Here is the ComboFix log
ComboFix 10-08-15.01 - Aboluna 08/15/2010 21:00:39.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.444 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Aboluna\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
file zipped: c:\windows\system32\drivers\krpoicn.sys
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\NetworkService\Local Settings\Application Data\voafokrds
c:\windows\system32\drivers\krpoicn.sys
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
——-\Legacy_krpoicn
——-\Service_krpoicn
((((((((((((((((((((((((( Files Created from 2010-07-16 to 2010-08-16 )))))))))))))))))))))))))))))))
.
2010-08-15 01:45 . 2010-08-15 01:45 ——– d—–w- c:\program files\EA GAMES
2010-08-14 23:56 . 2010-08-14 23:56 ——– d—–w- c:\program files\Trend Micro
2010-08-14 23:29 . 2010-08-14 23:29 ——– d—–w- c:\documents and settings\Aboluna\Application Data\Uniblue
2010-08-14 05:05 . 2010-08-14 05:05 ——– d—–w- c:\program files\Wedding Dash 4 Ever
2010-08-13 03:39 . 2010-04-29 20:39 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-08-13 03:39 . 2010-08-13 03:39 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-08-13 03:39 . 2010-04-29 20:39 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-08-13 03:26 . 2010-08-13 03:26 ——– d—–w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-08-13 03:20 . 2010-08-13 03:20 ——– d—–w- c:\program files\CCleaner
2010-08-13 03:15 . 2010-08-13 03:15 ——– d-sh–w- c:\documents and settings\Administrator\PrivacIE
2010-08-13 03:15 . 2010-08-13 03:15 ——– d-sh–w- c:\documents and settings\Administrator\IETldCache
2010-08-12 04:35 . 2010-08-12 04:35 ——– d-sh–w- c:\windows\system32\config\systemprofile\PrivacIE
2010-08-12 04:35 . 2010-08-12 05:05 ——– d—–w- c:\windows\system32\config\systemprofile\Application Data\StumbleUpon
2010-08-12 04:34 . 2010-08-12 04:34 ——– d-sh–w- c:\windows\system32\config\systemprofile\IETldCache
2010-08-12 03:01 . 2010-08-13 05:02 ——– d—–w- c:\documents and settings\All Users\Application Data\Update
2010-08-08 03:05 . 2010-08-08 03:05 ——– d—–w- c:\documents and settings\Aboluna\Application Data\Jumb-O-Fun Games
2010-08-06 18:28 . 2010-08-06 21:03 ——– d—–w- c:\windows\Help32
2010-08-06 18:28 . 2010-08-06 18:28 ——– d—–w- c:\windows\system32\weber
2010-07-30 23:20 . 2010-07-30 23:20 286720 ——w- c:\windows\Setup1.exe
2010-07-30 23:20 . 2010-07-30 23:20 73216 —-a-w- c:\windows\ST6UNST.EXE
2010-07-29 05:21 . 2008-04-13 15:39 5504 -c–a-w- c:\windows\system32\dllcache\mstee.sys
2010-07-29 05:21 . 2008-04-13 15:39 5504 —-a-w- c:\windows\system32\drivers\MSTEE.sys
2010-07-29 05:21 . 2008-04-13 15:46 10880 -c–a-w- c:\windows\system32\dllcache\ndisip.sys
2010-07-29 05:21 . 2008-04-13 15:46 10880 —-a-w- c:\windows\system32\drivers\NdisIP.sys
2010-07-29 05:21 . 2008-04-13 15:46 15232 -c–a-w- c:\windows\system32\dllcache\streamip.sys
2010-07-29 05:21 . 2008-04-13 15:46 15232 —-a-w- c:\windows\system32\drivers\StreamIP.sys
2010-07-29 05:20 . 2008-04-13 15:46 11136 -c–a-w- c:\windows\system32\dllcache\slip.sys
2010-07-29 05:20 . 2008-04-13 15:46 11136 —-a-w- c:\windows\system32\drivers\SLIP.sys
2010-07-29 05:20 . 2008-04-13 15:46 19200 -c–a-w- c:\windows\system32\dllcache\wstcodec.sys
2010-07-29 05:20 . 2008-04-13 15:46 19200 —-a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2010-07-29 05:20 . 2008-04-13 15:46 85248 -c–a-w- c:\windows\system32\dllcache\nabtsfec.sys
2010-07-29 05:20 . 2008-04-13 15:46 85248 —-a-w- c:\windows\system32\drivers\NABTSFEC.sys
2010-07-29 05:20 . 2008-04-13 15:46 17024 -c–a-w- c:\windows\system32\dllcache\ccdecode.sys
2010-07-29 05:20 . 2008-04-13 15:46 17024 —-a-w- c:\windows\system32\drivers\CCDECODE.sys
2010-07-29 05:20 . 2008-04-13 15:45 60032 -c–a-w- c:\windows\system32\dllcache\usbaudio.sys
2010-07-29 05:20 . 2008-04-13 15:45 60032 —-a-w- c:\windows\system32\drivers\USBAUDIO.sys
2010-07-29 05:20 . 2010-07-29 05:20 ——– d—–w- c:\windows\OvtCam
2010-07-29 05:19 . 2008-04-13 21:12 53760 -c–a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2010-07-29 05:19 . 2008-04-13 21:12 53760 —-a-w- c:\windows\system32\vfwwdm32.dll
2010-07-29 05:19 . 2008-04-13 15:45 32128 -c–a-w- c:\windows\system32\dllcache\usbccgp.sys
2010-07-29 05:19 . 2008-04-13 15:45 32128 —-a-w- c:\windows\system32\drivers\usbccgp.sys
2010-07-29 05:17 . 2003-10-14 10:13 200704 —-a-w- c:\windows\sel3110.exe
2010-07-29 05:17 . 2003-09-25 07:00 61440 —-a-w- c:\windows\ov519dib.dll
2010-07-29 05:17 . 2003-09-25 07:00 40960 —-a-w- c:\windows\system32\ov519ext.dll
2010-07-29 05:17 . 2003-09-25 07:00 25211 —-a-w- c:\windows\system32\drivers\ov519cmd.sys
2010-07-29 05:17 . 2003-09-25 07:00 174530 —-a-w- c:\windows\system32\drivers\ov519vid.sys
2010-07-29 05:17 . 2003-09-25 07:00 16426 —-a-w- c:\windows\system32\ov519usd.dll
2010-07-29 05:17 . 2003-09-25 07:00 135168 —-a-w- c:\windows\ov519cap.exe
2010-07-29 05:16 . 2010-07-29 05:16 ——– d—–w- c:\program files\GE
2010-07-29 05:16 . 2003-09-25 07:00 307200 —-a-w- c:\windows\vidcap32.exe
2010-07-29 05:16 . 2003-06-02 13:35 40960 —-a-w- c:\windows\CleanDev.exe
2010-07-29 05:16 . 2002-07-07 20:15 32528 —-a-w- c:\windows\amcap.exe
2010-07-26 02:27 . 2001-08-18 03:36 8704 -c–a-w- c:\windows\system32\dllcache\kbdjpn.dll
2010-07-26 02:27 . 2001-08-18 03:36 8704 —-a-w- c:\windows\system32\kbdjpn.dll
2010-07-26 02:27 . 2001-08-18 03:36 8192 -c–a-w- c:\windows\system32\dllcache\kbdkor.dll
2010-07-26 02:27 . 2001-08-18 03:36 8192 —-a-w- c:\windows\system32\kbdkor.dll
2010-07-26 02:27 . 2001-08-17 19:55 6144 -c–a-w- c:\windows\system32\dllcache\kbd101c.dll
2010-07-26 02:27 . 2001-08-17 19:55 6144 —-a-w- c:\windows\system32\kbd101c.dll
2010-07-26 02:27 . 2001-08-17 19:55 5632 -c–a-w- c:\windows\system32\dllcache\kbd103.dll
2010-07-26 02:27 . 2001-08-17 19:55 5632 —-a-w- c:\windows\system32\kbd103.dll
2010-07-26 02:27 . 2001-08-17 19:55 6144 -c–a-w- c:\windows\system32\dllcache\kbd101b.dll
2010-07-26 02:27 . 2001-08-17 19:55 6144 —-a-w- c:\windows\system32\kbd101b.dll
2010-07-26 02:27 . 2008-04-13 21:09 6144 -c–a-w- c:\windows\system32\dllcache\kbd106.dll
2010-07-26 02:27 . 2008-04-13 21:09 6144 —-a-w- c:\windows\system32\kbd106.dll
2010-07-25 23:06 . 2010-07-25 23:06 411368 —-a-w- c:\windows\system32\deployJava1.dll
2010-07-25 05:58 . 2010-08-15 15:06 ——– d—–w- c:\documents and settings\Aboluna\Application Data\StumbleUpon
2010-07-25 05:57 . 2010-07-25 05:58 ——– d—–w- c:\program files\StumbleUpon
2010-07-22 09:20 . 2010-07-22 09:38 ——– d-sh–w- c:\documents and settings\Aboluna\Local Settings\Application Data\.#
2010-07-22 03:12 . 2010-07-22 03:12 389120 –sh–w- c:\windows\Launcher.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-16 01:56 . 2009-11-24 00:20 ——– d—–w- c:\documents and settings\Aboluna\Application Data\uTorrent
2010-08-16 00:06 . 2010-04-19 07:11 ——– d—–w- c:\documents and settings\Aboluna\Application Data\vlc
2010-08-15 20:01 . 2009-11-27 18:43 ——– d—–w- c:\documents and settings\All Users\Application Data\Soulseek
2010-08-15 04:23 . 2009-12-22 16:21 ——– d—–w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-08-15 01:46 . 2006-02-15 16:20 ——– d–h–w- c:\program files\InstallShield Installation Information
2010-08-14 23:56 . 2010-08-14 23:56 388096 —-a-r- c:\documents and settings\Aboluna\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-08-13 02:35 . 2006-02-25 07:02 664 —-a-w- c:\windows\system32\d3d9caps.dat
2010-08-11 23:02 . 2009-12-07 18:39 2880 –sha-w- c:\windows\system32\KGyGaAvL.sys
2010-08-08 21:58 . 2010-05-12 22:22 ——– d—–w- c:\program files\Steam
2010-08-07 22:18 . 2010-06-09 21:42 86016 —-a-w- c:\windows\system32\OpenAL32.dll
2010-08-07 22:18 . 2010-06-09 21:42 262144 —-a-w- c:\windows\system32\wrap_oal.dll
2010-08-06 18:28 . 2006-02-16 16:59 53432 —-a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-08-05 18:15 . 2006-02-18 15:03 ——– d—–w- c:\program files\RGB
2010-07-25 23:08 . 2010-07-25 23:08 503808 —-a-w- c:\documents and settings\Aboluna\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-5b6fb651-n\msvcp71.dll
2010-07-25 23:08 . 2010-07-25 23:08 499712 —-a-w- c:\documents and settings\Aboluna\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-5b6fb651-n\jmc.dll
2010-07-25 23:08 . 2010-07-25 23:08 348160 —-a-w- c:\documents and settings\Aboluna\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-5b6fb651-n\msvcr71.dll
2010-07-25 23:07 . 2010-07-25 23:07 12800 —-a-w- c:\documents and settings\Aboluna\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-2e93519c-n\decora-d3d.dll
2010-07-25 23:07 . 2010-07-25 23:07 61440 —-a-w- c:\documents and settings\Aboluna\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-2e93519c-n\decora-sse.dll
2010-07-25 23:07 . 2006-02-16 09:28 ——– d—–w- c:\program files\Common Files\Java
2010-07-25 23:06 . 2006-02-16 09:28 ——– d—–w- c:\program files\Java
2010-07-17 00:58 . 2010-07-17 00:58 ——– d—–w- c:\program files\DAEMON Tools Lite
2010-07-14 14:03 . 2009-11-23 23:08 243024 —-a-w- c:\windows\system32\drivers\avgtdix.sys
2010-07-14 14:03 . 2010-07-14 14:03 12536 —-a-w- c:\windows\system32\avgrsstx.dll
2010-07-14 14:02 . 2009-11-23 23:08 216400 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2010-07-13 02:39 . 2010-07-13 02:39 ——– d—–w- c:\documents and settings\Aboluna\Application Data\IBAGroup
2010-07-12 17:42 . 2009-12-01 23:24 2580 —-a-w- c:\documents and settings\Aboluna\Application Data\wklnhst.dat
2010-07-11 02:10 . 2010-07-11 02:10 ——– d—–w- c:\documents and settings\Aboluna\Application Data\NCH Swift Sound
2010-07-11 02:10 . 2010-07-11 02:10 ——– d—–w- c:\program files\NCH Swift Sound
2010-07-08 16:05 . 2010-07-08 16:05 129160 —-a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-07-04 19:50 . 2010-07-04 19:50 ——– d—–w- c:\documents and settings\All Users\Application Data\Gamers Digital
2010-07-04 19:50 . 2010-07-04 19:50 ——– d—–w- c:\documents and settings\Aboluna\Application Data\Gamers Digital
2010-07-02 17:28 . 2010-07-01 02:04 ——– d—–w- c:\documents and settings\Aboluna\Application Data\Be a King 2
2010-06-30 12:31 . 2006-02-15 14:03 149504 —-a-w- c:\windows\system32\schannel.dll
2010-06-26 19:16 . 2010-06-25 20:32 139336 —-a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-06-26 19:16 . 2010-06-25 20:03 371776 —-a-w- c:\documents and settings\Aboluna\Application Data\id Software\quakelive\home\baseq3\cgamex86.dll
2010-06-26 19:16 . 2010-06-25 20:03 187456 —-a-w- c:\documents and settings\Aboluna\Application Data\id Software\quakelive\home\baseq3\uix86.dll
2010-06-26 19:16 . 2010-06-25 19:39 214720 —-a-w- c:\windows\system32\PnkBstrB.exe
2010-06-26 19:16 . 2010-06-25 20:03 887448 —-a-w- c:\documents and settings\Aboluna\Application Data\id Software\quakelive\home\pb\pbcl.dll
2010-06-26 19:16 . 2010-06-25 20:03 57344 —-a-w- c:\documents and settings\Aboluna\Application Data\id Software\quakelive\home\pb\pbag.dll
2010-06-26 19:16 . 2010-06-25 20:03 2436160 —-a-w- c:\documents and settings\Aboluna\Application Data\id Software\quakelive\home\baseq3\quakelive.dll
2010-06-25 20:17 . 2010-06-25 20:03 465984 —-a-w- c:\documents and settings\Aboluna\Application Data\id Software\quakelive\home\baseq3\qagamex86.dll
2010-06-25 20:12 . 2010-06-25 19:39 75064 —-a-w- c:\windows\system32\PnkBstrA.exe
2010-06-25 20:12 . 2010-06-25 19:39 2373712 —-a-w- c:\windows\system32\pbsvc.exe
2010-06-25 19:39 . 2010-06-25 19:39 ——– d—–w- c:\documents and settings\Aboluna\Application Data\id Software
2010-06-25 19:39 . 2010-06-25 19:39 ——– d—–w- c:\documents and settings\All Users\Application Data\id Software
2010-06-25 16:02 . 2009-12-15 22:03 ——– d—–w- c:\documents and settings\All Users\Application Data\PlayFirst
2010-06-25 16:02 . 2009-12-15 22:03 ——– d—–w- c:\documents and settings\Aboluna\Application Data\PlayFirst
2010-06-24 18:42 . 2010-06-24 18:42 ——– d—–w- c:\documents and settings\Aboluna\Application Data\YoudaGames
2010-06-24 12:22 . 2006-02-15 14:04 916480 —-a-w- c:\windows\system32\wininet.dll
2010-06-23 13:44 . 2006-02-15 14:04 1851904 —-a-w- c:\windows\system32\win32k.sys
2010-06-23 01:10 . 2010-06-23 01:10 ——– d—–w- c:\program files\NCH Software
2010-06-23 01:02 . 2010-06-23 01:02 ——– d—–w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2010-06-23 00:42 . 2010-06-23 00:42 200 —-a-w- c:\windows\QCPC80UI.dat
2010-06-22 03:17 . 2010-06-22 03:17 5694 —-a-r- c:\documents and settings\Aboluna\Application Data\Microsoft\Installer\{CA8056BC-05E8-41FB-82C2-4750568CD379}\_86C6042DE7694DB98B69E7.exe
2010-06-22 03:17 . 2010-06-22 03:17 5694 —-a-r- c:\documents and settings\Aboluna\Application Data\Microsoft\Installer\{CA8056BC-05E8-41FB-82C2-4750568CD379}\_3DB404C70A7AFA578074FD.exe
2010-06-22 03:17 . 2010-06-22 03:17 ——– d—–w- c:\program files\MiniTheatre
2010-06-21 15:27 . 2006-02-15 14:04 354304 —-a-w- c:\windows\system32\drivers\srv.sys
2010-06-18 14:58 . 2010-06-18 14:58 ——– d—–w- c:\documents and settings\All Users\Application Data\MythPeople
2010-06-17 14:33 . 2010-06-17 14:33 ——– d—–w- c:\documents and settings\All Users\Application Data\Cateia Games
2010-06-17 14:03 . 2006-02-15 14:02 80384 —-a-w- c:\windows\system32\iccvid.dll
2010-06-14 17:08 . 2010-06-21 16:18 545280 —-a-w- c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\libs\PicLensHelper.exe
2010-06-14 17:08 . 2010-06-21 16:18 4687360 —-a-w- c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\libs\cooliris192.dll
2010-06-14 17:08 . 2010-06-21 16:18 103424 —-a-w- c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\libs\pixomatic.dll
2010-06-14 17:08 . 2010-06-21 16:18 425984 —-a-w- c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\libs\LaunchCooliris.exe
2010-06-14 17:08 . 2010-06-21 16:18 152064 —-a-w- c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\plugins\npcoolirisplugin.dll
2010-06-14 17:08 . 2010-06-21 16:18 4687872 —-a-w- c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\libs\cooliris190.dll
2010-06-14 17:08 . 2010-06-21 16:18 57856 —-a-w- c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\components\coolirisstub.dll
2010-06-14 14:31 . 2006-02-15 15:36 744448 —-a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-14 07:41 . 2006-02-15 14:03 1172480 —-a-w- c:\windows\system32\msxml3.dll
2010-06-09 22:07 . 2010-06-09 22:07 691696 —-a-w- c:\windows\system32\drivers\sptd.sys
2010-06-08 01:04 . 2010-06-08 01:04 4096 —-a-w- c:\windows\d3dx.dat
2010-06-02 13:55 . 2009-11-23 23:08 29584 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-12-07 18:39 . 2009-12-07 18:39 88 –sh–r- c:\windows\system32\3457F750C5.sys
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
—- Directory of c:\documents and settings\Aboluna\Local Settings\Application Data\.# —-
—- Directory of c:\windows\Help32 —-
2010-08-06 20:58 . 2010-08-06 21:03 84 —-a-w- c:\windows\Help32\state.txt
2010-08-06 20:40 . 2010-08-06 20:41 20443 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\AE598F5Cd01
2010-08-06 20:40 . 2010-08-06 20:41 49661 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\DFD97C4Ad01
2010-08-06 20:40 . 2010-08-06 20:40 36064 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\105D09C7d01
2010-08-06 20:40 . 2010-08-06 20:40 27620 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\437383DEd01
2010-08-06 20:40 . 2010-08-06 20:40 20467 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\0A7309C7d01
2010-08-06 20:40 . 2010-08-06 20:40 57254 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\EEC96B3Ed01
2010-08-06 20:40 . 2010-08-06 20:40 34189 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\CFF82FA2d01
2010-08-06 20:40 . 2010-08-06 20:40 40647 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\9123C400d01
2010-08-06 20:40 . 2010-08-06 20:40 34101 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\870109CEd01
2010-08-06 20:40 . 2010-08-06 20:40 64841 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\E879F26Ed01
2010-08-06 20:40 . 2010-08-06 20:40 17531 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\E34CBB7Fd01
2010-08-06 20:40 . 2010-08-06 20:40 37892 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\27C0759Bd01
2010-08-06 20:40 . 2010-08-06 20:40 27620 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\8A1CFEB2d01
2010-08-06 20:40 . 2010-08-06 20:40 22854 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\650E650Ed01
2010-08-06 20:33 . 2010-08-06 20:33 19076 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\37C2F0D3d01
2010-08-06 20:33 . 2010-08-06 20:33 23889 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\2B38CFEFd01
2010-08-06 20:33 . 2010-08-06 20:33 69039 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\92B20517d01
2010-08-06 20:33 . 2010-08-06 20:33 106499 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\37FB9B46d01
2010-08-06 20:33 . 2010-08-06 20:33 50849 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\63196A21d01
2010-08-06 20:33 . 2010-08-06 20:33 48861 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\1FE8960Bd01
2010-08-06 20:33 . 2010-08-06 20:33 41142 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\45E0F999d01
2010-08-06 20:33 . 2010-08-06 20:33 37501 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\DE791729d01
2010-08-06 20:33 . 2010-08-06 20:33 48034 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\F1FFF418d01
2010-08-06 20:33 . 2010-08-06 20:33 35204 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\A76DAD3Ad01
2010-08-06 20:33 . 2010-08-06 20:33 45327 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\F449706Cd01
2010-08-06 20:33 . 2010-08-06 20:33 16556 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\97AB8031d01
2010-08-06 20:33 . 2010-08-06 20:33 50894 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\13E66A26d01
2010-08-06 20:32 . 2010-08-06 20:32 17229 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\43987B1Ad01
2010-08-06 20:32 . 2010-08-06 20:32 17074 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\43867B1Ad01
2010-08-06 20:32 . 2010-08-06 20:32 39991 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\1011F48Ed01
2010-08-06 20:32 . 2010-08-06 20:32 22270 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\15E18183d01
2010-08-06 20:32 . 2010-08-06 20:32 29510 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\29E3F48Ed01
2010-08-06 20:32 . 2010-08-06 20:32 41641 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\BB4F76E0d01
2010-08-06 20:32 . 2010-08-06 20:32 25137 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\7BD6A121d01
2010-08-06 20:32 . 2010-08-06 20:32 65570 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\C93D0F76d01
2010-08-06 20:32 . 2010-08-06 20:32 49971 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\1A5865E4d01
2010-08-06 20:32 . 2010-08-06 20:32 50177 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\BE324BA4d01
2010-08-06 20:32 . 2010-08-06 20:32 28917 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\18560130d01
2010-08-06 20:32 . 2010-08-06 20:32 28978 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\18480130d01
2010-08-06 20:32 . 2010-08-06 20:32 64680 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\DDD8AE71d01
2010-08-06 20:31 . 2010-08-06 20:31 32511 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\57C46313d01
2010-08-06 20:30 . 2010-08-06 20:30 19741 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\8E941880d01
2010-08-06 20:10 . 2010-08-06 20:10 22933 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\2072E1E1d01
2010-08-06 20:10 . 2010-08-06 20:10 22440 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\6B974514d01
2010-08-06 20:10 . 2010-08-06 20:10 18960 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\ED0BAA50d01
2010-08-06 20:10 . 2010-08-06 20:10 22348 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\1FBDEACEd01
2010-08-06 20:10 . 2010-08-06 20:10 30602 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\F18108FBd01
2010-08-06 20:10 . 2010-08-06 20:10 27557 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\AEF98A0Fd01
2010-08-06 20:10 . 2010-08-06 20:10 66964 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\417DD7D4d01
2010-08-06 20:10 . 2010-08-06 20:10 63112 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\C15B571Cd01
2010-08-06 20:10 . 2010-08-06 20:10 45568 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\985055ABd01
2010-08-06 20:10 . 2010-08-06 20:10 23525 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\3DC1C0BCd01
2010-08-06 20:10 . 2010-08-06 20:10 49538 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\59FC31E8d01
2010-08-06 20:10 . 2010-08-06 20:10 20548 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\E1953FF8d01
2010-08-06 20:10 . 2010-08-06 20:10 25280 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\7A1CC78Dd01
2010-08-06 20:09 . 2010-08-06 20:10 31138 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\7DCC57FCd01
2010-08-06 20:09 . 2010-08-06 20:09 49893 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\A950A0AEd01
2010-08-06 20:09 . 2010-08-06 20:09 76304 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\E1943FF8d01
2010-08-06 20:09 . 2010-08-06 20:09 67112 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\802C2C56d01
2010-08-06 20:02 . 2010-08-06 20:02 20106 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\A196F878d01
2010-08-06 20:02 . 2010-08-06 20:02 20106 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\0D90DEB0d01
2010-08-06 20:02 . 2010-08-06 20:02 146441 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\9B931903d01
2010-08-06 20:02 . 2010-08-06 20:02 81076 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\1C9EC1A3d01
2010-08-06 20:01 . 2010-08-06 20:01 23192 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\12A278B1d01
2010-08-06 20:01 . 2010-08-06 20:02 79459 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\1C9DC1A3d01
2010-08-06 20:01 . 2010-08-06 20:01 2334 —-a-w- c:\windows\Help32\f\1\defaults\profile\pluginreg.dat
2010-08-06 20:01 . 2010-08-06 20:01 20518 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\FE95EDD3d01
2010-08-06 19:51 . 2010-08-06 20:57 32768 —-a-w- c:\windows\Help32\f\1\defaults\profile\urlclassifier3.sqlite
2010-08-06 19:51 . 2010-08-06 20:57 16384 —-a-w- c:\windows\Help32\f\1\defaults\profile\key3.db
2010-08-06 19:51 . 2010-08-06 20:57 65536 —-a-w- c:\windows\Help32\f\1\defaults\profile\cert8.db
2010-08-06 19:51 . 2010-08-06 19:51 16384 —-a-w- c:\windows\Help32\f\1\defaults\profile\secmod.db
2010-08-06 19:51 . 2010-08-06 20:57 427261 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\_CACHE_002_
2010-08-06 19:51 . 2010-08-06 20:57 775569 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\_CACHE_003_
2010-08-06 19:51 . 2010-08-06 20:57 324509 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\_CACHE_001_
2010-08-06 19:51 . 2010-08-06 20:57 276 —-a-w- c:\windows\Help32\f\1\defaults\profile\Cache\_CACHE_MAP_
2010-08-06 19:51 . 2010-08-06 20:57 2048 —-a-w- c:\windows\Help32\f\1\defaults\profile\webappsstore.sqlite
2010-08-06 19:51 . 2010-08-06 20:57 5120 —-a-w- c:\windows\Help32\f\1\defaults\profile\cookies.sqlite
2010-08-06 19:51 . 2010-08-06 20:57 2048 —-a-w- c:\windows\Help32\f\1\defaults\profile\permissions.sqlite
2010-08-06 19:51 . 2010-08-06 20:57 66176 —-a-w- c:\windows\Help32\f\1\defaults\profile\places.sqlite-journal
2010-08-06 19:51 . 2010-08-06 20:57 192512 —-a-w- c:\windows\Help32\f\1\defaults\profile\places.sqlite
2010-08-06 19:51 . 2010-08-06 19:51 142385 —-a-w- c:\windows\Help32\f\1\components\compreg.dat
2010-08-06 19:50 . 2010-08-06 19:50 101992 —-a-w- c:\windows\Help32\f\1\components\xpti.dat
2010-08-06 19:50 . 2010-03-15 16:33 619 —-a-w- c:\windows\Help32\f\1\res\html\folder.png
2010-08-06 19:50 . 2010-03-15 16:33 841 —-a-w- c:\windows\Help32\f\1\res\table-remove-row.gif
2010-08-06 19:50 . 2010-03-15 16:33 841 —-a-w- c:\windows\Help32\f\1\res\table-remove-row-hover.gif
2010-08-06 19:50 . 2010-03-15 16:33 835 —-a-w- c:\windows\Help32\f\1\res\table-remove-row-active.gif
2010-08-06 19:50 . 2010-03-15 16:33 841 —-a-w- c:\windows\Help32\f\1\res\table-remove-column.gif
2010-08-06 19:50 . 2010-03-15 16:33 841 —-a-w- c:\windows\Help32\f\1\res\table-remove-column-hover.gif
2010-08-06 19:50 . 2010-03-15 16:33 835 —-a-w- c:\windows\Help32\f\1\res\table-remove-column-active.gif
2010-08-06 19:50 . 2010-03-15 16:33 825 —-a-w- c:\windows\Help32\f\1\res\table-add-row-before.gif
2010-08-06 19:50 . 2010-03-15 16:33 825 —-a-w- c:\windows\Help32\f\1\res\table-add-row-before-hover.gif
2010-08-06 19:50 . 2010-03-15 16:33 826 —-a-w- c:\windows\Help32\f\1\res\table-add-row-after-hover.gif
2010-08-06 19:50 . 2010-03-15 16:33 826 —-a-w- c:\windows\Help32\f\1\res\table-add-row-after.gif
2010-08-06 19:50 . 2010-03-15 16:33 57 —-a-w- c:\windows\Help32\f\1\res\table-add-row-before-active.gif
2010-08-06 19:50 . 2010-03-15 16:33 826 —-a-w- c:\windows\Help32\f\1\res\table-add-column-after.gif
2010-08-06 19:50 . 2010-03-15 16:33 57 —-a-w- c:\windows\Help32\f\1\res\table-add-column-before-active.gif
2010-08-06 19:50 . 2010-03-15 16:33 825 —-a-w- c:\windows\Help32\f\1\res\table-add-column-before-hover.gif
2010-08-06 19:50 . 2010-03-15 16:33 825 —-a-w- c:\windows\Help32\f\1\res\table-add-column-before.gif
2010-08-06 19:50 . 2010-03-15 16:33 57 —-a-w- c:\windows\Help32\f\1\res\table-add-row-after-active.gif
2010-08-06 19:50 . 2010-03-15 16:33 122 —-a-w- c:\windows\Help32\f\1\res\loading-image.gif
2010-08-06 19:50 . 2010-03-15 16:33 58 —-a-w- c:\windows\Help32\f\1\res\table-add-column-after-active.gif
2010-08-06 19:50 . 2010-03-15 16:33 826 —-a-w- c:\windows\Help32\f\1\res\table-add-column-after-hover.gif
2010-08-06 19:50 . 2010-03-15 16:33 858 —-a-w- c:\windows\Help32\f\1\res\grabber.gif
2010-08-06 19:50 . 2010-02-19 14:32 771 —-a-w- c:\windows\Help32\f\1\components\zipwriter.xpt
2010-08-06 19:50 . 2010-03-15 16:33 56 —-a-w- c:\windows\Help32\f\1\res\arrow.gif
2010-08-06 19:50 . 2010-03-15 16:33 59 —-a-w- c:\windows\Help32\f\1\res\arrowd.gif
2010-08-06 19:50 . 2010-03-15 16:33 106 —-a-w- c:\windows\Help32\f\1\res\broken-image.gif
2010-08-06 19:50 . 2010-02-19 14:41 2425 —-a-w- c:\windows\Help32\f\1\components\xultmpl.xpt
2010-08-06 19:50 . 2010-02-19 14:41 1209 —-a-w- c:\windows\Help32\f\1\components\xuldoc.xpt
2010-08-06 19:50 . 2010-02-19 15:03 1111 —-a-w- c:\windows\Help32\f\1\components\xpinstall.xpt
2010-08-06 19:50 . 2010-02-19 15:03 613 —-a-w- c:\windows\Help32\f\1\components\xulapp.xpt
2010-08-06 19:50 . 2010-02-19 15:13 198 —-a-w- c:\windows\Help32\f\1\components\xulapp_setup.xpt
2010-08-06 19:50 . 2010-02-19 14:22 1560 —-a-w- c:\windows\Help32\f\1\components\xpcom_xpti.xpt
2010-08-06 19:50 . 2010-02-19 14:30 8438 —-a-w- c:\windows\Help32\f\1\components\xpconnect.xpt
2010-08-06 19:50 . 2010-02-19 14:22 1896 —-a-w- c:\windows\Help32\f\1\components\xpcom_system.xpt
2010-08-06 19:50 . 2010-02-19 14:22 2240 —-a-w- c:\windows\Help32\f\1\components\xpcom_thread.xpt
2010-08-06 19:50 . 2010-02-19 14:21 7420 —-a-w- c:\windows\Help32\f\1\components\xpcom_io.xpt
2010-08-06 19:50 . 2010-02-19 14:22 3040 —-a-w- c:\windows\Help32\f\1\components\xpcom_components.xpt
2010-08-06 19:50 . 2010-02-19 14:21 11095 —-a-w- c:\windows\Help32\f\1\components\xpcom_ds.xpt
2010-08-06 19:50 . 2010-02-19 15:11 1011 —-a-w- c:\windows\Help32\f\1\components\xml-rpc.xpt
2010-08-06 19:50 . 2010-02-19 14:21 3185 —-a-w- c:\windows\Help32\f\1\components\xpcom_base.xpt
2010-08-06 19:50 . 2010-02-19 15:01 212 —-a-w- c:\windows\Help32\f\1\components\windowds.xpt
2010-08-06 19:50 . 2010-02-19 14:56 2793 —-a-w- c:\windows\Help32\f\1\components\windowwatcher.xpt
2010-08-06 19:50 . 2010-02-19 14:37 11151 —-a-w- c:\windows\Help32\f\1\components\widget.xpt
2010-08-06 19:50 . 2010-02-19 15:01 172 —-a-w- c:\windows\Help32\f\1\components\urlformatter.xpt
2010-08-06 19:50 . 2010-02-19 14:56 2074 —-a-w- c:\windows\Help32\f\1\components\webbrowserpersist.xpt
2010-08-06 19:50 . 2010-02-19 14:56 5510 —-a-w- c:\windows\Help32\f\1\components\webBrowser_core.xpt
2010-08-06 19:50 . 2010-02-19 14:56 1293 —-a-w- c:\windows\Help32\f\1\components\webshell_idls.xpt
2010-08-06 19:50 . 2010-02-19 14:23 1181 —-a-w- c:\windows\Help32\f\1\components\unicharutil.xpt
2010-08-06 19:50 . 2010-02-19 15:03 2646 —-a-w- c:\windows\Help32\f\1\components\update.xpt
2010-08-06 19:50 . 2010-02-19 14:33 2713 —-a-w- c:\windows\Help32\f\1\components\uriloader.xpt
2010-08-06 19:50 . 2010-02-19 14:47 1258 —-a-w- c:\windows\Help32\f\1\components\txmgr.xpt
2010-08-06 19:50 . 2010-02-19 14:46 759 —-a-w- c:\windows\Help32\f\1\components\txtsvc.xpt
2010-08-06 19:50 . 2010-02-19 14:23 1491 —-a-w- c:\windows\Help32\f\1\components\uconv.xpt
2010-08-06 19:50 . 2010-02-19 15:02 1060 —-a-w- c:\windows\Help32\f\1\components\spellchecker.xpt
2010-08-06 19:50 . 2010-02-19 14:32 3155 —-a-w- c:\windows\Help32\f\1\components\storage.xpt
2010-08-06 19:50 . 2010-02-19 15:02 1088 —-a-w- c:\windows\Help32\f\1\components\toolkitprofile.xpt
2010-08-06 19:50 . 2010-02-19 14:56 2958 —-a-w- c:\windows\Help32\f\1\components\shistory.xpt
2010-08-06 19:50 . 2010-02-19 14:32 4908 —-a-w- c:\windows\Help32\f\1\components\rdf.xpt
2010-08-06 19:50 . 2010-02-19 15:02 718 —-a-w- c:\windows\Help32\f\1\components\satchel.xpt
2010-08-06 19:50 . 2010-02-19 14:33 2369 —-a-w- c:\windows\Help32\f\1\components\saxparser.xpt
2010-08-06 19:50 . 2010-02-19 14:23 3290 —-a-w- c:\windows\Help32\f\1\components\pref.xpt
2010-08-06 19:50 . 2010-02-19 14:33 1179 —-a-w- c:\windows\Help32\f\1\components\prefetch.xpt
2010-08-06 19:50 . 2010-02-19 15:01 652 —-a-w- c:\windows\Help32\f\1\components\profile.xpt
2010-08-06 19:50 . 2010-02-19 14:22 287 —-a-w- c:\windows\Help32\f\1\components\proxyObject.xpt
2010-08-06 19:50 . 2010-02-19 15:01 11652 —-a-w- c:\windows\Help32\f\1\components\places.xpt
2010-08-06 19:50 . 2010-02-19 14:35 5145 —-a-w- c:\windows\Help32\f\1\components\plugin.xpt
2010-08-06 19:50 . 2010-02-19 15:07 377 —-a-w- c:\windows\Help32\f\1\components\pippki.xpt
2010-08-06 19:50 . 2010-02-19 15:06 628 —-a-w- c:\windows\Help32\f\1\components\pipboot.xpt
2010-08-06 19:50 . 2010-02-19 15:07 12938 —-a-w- c:\windows\Help32\f\1\components\pipnss.xpt
2010-08-06 19:50 . 2010-02-19 15:02 537 —-a-w- c:\windows\Help32\f\1\components\parentalcontrols.xpt
2010-08-06 19:50 . 2010-02-19 14:25 1475 —-a-w- c:\windows\Help32\f\1\components\necko_strconv.xpt
2010-08-06 19:50 . 2010-02-19 14:26 188 —-a-w- c:\windows\Help32\f\1\components\necko_viewsource.xpt
2010-08-06 19:50 . 2010-02-19 14:57 1120 —-a-w- c:\windows\Help32\f\1\components\oji.xpt
2010-08-06 19:50 . 2010-02-19 14:26 285 —-a-w- c:\windows\Help32\f\1\components\necko_res.xpt
2010-08-06 19:50 . 2010-02-19 14:25 893 —-a-w- c:\windows\Help32\f\1\components\necko_socket.xpt
2010-08-06 19:50 . 2010-02-19 14:26 437 —-a-w- c:\windows\Help32\f\1\components\necko_file.xpt
2010-08-06 19:50 . 2010-02-19 14:26 201 —-a-w- c:\windows\Help32\f\1\components\necko_ftp.xpt
2010-08-06 19:50 . 2010-02-19 14:26 2602 —-a-w- c:\windows\Help32\f\1\components\necko_http.xpt
2010-08-06 19:50 . 2010-02-19 14:25 1648 —-a-w- c:\windows\Help32\f\1\components\necko_cookie.xpt
2010-08-06 19:50 . 2010-02-19 14:25 1081 —-a-w- c:\windows\Help32\f\1\components\necko_dns.xpt
2010-08-06 19:50 . 2010-02-19 14:26 312 —-a-w- c:\windows\Help32\f\1\components\necko_about.xpt
2010-08-06 19:50 . 2010-02-19 14:26 2595 —-a-w- c:\windows\Help32\f\1\components\necko_cache.xpt
2010-08-06 19:50 . 2010-02-19 14:25 17215 —-a-w- c:\windows\Help32\f\1\components\necko.xpt
2010-08-06 19:50 . 2010-02-19 15:01 845 —-a-w- c:\windows\Help32\f\1\components\mozfind.xpt
2010-08-06 19:50 . 2010-02-19 14:25 2008 —-a-w- c:\windows\Help32\f\1\components\mimetype.xpt
2010-08-06 19:50 . 2010-02-19 15:01 296 —-a-w- c:\windows\Help32\f\1\components\mozbrwsr.xpt
2010-08-06 19:50 . 2010-02-19 14:25 174 —-a-w- c:\windows\Help32\f\1\components\lwbrk.xpt
2010-08-06 19:50 . 2010-02-19 15:02 1784 —-a-w- c:\windows\Help32\f\1\components\loginmgr.xpt
2010-08-06 19:50 . 2010-02-19 14:24 1260 —-a-w- c:\windows\Help32\f\1\components\locale.xpt
2010-08-06 19:50 . 2010-02-19 14:52 3731 —-a-w- c:\windows\Help32\f\1\components\layout_xul_tree.xpt
2010-08-06 19:50 . 2010-02-19 14:51 2122 —-a-w- c:\windows\Help32\f\1\components\layout_xul.xpt
2010-08-06 19:50 . 2010-02-19 14:53 911 —-a-w- c:\windows\Help32\f\1\components\layout_printing.xpt
2010-08-06 19:50 . 2010-02-19 14:33 6029 —-a-w- c:\windows\Help32\f\1\components\jsdservice.xpt
2010-08-06 19:50 . 2010-02-19 14:49 302 —-a-w- c:\windows\Help32\f\1\components\layout_base.xpt
2010-08-06 19:50 . 2010-02-19 14:25 645 —-a-w- c:\windows\Help32\f\1\components\intl.xpt
2010-08-06 19:50 . 2010-02-19 14:32 1346 —-a-w- c:\windows\Help32\f\1\components\jar.xpt
2010-08-06 19:50 . 2010-02-19 14:35 3021 —-a-w- c:\windows\Help32\f\1\components\imglib2.xpt
2010-08-06 19:50 . 2010-02-19 14:55 2502 —-a-w- c:\windows\Help32\f\1\components\inspector.xpt
2010-08-06 19:50 . 2010-02-19 14:34 1451 —-a-w- c:\windows\Help32\f\1\components\gfx.xpt
2010-08-06 19:50 . 2010-02-19 14:33 694 —-a-w- c:\windows\Help32\f\1\components\htmlparser.xpt
2010-08-06 19:50 . 2010-02-19 14:35 326 —-a-w- c:\windows\Help32\f\1\components\imgicon.xpt
2010-08-06 19:50 . 2010-06-16 02:14 856 —-a-w- c:\windows\Help32\f\1\plugins\flashplayer.xpt
2010-08-06 19:50 . 2010-02-19 14:56 1036 —-a-w- c:\windows\Help32\f\1\components\find.xpt
2010-08-06 19:50 . 2010-02-19 15:02 3274 —-a-w- c:\windows\Help32\f\1\components\feeds.xpt
2010-08-06 19:50 . 2010-02-19 15:02 599 —-a-w- c:\windows\Help32\f\1\components\fastfind.xpt
2010-08-06 19:50 . 2010-02-19 15:02 1508 —-a-w- c:\windows\Help32\f\1\components\exthelper.xpt
2010-08-06 19:50 . 2010-02-19 15:03 3831 —-a-w- c:\windows\Help32\f\1\components\extensions.xpt
2010-08-06 19:50 . 2010-02-19 14:33 1981 —-a-w- c:\windows\Help32\f\1\components\exthandler.xpt
2010-08-06 19:50 . 2010-02-19 14:46 11557 —-a-w- c:\windows\Help32\f\1\components\editor.xpt
2010-08-06 19:50 . 2010-02-19 14:56 530 —-a-w- c:\windows\Help32\f\1\components\embed_base.xpt
2010-08-06 19:50 . 2010-02-19 14:35 7408 —-a-w- c:\windows\Help32\f\1\components\dom_xul.xpt
2010-08-06 19:50 . 2010-02-19 15:02 2232 —-a-w- c:\windows\Help32\f\1\components\downloads.xpt
2010-08-06 19:50 . 2010-02-19 14:35 226 —-a-w- c:\windows\Help32\f\1\components\dom_views.xpt
2010-08-06 19:50 . 2010-02-19 14:35 451 —-a-w- c:\windows\Help32\f\1\components\dom_xbl.xpt
2010-08-06 19:50 . 2010-02-19 14:35 1417 —-a-w- c:\windows\Help32\f\1\components\dom_xpath.xpt
2010-08-06 19:50 . 2010-02-19 14:36 23460 —-a-w- c:\windows\Help32\f\1\components\dom_svg.xpt
2010-08-06 19:50 . 2010-02-19 14:35 1282 —-a-w- c:\windows\Help32\f\1\components\dom_traversal.xpt
2010-08-06 19:50 . 2010-02-19 14:35 1019 —-a-w- c:\windows\Help32\f\1\components\dom_stylesheets.xpt
2010-08-06 19:50 . 2010-02-19 14:35 874 —-a-w- c:\windows\Help32\f\1\components\dom_storage.xpt
2010-08-06 19:50 . 2010-02-19 14:35 551 —-a-w- c:\windows\Help32\f\1\components\dom_sidebar.xpt
2010-08-06 19:50 . 2010-02-19 14:35 1240 —-a-w- c:\windows\Help32\f\1\components\dom_range.xpt
2010-08-06 19:50 . 2010-02-19 14:35 349 —-a-w- c:\windows\Help32\f\1\components\dom_json.xpt
2010-08-06 19:50 . 2010-02-19 14:35 2621 —-a-w- c:\windows\Help32\f\1\components\dom_loadsave.xpt
2010-08-06 19:50 . 2010-02-19 14:35 1263 —-a-w- c:\windows\Help32\f\1\components\dom_offline.xpt
2010-08-06 19:50 . 2010-02-19 14:35 11997 —-a-w- c:\windows\Help32\f\1\components\dom_css.xpt
2010-08-06 19:50 . 2010-02-19 14:35 6869 —-a-w- c:\windows\Help32\f\1\components\dom_events.xpt
2010-08-06 19:50 . 2010-02-19 14:35 18049 —-a-w- c:\windows\Help32\f\1\components\dom_html.xpt
2010-08-06 19:50 . 2010-02-19 14:35 1930 —-a-w- c:\windows\Help32\f\1\components\dom_canvas.xpt
2010-08-06 19:50 . 2010-02-19 14:35 7301 —-a-w- c:\windows\Help32\f\1\components\dom_core.xpt
2010-08-06 19:50 . 2010-02-19 14:35 377 —-a-w- c:\windows\Help32\f\1\components\dom.xpt
2010-08-06 19:50 . 2010-02-19 14:35 9477 —-a-w- c:\windows\Help32\f\1\components\dom_base.xpt
2010-08-06 19:50 . 2010-02-19 15:01 373 —-a-w- c:\windows\Help32\f\1\components\directory.xpt
2010-08-06 19:50 . 2010-02-19 14:56 10561 —-a-w- c:\windows\Help32\f\1\components\docshell_base.xpt
2010-08-06 19:50 . 2010-02-19 14:32 488 —-a-w- c:\windows\Help32\f\1\components\cookie.xpt
2010-08-06 19:50 . 2010-02-19 15:01 724 —-a-w- c:\windows\Help32\f\1\components\contentprefs.xpt
2010-08-06 19:50 . 2010-02-19 14:42 1326 —-a-w- c:\windows\Help32\f\1\components\content_xslt.xpt
2010-08-06 19:50 . 2010-02-19 14:45 2512 —-a-w- c:\windows\Help32\f\1\components\content_xtf.xpt
2010-08-06 19:50 . 2010-02-19 14:40 605 —-a-w- c:\windows\Help32\f\1\components\content_htmldoc.xpt
2010-08-06 19:50 . 2010-02-19 14:41 693 —-a-w- c:\windows\Help32\f\1\components\content_xmldoc.xpt
2010-08-06 19:50 . 2010-02-19 14:39 700 —-a-w- c:\windows\Help32\f\1\components\content_html.xpt
2010-08-06 19:50 . 2010-02-19 14:47 755 —-a-w- c:\windows\Help32\f\1\components\composer.xpt
2010-08-06 19:50 . 2010-02-19 14:37 9066 —-a-w- c:\windows\Help32\f\1\components\content_base.xpt
2010-08-06 19:50 . 2010-02-19 15:02 960 —-a-w- c:\windows\Help32\f\1\components\commandlines.xpt
2010-08-06 19:50 . 2010-02-19 15:01 344 —-a-w- c:\windows\Help32\f\1\components\chrome.xpt
2010-08-06 19:50 . 2010-02-19 14:56 1789 —-a-w- c:\windows\Help32\f\1\components\commandhandler.xpt
2010-08-06 19:50 . 2010-02-19 14:32 679 —-a-w- c:\windows\Help32\f\1\components\chardet.xpt
2010-08-06 19:50 . 2010-02-19 14:33 2719 —-a-w- c:\windows\Help32\f\1\components\caps.xpt
2010-08-06 19:50 . 2010-03-15 16:33 348994 —-a-w- c:\windows\Help32\f\1\components\browser.xpt
2010-08-06 19:50 . 2010-02-19 15:07 211 —-a-w- c:\windows\Help32\f\1\components\autoconfig.xpt
2010-08-06 19:50 . 2010-02-19 15:02 543 —-a-w- c:\windows\Help32\f\1\components\appstartup.xpt
2010-08-06 19:50 . 2010-02-19 15:02 3603 —-a-w- c:\windows\Help32\f\1\components\autocomplete.xpt
2010-08-06 19:50 . 2010-02-19 15:02 211 —-a-w- c:\windows\Help32\f\1\components\alerts.xpt
2010-08-06 19:50 . 2010-02-19 14:56 2547 —-a-w- c:\windows\Help32\f\1\components\appshell.xpt
2010-08-06 19:50 . 2010-02-19 14:57 233 —-a-w- c:\windows\Help32\f\1\components\accessibility-msaa.xpt
2010-08-06 19:50 . 2010-02-19 14:57 19182 —-a-w- c:\windows\Help32\f\1\components\accessibility.xpt
2010-08-06 19:50 . 2010-03-15 16:33 356 —-a-w- c:\windows\Help32\f\1\defaults\profile\mimeTypes.rdf
2010-08-06 19:50 . 2004-08-05 19:38 153 —-a-w- c:\windows\Help32\f\1\defaults\profile\US\localstore.rdf
2010-08-06 19:50 . 2004-08-05 19:38 153 —-a-w- c:\windows\Help32\f\1\defaults\profile\localstore.rdf
2010-08-06 19:50 . 2010-03-15 16:33 2080 —-a-w- c:\windows\Help32\f\1\res\wincharset.properties
2010-08-06 19:50 . 2010-03-15 16:33 38499 —-a-w- c:\windows\Help32\f\1\res\entityTables\transliterate.properties
2010-08-06 19:50 . 2010-03-15 16:33 30004 —-a-w- c:\windows\Help32\f\1\res\entityTables\mathml20.properties
2010-08-06 19:50 . 2010-03-15 16:33 3954 —-a-w- c:\windows\Help32\f\1\res\fonts\mathfontSymbol.properties
2010-08-06 19:50 . 2010-03-15 16:33 6719 —-a-w- c:\windows\Help32\f\1\res\fonts\mathfontUnicode.properties
2010-08-06 19:50 . 2010-03-15 16:33 3033 —-a-w- c:\windows\Help32\f\1\res\fonts\mathfontSTIXSize1.properties
2010-08-06 19:50 . 2010-03-15 16:33 3902 —-a-w- c:\windows\Help32\f\1\res\fonts\mathfontStandardSymbolsL.properties
2010-08-06 19:50 . 2010-03-15 16:33 5493 —-a-w- c:\windows\Help32\f\1\res\fonts\mathfontSTIXNonUnicode.properties
2010-08-06 19:50 . 2010-03-15 16:33 56411 —-a-w- c:\windows\Help32\f\1\res\fonts\mathfont.properties
2010-08-06 19:50 . 2010-03-15 16:33 5490 —-a-w- c:\windows\Help32\f\1\res\language.properties
2010-08-06 19:50 . 2010-03-15 16:33 5649 —-a-w- c:\windows\Help32\f\1\res\langGroups.properties
2010-08-06 19:50 . 2010-03-15 16:33 1967 —-a-w- c:\windows\Help32\f\1\res\entityTables\htmlEntityVersions.properties
2010-08-06 19:50 . 2010-03-15 16:33 4090 —-a-w- c:\windows\Help32\f\1\res\entityTables\html40Symbols.properties
2010-08-06 19:50 . 2010-03-15 16:33 2396 —-a-w- c:\windows\Help32\f\1\res\entityTables\html40Special.properties
2010-08-06 19:50 . 2010-03-15 16:33 3690 —-a-w- c:\windows\Help32\f\1\res\entityTables\html40Latin1.properties
2010-08-06 19:50 . 2010-03-15 16:33 9551 —-a-w- c:\windows\Help32\f\1\res\charsetData.properties
2010-08-06 19:50 . 2010-03-15 16:33 11392 —-a-w- c:\windows\Help32\f\1\res\charsetalias.properties
2010-08-06 19:50 . 2008-06-27 05:15 172 —-a-w- c:\windows\Help32\f\1\chrome\geckofx.manifest
2010-08-06 19:50 . 2010-02-19 15:07 69 —-a-w- c:\windows\Help32\f\1\chrome\pippki.manifest
2010-08-06 19:50 . 2010-02-19 15:03 517 —-a-w- c:\windows\Help32\f\1\chrome\toolkit.manifest
2010-08-06 19:50 . 2010-02-19 15:07 774 —-a-w- c:\windows\Help32\f\1\chrome\en-US.manifest
2010-08-06 19:50 . 2010-02-19 15:02 144 —-a-w- c:\windows\Help32\f\1\chrome\comm.manifest
2010-08-06 19:50 . 2010-02-19 15:03 552 —-a-w- c:\windows\Help32\f\1\chrome\classic.manifest
2010-08-06 19:50 . 2010-03-15 16:33 9998 —-a-w- c:\windows\Help32\f\1\modules\XPCOMUtils.jsm
2010-08-06 19:50 . 2010-03-15 16:33 7039 —-a-w- c:\windows\Help32\f\1\modules\ISO8601DateUtils.jsm
2010-08-06 19:50 . 2010-03-15 16:33 6721 —-a-w- c:\windows\Help32\f\1\modules\JSON.jsm
2010-08-06 19:50 . 2010-03-15 16:33 7585 —-a-w- c:\windows\Help32\f\1\modules\PluralForm.jsm
2010-08-06 19:50 . 2010-03-15 16:33 17380 —-a-w- c:\windows\Help32\f\1\modules\DownloadUtils.jsm
2010-08-06 19:50 . 2010-02-19 15:13 3930 —-a-w- c:\windows\Help32\f\1\defaults\pref\xulrunner.js
2010-08-06 19:50 . 2010-02-19 15:03 85 —-a-w- c:\windows\Help32\f\1\greprefs\xpinstall.js
2010-08-06 19:50 . 2010-03-15 16:33 34011 —-a-w- c:\windows\Help32\f\1\components\WebContentConverter.js
2010-08-06 19:50 . 2008-02-17 15:21 6667 —-a-w- c:\windows\Help32\f\1\components\txEXSLTRegExFunctions.js
2010-08-06 19:50 . 2010-03-15 16:33 61758 —-a-w- c:\windows\Help32\f\1\modules\utils.js
2010-08-06 19:50 . 2008-10-03 21:49 49926 —-a-w- c:\windows\Help32\f\1\components\storage-Legacy.js
2010-08-06 19:50 . 2010-03-15 16:33 208 —-a-w- c:\windows\Help32\f\1\defaults\pref\reporter.js
2010-08-06 19:50 . 2010-03-15 16:33 347 —-a-w- c:\windows\Help32\f\1\defaults\profile\prefs.js
2010-08-06 19:50 . 2010-02-19 14:25 3378 —-a-w- c:\windows\Help32\f\1\greprefs\security-prefs.js
2010-08-06 19:50 . 2005-12-31 10:14 7296 —-a-w- c:\windows\Help32\f\1\defaults\autoconfig\prefcalls.js
2010-08-06 19:50 . 2005-12-29 12:14 3142 —-a-w- c:\windows\Help32\f\1\components\pluginGlue.js
2010-08-06 19:50 . 2002-04-16 16:42 87 —-a-w- c:\windows\Help32\f\1\defaults\autoconfig\platform.js
2010-08-06 19:50 . 2010-02-19 15:13 8278 —-a-w- c:\windows\Help32\f\1\components\nsXULAppInstall.js
2010-08-06 19:50 . 2006-10-24 14:02 35256 —-a-w- c:\windows\Help32\f\1\components\nsXmlRpcClient.js
2010-08-06 19:50 . 2007-10-23 16:20 6920 —-a-w- c:\windows\Help32\f\1\components\nsWebHandlerApp.js
2010-08-06 19:50 . 2010-02-19 15:01 3115 —-a-w- c:\windows\Help32\f\1\components\nsURLFormatter.js
2010-08-06 19:50 . 2010-03-15 16:33 19983 —-a-w- c:\windows\Help32\f\1\components\nsUrlClassifierListManager.js
2010-08-06 19:50 . 2010-03-15 16:33 50600 —-a-w- c:\windows\Help32\f\1\components\nsUrlClassifierLib.js
2010-08-06 19:50 . 2007-08-31 01:28 3268 —-a-w- c:\windows\Help32\f\1\components\nsTryToClose.js
2010-08-06 19:50 . 2010-02-19 15:03 115501 —-a-w- c:\windows\Help32\f\1\components\nsUpdateService.js
2010-08-06 19:50 . 2010-03-15 16:33 2854 —-a-w- c:\windows\Help32\f\1\components\nsSetDefaultBrowser.js
2010-08-06 19:50 . 2010-03-15 16:33 12513 —-a-w- c:\windows\Help32\f\1\components\nsSidebar.js
2010-08-06 19:50 . 2010-02-19 15:02 9967 —-a-w- c:\windows\Help32\f\1\components\nsTaggingService.js
2010-08-06 19:50 . 2010-03-15 16:33 76993 —-a-w- c:\windows\Help32\f\1\components\nsSessionStore.js
2010-08-06 19:50 . 2010-03-15 16:33 11428 —-a-w- c:\windows\Help32\f\1\components\nsSessionStartup.js
2010-08-06 19:50 . 2010-03-15 16:33 24273 —-a-w- c:\windows\Help32\f\1\components\nsSearchSuggestions.js
2010-08-06 19:50 . 2010-03-15 16:33 110913 —-a-w- c:\windows\Help32\f\1\components\nsSearchService.js
2010-08-06 19:50 . 2010-03-15 16:33 25176 —-a-w- c:\windows\Help32\f\1\components\nsSafebrowsingApplication.js
2010-08-06 19:50 . 2010-06-28 04:11 4769 —-a-w- c:\windows\Help32\f\1\components\nsRequestService.js
2010-08-06 19:50 . 2004-10-29 17:28 7049 —-a-w- c:\windows\Help32\f\1\components\nsResetPref.js
2010-08-06 19:50 . 2008-03-10 23:40 13682 —-a-w- c:\windows\Help32\f\1\components\nsProxyAutoConfig.js
2010-08-06 19:50 . 2007-07-05 17:31 37314 —-a-w- c:\windows\Help32\f\1\components\nsProgressDialog.js
2010-08-06 19:50 . 2007-07-30 18:16 21420 —-a-w- c:\windows\Help32\f\1\components\nsPostUpdateWin.js
2010-08-06 19:50 . 2010-03-15 16:33 33805 —-a-w- c:\windows\Help32\f\1\components\nsPlacesTransactionsService.js
2010-08-06 19:50 . 2010-03-15 16:33 77051 —-a-w- c:\windows\Help32\f\1\components\nsMicrosummaryService.js
2010-08-06 19:50 . 2008-05-02 05:44 40367 —-a-w- c:\windows\Help32\f\1\components\nsLoginManagerPrompter.js
2010-08-06 19:50 . 2009-09-23 19:06 44106 —-a-w- c:\windows\Help32\f\1\components\nsLoginManager.js
2010-08-06 19:50 . 2008-01-15 00:50 4302 —-a-w- c:\windows\Help32\f\1\components\nsLoginInfo.js
2010-08-06 19:50 . 2010-02-19 15:02 36111 —-a-w- c:\windows\Help32\f\1\components\nsLivemarkService.js
2010-08-06 19:50 . 2010-02-19 15:03 41950 —-a-w- c:\windows\Help32\f\1\components\nsHelperAppDlg.js
2010-08-06 19:50 . 2008-04-29 22:21 51214 —-a-w- c:\windows\Help32\f\1\components\nsHandlerService.js
2010-08-06 19:50 . 2010-02-19 15:03 333726 —-a-w- c:\windows\Help32\f\1\components\nsExtensionManager.js
2010-08-06 19:50 . 2004-04-18 20:14 4805 —-a-w- c:\windows\Help32\f\1\components\nsDictionary.js
2010-08-06 19:50 . 2008-04-03 01:05 5737 —-a-w- c:\windows\Help32\f\1\components\nsDownloadManagerUI.js
2010-08-06 19:50 . 2010-02-19 15:02 6265 —-a-w- c:\windows\Help32\f\1\components\nsDefaultCLH.js
2010-08-06 19:50 . 2008-01-07 22:10 5005 —-a-w- c:\windows\Help32\f\1\components\nsContentDispatchChooser.js
2010-08-06 19:50 . 2008-05-25 23:05 29973 —-a-w- c:\windows\Help32\f\1\components\nsContentPrefService.js
2010-08-06 19:50 . 2010-03-15 16:33 32409 —-a-w- c:\windows\Help32\f\1\components\nsBrowserGlue.js
2010-08-06 19:50 . 2010-03-15 16:33 33087 —-a-w- c:\windows\Help32\f\1\components\nsBrowserContentHandler.js
2010-08-06 19:50 . 2008-03-18 22:14 3104 —-a-w- c:\windows\Help32\f\1\components\nsBadCertHandler.js
2010-08-06 19:50 . 2010-02-19 15:03 30074 —-a-w- c:\windows\Help32\f\1\components\nsBlocklistService.js
2010-08-06 19:50 . 2010-02-19 15:03 11677 —-a-w- c:\windows\Help32\f\1\components\nsAddonRepository.js
2010-08-06 19:50 . 2010-03-15 16:33 64412 —-a-w- c:\windows\Help32\f\1\modules\Microformats.js
2010-08-06 19:50 . 2010-02-19 15:02 1512 —-a-w- c:\windows\Help32\f\1\components\jsconsole-clhandler.js
2010-08-06 19:50 . 2010-03-15 16:33 38238 —-a-w- c:\windows\Help32\f\1\components\fuelApplication.js
2010-08-06 19:50 . 2010-03-15 16:33 224 —-a-w- c:\windows\Help32\f\1\defaults\pref\firefox-l10n.js
2010-08-06 19:50 . 2010-03-15 16:33 35102 —-a-w- c:\windows\Help32\f\1\defaults\pref\firefox.js
2010-08-06 19:50 . 2010-03-15 16:33 915 —-a-w- c:\windows\Help32\f\1\defaults\pref\firefox-branding.js
2010-08-06 19:50 . 2010-03-15 16:33 49780 —-a-w- c:\windows\Help32\f\1\components\FeedWriter.js
2010-08-06 19:50 . 2008-04-25 14:51 66215 —-a-w- c:\windows\Help32\f\1\components\FeedProcessor.js
2010-08-06 19:50 . 2010-03-15 16:33 25339 —-a-w- c:\windows\Help32\f\1\components\FeedConverter.js
2010-08-06 19:50 . 2010-03-15 16:33 12091 —-a-w- c:\windows\Help32\f\1\modules\distribution.js
2010-08-06 19:50 . 2010-03-15 16:33 126 —-a-w- c:\windows\Help32\f\1\defaults\pref\channel-prefs.js
2010-08-06 19:50 . 2010-03-15 16:33 2738 —-a-w- c:\windows\Help32\f\1\modules\debug.js
2010-08-06 19:50 . 2010-03-15 16:33 2927 —-a-w- c:\windows\Help32\f\1\components\aboutRobots.js
2010-08-06 19:50 . 2010-05-27 01:26 72928 —-a-w- c:\windows\Help32\f\1\greprefs\all.js
2010-08-06 19:50 . 2010-03-15 16:33 2925 —-a-w- c:\windows\Help32\f\1\components\aboutRights.js
2010-08-06 19:50 . 2010-03-06 17:52 1915137 —-a-w- c:\windows\Help32\f\1\chrome\toolkit.jar
2010-08-06 19:50 . 2008-06-27 05:15 13443 —-a-w- c:\windows\Help32\f\1\chrome\geckofx.jar
2010-08-06 19:50 . 2010-02-19 15:07 317480 —-a-w- c:\windows\Help32\f\1\chrome\pippki.jar
2010-08-06 19:50 . 2010-02-19 15:07 332438 —-a-w- c:\windows\Help32\f\1\chrome\en-US.jar
2010-08-06 19:50 . 2010-02-19 15:02 39680 —-a-w- c:\windows\Help32\f\1\chrome\comm.jar
2010-08-06 19:50 . 2010-02-19 15:03 777705 —-a-w- c:\windows\Help32\f\1\chrome\classic.jar
2010-08-06 19:50 . 2010-03-15 16:33 8427 —-a-w- c:\windows\Help32\f\1\res\dtd\xhtml11.dtd
2010-08-06 19:50 . 2010-03-15 16:33 63788 —-a-w- c:\windows\Help32\f\1\res\dtd\mathml.dtd
2010-08-06 19:50 . 2004-08-05 19:38 663 —-a-w- c:\windows\Help32\f\1\defaults\profile\chrome\userContent-example.css
2010-08-06 19:50 . 2004-08-05 19:38 663 —-a-w- c:\windows\Help32\f\1\defaults\profile\US\chrome\userContent-example.css
2010-08-06 19:50 . 2010-04-08 20:02 14848 –sha-w- c:\windows\Help32\f\1\res\Thumbs.db
2010-08-06 19:50 . 2010-03-15 16:33 3037 —-a-w- c:\windows\Help32\f\1\res\viewsource.css
2010-08-06 19:50 . 2010-04-08 20:02 5632 –sha-w- c:\windows\Help32\f\1\res\html\Thumbs.db
2010-08-06 19:50 . 2004-08-05 19:38 1078 —-a-w- c:\windows\Help32\f\1\defaults\profile\chrome\userChrome-example.css
2010-08-06 19:50 . 2004-08-05 19:38 1078 —-a-w- c:\windows\Help32\f\1\defaults\profile\US\chrome\userChrome-example.css
2010-08-06 19:50 . 2010-03-15 16:33 2295 —-a-w- c:\windows\Help32\f\1\res\svg.css
2010-08-06 19:50 . 2010-03-15 16:33 6469 —-a-w- c:\windows\Help32\f\1\res\ua.css
2010-08-06 19:50 . 2010-03-15 16:33 11608 —-a-w- c:\windows\Help32\f\1\res\quirk.css
2010-08-06 19:50 . 2010-03-15 16:33 11096 —-a-w- c:\windows\Help32\f\1\res\html.css
2010-08-06 19:50 . 2010-03-15 16:33 14664 —-a-w- c:\windows\Help32\f\1\res\mathml.css
2010-08-06 19:50 . 2010-03-15 16:33 10740 —-a-w- c:\windows\Help32\f\1\res\EditorOverride.css
2010-08-06 19:50 . 2010-03-15 16:33 15416 —-a-w- c:\windows\Help32\f\1\res\forms.css
2010-08-06 19:50 . 2010-03-15 16:33 1861 —-a-w- c:\windows\Help32\f\1\res\designmode.css
2010-08-06 19:50 . 2010-03-15 16:33 478 —-a-w- c:\windows\Help32\f\1\freebl3.chk
2010-08-06 19:50 . 2010-03-15 16:33 478 —-a-w- c:\windows\Help32\f\1\softokn3.chk
2010-08-06 19:50 . 2010-03-15 16:33 11637 —-a-w- c:\windows\Help32\f\1\res\contenteditable.css
2010-08-06 19:50 . 2010-03-16 02:00 17880 —-a-w- c:\windows\Help32\f\1\xpcom.dll
2010-08-06 19:50 . 2010-03-16 02:00 9799128 —-a-w- c:\windows\Help32\f\1\xul.dll
2010-08-06 19:50 . 2010-03-16 02:00 136664 —-a-w- c:\windows\Help32\f\1\ssl3.dll
2010-08-06 19:50 . 2010-03-16 02:00 443352 —-a-w- c:\windows\Help32\f\1\sqlite3.dll
2010-08-06 19:50 . 2010-03-15 16:33 155648 —-a-w- c:\windows\Help32\f\1\softokn3.dll
2010-08-06 19:50 . 2010-03-16 02:00 20440 —-a-w- c:\windows\Help32\f\1\plc4.dll
2010-08-06 19:50 . 2010-03-16 02:00 17368 —-a-w- c:\windows\Help32\f\1\plds4.dll
2010-08-06 19:50 . 2010-03-16 02:00 103896 —-a-w- c:\windows\Help32\f\1\smime3.dll
2010-08-06 19:50 . 2010-03-16 02:00 87512 —-a-w- c:\windows\Help32\f\1\nssutil3.dll
2010-08-06 19:50 . 2010-03-15 16:33 98304 —-a-w- c:\windows\Help32\f\1\nssdbm3.dll
2010-08-06 19:50 . 2010-03-16 02:00 316888 —-a-w- c:\windows\Help32\f\1\nssckbi.dll
2010-08-06 19:50 . 2010-03-16 02:00 632280 —-a-w- c:\windows\Help32\f\1\nss3.dll
2010-08-06 19:50 . 2010-03-16 02:00 198104 —-a-w- c:\windows\Help32\f\1\nspr4.dll
2010-08-06 19:50 . 2010-03-16 02:00 65496 —-a-w- c:\windows\Help32\f\1\plugins\npnul32.dll
2010-08-06 19:50 . 2010-06-16 02:14 5612496 —-a-w- c:\windows\Help32\f\1\plugins\NPSWF32.dll
2010-08-06 19:50 . 2010-03-16 02:00 710104 —-a-w- c:\windows\Help32\f\1\mozcrt19.dll
2010-08-06 19:50 . 2010-03-16 02:00 701400 —-a-w- c:\windows\Help32\f\1\js3250.dll
2010-08-06 19:50 . 2010-03-15 16:33 249856 —-a-w- c:\windows\Help32\f\1\freebl3.dll
2010-08-06 19:50 . 2010-03-16 02:00 23000 —-a-w- c:\windows\Help32\f\1\components\browserdirprovider.dll
2010-08-06 19:50 . 2010-03-16 02:00 134616 —-a-w- c:\windows\Help32\f\1\components\brwsrcmp.dll
2010-08-06 19:50 . 2010-03-15 16:33 117 —-a-w- c:\windows\Help32\f\1\res\hiddenWindow.html
2010-08-06 19:50 . 2010-03-15 16:33 7139 —-a-w- c:\windows\Help32\f\1\defaults\profile\bookmarks.html
2010-08-06 18:36 . 2010-08-06 20:51 35 —-a-w- c:\windows\Help32\auth.txt
2010-08-06 18:36 . 2010-08-06 18:36 13430 —-a-w- c:\windows\Help32\block.txt
2010-08-06 18:35 . 2009-09-08 22:54 158720 —-a-w- c:\windows\Help32\skybound.gecko.dll
2010-08-06 18:35 . 2010-08-06 18:35 445565 —-a-w- c:\windows\Help32\f\sfa.txt
2010-08-06 18:28 . 2010-08-06 18:35 9450011 —-a-w- c:\windows\Help32\f\jet.exe
2010-06-16 22:57 . 2010-06-16 22:57 830976 —-a-w- c:\windows\Help32\Helper.exe
—- Directory of c:\windows\system32\weber —-
2010-06-16 23:13 . 2010-06-16 23:13 559439 —-a-w- c:\windows\system32\weber\key.exe
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2004-12-30 65536]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TFncKy"="TFncKy.exe" [BU]
"TDispVol"="TDispVol.exe" [2005-03-11 73728]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-11-28 98304]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-11-28 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-11-28 118784]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"THotkey"="c:\program files\Toshiba\Toshiba Applet\thotkey.exe" [2006-01-05 352256]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2005-12-16 82009]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 761945]
"LtMoh"="c:\program files\ltmoh\Ltmoh.exe" [2004-08-18 184320]
"AGRSMMSG"="AGRSMMSG.exe" [2005-10-15 88203]
"TPSMain"="TPSMain.exe" [2005-06-01 282624]
"SmoothView"="c:\program files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe" [2005-04-27 122880]
"dla"="c:\windows\system32\dla\DLACTRLW.exe" [2005-10-06 122940]
"Pinger"="c:\toshiba\ivp\ism\pinger.exe" [2005-03-18 151552]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 667718]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 602182]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-07-14 2065760]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-02-16 98304]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Ralink Wireless Utility.lnk - c:\program files\Ralink\Common\RaUI.exe [2009-11-23 1560576]
RAMASST.lnk - c:\windows\system32\RAMASST.exe [2006-2-15 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-07-14 14:03 12536 —-a-w- c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\TOSHIBA\\ivp\\NetInt\\Netint.exe"=
"c:\\TOSHIBA\\Ivp\\ISM\\pinger.exe"= c:\\TOSHIBA\\IVP\\ISM\\pinger.exe
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Ralink\\Common\\RaUI.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Ralink\\Common\\ApUI.exe"=
"c:\\Program Files\\SoulseekNS\\slsk.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\EA GAMES\\American McGee's Alice\\alice.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [11/23/2009 6:08 PM 216400]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [11/23/2009 6:08 PM 243024]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [7/14/2010 9:03 AM 308136]
R2 Scutum50;Scutum50 NDIS Protocol Driver;c:\windows\system32\drivers\Scutum50.sys [11/23/2009 4:16 PM 19072]
R3 DKRtWrt;DKRtWrt;c:\windows\system32\drivers\DKRtWrt.sys [5/9/2010 7:44 PM 41504]
S3 StumbleUponUpdateService;StumbleUponUpdateService;c:\program files\StumbleUpon\StumbleUponUpdateService.exe [4/7/2010 3:03 PM 120232]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [6/9/2010 5:07 PM 691696]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://partnerpage.google.com/toshibadirect.com
IE: &Google Search - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html
IE: Backward Links - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\Google\GoogleToolbar1.dll/cmcache.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Similar Pages - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html
IE: StumbleUpon PhotoBlog It! - StumbleUponIEBar.dll/blogimage
IE: Translate into English - c:\program files\Google\GoogleToolbar1.dll/cmtrans.html
TCP: {0F0496EB-DA6E-4F6C-9A75-B64F3264BC96} = 208.67.220.220,208.67.222.222
TCP: {3C2B5551-66B8-47A0-81EA-8BF5DFB5B319} = 208.67.220.220,208.67.222.222
TCP: {F5296D1C-0456-4F13-8298-0CF334ACB00C} = 208.67.220.220,208.67.222.222
FF - ProfilePath - c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.demonoid.com/
FF - prefs.js: keyword.URL - hxxp://search.search-go.net/?sid=10101049100&s=
FF - component: c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\components\coolirisstub.dll
FF - plugin: c:\documents and settings\Aboluna\Application Data\Facebook\npfbplugin_1_0_3.dll
FF - plugin: c:\documents and settings\Aboluna\Application Data\Mozilla\Firefox\Profiles\3lmyblkw.default\extensions\[removed]\plugins\npcoolirisplugin.dll
FF - plugin: c:\documents and settings\All Users\Application Data\id Software\QuakeLive\npquakezero.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
—- FIREFOX POLICIES —-
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
FF - user.js: keyword.URL - hxxp://search.search-go.net/?sid=10101049100&s=c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr
ef", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2010-08-15 21:11
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@DACL=(02 0010)
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@DACL=(02 0010)
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@DACL=(02 0010)
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'explorer.exe'(3712)
c:\windows\system32\WININET.dll
c:\windows\system32\TDispVol.dll
c:\progra~1\WINDOW~3\wmpband.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\TPwrCfg.DLL
c:\windows\system32\TPwrReg.dll
c:\windows\system32\TPSTrace.DLL
.
———————— Other Running Processes ————————
.
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\windows\system32\TDispVol.exe
c:\windows\AGRSMMSG.exe
c:\program files\Synaptics\SynTP\Toshiba.exe
c:\windows\system32\TPSBattM.exe
c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe
c:\program files\Diskeeper Corporation\Diskeeper\DkService.exe
c:\windows\system32\DVDRAMSV.exe
c:\windows\eHome\ehRecvr.exe
c:\windows\eHome\ehSched.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PSIService.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\Ralink\Common\RaRegistry.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\toshiba\IVP\swupdate\swupdtmr.exe
c:\program files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\system32\dllhost.exe
c:\windows\system32\wscntfy.exe
c:\windows\eHome\ehmsas.exe
c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe
.
**************************************************************************
.
Completion time: 2010-08-15 21:16:57 - machine was rebooted
ComboFix-quarantined-files.txt 2010-08-16 02:16
Pre-Run: 9,074,159,616 bytes free
Post-Run: 9,062,653,952 bytes free
- - End Of File - - 3F40F83D0588C9E44ECD3C84F2D177A9
Here is the VirusTotal link
http://www.virustotal.com/file-scan/report…fe16-1281925268
~CB![[external image: Posted Image]](http://i582.photobucket.com/albums/ss269/Cat_Byte/GMER/gmer_screen2-1.gif){kind=link}