slow computer

Thanks for opening the topic.

For your info, the "back" button on my Mozilla Firefox has stopped functioning.

Results below:

ComboFix 10-07-13.05 - admin 14/07/2010 10:06:20.3.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.562 [GMT 4:00]
Running from: c:\documents and settings\[removed]\My Documents\Downloads\ComboFix.exe
Command switches used :: c:\documents and settings\admin\Desktop\CFScript.txt
AV: ZoneAlarm Security Suite Antivirus *On-access scanning disabled* (Updated) {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}
FW: ZoneAlarm Security Suite Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.

((((((((((((((((((((((((( Files Created from 2010-06-14 to 2010-07-14 )))))))))))))))))))))))))))))))
.

2010-07-13 10:20 . 2010-07-13 10:21 ——– d—–w- c:\documents and settings\admin\Application Data\MOBILedit
2010-07-13 10:19 . 2010-07-13 10:19 ——– d—–w- c:\program files\COMPELSON Labs
2010-07-13 10:17 . 2010-07-13 10:18 ——– d—–w- c:\program files\MOBILedit!4
2010-07-13 09:55 . 2010-07-13 09:55 ——– d—–w- c:\program files\Common Files\LogoManager
2010-07-13 09:54 . 2010-07-13 09:55 ——– d—–w- c:\program files\MobiMB Mobile Media Browser
2010-07-04 13:32 . 2010-07-04 13:32 ——– d—–w- c:\documents and settings\All Users\Application Data\Kaspersky SDK
2010-07-04 13:26 . 2010-07-04 13:26 ——– d—–w- c:\documents and settings\admin\Downloads
2010-07-04 12:07 . 2010-07-04 12:07 ——– d—–w- c:\documents and settings\admin\Application Data\CheckPoint
2010-07-04 12:06 . 2010-07-04 12:06 ——– d—–w- c:\program files\CheckPoint
2010-07-04 12:06 . 2009-10-12 14:15 128016 —-a-w- c:\windows\system32\drivers\kl1.sys
2010-07-04 12:05 . 2009-10-16 21:39 69000 —-a-w- c:\windows\system32\zlcomm.dll
2010-07-04 12:05 . 2009-10-16 21:39 103816 —-a-w- c:\windows\system32\zlcommdb.dll
2010-07-04 12:04 . 2009-10-16 21:39 1238408 —-a-w- c:\windows\system32\zpeng25.dll
2010-07-04 10:03 . 2009-11-03 05:51 421888 —-a-w- c:\documents and settings\admin\Application Data\Mozilla\Firefox\Profiles\u4xkbbdr.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}\platform\WINNT\components\FoxyTunes.dll
2010-07-03 09:29 . 2006-03-24 02:30 282624 —-a-w- c:\windows\stsystra.exe
2010-07-03 09:29 . 2006-03-22 02:52 1052672 ——w- c:\windows\system32\stlang.dll
2010-07-03 07:25 . 2010-07-03 07:25 ——– d—–w- c:\documents and settings\admin\Application Data\Malwarebytes
2010-07-03 07:23 . 2010-04-29 11:39 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-03 07:23 . 2010-07-03 07:23 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-03 07:22 . 2010-04-29 11:39 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-07-03 07:22 . 2010-07-03 07:23 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-06-28 12:42 . 2008-12-25 07:06 102400 ——w- c:\windows\system32\Unl.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-14 05:37 . 2010-03-05 12:23 ——– d—–w- c:\program files\Mozilla Thunderbird
2010-07-14 05:31 . 2008-11-16 12:35 4212 —ha-w- c:\windows\system32\zllictbl.dat
2010-07-13 10:59 . 2007-04-08 20:02 ——– d—–w- c:\documents and settings\admin\Application Data\Wave Systems Corp
2010-07-13 10:10 . 2007-07-23 09:05 ——– d—–w- c:\documents and settings\admin\Application Data\Yahoo!
2010-07-07 13:59 . 2010-07-07 13:59 0 —-a-w- c:\documents and settings\admin\ntuser.tmp
2010-07-07 13:59 . 2010-07-08 04:24 2232832 —-a-w- c:\windows\Internet Logs\xDBE7.tmp
2010-07-07 13:59 . 2010-07-08 04:24 3252224 —-a-w- c:\windows\Internet Logs\xDBE6.tmp
2010-07-05 11:08 . 2007-05-15 05:30 ——– d—–w- c:\program files\IrfanView
2010-07-04 13:43 . 2010-07-04 17:04 3099648 —-a-w- c:\windows\Internet Logs\xDBE5.tmp
2010-07-04 12:55 . 2009-03-02 15:19 19829080 —-a-w- c:\windows\Internet Logs\tvDebug.Zip
2010-07-03 22:00 . 2010-07-04 09:51 413184 —-a-w- c:\windows\Internet Logs\xDBE4.tmp
2010-07-03 09:06 . 2007-01-28 12:55 ——– d—–w- c:\program files\Roxio
2010-06-30 09:20 . 2010-06-30 09:20 210670 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_29_14_44_10_small.dmp.zip
2010-06-30 09:20 . 2010-06-30 09:20 190149 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_29_14_38_18_small.dmp.zip
2010-06-28 12:49 . 2007-01-28 12:46 ——– d–h–w- c:\program files\InstallShield Installation Information
2010-06-28 12:45 . 2009-08-01 03:23 ——– d—–w- c:\program files\Chinatelecom C+W
2010-06-28 12:44 . 2009-02-08 14:07 ——– d—–w- c:\program files\Business Translator
2010-06-28 12:44 . 2009-08-01 03:31 ——– d—–w- c:\documents and settings\admin\Application Data\Chinatelecom
2010-06-28 12:44 . 2008-07-10 20:57 ——– d—–w- c:\program files\FrostWire
2010-06-23 09:59 . 2010-06-23 09:59 201840 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_22_12_37_52_small.dmp.zip
2010-06-21 11:26 . 2010-06-22 08:14 309760 —-a-w- c:\windows\Internet Logs\xDBE3.tmp
2010-06-19 13:54 . 2010-06-20 11:22 1511424 —-a-w- c:\windows\Internet Logs\xDBE2.tmp
2010-06-15 08:36 . 2010-06-15 08:36 157638 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_15_12_30_33_small.dmp.zip
2010-06-14 18:24 . 2010-06-15 04:18 72192 —-a-w- c:\windows\Internet Logs\xDBE1.tmp
2010-06-14 06:38 . 2010-06-14 09:14 304640 —-a-w- c:\windows\Internet Logs\xDBE0.tmp
2010-06-11 13:51 . 2007-03-13 13:28 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-06-09 14:10 . 2010-06-09 22:08 738816 —-a-w- c:\windows\Internet Logs\xDBDF.tmp
2010-06-09 07:54 . 2010-06-09 07:54 255697 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_09_11_36_08_small.dmp.zip
2010-06-08 05:51 . 2010-06-08 08:08 1592832 —-a-w- c:\windows\Internet Logs\xDBDE.tmp
2010-06-08 05:51 . 2010-06-08 08:08 1592832 —-a-w- c:\windows\Internet Logs\xDBDD.tmp
2010-06-07 04:58 . 2010-06-07 04:58 66138 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_07_08_43_43_small.dmp.zip
2010-06-07 04:43 . 2010-06-07 04:53 27648 —-a-w- c:\windows\Internet Logs\xDBDC.tmp
2010-06-06 13:30 . 2010-06-06 13:32 62464 —-a-w- c:\windows\Internet Logs\xDBDB.tmp
2010-06-06 12:29 . 2010-06-06 12:05 64948884 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_06_11_17_00_full.dmp.zip
2010-06-05 17:03 . 2010-06-06 06:02 1584640 —-a-w- c:\windows\Internet Logs\xDBDA.tmp
2010-06-05 17:03 . 2010-06-06 06:02 28160 —-a-w- c:\windows\Internet Logs\xDBD9.tmp
2010-06-05 08:09 . 2010-06-05 16:56 790016 —-a-w- c:\windows\Internet Logs\xDBD8.tmp
2010-06-04 09:52 . 2010-06-04 09:52 179723 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_06_04_13_46_04_small.dmp.zip
2010-06-03 06:19 . 2010-06-03 06:21 1576960 —-a-w- c:\windows\Internet Logs\xDBD7.tmp
2010-05-31 04:41 . 2010-05-31 09:58 1574400 —-a-w- c:\windows\Internet Logs\xDBD6.tmp
2010-05-30 06:03 . 2010-05-30 06:03 207766 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_05_29_14_03_33_small.dmp.zip
2010-05-25 09:23 . 2010-05-26 06:34 1570816 —-a-w- c:\windows\Internet Logs\xDBD5.tmp
2010-05-24 08:04 . 2008-03-11 19:17 ——– d—–w- c:\program files\DivX
2010-05-24 08:04 . 2010-03-06 01:55 ——– d—–w- c:\program files\Eudora 8.0 Beta 9
2010-05-22 12:14 . 2010-05-22 12:14 192503 —-a-w- c:\windows\Internet Logs\vsmon_2nd_2010_05_22_12_32_34_small.dmp.zip
2010-05-19 05:25 . 2010-05-19 07:01 432640 —-a-w- c:\windows\Internet Logs\xDBD4.tmp
2010-05-16 04:52 . 2010-05-16 04:54 314880 —-a-w- c:\windows\Internet Logs\xDBD3.tmp
2010-05-08 21:50 . 2010-05-10 17:13 1520640 —-a-w- c:\windows\Internet Logs\xDBD2.tmp
2010-05-05 11:04 . 2010-05-05 12:37 525312 -c–a-w- c:\windows\Internet Logs\xDBD1.tmp
2010-05-04 17:20 . 2004-08-11 17:00 832512 —-a-w- c:\windows\system32\wininet.dll
2010-05-04 17:20 . 2009-10-31 09:27 78336 —-a-w- c:\windows\system32\ieencode.dll
2010-05-04 17:20 . 2004-08-11 17:00 17408 —-a-w- c:\windows\system32\corpol.dll
2010-05-02 05:22 . 2004-08-11 17:00 1851264 —-a-w- c:\windows\system32\win32k.sys
2010-04-25 13:21 . 2010-04-26 06:40 89600 -c–a-w- c:\windows\Internet Logs\xDBD0.tmp
2010-04-25 07:57 . 2010-04-25 08:48 48128 -c–a-w- c:\windows\Internet Logs\xDBCF.tmp
2010-04-24 13:19 . 2010-04-24 20:35 1305088 -c–a-w- c:\windows\Internet Logs\xDBCE.tmp
2010-04-22 17:20 . 2010-04-23 09:37 3832320 -c–a-w- c:\windows\Internet Logs\xDBCD.tmp
2010-04-22 17:20 . 2010-04-23 09:37 3832320 -c–a-w- c:\windows\Internet Logs\xDBCC.tmp
2010-04-20 05:30 . 2004-08-11 17:00 285696 —-a-w- c:\windows\system32\atmfd.dll
2010-04-15 09:30 . 2010-04-16 11:23 3805184 -c–a-w- c:\windows\Internet Logs\xDBCB.tmp
.

((((((((((((((((((((((((((((( SnapShot@2010-07-04_10.49.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-12-21 11:05 . 2009-10-16 21:39 72584 c:\windows\zllsputility.exe
- 2008-12-21 11:05 . 2009-03-31 15:20 72584 c:\windows\zllsputility.exe
+ 2009-07-11 20:02 . 2009-07-11 20:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
+ 2009-07-11 20:05 . 2009-07-11 20:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
+ 2009-07-11 20:05 . 2009-07-11 20:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
+ 2010-07-04 12:05 . 2009-10-16 21:39 99208 c:\windows\system32\ZoneLabs\zlquarantine.dll
+ 2010-07-04 12:05 . 2009-10-16 21:39 65928 c:\windows\system32\ZoneLabs\zatray.exe
+ 2010-07-04 12:06 . 2009-10-16 21:39 17288 c:\windows\system32\ZoneLabs\updlog.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 20872 c:\windows\system32\ZoneLabs\lib\zsys.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 14216 c:\windows\system32\ZoneLabs\lib\zmenu.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 14216 c:\windows\system32\ZoneLabs\lib\zmenu.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 24968 c:\windows\system32\ZoneLabs\lib\zfde.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 85384 c:\windows\system32\ZoneLabs\lib\ZAlert.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 35720 c:\windows\system32\ZoneLabs\lib\UpdateUI.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 11144 c:\windows\system32\ZoneLabs\lib\oem_1488.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 11144 c:\windows\system32\ZoneLabs\lib\oem_1488.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 11144 c:\windows\system32\ZoneLabs\lib\oem_1487.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 11144 c:\windows\system32\ZoneLabs\lib\oem_1487.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 11144 c:\windows\system32\ZoneLabs\lib\oem_1486.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 11144 c:\windows\system32\ZoneLabs\lib\oem_1486.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 18824 c:\windows\system32\ZoneLabs\lib\oem_1466.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 11144 c:\windows\system32\ZoneLabs\lib\oem_1460.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 11144 c:\windows\system32\ZoneLabs\lib\oem_1460.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 10120 c:\windows\system32\ZoneLabs\lib\oem_1454.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 10120 c:\windows\system32\ZoneLabs\lib\oem_1454.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 11144 c:\windows\system32\ZoneLabs\lib\oem_1445.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 11144 c:\windows\system32\ZoneLabs\lib\oem_1445.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 14216 c:\windows\system32\ZoneLabs\lib\oem_1440.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 14216 c:\windows\system32\ZoneLabs\lib\oem_1440.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 12168 c:\windows\system32\ZoneLabs\lib\oem_1413.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 12168 c:\windows\system32\ZoneLabs\lib\oem_1413.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 11144 c:\windows\system32\ZoneLabs\lib\oem_1010.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 11144 c:\windows\system32\ZoneLabs\lib\oem_1010.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 29064 c:\windows\system32\ZoneLabs\lib\NavBar.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 12680 c:\windows\system32\ZoneLabs\lib\MainLoop.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 35720 c:\windows\system32\ZoneLabs\lib\Alert.zip.dll
- 2009-04-15 11:15 . 2009-03-31 15:21 35720 c:\windows\system32\ZoneLabs\lib\Alert.zip.dll
+ 2010-07-04 12:05 . 2009-10-16 21:39 38280 c:\windows\system32\ZoneLabs\featuremap.dll
- 2009-04-15 11:16 . 2009-03-31 15:20 38280 c:\windows\system32\ZoneLabs\featuremap.dll
- 2009-04-15 11:16 . 2009-03-31 15:20 98184 c:\windows\system32\ZoneLabs\fbl.dll
+ 2010-07-04 12:05 . 2009-10-16 21:39 98184 c:\windows\system32\ZoneLabs\fbl.dll
- 2009-04-15 11:19 . 2009-03-31 15:20 74632 c:\windows\system32\ZoneLabs\camupd.dll
+ 2010-07-04 12:06 . 2009-10-16 21:39 74632 c:\windows\system32\ZoneLabs\camupd.dll
+ 2010-07-13 06:18 . 2010-07-13 06:18 61481 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0009.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 90029 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0008.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 90116 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0007.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 90060 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0006.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 90110 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0005.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 90127 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0004.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 90093 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0003.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 83780 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0002.dat
+ 2010-07-13 06:18 . 2010-07-13 06:18 65037 c:\windows\system32\ZoneLabs\avsys\temp\update\rollback\bases\apu\apu0001.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 55057 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0011.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 67791 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0010.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 62647 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0009.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 90118 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0008.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 90086 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0007.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 90140 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0006.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 90076 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0005.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 90106 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0004.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 54985 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0003.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 90105 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0002.dat
+ 2010-07-04 17:48 . 2010-07-13 06:18 82703 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0001.dat
+ 2010-07-04 13:34 . 2010-07-13 06:15 51238 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0018.dat
+ 2010-07-04 13:34 . 2010-07-04 13:34 51228 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0017.dat
+ 2010-07-04 13:34 . 2010-07-04 13:34 51228 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0016.dat
+ 2010-07-04 13:34 . 2010-07-04 13:34 51228 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0015.dat
+ 2010-07-04 13:34 . 2010-07-04 13:34 51225 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0014.dat
+ 2010-07-04 13:34 . 2010-07-04 13:34 51223 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0013.dat
+ 2010-07-04 13:34 . 2010-07-04 13:34 51228 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0012.dat
+ 2010-07-04 13:34 . 2010-07-04 13:34 51226 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0011.dat
+ 2010-07-04 17:47 . 2010-07-04 17:47 42253 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\av\emu\i386\kimul64.dat
+ 2010-07-04 17:47 . 2010-07-04 17:47 41229 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\av\emu\i386\kimul32.dat
+ 2010-07-04 17:47 . 2010-07-04 17:47 35272 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\av\ark\i386\win\mark32.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 78528 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0009.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 90050 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0008.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 90096 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0007.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 90084 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0006.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 90105 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0005.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 90115 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0004.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 90092 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0003.dat
+ 2010-07-04 17:47 . 2010-07-13 06:17 83090 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0002.dat
+ 2010-07-04 17:46 . 2010-07-13 06:17 64720 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu0001.dat
+ 2010-07-04 12:05 . 2009-10-12 14:15 10240 c:\windows\system32\ZoneLabs\avsys\queue.dll
- 2009-04-15 11:17 . 2009-03-31 13:18 90112 c:\windows\system32\ZoneLabs\avsys\prremote.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 90112 c:\windows\system32\ZoneLabs\avsys\prremote.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 81920 c:\windows\system32\ZoneLabs\avsys\kavessi.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 81920 c:\windows\system32\ZoneLabs\avsys\kavesd.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 25600 c:\windows\system32\ZoneLabs\avsys\IpcLib.dll
+ 2010-07-04 12:06 . 2009-04-29 14:02 23040 c:\windows\system32\ZoneLabs\avsys\install\psapi.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 73728 c:\windows\system32\ZoneLabs\avsys\fssync.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 61440 c:\windows\system32\ZoneLabs\avsys\CKAHComm.dll
+ 2010-07-04 17:59 . 2010-07-04 17:59 48266 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0011.dat
+ 2010-07-04 17:59 . 2010-07-04 17:59 95038 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0010.dat
+ 2010-07-04 17:59 . 2010-07-04 17:59 90116 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0009.dat
+ 2010-07-04 17:59 . 2010-07-04 17:59 90118 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0008.dat
+ 2010-07-04 12:06 . 2010-07-04 17:59 90099 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0007.dat
+ 2010-07-04 12:06 . 2010-07-04 17:59 90082 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0006.dat
+ 2010-07-04 12:06 . 2010-07-04 17:59 90088 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0005.dat
+ 2010-07-04 12:06 . 2010-07-04 17:59 90090 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0004.dat
+ 2010-07-04 12:06 . 2010-07-04 17:59 57317 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0003.dat
+ 2010-07-04 12:06 . 2010-07-04 17:59 54692 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0002.dat
+ 2010-07-04 12:06 . 2010-07-04 17:59 54834 c:\windows\system32\ZoneLabs\avsys\bases\wmuf0001.dat
+ 2010-07-04 12:06 . 2010-07-04 17:55 35272 c:\windows\system32\ZoneLabs\avsys\bases\mark32.dat
+ 2010-07-04 12:06 . 2009-10-12 14:15 33011 c:\windows\system32\ZoneLabs\avsys\bases\klark32.dat
+ 2010-07-04 12:06 . 2010-07-04 17:56 42253 c:\windows\system32\ZoneLabs\avsys\bases\kimul64.dat
+ 2010-07-04 12:06 . 2010-07-04 17:56 41229 c:\windows\system32\ZoneLabs\avsys\bases\kimul32.dat
+ 2010-07-04 17:56 . 2010-07-04 17:56 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0018.dat
+ 2010-07-04 17:56 . 2010-07-04 17:56 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0017.dat
+ 2010-07-04 17:56 . 2010-07-04 17:56 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0016.dat
+ 2010-07-04 17:56 . 2010-07-04 17:56 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0015.dat
+ 2010-07-04 17:56 . 2010-07-04 17:56 51225 c:\windows\system32\ZoneLabs\avsys\bases\bl0014.dat
+ 2010-07-04 17:56 . 2010-07-04 17:56 51223 c:\windows\system32\ZoneLabs\avsys\bases\bl0013.dat
+ 2010-07-04 12:06 . 2010-07-04 17:56 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0012.dat
+ 2010-07-04 12:06 . 2010-07-04 17:56 51226 c:\windows\system32\ZoneLabs\avsys\bases\bl0011.dat
+ 2010-07-04 12:06 . 2009-09-28 09:18 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0010.dat
+ 2010-07-04 12:06 . 2009-09-28 09:18 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0009.dat
+ 2010-07-04 12:06 . 2009-05-28 13:50 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0008.dat
+ 2010-07-04 12:06 . 2009-07-02 13:55 51210 c:\windows\system32\ZoneLabs\avsys\bases\bl0007.dat
+ 2010-07-04 12:06 . 2009-05-28 13:50 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0006.dat
+ 2010-07-04 12:06 . 2009-05-28 13:50 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0005.dat
+ 2010-07-04 12:06 . 2009-05-28 13:50 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0004.dat
+ 2010-07-04 12:06 . 2009-05-28 13:50 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0003.dat
+ 2010-07-04 12:06 . 2009-05-28 13:50 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0002.dat
+ 2010-07-04 12:06 . 2009-05-28 13:50 51228 c:\windows\system32\ZoneLabs\avsys\bases\bl0001.dat
+ 2010-07-04 17:48 . 2010-07-13 06:20 61481 c:\windows\system32\ZoneLabs\avsys\bases\apu0009.dat
+ 2010-07-04 17:48 . 2010-07-13 06:20 90029 c:\windows\system32\ZoneLabs\avsys\bases\apu0008.dat
+ 2010-07-04 17:48 . 2010-07-13 06:20 90116 c:\windows\system32\ZoneLabs\avsys\bases\apu0007.dat
+ 2010-07-04 17:48 . 2010-07-13 06:20 90060 c:\windows\system32\ZoneLabs\avsys\bases\apu0006.dat
+ 2010-07-04 17:48 . 2010-07-13 06:20 90110 c:\windows\system32\ZoneLabs\avsys\bases\apu0005.dat
+ 2010-07-04 17:48 . 2010-07-13 06:20 90127 c:\windows\system32\ZoneLabs\avsys\bases\apu0004.dat
+ 2010-07-04 12:05 . 2010-07-13 06:20 90093 c:\windows\system32\ZoneLabs\avsys\bases\apu0003.dat
+ 2010-07-04 12:05 . 2010-07-13 06:20 83780 c:\windows\system32\ZoneLabs\avsys\bases\apu0002.dat
+ 2010-07-04 12:05 . 2010-07-13 06:20 65037 c:\windows\system32\ZoneLabs\avsys\bases\apu0001.dat
+ 2010-07-04 12:04 . 2009-10-16 21:39 41864 c:\windows\system32\vswmi.dll
- 2008-12-21 11:04 . 2009-03-31 15:20 58248 c:\windows\system32\vsregexp.dll
+ 2008-12-21 11:04 . 2009-10-16 21:39 58248 c:\windows\system32\vsregexp.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 44544 c:\windows\system32\pngfilt.dll
+ 2004-08-11 17:00 . 2007-08-13 14:01 48128 c:\windows\system32\mshtmler.dll
- 2004-08-11 17:00 . 2009-03-08 00:31 48128 c:\windows\system32\mshtmler.dll
- 2004-08-11 17:00 . 2009-03-08 00:31 45568 c:\windows\system32\mshta.exe
+ 2004-08-11 17:00 . 2007-08-13 14:32 45568 c:\windows\system32\mshta.exe
+ 2007-08-13 14:36 . 2007-08-13 14:36 12288 c:\windows\system32\msfeedssync.exe
+ 2007-08-13 14:54 . 2010-05-04 17:20 52224 c:\windows\system32\msfeedsbs.dll
+ 2004-08-11 17:00 . 2007-08-13 14:44 40960 c:\windows\system32\licmgr10.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 27648 c:\windows\system32\jsproxy.dll
+ 2004-08-11 17:00 . 2007-08-13 14:39 92672 c:\windows\system32\inseng.dll
+ 2004-08-11 17:00 . 2007-08-13 14:36 36352 c:\windows\system32\imgutil.dll
+ 2004-08-11 17:00 . 2007-08-13 14:39 55296 c:\windows\system32\iesetup.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 44544 c:\windows\system32\iernonce.dll
+ 2004-08-11 17:00 . 2010-05-04 12:39 70656 c:\windows\system32\ie4uinit.exe
+ 2007-08-13 14:36 . 2010-05-04 17:20 63488 c:\windows\system32\icardie.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2007-08-13 14:01 . 2009-03-08 00:31 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-13 14:01 . 2007-08-13 14:01 48128 c:\windows\system32\dllcache\mshtmler.dll
- 2007-08-13 14:32 . 2009-03-08 00:31 45568 c:\windows\system32\dllcache\mshta.exe
+ 2007-08-13 14:32 . 2007-08-13 14:32 45568 c:\windows\system32\dllcache\mshta.exe
+ 2008-01-17 18:11 . 2010-05-04 17:20 52224 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2004-08-11 17:00 . 2007-08-13 14:44 40960 c:\windows\system32\dllcache\licmgr10.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2004-08-11 17:00 . 2007-08-13 14:39 92672 c:\windows\system32\dllcache\inseng.dll
+ 2007-08-13 14:36 . 2007-08-13 14:36 36352 c:\windows\system32\dllcache\imgutil.dll
+ 2008-01-17 18:11 . 2010-05-04 12:39 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2008-01-17 18:11 . 2009-02-20 10:20 13824 c:\windows\system32\dllcache\ieudinit.exe
+ 2004-08-11 17:00 . 2007-08-13 14:39 55296 c:\windows\system32\dllcache\iesetup.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2009-10-31 09:27 . 2010-05-04 17:20 78336 c:\windows\system32\dllcache\ieencode.dll
+ 2007-08-13 14:39 . 2010-05-04 12:39 70656 c:\windows\system32\dllcache\ie4uinit.exe
+ 2008-01-17 18:11 . 2010-05-04 17:20 63488 c:\windows\system32\dllcache\icardie.dll
+ 2004-08-11 17:12 . 2007-08-13 14:18 60416 c:\windows\system32\dllcache\hmmapi.dll
+ 2010-05-04 17:20 . 2010-05-04 17:20 17408 c:\windows\system32\dllcache\corpol.dll
+ 2004-08-11 17:00 . 2007-08-13 14:39 71680 c:\windows\system32\dllcache\admparse.dll
+ 2004-08-11 17:00 . 2007-08-13 14:39 71680 c:\windows\system32\admparse.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 44544 c:\windows\ie7updates\KB982381-IE7\pngfilt.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 52224 c:\windows\ie7updates\KB982381-IE7\msfeedsbs.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 27648 c:\windows\ie7updates\KB982381-IE7\jsproxy.dll
+ 2010-07-05 08:41 . 2009-02-20 10:20 13824 c:\windows\ie7updates\KB982381-IE7\ieudinit.exe
+ 2010-07-05 08:41 . 2009-02-20 18:09 44544 c:\windows\ie7updates\KB982381-IE7\iernonce.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 78336 c:\windows\ie7updates\KB982381-IE7\ieencode.dll
+ 2010-07-05 08:41 . 2009-02-20 10:20 70656 c:\windows\ie7updates\KB982381-IE7\ie4uinit.exe
+ 2010-07-05 08:41 . 2009-02-20 18:09 63488 c:\windows\ie7updates\KB982381-IE7\icardie.dll
+ 2010-07-05 08:41 . 2008-04-14 00:11 35328 c:\windows\ie7updates\KB982381-IE7\corpol.dll
+ 2010-07-04 17:48 . 2010-07-13 06:18 1733 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\wmuf\wmuf0000.dat
+ 2010-07-04 13:34 . 2010-07-13 06:15 6641 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\blst\bl0019.dat
+ 2010-07-04 17:47 . 2010-07-04 17:47 2180 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\av\wa\geowl.dat
+ 2010-07-04 17:59 . 2010-07-04 17:59 2180 c:\windows\system32\ZoneLabs\avsys\bases\geowl.dat
+ 2009-07-11 20:02 . 2009-07-11 20:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
+ 2009-07-11 20:05 . 2009-07-11 20:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2010-07-04 12:05 . 2009-10-16 21:39 141192 c:\windows\system32\ZoneLabs\zlupdate.dll
- 2009-04-15 11:17 . 2009-03-31 15:20 172936 c:\windows\system32\ZoneLabs\vsvault.dll
+ 2010-07-04 12:05 . 2009-10-16 21:39 172936 c:\windows\system32\ZoneLabs\vsvault.dll
+ 2010-07-04 11:57 . 2009-10-16 21:39 210824 c:\windows\system32\ZoneLabs\vsdb.dll
+ 2010-07-04 12:05 . 2007-10-11 12:51 832984 c:\windows\system32\ZoneLabs\updating.dll
- 2009-04-15 11:16 . 2007-10-11 12:51 832984 c:\windows\system32\ZoneLabs\updating.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 434568 c:\windows\system32\ZoneLabs\ssleay32.dll
+ 2010-07-04 12:05 . 2009-10-16 21:39 135048 c:\windows\system32\ZoneLabs\scheduler.dll
+ 2010-07-04 12:05 . 2009-07-13 19:58 722392 c:\windows\system32\ZoneLabs\qrbase.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 119688 c:\windows\system32\ZoneLabs\lib\zui.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 271240 c:\windows\system32\ZoneLabs\lib\TrayTest.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 169352 c:\windows\system32\ZoneLabs\lib\Overview.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 369544 c:\windows\system32\ZoneLabs\lib\LicenseUI.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 137608 c:\windows\system32\ZoneLabs\lib\DashBoard.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 372104 c:\windows\system32\ZoneLabs\lib\ConfigWizard.zip.dll
+ 2010-07-04 11:57 . 2009-10-09 16:33 579048 c:\windows\system32\ZoneLabs\icslta.dll
+ 2010-07-04 13:34 . 2010-07-04 13:34 275792 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\av\kdb\i386\win\avengine.dll
+ 2010-07-04 17:46 . 2010-07-04 17:46 349119 c:\windows\system32\ZoneLabs\avsys\temp\temporaryFolder\bases\apu\apu.dat
+ 2010-07-04 12:05 . 2009-10-12 14:15 163840 c:\windows\system32\ZoneLabs\avsys\prloader.dll
- 2009-04-15 11:17 . 2009-03-31 13:18 626688 c:\windows\system32\ZoneLabs\avsys\msvcr80.dll
+ 2010-07-04 12:05 . 2009-04-29 14:01 626688 c:\windows\system32\ZoneLabs\avsys\msvcr80.dll
+ 2010-07-04 12:05 . 2009-04-29 14:01 548864 c:\windows\system32\ZoneLabs\avsys\msvcp80.dll
- 2009-04-15 11:17 . 2009-03-31 13:18 548864 c:\windows\system32\ZoneLabs\avsys\msvcp80.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 245760 c:\windows\system32\ZoneLabs\avsys\kavess.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 348160 c:\windows\system32\ZoneLabs\avsys\kave8.dll
+ 2010-07-04 12:06 . 2009-10-12 14:15 198144 c:\windows\system32\ZoneLabs\avsys\install\udinstaller64.exe
+ 2010-07-04 12:06 . 2009-10-12 14:15 139264 c:\windows\system32\ZoneLabs\avsys\install\udinstaller32.exe
+ 2010-07-04 12:06 . 2009-10-12 14:15 317072 c:\windows\system32\ZoneLabs\avsys\install\instdrivers\mklif\fre_wxp_x86\klif.sys
+ 2010-07-04 12:06 . 2009-10-12 14:15 305168 c:\windows\system32\ZoneLabs\avsys\install\instdrivers\mklif\fre_wlh_x86\klif.sys
+ 2010-07-04 12:06 . 2009-10-12 14:15 128016 c:\windows\system32\ZoneLabs\avsys\install\instdrivers\kl1\x86\kl1.sys
+ 2010-07-04 12:05 . 2009-10-12 14:15 372736 c:\windows\system32\ZoneLabs\avsys\CKAHUM.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 143360 c:\windows\system32\ZoneLabs\avsys\CKAHStat.dll
+ 2010-07-04 12:05 . 2009-10-12 14:15 135168 c:\windows\system32\ZoneLabs\avsys\ckahrule.dll
+ 2010-07-04 17:57 . 2010-07-04 17:57 275792 c:\windows\system32\ZoneLabs\avsys\bases\avengine.dll
+ 2010-07-04 17:48 . 2010-07-04 17:48 349119 c:\windows\system32\ZoneLabs\avsys\bases\apu.dat
+ 2010-07-04 12:06 . 2009-10-16 21:39 466312 c:\windows\system32\ZoneLabs\av.dll
+ 2007-08-13 14:45 . 2007-08-13 14:45 206336 c:\windows\system32\winfxdocobj.exe
+ 2004-08-11 17:00 . 2010-05-04 17:20 233472 c:\windows\system32\webcheck.dll
+ 2008-12-21 11:03 . 2009-10-16 21:39 109960 c:\windows\system32\vsxml.dll
- 2008-12-21 11:03 . 2009-03-31 15:20 109960 c:\windows\system32\vsxml.dll
+ 2010-07-04 11:57 . 2009-10-16 21:39 620936 c:\windows\system32\vsutil.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 299912 c:\windows\system32\vspubapi.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 107912 c:\windows\system32\vsmonapi.dll
+ 2010-07-04 11:57 . 2009-10-16 21:39 227720 c:\windows\system32\vsinit.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 486280 c:\windows\system32\vsdatant.sys
+ 2010-07-04 12:04 . 2009-10-16 21:39 112008 c:\windows\system32\vsdata.dll
+ 2004-08-11 17:00 . 2010-03-09 11:09 430080 c:\windows\system32\vbscript.dll
- 2004-08-11 17:00 . 2009-03-08 00:34 105984 c:\windows\system32\url.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 105984 c:\windows\system32\url.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 102912 c:\windows\system32\occache.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 671232 c:\windows\system32\mstime.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 193024 c:\windows\system32\msrating.dll
- 2004-08-11 17:00 . 2009-03-08 00:22 156160 c:\windows\system32\msls31.dll
+ 2004-08-11 17:00 . 2007-08-13 14:54 156160 c:\windows\system32\msls31.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 477696 c:\windows\system32\mshtmled.dll
+ 2007-08-13 14:54 . 2010-05-04 17:20 459264 c:\windows\system32\msfeeds.dll
+ 2004-08-11 17:00 . 2009-08-13 15:16 512000 c:\windows\system32\jscript.dll
+ 2007-08-13 14:54 . 2007-08-13 14:54 180736 c:\windows\system32\ieui.dll
+ 2007-08-13 14:34 . 2010-05-04 17:20 268288 c:\windows\system32\iertutil.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 192512 c:\windows\system32\iepeers.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 385024 c:\windows\system32\iedkcs32.dll
+ 2007-07-11 08:27 . 2010-05-04 17:20 380928 c:\windows\system32\ieapfltr.dll
+ 2004-08-11 17:00 . 2010-04-16 11:43 161792 c:\windows\system32\ieakui.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 230400 c:\windows\system32\ieaksie.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 153088 c:\windows\system32\ieakeng.dll
- 2004-08-11 17:00 . 2009-02-20 18:09 133120 c:\windows\system32\extmgr.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 133120 c:\windows\system32\extmgr.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 214528 c:\windows\system32\dxtrans.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 347136 c:\windows\system32\dxtmsft.dll
+ 2010-07-04 12:06 . 2009-10-12 14:15 317072 c:\windows\system32\drivers\klif.sys
+ 2007-01-28 12:37 . 2010-05-04 17:20 832512 c:\windows\system32\dllcache\wininet.dll
+ 2007-08-13 14:54 . 2010-05-04 17:20 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2007-01-28 12:38 . 2007-07-12 23:31 765952 c:\windows\system32\dllcache\vgx.dll
+ 2008-05-09 10:53 . 2010-03-09 11:09 430080 c:\windows\system32\dllcache\vbscript.dll
- 2007-08-13 14:44 . 2009-03-08 00:34 105984 c:\windows\system32\dllcache\url.dll
+ 2007-08-13 14:44 . 2010-05-04 17:20 105984 c:\windows\system32\dllcache\url.dll
+ 2007-08-13 14:44 . 2010-05-04 17:20 102912 c:\windows\system32\dllcache\occache.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 671232 c:\windows\system32\dllcache\mstime.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 193024 c:\windows\system32\dllcache\msrating.dll
+ 2007-08-13 14:54 . 2007-08-13 14:54 156160 c:\windows\system32\dllcache\msls31.dll
- 2007-08-13 14:54 . 2009-03-08 00:22 156160 c:\windows\system32\dllcache\msls31.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 477696 c:\windows\system32\dllcache\mshtmled.dll
+ 2008-01-17 18:11 . 2010-05-04 17:20 459264 c:\windows\system32\dllcache\msfeeds.dll
+ 2008-05-09 10:53 . 2009-08-13 15:16 512000 c:\windows\system32\dllcache\jscript.dll
+ 2007-08-13 14:43 . 2010-04-16 11:43 634656 c:\windows\system32\dllcache\iexplore.exe
+ 2008-01-17 18:11 . 2010-05-04 17:20 268288 c:\windows\system32\dllcache\iertutil.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 192512 c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-13 14:39 . 2010-05-04 17:20 385024 c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-01-17 18:11 . 2010-05-04 17:20 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2004-08-11 17:00 . 2010-04-16 11:43 161792 c:\windows\system32\dllcache\ieakui.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2007-01-28 12:37 . 2009-02-20 18:09 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 214528 c:\windows\system32\dllcache\dxtrans.dll
+ 2007-01-28 12:37 . 2010-05-04 17:20 347136 c:\windows\system32\dllcache\dxtmsft.dll
+ 2007-08-13 14:39 . 2010-05-04 17:20 124928 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 124928 c:\windows\system32\advpack.dll
+ 2010-07-13 10:19 . 2010-07-13 10:19 259584 c:\windows\Installer\efcd6b.msi
+ 2010-07-13 10:19 . 2010-07-13 10:19 109806 c:\windows\Installer\{1A834332-A9EE-440C-9505-2D07F445F05A}\_6FEFF9B68218417F98F549.exe
+ 2010-07-05 08:41 . 2009-03-03 00:18 826368 c:\windows\ie7updates\KB982381-IE7\wininet.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 233472 c:\windows\ie7updates\KB982381-IE7\webcheck.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 105984 c:\windows\ie7updates\KB982381-IE7\url.dll
+ 2010-07-05 08:41 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB982381-IE7\spuninst\updspapi.dll
+ 2010-07-05 08:41 . 2008-07-08 13:02 231288 c:\windows\ie7updates\KB982381-IE7\spuninst\spuninst.exe
+ 2010-07-05 08:41 . 2009-02-20 18:09 102912 c:\windows\ie7updates\KB982381-IE7\occache.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 671232 c:\windows\ie7updates\KB982381-IE7\mstime.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 193024 c:\windows\ie7updates\KB982381-IE7\msrating.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 477696 c:\windows\ie7updates\KB982381-IE7\mshtmled.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 459264 c:\windows\ie7updates\KB982381-IE7\msfeeds.dll
+ 2010-07-05 08:41 . 2009-02-28 04:54 636072 c:\windows\ie7updates\KB982381-IE7\iexplore.exe
+ 2010-07-05 08:41 . 2009-02-20 18:09 268288 c:\windows\ie7updates\KB982381-IE7\iertutil.dll
+ 2010-07-05 08:41 . 2007-08-13 14:54 191488 c:\windows\ie7updates\KB982381-IE7\iepeers.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 385024 c:\windows\ie7updates\KB982381-IE7\iedkcs32.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 383488 c:\windows\ie7updates\KB982381-IE7\ieapfltr.dll
+ 2010-07-05 08:41 . 2009-02-20 05:14 161792 c:\windows\ie7updates\KB982381-IE7\ieakui.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 230400 c:\windows\ie7updates\KB982381-IE7\ieaksie.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 153088 c:\windows\ie7updates\KB982381-IE7\ieakeng.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 133120 c:\windows\ie7updates\KB982381-IE7\extmgr.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 214528 c:\windows\ie7updates\KB982381-IE7\dxtrans.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 347136 c:\windows\ie7updates\KB982381-IE7\dxtmsft.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 124928 c:\windows\ie7updates\KB982381-IE7\advpack.dll
+ 2009-10-31 09:27 . 2006-09-06 13:43 213216 c:\windows\ie7\spuninst\spuninst.exe
+ 2009-07-11 20:02 . 2009-07-11 20:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
+ 2009-07-11 20:02 . 2009-07-11 20:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 1789320 c:\windows\system32\ZoneLabs\vsruledb.dll
+ 2010-07-04 12:04 . 2009-10-16 21:41 2384240 c:\windows\system32\ZoneLabs\vsmon.exe
- 2009-04-15 11:16 . 2009-03-31 15:21 1536392 c:\windows\system32\ZoneLabs\lib\zpy.zip.dll
+ 2010-07-04 12:04 . 2009-10-16 21:39 1536392 c:\windows\system32\ZoneLabs\lib\zpy.zip.dll
+ 2010-07-04 12:06 . 2009-10-13 13:19 1150976 c:\windows\system32\ZoneLabs\avsys\updsdk.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 1168384 c:\windows\system32\urlmon.dll
+ 2004-08-11 17:00 . 2010-05-04 17:20 3600384 c:\windows\system32\mshtml.dll
+ 2007-08-13 14:54 . 2010-05-04 17:20 6067200 c:\windows\system32\ieframe.dll
+ 2007-02-12 12:10 . 2010-02-22 22:04 2452872 c:\windows\system32\ieapfltr.dat
+ 2007-01-28 12:37 . 2010-05-04 17:20 1168384 c:\windows\system32\dllcache\urlmon.dll
+ 2006-07-28 04:28 . 2010-05-04 17:20 3600384 c:\windows\system32\dllcache\mshtml.dll
+ 2008-01-17 18:11 . 2010-05-04 17:20 6067200 c:\windows\system32\dllcache\ieframe.dll
+ 2008-01-17 18:11 . 2010-02-22 22:04 2452872 c:\windows\system32\dllcache\ieapfltr.dat
+ 2010-07-05 08:41 . 2009-02-20 18:09 1160192 c:\windows\ie7updates\KB982381-IE7\urlmon.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 3595264 c:\windows\ie7updates\KB982381-IE7\mshtml.dll
+ 2010-07-05 08:41 . 2009-02-20 18:09 6066176 c:\windows\ie7updates\KB982381-IE7\ieframe.dll
+ 2010-07-05 08:41 . 2008-07-09 14:25 2455488 c:\windows\ie7updates\KB982381-IE7\ieapfltr.dat
+ 2008-11-17 16:14 . 2010-07-13 06:51 12089344 c:\windows\system32\ZoneLabs\zlqrtdb.dat
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Green]
@="{95A27763-F62A-4114-9072-E81D87DE3B68}"
[HKEY_CLASSES_ROOT\CLSID\{95A27763-F62A-4114-9072-E81D87DE3B68}]
2008-06-06 17:02 527296 —-a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Partial]
@="{E300CD91-100F-4E67-9AF3-1384A6124015}"
[HKEY_CLASSES_ROOT\CLSID\{E300CD91-100F-4E67-9AF3-1384A6124015}]
2008-06-06 17:02 527296 —-a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Yellow]
@="{5E529433-B50E-4bef-A63B-16A6B71B071A}"
[HKEY_CLASSES_ROOT\CLSID\{5E529433-B50E-4bef-A63B-16A6B71B071A}]
2008-06-06 17:02 527296 —-a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SigmatelSysTrayApp"="stsystra.exe" [2006-03-24 282624]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-10-16 1037192]
"ISW"="c:\program files\CheckPoint\ZAForceField\ForceField.exe" [2009-10-14 730480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]
"{EDB0E980-90BD-11D4-8599-0008C7D3B6F8}"= "c:\program files\Qualcomm\Eudora\EuShlExt.dll" [2005-08-09 86016]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 wvauth

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\POWERPNT.EXE"=
"c:\\Program Files\\CyberLink\\PCM4Everio\\PCM4Everio.exe"=
"c:\\Program Files\\CyberLink\\PCM4Everio\\EverioService.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\BitTorrent_DNA\\dna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [14/10/2009 17:30 25208]
R2 IswSvc;ZoneAlarm Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\ISWSVC.exe [14/10/2009 17:30 476528]
R2 PassManager;Network Password Manager;c:\program files\Network Password Manager\npmsvc.exe [06/07/2009 16:41 450456]
R3 gttap1;GoTrusted TAP Adapter;c:\windows\system32\drivers\gttap1.sys [31/08/2007 01:55 20480]
S3 GTKCMOS;GTKCMOS;c:\windows\system32\GTKCMOS.sys [15/06/2004 18:55 7882]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [20/02/2009 16:25 138112]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [20/02/2009 16:25 8320]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
getPlusHelper REG_MULTI_SZ getPlusHelper
.
.
——- Supplementary Scan ——-
.
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uStart Page = hxxp://www.yahoo.com/
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\admin\Start Menu\Programs\IMVU\Run IMVU.lnk
LSP: c:\progra~1\ONSPEED\sliplsp.dll
TCP: {24CDF941-02F7-4642-8855-1BC30827D0F8} = 4.2.2.2
DPF: {9166DA9D-23DD-43EC-B494-8E004F29CB7F} - hxxp://vnet2.aveva.com/VNETWebsite/codebase/vsplatform/VizStreamViewer3-9-3.cab
FF - ProfilePath - c:\documents and settings\admin\Application Data\Mozilla\Firefox\Profiles\u4xkbbdr.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-yff3&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://english.aljazeera.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-yff3&p=
FF - component: c:\documents and settings\admin\Application Data\Mozilla\Firefox\Profiles\u4xkbbdr.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}\platform\WINNT\components\FoxyTunes.dll
FF - component: c:\program files\CheckPoint\ZAForceField\TrustChecker\components\TrustCheckerMozillaPlugin.dll
FF - plugin: c:\program files\BitTorrent_DNA\npbtdna.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPTURNMED.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

—- FIREFOX POLICIES —-
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr
ef", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-14 10:16
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-1872034644-1506853369-1381675529-1005\Software\Microsoft\Windows\Shell\Bags\1]
@DACL=(02 0000)
@SACL=
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1296)
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'lsass.exe'(1352)
c:\windows\system32\wvauth.dll
c:\windows\system32\biolsp.dll
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'explorer.exe'(2216)
c:\windows\system32\WININET.dll
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-07-14 10:23:04
ComboFix-quarantined-files.txt 2010-07-14 06:22
ComboFix2.txt 2010-07-04 10:57

Pre-Run: 14,530,146,304 bytes free
Post-Run: 14,506,422,272 bytes free

- - End Of File - - C7C927AE0B232076248C023D6D40B769