What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Start up error

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Everytime my windows booted up IE will open a link, but showing a blank page.

[external image: Posted Image]

Is it a Virus ?

Please advice … thanks ..
Post #2
:welcome:

Not sure about that, it could be good or bad ?


Please download ATF Cleaner by Atribune to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.
Your system may start up slower after running ATF Cleaner, this is expected but will be back to normal after the first or second boot up
Please note: If you use online banking or are registered online with any other organizations, ensure you have memorized password and other personal information as removing cookies will temporarily disable the auto-login facility.






Please download Malwarebytes from Here or Here

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Post the report please








  • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open. Please post the contents of both log.txt (<info.txt (<
Post #3
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 3937

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

3/31/2010 11:00:46 PM
mbam-log-2010-03-31 (23-00-46).txt

Scan type: Quick scan
Objects scanned: 107639
Time elapsed: 5 minute(s), 31 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

********************************************************************************
***************************************************************

Log.txt
Logfile of random's system information tool 1.06 (written by random/random)
Run by [removed] at 2010-03-31 23:02:55
Microsoft Windows XP Professional Service Pack 3
System drive C: has 16 GB (42%) free of 38 GB
Total RAM: 1270 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:03:20 PM, on 3/31/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\HPQ\shared\hpqwmi.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Adrian\My Documents\Downloads\Programs\RSIT.exe
C:\Program Files\trend micro\Adrian.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://m.sg.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O1 - Hosts: 74.208.10.249 gs.apple.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [hpWirelessAssistant] "%ProgramFiles%\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Adrian\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Global Startup: tracker.html
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1268929946250
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.0…oUploader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

–
End of file - 10082 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1644491937-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1644491937-725345543-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2009-09-09 173488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2008-12-25 1674752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-21 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-21 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2008-12-25 1674752]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-11-10 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-02-15 141608]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-05-14 2029640]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2003-03-31 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2003-03-31 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2003-03-31 455168]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-11-05 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-01-15 1418536]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2004-11-05 233534]
"eabconfg.cpl"=C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe [2004-12-03 290816]
"hpWirelessAssistant"=C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe [2005-01-21 790528]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2005-07-19 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-07-19 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-07-19 114688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-03-30 437584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Documents and Settings\Adrian\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-19 136176]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2009-09-17 3118512]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"ccleaner"=C:\Program Files\CCleaner\CCleaner.exe [2010-02-25 1771320]
"RoboForm"=C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2010-03-28 160592]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
tracker.html

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-07-19 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e7110812-3679-11df-9b6e-00c09f9d65b7}]
shell\AutoRun\command - E:\AutoRun.exe


======List of files/folders created in the last 1 months======

2010-03-31 23:02:56 —-D—- C:\Program Files\trend micro
2010-03-31 23:02:55 —-D—- C:\rsit
2010-03-31 22:53:56 —-D—- C:\Documents and Settings\Adrian\Application Data\Malwarebytes
2010-03-31 22:53:49 —-D—- C:\Program Files\Malwarebytes' Anti-Malware
2010-03-31 22:53:49 —-D—- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-03-31 22:37:14 —-D—- C:\WINDOWS\LastGood
2010-03-31 22:36:24 —-A—- C:\WINDOWS\system32\SETF.tmp
2010-03-31 22:36:24 —-A—- C:\WINDOWS\system32\SETE.tmp
2010-03-31 22:36:23 —-N—- C:\WINDOWS\system32\SET13.tmp
2010-03-31 22:36:22 —-A—- C:\WINDOWS\system32\SET9.tmp
2010-03-31 22:36:18 —-A—- C:\WINDOWS\system32\SET12.tmp
2010-03-31 22:36:17 —-A—- C:\WINDOWS\system32\SETA.tmp
2010-03-31 22:36:13 —-A—- C:\WINDOWS\system32\SETD.tmp
2010-03-30 20:14:56 —-D—- C:\Program Files\Windows Live Safety Center
2010-03-29 23:19:29 —-D—- C:\Program Files\FMS
2010-03-28 00:22:54 —-D—- C:\Documents and Settings\All Users\Application Data\RoboForm
2010-03-28 00:22:26 —-D—- C:\Program Files\Siber Systems
2010-03-25 22:39:01 —-D—- C:\Documents and Settings\Adrian\Application Data\Mozilla
2010-03-25 22:38:50 —-D—- C:\Program Files\Mozilla Firefox
2010-03-24 18:16:09 —-D—- C:\Documents and Settings\Adrian\Application Data\skypePM
2010-03-24 18:15:34 —-D—- C:\Documents and Settings\Adrian\Application Data\Skype
2010-03-24 18:15:06 —-D—- C:\Program Files\Common Files\Skype
2010-03-24 18:14:59 —-RD—- C:\Program Files\Skype
2010-03-24 18:14:52 —-D—- C:\Documents and Settings\All Users\Application Data\Skype
2010-03-23 22:29:39 —-A—- C:\WINDOWS\UnDeploy.exe
2010-03-22 22:53:26 —-D—- C:\WINDOWS\Sun
2010-03-22 22:39:34 —-D—- C:\Documents and Settings\Adrian\Application Data\Google
2010-03-21 23:46:03 —-D—- C:\Program Files\WinSCP
2010-03-21 23:36:00 —-D—- C:\Program Files\NJStar Chinese WP
2010-03-21 23:31:32 —-D—- C:\Documents and Settings\Adrian\Application Data\NJStar
2010-03-21 23:31:15 —-D—- C:\Program Files\NJStar Japanese WP
2010-03-21 22:02:58 —-A—- C:\WINDOWS\system32\igfxres.dll
2010-03-21 21:59:44 —-D—- C:\Program Files\SP36691
2010-03-21 21:56:00 —-N—- C:\WINDOWS\system32\spmsgXP_2k3.dll
2010-03-21 21:55:50 —-HDC—- C:\WINDOWS\$NtUninstallWdf01007$
2010-03-21 21:55:13 —-A—- C:\WINDOWS\system32\SynTPCo4.dll
2010-03-21 21:55:11 —-A—- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2010-03-21 21:49:23 —-A—- C:\WINDOWS\system32\bcmwlcoi.dll
2010-03-21 21:49:21 —-D—- C:\Program Files\Broadcom
2010-03-21 21:49:21 —-A—- C:\WINDOWS\BCMWLU00.txt
2010-03-21 21:34:14 —-HDC—- C:\WINDOWS\$NtUninstallKB956744$
2010-03-21 21:33:58 —-HDC—- C:\WINDOWS\$NtUninstallKB951978$
2010-03-21 18:04:23 —-D—- C:\Documents and Settings\Adrian\Application Data\Real
2010-03-21 18:04:08 —-A—- C:\WINDOWS\system32\rmoc3260.dll
2010-03-21 18:04:08 —-A—- C:\WINDOWS\system32\pndx5032.dll
2010-03-21 18:04:08 —-A—- C:\WINDOWS\system32\pndx5016.dll
2010-03-21 18:04:08 —-A—- C:\WINDOWS\system32\pncrt.dll
2010-03-21 18:04:02 —-D—- C:\Program Files\Real Alternative
2010-03-21 17:38:50 —-D—- C:\WINDOWS\Prefetch
2010-03-21 17:29:28 —-HDC—- C:\WINDOWS\$NtUninstallKB978706$
2010-03-21 17:29:14 —-HDC—- C:\WINDOWS\$NtUninstallKB978251$
2010-03-21 17:29:00 —-HDC—- C:\WINDOWS\$NtUninstallKB978037$
2010-03-21 17:28:49 —-HDC—- C:\WINDOWS\$NtUninstallKB977914$
2010-03-21 17:28:36 —-HDC—- C:\WINDOWS\$NtUninstallKB977165-v2$
2010-03-21 17:28:10 —-HDC—- C:\WINDOWS\$NtUninstallKB975713$
2010-03-21 17:27:55 —-HDC—- C:\WINDOWS\$NtUninstallKB975561$
2010-03-21 17:27:45 —-HDC—- C:\WINDOWS\$NtUninstallKB975560$
2010-03-21 17:27:29 —-HDC—- C:\WINDOWS\$NtUninstallKB975467$
2010-03-21 17:27:19 —-HDC—- C:\WINDOWS\$NtUninstallKB975025$
2010-03-21 17:27:05 —-HDC—- C:\WINDOWS\$NtUninstallKB974571$
2010-03-21 17:26:55 —-HDC—- C:\WINDOWS\$NtUninstallKB974392$
2010-03-21 17:26:40 —-HDC—- C:\WINDOWS\$NtUninstallKB974318$
2010-03-21 17:26:26 —-HDC—- C:\WINDOWS\$NtUninstallKB974112$
2010-03-21 17:26:15 —-HDC—- C:\WINDOWS\$NtUninstallKB973869$
2010-03-21 17:26:03 —-HDC—- C:\WINDOWS\$NtUninstallKB973815$
2010-03-21 17:25:50 —-HDC—- C:\WINDOWS\$NtUninstallKB973687$
2010-03-21 17:25:40 —-HDC—- C:\WINDOWS\$NtUninstallKB973507$
2010-03-21 17:25:27 —-HDC—- C:\WINDOWS\$NtUninstallKB973354$
2010-03-21 17:25:12 —-HDC—- C:\WINDOWS\$NtUninstallKB972270$
2010-03-21 17:25:00 —-HDC—- C:\WINDOWS\$NtUninstallKB971737$
2010-03-21 17:24:42 —-HDC—- C:\WINDOWS\$NtUninstallKB971657$
2010-03-21 17:23:49 —-HDC—- C:\WINDOWS\$NtUninstallKB971468$
2010-03-21 17:23:30 —-HDC—- C:\WINDOWS\$NtUninstallKB970430$
2010-03-21 17:23:16 —-HDC—- C:\WINDOWS\$NtUninstallKB970238$
2010-03-21 17:23:05 —-HDC—- C:\WINDOWS\$NtUninstallKB969947$
2010-03-21 17:22:53 —-HDC—- C:\WINDOWS\$NtUninstallKB969059$
2010-03-21 17:22:39 —-HDC—- C:\WINDOWS\$NtUninstallKB968389$
2010-03-21 17:22:21 —-HDC—- C:\WINDOWS\$NtUninstallKB967715$
2010-03-21 17:22:06 —-HDC—- C:\WINDOWS\$NtUninstallKB961503$
2010-03-21 17:21:55 —-HDC—- C:\WINDOWS\$NtUninstallKB961501$
2010-03-21 17:21:29 —-HDC—- C:\WINDOWS\$NtUninstallKB961118$
2010-03-21 17:21:18 —-HDC—- C:\WINDOWS\$NtUninstallKB960859$
2010-03-21 17:21:07 —-HDC—- C:\WINDOWS\$NtUninstallKB960803$
2010-03-21 17:20:55 —-HDC—- C:\WINDOWS\$NtUninstallKB960225$
2010-03-21 17:20:42 —-HDC—- C:\WINDOWS\$NtUninstallKB959426$
2010-03-21 17:20:30 —-HDC—- C:\WINDOWS\$NtUninstallKB958644$
2010-03-21 17:20:21 —-HDC—- C:\WINDOWS\$NtUninstallKB956844$
2010-03-21 17:20:08 —-HDC—- C:\WINDOWS\$NtUninstallKB956803$
2010-03-21 17:19:56 —-HDC—- C:\WINDOWS\$NtUninstallKB956802$
2010-03-21 17:19:39 —-HDC—- C:\WINDOWS\$NtUninstallKB956572$
2010-03-21 17:19:23 —-HDC—- C:\WINDOWS\$NtUninstallKB955759$
2010-03-21 17:19:12 —-HDC—- C:\WINDOWS\$NtUninstallKB973687_1$
2010-03-21 17:19:02 —-HDC—- C:\WINDOWS\$NtUninstallKB955069$
2010-03-21 17:18:51 —-HDC—- C:\WINDOWS\$NtUninstallKB952954$
2010-03-21 17:18:41 —-HDC—- C:\WINDOWS\$NtUninstallKB952287$
2010-03-21 17:18:30 —-HDC—- C:\WINDOWS\$NtUninstallKB952004$
2010-03-21 17:18:18 —-HDC—- C:\WINDOWS\$NtUninstallKB951748$
2010-03-21 17:18:05 —-HDC—- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-03-21 17:17:54 —-HDC—- C:\WINDOWS\$NtUninstallKB951066$
2010-03-21 17:17:40 —-HDC—- C:\WINDOWS\$NtUninstallKB950974$
2010-03-21 17:17:30 —-HDC—- C:\WINDOWS\$NtUninstallKB950762$
2010-03-21 17:17:17 —-HDC—- C:\WINDOWS\$NtUninstallKB946648$
2010-03-21 17:16:56 —-HDC—- C:\WINDOWS\$NtUninstallKB923561$
2010-03-21 17:10:00 —-A—- C:\WINDOWS\system32\msxml6r.dll
2010-03-21 17:09:48 —-N—- C:\WINDOWS\system32\smtpapi.dll
2010-03-21 17:09:48 —-N—- C:\WINDOWS\system32\rwnh.dll
2010-03-21 17:09:45 —-N—- C:\WINDOWS\system32\aaclient.dll
2010-03-21 17:09:44 —-N—- C:\WINDOWS\system32\credssp.dll
2010-03-21 17:09:44 —-N—- C:\WINDOWS\system32\bitsprx4.dll
2010-03-21 17:09:44 —-N—- C:\WINDOWS\system32\azroles.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eapsvc.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eapqec.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eappprxy.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eapphost.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eappgnui.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eappcfg.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eapp3hst.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\eapolqec.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dot3ui.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dot3svc.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dot3msm.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dot3gpclnt.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dot3dlg.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dot3cfg.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dot3api.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dimsroam.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dimsntfy.dll
2010-03-21 17:09:43 —-N—- C:\WINDOWS\system32\dhcpqec.dll
2010-03-21 17:09:41 —-N—- C:\WINDOWS\system32\ieencode.dll
2010-03-21 17:09:40 —-N—- C:\WINDOWS\system32\kbdpash.dll
2010-03-21 17:09:40 —-N—- C:\WINDOWS\system32\kbdnepr.dll
2010-03-21 17:09:40 —-N—- C:\WINDOWS\system32\kbdiultn.dll
2010-03-21 17:09:40 —-N—- C:\WINDOWS\system32\kbdbhc.dll
2010-03-21 17:09:39 —-N—- C:\WINDOWS\system32\mmcperf.exe
2010-03-21 17:09:39 —-N—- C:\WINDOWS\system32\mmcfxcommon.dll
2010-03-21 17:09:39 —-N—- C:\WINDOWS\system32\mmcex.dll
2010-03-21 17:09:39 —-N—- C:\WINDOWS\system32\microsoft.managementconsole.dll
2010-03-21 17:09:39 —-N—- C:\WINDOWS\system32\l2gpstore.dll
2010-03-21 17:09:39 —-N—- C:\WINDOWS\system32\kmsvc.dll
2010-03-21 17:09:38 —-N—- C:\WINDOWS\system32\onex.dll
2010-03-21 17:09:38 —-N—- C:\WINDOWS\system32\napstat.exe
2010-03-21 17:09:38 —-N—- C:\WINDOWS\system32\napmontr.dll
2010-03-21 17:09:38 —-N—- C:\WINDOWS\system32\napipsec.dll
2010-03-21 17:09:38 —-N—- C:\WINDOWS\system32\msshavmsg.dll
2010-03-21 17:09:38 —-N—- C:\WINDOWS\system32\mssha.dll
2010-03-21 17:09:37 —-N—- C:\WINDOWS\system32\rhttpaa.dll
2010-03-21 17:09:37 —-N—- C:\WINDOWS\system32\rasqec.dll
2010-03-21 17:09:37 —-N—- C:\WINDOWS\system32\qutil.dll
2010-03-21 17:09:37 —-N—- C:\WINDOWS\system32\qcliprov.dll
2010-03-21 17:09:37 —-N—- C:\WINDOWS\system32\qagentrt.dll
2010-03-21 17:09:37 —-N—- C:\WINDOWS\system32\qagent.dll
2010-03-21 17:09:36 —-N—- C:\WINDOWS\system32\setupn.exe
2010-03-21 17:09:33 —-N—- C:\WINDOWS\system32\verclsid.exe
2010-03-21 17:09:33 —-N—- C:\WINDOWS\system32\tspkg.dll
2010-03-21 17:09:33 —-N—- C:\WINDOWS\system32\tsgqec.dll
2010-03-21 17:09:32 —-N—- C:\WINDOWS\system32\wlanapi.dll
2010-03-21 17:09:29 —-D—- C:\WINDOWS\system32\scripting
2010-03-21 17:09:27 —-D—- C:\WINDOWS\l2schemas
2010-03-21 17:09:26 —-D—- C:\WINDOWS\system32\en
2010-03-21 16:57:54 —-D—- C:\WINDOWS\network diagnostic
2010-03-21 16:55:22 —-A—- C:\WINDOWS\005709_.tmp
2010-03-21 16:24:56 —-A—- C:\WINDOWS\system32\muweb.dll
2010-03-21 16:24:56 —-A—- C:\WINDOWS\system32\mucltui.dll.mui
2010-03-21 16:24:56 —-A—- C:\WINDOWS\system32\mucltui.dll
2010-03-21 03:35:55 —-HDC—- C:\WINDOWS\$NtUninstallKB961118_0$
2010-03-21 03:34:26 —-HDC—- C:\WINDOWS\$NtUninstallKB925720$
2010-03-21 03:27:27 —-D—- C:\Documents and Settings\Adrian\Application Data\Yahoo!
2010-03-21 03:26:40 —-D—- C:\Documents and Settings\All Users\Application Data\Yahoo!
2010-03-21 03:22:10 —-D—- C:\Program Files\Yahoo!
2010-03-21 03:05:28 —-D—- C:\WINDOWS\system32\XPSViewer
2010-03-21 03:05:23 —-D—- C:\Program Files\MSBuild
2010-03-21 03:05:13 —-D—- C:\Program Files\Reference Assemblies
2010-03-21 03:04:48 —-N—- C:\WINDOWS\system32\prntvpt.dll
2010-03-21 03:04:47 —-N—- C:\WINDOWS\system32\xpsshhdr.dll
2010-03-21 03:04:46 —-N—- C:\WINDOWS\system32\xpssvcs.dll
2010-03-21 03:04:46 —-D—- C:\43a5f4f0b6145d2adb40ba53
2010-03-21 03:01:42 —-HDC—- C:\WINDOWS\$NtUninstallWIC$
2010-03-21 03:01:34 —-D—- C:\Program Files\MSXML 6.0
2010-03-21 02:53:46 —-D—- C:\Documents and Settings\Adrian\Application Data\Media Player Classic
2010-03-21 02:53:02 —-A—- C:\WINDOWS\system32\unrar.dll
2010-03-21 02:53:00 —-A—- C:\WINDOWS\avisplitter.ini
2010-03-21 02:52:49 —-A—- C:\WINDOWS\system32\yv12vfw.dll
2010-03-21 02:52:48 —-A—- C:\WINDOWS\system32\xvidvfw.dll
2010-03-21 02:52:48 —-A—- C:\WINDOWS\system32\xvidcore.dll
2010-03-21 02:52:37 —-A—- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-03-21 02:52:37 —-A—- C:\WINDOWS\system32\ff_vfw.dll
2010-03-21 02:52:31 —-D—- C:\Program Files\K-Lite Codec Pack
2010-03-21 02:41:42 —-HDC—- C:\WINDOWS\$NtUninstallKB941569$
2010-03-21 02:09:57 —-HDC—- C:\WINDOWS\$NtUninstallKB961503_0$
2010-03-21 02:09:46 —-D—- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2010-03-21 02:08:48 —-HDC—- C:\WINDOWS\$NtUninstallKB901190$
2010-03-21 02:00:48 —-D—- C:\Program Files\Common Files\NetDragon
2010-03-21 01:22:14 —-D—- C:\Documents and Settings\Adrian\Application Data\Leadertech
2010-03-21 01:20:37 —-D—- C:\Documents and Settings\All Users\Application Data\hpqwmi
2010-03-21 01:17:28 —-D—- C:\Program Files\Hewlett-Packard
2010-03-21 01:17:27 —-D—- C:\Program Files\Hp
2010-03-21 01:17:14 —-D—- C:\WINDOWS\Hewlett-Packard
2010-03-21 01:16:59 —-D—- C:\Program Files\Intel
2010-03-21 01:14:50 —-A—- C:\WINDOWS\system32\wmpns.dll
2010-03-21 01:13:26 —-D—- C:\WINDOWS\RegisteredPackages
2010-03-21 01:12:13 —-A—- C:\WINDOWS\system32\javaws.exe
2010-03-21 01:12:13 —-A—- C:\WINDOWS\system32\javaw.exe
2010-03-21 01:12:13 —-A—- C:\WINDOWS\system32\java.exe
2010-03-21 01:11:41 —-D—- C:\Program Files\Common Files\Java
2010-03-21 01:11:20 —-D—- C:\Program Files\Common Files\SureThing Shared
2010-03-21 01:11:13 —-D—- C:\Documents and Settings\All Users\Application Data\InstallShield
2010-03-21 01:09:20 —-D—- C:\Program Files\Sonic
2010-03-21 01:07:31 —-D—- C:\Program Files\Common Files\Sonic Shared
2010-03-21 01:06:14 —-HDC—- C:\WINDOWS\$NtUninstallKB891781$
2010-03-21 01:05:38 —-HDC—- C:\WINDOWS\$NtUninstallKB890175$
2010-03-21 01:05:01 —-HDC—- C:\WINDOWS\$NtUninstallKB890047$
2010-03-21 01:04:25 —-HDC—- C:\WINDOWS\$NtUninstallKB888302$
2010-03-21 01:03:51 —-HDC—- C:\WINDOWS\$NtUninstallKB888113$
2010-03-21 01:03:19 —-HDC—- C:\WINDOWS\$NtUninstallKB887472$
2010-03-21 01:02:47 —-HDC—- C:\WINDOWS\$NtUninstallKB886185$
2010-03-21 01:02:13 —-HDC—- C:\WINDOWS\$NtUninstallKB885884$
2010-03-21 01:01:41 —-HDC—- C:\WINDOWS\$NtUninstallKB885836$
2010-03-21 01:01:07 —-HDC—- C:\WINDOWS\$NtUninstallKB885835$
2010-03-21 01:00:32 —-HDC—- C:\WINDOWS\$NtUninstallKB885250$
2010-03-21 00:59:58 —-HDC—- C:\WINDOWS\$NtUninstallKB873339$
2010-03-21 00:59:24 —-HDC—- C:\WINDOWS\$NtUninstallKB873333$
2010-03-21 00:57:56 —-HDC—- C:\WINDOWS\$NtUninstallKB885464$
2010-03-21 00:57:31 —-D—- C:\swsetup
2010-03-21 00:57:22 —-HDC—- C:\WINDOWS\$NtUninstallKB888239$
2010-03-21 00:56:52 —-HDC—- C:\WINDOWS\$NtUninstallKB885855$
2010-03-21 00:56:14 —-HDC—- C:\WINDOWS\$NtUninstallKB884575$
2010-03-21 00:54:55 —-A—- C:\WINDOWS\system32\hpqPres.dll
2010-03-21 00:54:55 —-A—- C:\WINDOWS\system32\hpqactn.dll
2010-03-21 00:54:55 —-A—- C:\WINDOWS\system32\eabhbrn8.dll
2010-03-21 00:54:55 —-A—- C:\WINDOWS\system32\cpqinfo.dll
2010-03-21 00:53:58 —-D—- C:\Program Files\muvee Technologies
2010-03-21 00:53:58 —-D—- C:\Program Files\Common Files\muvee Technologies
2010-03-21 00:53:38 —-D—- C:\Documents and Settings\All Users\Application Data\muvee Technologies
2010-03-21 00:52:34 —-D—- C:\WINDOWS\Downloaded Installations
2010-03-21 00:49:35 —-A—- C:\WINDOWS\system32\oeminfo.ini
2010-03-21 00:47:38 —-A—- C:\WINDOWS\system32\IVIresizeW7.dll
2010-03-21 00:47:38 —-A—- C:\WINDOWS\system32\IVIresizePX.dll
2010-03-21 00:47:38 —-A—- C:\WINDOWS\system32\IVIresizeP6.dll
2010-03-21 00:47:38 —-A—- C:\WINDOWS\system32\IVIresizeM6.dll
2010-03-21 00:47:38 —-A—- C:\WINDOWS\system32\IVIresizeA6.dll
2010-03-21 00:47:38 —-A—- C:\WINDOWS\system32\IVIresize.dll
2010-03-21 00:47:21 —-D—- C:\Program Files\InterVideo
2010-03-21 00:43:07 —-RSD—- C:\WINDOWS\assembly
2010-03-21 00:43:07 —-D—- C:\WINDOWS\Microsoft.NET
2010-03-21 00:43:05 —-D—- C:\WINDOWS\system32\URTTemp
2010-03-21 00:42:18 —-D—- C:\Documents and Settings\All Users\Application Data\Adobe
2010-03-21 00:42:04 —-D—- C:\Program Files\Adobe
2010-03-21 00:41:56 —-D—- C:\Program Files\HPQ
2010-03-21 00:41:47 —-A—- C:\adobelog.txt
2010-03-21 00:41:30 —-A—- C:\WINDOWS\system32\deploytk.dll
2010-03-21 00:40:57 —-N—- C:\WINDOWS\system32\bcmwlu00.EXE
2010-03-21 00:40:53 —-D—- C:\Program Files\Java
2010-03-21 00:39:37 —-D—- C:\Documents and Settings\Adrian\Application Data\Sun
2010-03-21 00:36:03 —-RA—- C:\WINDOWS\system32\iAlmCoIn_v4020.dll
2010-03-21 00:36:01 —-RA—- C:\WINDOWS\system32\ialmgdev.dll
2010-03-21 00:35:59 —-RA—- C:\WINDOWS\system32\ialmgicd.dll
2010-03-21 00:35:58 —-A—- C:\WINDOWS\system32\igfxexps.dll
2010-03-21 00:35:58 —-A—- C:\WINDOWS\system32\ialmrem.dll
2010-03-21 00:35:57 —-A—- C:\WINDOWS\system32\igfxext.exe
2010-03-21 00:35:27 —-A—- C:\WINDOWS\system32\igfxress.dll
2010-03-21 00:35:26 —-A—- C:\WINDOWS\system32\hkcmd.exe
2010-03-21 00:35:25 —-A—- C:\WINDOWS\system32\igfxzoom.exe
2010-03-21 00:35:25 —-A—- C:\WINDOWS\system32\igfxtray.exe
2010-03-21 00:35:24 —-A—- C:\WINDOWS\system32\igfxdo.dll
2010-03-21 00:35:23 —-A—- C:\WINDOWS\system32\igfxdev.dll
2010-03-21 00:35:21 —-A—- C:\WINDOWS\system32\igfxcfg.exe
2010-03-21 00:35:19 —-A—- C:\WINDOWS\system32\igfxsrvc.dll
2010-03-21 00:35:19 —-A—- C:\WINDOWS\system32\igfxpph.dll
2010-03-21 00:35:18 —-A—- C:\WINDOWS\system32\oemdspif.dll
2010-03-21 00:35:18 —-A—- C:\WINDOWS\system32\ialmdev5.dll
2010-03-21 00:35:18 —-A—- C:\WINDOWS\system32\ialmdd5.dll
2010-03-21 00:35:18 —-A—- C:\WINDOWS\system32\hccutils.dll
2010-03-21 00:35:17 —-A—- C:\WINDOWS\system32\ialmrnt5.dll
2010-03-21 00:35:17 —-A—- C:\WINDOWS\system32\ialmdnt5.dll
2010-03-21 00:33:37 —-A—- C:\WINDOWS\system32\SynTPFcs.dll
2010-03-21 00:33:35 —-A—- C:\WINDOWS\system32\SynTPAPI.dll
2010-03-21 00:33:33 —-A—- C:\WINDOWS\system32\SynCtrl.dll
2010-03-21 00:33:33 —-A—- C:\WINDOWS\system32\SynCOM.dll
2010-03-21 00:33:29 —-D—- C:\Program Files\Synaptics
2010-03-21 00:31:01 —-A—- C:\WINDOWS\system32\CAUDINST.dll
2010-03-21 00:31:01 —-A—- C:\WINDOWS\ciaunwdm.exe
2010-03-21 00:30:58 —-A—- C:\WINDOWS\system32\ksuser.dll
2010-03-21 00:30:18 —-D—- C:\Program Files\CONEXANT
2010-03-21 00:30:03 —-A—- C:\WINDOWS\system32\hsfci012.dll
2010-03-21 00:15:18 —-D—- C:\Program Files\CCleaner
2010-03-21 00:13:52 —-D—- C:\Documents and Settings\Adrian\Application Data\Adobe
2010-03-20 23:51:56 —-D—- C:\Documents and Settings\Adrian\Application Data\Symantec
2010-03-20 23:50:42 —-A—- C:\WINDOWS\system32\capicom.dll
2010-03-20 23:50:36 —-D—- C:\Program Files\Symantec
2010-03-20 23:50:22 —-D—- C:\Documents and Settings\All Users\Application Data\Symantec
2010-03-20 23:50:08 —-D—- C:\Program Files\Common Files\Symantec Shared
2010-03-20 23:49:38 —-D—- C:\WINDOWS\OPTIONS
2010-03-20 23:48:04 —-D—- C:\Program Files\Common Files\InstallShield
2010-03-20 23:46:32 —-D—- C:\SYSTEM.SAV
2010-03-20 23:40:31 —-A—- C:\WINDOWS\system32\chtbrkr.dll
2010-03-20 23:40:31 —-A—- C:\WINDOWS\system32\chsbrkr.dll
2010-03-20 23:40:29 —-A—- C:\WINDOWS\system32\korwbrkr.dll
2010-03-20 23:40:27 —-A—- C:\WINDOWS\system32\msir3jp.dll
2010-03-20 23:39:56 —-A—- C:\WINDOWS\system32\c_g18030.dll
2010-03-20 23:39:55 —-A—- C:\WINDOWS\system32\kbd101a.dll
2010-03-20 23:39:38 —-A—- C:\WINDOWS\system32\kbdnecNT.dll
2010-03-20 23:39:38 —-A—- C:\WINDOWS\system32\kbdnecAT.dll
2010-03-20 23:39:38 —-A—- C:\WINDOWS\system32\kbdnec95.dll
2010-03-20 23:39:38 —-A—- C:\WINDOWS\system32\kbdlk41j.dll
2010-03-20 23:39:38 —-A—- C:\WINDOWS\system32\kbdlk41a.dll
2010-03-20 23:39:37 —-A—- C:\WINDOWS\system32\kbdibm02.dll
2010-03-20 23:39:37 —-A—- C:\WINDOWS\system32\kbdax2.dll
2010-03-20 23:39:37 —-A—- C:\WINDOWS\system32\kbd106n.dll
2010-03-20 23:39:37 —-A—- C:\WINDOWS\system32\kbd101.dll
2010-03-20 23:39:37 —-A—- C:\WINDOWS\system32\f3ahvoas.dll
2010-03-20 23:39:01 —-A—- C:\WINDOWS\system32\c_is2022.dll
2010-03-20 23:37:54 —-A—- C:\WINDOWS\system32\kbdkor.dll
2010-03-20 23:37:54 —-A—- C:\WINDOWS\system32\kbdjpn.dll
2010-03-20 23:37:54 —-A—- C:\WINDOWS\system32\kbd106.dll
2010-03-20 23:37:54 —-A—- C:\WINDOWS\system32\kbd103.dll
2010-03-20 23:37:54 —-A—- C:\WINDOWS\system32\kbd101c.dll
2010-03-20 23:37:53 —-A—- C:\WINDOWS\system32\kbd101b.dll
2010-03-20 23:16:44 —-D—- C:\Documents and Settings\Adrian\Application Data\Macromedia
2010-03-20 23:14:47 —-D—- C:\Program Files\Microsoft
2010-03-20 23:14:28 —-D—- C:\Program Files\Windows Live SkyDrive
2010-03-20 23:14:04 —-D—- C:\Program Files\Windows Live
2010-03-20 23:08:21 —-D—- C:\Program Files\Common Files\Windows Live
2010-03-20 18:38:49 —-HDC—- C:\WINDOWS\$NtUninstallKB970430_0$
2010-03-20 18:37:32 —-D—- C:\WINDOWS\ie8updates
2010-03-20 18:37:00 —-D—- C:\WINDOWS\WBEM
2010-03-20 18:35:13 —-HDC—- C:\WINDOWS\ie8
2010-03-20 18:35:13 —-D—- C:\WINDOWS\system32\en-US
2010-03-20 18:18:59 —-A—- C:\WINDOWS\system32\MRT.exe
2010-03-20 18:18:45 —-HDC—- C:\WINDOWS\$NtUninstallKB971737_0$
2010-03-20 18:17:09 —-D—- C:\Program Files\NetDragon
2010-03-20 18:17:07 —-HD—- C:\Program Files\InstallShield Installation Information
2010-03-20 18:16:46 —-D—- C:\Documents and Settings\Adrian\Application Data\InstallShield
2010-03-20 16:46:20 —-D—- C:\Documents and Settings\Adrian\Application Data\IDM
2010-03-20 16:46:12 —-D—- C:\Documents and Settings\Adrian\Application Data\DMCache
2010-03-20 16:46:08 —-D—- C:\Program Files\Internet Download Manager
2010-03-20 16:43:15 —-D—- C:\Documents and Settings\Adrian\Application Data\WinRAR
2010-03-20 16:43:05 —-D—- C:\WINDOWS\WinRAR
2010-03-20 16:43:05 —-D—- C:\Program Files\WinRAR
2010-03-20 16:37:28 —-D—- C:\Program Files\ESET
2010-03-20 16:37:28 —-D—- C:\Documents and Settings\All Users\Application Data\ESET
2010-03-20 16:37:14 —-A—- C:\WINDOWS\system32\ptpusb.dll
2010-03-20 16:37:13 —-A—- C:\WINDOWS\system32\ptpusd.dll
2010-03-20 16:32:53 —-SHD—- C:\RECYCLER
2010-03-19 06:13:07 —-A—- C:\WINDOWS\system32\h323log.txt
2010-03-19 06:09:58 —-A—- C:\WINDOWS\system32\usbui.dll
2010-03-19 06:08:42 —-A—- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-19 06:08:41 —-D—- C:\Program Files\Common Files\ODBC
2010-03-19 06:08:41 —-A—- C:\WINDOWS\ODBCINST.INI
2010-03-19 06:08:37 —-RD—- C:\Program Files
2010-03-19 06:08:37 —-D—- C:\Program Files\Common Files\SpeechEngines
2010-03-19 06:08:37 —-D—- C:\Program Files\Common Files\Microsoft Shared
2010-03-19 06:08:37 —-D—- C:\Program Files\Common Files
2010-03-19 06:08:35 —-RA—- C:\WINDOWS\system32\kbdazel.dll
2010-03-19 06:08:34 —-RA—- C:\WINDOWS\system32\kbdtuq.dll
2010-03-19 06:08:34 —-RA—- C:\WINDOWS\system32\kbdtuf.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbdycc.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbduzb.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbdur.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbdtat.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbdmon.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbdkyr.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbdkaz.dll
2010-03-19 06:08:33 —-RA—- C:\WINDOWS\system32\kbdaze.dll
2010-03-19 06:08:32 —-RA—- C:\WINDOWS\system32\kbdru1.dll
2010-03-19 06:08:32 —-RA—- C:\WINDOWS\system32\kbdru.dll
2010-03-19 06:08:32 —-RA—- C:\WINDOWS\system32\kbdbu.dll
2010-03-19 06:08:32 —-RA—- C:\WINDOWS\system32\kbdblr.dll
2010-03-19 06:08:31 —-RA—- C:\WINDOWS\system32\kbdhept.dll
2010-03-19 06:08:31 —-RA—- C:\WINDOWS\system32\kbdhela3.dll
2010-03-19 06:08:31 —-RA—- C:\WINDOWS\system32\kbdhela2.dll
2010-03-19 06:08:31 —-RA—- C:\WINDOWS\system32\kbdhe319.dll
2010-03-19 06:08:31 —-RA—- C:\WINDOWS\system32\kbdhe220.dll
2010-03-19 06:08:31 —-RA—- C:\WINDOWS\system32\kbdhe.dll
2010-03-19 06:08:31 —-RA—- C:\WINDOWS\system32\kbdgkl.dll
2010-03-19 06:08:29 —-RA—- C:\WINDOWS\system32\kbdlv1.dll
2010-03-19 06:08:29 —-RA—- C:\WINDOWS\system32\kbdlv.dll
2010-03-19 06:08:29 —-RA—- C:\WINDOWS\system32\kbdlt1.dll
2010-03-19 06:08:29 —-RA—- C:\WINDOWS\system32\kbdlt.dll
2010-03-19 06:08:29 —-RA—- C:\WINDOWS\system32\kbdest.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdycl.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdsl1.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdsl.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdro.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdpl1.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdpl.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdhu1.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdhu.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdcz2.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdcz1.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdcz.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\kbdcr.dll
2010-03-19 06:08:27 —-RA—- C:\WINDOWS\system32\KBDAL.DLL
2010-03-19 06:08:25 —-A—- C:\WINDOWS\system32\irclass.dll
2010-03-19 06:08:25 —-A—- C:\WINDOWS\system32\dgsetup.dll
2010-03-19 06:08:25 —-A—- C:\WINDOWS\system32\dgrpsetu.dll
2010-03-19 06:08:24 —-A—- C:\WINDOWS\system32\spxcoins.dll
2010-03-19 06:08:24 —-A—- C:\WINDOWS\system32\EqnClass.Dll
2010-03-19 06:08:22 —-N—- C:\WINDOWS\system32\CONFIG.TMP
2010-03-19 06:08:22 —-A—- C:\WINDOWS\TASKMAN.EXE
2010-03-19 06:08:22 —-A—- C:\WINDOWS\system32\batt.dll
2010-03-19 06:08:22 —-A—- C:\WINDOWS\notepad.exe
2010-03-19 06:08:21 —-A—- C:\WINDOWS\system32\storprop.dll
2010-03-19 06:08:12 —-ASH—- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-03-19 06:08:09 —-RA—- C:\WINDOWS\SET7.tmp
2010-03-19 06:08:06 —-RA—- C:\WINDOWS\SET3.tmp
2010-03-19 06:07:57 —-D—- C:\WINDOWS\system32\CatRoot2
2010-03-19 06:07:57 —-D—- C:\WINDOWS\system32\CatRoot
2010-03-19 06:07:51 —-SD—- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-03-19 06:07:22 —-D—- C:\Documents and Settings
2010-03-19 06:06:30 —-RASH—- C:\boot.ini
2010-03-19 06:02:26 —-RSHDC—- C:\WINDOWS\system32\dllcache
2010-03-19 06:02:26 —-RSD—- C:\WINDOWS\Fonts
2010-03-19 06:02:26 —-RD—- C:\WINDOWS\Web
2010-03-19 06:02:26 —-HD—- C:\WINDOWS\inf
2010-03-19 06:02:26 —-D—- C:\WINDOWS\WinSxS
2010-03-19 06:02:26 —-D—- C:\WINDOWS\twain_32
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Temp
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\wins
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\wbem
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\usmt
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\spool
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\ShellExt
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\Setup
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\ras
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\oobe
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\npp
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\mui
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\inetsrv
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\IME
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\icsxml
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\ias
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\export
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\drivers
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\dhcp
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\config
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\3com_dmi
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\3076
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\2052
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1054
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1042
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1041
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1037
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1033
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1031
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1028
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32\1025
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system32
2010-03-19 06:02:26 —-D—- C:\WINDOWS\system
2010-03-19 06:02:26 —-D—- C:\WINDOWS\security
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Resources
2010-03-19 06:02:26 —-D—- C:\WINDOWS\repair
2010-03-19 06:02:26 —-D—- C:\WINDOWS\mui
2010-03-19 06:02:26 —-D—- C:\WINDOWS\msapps
2010-03-19 06:02:26 —-D—- C:\WINDOWS\msagent
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Media
2010-03-19 06:02:26 —-D—- C:\WINDOWS\java
2010-03-19 06:02:26 —-D—- C:\WINDOWS\ime
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Help
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Driver Cache
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Debug
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Cursors
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Connection Wizard
2010-03-19 06:02:26 —-D—- C:\WINDOWS\Config
2010-03-19 06:02:26 —-D—- C:\WINDOWS\AppPatch
2010-03-19 06:02:26 —-D—- C:\WINDOWS\addins
2010-03-19 06:02:26 —-D—- C:\WINDOWS
2010-03-19 01:42:56 —-HDC—- C:\WINDOWS\$NtUninstallKB978262$
2010-03-19 01:42:51 —-HDC—- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2010-03-19 01:42:46 —-HDC—- C:\WINDOWS\$NtUninstallKB952954_0$
2010-03-19 01:42:40 —-HDC—- C:\WINDOWS\$NtUninstallKB959426_0$
2010-03-19 01:42:35 —-HDC—- C:\WINDOWS\$NtUninstallKB946648_0$
2010-03-19 01:42:29 —-HDC—- C:\WINDOWS\$NtUninstallKB956803_0$
2010-03-19 01:42:25 —-HDC—- C:\WINDOWS\$NtUninstallKB960859_0$
2010-03-19 01:42:19 —-HDC—- C:\WINDOWS\$NtUninstallKB971468_0$
2010-03-19 01:42:03 —-HDC—- C:\WINDOWS\$NtUninstallKB978207$
2010-03-19 01:41:58 —-HDC—- C:\WINDOWS\$NtUninstallKB958869$
2010-03-19 01:41:53 —-HDC—- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-03-19 01:41:48 —-HDC—- C:\WINDOWS\$NtUninstallKB955759_0$
2010-03-19 01:41:26 —-HDC—- C:\WINDOWS\$NtUninstallKB974318_0$
2010-03-19 01:41:21 —-HDC—- C:\WINDOWS\$NtUninstallKB969059_0$
2010-03-19 01:41:15 —-HDC—- C:\WINDOWS\$NtUninstallKB950974_0$
2010-03-19 01:41:10 —-HDC—- C:\WINDOWS\$NtUninstallKB978037_0$
2010-03-19 01:41:04 —-HDC—- C:\WINDOWS\$NtUninstallKB975713_0$
2010-03-19 01:40:59 —-HDC—- C:\WINDOWS\$NtUninstallKB971657_0$
2010-03-19 01:40:47 —-HDC—- C:\WINDOWS\$NtUninstallKB977165-v2_0$
2010-03-19 01:40:39 —-HDC—- C:\WINDOWS\$NtUninstallKB960225_0$
2010-03-19 01:40:34 —-HDC—- C:\WINDOWS\$NtUninstallKB972270_0$
2010-03-19 01:40:29 —-HDC—- C:\WINDOWS\$NtUninstallKB974112_0$
2010-03-19 01:40:13 —-HDC—- C:\WINDOWS\$NtUninstallKB956572_0$
2010-03-19 01:40:05 —-HDC—- C:\WINDOWS\$NtUninstallKB956844_0$
2010-03-19 01:40:01 —-HDC—- C:\WINDOWS\$NtUninstallKB961501_0$
2010-03-19 01:39:56 —-HDC—- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-03-19 01:39:50 —-HDC—- C:\WINDOWS\$NtUninstallKB975561_0$
2010-03-19 01:39:45 —-HDC—- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-03-19 01:39:41 —-HDC—- C:\WINDOWS\$NtUninstallKB978251_0$
2010-03-19 01:39:36 —-HDC—- C:\WINDOWS\$NtUninstallKB973869_0$
2010-03-19 01:39:31 —-HDC—- C:\WINDOWS\$NtUninstallKB975025_0$
2010-03-19 01:39:24 —-HDC—- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-03-19 01:39:17 —-HDC—- C:\WINDOWS\$NtUninstallKB952004_0$
2010-03-19 01:39:12 —-HDC—- C:\WINDOWS\$NtUninstallKB974571_0$
2010-03-19 01:39:06 —-HDC—- C:\WINDOWS\$NtUninstallKB975560_0$
2010-03-19 01:39:00 —-HDC—- C:\WINDOWS\$NtUninstallKB973507_0$
2010-03-19 01:38:54 —-HDC—- C:\WINDOWS\$NtUninstallKB973687_0$
2010-03-19 01:38:49 —-HDC—- C:\WINDOWS\$NtUninstallKB950762_0$
2010-03-19 01:38:45 —-HDC—- C:\WINDOWS\$NtUninstallKB952287_0$
2010-03-19 01:38:40 —-HDC—- C:\WINDOWS\$NtUninstallKB973354_0$
2010-03-19 01:38:33 —-HDC—- C:\WINDOWS\$NtUninstallKB973904$
2010-03-19 01:38:20 —-HDC—- C:\WINDOWS\$NtUninstallKB967715_0$
2010-03-19 01:38:15 —-HDC—- C:\WINDOWS\$NtUninstallKB950760$
2010-03-19 01:38:09 —-HDC—- C:\WINDOWS\$NtUninstallKB951066_0$
2010-03-19 01:38:04 —-HDC—- C:\WINDOWS\$NtUninstallKB974392_0$
2010-03-19 01:37:58 —-HDC—- C:\WINDOWS\$NtUninstallKB977914_0$
2010-03-19 01:37:51 —-HDC—- C:\WINDOWS\$NtUninstallKB951748_0$
2010-03-19 01:37:46 —-HDC—- C:\WINDOWS\$NtUninstallKB971961$
2010-03-19 01:37:40 —-HDC—- C:\WINDOWS\$NtUninstallKB970238_0$
2010-03-19 01:37:35 —-HDC—- C:\WINDOWS\$NtUninstallKB978706_0$
2010-03-19 01:37:26 —-HDC—- C:\WINDOWS\$NtUninstallKB958470$
2010-03-19 01:37:20 —-HDC—- C:\WINDOWS\$NtUninstallKB960803_0$
2010-03-19 01:37:15 —-HDC—- C:\WINDOWS\$NtUninstallKB973815_0$
2010-03-19 01:37:05 —-HDC—- C:\WINDOWS\$NtUninstallKB971032$
2010-03-19 01:36:59 —-HDC—- C:\WINDOWS\$NtUninstallKB958644_0$
2010-03-19 01:36:54 —-HDC—- C:\WINDOWS\$NtUninstallKB955069_0$
2010-03-19 01:36:49 —-HDC—- C:\WINDOWS\$NtUninstallKB956802_0$
2010-03-19 01:36:39 —-HDC—- C:\WINDOWS\$NtUninstallKB979306$
2010-03-19 01:36:35 —-HDC—- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-03-19 01:36:27 —-HDC—- C:\WINDOWS\$NtUninstallKB923561_0$
2010-03-19 01:36:22 —-HDC—- C:\WINDOWS\$NtUninstallKB975467_0$
2010-03-19 01:36:14 —-HDC—- C:\WINDOWS\$NtUninstallKB968389_0$
2010-03-19 01:36:07 —-HDC—- C:\WINDOWS\$NtUninstallKB969947_0$
2010-03-19 01:09:23 —-N—- C:\WINDOWS\system32\tzchange.exe
2010-03-19 01:08:09 —-D—- C:\Documents and Settings\Adrian\Application Data\Apple Computer
2010-03-19 01:07:34 —-A—- C:\WINDOWS\system32\GEARAspi.dll
2010-03-19 01:06:21 —-N—- C:\WINDOWS\system32\xpsp4res.dll
2010-03-19 01:06:16 —-A—- C:\WINDOWS\system32\xpsp3res.dll
2010-03-19 01:06:09 —-D—- C:\Program Files\iPod
2010-03-19 01:05:52 —-D—- C:\Program Files\iTunes
2010-03-19 01:05:52 —-D—- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2010-03-19 01:05:10 —-D—- C:\Program Files\Bonjour
2010-03-19 01:03:36 —-D—- C:\Program Files\QuickTime
2010-03-19 01:03:33 —-D—- C:\Documents and Settings\All Users\Application Data\Apple Computer
2010-03-19 01:03:06 —-D—- C:\Program Files\Apple Software Update
2010-03-19 01:02:55 —-DC—- C:\WINDOWS\system32\DRVSTORE
2010-03-19 01:02:55 —-A—- C:\WINDOWS\system32\usbaaplrc.dll
2010-03-19 01:01:59 —-D—- C:\Program Files\Common Files\Apple
2010-03-19 01:01:59 —-D—- C:\Documents and Settings\All Users\Application Data\Apple
2010-03-19 00:53:31 —-D—- C:\WINDOWS\peernet
2010-03-19 00:53:30 —-D—- C:\WINDOWS\provisioning
2010-03-19 00:51:51 —-D—- C:\WINDOWS\ServicePackFiles
2010-03-19 00:48:43 —-D—- C:\WINDOWS\system32\ReinstallBackups
2010-03-19 00:46:32 —-HDC—- C:\WINDOWS\$NtServicePackUninstall$
2010-03-19 00:46:30 —-D—- C:\WINDOWS\EHome
2010-03-19 00:43:26 —-N—- C:\WINDOWS\system32\spnpinst.exe
2010-03-19 00:37:40 —-D—- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-03-19 00:35:46 —-SD—- C:\WINDOWS\system32\Microsoft
2010-03-19 00:35:23 —-D—- C:\WINDOWS\system32\PreInstall
2010-03-19 00:35:21 —-A—- C:\WINDOWS\system32\spupdsvc.exe
2010-03-19 00:35:20 —-HDC—- C:\WINDOWS\$NtUninstallKB898461$
2010-03-19 00:35:20 —-HD—- C:\WINDOWS\$hf_mig$
2010-03-19 00:34:54 —-HDC—- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-03-19 00:34:34 —-D—- C:\WINDOWS\system32\bits
2010-03-19 00:34:30 —-N—- C:\WINDOWS\system32\spmsg.dll
2010-03-19 00:34:27 —-HDC—- C:\WINDOWS\$NtUninstallKB842773$
2010-03-19 00:34:09 —-N—- C:\WINDOWS\system32\xpob2res.dll
2010-03-19 00:34:09 —-N—- C:\WINDOWS\system32\bitsprx3.dll
2010-03-19 00:34:09 —-N—- C:\WINDOWS\system32\bitsprx2.dll
2010-03-19 00:34:09 —-A—- C:\WINDOWS\system32\winhttp.dll
2010-03-19 00:34:09 —-A—- C:\WINDOWS\system32\qmgrprxy.dll
2010-03-19 00:33:17 —-A—- C:\WINDOWS\system32\wups2.dll
2010-03-19 00:33:17 —-A—- C:\WINDOWS\system32\wups.dll
2010-03-19 00:33:17 —-A—- C:\WINDOWS\system32\wucltui.dll.mui
2010-03-19 00:33:17 —-A—- C:\WINDOWS\system32\wucltui.dll
2010-03-19 00:33:17 —-A—- C:\WINDOWS\system32\wuaueng.dll.mui
2010-03-19 00:33:16 —-A—- C:\WINDOWS\system32\wuapi.dll.mui
2010-03-19 00:33:16 —-A—- C:\WINDOWS\system32\wuapi.dll
2010-03-19 00:32:34 —-D—- C:\WINDOWS\SoftwareDistribution
2010-03-19 00:27:19 —-D—- C:\WUTemp
2010-03-19 00:27:16 —-A—- C:\WINDOWS\system32\iuenginenew.dll
2010-03-19 00:23:36 —-SHD—- C:\WINDOWS\Installer
2010-03-19 00:23:33 —-D—- C:\Documents and Settings\Adrian\Application Data\Identities
2010-03-19 00:23:28 —-HD—- C:\Program Files\Uninstall Information
2010-03-19 00:23:22 —-ASH—- C:\Documents and Settings\Adrian\Application Data\desktop.ini
2010-03-19 00:23:21 —-SD—- C:\Documents and Settings\Adrian\Application Data\Microsoft
2010-03-19 00:21:48 —-A—- C:\WINDOWS\system32\wpa.bak
2010-03-19 00:20:31 —-SHD—- C:\System Volume Information
2010-03-19 00:20:26 —-N—- C:\WINDOWS\SchedLgU.Txt
2010-03-18 22:21:56 —-D—- C:\WINDOWS\system32\xircom
2010-03-18 22:21:56 —-D—- C:\Program Files\xerox
2010-03-18 22:21:56 —-D—- C:\Program Files\microsoft frontpage
2010-03-18 22:21:31 —-A—- C:\WINDOWS\control.ini
2010-03-18 22:21:31 —-A—- C:\AUTOEXEC.BAT
2010-03-18 22:21:18 —-A—- C:\WINDOWS\system32\mapi32.dll
2010-03-18 22:20:20 —-SD—- C:\WINDOWS\Downloaded Program Files
2010-03-18 22:20:20 —-RD—- C:\WINDOWS\Offline Web Pages
2010-03-18 22:20:20 —-RAH—- C:\WINDOWS\system32\logonui.exe.manifest
2010-03-18 22:20:13 —-RAH—- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-03-18 22:19:49 —-D—- C:\WINDOWS\system32\DirectX
2010-03-18 22:19:21 —-A—- C:\WINDOWS\system32\safrslv.dll
2010-03-18 22:19:21 —-A—- C:\WINDOWS\system32\safrdm.dll
2010-03-18 22:19:21 —-A—- C:\WINDOWS\system32\safrcdlg.dll
2010-03-18 22:19:20 —-A—- C:\WINDOWS\system32\racpldlg.dll
2010-03-18 22:19:20 —-A—- C:\WINDOWS\system32\atrace.dll
2010-03-18 22:19:17 —-A—- C:\WINDOWS\system32\desktop.ini
2010-03-18 22:19:17 —-A—- C:\WINDOWS\desktop.ini
2010-03-18 22:19:10 —-A—- C:\WINDOWS\system32\isrdbg32.dll
2010-03-18 22:19:09 —-A—- C:\WINDOWS\system32\nmevtmsg.dll
2010-03-18 22:19:09 —-A—- C:\WINDOWS\system32\mnmsrvc.exe
2010-03-18 22:19:08 —-A—- C:\WINDOWS\system32\acctres.dll
2010-03-18 22:19:07 —-D—- C:\Program Files\Common Files\Services
2010-03-18 22:19:06 —-A—- C:\WINDOWS\system32\inetres.dll
2010-03-18 22:19:03 —-SD—- C:\WINDOWS\Tasks
2010-03-18 22:19:02 —-A—- C:\WINDOWS\system32\isign32.dll
2010-03-18 22:19:02 —-A—- C:\WINDOWS\system32\inetcfg.dll
2010-03-18 22:19:02 —-A—- C:\WINDOWS\system32\icwphbk.dll
2010-03-18 22:19:02 —-A—- C:\WINDOWS\system32\icwdial.dll
2010-03-18 22:19:02 —-A—- C:\WINDOWS\system32\icfgnt5.dll
2010-03-18 22:19:00 —-D—- C:\Program Files\Common Files\MSSoap
2010-03-18 22:18:55 —-D—- C:\WINDOWS\system32\Macromed
2010-03-18 22:18:55 —-D—- C:\WINDOWS\srchasst
2010-03-18 22:18:54 —-A—- C:\WINDOWS\system32\qmgr.dll
2010-03-18 22:18:53 —-D—- C:\Program Files\Movie Maker
2010-03-18 22:18:48 —-D—- C:\WINDOWS\PCHealth
2010-03-18 22:18:47 —-D—- C:\WINDOWS\system32\Restore
2010-03-18 22:18:47 —-A—- C:\WINDOWS\system32\srsvc.dll
2010-03-18 22:18:47 —-A—- C:\WINDOWS\system32\srrstr.dll
2010-03-18 22:18:47 —-A—- C:\WINDOWS\system32\srclient.dll
2010-03-18 22:18:47 —-A—- C:\WINDOWS\system32\ils.dll
2010-03-18 22:18:46 —-A—- C:\WINDOWS\system32\nmmkcert.dll
2010-03-18 22:18:46 —-A—- C:\WINDOWS\system32\msconf.dll
2010-03-18 22:18:46 —-A—- C:\WINDOWS\system32\mnmdd.dll
2010-03-18 22:18:44 —-D—- C:\Program Files\NetMeeting
2010-03-18 22:18:44 —-A—- C:\WINDOWS\system32\msoert2.dll
2010-03-18 22:18:43 —-A—- C:\WINDOWS\system32\msoeacct.dll
2010-03-18 22:18:42 —-D—- C:\Program Files\Outlook Express
2010-03-18 22:18:42 —-A—- C:\WINDOWS\system32\schedsvc.dll
2010-03-18 22:18:42 —-A—- C:\WINDOWS\system32\mstinit.exe
2010-03-18 22:18:42 —-A—- C:\WINDOWS\system32\inetcomm.dll
2010-03-18 22:18:41 —-A—- C:\WINDOWS\system32\mstask.dll
2010-03-18 22:18:38 —-D—- C:\Program Files\Common Files\System
2010-03-18 22:18:33 —-D—- C:\Program Files\Internet Explorer
2010-03-18 22:17:51 —-D—- C:\Program Files\ComPlus Applications
2010-03-18 22:17:50 —-A—- C:\WINDOWS\vbaddin.ini
2010-03-18 22:17:50 —-A—- C:\WINDOWS\vb.ini
2010-03-18 22:17:44 —-D—- C:\WINDOWS\Registration
2010-03-18 22:17:35 —-HD—- C:\Program Files\WindowsUpdate
2010-03-18 22:17:35 —-D—- C:\Program Files\Online Services
2010-03-18 22:17:34 —-D—- C:\Program Files\Windows Media Player
2010-03-18 22:17:27 —-D—- C:\Program Files\Messenger
2010-03-18 22:17:21 —-D—- C:\Program Files\MSN Gaming Zone
2010-03-18 22:17:21 —-A—- C:\WINDOWS\system32\write.exe
2010-03-18 22:17:12 —-A—- C:\WINDOWS\system32\sndvol32.exe
2010-03-18 22:17:12 —-A—- C:\WINDOWS\system32\sndrec32.exe
2010-03-18 22:17:12 —-A—- C:\WINDOWS\system32\hypertrm.dll
2010-03-18 22:17:12 —-A—- C:\WINDOWS\system32\hticons.dll
2010-03-18 22:17:12 —-A—- C:\WINDOWS\system32\accwiz.exe
2010-03-18 22:17:11 —-A—- C:\WINDOWS\system32\winchat.exe
2010-03-18 22:17:11 —-A—- C:\WINDOWS\system32\avwav.dll
2010-03-18 22:17:11 —-A—- C:\WINDOWS\system32\avtapi.dll
2010-03-18 22:17:11 —-A—- C:\WINDOWS\system32\avmeter.dll
2010-03-18 22:17:04 —-A—- C:\WINDOWS\system32\getuname.dll
2010-03-18 22:17:04 —-A—- C:\WINDOWS\system32\charmap.exe
2010-03-18 22:17:04 —-A—- C:\WINDOWS\system32\calc.exe
2010-03-18 22:17:03 —-A—- C:\WINDOWS\system32\winmine.exe
2010-03-18 22:17:03 —-A—- C:\WINDOWS\system32\sol.exe
2010-03-18 22:17:03 —-A—- C:\WINDOWS\system32\mshearts.exe
2010-03-18 22:17:03 —-A—- C:\WINDOWS\system32\freecell.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\usrlogon.cmd
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\tsshutdn.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\tslabels.ini
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\tskill.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\tsdiscon.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\tscon.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\shadow.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\rwinsta.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\reset.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\regini.exe
2010-03-18 22:17:02 —-A—- C:\WINDOWS\system32\rdshost.exe
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\rdpcfgex.dll
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\qwinsta.exe
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\qprocess.exe
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\qappsrv.exe
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\mtxoci.dll
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\msg.exe
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\msdtcuiu.dll
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\logoff.exe
2010-03-18 22:17:01 —-A—- C:\WINDOWS\system32\cdmodem.dll
2010-03-18 22:17:00 —-A—- C:\WINDOWS\system32\xolehlp.dll
2010-03-18 22:17:00 —-A—- C:\WINDOWS\system32\msdtctm.dll
2010-03-18 22:17:00 —-A—- C:\WINDOWS\system32\msdtcprf.ini
2010-03-18 22:17:00 —-A—- C:\WINDOWS\system32\msdtclog.dll
2010-03-18 22:17:00 —-A—- C:\WINDOWS\system32\msdtc.exe
2010-03-18 22:16:59 —-A—- C:\WINDOWS\system32\mtxlegih.dll
2010-03-18 22:16:59 —-A—- C:\WINDOWS\system32\mtxex.dll
2010-03-18 22:16:59 —-A—- C:\WINDOWS\system32\mtxdm.dll
2010-03-18 22:16:59 —-A—- C:\WINDOWS\system32\dcomcnfg.exe
2010-03-18 22:16:59 —-A—- C:\WINDOWS\system32\comaddin.dll
2010-03-18 22:16:59 —-A—- C:\WINDOWS\system32\colbact.dll
2010-03-18 22:16:58 —-A—- C:\WINDOWS\system32\stclient.dll
2010-03-18 22:16:58 —-A—- C:\WINDOWS\system32\comuid.dll
2010-03-18 22:16:58 —-A—- C:\WINDOWS\system32\comrepl.dll
2010-03-18 22:16:58 —-A—- C:\WINDOWS\system32\clbcatex.dll
2010-03-18 22:16:58 —-A—- C:\WINDOWS\system32\catsrvps.dll
2010-03-18 22:16:58 —-A—- C:\WINDOWS\system32\catsrv.dll
2010-03-18 22:16:57 —-A—- C:\WINDOWS\system32\comsnap.dll
2010-03-18 22:16:57 —-A—- C:\WINDOWS\system32\clbcatq.dll
2010-03-18 22:16:46 —-A—- C:\WINDOWS\system32\wmimgmt.msc
2010-03-18 22:16:46 —-A—- C:\WINDOWS\system32\servdeps.dll
2010-03-18 22:16:46 —-A—- C:\WINDOWS\system32\mmfutil.dll
2010-03-18 22:16:46 —-A—- C:\WINDOWS\system32\cmprops.dll
2010-03-18 22:16:37 —-D—- C:\Program Files\Windows NT
2010-03-18 22:16:37 —-D—- C:\Program Files\MSN
2010-03-18 22:16:37 —-A—- C:\WINDOWS\system32\mspaint.exe
2010-03-18 22:16:37 —-A—- C:\WINDOWS\system32\mplay32.exe
2010-03-18 22:16:37 —-A—- C:\WINDOWS\system32\clipbrd.exe
2010-03-18 22:16:36 —-A—- C:\WINDOWS\system32\wuauserv.dll
2010-03-18 22:16:36 —-A—- C:\WINDOWS\system32\wuaueng.dll
2010-03-18 22:16:36 —-A—- C:\WINDOWS\system32\wuauclt.exe
2010-03-18 22:16:36 —-A—- C:\WINDOWS\system32\spider.exe
2010-03-18 22:16:35 —-A—- C:\WINDOWS\system32\tscfgwmi.dll
2010-03-18 22:16:35 —-A—- C:\WINDOWS\system32\mstscax.dll
2010-03-18 22:16:34 —-A—- C:\WINDOWS\system32\tscupgrd.exe
2010-03-18 22:16:34 —-A—- C:\WINDOWS\system32\termsrv.dll
2010-03-18 22:16:34 —-A—- C:\WINDOWS\system32\sessmgr.exe
2010-03-18 22:16:34 —-A—- C:\WINDOWS\system32\remotepg.dll
2010-03-18 22:16:34 —-A—- C:\WINDOWS\system32\rdsaddin.exe
2010-03-18 22:16:34 —-A—- C:\WINDOWS\system32\rdchost.dll
2010-03-18 22:16:34 —-A—- C:\WINDOWS\system32\mstsc.exe
2010-03-18 22:16:33 —-D—- C:\WINDOWS\system32\MsDtc
2010-03-18 22:16:33 —-A—- C:\WINDOWS\system32\rdpwsx.dll
2010-03-18 22:16:33 —-A—- C:\WINDOWS\system32\rdpsnd.dll
2010-03-18 22:16:33 —-A—- C:\WINDOWS\system32\rdpclip.exe
2010-03-18 22:16:33 —-A—- C:\WINDOWS\system32\msdtcprx.dll
2010-03-18 22:16:33 —-A—- C:\WINDOWS\system32\icaapi.dll
2010-03-18 22:16:33 —-A—- C:\WINDOWS\system32\cfgbkend.dll
2010-03-18 22:16:32 —-D—- C:\WINDOWS\system32\Com
2010-03-18 22:16:32 —-A—- C:\WINDOWS\system32\catsrvut.dll
2010-03-18 22:16:31 —-A—- C:\WINDOWS\system32\comsvcs.dll
2010-03-18 22:16:28 —-A—- C:\WINDOWS\system32\licwmi.dll

======List of files/folders modified in the last 1 months======

2010-03-19 06:08:36 —-A—- C:\WINDOWS\system.ini
2010-03-19 00:54:22 —-A—- C:\WINDOWS\win.ini
2010-03-19 00:49:37 —-RASH—- C:\NTDETECT.COM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys []
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-05-14 94360]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\System32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2003-03-31 12032]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2010-03-21 2691840]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2005-02-17 38016]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2005-02-17 349696]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\System32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-12-15 1038208]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-12-15 207232]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-07-19 1049180]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2003-03-31 12160]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-03 70912]
R3 sdbus;sdbus; C:\WINDOWS\System32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-01-15 206512]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-02-11 157056]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-12-15 703232]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 eabusb;eabusb; \??\C:\WINDOWS\system32\drivers\eabusb.sys []
S3 MHIKEY10;MHIKEY10; C:\WINDOWS\System32\Drivers\MHIKEY10.sys [2008-05-27 51072]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-21 153376]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R3 hpqwmi;HP WMI Interface; C:\Program Files\HPQ\shared\hpqwmi.exe [2004-11-18 98304]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-02-15 545576]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-05-14 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

—————–EOF—————–
Info.txt


info.txt logfile of random's system information tool 1.06 2010-03-31 23:03:23

======Uninstall list======

–>C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
–>C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
–>C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
–>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
91 PC Suite for iPhone–>C:\Program Files\InstallShield Installation Information\{DACB19BF-B853-42FA-A686-8F55E065CA10}\setup.exe -runfromtemp -l0x0009 -removeonly
Adobe Flash Player 10 ActiveX–>C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin–>C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 6.0.1–>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A00000000001}
AI RoboForm (All Users)–>"C:\Program Files\Siber Systems\AI RoboForm\rfwipeout.exe"
Apple Application Support–>MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
Apple Mobile Device Support–>MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
Apple Software Update–>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Bonjour–>MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Broadcom 802.11 Wireless LAN Adapter–>"C:\Program Files\Broadcom\Broadcom 802.11\Driver\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Broadcom\Broadcom 802.11\Driver"
CCleaner–>"C:\Program Files\CCleaner\uninst.exe"
Conexant AC-Link Audio–>CIAunwdm.exe
FMS–>C:\Program Files\FMS\Uninstall.exe
HijackThis 2.0.2–>"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)–>C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)–>C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows XP (KB952287)–>"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB961118)–>"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB979306)–>"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe"
HP Help and Support–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\Setup.exe" -l0x9 -removeonly
HP Software Update–>MsiExec.exe /X{026873C3-DBAD-488F-A8D4-1379EE0CA8AB}
HP Wireless Assistant–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe" -l0x9
Intel® Graphics Media Accelerator Driver for Mobile–>RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2792 PCI\VEN_8086&DEV_2592
Internet Download Manager–>C:\Program Files\Internet Download Manager\Uninstall.exe
InterVideo WinDVD–>"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes–>MsiExec.exe /I{81063354-9060-42B2-A000-1EBE96778AA9}
J2SE Runtime Environment 5.0–>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Java™ 6 Update 18–>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216018FF}
K-Lite Codec Pack 5.8.3 (Full)–>"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Malwarebytes' Anti-Malware–>"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297)–>"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1–>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1–>MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2–>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2–>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1–>C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1–>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard–>MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7–>"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Mozilla Firefox (3.6.2)–>C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT–>MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 6 Service Pack 2 (KB973686)–>MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
muvee autoProducer 4.0 - SE–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{534AA552-E1F1-4965-B2AA-FBDEB0730D60}\setup.exe" -l0x9
NJStar Chinese WP–>C:\Program Files\NJStar Chinese WP\uninst.exe
Quick Launch Buttons 5.10 B2–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CEB326EC-8F40-47B2-BA22-BB092565D66F}\setup.exe" -l0x9 -uninst
QuickTime–>MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
Real Alternative 2.0.2–>"C:\Program Files\Real Alternative\unins000.exe"
REALTEK Gigabit and Fast Ethernet NIC Driver–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\Setup.exe" -l0x9 REMOVE
Security Update for CAPICOM (KB931906)–>MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)–>MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Windows Internet Explorer 8 (KB971961)–>"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB976325)–>"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB978207)–>"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB952069)–>"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB954155)–>"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB968816)–>"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB973540)–>"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923561)–>"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923789)–>C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Security Update for Windows XP (KB941569)–>"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)–>"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950760)–>"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)–>"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)–>"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)–>"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)–>"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)–>"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952004)–>"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)–>"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)–>"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956572)–>"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956744)–>"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956802)–>"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)–>"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956844)–>"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)–>"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958869)–>"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB959426)–>"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960225)–>"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960803)–>"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960859)–>"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961501)–>"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969059)–>"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969947)–>"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970238)–>"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970430)–>"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971468)–>"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971657)–>"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Security Update for Windows XP (KB972270)–>"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973354)–>"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973507)–>"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973869)–>"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973904)–>"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974112)–>"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974318)–>"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974392)–>"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974571)–>"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975025)–>"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975467)–>"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975560)–>"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975561)–>"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975713)–>"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977165-v2)–>"C:\WINDOWS\$NtUninstallKB977165-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977914)–>"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978037)–>"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978251)–>"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978262)–>"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978706)–>"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Segoe UI–>MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype Toolbars–>MsiExec.exe /I{981029E0-7FC9-4CF3-AB39-6F133621921A}
Skype™ 4.2–>MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Soft Data Fax Modem with SmartCP–>C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_3080103C\HXFSETUP.EXE -U -IQTA3080K.INF
Sonic Audio Module–>MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic Copy Module–>MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic Data Module–>MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Express Labeler–>MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic Update Manager–>MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Synaptics Pointing Device Driver–>rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)–>C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Windows Internet Explorer 8 (KB976662)–>"C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe"
Update for Windows Internet Explorer 8 (KB978506)–>"C:\WINDOWS\ie8updates\KB978506-IE8\spuninst\spuninst.exe"
Update for Windows Internet Explorer 8 (KB980182)–>"C:\WINDOWS\ie8updates\KB980182-IE8\spuninst\spuninst.exe"
Update for Windows XP (KB951978)–>"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update for Windows XP (KB955759)–>"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Update for Windows XP (KB961503)–>"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Update for Windows XP (KB967715)–>"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update for Windows XP (KB968389)–>"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update for Windows XP (KB971737)–>"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Update for Windows XP (KB973687)–>"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Update for Windows XP (KB973815)–>"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Update for Windows XP (KB978207)–>"C:\WINDOWS\$NtUninstallKB978207$\spuninst\spuninst.exe"
Windows Imaging Component–>"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Call–>MsiExec.exe /I{F6BD194C-4190-4D73-B1B1-C48C99921BFE}
Windows Live Communications Platform–>MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Essentials–>C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials–>MsiExec.exe /I{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}
Windows Live Messenger–>MsiExec.exe /X{A85FD55B-891B-4314-97A5-EA96C0BD80B5}
Windows Live OneCare safety scanner–>RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Live Sign-in Assistant–>MsiExec.exe /I{45338B07-A236-4270-9A77-EBB4115517B5}
Windows Live Upload Tool–>MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Windows Media Format Runtime–>"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 10–>"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows XP Service Pack 3–>"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR–>"C:\WINDOWS\WinRAR\uninstall.exe" "/U:C:\Program Files\WinRAR\Uninstall\uninstall.xml"
WinSCP 4.2.7–>"C:\Program Files\WinSCP\unins000.exe"
Yahoo! Messenger–>C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG

======Hosts File======

74.208.10.249 gs.apple.com

======Security center information======

AV: ESET NOD32 Antivirus 4.0

======System event log======

Computer Name: ADRIAN-PC
Event Code: 3033
Message: The redirector was unable to register the address for transport NetBT_Tcpip_{8F92566A-C365-45B8-AA34 for the following reason: . Transport has been taken offline.

Record Number: 314
Source Name: MRxSmb
Time Written: 20100320163141.000000+480
Event Type: warning
User:

Computer Name: ADRIAN-PC
Event Code: 4321
Message: The name "ADRIAN-PC :20" could not be registered on the Interface with IP address 192.168.1.100.
The machine with the IP address 192.168.1.104 did not allow the name to be claimed by
this machine.

Record Number: 86
Source Name: NetBT
Time Written: 20100319005904.000000+480
Event Type: error
User:

Computer Name: ADRIAN-PC
Event Code: 2505
Message: The server could not bind to the transport \Device\NetBT_Tcpip_{8F92566A-C365-45B8-AA34-54E6A42CAB12} because another computer on the network has the same name. The server could not start.

Record Number: 85
Source Name: Server
Time Written: 20100319005904.000000+480
Event Type: error
User:

Computer Name: ADRIAN-PC
Event Code: 3033
Message: The redirector was unable to register the address for transport NetBT_Tcpip_{8F92566A-C365-45B8-AA34 for the following reason: . Transport has been taken offline.

Record Number: 83
Source Name: MRxSmb
Time Written: 20100319005859.000000+480
Event Type: warning
User:

Computer Name: ADRIAN-PC
Event Code: 4321
Message: The name "ADRIAN-PC :0" could not be registered on the Interface with IP address 192.168.1.100.
The machine with the IP address 192.168.1.104 did not allow the name to be claimed by
this machine.

Record Number: 82
Source Name: NetBT
Time Written: 20100319005859.000000+480
Event Type: error
User:

=====Application event log=====

Computer Name: ADRIAN-PC
Event Code: 1000
Message: Faulting application iexplore.exe, version 6.0.2900.2180, faulting module mshtml.dll, version 6.0.2900.2180, fault address 0x000998e3.

Record Number: 51
Source Name: Application Error
Time Written: 20100319012948.000000+480
Event Type: error
User:

Computer Name: ADRIAN-PC
Event Code: 1000
Message: Faulting application iexplore.exe, version 6.0.2900.2180, faulting module mshtml.dll, version 6.0.2900.2180, fault address 0x001f70b1.

Record Number: 49
Source Name: Application Error
Time Written: 20100319012721.000000+480
Event Type: error
User:

Computer Name: ADRIAN-PC
Event Code: 5603
Message: A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

Record Number: 40
Source Name: WinMgmt
Time Written: 20100319010039.000000+480
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: ADRIAN-PC
Event Code: 5603
Message: A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

Record Number: 39
Source Name: WinMgmt
Time Written: 20100319010039.000000+480
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: ADRIAN-PC
Event Code: 63
Message: A provider, HiPerfCooker_v1, has been registered in the WMI namespace, Root\WMI, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Record Number: 26
Source Name: WinMgmt
Time Written: 20100319005402.000000+480
Event Type: warning
User: ADRIAN-PC\Adrian

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"SonicCentral"=C:\Program Files\Common Files\Sonic Shared\Sonic Central\

—————–EOF—————–
Post #4
Hi,

Open HijackThis > Do a System Scan Only, close your browser and all open windows including this one, the only program or window you should have open is HijackThis, check the following entries and click on Fix Checked.

O4 - Global Startup: tracker.html



You need to enable windows to Show all Files and Folders
Instructions for your Operating System HERE

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\tracker.html <– Go into your startup folder and delete Tracker.htm


Reboot and see if that fixed it

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI