02-17 00:11:47 | 000,000,000 | —D | C] – C:\WINDOWS\Drivers
[2010-02-17 00:11:40 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2010-02-17 00:11:28 | 000,032,768 | R— | C] (Intel® Corporation) – C:\WINDOWS\System32\w70n5msg.dll
[2010-02-17 00:11:26 | 000,000,000 | —D | C] – C:\Program Files\Intel
[2010-02-15 22:21:43 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2010-02-15 21:36:44 | 000,995,328 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\W20MLRes.dll
[2010-02-15 21:36:44 | 000,674,560 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\w70n51.sys
[2010-02-15 21:36:44 | 000,430,147 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\W20NCPA.dll
[2010-02-15 21:36:43 | 000,000,000 | —D | C] – C:\Drivers
[2010-02-15 21:27:17 | 000,000,000 | —D | C] – C:\Program Files\VideoLAN
[2010-02-14 15:11:21 | 000,000,000 | —D | C] – C:\Program Files\Nokia
[2010-02-14 14:56:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2010-02-14 14:56:29 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010-02-14 14:55:51 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2010-02-14 04:11:45 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2010-02-14 03:55:51 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2010-02-14 03:55:51 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsdupd.exe
[2010-02-14 03:55:45 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2010-02-14 03:55:45 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2010-02-14 03:55:45 | 000,043,008 | —- | C] (Advanced Micro Devices, Inc.) – C:\WINDOWS\System32\drivers\amdagp.sys
[2010-02-14 03:55:45 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2010-02-14 03:55:45 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2010-02-14 03:55:45 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2010-02-14 03:55:45 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2010-02-14 03:55:45 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2010-02-14 03:55:45 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2010-02-14 03:55:45 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2010-02-14 03:55:45 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2010-02-14 03:55:45 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2010-02-14 03:55:45 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2010-02-14 03:55:45 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2010-02-14 03:55:45 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2010-02-14 03:55:44 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2010-02-14 03:55:44 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2010-02-14 03:55:44 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2010-02-14 03:55:44 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2010-02-14 03:55:44 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2010-02-14 03:55:44 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2010-02-14 03:55:44 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2010-02-14 03:55:44 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2010-02-14 03:55:44 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2010-02-14 03:55:44 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2010-02-14 03:55:44 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2010-02-14 03:55:44 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2010-02-14 03:55:44 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2010-02-14 03:55:44 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2010-02-14 03:55:44 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2010-02-14 03:55:44 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2010-02-14 03:55:44 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2010-02-14 03:55:44 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2010-02-14 03:55:44 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2010-02-14 03:55:44 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2010-02-14 03:55:43 | 001,041,536 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\drivers\hsfdpsp2.sys
[2010-02-14 03:55:43 | 000,685,056 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\drivers\hsfcxts2.sys
[2010-02-14 03:55:43 | 000,220,032 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\drivers\hsfbs2s2.sys
[2010-02-14 03:55:43 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2010-02-14 03:55:43 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2010-02-14 03:55:42 | 001,897,408 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010-02-14 03:55:42 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2010-02-14 03:55:42 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2010-02-14 03:55:42 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2010-02-14 03:55:42 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2010-02-14 03:55:42 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2010-02-14 03:55:42 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2010-02-14 03:55:42 | 000,011,868 | —- | C] (Conexant) – C:\WINDOWS\System32\drivers\mdmxsdk.sys
[2010-02-14 03:55:41 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2010-02-14 03:55:41 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2010-02-14 03:55:41 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2010-02-14 03:55:41 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2010-02-14 03:55:41 | 000,040,960 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\drivers\sisagp.sys
[2010-02-14 03:55:41 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2010-02-14 03:55:41 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2010-02-14 03:55:41 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usb8023x.sys
[2010-02-14 03:55:41 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2010-02-14 03:55:41 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2010-02-14 03:55:41 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2010-02-14 03:55:40 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2010-02-14 03:55:40 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2010-02-14 03:55:40 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2010-02-14 03:55:40 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2010-02-14 03:55:40 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2010-02-14 03:55:40 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2010-02-14 03:55:40 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2010-02-14 03:55:40 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2010-02-14 03:55:40 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2010-02-14 03:55:40 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2010-02-14 03:55:39 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2010-02-14 03:55:39 | 001,689,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\d3d9.dll
[2010-02-14 03:55:39 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2010-02-14 03:55:39 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bthprops.cpl
[2010-02-14 03:55:39 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\blastcln.exe
[2010-02-14 03:55:39 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\btpanui.dll
[2010-02-14 03:55:39 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2010-02-14 03:55:39 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2010-02-14 03:55:39 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bthci.dll
[2010-02-14 03:55:39 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\auditusr.exe
[2010-02-14 03:55:39 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmsetacl.dll
[2010-02-14 03:55:39 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2010-02-14 03:55:39 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2010-02-14 03:55:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2010-02-14 03:55:38 | 002,113,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dxdiagn.dll
[2010-02-14 03:55:38 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fsquirt.exe
[2010-02-14 03:55:38 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\firewall.cpl
[2010-02-14 03:55:38 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fwcfg.dll
[2010-02-14 03:55:38 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2010-02-14 03:55:37 | 000,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec
[2010-02-14 03:55:37 | 000,199,680 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\iac25_32.ax
[2010-02-14 03:55:37 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ieencode.dll
[2010-02-14 03:55:37 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2010-02-14 03:55:37 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\httpapi.dll
[2010-02-14 03:55:36 | 000,384,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mp4sdmod.dll
[2010-02-14 03:55:36 | 000,380,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irprops.cpl
[2010-02-14 03:55:36 | 000,310,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mp43dmod.dll
[2010-02-14 03:55:36 | 000,154,624 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ivfsrc.ax
[2010-02-14 03:55:36 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2010-02-14 03:55:36 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsmsno.dll
[2010-02-14 03:55:36 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsmsfi.dll
[2010-02-14 03:55:36 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdukx.dll
[2010-02-14 03:55:36 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdno1.dll
[2010-02-14 03:55:36 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdfi1.dll
[2010-02-14 03:55:36 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdinmal.dll
[2010-02-14 03:55:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmlt48.dll
[2010-02-14 03:55:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmlt47.dll
[2010-02-14 03:55:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdinben.dll
[2010-02-14 03:55:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdinbe1.dll
[2010-02-14 03:55:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmaori.dll
[2010-02-14 03:55:35 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2010-02-14 03:55:35 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdadiag.dll
[2010-02-14 03:55:35 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\netsetup.cpl
[2010-02-14 03:55:34 | 004,274,816 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2010-02-14 03:55:34 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2pgraph.dll
[2010-02-14 03:55:34 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2p.dll
[2010-02-14 03:55:34 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2pnetsh.dll
[2010-02-14 03:55:34 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2pgasvc.dll
[2010-02-14 03:55:34 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\powercfg.exe
[2010-02-14 03:55:33 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2010-02-14 03:55:33 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2010-02-14 03:55:33 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2010-02-14 03:55:33 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\strmfilt.dll
[2010-02-14 03:55:33 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2010-02-14 03:55:33 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2010-02-14 03:55:33 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2010-02-14 03:55:33 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sdhcinst.dll
[2010-02-14 03:55:33 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smbinst.exe
[2010-02-14 03:55:32 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmerror.dll
[2010-02-14 03:55:32 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmidx.dll
[2010-02-14 03:55:32 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2010-02-14 03:55:32 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winshfhc.dll
[2010-02-14 03:55:31 | 001,119,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmsdmoe2.dll
[2010-02-14 03:55:31 | 000,897,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmspdmoe.dll
[2010-02-14 03:55:31 | 000,485,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmspdmod.dll
[2010-02-14 03:55:31 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmpasf.dll
[2010-02-14 03:55:30 | 001,001,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmvdmoe2.dll
[2010-02-14 03:55:30 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2010-02-14 03:55:30 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2010-02-14 03:55:30 | 000,217,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2010-02-14 03:55:30 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2010-02-14 03:55:30 | 000,148,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wscui.cpl
[2010-02-14 03:55:30 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wscntfy.exe
[2010-02-14 03:55:29 | 000,438,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpob2res.dll
[2010-02-14 03:55:29 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2010-02-14 03:55:29 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2010-02-14 03:55:29 | 000,209,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2010-02-14 03:55:29 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2010-02-14 03:55:29 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xmlprovi.dll
[2010-02-14 03:55:29 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2010-02-14 03:55:29 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2010-02-14 03:55:29 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2010-02-14 03:55:27 | 000,000,000 | —D | C] – C:\WINDOWS\peernet
[2010-02-14 03:55:25 | 000,000,000 | —D | C] – C:\WINDOWS\provisioning
[2010-02-14 03:52:42 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2010-02-14 03:51:17 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2010-02-14 03:50:12 | 002,897,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp2res.dll
[2010-02-14 03:48:30 | 000,017,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2010-02-14 03:48:24 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2010-02-14 03:48:10 | 000,026,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2010-02-14 03:45:46 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2010-02-14 03:45:43 | 000,000,000 | —D | C] – C:\WINDOWS\EHome
[2010-02-14 03:37:37 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2010-02-14 03:37:34 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Application Data\Identities
[2010-02-14 03:37:30 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2010-02-14 03:37:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\BADDOG\My Documents\My Pictures
[2010-02-14 03:37:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\BADDOG\My Documents\My Music
[2010-02-14 03:37:25 | 000,000,000 | –SD | C] – C:\Documents and Settings\BADDOG\Application Data\Microsoft
[2010-02-14 03:37:25 | 000,000,000 | RH-D | C] – C:\Documents and Settings\BADDOG\SendTo
[2010-02-14 03:37:25 | 000,000,000 | RH-D | C] – C:\Documents and Settings\BADDOG\Application Data
[2010-02-14 03:37:25 | 000,000,000 | R–D | C] – C:\Documents and Settings\BADDOG\My Documents
[2010-02-14 03:37:25 | 000,000,000 | R–D | C] – C:\Documents and Settings\BADDOG\Favorites
[2010-02-14 03:37:25 | 000,000,000 | -HSD | C] – C:\Documents and Settings\BADDOG\Cookies
[2010-02-14 03:37:25 | 000,000,000 | -H-D | C] – C:\Documents and Settings\BADDOG\PrintHood
[2010-02-14 03:37:25 | 000,000,000 | -H-D | C] – C:\Documents and Settings\BADDOG\NetHood
[2010-02-14 03:37:25 | 000,000,000 | -H-D | C] – C:\Documents and Settings\BADDOG\Local Settings
[2010-02-14 03:37:25 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Local Settings\Application Data\Microsoft
[2010-02-14 03:37:25 | 000,000,000 | —D | C] – C:\Documents and Settings\BADDOG\Desktop
[2010-02-14 03:37:24 | 000,000,000 | R–D | C] – C:\Documents and Settings\BADDOG\Start Menu
[2010-02-14 03:37:24 | 000,000,000 | -H-D | C] – C:\Documents and Settings\BADDOG\Templates
[2010-02-14 03:35:25 | 000,000,000 | –SD | M] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010-02-14 03:35:25 | 000,000,000 | –SD | M] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010-02-14 03:35:25 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010-02-14 03:21:43 | 000,000,000 | RH-D | C] – C:\MSOCache
[2010-02-14 02:30:49 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2010-02-14 02:30:49 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2010-02-14 02:30:49 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2010-02-14 02:30:48 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2010-02-14 02:30:48 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2010-02-14 02:30:48 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2010-02-14 02:30:47 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2010-02-14 02:30:46 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2010-02-14 02:30:45 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2010-02-14 02:30:44 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2010-02-14 02:30:44 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2010-02-14 02:30:43 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2010-02-14 02:30:43 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2010-02-14 02:30:42 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2010-02-14 02:30:42 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2010-02-14 02:30:40 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2010-02-14 02:30:40 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2010-02-14 02:30:39 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2010-02-14 02:30:37 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2010-02-14 02:30:37 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2010-02-14 02:30:37 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2010-02-14 02:30:36 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2010-02-14 02:30:36 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2010-02-14 02:30:36 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2010-02-14 02:30:35 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2010-02-14 02:30:35 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2010-02-14 02:30:33 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2010-02-14 02:30:32 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2010-02-14 02:30:30 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2010-02-14 02:30:29 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2010-02-14 02:30:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2010-02-14 02:30:27 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2010-02-14 02:30:27 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpapi.dll
[2010-02-14 02:30:26 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2010-02-14 02:30:26 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2010-02-14 02:30:26 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2010-02-14 02:30:26 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2010-02-14 02:30:26 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2010-02-14 02:30:26 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2010-02-14 02:30:26 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2010-02-14 02:30:25 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2010-02-14 02:30:25 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2010-02-14 02:30:25 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2010-02-14 02:30:25 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2010-02-14 02:30:25 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2010-02-14 02:30:25 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2010-02-14 02:30:25 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2010-02-14 02:30:25 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2010-02-14 02:30:24 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2010-02-14 02:30:24 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2010-02-14 02:30:21 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2010-02-14 02:30:20 | 000,205,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seo.dll
[2010-02-14 02:30:20 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2010-02-14 02:30:19 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_rwnh.dll
[2010-02-14 02:30:18 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2010-02-14 02:30:18 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2010-02-14 02:30:16 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2010-02-14 02:30:16 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2010-02-14 02:30:15 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2010-02-14 02:30:14 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2010-02-14 02:30:13 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2010-02-14 02:30:13 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2010-02-14 02:30:11 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2010-02-14 02:30:11 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2010-02-14 02:30:11 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2010-02-14 02:30:10 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2010-02-14 02:30:10 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2010-02-14 02:30:09 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2010-02-14 02:30:09 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2010-02-14 02:30:09 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2010-02-14 02:30:09 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2010-02-14 02:30:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2010-02-14 02:30:08 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2010-02-14 02:30:07 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2010-02-14 02:30:07 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2010-02-14 02:30:07 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2010-02-14 02:30:05 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2010-02-14 02:30:03 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2010-02-14 02:30:00 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2010-02-14 02:29:55 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2010-02-14 02:29:55 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2010-02-14 02:29:48 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2010-02-14 02:29:47 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2010-02-14 02:29:47 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2010-02-14 02:29:46 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2010-02-14 02:29:45 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2010-02-14 02:29:42 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2010-02-14 02:29:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2010-02-14 02:29:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2010-02-14 02:29:41 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2010-02-14 02:29:41 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2010-02-14 02:29:41 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2010-02-14 02:29:41 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2010-02-14 02:29:41 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2010-02-14 02:29:40 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2010-02-14 02:29:40 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2010-02-14 02:29:40 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2010-02-14 02:29:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2010-02-14 02:29:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2010-02-14 02:29:39 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2010-02-14 02:29:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2010-02-14 02:29:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2010-02-14 02:29:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2010-02-14 02:29:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2010-02-14 02:29:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2010-02-14 02:29:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2010-02-14 02:29:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2010-02-14 02:29:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2010-02-14 02:29:37 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2010-02-14 02:29:37 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2010-02-14 02:29:37 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2010-02-14 02:29:37 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2010-02-14 02:29:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2010-02-14 02:29:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2010-02-14 02:29:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2010-02-14 02:29:36 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2010-02-14 02:29:36 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2010-02-14 02:29:35 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2010-02-14 02:29:35 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2010-02-14 02:29:35 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2010-02-14 02:29:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2010-02-14 02:29:33 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2010-02-14 02:29:32 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2010-02-14 02:29:31 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2010-02-14 02:29:31 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2010-02-14 02:29:31 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2010-02-14 02:29:31 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2010-02-14 02:29:30 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2010-02-14 02:29:30 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2010-02-14 02:29:30 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2010-02-14 02:29:30 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2010-02-14 02:29:29 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2010-02-14 02:29:29 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2010-02-14 02:29:29 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2010-02-14 02:29:29 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2010-02-14 02:29:29 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2010-02-14 02:29:28 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2010-02-14 02:29:27 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2010-02-14 02:29:27 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2010-02-14 02:29:27 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2010-02-14 02:29:27 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2010-02-14 02:29:27 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2010-02-14 02:29:27 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2010-02-14 02:29:27 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2010-02-14 02:29:26 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2010-02-14 02:29:26 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2010-02-14 02:29:26 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2010-02-14 02:29:25 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2010-02-14 02:29:25 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2010-02-14 02:29:14 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2010-02-14 02:28:51 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2010-02-14 02:28:49 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2010-02-14 02:28:46 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2010-02-14 02:28:46 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2010-02-14 02:28:45 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2010-02-14 02:28:45 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2010-02-14 02:28:44 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2010-02-14 02:28:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2010-02-14 02:28:42 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2010-02-14 02:28:42 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2010-02-14 02:28:40 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2010-02-14 02:28:40 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2010-02-14 02:28:40 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2010-02-14 02:28:40 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2010-02-14 02:28:38 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2010-02-14 02:28:34 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2010-02-14 02:28:32 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2010-02-14 02:28:32 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2010-02-14 02:28:32 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2010-02-14 02:28:32 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2010-02-14 02:28:31 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2010-02-14 02:28:28 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2010-02-14 02:28:28 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2010-02-14 02:28:28 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2010-02-14 02:28:27 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2010-02-14 02:28:27 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2010-02-14 02:28:26 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2010-02-14 02:28:25 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2010-02-14 02:28:24 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2010-02-14 02:28:24 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2010-02-14 02:28:24 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2010-02-14 02:28:24 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2010-02-14 02:28:24 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2010-02-14 02:28:22 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2010-02-14 02:28:22 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2010-02-14 02:28:22 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2010-02-14 02:28:21 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2010-02-14 02:28:20 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2010-02-14 02:28:19 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2010-02-14 02:28:19 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2010-02-14 02:28:18 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqueue.dll
[2010-02-14 02:28:18 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2010-02-14 02:28:16 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2010-02-14 02:28:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2010-02-14 02:28:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2010-02-14 02:28:12 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2010-02-14 02:28:10 | 002,134,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpsnap.dll
[2010-02-14 02:28:09 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpadm.dll
[2010-02-14 02:28:02 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2010-02-14 02:28:02 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2010-02-14 02:28:02 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2010-02-14 02:28:01 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2010-02-14 02:28:01 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2010-02-14 02:28:00 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2010-02-14 02:27:54 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2010-02-14 02:27:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2010-02-14 02:27:46 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2010-02-14 02:27:46 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2010-02-14 02:27:00 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2010-02-14 02:26:05 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2010-02-14 02:25:52 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2010-02-14 02:25:52 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2010-02-14 02:25:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2010-02-14 02:24:34 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2010-02-14 02:24:34 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2010-02-14 02:24:34 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2010-02-14 02:24:34 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2010-02-14 02:24:34 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2010-02-14 02:24:34 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2010-02-14 02:24:33 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2010-02-14 02:24:33 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2010-02-14 02:24:33 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2010-02-14 02:24:33 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2010-02-14 02:24:22 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2010-02-14 02:24:21 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2010-02-14 02:24:21 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2010-02-14 02:24:21 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2010-02-14 02:24:20 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2010-02-14 02:24:20 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2010-02-14 02:24:20 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2010-02-14 02:24:19 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2010-02-14 02:24:19 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2010-02-14 02:24:19 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2010-02-14 02:24:18 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2010-02-14 02:24:13 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2010-02-14 02:24:13 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2010-02-14 02:24:13 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2010-02-14 02:24:13 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2010-02-14 02:24:13 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2010-02-14 02:24:12 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2010-02-14 02:24:12 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2010-02-14 02:24:11 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2010-02-14 02:24:11 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2010-02-14 02:24:11 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2010-02-14 02:24:11 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2010-02-14 02:24:10 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2010-02-14 02:24:10 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2010-02-14 02:24:10 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2010-02-14 02:24:10 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2010-02-14 02:24:08 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2010-02-14 02:24:03 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2010-02-14 02:24:02 | 000,520,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpvis.dll
[2010-02-14 02:24:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2010-02-14 02:24:01 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2010-02-14 02:24:00 | 000,319,542 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmres.dll
[2010-02-14 02:24:00 | 000,163,897 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmutil.dll
[2010-02-14 02:24:00 | 000,110,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmfilt.dll
[2010-02-14 02:23:59 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2010-02-14 02:23:53 | 000,000,000 | —D | C] – C:\WINDOWS\PCHealth
[2010-02-14 02:23:52 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2010-02-14 02:23:52 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2010-02-14 02:23:51 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2010-02-14 02:23:51 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2010-02-14 02:23:51 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2010-02-14 02:23:50 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2010-02-14 02:23:47 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2010-02-14 02:23:47 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2010-02-14 02:23:47 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2010-02-14 02:23:45 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2010-02-14 02:23:45 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2010-02-14 02:23:35 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2010-02-14 02:23:33 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2010-02-14 02:23:31 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2010-02-14 02:23:31 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2010-02-14 02:22:48 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2010-02-14 02:22:40 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2010-02-14 02:22:31 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2010-02-14 02:22:31 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2010-02-14 02:22:30 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2010-02-14 02:22:22 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2010-02-14 02:22:19 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2010-02-14 02:22:19 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2010-02-14 02:22:19 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2010-02-14 02:22:18 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2010-02-14 02:22:18 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2010-02-14 02:22:18 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2010-02-14 02:22:18 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2010-02-14 02:22:18 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2010-02-14 02:22:18 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2010-02-14 02:22:18 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2010-02-14 02:22:18 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2010-02-14 02:22:18 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2010-02-14 02:22:17 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2010-02-14 02:22:17 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2010-02-14 02:22:17 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2010-02-14 02:22:17 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2010-02-14 02:22:17 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2010-02-14 02:22:17 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2010-02-14 02:22:17 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2010-02-14 02:22:16 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2010-02-14 02:22:16 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2010-02-14 02:22:16 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2010-02-14 02:22:16 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2010-02-14 02:22:15 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2010-02-14 02:22:15 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2010-02-14 02:22:15 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2010-02-14 02:22:15 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2010-02-14 02:22:05 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2010-02-14 02:22:05 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2010-02-14 02:22:04 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2010-02-14 02:22:04 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2010-02-14 02:22:04 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2010-02-14 02:22:04 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2010-02-14 02:22:04 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2010-02-14 02:22:04 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2010-02-14 02:22:04 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2010-02-14 02:22:04 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2010-02-14 02:22:04 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2010-02-14 02:22:04 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2010-02-14 02:22:03 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2010-02-14 02:22:03 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2010-02-14 02:22:03 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2010-02-14 02:22:03 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2010-02-14 02:21:55 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2010-02-14 02:21:55 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2010-02-14 02:21:55 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2010-02-14 02:21:55 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2010-02-14 02:21:54 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2010-02-14 02:21:54 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2010-02-14 02:21:54 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2010-02-14 02:21:54 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2010-02-14 02:21:53 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2010-02-14 02:21:53 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2010-02-14 02:21:53 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2010-02-14 02:21:53 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2010-02-14 02:21:53 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2010-02-14 02:21:53 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2010-02-14 02:21:53 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2010-02-14 02:21:53 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2010-02-14 02:21:52 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2010-02-14 02:21:52 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2010-02-14 02:21:52 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2010-02-14 02:21:52 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2010-02-14 02:21:52 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2010-02-14 02:21:52 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2010-02-14 02:21:52 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2010-02-14 02:21:52 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2010-02-14 02:21:52 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2010-02-14 02:21:52 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2010-02-14 02:21:52 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2010-02-14 02:21:52 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2010-02-14 02:21:52 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2010-02-14 02:21:52 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2010-02-14 02:21:52 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2010-02-14 02:21:51 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2010-02-14 02:21:51 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2010-02-14 02:21:51 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2010-02-14 02:21:51 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2010-02-14 02:21:51 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2010-02-14 02:21:51 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2010-02-14 02:21:51 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2010-02-14 02:21:51 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2010-02-14 02:21:51 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2010-02-14 02:21:51 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2010-02-14 02:21:51 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2010-02-14 02:21:51 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2010-02-14 02:21:51 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2010-02-14 02:21:51 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2010-02-14 02:21:50 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2010-02-14 02:21:50 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2010-02-14 02:21:50 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2010-02-14 02:21:50 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2010-02-14 02:21:49 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2010-02-14 02:21:48 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2010-02-14 02:21:48 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2010-02-14 02:21:48 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2010-02-14 02:21:48 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2010-02-14 02:21:48 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2010-02-14 02:21:48 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2010-02-14 02:21:48 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2010-02-14 02:21:48 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2010-02-14 02:21:47 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2010-02-14 02:21:47 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2010-02-14 02:21:47 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2010-02-14 02:21:47 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2010-02-14 02:21:47 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2010-02-14 02:21:46 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2010-02-14 02:21:41 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2010-02-14 02:21:41 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2010-02-14 02:21:41 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2010-02-14 02:21:40 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2010-02-14 02:21:40 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2010-02-14 02:21:40 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2010-02-14 02:21:39 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2010-02-14 02:21:39 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2010-02-14 02:21:39 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2010-02-14 02:21:39 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2010-02-14 02:21:39 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2010-02-14 02:21:39 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2010-02-14 02:21:38 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2010-02-14 02:21:38 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2010-02-14 02:21:37 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2010-02-14 02:21:37 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2010-02-14 02:21:36 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2010-02-14 02:21:36 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2010-02-14 02:21:36 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2010-02-14 02:21:26 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2010-02-14 02:21:26 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2010-02-14 02:21:26 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2010-02-14 02:21:26 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2010-02-14 02:21:26 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2010-02-14 02:21:25 | 001,929,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2010-02-14 02:21:25 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2010-02-14 02:21:25 | 000,053,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2010-02-14 02:21:24 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2010-02-14 02:21:23 | 000,677,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstsc.exe
[2010-02-14 02:21:23 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2010-02-14 02:21:23 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2010-02-14 02:21:22 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2010-02-14 02:21:22 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2010-02-14 02:21:22 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2010-02-14 02:21:22 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2010-02-14 02:21:22 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2010-02-14 02:21:22 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2010-02-14 02:21:21 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2010-02-14 02:21:21 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2010-02-14 02:21:21 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2010-02-14 02:21:21 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2010-02-14 02:21:20 | 001,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2010-02-14 02:21:15 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2010-02-14 02:21:09 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2010-02-14 02:05:31 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010-02-13 19:05:47 | 000,087,751 | —- | C] (Agere Systems) – C:\WINDOWS\AGRSMMSG.exe
[2010-02-13 19:05:45 | 001,157,856 | —- | C] (Agere Systems) – C:\WINDOWS\System32\drivers\AGRSM.sys
[2010-02-13 19:05:45 | 000,058,880 | —- | C] (LT) – C:\WINDOWS\agrsmdel.exe
[2010-02-13 17:20:10 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2010-02-13 17:20:08 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\drivers\rtl8139.sys
[2010-02-13 17:19:50 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2010-02-13 17:19:41 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\battc.sys
[2010-02-13 17:18:28 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2010-02-13 17:18:27 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2010-02-13 17:18:27 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2010-02-13 17:18:25 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2010-02-13 17:18:23 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2010-02-13 17:18:23 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2010-02-13 17:18:22 | 000,000,000 | R–D | C] – C:\Program Files
[2010-02-13 17:18:22 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2010-02-13 17:18:22 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2010-02-13 17:18:19 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2010-02-13 17:18:19 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2010-02-13 17:18:19 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2010-02-13 17:18:19 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2010-02-13 17:18:19 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2010-02-13 17:18:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2010-02-13 17:18:17 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2010-02-13 17:18:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2010-02-13 17:18:14 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2010-02-13 17:18:14 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2010-02-13 17:18:14 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2010-02-13 17:18:14 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2010-02-13 17:18:14 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2010-02-13 17:18:14 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2010-02-13 17:18:14 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2010-02-13 17:18:14 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2010-02-13 17:18:14 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2010-02-13 17:18:14 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2010-02-13 17:18:14 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2010-02-13 17:18:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2010-02-13 17:18:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2010-02-13 17:18:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2010-02-13 17:18:13 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2010-02-13 17:18:13 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2010-02-13 17:18:13 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2010-02-13 17:18:13 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2010-02-13 17:18:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2010-02-13 17:18:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2010-02-13 17:18:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2010-02-13 17:18:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2010-02-13 17:18:12 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2010-02-13 17:18:12 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2010-02-13 17:18:10 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2010-02-13 17:18:10 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2010-02-13 17:18:10 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2010-02-13 17:18:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2010-02-13 17:18:10 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2010-02-13 17:18:10 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2010-02-13 17:18:10 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2010-02-13 17:18:10 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2010-02-13 17:18:10 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2010-02-13 17:18:10 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2010-02-13 17:18:07 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2010-02-13 17:18:07 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2010-02-13 17:18:07 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2010-02-13 17:18:07 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2010-02-13 17:18:07 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2010-02-13 17:18:07 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2010-02-13 17:18:07 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2010-02-13 17:18:07 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2010-02-13 17:18:07 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2010-02-13 17:18:07 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2010-02-13 17:18:06 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\olecli.dll
[2010-02-13 17:18:06 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2010-02-13 17:18:06 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\olesvr.dll
[2010-02-13 17:18:06 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2010-02-13 17:18:06 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tapi.dll
[2010-02-13 17:18:06 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2010-02-13 17:18:06 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wfwnet.drv
[2010-02-13 17:18:06 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2010-02-13 17:18:06 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ver.dll
[2010-02-13 17:18:06 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2010-02-13 17:18:06 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shell.dll
[2010-02-13 17:18:06 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2010-02-13 17:18:06 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\timer.drv
[2010-02-13 17:18:06 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2010-02-13 17:18:06 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\system.drv
[2010-02-13 17:18:06 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2010-02-13 17:18:06 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vga.drv
[2010-02-13 17:18:06 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2010-02-13 17:18:06 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sound.drv
[2010-02-13 17:18:06 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2010-02-13 17:18:05 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msvideo.dll
[2010-02-13 17:18:05 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2010-02-13 17:18:05 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciavi.drv
[2010-02-13 17:18:05 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2010-02-13 17:18:05 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\mmsystem.dll
[2010-02-13 17:18:05 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\commdlg.dll
[2010-02-13 17:18:05 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2010-02-13 17:18:05 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciwave.drv
[2010-02-13 17:18:05 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2010-02-13 17:18:05 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciseq.drv
[2010-02-13 17:18:05 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2010-02-13 17:18:05 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lzexpand.dll
[2010-02-13 17:18:05 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2010-02-13 17:18:05 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mouse.drv
[2010-02-13 17:18:05 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2010-02-13 17:18:05 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\keyboard.drv
[2010-02-13 17:18:05 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2010-02-13 17:18:05 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mmtask.tsk
[2010-02-13 17:18:05 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2010-02-13 17:18:04 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avifile.dll
[2010-02-13 17:18:04 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2010-02-13 17:18:04 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avicap.dll
[2010-02-13 17:18:04 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2010-02-13 17:18:04 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2010-02-13 17:18:04 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2010-02-13 17:18:04 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2010-02-13 17:18:03 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2010-02-13 17:18:03 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2010-02-13 17:17:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2010-02-13 17:17:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2010-02-13 17:17:53 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2010-02-13 17:17:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2010-02-13 17:17:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2010-02-13 17:17:37 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2010-02-13 17:17:37 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2010-02-13 17:17:31 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2010-02-13 17:17:31 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2010-02-13 17:17:05 | 000,000,000 | —D | C] – C:\Documents and Settings
[2010-02-13 15:50:18 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2010-02-13 15:50:18 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2010-02-13 15:50:18 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2010-02-13 15:50:18 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2010-02-13 15:50:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010-02-22 03:17:03 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010-02-22 03:16:59 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010-02-22 03:15:35 | 000,000,178 | -HS- | M] () – C:\Documents and Settings\BADDOG\ntuser.ini
[2010-02-22 01:06:31 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010-02-22 00:04:02 | 000,000,326 | —- | M] () – C:\WINDOWS\tasks\QC.job
[2010-02-22 00:03:47 | 000,112,584 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010-02-21 23:46:44 | 000,293,376 | —- | M] () – C:\Documents and Settings\BADDOG\Desktop\9zj0ftde.exe
[2010-02-21 23:32:21 | 000,524,288 | —- | M] () – C:\Documents and Settings\BADDOG\Desktop\dds.scr
[2010-02-21 22:15:55 | 000,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2010-02-21 22:15:17 | 000,000,615 | —- | M] () – C:\WINDOWS\win.ini
[2010-02-21 21:59:13 | 005,881,006 | -H– | M] () – C:\Documents and Settings\BADDOG\Local Settings\Application Data\IconCache.db
[2010-02-21 21:34:47 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010-02-21 21:34:47 | 000,000,749 | RH– | M] () – C:\WINDOWS\WindowsShell.Manifest
[2010-02-21 21:34:47 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2010-02-21 21:34:47 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2010-02-21 21:34:47 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2010-02-21 21:34:47 | 000,000,749 | RH– | M] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2010-02-21 14:04:37 | 000,356,120 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010-02-21 14:04:37 | 000,312,172 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010-02-21 14:04:37 | 000,040,394 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010-02-21 14:03:44 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2010-02-21 14:03:05 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010-02-21 13:16:46 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010-02-21 11:16:45 | 000,000,254 | -HS- | M] () – C:\boot.ini
[2010-02-21 11:06:32 | 000,549,376 | —- | M] (OldTimer Tools) – C:\Documents and Settings\BADDOG\Desktop\OTL.exe
[2010-02-21 10:59:26 | 001,310,720 | -H– | M] () – C:\Documents and Settings\BADDOG\NTUSER.DAT
[2010-02-21 10:59:10 | 000,005,945 | —- | M] () – C:\WINDOWS\System32\Config.MPF
[2010-02-19 18:34:55 | 000,002,919 | —- | M] () – C:\Documents and Settings\BADDOG\My Documents\Blair_Scott_963737_PSD New Hire.pdf
[2010-02-19 11:02:22 | 000,254,473 | —- | M] () – C:\Documents and Settings\BADDOG\My Documents\BLAIR PASSPORT APP 22 FEB 10.pdf
[2010-02-18 23:01:21 | 000,000,342 | —- | M] () – C:\WINDOWS\tasks\McDefragTask.job
[2010-02-18 23:01:19 | 000,000,334 | —- | M] () – C:\WINDOWS\tasks\McQcTask.job
[2010-02-18 06:48:29 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2010-02-14 14:56:33 | 000,013,104 | —- | M] () – C:\Documents and Settings\BADDOG\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010-02-14 03:37:35 | 000,025,065 | —- | M] () – C:\WINDOWS\System32\wmpscheme.xml
[2010-02-14 03:35:13 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2010-02-14 02:31:03 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2010-02-14 02:27:16 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2010-02-14 02:27:16 | 000,000,000 | —- | M] () – C:\WINDOWS\control.ini
[2010-02-14 02:27:13 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2010-02-14 02:27:13 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2010-02-14 02:27:12 | 000,299,552 | —- | M] () – C:\WINDOWS\WMSysPrx.prx
[2010-02-14 02:27:01 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2010-02-14 02:25:51 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2010-02-14 02:25:51 | 000,000,488 | RH– | M] () – C:\WINDOWS\System32\logonui.exe.manifest
[2010-02-14 02:23:01 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2010-02-14 02:22:46 | 000,000,037 | —- | M] () – C:\WINDOWS\vbaddin.ini
[2010-02-14 02:22:46 | 000,000,036 | —- | M] () – C:\WINDOWS\vb.ini
[2010-02-14 00:09:00 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2010-02-14 00:09:00 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010-02-14 00:09:00 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010-02-14 00:09:00 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2010-02-13 17:18:22 | 000,000,231 | —- | M] () – C:\WINDOWS\system.ini
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010-02-22 00:56:16 | 000,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2010-02-21 23:42:44 | 000,293,376 | —- | C] () – C:\Documents and Settings\BADDOG\Desktop\9zj0ftde.exe
[2010-02-21 23:31:29 | 000,524,288 | —- | C] () – C:\Documents and Settings\BADDOG\Desktop\dds.scr
[2010-02-21 22:15:54 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2010-02-21 20:33:44 | 000,000,326 | —- | C] () – C:\WINDOWS\tasks\QC.job
[2010-02-21 12:11:52 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2010-02-21 12:11:52 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2010-02-21 12:11:52 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2010-02-21 12:11:51 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2010-02-21 12:11:51 | 000,067,374 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2010-02-21 12:11:51 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2010-02-21 12:11:51 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2010-02-21 12:11:50 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2010-02-21 12:11:50 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2010-02-21 12:11:50 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2010-02-21 12:11:50 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2010-02-21 12:11:50 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2010-02-21 12:11:50 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2010-02-21 12:11:50 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2010-02-21 12:11:50 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2010-02-21 12:11:50 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2010-02-21 12:11:50 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2010-02-21 12:11:44 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2010-02-21 12:11:44 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2010-02-21 12:11:44 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2010-02-21 12:11:44 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2010-02-21 12:11:44 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2010-02-21 12:11:44 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2010-02-21 12:11:44 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2010-02-21 12:11:44 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2010-02-21 12:11:43 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2010-02-21 12:11:43 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2010-02-21 12:11:43 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2010-02-21 12:11:28 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2010-02-21 12:11:28 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2010-02-21 12:11:28 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2010-02-21 12:11:12 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2010-02-21 12:11:12 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2010-02-21 12:11:12 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2010-02-21 12:11:12 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2010-02-21 12:11:12 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2010-02-21 12:11:12 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2010-02-21 12:11:07 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2010-02-21 12:11:07 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2010-02-21 12:11:07 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2010-02-21 12:11:07 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2010-02-21 12:10:52 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2010-02-21 12:10:49 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2010-02-21 12:10:34 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2010-02-21 12:10:29 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2010-02-21 12:10:16 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2010-02-21 12:10:16 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2010-02-21 12:10:16 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2010-02-21 12:10:16 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2010-02-21 12:10:16 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2010-02-21 12:10:16 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2010-02-21 12:10:16 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2010-02-21 12:10:16 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2010-02-21 12:10:16 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2010-02-21 12:10:16 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2010-02-21 12:10:16 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2010-02-21 12:10:16 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2010-02-21 12:10:16 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2010-02-21 12:10:16 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2010-02-21 12:10:16 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2010-02-21 12:10:16 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2010-02-21 12:09:59 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2010-02-21 12:09:52 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2010-02-21 12:09:52 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2010-02-21 12:09:14 | 000,844,314 | —- | C] () – C:\WINDOWS\System32\dllcache\msdxm.ocx
[2010-02-21 12:09:14 | 000,004,126 | —- | C] () – C:\WINDOWS\System32\dllcache\msdxmlc.dll
[2010-02-21 12:09:05 | 000,097,117 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.hlp
[2010-02-21 12:09:05 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2010-02-21 12:09:05 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2010-02-21 12:09:05 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2010-02-21 12:09:05 | 000,001,885 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.cnt
[2010-02-21 12:08:54 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2010-02-21 12:08:12 | 000,000,974 | —- | C] () – C:\WINDOWS\System32\pid.inf
[2010-02-21 12:07:30 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2010-02-21 12:07:25 | 000,498,742 | —- | C] () – C:\WINDOWS\System32\dllcache\dxmasf.dll
[2010-02-21 12:07:04 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2010-02-21 12:07:04 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2010-02-21 12:07:04 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2010-02-21 12:07:04 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2010-02-21 12:07:02 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2010-02-21 12:07:01 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2010-02-21 12:07:01 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2010-02-21 12:07:01 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2010-02-21 12:06:59 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2010-02-21 12:06:59 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2010-02-21 12:06:51 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2010-02-19 18:34:55 | 000,002,919 | —- | C] () – C:\Documents and Settings\BADDOG\My Documents\Blair_Scott_963737_PSD New Hire.pdf
[2010-02-19 11:02:22 | 000,254,473 | —- | C] () – C:\Documents and Settings\BADDOG\My Documents\BLAIR PASSPORT APP 22 FEB 10.pdf
[2010-02-19 06:32:17 | 000,005,945 | —- | C] () – C:\WINDOWS\System32\Config.MPF
[2010-02-18 23:01:20 | 000,000,342 | —- | C] () – C:\WINDOWS\tasks\McDefragTask.job
[2010-02-18 23:01:18 | 000,000,334 | —- | C] () – C:\WINDOWS\tasks\McQcTask.job
[2010-02-17 00:18:08 | 000,008,050 | —- | C] () – C:\WINDOWS\System32\drivers\o2mmb.cat
[2010-02-17 00:18:08 | 000,002,548 | —- | C] () – C:\WINDOWS\System32\drivers\o2mmb.inf
[2010-02-17 00:16:11 | 000,141,016 | —- | C] () – C:\WINDOWS\System32\ALSNDMGR.WAV
[2010-02-17 00:11:49 | 000,063,399 | —- | C] () – C:\WINDOWS\System32\igfxhkor.lhp
[2010-02-17 00:11:49 | 000,061,249 | —- | C] () – C:\WINDOWS\System32\igfxhheb.lhp
[2010-02-17 00:11:49 | 000,060,407 | —- | C] () – C:\WINDOWS\System32\igfxhtha.lhp
[2010-02-17 00:11:49 | 000,059,369 | —- | C] () – C:\WINDOWS\System32\igfxhhun.lhp
[2010-02-17 00:11:49 | 000,058,791 | —- | C] () – C:\WINDOWS\System32\igfxhell.lhp
[2010-02-17 00:11:49 | 000,058,767 | —- | C] () – C:\WINDOWS\System32\igfxhrus.lhp
[2010-02-17 00:11:49 | 000,058,108 | —- | C] () – C:\WINDOWS\System32\igfxhplk.lhp
[2010-02-17 00:11:49 | 000,058,017 | —- | C] () – C:\WINDOWS\System32\igfxhdeu.lhp
[2010-02-17 00:11:49 | 000,057,858 | —- | C] () – C:\WINDOWS\System32\igfxhjpn.lhp
[2010-02-17 00:11:49 | 000,057,768 | —- | C] () – C:\WINDOWS\System32\igfxhtrk.lhp
[2010-02-17 00:11:49 | 000,057,762 | —- | C] () – C:\WINDOWS\System32\igfxhfin.lhp
[2010-02-17 00:11:49 | 000,057,452 | —- | C] () – C:\WINDOWS\System32\igfxhcsy.lhp
[2010-02-17 00:11:49 | 000,057,353 | —- | C] () – C:\WINDOWS\System32\igfxhnld.lhp
[2010-02-17 00:11:49 | 000,056,980 | —- | C] () – C:\WINDOWS\System32\igfxhesp.lhp
[2010-02-17 00:11:49 | 000,056,933 | —- | C] () – C:\WINDOWS\System32\igfxhdan.lhp
[2010-02-17 00:11:49 | 000,056,829 | —- | C] () – C:\WINDOWS\System32\igfxhfra.lhp
[2010-02-17 00:11:49 | 000,056,813 | —- | C] () – C:\WINDOWS\System32\igfxhnor.lhp
[2010-02-17 00:11:49 | 000,056,735 | —- | C] () – C:\WINDOWS\System32\igfxhfrc.lhp
[2010-02-17 00:11:49 | 000,056,649 | —- | C] () – C:\WINDOWS\System32\igfxhptg.lhp
[2010-02-17 00:11:49 | 000,056,636 | —- | C] () – C:\WINDOWS\System32\igfxhsve.lhp
[2010-02-17 00:11:49 | 000,056,548 | —- | C] () – C:\WINDOWS\System32\igfxhita.lhp
[2010-02-17 00:11:49 | 000,056,139 | —- | C] () – C:\WINDOWS\System32\igfxhcht.lhp
[2010-02-17 00:11:49 | 000,056,119 | —- | C] () – C:\WINDOWS\System32\igfxhptb.lhp
[2010-02-17 00:11:49 | 000,055,598 | —- | C] () – C:\WINDOWS\System32\igfxhara.lhp
[2010-02-17 00:11:49 | 000,055,582 | —- | C] () – C:\WINDOWS\System32\igfxharb.lhp
[2010-02-17 00:11:49 | 000,055,426 | —- | C] () – C:\WINDOWS\System32\igfxhchs.lhp
[2010-02-17 00:11:49 | 000,055,186 | —- | C] () – C:\WINDOWS\System32\igfxheng.lhp
[2010-02-17 00:11:49 | 000,055,002 | —- | C] () – C:\WINDOWS\System32\igfxhenu.lhp
[2010-02-17 00:11:28 | 000,000,013 | —- | C] () – C:\WINDOWS\System32\drivers\WLANver.tic
[2010-02-14 03:56:48 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2010-02-14 03:55:51 | 000,164,352 | —- | C] () – C:\WINDOWS\System32\wstpager.ax
[2010-02-14 03:55:51 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\vbicodec.ax
[2010-02-14 03:55:50 | 000,239,616 | —- | C] () – C:\WINDOWS\System32\wstrenderer.ax
[2010-02-14 03:55:44 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2010-02-14 03:55:43 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010-02-14 03:55:42 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2010-02-14 03:55:37 | 000,848,384 | —- | C] () – C:\WINDOWS\System32\ir41_32.ax
[2010-02-14 03:55:37 | 000,755,200 | —- | C] () – C:\WINDOWS\System32\ir50_32.dll
[2010-02-14 03:55:37 | 000,338,432 | —- | C] () – C:\WINDOWS\System32\ir41_qcx.dll
[2010-02-14 03:55:37 | 000,200,192 | —- | C] () – C:\WINDOWS\System32\ir50_qc.dll
[2010-02-14 03:55:37 | 000,120,320 | —- | C] () – C:\WINDOWS\System32\ir41_qc.dll
[2010-02-14 03:55:36 | 000,183,808 | —- | C] () – C:\WINDOWS\System32\ir50_qcx.dll
[2010-02-14 03:55:36 | 000,118,272 | —- | C] () – C:\WINDOWS\System32\mpeg2data.ax
[2010-02-14 03:37:26 | 000,000,178 | -HS- | C] () – C:\Documents and Settings\BADDOG\ntuser.ini
[2010-02-14 03:37:24 | 001,310,720 | -H– | C] () – C:\Documents and Settings\BADDOG\NTUSER.DAT
[2010-02-14 03:35:13 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2010-02-14 02:31:03 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2010-02-14 02:30:09 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010-02-14 02:29:42 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010-02-14 02:29:31 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2010-02-14 02:29:30 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010-02-14 02:29:26 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2010-02-14 02:29:02 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010-02-14 02:28:49 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2010-02-14 02:28:27 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2010-02-14 02:27:16 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2010-02-14 02:27:14 | 000,025,065 | —- | C] () – C:\WINDOWS\System32\wmpscheme.xml
[2010-02-14 02:27:13 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2010-02-14 02:27:13 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2010-02-14 02:27:12 | 000,299,552 | —- | C] () – C:\WINDOWS\WMSysPrx.prx
[2010-02-14 02:25:51 | 000,000,488 | RH– | C] () – C:\WINDOWS\System32\WindowsLogon.manifest
[2010-02-14 02:25:51 | 000,000,488 | RH– | C] () – C:\WINDOWS\System32\logonui.exe.manifest
[2010-02-14 02:25:44 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010-02-14 02:25:44 | 000,000,749 | RH– | C] () – C:\WINDOWS\WindowsShell.Manifest
[2010-02-14 02:25:44 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\sapi.cpl.manifest
[2010-02-14 02:25:44 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\nwc.cpl.manifest
[2010-02-14 02:25:44 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\ncpa.cpl.manifest
[2010-02-14 02:25:44 | 000,000,749 | RH– | C] () – C:\WINDOWS\System32\cdplayer.exe.manifest
[2010-02-14 02:25:23 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2010-02-14 02:24:30 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2010-02-14 02:24:29 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2010-02-14 02:24:22 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2010-02-14 02:23:02 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2010-02-14 02:21:57 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2010-02-14 02:21:57 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2010-02-14 02:21:57 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2010-02-14 02:21:57 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2010-02-14 02:21:57 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2010-02-14 02:21:57 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2010-02-14 02:21:57 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2010-02-14 02:21:56 | 000,093,702 | —- | C] () – C:\WINDOWS\System32\subrange.uce
[2010-02-14 02:21:56 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2010-02-14 02:21:56 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2010-02-14 02:21:56 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2010-02-14 02:21:56 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2010-02-14 02:21:55 | 000,060,458 | —- | C] () – C:\WINDOWS\System32\ideograf.uce
[2010-02-14 02:21:55 | 000,024,006 | —- | C] () – C:\WINDOWS\System32\gb2312.uce
[2010-02-14 02:21:55 | 000,022,984 | —- | C] () – C:\WINDOWS\System32\bopomofo.uce
[2010-02-14 02:21:55 | 000,016,740 | —- | C] () – C:\WINDOWS\System32\shiftjis.uce
[2010-02-14 02:21:55 | 000,012,876 | —- | C] () – C:\WINDOWS\System32\korean.uce
[2010-02-14 02:21:55 | 000,008,484 | —- | C] () – C:\WINDOWS\System32\kanji_2.uce
[2010-02-14 02:21:55 | 000,006,948 | —- | C] () – C:\WINDOWS\System32\kanji_1.uce
[2010-02-14 02:21:52 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2010-02-14 02:21:52 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2010-02-14 02:21:50 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2010-02-14 02:21:36 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2010-02-14 00:09:00 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2010-02-14 00:09:00 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2010-02-14 00:09:00 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2010-02-14 00:09:00 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2010-02-13 17:18:25 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2010-02-13 17:18:25 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2010-02-13 17:18:24 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010-02-13 17:18:23 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010-02-13 17:18:21 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_28603.nls
[2010-02-13 17:18:19 | 000,066,594 | —- | C] () – C:\WINDOWS\System32\c_857.nls
[2010-02-13 17:18:19 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_28599.nls
[2010-02-13 17:18:19 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_10081.nls
[2010-02-13 17:18:17 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\C_28595.NLS
[2010-02-13 17:18:17 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_10017.nls
[2010-02-13 17:18:16 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_10007.nls
[2010-02-13 17:18:14 | 000,066,594 | —- | C] () – C:\WINDOWS\System32\c_869.nls
[2010-02-13 17:18:14 | 000,066,594 | —- | C] () – C:\WINDOWS\System32\c_737.nls
[2010-02-13 17:18:14 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_875.nls
[2010-02-13 17:18:14 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\C_28597.NLS
[2010-02-13 17:18:14 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_10006.nls
[2010-02-13 17:18:12 | 000,066,594 | —- | C] () – C:\WINDOWS\System32\c_866.nls
[2010-02-13 17:18:12 | 000,066,594 | —- | C] () – C:\WINDOWS\System32\c_855.nls
[2010-02-13 17:18:12 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\C_28594.NLS
[2010-02-13 17:18:10 | 000,066,594 | —- | C] () – C:\WINDOWS\System32\c_852.nls
[2010-02-13 17:18:10 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_10082.nls
[2010-02-13 17:18:10 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_10029.nls
[2010-02-13 17:18:10 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_10010.nls
[2010-02-13 17:18:08 | 000,066,082 | —- | C] () – C:\WINDOWS\System32\c_20127.nls
[2010-02-13 17:18:04 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2010-02-13 17:17:53 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2010-02-13 17:17:53 | 000,021,281 | —- | C] () – C:\WINDOWS\System32\dllcache\XMLDSOC.CAT
[2010-02-13 17:17:53 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010-02-13 17:17:53 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010-02-13 17:17:53 | 000,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010-02-13 17:17:52 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010-02-13 17:17:52 | 000,657,548 | —- | C] () – C:\WINDOWS\System32\dllcache\CLASSES.CAT
[2010-02-13 17:17:52 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010-02-13 17:17:52 | 000,390,168 | —- | C] () – C:\WINDOWS\System32\dllcache\WFC.CAT
[2010-02-13 17:17:52 | 000,056,081 | —- | C] () – C:\WINDOWS\System32\dllcache\DAJAVAC.CAT
[2010-02-13 17:17:52 | 000,052,311 | —- | C] () – C:\WINDOWS\System32\dllcache\DX3.CAT
[2010-02-13 17:17:52 | 000,022,151 | —- | C] () – C:\WINDOWS\System32\dllcache\TCLASSES.CAT
[2010-02-13 17:17:52 | 000,014,031 | —- | C] () – C:\WINDOWS\System32\dllcache\MSJDBC.CAT
[2010-02-13 17:17:04 | 000,112,584 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010-02-13 15:57:10 | 000,000,254 | -HS- | C] () – C:\boot.ini
[2010-02-13 15:57:06 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2003-01-07 15:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
< End of report >
Post #10
Extras;

OTL Extras logfile created on: 21-Feb-10 11:06:41 - Run 1
OTL by OldTimer - Version 3.1.30.1 Folder = C:\Documents and Settings\BADDOG\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: dd-MMM-yy

502.00 Mb Total Physical Memory | 180.00 Mb Available Physical Memory | 36.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 68.36 Gb Total Space | 60.73 Gb Free Space | 88.83% Space Free | Partition Type: NTFS
Drive D: | 6.17 Gb Total Space | 3.17 Gb Free Space | 51.47% Space Free | Partition Type: NTFS
Drive E: | 120.30 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 465.65 Gb Total Space | 231.04 Gb Free Space | 49.62% Space Free | Partition Type: FAT32
Drive G: | 1.95 Gb Total Space | 1.92 Gb Free Space | 98.36% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: LIFEBOOK
Current User Name: BADDOG
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = htmlfile] – C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe" = C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent – (McAfee, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{49FA793C-785E-47E9-93DF-BD442B0B45D1}" = McAfee Virtual Technician
"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Extreme Graphics Driver
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{97AA0C55-AFAD-4126-B21C-F1318FB6DADA}" = Realtek RTL8139/810x Fast Ethernet NIC Driver Setup
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.1
"{B6F09A48-BDB7-4426-92C4-2BD3850B00A6}" = O2Micro SmartCardBus MultiMediaBay Windows Driver Installer
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe AIR" = Adobe AIR
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Agere Systems Soft Modem" = Agere Systems AC'97 Modem
"CCleaner" = CCleaner
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"MSC" = McAfee SecurityCenter
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"VLC media player" = VLC media player 1.0.5
"Windows XP Service Pack" = Windows XP Service Pack 3

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 19-Feb-10 21:56:00 | Computer Name = LIFEBOOK | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 6.0.2900.2180, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 21-Feb-10 19:28:37 | Computer Name = LIFEBOOK | Source = Application Error | ID = 1005
Description = Windows cannot access the file E:\Eseries.exe for one of the following
reasons: there is a problem with the network connection, the disk that the file
is stored on, or the storage drivers installed on this computer; or the disk is
missing. Windows closed the program Macromedia Flash Player 8.0 r22 because of
this error. Program: Macromedia Flash Player 8.0 r22 File: E:\Eseries.exe The error
value is listed in the Additional Data section. User Action 1. Open the file again.
This situation might be a temporary problem that corrects itself when the program
runs again. 2. If the file still cannot be accessed and - It is on the network, your
network administrator should verify that there is not a problem with the network
and that the server can be contacted. - It is on a removable disk, for example,
a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3.
Check and repair the file system by running CHKDSK. To run CHKDSK, click Start,
click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F,
and then press ENTER. 4. If the problem persists, restore the file from a backup
copy. 5. Determine whether other files on the same disk can be opened. If not, the
disk might be damaged. If it is a hard disk, contact your administrator or computer
hardware vendor for further assistance. Additional Data Error value: C0000010 Disk
type: 5

Error - 21-Feb-10 19:28:50 | Computer Name = LIFEBOOK | Source = Application Error | ID = 1000
Description = Faulting application Eseries.exe, version 8.0.22.0, faulting module
Eseries.exe, version 8.0.22.0, fault address 0x000d1410.

Error - 21-Feb-10 22:18:06 | Computer Name = LIFEBOOK | Source = Application Error | ID = 1000
Description = Faulting application iesetup.exe, version 0.0.0.0, faulting module
shlwapi.dll, version 6.0.2900.5912, fault address 0x000066fd.

Error - 21-Feb-10 22:18:19 | Computer Name = LIFEBOOK | Source = Application Error | ID = 1000
Description = Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
dbghelp.dll, version 5.1.2600.5512, fault address 0x0001295d.

Error - 21-Feb-10 22:21:27 | Computer Name = LIFEBOOK | Source = Application Hang | ID = 1002
Description = Hanging application iesetup.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 21-Feb-10 22:21:28 | Computer Name = LIFEBOOK | Source = Application Hang | ID = 1002
Description = Hanging application iesetup.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 21-Feb-10 22:21:36 | Computer Name = LIFEBOOK | Source = Application Hang | ID = 1002
Description = Hanging application iesetup.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 21-Feb-10 22:21:37 | Computer Name = LIFEBOOK | Source = Application Hang | ID = 1002
Description = Hanging application iesetup.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 21-Feb-10 22:56:29 | Computer Name = LIFEBOOK | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 21-Feb-10 21:42:01 | Computer Name = LIFEBOOK | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.

Error - 21-Feb-10 21:43:35 | Computer Name = LIFEBOOK | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.

Error - 21-Feb-10 22:21:47 | Computer Name = LIFEBOOK | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Windows Internet Explorer 7 for Windows XP.

Error - 21-Feb-10 22:59:40 | Computer Name = LIFEBOOK | Source = DCOM | ID = 10010
Description = The server {6A972E27-93E2-4F98-8367-4101B2073814} did not register
with DCOM within the required timeout.

Error - 22-Feb-10 04:15:46 | Computer Name = LIFEBOOK | Source = DCOM | ID = 10010
Description = The server {6A972E27-93E2-4F98-8367-4101B2073814} did not register
with DCOM within the required timeout.

Error - 22-Feb-10 08:54:42 | Computer Name = LIFEBOOK | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 10.71.0.105 on
the Network Card with network address 0004234F07D8.

Error - 22-Feb-10 10:48:08 | Computer Name = LIFEBOOK | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 0004234F07D8. The following
error occurred: %%1223. Your computer will continue to try and obtain an address
on its own from the network address (DHCP) server.

Error - 22-Feb-10 10:54:42 | Computer Name = LIFEBOOK | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
GIDGET2 that believes that it is the master browser for the domain on transport
NetBT_Tcpip_{FBBE1157-34A3-4C95-9. The master browser is stopping or an election
is being forced.

Error - 22-Feb-10 11:34:31 | Computer Name = LIFEBOOK | Source = W32Time | ID = 39452706
Description = The time service has detected that the system time needs to be changed
by -86386 seconds. The time service will not change the system time by more than
-54000 seconds. Verify that your time and time zone are correct, and that the time
source time.windows.com (ntp.m|0x1|10.71.0.105:123->207.46.197.32:123) is working
properly.

Error - 21-Feb-10 11:49:01 | Computer Name = LIFEBOOK | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
ACERNETBOOK that believes that it is the master browser for the domain on transport
NetBT_Tcpip_{FBBE1157-34A3-4C. The master browser is stopping or an election is
being forced.


< End of report >
Post #11
Hello.

Glad, that's fixed. Let's get a Malwarebytes scan.

Download and run MalwareBytes Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
  • Make sure you are connected to the Internet.
  • Double-click on Download_mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

For complete or visual instructions on installing and running Malwarebytes Anti-Malware please read this link
Post #12 last edited
all right, i'm on it… Malwarebytes' Anti-Malware 1.44 Database version: 3772 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.13 21-Feb-10 20:19:40 mbam-log-2010-02-21 (20-19-40).txt Scan type: Quick Scan Objects scanned: 111043 Time elapsed: 9 minute(s), 0 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 2 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
Post #13
Okay, I'll need to wake up early tomorrow, so I'll need to do some of my personal work and therefore I'll check up on this tomorrow evening.
Post #15
Good. Let's get an online scan.

Run ESET Online Scan

  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the [external image: Posted Image] icon on your desktop.
  • Check [external image: Posted Image]
  • Click the [external image: Posted Image] button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the [external image: Posted Image] button.
  • Push [external image: Posted Image]
You can refer to this animation by neomage if needed.

Take a new DDS run afterward and post back with both the DDS and Attach logs in your next reply. Also, let me know how your computer is running and if you have any more problems, issues or symptoms left.

Thanks.

With Regards,
Extremeboy

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI