[Closed] maax slow laptop

Malwarebytes' Anti-Malware 1.44 Database version: 3776 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18882 2/22/2010 12:13:21 PM mbam-log-2010-02-22 (12-13-21).txt Scan type: Quick Scan Objects scanned: 108326 Time elapsed: 6 minute(s), 27 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 18 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) DDS (Ver_09-06-26.01) - NTFSx86 Run by [removed] at 12:38:40.86 on Mon 02/22/2010 Internet Explorer: 8.0.6001.18882 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.958.149 [GMT -5:00] SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\system32\icardagtr.exe C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\rundll32.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Windows\system32\WLANExt.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost.exe -k bthsvcs C:\Windows\system32\svchost.exe -k hpdevmgmt C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\Event Agent\bin\spoolsv .exe C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\system32\SearchIndexer.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\taskeng.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Windows\system32\Event Agent\bin\services .exe C:\Windows\system32\Event Agent\lsass .exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Windows\system32\svchost.exe -k HPService C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\RKS Fax\rksfax_control.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\WINDOWS\System32\rundll32.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\System32\Event Agent\Bin\smss .exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\WINDOWS\ehome\ehtray.exe C:\Program Files\HP Connections\6811507\Program\HP Connections.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\Windows Sidebar\sidebar.exe c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\SearchProtocolHost.exe C:\Users\Stella\Desktop\dds.scr C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ uSearch Page = hxxp://www.google.com uSearch Bar = hxxp://www.google.com/ie uDefault_Search_URL = hxxp://www.google.com/ie mStart Page = hxxp://www.yahoo.com mDefault_Page_URL = hxxp://www.yahoo.com uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: BrowserConnector Object: {b24a5f3c-e1d2-4ee6-8a3f-4b19d0daf1a2} - c:\windows\system32\cdrtcw.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [Search Protection] c:\program files\yahoo!\search protection\SearchProtection.exe mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start mRun: [HP Health Check Scheduler] c:\program files\hewlett-packard\hp health check\HPHC_Scheduler.exe mRun: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe mRun: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [RKS Fax Print Controller] "c:\program files\rks fax\rksfax_control.exe" mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe" mRun: [WinampAgent] "c:\program files\winamp\winampa.exe" mRun: [CCLite] c:\windows\system32\event agent\ea.exe mRun: [Event Agent] c:\windows\system32\event agent\bin\smss .exe mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe StartupFolder: c:\users\stella\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpconn~1.lnk - c:\program files\hp connections\6811507\program\HP Connections.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office10\EXCEL.EXE/3000 IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} - file:///C:/Program%20Files/Bejeweled%202/Images/armhelper.ocx DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: Event Agent - CustomEvents.dll AppInit_DLLs: c:\windows\system32\iscsidscc.dll ============= SERVICES / DRIVERS =============== R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-3-4 114768] R1 lrimsptsk;System kernel configuration (iWecsvc);c:\windows\system32\KEYBOARDD.SYS [2010-2-10 38656] R1 vSpooler;Remote Procedure Call RT4s (BNTDS);c:\windows\system32\clfso.sys [2010-2-10 24576] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-3-4 20560] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2009-3-4 53328] R2 System Event Agent;System Event Agent;c:\windows\system32\event agent\bin\spoolsv .exe [2007-12-8 102400] R2 TeamViewer5;TeamViewer 5;c:\program files\teamviewer\version5\TeamViewer_Service.exe [2010-2-11 172328] R2 TrustedInstallerk;System kernel integrity service (wudfsvcD);c:\windows\system32\icardagtr.exe [2010-2-10 276480] R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\common files\microsoft shared\windows live\WLIDSVC.EXE [2009-8-18 1529728] S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-8-29 21504] =============== Created Last 30 ================ 2010-02-22 12:29 73,728 a——- c:\windows\system32\WOEM_3_2awoem.tmp 2010-02-22 12:04 –d—– c:\users\stella\appdata\roaming\Malwarebytes 2010-02-22 12:04 38,224 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2010-02-22 12:04 19,160 a——- c:\windows\system32\drivers\mbam.sys 2010-02-22 12:04 –d—– c:\programdata\Malwarebytes 2010-02-22 12:04 –d—– c:\program files\Malwarebytes' Anti-Malware 2010-02-22 12:04 –d—– c:\progra~2\Malwarebytes 2010-02-21 11:30 –d—– c:\programdata\muvee Technologies 2010-02-20 17:26 107,368 a——- c:\windows\system32\GEARAspi.dll 2010-02-20 17:26 26,600 a——- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-02-20 17:25 –d—– c:\program files\iPod 2010-02-20 17:25 –d—– c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD} 2010-02-20 17:25 –d—– c:\program files\iTunes 2010-02-20 17:25 –d—– c:\progra~2\{755AC846-7372-4AC8-8550-C52491DAA8BD} 2010-02-20 17:23 –d—– c:\program files\Bonjour 2010-02-20 17:22 –d—– c:\programdata\Apple Computer 2010-02-20 17:18 –d—– c:\programdata\Apple 2010-02-14 20:27 –d—– c:\program files\TeamViewer 2010-02-10 17:36 0 a——- c:\windows\system32\sysdnc.dat 2010-02-10 10:45 105,984 a——- c:\windows\system32\drivers\mrxsmb.sys 2010-02-10 10:45 212,992 a——- c:\windows\system32\drivers\mrxsmb10.sys 2010-02-10 10:45 302,080 a——- c:\windows\system32\drivers\srv.sys 2010-02-10 10:45 98,816 a——- c:\windows\system32\drivers\srvnet.sys 2010-02-10 10:44 3,600,456 a——- c:\windows\system32\ntkrnlpa.exe 2010-02-10 10:44 3,548,216 a——- c:\windows\system32\ntoskrnl.exe 2010-02-10 10:44 904,776 a——- c:\windows\system32\drivers\tcpip.sys 2010-02-10 10:43 30,720 a——- c:\windows\system32\drivers\tcpipreg.sys 2010-02-10 10:43 1,314,816 a——- c:\windows\system32\quartz.dll 2010-02-10 10:43 31,744 a——- c:\windows\system32\msvidc32.dll 2010-02-10 10:43 22,528 a——- c:\windows\system32\msyuv.dll 2010-02-10 10:43 13,312 a——- c:\windows\system32\msrle32.dll 2010-02-10 10:43 12,288 a——- c:\windows\system32\tsbyuv.dll 2010-02-10 10:43 50,176 a——- c:\windows\system32\iyuv_32.dll 2010-02-10 10:43 123,904 a——- c:\windows\system32\msvfw32.dll 2010-02-10 10:43 82,944 a——- c:\windows\system32\mciavi32.dll 2010-02-10 10:43 91,136 a——- c:\windows\system32\avifil32.dll 2010-02-10 10:32 9,662 a——- c:\windows\system32\sentrylite.ico 2010-02-10 10:32 52 a——- c:\windows\system32\suntfs.nfx 2010-02-10 10:28 8,528 a——- c:\windows\system32\spnetrm.nfx 2010-02-10 10:28 8,528 a——- c:\windows\system32\sbnetkey.sys 2010-02-09 11:36 –d—– c:\program files\Microsoft 2010-02-03 02:26 –d—– c:\programdata\WindowsSearch 2010-02-02 12:30 –d—– c:\programdata\Yahoo! 2010-02-01 12:25 –d—– C:\Temp 2010-02-01 12:23 –d—– c:\program files\coolpro2 2010-02-01 11:38 –d—– c:\program files\common files\xing shared 2010-02-01 11:38 –d—– c:\program files\common files\Real 2010-02-01 11:38 –d—– c:\programdata\Real 2010-01-29 14:23 –d—– c:\windows\pss 2010-01-27 14:01 737,280 a——- c:\windows\iun6002.exe 2010-01-27 14:01 –d—– c:\program files\TriKaraoke 2010-01-27 13:41 –d—– c:\program files\KaraFun 2010-01-27 13:06 93,176 a——- c:\windows\system32\GDIPFONTCACHEV1.DAT 2010-01-26 22:48 23,113 a——- c:\windows\hpqins15.dat 2010-01-26 22:46 –d—– c:\programdata\HP Product Assistant 2010-01-26 22:44 77,377 a——- c:\windows\hpqins05.dat 2010-01-26 13:52 445 a——- c:\windows\system32\bootservice.config 2010-01-26 13:50 49 —-h— C:\POPMENU.BAT 2010-01-26 13:50 –d-h— c:\windows\system32\Event Agent ==================== Find3M ==================== 2010-02-21 11:43 145,556 a——- c:\programdata\nvModes.dat 2010-02-21 11:43 145,556 a——- c:\progra~2\nvModes.dat 2010-02-20 17:20 143,360 a——- c:\windows\inf\infstrng.dat 2010-02-20 17:20 86,016 a——- c:\windows\inf\infstor.dat 2010-02-20 17:20 51,200 a——- c:\windows\inf\infpub.dat 2010-02-10 10:32 8,528 a——- c:\windows\system32\secrd.dat 2010-01-19 22:47 665,600 a——- c:\windows\inf\drvindex.dat 2010-01-19 22:47 0 a—h— c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf 2010-01-19 22:47 0 a—h— c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf 2010-01-14 11:12 181,120 ——– c:\windows\system32\MpSigStub.exe 2010-01-02 01:38 916,480 a——- c:\windows\system32\wininet.dll 2010-01-02 01:32 109,056 a——- c:\windows\system32\iesysprep.dll 2010-01-02 01:32 71,680 a——- c:\windows\system32\iesetup.dll 2010-01-01 23:57 133,632 a——- c:\windows\system32\ieUnatt.exe 2009-06-02 04:52 59,504 a——- c:\users\stella\appdata\roaming\nvModes.dat 2008-09-15 07:06 92,792 a——- c:\users\stella\appdata\roaming\GDIPFONTCACHEV1.DAT 2008-08-31 04:46 174 a–sh— c:\program files\desktop.ini 2008-08-26 16:20 56 a—h— c:\programdata\ezsidmv.dat 2008-08-26 16:20 56 a—h— c:\progra~2\ezsidmv.dat 2006-11-02 07:42 287,440 a——- c:\windows\inf\perflib\0409\perfi.dat 2006-11-02 07:42 287,440 a——- c:\windows\inf\perflib\0409\perfh.dat 2006-11-02 07:42 30,674 a——- c:\windows\inf\perflib\0409\perfd.dat 2006-11-02 07:42 30,674 a——- c:\windows\inf\perflib\0409\perfc.dat 2006-11-02 04:20 287,440 a——- c:\windows\inf\perflib\0000\perfi.dat 2006-11-02 04:20 287,440 a——- c:\windows\inf\perflib\0000\perfh.dat 2006-11-02 04:20 30,674 a——- c:\windows\inf\perflib\0000\perfd.dat 2006-11-02 04:20 30,674 a——- c:\windows\inf\perflib\0000\perfc.dat 2009-04-14 12:22 245,760 a–sh— c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\ietldcache\index.dat 2009-10-14 15:25 245,760 a–sh— c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\windows\ietldcache\index.dat ============= FINISH: 12:41:21.89 ===============