alloutblackhat.com redirect

thanks for your help..here are my otl.txt

OTL logfile created on: 10/22/2010 12:02:41 PM - Run 1
OTL by OldTimer - Version 3.2.16.0 Folder = D:\Documents and Settings\Mike\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 88.00% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 107.34 Gb Total Space | 65.32 Gb Free Space | 60.86% Space Free | Partition Type: NTFS
Drive D: | 37.26 Gb Total Space | 11.61 Gb Free Space | 31.17% Space Free | Partition Type: NTFS
Drive E: | 4.44 Gb Total Space | 2.60 Gb Free Space | 58.47% Space Free | Partition Type: FAT32
Drive F: | 589.14 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: MIKE-9A167E4F2B | User Name: Mike | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - D:\Documents and Settings\Mike\Desktop\OTL.exe (OldTimer Tools)
PRC - D:\Program Files\Java\jre6\bin\javaw.exe (Sun Microsystems, Inc.)
PRC - D:\Program Files\Pure Networks\Network Magic\nmapp.exe (Cisco Systems, Inc.)
PRC - D:\Documents and Settings\Mike\Application Data\fbx.exe (noOrg)
PRC - D:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - D:\Program Files\Alwil Software\Avast5\afwServ.exe (AVAST Software)
PRC - D:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
PRC - D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
PRC - D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
PRC - D:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - D:\WINDOWS\system32\lxdncoms.exe ( )


========== Modules (SafeList) ==========

MOD - D:\Documents and Settings\Mike\Desktop\OTL.exe (OldTimer Tools)
MOD - D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - D:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (avast! Web Scanner) – D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Mail Scanner) – D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Antivirus) – D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Firewall) – D:\Program Files\Alwil Software\Avast5\afwServ.exe (AVAST Software)
SRV - (WPFFontCache_v0400) – D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Microsoft SharePoint Workspace Audit Service) – D:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (nmservice) – D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
SRV - (lxdn_device) – D:\WINDOWS\System32\lxdncoms.exe ( )
SRV - (lxdnCATSCustConnectService) – D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdnserv.exe ()


========== Driver Services (SafeList) ==========

DRV - (aswFW) – D:\WINDOWS\System32\drivers\aswFW.sys (AVAST Software)
DRV - (aswSnx) – D:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswNdis2) – D:\WINDOWS\System32\drivers\aswNdis2.sys (AVAST Software)
DRV - (aswTdi) – D:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswSP) – D:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) – D:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMon2) – D:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswFsBlk) – D:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (Aavmker4) – D:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswNdis) – D:\WINDOWS\system32\DRIVERS\aswNdis.sys (ALWIL Software)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – D:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (ati2mtag) – D:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (Monfilt) – D:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) – D:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (purendis) – D:\WINDOWS\system32\drivers\purendis.sys (Cisco Systems, Inc.)
DRV - (pnarp) – D:\WINDOWS\system32\drivers\pnarp.sys (Cisco Systems, Inc.)
DRV - (HDAudBus) – D:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (rtl8139) Realtek RTL8139(A/B/C) – D:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (amdide) – D:\WINDOWS\system32\DRIVERS\amdide.sys (Advanced Micro Devices)
DRV - (HSF_DPV) – D:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWBS2) – D:\WINDOWS\system32\drivers\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (winachsf) – D:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flvtubesearch.co/?tmp=toolbar_FlvTu…c5ca11d08a47acf
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Yahoo-FlvTube"
FF - prefs.js..browser.search.defaultenginename: "Yahoo-FlvTube"
FF - prefs.js..browser.search.order.1: "Yahoo-FlvTube"
FF - prefs.js..browser.search.selectedEngine: "Yahoo-FlvTube"
FF - prefs.js..browser.search.selectedEngineURL: "http://flvtubesearch.co/?tmp=toolbar_FLVTube_results&prt;=flvtubetb01ff&clid;=3fed87188ae345c3ac5ca11d08a47acf&subid;=88_NEWR&Keywords;={searchTerms}"
FF - prefs.js..browser.startup.homepage: "http://en-US.start3.mozilla.com/firefox?client=firefox-a&rls;=org.mozilla:en-US:official"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "http://flvtubesearch.co/?prt=02ff&clid;=&subid;=&Keywords;="

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2010/10/20 02:44:46 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2010/10/20 13:36:16 | 000,000,000 | —D | M]

[2010/10/16 19:42:47 | 000,000,000 | —D | M] – D:\Documents and Settings\Mike\Application Data\Mozilla\Extensions
[2010/10/21 20:33:26 | 000,000,000 | —D | M] – D:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\kyf3fj6p.default\extensions
[2010/10/18 10:39:53 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – D:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\kyf3fj6p.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/10/16 23:34:57 | 000,000,000 | —D | M] (Adblock Plus) – D:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\kyf3fj6p.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/10/21 20:33:26 | 000,000,000 | —D | M] – D:\Program Files\Mozilla Firefox\extensions
[2010/10/20 13:36:18 | 000,000,000 | —D | M] (Java Console) – D:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/10/20 13:35:54 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – D:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/10/20 15:21:11 | 000,004,940 | —- | M] () – D:\Program Files\Mozilla Firefox\searchplugins\flvtube.xml

O1 HOSTS File: ([2010/10/20 17:33:35 | 000,423,219 | R— | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 14591 more lines…
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {851552F5-B878-4B03-904F-2AD6A4CC8994} - No CLSID value found.
O4 - HKLM..\Run: [avast5] D:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [nmapp] D:\Program Files\Pure Networks\Network Magic\nmapp.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [nmctxth] D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [StartCCC] D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TaskTray] File not found
O4 - HKCU..\Run: [InstallMon] D:\Documents and Settings\Mike\Application Data\fbx.exe (noOrg)
O4 - HKCU..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [uTorrent] D:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: D:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport; to Microsoft Excel - D:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd; to OneNote - D:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - D:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - D:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: D:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: D:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/16 17:13:17 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2004/09/13 12:15:24 | 000,000,053 | -HS- | M] () - E:\Autorun.inf – [ FAT32 ]
O32 - AutoRun File - [2003/08/08 17:24:26 | 000,000,045 | -HS- | M] () - E:\autorun.inf.aug.8 – [ FAT32 ]
O32 - AutoRun File - [2008/04/14 08:00:00 | 000,000,110 | R— | M] () - F:\AUTORUN.INF – [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - D:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - D:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - D:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - D:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - D:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - D:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - D:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - D:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - D:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - D:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - D:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - D:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XVID - D:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - D:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2010/10/22 11:23:32 | 000,575,488 | —- | C] (OldTimer Tools) – D:\Documents and Settings\Mike\Desktop\OTL.exe
[2010/10/21 12:50:18 | 000,000,000 | —D | C] – D:\Documents and Settings\LocalService\Application Data\McAfee
[2010/10/20 16:04:33 | 000,000,000 | —D | C] – D:\Program Files\Spybot - Search & Destroy
[2010/10/20 16:04:33 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2010/10/20 13:36:33 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Sun
[2010/10/20 13:36:29 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Java
[2010/10/20 13:36:16 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\deployJava1.dll
[2010/10/20 13:36:16 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\javaws.exe
[2010/10/20 13:36:16 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\javaw.exe
[2010/10/20 13:36:16 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\java.exe
[2010/10/20 13:36:16 | 000,073,728 | —- | C] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\javacpl.cpl
[2010/10/20 13:35:46 | 000,000,000 | —D | C] – D:\Program Files\Java
[2010/10/20 10:55:10 | 000,000,000 | —D | C] – D:\Program Files\Pure Networks
[2010/10/20 10:36:15 | 000,000,000 | —D | C] – D:\Program Files\WebEx
[2010/10/20 10:35:21 | 000,025,392 | —- | C] (Cisco Systems, Inc.) – D:\WINDOWS\System32\drivers\pnarp.sys
[2010/10/20 10:34:57 | 000,026,672 | —- | C] (Cisco Systems, Inc.) – D:\WINDOWS\System32\drivers\purendis.sys
[2010/10/20 10:34:37 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Pure Networks Shared
[2010/10/20 10:34:02 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Pure Networks
[2010/10/20 08:35:32 | 000,000,000 | —D | C] – D:\Documents and Settings\LocalService\Local Settings\Application Data\Chromium
[2010/10/20 08:30:16 | 000,000,000 | —D | C] – D:\Program Files\TVersity Codec Pack
[2010/10/20 08:30:14 | 000,000,000 | R–D | C] – D:\Documents and Settings\Mike\My Documents\My Videos
[2010/10/20 08:29:53 | 000,000,000 | —D | C] – D:\Program Files\TVersity
[2010/10/20 08:27:42 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\Sun
[2010/10/20 08:26:58 | 000,000,000 | —D | C] – D:\Program Files\PS3 Media Server
[2010/10/20 04:52:43 | 000,000,000 | —D | C] – D:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2010/10/20 03:02:02 | 000,017,744 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/10/20 03:02:01 | 000,165,584 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswSP.sys
[2010/10/20 03:01:59 | 000,340,048 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswSnx.sys
[2010/10/20 03:01:58 | 000,099,792 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswFW.sys
[2010/10/20 03:01:37 | 000,190,416 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswNdis2.sys
[2010/10/20 03:01:36 | 000,023,376 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswRdr.sys
[2010/10/20 03:01:33 | 000,046,672 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswTdi.sys
[2010/10/20 03:01:31 | 000,100,176 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswmon2.sys
[2010/10/20 03:01:31 | 000,094,544 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aswmon.sys
[2010/10/20 03:01:30 | 000,028,880 | —- | C] (AVAST Software) – D:\WINDOWS\System32\drivers\aavmker4.sys
[2010/10/20 03:01:01 | 000,038,848 | —- | C] (AVAST Software) – D:\WINDOWS\avastSS.scr
[2010/10/20 03:01:01 | 000,012,112 | —- | C] (ALWIL Software) – D:\WINDOWS\System32\drivers\aswNdis.sys
[2010/10/20 03:00:58 | 000,167,592 | —- | C] (AVAST Software) – D:\WINDOWS\System32\aswBoot.exe
[2010/10/20 02:58:04 | 000,000,000 | —D | C] – D:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010/10/19 13:42:31 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\Temp
[2010/10/19 13:42:31 | 000,000,000 | —D | C] – D:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010/10/19 13:42:16 | 000,000,000 | —D | C] – D:\Program Files\Google
[2010/10/19 13:40:38 | 000,000,000 | —D | C] – D:\Program Files\Alwil Software
[2010/10/19 13:40:38 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/10/19 13:27:42 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\vlc
[2010/10/19 13:07:11 | 000,000,000 | —D | C] – D:\Program Files\VideoLAN
[2010/10/19 13:03:16 | 000,000,000 | RH-D | C] – D:\Documents and Settings\Mike\Recent
[2010/10/19 13:02:34 | 000,000,000 | —D | C] – D:\Program Files\CCleaner
[2010/10/18 15:46:34 | 000,000,000 | —D | C] – D:\Program Files\Runtime Software
[2010/10/18 10:43:25 | 000,000,000 | —D | C] – D:\Program Files\Common Files\DESIGNER
[2010/10/18 10:43:08 | 000,000,000 | —D | C] – D:\Program Files\MSBuild
[2010/10/18 10:40:20 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Microsoft
[2010/10/18 10:40:19 | 000,000,000 | —D | C] – D:\Program Files\Microsoft Sync Framework
[2010/10/18 10:40:02 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\Google
[2010/10/18 10:40:02 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Google
[2010/10/18 10:37:52 | 000,000,000 | —D | C] – D:\Program Files\Microsoft Visual Studio 8
[2010/10/18 10:36:15 | 000,000,000 | —D | C] – D:\Program Files\Microsoft Analysis Services
[2010/10/18 10:35:23 | 000,000,000 | —D | C] – D:\WINDOWS\SHELLNEW
[2010/10/18 10:34:14 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\Microsoft Help
[2010/10/18 10:33:47 | 000,000,000 | —D | C] – D:\Program Files\Microsoft Office
[2010/10/18 10:33:41 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Microsoft Help
[2010/10/18 10:33:04 | 000,000,000 | RH-D | C] – D:\MSOCache
[2010/10/18 09:04:11 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Adobe
[2010/10/18 09:03:46 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Adobe
[2010/10/18 09:03:43 | 000,000,000 | —D | C] – D:\Program Files\Adobe
[2010/10/18 09:03:37 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Adobe AIR
[2010/10/18 09:02:56 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\McAfee
[2010/10/18 09:02:37 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\Adobe
[2010/10/18 01:49:11 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\Help
[2010/10/18 01:49:11 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\Help
[2010/10/18 01:45:38 | 000,000,000 | —D | C] – D:\Program Files\xp-AntiSpy
[2010/10/18 00:54:17 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\Media Player Classic
[2010/10/17 23:37:13 | 000,000,000 | —D | C] – D:\WINDOWS\assembly
[2010/10/17 23:35:55 | 000,000,000 | —D | C] – D:\Program Files\Microsoft.NET
[2010/10/17 23:35:52 | 000,000,000 | —D | C] – D:\WINDOWS\Microsoft.NET
[2010/10/17 23:28:09 | 000,000,000 | —D | C] – D:\WINDOWS\System32\Lang
[2010/10/17 23:20:51 | 000,000,000 | —D | C] – D:\WINDOWS\System32\ReinstallBackups
[2010/10/17 23:19:45 | 000,000,000 | —D | C] – D:\Program Files\ATI Technologies
[2010/10/17 23:19:41 | 000,000,000 | —D | C] – D:\Program Files\ATI
[2010/10/17 23:18:59 | 000,000,000 | —D | C] – D:\ATI
[2010/10/17 23:08:54 | 000,006,272 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\splitter.sys
[2010/10/17 23:08:51 | 000,083,072 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wdmaud.sys
[2010/10/17 23:08:49 | 000,052,864 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dmusic.sys
[2010/10/17 23:08:47 | 000,056,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\swmidi.sys
[2010/10/17 23:08:44 | 000,142,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\aec.sys
[2010/10/17 23:08:42 | 000,172,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kmixer.sys
[2010/10/17 23:08:40 | 000,002,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\drmkaud.sys
[2010/10/17 23:08:37 | 000,060,800 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sysaudio.sys
[2010/10/17 23:08:35 | 000,007,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mskssrv.sys
[2010/10/17 23:08:33 | 000,004,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mspqm.sys
[2010/10/17 23:08:30 | 000,005,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mspclock.sys
[2010/10/17 23:08:22 | 000,000,000 | —D | C] – D:\WINDOWS\System32\RTCOM
[2010/10/17 23:08:10 | 000,146,048 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\drivers\portcls.sys
[2010/10/17 23:08:10 | 000,146,048 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\portcls.sys
[2010/10/17 23:08:10 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\ksuser.dll
[2010/10/17 23:08:10 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ksuser.dll
[2010/10/17 23:08:09 | 000,129,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\ksproxy.ax
[2010/10/17 23:08:09 | 000,129,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ksproxy.ax
[2010/10/17 23:08:09 | 000,060,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\drivers\drmk.sys
[2010/10/17 23:08:09 | 000,060,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\drmk.sys
[2010/10/17 23:08:01 | 001,833,576 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\SkyTel.exe
[2010/10/17 23:08:01 | 000,891,496 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\System32\RTSndMgr.CPL
[2010/10/17 23:08:01 | 000,359,016 | —- | C] (Realtek Semiconductor Crop.) – D:\WINDOWS\vncutil.exe
[2010/10/17 23:08:00 | 001,489,512 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\RtlUpd.exe
[2010/10/17 23:07:59 | 009,721,960 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\RTLCPL.EXE
[2010/10/17 23:07:58 | 006,088,296 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\System32\drivers\RtkHDAud.sys
[2010/10/17 23:07:57 | 000,129,640 | —- | C] (Realtek Semiconductor) – D:\WINDOWS\RtkAudioService.exe
[2010/10/17 23:07:57 | 000,053,864 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\System32\RtkCoInstXP.dll
[2010/10/17 23:07:55 | 002,180,712 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\MicCal.exe
[2010/10/17 23:07:55 | 001,395,800 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\drivers\Monfilt.sys
[2010/10/17 23:07:53 | 002,815,592 | —- | C] (RealTek Semicoductor Corp.) – D:\WINDOWS\ALCWZRD.EXE
[2010/10/17 23:07:53 | 001,691,480 | —- | C] (Creative) – D:\WINDOWS\System32\drivers\Ambfilt.sys
[2010/10/17 23:07:53 | 000,064,104 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\ALCMTR.EXE
[2010/10/17 23:07:53 | 000,000,000 | —D | C] – D:\Program Files\Realtek
[2010/10/17 23:07:29 | 001,251,944 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\RtlExUpd.dll
[2010/10/17 22:49:47 | 000,000,000 | —D | C] – D:\Program Files\Driver-Soft
[2010/10/17 22:10:40 | 000,000,000 | -HSD | C] – D:\Documents and Settings\Mike\PrivacIE
[2010/10/17 21:54:41 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2010/10/17 21:52:23 | 000,000,000 | -HSD | C] – D:\Documents and Settings\Mike\IETldCache
[2010/10/17 21:43:32 | 000,232,448 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – D:\WINDOWS\System32\mp3fhg.acm
[2010/10/17 21:43:32 | 000,151,552 | —- | C] (fccHandler) – D:\WINDOWS\System32\ac3acm.acm
[2010/10/17 21:43:31 | 000,217,088 | —- | C] (www.helixcommunity.org) – D:\WINDOWS\System32\yv12vfw.dll
[2010/10/17 21:43:26 | 000,000,000 | —D | C] – D:\Program Files\K-Lite Codec Pack
[2010/10/17 21:27:09 | 000,000,000 | —D | C] – D:\WINDOWS\ie8updates
[2010/10/17 21:26:57 | 011,080,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ieframe.dll
[2010/10/17 21:26:57 | 001,986,560 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iertutil.dll
[2010/10/17 21:26:57 | 000,743,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iedvtool.dll
[2010/10/17 21:26:57 | 000,602,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/10/17 21:26:57 | 000,055,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/10/17 21:26:37 | 000,000,000 | —D | C] – D:\WINDOWS\WBEM
[2010/10/17 21:25:10 | 000,000,000 | -H-D | C] – D:\WINDOWS\ie8
[2010/10/17 21:24:04 | 000,000,000 | —D | C] – D:\Program Files\CONEXANT
[2010/10/17 17:18:05 | 000,000,000 | —D | C] – D:\Program Files\Speccy
[2010/10/17 13:39:20 | 000,000,000 | —D | C] – D:\WINDOWS\System32\NtmsData
[2010/10/17 12:26:47 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Lx_cats
[2010/10/17 12:26:30 | 000,000,000 | —D | C] – D:\logs
[2010/10/17 12:25:45 | 000,102,400 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdnwupd.dll
[2010/10/17 12:25:45 | 000,017,064 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdnwupd.exe
[2010/10/17 12:24:00 | 000,087,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\wiafbdrv.dll
[2010/10/17 12:24:00 | 000,087,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2010/10/17 12:23:59 | 000,015,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\usbscan.sys
[2010/10/17 11:46:21 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\My Documents\DriverGenius
[2010/10/17 10:54:28 | 000,000,000 | —D | C] – D:\Program Files\EASEUS
[2010/10/17 10:37:43 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\WinZip
[2010/10/17 10:36:59 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\WinZip
[2010/10/17 10:36:53 | 000,000,000 | —D | C] – D:\Program Files\WinZip
[2010/10/17 10:35:52 | 000,026,368 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\usbstor.sys
[2010/10/17 10:32:28 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Desktop\torrents
[2010/10/16 23:54:54 | 000,000,000 | —D | C] – D:\WINDOWS\System32\DRVSTORE
[2010/10/16 23:54:17 | 000,000,000 | —D | C] – D:\Program Files\Windows Sidebar
[2010/10/16 23:53:48 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\My Documents\Symantec
[2010/10/16 23:53:48 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\NortonInstaller
[2010/10/16 23:50:05 | 009,179,648 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\System32\RTLCPL.exe
[2010/10/16 23:50:05 | 002,284,864 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\System32\drivers\alcxwdm.sys
[2010/10/16 23:50:05 | 000,285,288 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\System32\ALSNDMGR.CPL
[2010/10/16 23:50:05 | 000,208,896 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\alcupd.exe
[2010/10/16 23:50:05 | 000,139,264 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\alcrmv.exe
[2010/10/16 23:50:05 | 000,084,584 | —- | C] (Realtek Semiconductor Corp.) – D:\WINDOWS\SOUNDMAN.EXE
[2010/10/16 23:50:05 | 000,000,000 | -H-D | C] – D:\Program Files\InstallShield Installation Information
[2010/10/16 23:50:00 | 000,000,000 | —D | C] – D:\Program Files\Common Files\InstallShield
[2010/10/16 23:43:59 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Wise Installation Wizard
[2010/10/16 23:15:51 | 000,000,000 | —D | C] – D:\Program Files\uTorrent
[2010/10/16 23:15:33 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\uTorrent
[2010/10/16 22:53:27 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Documents\Norton
[2010/10/16 22:53:27 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\Norton
[2010/10/16 22:09:48 | 000,272,128 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bthport.sys
[2010/10/16 22:09:22 | 000,455,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/10/16 22:07:57 | 002,189,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/10/16 22:07:57 | 002,146,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/10/16 22:07:56 | 002,066,816 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2010/10/16 22:07:56 | 002,024,448 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/10/16 22:03:44 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\My Documents\Downloads
[2010/10/16 21:59:03 | 000,438,272 | —- | C] ( ) – D:\WINDOWS\System32\LXDNhcp.dll
[2010/10/16 21:59:03 | 000,364,544 | —- | C] ( ) – D:\WINDOWS\System32\lxdninpa.dll
[2010/10/16 21:59:03 | 000,339,968 | —- | C] ( ) – D:\WINDOWS\System32\lxdniesc.dll
[2010/10/16 21:59:02 | 001,101,824 | —- | C] ( ) – D:\WINDOWS\System32\lxdnserv.dll
[2010/10/16 21:59:02 | 000,843,776 | —- | C] ( ) – D:\WINDOWS\System32\lxdnusb1.dll
[2010/10/16 21:59:02 | 000,647,168 | —- | C] ( ) – D:\WINDOWS\System32\lxdnpmui.dll
[2010/10/16 21:59:02 | 000,569,344 | —- | C] ( ) – D:\WINDOWS\System32\lxdnlmpm.dll
[2010/10/16 21:59:02 | 000,524,288 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdnutil.dll
[2010/10/16 21:59:02 | 000,053,248 | —- | C] ( ) – D:\WINDOWS\System32\lxdnprox.dll
[2010/10/16 21:59:01 | 000,983,121 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\lxdngf.dll
[2010/10/16 21:59:01 | 000,663,552 | —- | C] ( ) – D:\WINDOWS\System32\lxdnhbn3.dll
[2010/10/16 21:59:01 | 000,320,168 | —- | C] ( ) – D:\WINDOWS\System32\lxdnih.exe
[2010/10/16 21:59:01 | 000,200,704 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdninsb.dll
[2010/10/16 21:59:01 | 000,176,128 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdnins.dll
[2010/10/16 21:59:01 | 000,147,456 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdnjswr.dll
[2010/10/16 21:59:01 | 000,106,496 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdninsr.dll
[2010/10/16 21:59:00 | 000,851,968 | —- | C] ( ) – D:\WINDOWS\System32\lxdncomc.dll
[2010/10/16 21:59:00 | 000,594,600 | —- | C] ( ) – D:\WINDOWS\System32\lxdncoms.exe
[2010/10/16 21:59:00 | 000,376,832 | —- | C] ( ) – D:\WINDOWS\System32\lxdncomm.dll
[2010/10/16 21:59:00 | 000,365,224 | —- | C] ( ) – D:\WINDOWS\System32\lxdncfg.exe
[2010/10/16 21:59:00 | 000,090,112 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdncub.dll
[2010/10/16 21:59:00 | 000,077,824 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdncu.dll
[2010/10/16 21:59:00 | 000,036,864 | —- | C] (Lexmark International, Inc.) – D:\WINDOWS\System32\lxdncur.dll
[2010/10/16 21:58:59 | 000,077,906 | —- | C] (Lexmark International) – D:\WINDOWS\System32\LXDNcfg.dll
[2010/10/16 21:58:53 | 000,000,000 | —D | C] – D:\Program Files\Lexmark 2600 Series
[2010/10/16 21:58:38 | 000,025,856 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\usbprint.sys
[2010/10/16 21:25:36 | 000,026,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\spupdsvc.exe
[2010/10/16 21:25:36 | 000,016,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\spmsg.dll
[2010/10/16 21:25:36 | 000,000,000 | —D | C] – D:\WINDOWS\System32\PreInstall
[2010/10/16 21:25:35 | 000,000,000 | -H-D | C] – D:\WINDOWS\$hf_mig$
[2010/10/16 19:42:37 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\Mozilla
[2010/10/16 19:42:37 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\Mozilla
[2010/10/16 19:42:31 | 000,000,000 | —D | C] – D:\Program Files\Mozilla Firefox
[2010/10/16 18:20:02 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\Macromedia
[2010/10/16 18:20:02 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\Adobe
[2010/10/16 18:08:02 | 000,000,000 | —D | C] – D:\Program Files\Convar
[2010/10/16 17:47:17 | 000,000,000 | -HSD | C] – D:\RECYCLER
[2010/10/16 17:47:01 | 000,000,000 | —D | C] – D:\Program Files\SigmaTel
[2010/10/16 17:42:59 | 000,000,000 | —D | C] – D:\Program Files\Intel
[2010/10/16 17:21:09 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Application Data\Identities
[2010/10/16 17:21:07 | 000,000,000 | -H-D | C] – D:\Program Files\Uninstall Information
[2010/10/16 17:21:05 | 000,000,000 | R–D | C] – D:\Documents and Settings\Mike\My Documents\My Pictures
[2010/10/16 17:21:05 | 000,000,000 | R–D | C] – D:\Documents and Settings\Mike\My Documents\My Music
[2010/10/16 17:21:01 | 000,000,000 | –SD | C] – D:\Documents and Settings\Mike\Application Data\Microsoft
[2010/10/16 17:21:01 | 000,000,000 | RH-D | C] – D:\Documents and Settings\Mike\SendTo
[2010/10/16 17:21:01 | 000,000,000 | RH-D | C] – D:\Documents and Settings\Mike\Application Data
[2010/10/16 17:21:01 | 000,000,000 | R–D | C] – D:\Documents and Settings\Mike\Start Menu
[2010/10/16 17:21:01 | 000,000,000 | R–D | C] – D:\Documents and Settings\Mike\My Documents
[2010/10/16 17:21:01 | 000,000,000 | R–D | C] – D:\Documents and Settings\Mike\Favorites
[2010/10/16 17:21:01 | 000,000,000 | -HSD | C] – D:\Documents and Settings\Mike\Cookies
[2010/10/16 17:21:01 | 000,000,000 | -H-D | C] – D:\Documents and Settings\Mike\Templates
[2010/10/16 17:21:01 | 000,000,000 | -H-D | C] – D:\Documents and Settings\Mike\PrintHood
[2010/10/16 17:21:01 | 000,000,000 | -H-D | C] – D:\Documents and Settings\Mike\NetHood
[2010/10/16 17:21:01 | 000,000,000 | -H-D | C] – D:\Documents and Settings\Mike\Local Settings
[2010/10/16 17:21:01 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Local Settings\Application Data\Microsoft
[2010/10/16 17:21:01 | 000,000,000 | —D | C] – D:\Documents and Settings\Mike\Desktop
[2010/10/16 17:19:17 | 000,000,000 | —D | C] – D:\WINDOWS\System32\SoftwareDistribution
[2010/10/16 17:18:12 | 000,000,000 | —D | C] – D:\WINDOWS\SoftwareDistribution
[2010/10/16 17:18:02 | 000,000,000 | —D | C] – D:\WINDOWS\Prefetch
[2010/10/16 17:18:01 | 000,000,000 | –SD | C] – D:\WINDOWS\System32\Microsoft
[2010/10/16 17:18:00 | 000,000,000 | –SD | C] – D:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/10/16 17:18:00 | 000,000,000 | —D | C] – D:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/10/16 17:17:35 | 000,000,000 | —D | C] – D:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/10/16 17:17:34 | 000,000,000 | –SD | C] – D:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/10/16 17:15:48 | 000,156,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winzm.ime
[2010/10/16 17:15:48 | 000,156,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winsp.ime
[2010/10/16 17:15:47 | 000,156,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winpy.ime
[2010/10/16 17:15:47 | 000,065,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winime.ime
[2010/10/16 17:15:46 | 000,079,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winar30.ime
[2010/10/16 17:15:46 | 000,072,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wingb.ime
[2010/10/16 17:15:45 | 000,076,800 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wam51.dll
[2010/10/16 17:15:45 | 000,053,248 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wamreg51.dll
[2010/10/16 17:15:45 | 000,041,600 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\weitekp9.dll
[2010/10/16 17:15:45 | 000,031,232 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\weitekp9.sys
[2010/10/16 17:15:45 | 000,009,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wamps51.dll
[2010/10/16 17:15:44 | 000,364,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\w3svc.dll
[2010/10/16 17:15:44 | 000,073,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\w3ext.dll
[2010/10/16 17:15:44 | 000,048,256 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\w32.dll
[2010/10/16 17:15:44 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\w3svapi.dll
[2010/10/16 17:15:44 | 000,004,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2010/10/16 17:15:43 | 000,426,041 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\voicepad.dll
[2010/10/16 17:15:43 | 000,086,073 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\voicesub.dll
[2010/10/16 17:15:42 | 000,076,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\uniime.dll
[2010/10/16 17:15:41 | 000,103,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\uihelper.dll
[2010/10/16 17:15:41 | 000,065,024 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\unicdime.ime
[2010/10/16 17:15:41 | 000,014,336 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tsprof.exe
[2010/10/16 17:15:40 | 000,455,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tintsetp.exe
[2010/10/16 17:15:40 | 000,044,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tintlphr.exe
[2010/10/16 17:15:40 | 000,033,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tools.dll
[2010/10/16 17:15:40 | 000,010,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tmigrate.dll
[2010/10/16 17:15:39 | 000,571,392 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tintlgnt.ime
[2010/10/16 17:15:39 | 000,185,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\thawbrkr.dll
[2010/10/16 17:15:39 | 000,019,464 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tdspx.sys
[2010/10/16 17:15:38 | 000,021,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tdipx.sys
[2010/10/16 17:15:38 | 000,013,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tdasync.sys
[2010/10/16 17:15:37 | 000,046,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\svcext51.dll
[2010/10/16 17:15:36 | 000,101,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srusbusd.dll
[2010/10/16 17:15:36 | 000,046,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sspifilt.dll
[2010/10/16 17:15:36 | 000,045,056 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ssinc51.dll
[2010/10/16 17:15:36 | 000,016,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\status.dll
[2010/10/16 17:15:35 | 000,143,422 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\softkey.dll
[2010/10/16 17:15:34 | 000,188,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmpsmir.dll
[2010/10/16 17:15:34 | 000,039,936 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmpthrd.dll
[2010/10/16 17:15:34 | 000,010,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmpstup.dll
[2010/10/16 17:15:34 | 000,008,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmptrap.exe
[2010/10/16 17:15:34 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2010/10/16 17:15:33 | 000,456,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smtpsvc.dll
[2010/10/16 17:15:33 | 000,358,400 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmpincl.dll
[2010/10/16 17:15:33 | 000,259,072 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmpcl.dll
[2010/10/16 17:15:33 | 000,033,280 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmp.exe
[2010/10/16 17:15:33 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snmpmib.dll
[2010/10/16 17:15:32 | 000,236,544 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smi2smir.exe
[2010/10/16 17:15:32 | 000,031,744 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smb6w.dll
[2010/10/16 17:15:32 | 000,031,744 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sma3w.dll
[2010/10/16 17:15:32 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smierrsm.dll
[2010/10/16 17:15:32 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2010/10/16 17:15:32 | 000,010,752 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smtpapi.dll
[2010/10/16 17:15:32 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smimsgif.dll
[2010/10/16 17:15:32 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smierrsy.dll
[2010/10/16 17:15:31 | 000,038,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm9aw.dll
[2010/10/16 17:15:31 | 000,030,208 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm87w.dll
[2010/10/16 17:15:31 | 000,030,208 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm81w.dll
[2010/10/16 17:15:31 | 000,029,184 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm8cw.dll
[2010/10/16 17:15:31 | 000,026,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm93w.dll
[2010/10/16 17:15:31 | 000,026,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm92w.dll
[2010/10/16 17:15:31 | 000,026,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm90w.dll
[2010/10/16 17:15:31 | 000,026,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm8dw.dll
[2010/10/16 17:15:31 | 000,026,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm8aw.dll
[2010/10/16 17:15:31 | 000,026,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm89w.dll
[2010/10/16 17:15:31 | 000,025,088 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm59w.dll
[2010/10/16 17:15:30 | 000,018,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\simptcp.dll
[2010/10/16 17:15:28 | 000,221,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\seo.dll
[2010/10/16 17:15:28 | 000,026,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2010/10/16 17:15:27 | 000,057,856 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2010/10/16 17:15:27 | 000,009,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rwnh.dll
[2010/10/16 17:15:26 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – D:\WINDOWS\System32\dllcache\rwia330.dll
[2010/10/16 17:15:26 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – D:\WINDOWS\System32\dllcache\rwia001.dll
[2010/10/16 17:15:26 | 000,029,184 | —- | C] (Ricoh Co., Ltd.) – D:\WINDOWS\System32\dllcache\rw330ext.dll
[2010/10/16 17:15:26 | 000,027,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rw001ext.dll
[2010/10/16 17:15:25 | 000,026,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\romanime.ime
[2010/10/16 17:15:25 | 000,023,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2010/10/16 17:15:25 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\register.exe
[2010/10/16 17:15:25 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rpcref.dll
[2010/10/16 17:15:24 | 000,020,736 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ramdisk.sys
[2010/10/16 17:15:23 | 000,077,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\quick.ime
[2010/10/16 17:15:23 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\quser.exe
[2010/10/16 17:15:23 | 000,009,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\query.exe
[2010/10/16 17:15:22 | 000,007,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pwsdata.dll
[2010/10/16 17:15:21 | 000,131,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pmxviceo.dll
[2010/10/16 17:15:21 | 000,070,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pintlphr.exe
[2010/10/16 17:15:21 | 000,067,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pmigrate.dll
[2010/10/16 17:15:21 | 000,011,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pmxmcro.dll
[2010/10/16 17:15:21 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pmxgl.dll
[2010/10/16 17:15:20 | 000,482,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pintlgnt.ime
[2010/10/16 17:15:20 | 000,079,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\phon.ime
[2010/10/16 17:15:20 | 000,053,760 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pintlcsd.dll
[2010/10/16 17:15:20 | 000,020,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\permchk.dll
[2010/10/16 17:15:19 | 000,036,927 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\padrs411.dll
[2010/10/16 17:15:19 | 000,031,744 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pagecnt.dll
[2010/10/16 17:15:19 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\padrs404.dll
[2010/10/16 17:15:19 | 000,015,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\padrs804.dll
[2010/10/16 17:15:19 | 000,014,336 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\padrs412.dll
[2010/10/16 17:15:17 | 000,044,544 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nsepm.dll
[2010/10/16 17:15:17 | 000,038,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2010/10/16 17:15:16 | 000,053,248 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nextlink.dll
[2010/10/16 17:15:15 | 000,229,439 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\multibox.dll
[2010/10/16 17:15:14 | 000,119,808 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mtstocom.exe
[2010/10/16 17:15:12 | 000,040,960 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msiregmv.exe
[2010/10/16 17:15:11 | 001,875,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msir3jp.lex
[2010/10/16 17:15:11 | 000,098,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msir3jp.dll
[2010/10/16 17:15:06 | 000,092,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mga.sys
[2010/10/16 17:15:06 | 000,092,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mga.dll
[2010/10/16 17:15:06 | 000,007,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\migregdb.exe
[2010/10/16 17:15:05 | 000,085,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\metada51.dll
[2010/10/16 17:15:05 | 000,037,888 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\md5filt.dll
[2010/10/16 17:15:05 | 000,026,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mdsync.dll
[2010/10/16 17:15:04 | 000,065,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2010/10/16 17:15:04 | 000,022,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\lpdsvc.dll
[2010/10/16 17:15:04 | 000,022,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\logscrpt.dll
[2010/10/16 17:15:04 | 000,018,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\lprmon.dll
[2010/10/16 17:15:04 | 000,013,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\lonsint.dll
[2010/10/16 17:15:03 | 000,033,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\lmmib2.dll
[2010/10/16 17:15:02 | 000,070,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\korwbrkr.dll
[2010/10/16 17:15:01 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdth3.dll
[2010/10/16 17:15:01 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdth2.dll
[2010/10/16 17:15:01 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdvntc.dll
[2010/10/16 17:15:01 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdusa.dll
[2010/10/16 17:15:01 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdurdu.dll
[2010/10/16 17:15:01 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdth1.dll
[2010/10/16 17:15:01 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdth0.dll
[2010/10/16 17:15:01 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2010/10/16 17:15:01 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2010/10/16 17:15:00 | 000,009,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdnecat.dll
[2010/10/16 17:15:00 | 000,007,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2010/10/16 17:15:00 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdnec95.dll
[2010/10/16 17:15:00 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdlk41a.dll
[2010/10/16 17:15:00 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdlk41j.dll
[2010/10/16 17:15:00 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdinpun.dll
[2010/10/16 17:15:00 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdintel.dll
[2010/10/16 17:15:00 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdintam.dll
[2010/10/16 17:15:00 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdinmar.dll
[2010/10/16 17:15:00 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdinkan.dll
[2010/10/16 17:15:00 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdinhin.dll
[2010/10/16 17:15:00 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdinguj.dll
[2010/10/16 17:15:00 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdindev.dll
[2010/10/16 17:14:59 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdibm02.dll
[2010/10/16 17:14:59 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdax2.dll
[2010/10/16 17:14:59 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdheb.dll
[2010/10/16 17:14:59 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdfa.dll
[2010/10/16 17:14:59 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbddiv2.dll
[2010/10/16 17:14:59 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbddiv1.dll
[2010/10/16 17:14:59 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbda3.dll
[2010/10/16 17:14:59 | 000,005,120 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdgeo.dll
[2010/10/16 17:14:59 | 000,005,120 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdarmw.dll
[2010/10/16 17:14:59 | 000,005,120 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdarme.dll
[2010/10/16 17:14:58 | 000,026,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iscomlog.dll
[2010/10/16 17:14:58 | 000,018,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\jupiw.dll
[2010/10/16 17:14:58 | 000,009,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iwrps.dll
[2010/10/16 17:14:58 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\isapips.dll
[2010/10/16 17:14:58 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbd106n.dll
[2010/10/16 17:14:58 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbd101a.dll
[2010/10/16 17:14:58 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbd101.dll
[2010/10/16 17:14:58 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbda2.dll
[2010/10/16 17:14:58 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbda1.dll
[2010/10/16 17:14:57 | 000,257,024 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\infocomm.dll
[2010/10/16 17:14:57 | 000,035,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iprip.dll
[2010/10/16 17:14:57 | 000,008,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\infoctrs.dll
[2010/10/16 17:14:56 | 000,471,102 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imskdic.dll
[2010/10/16 17:14:56 | 000,315,455 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imskf.dll
[2010/10/16 17:14:56 | 000,015,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetin51.exe
[2010/10/16 17:14:55 | 000,274,489 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjputyc.dll
[2010/10/16 17:14:55 | 000,262,200 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjputy.exe
[2010/10/16 17:14:55 | 000,233,527 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjprw.exe
[2010/10/16 17:14:55 | 000,102,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imlang.dll
[2010/10/16 17:14:55 | 000,059,904 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imkrinst.exe
[2010/10/16 17:14:55 | 000,045,109 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpuex.exe
[2010/10/16 17:14:54 | 000,716,856 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpcus.dll
[2010/10/16 17:14:54 | 000,307,257 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpdct.exe
[2010/10/16 17:14:54 | 000,208,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpmig.exe
[2010/10/16 17:14:54 | 000,155,705 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2010/10/16 17:14:54 | 000,081,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpdct.dll
[2010/10/16 17:14:54 | 000,057,398 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpdadm.exe
[2010/10/16 17:14:53 | 000,811,064 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjp81k.dll
[2010/10/16 17:14:53 | 000,368,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjpcic.dll
[2010/10/16 17:14:53 | 000,340,023 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imjp81.ime
[2010/10/16 17:14:52 | 000,311,359 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imepadsv.exe
[2010/10/16 17:14:52 | 000,106,496 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imekrcic.dll
[2010/10/16 17:14:52 | 000,102,463 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imepadsm.dll
[2010/10/16 17:14:52 | 000,094,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imekr61.ime
[2010/10/16 17:14:52 | 000,086,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imekrmbx.dll
[2010/10/16 17:14:52 | 000,044,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\imekrmig.exe
[2010/10/16 17:14:52 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iissync.exe
[2010/10/16 17:14:51 | 000,145,408 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iische51.dll
[2010/10/16 17:14:51 | 000,079,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iislog51.dll
[2010/10/16 17:14:51 | 000,060,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisclex4.dll
[2010/10/16 17:14:51 | 000,025,088 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisadmin.dll
[2010/10/16 17:14:51 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iiscrmap.dll
[2010/10/16 17:14:51 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisfecnv.dll
[2010/10/16 17:14:51 | 000,003,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iismui.dll
[2010/10/16 17:14:43 | 010,129,408 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hwxkor.dll
[2010/10/16 17:14:28 | 010,096,640 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hwxcht.dll
[2010/10/16 17:14:28 | 000,268,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\httpext.dll
[2010/10/16 17:14:28 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\httpod51.dll
[2010/10/16 17:14:28 | 000,008,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\httpmb51.dll
[2010/10/16 17:14:27 | 000,039,936 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hostmib.dll
[2010/10/16 17:14:27 | 000,036,864 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hanjadic.dll
[2010/10/16 17:14:26 | 000,032,256 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\gzip.dll
[2010/10/16 17:14:25 | 000,562,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsst.dll
[2010/10/16 17:14:25 | 000,400,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsxp32.dll
[2010/10/16 17:14:25 | 000,397,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxstiff.dll
[2010/10/16 17:14:25 | 000,267,776 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxssvc.exe
[2010/10/16 17:14:25 | 000,246,272 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxst30.dll
[2010/10/16 17:14:25 | 000,192,512 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxswzrd.dll
[2010/10/16 17:14:25 | 000,154,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsui.dll
[2010/10/16 17:14:24 | 000,285,184 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxscomex.dll
[2010/10/16 17:14:24 | 000,229,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxscover.exe
[2010/10/16 17:14:24 | 000,072,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxscom.dll
[2010/10/16 17:14:24 | 000,055,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsevent.dll
[2010/10/16 17:14:24 | 000,031,744 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsroute.dll
[2010/10/16 17:14:24 | 000,026,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsdrv.dll
[2010/10/16 17:14:24 | 000,023,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsmon.dll
[2010/10/16 17:14:24 | 000,023,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsext32.dll
[2010/10/16 17:14:24 | 000,011,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxssend.exe
[2010/10/16 17:14:24 | 000,008,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsperf.dll
[2010/10/16 17:14:24 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsres.dll
[2010/10/16 17:14:23 | 000,451,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsapi.dll
[2010/10/16 17:14:23 | 000,142,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsclnt.exe
[2010/10/16 17:14:23 | 000,132,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxsclntr.dll
[2010/10/16 17:14:23 | 000,125,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ftpsv251.dll
[2010/10/16 17:14:23 | 000,111,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2010/10/16 17:14:23 | 000,007,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2010/10/16 17:14:23 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ftpmib.dll
[2010/10/16 17:14:23 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ftlx041e.dll
[2010/10/16 17:14:22 | 000,618,605 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4autl.dll
[2010/10/16 17:14:22 | 000,024,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fpadmcgi.exe
[2010/10/16 17:14:22 | 000,020,541 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fpadmdll.dll
[2010/10/16 17:14:22 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\flattemp.exe
[2010/10/16 17:14:21 | 000,092,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\evntwin.exe
[2010/10/16 17:14:21 | 000,043,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2010/10/16 17:14:21 | 000,024,064 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\evntcmd.exe
[2010/10/16 17:14:21 | 000,014,336 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\exstrace.dll
[2010/10/16 17:14:21 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\f3ahvoas.dll
[2010/10/16 17:14:20 | 000,101,888 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\evntagnt.dll
[2010/10/16 17:14:20 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – D:\WINDOWS\System32\dllcache\esuimgd.dll
[2010/10/16 17:14:20 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – D:\WINDOWS\System32\dllcache\esunid.dll
[2010/10/16 17:14:20 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – D:\WINDOWS\System32\dllcache\esucmd.dll
[2010/10/16 17:14:20 | 000,025,856 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\et4000.sys
[2010/10/16 17:14:19 | 000,514,587 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\edb500.dll
[2010/10/16 17:14:15 | 000,078,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dayi.ime
[2010/10/16 17:14:14 | 000,042,496 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\davcdata.exe
[2010/10/16 17:14:13 | 000,057,399 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cplexe.exe
[2010/10/16 17:14:13 | 000,056,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\convlog.exe
[2010/10/16 17:14:13 | 000,033,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\controt.dll
[2010/10/16 17:14:13 | 000,020,480 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\counters.dll
[2010/10/16 17:14:13 | 000,018,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cprofile.exe
[2010/10/16 17:14:12 | 000,024,064 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\compfilt.dll
[2010/10/16 17:14:11 | 000,480,256 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cintsetp.exe
[2010/10/16 17:14:11 | 000,198,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cintime.dll
[2010/10/16 17:14:11 | 000,097,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chtmbx.dll
[2010/10/16 17:14:11 | 000,056,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chtskdic.dll
[2010/10/16 17:14:11 | 000,021,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cintlgnt.ime
[2010/10/16 17:14:10 | 000,838,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chtbrkr.dll
[2010/10/16 17:14:09 | 001,677,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chsbrkr.dll
[2010/10/16 17:14:09 | 000,078,336 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chajei.ime
[2010/10/16 17:14:09 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chgport.exe
[2010/10/16 17:14:09 | 000,014,336 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chgusr.exe
[2010/10/16 17:14:09 | 000,013,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chglogon.exe
[2010/10/16 17:14:09 | 000,009,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\change.exe
[2010/10/16 17:14:08 | 000,218,112 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\c_g18030.dll
[2010/10/16 17:14:08 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – D:\WINDOWS\System32\dllcache\cap7146.sys
[2010/10/16 17:14:08 | 000,010,752 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\c_iscii.dll
[2010/10/16 17:14:08 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\c_is2022.dll
[2010/10/16 17:14:02 | 000,045,568 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\browscap.dll
[2010/10/16 17:14:01 | 000,009,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\authfilt.dll
[2010/10/16 17:14:00 | 000,369,664 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\asp51.dll
[2010/10/16 17:14:00 | 000,331,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\aqueue.dll
[2010/10/16 17:14:00 | 000,029,184 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\asptxn.dll
[2010/10/16 17:14:00 | 000,010,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\aspperf.dll
[2010/10/16 17:13:59 | 000,108,544 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\appconf.dll
[2010/10/16 17:13:59 | 000,045,056 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2010/10/16 17:13:59 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0804.dll
[2010/10/16 17:13:59 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0412.dll
[2010/10/16 17:13:59 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0411.dll
[2010/10/16 17:13:59 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt040d.dll
[2010/10/16 17:13:59 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0404.dll
[2010/10/16 17:13:58 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0401.dll
[2010/10/16 17:13:58 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2010/10/16 17:13:57 | 000,049,664 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\adrot.dll
[2010/10/16 17:13:57 | 000,029,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\admexs.dll
[2010/10/16 17:13:57 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\admxprox.dll
[2010/10/16 17:13:54 | 000,032,827 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tcptest.exe
[2010/10/16 17:13:54 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tcptsat.dll
[2010/10/16 17:13:54 | 000,008,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\staxmem.dll
[2010/10/16 17:13:54 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wamregps.dll
[2010/10/16 17:13:53 | 002,134,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smtpsnap.dll
[2010/10/16 17:13:53 | 000,189,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smtpadm.dll
[2010/10/16 17:13:53 | 000,020,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\shtml.dll
[2010/10/16 17:13:53 | 000,016,437 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\shtml.exe
[2010/10/16 17:13:49 | 000,076,800 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\logui.ocx
[2010/10/16 17:13:49 | 000,068,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\isatq.dll
[2010/10/16 17:13:49 | 000,019,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetsloc.dll
[2010/10/16 17:13:49 | 000,013,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\infoadmn.dll
[2010/10/16 17:13:49 | 000,007,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetmgr.exe
[2010/10/16 17:13:48 | 000,829,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetmgr.dll
[2010/10/16 17:13:48 | 000,169,984 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisui.dll
[2010/10/16 17:13:48 | 000,133,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisrtl.dll
[2010/10/16 17:13:48 | 000,068,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisext51.dll
[2010/10/16 17:13:48 | 000,064,512 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iismap.dll
[2010/10/16 17:13:48 | 000,030,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisrstas.exe
[2010/10/16 17:13:48 | 000,014,336 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisreset.exe
[2010/10/16 17:13:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iisrstap.dll
[2010/10/16 17:13:47 | 000,598,071 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fpmmc.dll
[2010/10/16 17:13:47 | 000,208,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2010/10/16 17:13:47 | 000,188,494 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fpcount.exe
[2010/10/16 17:13:47 | 000,020,541 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fpexedll.dll
[2010/10/16 17:13:47 | 000,020,538 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fpremadm.exe
[2010/10/16 17:13:47 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2010/10/16 17:13:46 | 000,876,653 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4awel.dll
[2010/10/16 17:13:46 | 000,147,513 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4apws.dll
[2010/10/16 17:13:46 | 000,109,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp98swin.exe
[2010/10/16 17:13:46 | 000,102,509 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4atxt.dll
[2010/10/16 17:13:46 | 000,049,212 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4awebs.dll
[2010/10/16 17:13:46 | 000,049,210 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4areg.dll
[2010/10/16 17:13:46 | 000,041,020 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4avnb.dll
[2010/10/16 17:13:46 | 000,032,826 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4avss.dll
[2010/10/16 17:13:46 | 000,014,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp98sadm.exe
[2010/10/16 17:13:45 | 000,188,480 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cfgwiz.exe
[2010/10/16 17:13:45 | 000,184,435 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4amsft.dll
[2010/10/16 17:13:45 | 000,082,035 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fp4anscp.dll
[2010/10/16 17:13:45 | 000,076,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cnfgprts.ocx
[2010/10/16 17:13:45 | 000,046,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\coadmin.dll
[2010/10/16 17:13:44 | 000,290,816 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\adsiis51.dll
[2010/10/16 17:13:44 | 000,275,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\certwiz.ocx
[2010/10/16 17:13:44 | 000,094,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\certmap.ocx
[2010/10/16 17:13:44 | 000,043,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\admwprox.dll
[2010/10/16 17:13:44 | 000,020,540 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\author.dll
[2010/10/16 17:13:44 | 000,016,439 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\author.exe
[2010/10/16 17:13:43 | 000,016,439 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\admin.exe
[2010/10/16 17:13:42 | 000,020,540 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\admin.dll
[2010/10/16 17:13:38 | 000,000,000 | —D | C] – D:\WINDOWS\System32\xircom
[2010/10/16 17:13:38 | 000,000,000 | —D | C] – D:\Program Files\xerox
[2010/10/16 17:13:38 | 000,000,000 | —D | C] – D:\Program Files\microsoft frontpage
[2010/10/16 17:12:57 | 000,112,128 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mapi32.dll
[2010/10/16 17:12:08 | 000,000,000 | -HSD | C] – D:\Documents and Settings\All Users\DRM
[2010/10/16 17:11:57 | 000,000,000 | –SD | C] – D:\WINDOWS\Downloaded Program Files
[2010/10/16 17:11:57 | 000,000,000 | R–D | C] – D:\WINDOWS\Offline Web Pages
[2010/10/16 17:11:45 | 000,000,000 | -H-D | C] – D:\Program Files\WindowsUpdate
[2010/10/16 17:11:18 | 000,000,000 | —D | C] – D:\WINDOWS\System32\DirectX
[2010/10/16 17:11:11 | 000,099,840 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\helphost.exe
[2010/10/16 17:11:11 | 000,035,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\notiflag.exe
[2010/10/16 17:11:11 | 000,021,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\brpinfo.dll
[2010/10/16 17:11:11 | 000,011,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\atrace.dll
[2010/10/16 17:11:11 | 000,011,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\atrace.dll
[2010/10/16 17:11:10 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hcappres.dll
[2010/10/16 17:10:58 | 000,047,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srdiag.exe
[2010/10/16 17:10:58 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\nmevtmsg.dll
[2010/10/16 17:10:58 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2010/10/16 17:10:57 | 000,064,512 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\acctres.dll
[2010/10/16 17:10:57 | 000,064,512 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\acctres.dll
[2010/10/16 17:10:57 | 000,039,936 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msinfo32.exe
[2010/10/16 17:10:57 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wb32.exe
[2010/10/16 17:10:57 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cb32.exe
[2010/10/16 17:10:56 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Services
[2010/10/16 17:10:54 | 000,073,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwtutor.exe
[2010/10/16 17:10:54 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwres.dll
[2010/10/16 17:10:54 | 000,040,960 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\trialoc.dll
[2010/10/16 17:10:54 | 000,025,088 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wisc10.dll
[2010/10/16 17:10:54 | 000,023,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mssoapr.dll
[2010/10/16 17:10:54 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\isignup.exe
[2010/10/16 17:10:54 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\icfgnt5.dll
[2010/10/16 17:10:54 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icfgnt5.dll
[2010/10/16 17:10:54 | 000,000,000 | –SD | C] – D:\WINDOWS\Tasks
[2010/10/16 17:10:53 | 000,235,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mssoap1.dll
[2010/10/16 17:10:53 | 000,093,184 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2010/10/16 17:10:53 | 000,000,000 | —D | C] – D:\Program Files\Common Files\MSSoap
[2010/10/16 17:10:50 | 000,726,078 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srchui.dll
[2010/10/16 17:10:50 | 000,058,434 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srchctls.dll
[2010/10/16 17:10:49 | 003,166,208 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msgr3en.dll
[2010/10/16 17:10:48 | 000,759,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\VGX.dll
[2010/10/16 17:10:48 | 000,000,000 | —D | C] – D:\WINDOWS\srchasst
[2010/10/16 17:10:47 | 000,774,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\setup_wm.exe
[2010/10/16 17:10:47 | 000,098,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmpband.dll
[2010/10/16 17:10:47 | 000,000,000 | —D | C] – D:\WINDOWS\System32\Macromed
[2010/10/16 17:10:46 | 000,786,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\migrate.exe
[2010/10/16 17:10:46 | 000,368,640 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mpvis.dll
[2010/10/16 17:10:46 | 000,221,184 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmpns.dll
[2010/10/16 17:10:46 | 000,033,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\custsat.dll
[2010/10/16 17:10:45 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – D:\WINDOWS\System32\dllcache\npdsplay.dll
[2010/10/16 17:10:45 | 000,226,816 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\npdrmv2.dll
[2010/10/16 17:10:45 | 000,073,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmplayer.exe
[2010/10/16 17:10:45 | 000,010,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2010/10/16 17:10:45 | 000,004,639 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mplayer2.exe
[2010/10/16 17:10:44 | 001,135,616 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuaueng.dll
[2010/10/16 17:10:44 | 000,327,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\wucltui.dll
[2010/10/16 17:10:44 | 000,183,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\wuaueng1.dll
[2010/10/16 17:10:44 | 000,183,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuaueng1.dll
[2010/10/16 17:10:44 | 000,120,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuweb.dll
[2010/10/16 17:10:44 | 000,112,640 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wucltui.dll
[2010/10/16 17:10:44 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuauserv.dll
[2010/10/16 17:10:43 | 000,575,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\wuapi.dll
[2010/10/16 17:10:43 | 000,430,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuapi.dll
[2010/10/16 17:10:43 | 000,409,088 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qmgr.dll
[2010/10/16 17:10:43 | 000,165,888 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\wuauclt1.exe
[2010/10/16 17:10:43 | 000,165,888 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuauclt1.exe
[2010/10/16 17:10:43 | 000,162,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2010/10/16 17:10:43 | 000,111,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wuauclt.exe
[2010/10/16 17:10:43 | 000,035,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\wups.dll
[2010/10/16 17:10:43 | 000,035,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wups.dll
[2010/10/16 17:10:43 | 000,018,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\qmgrprxy.dll
[2010/10/16 17:10:43 | 000,018,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qmgrprxy.dll
[2010/10/16 17:10:43 | 000,008,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bitsprx2.dll
[2010/10/16 17:10:43 | 000,008,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\bitsprx2.dll
[2010/10/16 17:10:43 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bitsprx4.dll
[2010/10/16 17:10:43 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\bitsprx4.dll
[2010/10/16 17:10:43 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bitsprx3.dll
[2010/10/16 17:10:43 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\bitsprx3.dll
[2010/10/16 17:10:41 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2res2.dll
[2010/10/16 17:10:41 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2eres.dll
[2010/10/16 17:10:39 | 004,256,768 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2res.dll
[2010/10/16 17:10:39 | 000,502,272 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2fxa.dll
[2010/10/16 17:10:39 | 000,402,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2filt.dll
[2010/10/16 17:10:39 | 000,325,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2fxb.dll
[2010/10/16 17:10:39 | 000,167,936 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2ae.dll
[2010/10/16 17:10:39 | 000,007,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmm2ext.dll
[2010/10/16 17:10:37 | 003,558,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\moviemk.exe
[2010/10/16 17:10:37 | 000,000,000 | —D | C] – D:\Program Files\Movie Maker
[2010/10/16 17:10:24 | 000,565,248 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msobmain.dll
[2010/10/16 17:10:24 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msobdl.dll
[2010/10/16 17:10:23 | 000,122,368 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msobcomm.dll
[2010/10/16 17:10:23 | 000,051,200 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\oobebaln.exe
[2010/10/16 17:10:23 | 000,030,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msobshel.dll
[2010/10/16 17:10:23 | 000,029,184 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msoobe.exe
[2010/10/16 17:10:23 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msobweb.dll
[2010/10/16 17:10:21 | 000,150,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\uploadm.exe
[2010/10/16 17:10:21 | 000,045,568 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\safrslv.dll
[2010/10/16 17:10:21 | 000,045,568 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\safrslv.dll
[2010/10/16 17:10:21 | 000,043,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\safrcdlg.dll
[2010/10/16 17:10:21 | 000,043,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\safrcdlg.dll
[2010/10/16 17:10:21 | 000,043,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\racpldlg.dll
[2010/10/16 17:10:21 | 000,043,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\racpldlg.dll
[2010/10/16 17:10:21 | 000,029,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\safrdm.dll
[2010/10/16 17:10:21 | 000,029,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\safrdm.dll
[2010/10/16 17:10:20 | 000,102,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pchshell.dll
[2010/10/16 17:10:20 | 000,038,400 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pchsvc.dll
[2010/10/16 17:10:17 | 000,169,984 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msconfig.exe
[2010/10/16 17:10:16 | 000,769,024 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\helpctr.exe
[2010/10/16 17:10:16 | 000,744,448 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\helpsvc.exe
[2010/10/16 17:10:16 | 000,018,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hscupd.exe
[2010/10/16 17:10:15 | 000,380,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rstrui.exe
[2010/10/16 17:10:15 | 000,239,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\srrstr.dll
[2010/10/16 17:10:15 | 000,239,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srrstr.dll
[2010/10/16 17:10:15 | 000,171,008 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srsvc.dll
[2010/10/16 17:10:15 | 000,129,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fltmgr.sys
[2010/10/16 17:10:15 | 000,067,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srclient.dll
[2010/10/16 17:10:15 | 000,023,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\fltMc.exe
[2010/10/16 17:10:15 | 000,023,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fltmc.exe
[2010/10/16 17:10:15 | 000,016,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fltlib.dll
[2010/10/16 17:10:15 | 000,000,000 | —D | C] – D:\WINDOWS\System32\Restore
[2010/10/16 17:10:14 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\ils.dll
[2010/10/16 17:10:14 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ils.dll
[2010/10/16 17:10:14 | 000,073,472 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sr.sys
[2010/10/16 17:10:14 | 000,034,560 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mnmdd.dll
[2010/10/16 17:10:14 | 000,034,560 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mnmdd.dll
[2010/10/16 17:10:14 | 000,032,768 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\isrdbg32.dll
[2010/10/16 17:10:14 | 000,032,768 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\isrdbg32.dll
[2010/10/16 17:10:13 | 000,385,024 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\callcont.dll
[2010/10/16 17:10:13 | 000,229,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmas.dll
[2010/10/16 17:10:13 | 000,069,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msconf.dll
[2010/10/16 17:10:13 | 000,069,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msconf.dll
[2010/10/16 17:10:13 | 000,040,960 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dcap32.dll
[2010/10/16 17:10:13 | 000,032,768 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mnmsrvc.exe
[2010/10/16 17:10:13 | 000,028,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\nmmkcert.dll
[2010/10/16 17:10:13 | 000,028,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmmkcert.dll
[2010/10/16 17:10:13 | 000,028,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmasnt.dll
[2010/10/16 17:10:12 | 000,274,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mst120.dll
[2010/10/16 17:10:12 | 000,221,184 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nac.dll
[2010/10/16 17:10:12 | 000,077,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmcom.dll
[2010/10/16 17:10:12 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rrcm.dll
[2010/10/16 17:10:12 | 000,057,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mst123.dll
[2010/10/16 17:10:12 | 000,057,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\h323cc.dll
[2010/10/16 17:10:12 | 000,045,056 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\confmrsl.dll
[2010/10/16 17:10:11 | 001,032,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\conf.exe
[2010/10/16 17:10:11 | 000,188,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmwb.dll
[2010/10/16 17:10:11 | 000,172,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmoldwb.dll
[2010/10/16 17:10:11 | 000,151,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmft.dll
[2010/10/16 17:10:11 | 000,105,984 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msoert2.dll
[2010/10/16 17:10:11 | 000,105,984 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msoert2.dll
[2010/10/16 17:10:11 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nmchat.dll
[2010/10/16 17:10:11 | 000,000,000 | —D | C] – D:\Program Files\NetMeeting
[2010/10/16 17:10:10 | 000,510,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wab32.dll
[2010/10/16 17:10:10 | 000,252,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msoeacct.dll
[2010/10/16 17:10:10 | 000,252,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msoeacct.dll
[2010/10/16 17:10:10 | 000,249,856 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wab32res.dll
[2010/10/16 17:10:10 | 000,086,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\directdb.dll
[2010/10/16 17:10:10 | 000,085,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wabimp.dll
[2010/10/16 17:10:10 | 000,046,080 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wab.exe
[2010/10/16 17:10:10 | 000,032,768 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wabfind.dll
[2010/10/16 17:10:10 | 000,030,208 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wabmig.exe
[2010/10/16 17:10:09 | 000,692,736 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/10/16 17:10:09 | 000,104,448 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\oeimport.dll
[2010/10/16 17:10:09 | 000,060,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msimn.exe
[2010/10/16 17:10:09 | 000,048,128 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\inetres.dll
[2010/10/16 17:10:09 | 000,048,128 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetres.dll
[2010/10/16 17:10:07 | 002,479,616 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msoeres.dll
[2010/10/16 17:10:07 | 000,192,512 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\schedsvc.dll
[2010/10/16 17:10:07 | 000,073,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\setup50.exe
[2010/10/16 17:10:07 | 000,060,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\oemig50.exe
[2010/10/16 17:10:07 | 000,035,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\oemiglib.dll
[2010/10/16 17:10:07 | 000,000,000 | —D | C] – D:\Program Files\Outlook Express
[2010/10/16 17:10:06 | 000,274,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mstask.dll
[2010/10/16 17:10:06 | 000,274,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\inetcfg.dll
[2010/10/16 17:10:06 | 000,274,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetcfg.dll
[2010/10/16 17:10:06 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\isign32.dll
[2010/10/16 17:10:06 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\isign32.dll
[2010/10/16 17:10:06 | 000,073,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\icwdial.dll
[2010/10/16 17:10:06 | 000,073,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwdial.dll
[2010/10/16 17:10:06 | 000,065,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\icwphbk.dll
[2010/10/16 17:10:06 | 000,065,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwphbk.dll
[2010/10/16 17:10:06 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mstinit.exe
[2010/10/16 17:10:06 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mstinit.exe
[2010/10/16 17:10:05 | 000,172,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwhelp.dll
[2010/10/16 17:10:05 | 000,086,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwconn2.exe
[2010/10/16 17:10:05 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwconn.dll
[2010/10/16 17:10:05 | 000,049,152 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwutil.dll
[2010/10/16 17:10:05 | 000,032,768 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwdl.dll
[2010/10/16 17:10:05 | 000,024,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwrmind.exe
[2010/10/16 17:10:05 | 000,020,480 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inetwiz.exe
[2010/10/16 17:10:04 | 000,554,008 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dao360.dll
[2010/10/16 17:10:04 | 000,217,088 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sqlxmlx.dll
[2010/10/16 17:10:04 | 000,214,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icwconn1.exe
[2010/10/16 17:10:03 | 000,487,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\oledb32.dll
[2010/10/16 17:10:03 | 000,204,800 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaps.dll
[2010/10/16 17:10:03 | 000,094,208 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdatl3.dll
[2010/10/16 17:10:03 | 000,077,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaosp.dll
[2010/10/16 17:10:03 | 000,065,536 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\oledb32r.dll
[2010/10/16 17:10:03 | 000,024,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msxactps.dll
[2010/10/16 17:10:03 | 000,020,480 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdatt.dll
[2010/10/16 17:10:03 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdasqlr.dll
[2010/10/16 17:10:03 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaurl.dll
[2010/10/16 17:10:02 | 000,315,392 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdasql.dll
[2010/10/16 17:10:02 | 000,233,472 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaora.dll
[2010/10/16 17:10:02 | 000,200,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadox.dll
[2010/10/16 17:10:02 | 000,180,224 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadomd.dll
[2010/10/16 17:10:02 | 000,102,400 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msjro.dll
[2010/10/16 17:10:02 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msado27.tlb
[2010/10/16 17:10:02 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msado26.tlb
[2010/10/16 17:10:02 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msado25.tlb
[2010/10/16 17:10:02 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msado21.tlb
[2010/10/16 17:10:02 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msado20.tlb
[2010/10/16 17:10:02 | 000,057,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadrh15.dll
[2010/10/16 17:10:02 | 000,057,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msador15.dll
[2010/10/16 17:10:02 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaorar.dll
[2010/10/16 17:10:02 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdasc.dll
[2010/10/16 17:10:02 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaer.dll
[2010/10/16 17:10:02 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaenum.dll
[2010/10/16 17:10:02 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdadc.dll
[2010/10/16 17:10:01 | 000,536,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msado15.dll
[2010/10/16 17:10:01 | 000,200,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaprst.dll
[2010/10/16 17:10:01 | 000,155,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadds.dll
[2010/10/16 17:10:01 | 000,143,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadco.dll
[2010/10/16 17:10:01 | 000,118,784 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdarem.dll
[2010/10/16 17:10:01 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadcf.dll
[2010/10/16 17:10:01 | 000,053,248 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadcs.dll
[2010/10/16 17:10:01 | 000,036,864 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdfmap.dll
[2010/10/16 17:10:01 | 000,024,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msader15.dll
[2010/10/16 17:10:01 | 000,024,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msaddsr.dll
[2010/10/16 17:10:01 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaremr.dll
[2010/10/16 17:10:01 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdaprsr.dll
[2010/10/16 17:10:01 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadcor.dll
[2010/10/16 17:10:01 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadcfr.dll
[2010/10/16 17:10:00 | 000,331,776 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadce.dll
[2010/10/16 17:10:00 | 000,020,480 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msadcer.dll
[2010/10/16 17:10:00 | 000,000,000 | —D | C] – D:\Program Files\Common Files\System
[2010/10/16 17:09:59 | 000,068,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hmmapi.dll
[2010/10/16 17:09:59 | 000,018,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iedw.exe
[2010/10/16 17:09:57 | 000,638,816 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\iexplore.exe
[2010/10/16 17:09:57 | 000,000,000 | —D | C] – D:\Program Files\Internet Explorer
[2010/10/16 17:09:56 | 000,000,000 | R–D | C] – D:\Documents and Settings\All Users\Documents\My Pictures
[2010/10/16 17:09:17 | 000,000,000 | —D | C] – D:\Program Files\ComPlus Applications
[2010/10/16 17:09:10 | 000,000,000 | —D | C] – D:\WINDOWS\Registration
[2010/10/16 17:09:01 | 000,000,000 | R–D | C] – D:\Documents and Settings\All Users\Documents\My Music
[2010/10/16 17:09:01 | 000,000,000 | —D | C] – D:\Program Files\Windows Media Player
[2010/10/16 17:09:01 | 000,000,000 | —D | C] – D:\Program Files\Online Services
[2010/10/16 17:08:53 | 000,042,577 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bckgzm.exe
[2010/10/16 17:08:53 | 000,000,000 | —D | C] – D:\Program Files\Messenger
[2010/10/16 17:08:52 | 001,817,687 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bckgres.dll
[2010/10/16 17:08:52 | 000,780,885 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chkrres.dll
[2010/10/16 17:08:52 | 000,753,236 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rvseres.dll
[2010/10/16 17:08:52 | 000,082,501 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bckg.dll
[2010/10/16 17:08:52 | 000,048,706 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rvse.dll
[2010/10/16 17:08:52 | 000,042,575 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chkrzm.exe
[2010/10/16 17:08:52 | 000,042,574 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rvsezm.exe
[2010/10/16 17:08:52 | 000,040,515 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\chkr.dll
[2010/10/16 17:08:51 | 002,178,131 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\shvlres.dll
[2010/10/16 17:08:51 | 001,175,635 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hrtzres.dll
[2010/10/16 17:08:51 | 000,066,113 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\shvl.dll
[2010/10/16 17:08:51 | 000,057,409 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hrtz.dll
[2010/10/16 17:08:51 | 000,042,573 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\shvlzm.exe
[2010/10/16 17:08:51 | 000,042,573 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hrtzzm.exe
[2010/10/16 17:08:51 | 000,041,029 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\zcorem.dll
[2010/10/16 17:08:51 | 000,032,339 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\uniansi.dll
[2010/10/16 17:08:51 | 000,013,894 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\zonelibm.dll
[2010/10/16 17:08:51 | 000,004,677 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\zeeverm.dll
[2010/10/16 17:08:50 | 001,039,955 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cmnresm.dll
[2010/10/16 17:08:50 | 000,217,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cmnclim.dll
[2010/10/16 17:08:50 | 000,113,222 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\zoneclim.dll
[2010/10/16 17:08:50 | 000,036,937 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\zclientm.exe
[2010/10/16 17:08:50 | 000,029,760 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\znetm.dll
[2010/10/16 17:08:50 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\write.exe
[2010/10/16 17:08:50 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\write.exe
[2010/10/16 17:08:50 | 000,000,000 | —D | C] – D:\Program Files\MSN Gaming Zone
[2010/10/16 17:08:42 | 000,138,752 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\sndvol32.exe
[2010/10/16 17:08:42 | 000,138,752 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sndvol32.exe
[2010/10/16 17:08:42 | 000,073,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\avwav.dll
[2010/10/16 17:08:42 | 000,073,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\avwav.dll
[2010/10/16 17:08:42 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – D:\WINDOWS\System32\hticons.dll
[2010/10/16 17:08:42 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\avmeter.dll
[2010/10/16 17:08:42 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\avmeter.dll
[2010/10/16 17:08:42 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – D:\WINDOWS\System32\dllcache\htrn_jis.dll
[2010/10/16 17:08:41 | 000,227,840 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\avtapi.dll
[2010/10/16 17:08:41 | 000,227,840 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\avtapi.dll
[2010/10/16 17:08:41 | 000,035,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\winchat.exe
[2010/10/16 17:08:41 | 000,035,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winchat.exe
[2010/10/16 17:08:36 | 000,605,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\getuname.dll
[2010/10/16 17:08:36 | 000,605,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\getuname.dll
[2010/10/16 17:08:36 | 000,080,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\charmap.exe
[2010/10/16 17:08:36 | 000,080,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\charmap.exe
[2010/10/16 17:08:35 | 000,126,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mshearts.exe
[2010/10/16 17:08:35 | 000,126,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mshearts.exe
[2010/10/16 17:08:35 | 000,119,808 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\winmine.exe
[2010/10/16 17:08:35 | 000,119,808 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winmine.exe
[2010/10/16 17:08:35 | 000,114,688 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\calc.exe
[2010/10/16 17:08:35 | 000,114,688 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\calc.exe
[2010/10/16 17:08:35 | 000,056,832 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\sol.exe
[2010/10/16 17:08:35 | 000,056,832 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sol.exe
[2010/10/16 17:08:34 | 000,055,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\freecell.exe
[2010/10/16 17:08:34 | 000,055,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\freecell.exe
[2010/10/16 17:08:34 | 000,033,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\regini.exe
[2010/10/16 17:08:34 | 000,033,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\regini.exe
[2010/10/16 17:08:34 | 000,022,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\qwinsta.exe
[2010/10/16 17:08:34 | 000,022,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qwinsta.exe
[2010/10/16 17:08:34 | 000,020,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msg.exe
[2010/10/16 17:08:34 | 000,020,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msg.exe
[2010/10/16 17:08:34 | 000,016,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\tsshutdn.exe
[2010/10/16 17:08:34 | 000,016,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tsshutdn.exe
[2010/10/16 17:08:34 | 000,016,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\qappsrv.exe
[2010/10/16 17:08:34 | 000,016,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qappsrv.exe
[2010/10/16 17:08:34 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\tskill.exe
[2010/10/16 17:08:34 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tskill.exe
[2010/10/16 17:08:34 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rwinsta.exe
[2010/10/16 17:08:34 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rwinsta.exe
[2010/10/16 17:08:34 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\tsdiscon.exe
[2010/10/16 17:08:34 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tsdiscon.exe
[2010/10/16 17:08:34 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\tscon.exe
[2010/10/16 17:08:34 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tscon.exe
[2010/10/16 17:08:34 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\shadow.exe
[2010/10/16 17:08:34 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\shadow.exe
[2010/10/16 17:08:34 | 000,009,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\reset.exe
[2010/10/16 17:08:34 | 000,009,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\reset.exe
[2010/10/16 17:08:34 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rdpcfgex.dll
[2010/10/16 17:08:34 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2010/10/16 17:08:33 | 000,045,568 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmi2xml.dll
[2010/10/16 17:08:33 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2010/10/16 17:08:33 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cdmodem.dll
[2010/10/16 17:08:33 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\cdmodem.dll
[2010/10/16 17:08:33 | 000,015,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\logoff.exe
[2010/10/16 17:08:33 | 000,015,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\logoff.exe
[2010/10/16 17:08:30 | 000,116,224 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\updprov.dll
[2010/10/16 17:08:30 | 000,075,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmipicmp.dll
[2010/10/16 17:08:30 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmimsg.dll
[2010/10/16 17:08:30 | 000,059,904 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2010/10/16 17:08:30 | 000,059,904 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\trnsprov.dll
[2010/10/16 17:08:30 | 000,052,224 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmitimep.dll
[2010/10/16 17:08:30 | 000,031,232 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemads.tlb
[2010/10/16 17:08:30 | 000,016,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\unsecapp.exe
[2010/10/16 17:08:30 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winmgmtr.dll
[2010/10/16 17:08:30 | 000,013,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\winmgmt.exe
[2010/10/16 17:08:30 | 000,012,288 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemads.dll
[2010/10/16 17:08:29 | 000,273,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msiprov.dll
[2010/10/16 17:08:29 | 000,120,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dsprov.dll
[2010/10/16 17:08:29 | 000,061,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tmplprov.dll
[2010/10/16 17:08:29 | 000,053,248 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fwdprov.dll
[2010/10/16 17:08:29 | 000,040,960 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smtpcons.dll
[2010/10/16 17:08:09 | 000,000,000 | —D | C] – D:\Program Files\MSN
[2010/10/16 17:08:08 | 000,281,088 | —- | C] (Cinematronics) – D:\WINDOWS\System32\dllcache\pinball.exe
[2010/10/16 17:08:08 | 000,184,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\accwiz.exe
[2010/10/16 17:08:08 | 000,184,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\accwiz.exe
[2010/10/16 17:08:08 | 000,068,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\access.cpl
[2010/10/16 17:08:08 | 000,068,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\access.cpl
[2010/10/16 17:08:07 | 000,539,136 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dialer.exe
[2010/10/16 17:08:07 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – D:\WINDOWS\System32\hypertrm.dll
[2010/10/16 17:08:07 | 000,131,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\sndrec32.exe
[2010/10/16 17:08:07 | 000,131,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sndrec32.exe
[2010/10/16 17:08:07 | 000,123,392 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mplay32.exe
[2010/10/16 17:08:07 | 000,123,392 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mplay32.exe
[2010/10/16 17:08:07 | 000,000,000 | —D | C] – D:\Program Files\Windows NT
[2010/10/16 17:08:06 | 000,538,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\spider.exe
[2010/10/16 17:08:06 | 000,538,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\spider.exe
[2010/10/16 17:08:06 | 000,343,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mspaint.exe
[2010/10/16 17:08:06 | 000,343,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mspaint.exe
[2010/10/16 17:08:06 | 000,102,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\clipbrd.exe
[2010/10/16 17:08:06 | 000,102,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\clipbrd.exe
[2010/10/16 17:08:05 | 000,139,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdpwd.sys
[2010/10/16 17:08:05 | 000,093,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\tscfgwmi.dll
[2010/10/16 17:08:05 | 000,093,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tscfgwmi.dll
[2010/10/16 17:08:05 | 000,053,248 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\tsgqec.dll
[2010/10/16 17:08:05 | 000,053,248 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tsgqec.dll
[2010/10/16 17:08:05 | 000,021,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tdtcp.sys
[2010/10/16 17:08:05 | 000,012,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tdpipe.sys
[2010/10/16 17:08:05 | 000,000,000 | —D | C] – D:\WINDOWS\System32\en-US
[2010/10/16 17:08:04 | 000,290,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rhttpaa.dll
[2010/10/16 17:08:04 | 000,290,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rhttpaa.dll
[2010/10/16 17:08:04 | 000,136,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\aaclient.dll
[2010/10/16 17:08:04 | 000,136,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\aaclient.dll
[2010/10/16 17:08:03 | 002,061,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\lhmstscx.dll
[2010/10/16 17:08:03 | 000,677,888 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\lhmstsc.exe
[2010/10/16 17:08:03 | 000,141,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sessmgr.exe
[2010/10/16 17:08:03 | 000,067,072 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rdshost.exe
[2010/10/16 17:08:03 | 000,067,072 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdshost.exe
[2010/10/16 17:08:03 | 000,060,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\remotepg.dll
[2010/10/16 17:08:03 | 000,013,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rdsaddin.exe
[2010/10/16 17:08:03 | 000,013,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdsaddin.exe
[2010/10/16 17:08:02 | 000,295,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\termsrv.dll
[2010/10/16 17:08:02 | 000,147,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rdchost.dll
[2010/10/16 17:08:02 | 000,147,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdchost.dll
[2010/10/16 17:08:02 | 000,087,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rdpwsx.dll
[2010/10/16 17:08:02 | 000,087,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdpwsx.dll
[2010/10/16 17:08:02 | 000,062,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rdpclip.exe
[2010/10/16 17:08:02 | 000,062,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdpclip.exe
[2010/10/16 17:08:02 | 000,038,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cfgbkend.dll
[2010/10/16 17:08:02 | 000,038,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\cfgbkend.dll
[2010/10/16 17:08:02 | 000,019,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\rdpsnd.dll
[2010/10/16 17:08:02 | 000,019,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rdpsnd.dll
[2010/10/16 17:08:02 | 000,019,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\qprocess.exe
[2010/10/16 17:08:02 | 000,019,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qprocess.exe
[2010/10/16 17:08:02 | 000,011,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\icaapi.dll
[2010/10/16 17:08:02 | 000,011,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icaapi.dll
[2010/10/16 17:08:01 | 000,956,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msdtctm.dll
[2010/10/16 17:08:01 | 000,956,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdtctm.dll
[2010/10/16 17:08:01 | 000,428,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msdtcprx.dll
[2010/10/16 17:08:01 | 000,428,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdtcprx.dll
[2010/10/16 17:08:01 | 000,161,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msdtcuiu.dll
[2010/10/16 17:08:01 | 000,161,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdtcuiu.dll
[2010/10/16 17:08:01 | 000,091,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mtxoci.dll
[2010/10/16 17:08:01 | 000,091,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mtxoci.dll
[2010/10/16 17:08:01 | 000,011,776 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\xolehlp.dll
[2010/10/16 17:08:01 | 000,011,776 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\xolehlp.dll
[2010/10/16 17:08:01 | 000,000,000 | —D | C] – D:\WINDOWS\System32\MsDtc
[2010/10/16 17:08:00 | 000,058,880 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\msdtclog.dll
[2010/10/16 17:08:00 | 000,058,880 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdtclog.dll
[2010/10/16 17:08:00 | 000,034,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mtxlegih.dll
[2010/10/16 17:08:00 | 000,034,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mtxlegih.dll
[2010/10/16 17:08:00 | 000,009,728 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comrepl.exe
[2010/10/16 17:08:00 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msdtc.exe
[2010/10/16 17:08:00 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dcomcnfg.exe
[2010/10/16 17:08:00 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dcomcnfg.exe
[2010/10/16 17:08:00 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comrereg.exe
[2010/10/16 17:07:59 | 000,195,072 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comadmin.dll
[2010/10/16 17:07:59 | 000,110,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\clbcatex.dll
[2010/10/16 17:07:59 | 000,110,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\clbcatex.dll
[2010/10/16 17:07:59 | 000,097,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comrepl.dll
[2010/10/16 17:07:59 | 000,097,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\comrepl.dll
[2010/10/16 17:07:59 | 000,085,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\catsrvps.dll
[2010/10/16 17:07:59 | 000,085,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\catsrvps.dll
[2010/10/16 17:07:59 | 000,060,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\colbact.dll
[2010/10/16 17:07:59 | 000,060,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\colbact.dll
[2010/10/16 17:07:59 | 000,059,392 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\stclient.dll
[2010/10/16 17:07:59 | 000,059,392 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\stclient.dll
[2010/10/16 17:07:59 | 000,030,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mtxdm.dll
[2010/10/16 17:07:59 | 000,030,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mtxdm.dll
[2010/10/16 17:07:59 | 000,028,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comaddin.dll
[2010/10/16 17:07:59 | 000,028,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\comaddin.dll
[2010/10/16 17:07:59 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mtxex.dll
[2010/10/16 17:07:59 | 000,004,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mtxex.dll
[2010/10/16 17:07:59 | 000,000,000 | —D | C] – D:\WINDOWS\System32\Com
[2010/10/16 17:07:58 | 001,267,200 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comsvcs.dll
[2010/10/16 17:07:58 | 001,267,200 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\comsvcs.dll
[2010/10/16 17:07:58 | 000,625,664 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\catsrvut.dll
[2010/10/16 17:07:58 | 000,625,664 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\catsrvut.dll
[2010/10/16 17:07:58 | 000,226,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\catsrv.dll
[2010/10/16 17:07:58 | 000,226,304 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\catsrv.dll
[2010/10/16 17:07:57 | 000,539,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comuid.dll
[2010/10/16 17:07:57 | 000,539,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\comuid.dll
[2010/10/16 17:07:57 | 000,498,688 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\clbcatq.dll
[2010/10/16 17:07:57 | 000,167,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\comsnap.dll
[2010/10/16 17:07:57 | 000,167,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\comsnap.dll
[2010/10/16 17:07:56 | 000,144,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmisvc.dll
[2010/10/16 17:07:56 | 000,095,232 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmiutils.dll
[2010/10/16 17:07:55 | 000,358,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmic.exe
[2010/10/16 17:07:55 | 000,156,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmipcima.dll
[2010/10/16 17:07:55 | 000,144,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmiprov.dll
[2010/10/16 17:07:55 | 000,140,800 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmidcprv.dll
[2010/10/16 17:07:55 | 000,132,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmipdskq.dll
[2010/10/16 17:07:55 | 000,062,464 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmipjobj.dll
[2010/10/16 17:07:55 | 000,061,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmipiprt.dll
[2010/10/16 17:07:55 | 000,060,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmicookr.dll
[2010/10/16 17:07:55 | 000,041,472 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmipsess.dll
[2010/10/16 17:07:54 | 000,531,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemcore.dll
[2010/10/16 17:07:54 | 000,273,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemess.dll
[2010/10/16 17:07:54 | 000,197,120 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemupgd.dll
[2010/10/16 17:07:54 | 000,196,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmiadap.exe
[2010/10/16 17:07:54 | 000,178,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemdisp.dll
[2010/10/16 17:07:54 | 000,126,464 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmiapsrv.exe
[2010/10/16 17:07:54 | 000,116,224 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemtest.exe
[2010/10/16 17:07:54 | 000,088,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmiaprpl.dll
[2010/10/16 17:07:54 | 000,071,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemcons.dll
[2010/10/16 17:07:54 | 000,043,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemsvc.dll
[2010/10/16 17:07:54 | 000,018,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemprox.dll
[2010/10/16 17:07:54 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmiapres.dll
[2010/10/16 17:07:53 | 000,237,056 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\provthrd.dll
[2010/10/16 17:07:53 | 000,214,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemcomn.dll
[2010/10/16 17:07:53 | 000,196,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wbemcntl.dll
[2010/10/16 17:07:53 | 000,178,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\repdrvfs.dll
[2010/10/16 17:07:53 | 000,131,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\viewprov.dll
[2010/10/16 17:07:53 | 000,086,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\stdprov.dll
[2010/10/16 17:07:53 | 000,036,352 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\scrcons.exe
[2010/10/16 17:07:52 | 000,212,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ntevt.dll
[2010/10/16 17:07:52 | 000,185,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\framedyn.dll
[2010/10/16 17:07:52 | 000,123,904 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mofd.dll
[2010/10/16 17:07:52 | 000,092,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\policman.dll
[2010/10/16 17:07:52 | 000,047,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ncprov.dll
[2010/10/16 17:07:52 | 000,024,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\krnlprov.dll
[2010/10/16 17:07:52 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mofcomp.exe
[2010/10/16 17:07:51 | 001,358,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cimwin32.dll
[2010/10/16 17:07:51 | 000,247,808 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\esscli.dll
[2010/10/16 17:07:50 | 000,185,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cmprops.dll
[2010/10/16 17:07:50 | 000,185,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\cmprops.dll
[2010/10/16 17:07:50 | 000,058,880 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\licwmi.dll
[2010/10/16 17:07:50 | 000,058,880 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\licwmi.dll
[2010/10/16 17:07:50 | 000,056,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\servdeps.dll
[2010/10/16 17:07:50 | 000,056,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\servdeps.dll
[2010/10/16 17:07:50 | 000,017,408 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\mmfutil.dll
[2010/10/16 17:07:50 | 000,017,408 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mmfutil.dll
[2010/10/16 17:07:17 | 000,000,000 | R–D | C] – D:\Documents and Settings\All Users\Documents\My Videos
[2010/10/16 12:55:47 | 000,006,400 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\drivers\enum1394.sys
[2010/10/16 12:55:43 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – D:\WINDOWS\System32\drivers\RTL8139.sys
[2010/10/16 12:55:07 | 000,074,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\usbui.dll
[2010/10/16 12:53:59 | 000,000,000 | -HSD | C] – D:\WINDOWS\Installer
[2010/10/16 12:53:58 | 000,000,000 | —D | C] – D:\Program Files\Common Files\ODBC
[2010/10/16 12:53:56 | 000,077,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\spcommon.dll
[2010/10/16 12:53:56 | 000,061,440 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\spcplui.dll
[2010/10/16 12:53:54 | 000,774,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\spttseng.dll
[2010/10/16 12:53:53 | 000,741,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sapi.dll
[2010/10/16 12:53:53 | 000,155,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sapi.cpl
[2010/10/16 12:53:53 | 000,036,864 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sapisvr.exe
[2010/10/16 12:53:53 | 000,000,000 | —D | C] – D:\Program Files\Common Files\SpeechEngines
[2010/10/16 12:53:52 | 000,000,000 | R–D | C] – D:\Program Files
[2010/10/16 12:53:52 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Microsoft Shared
[2010/10/16 12:53:52 | 000,000,000 | —D | C] – D:\Program Files\Common Files
[2010/10/16 12:53:51 | 000,022,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0408.dll
[2010/10/16 12:53:51 | 000,019,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt040e.dll
[2010/10/16 12:53:51 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt041f.dll
[2010/10/16 12:53:51 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0419.dll
[2010/10/16 12:53:51 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0415.dll
[2010/10/16 12:53:51 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\agt0405.dll
[2010/10/16 12:53:49 | 000,006,144 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdtuq.dll
[2010/10/16 12:53:49 | 000,006,144 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdtuf.dll
[2010/10/16 12:53:49 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdtuq.dll
[2010/10/16 12:53:49 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdtuf.dll
[2010/10/16 12:53:49 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdazel.dll
[2010/10/16 12:53:49 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdazel.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdycc.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbduzb.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdur.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdtat.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdru1.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdru.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdmon.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdkyr.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdkaz.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdbu.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdblr.dll
[2010/10/16 12:53:48 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdaze.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdycc.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbduzb.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdur.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdtat.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdru1.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdru.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdmon.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdkyr.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdkaz.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdbu.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdblr.dll
[2010/10/16 12:53:48 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdaze.dll
[2010/10/16 12:53:46 | 000,008,192 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhept.dll
[2010/10/16 12:53:46 | 000,008,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhept.dll
[2010/10/16 12:53:46 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhela3.dll
[2010/10/16 12:53:46 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhela3.dll
[2010/10/16 12:53:46 | 000,006,144 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhela2.dll
[2010/10/16 12:53:46 | 000,006,144 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdgkl.dll
[2010/10/16 12:53:46 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhela2.dll
[2010/10/16 12:53:46 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdgkl.dll
[2010/10/16 12:53:46 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhe319.dll
[2010/10/16 12:53:46 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhe220.dll
[2010/10/16 12:53:46 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhe.dll
[2010/10/16 12:53:46 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhe319.dll
[2010/10/16 12:53:46 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhe220.dll
[2010/10/16 12:53:46 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhe.dll
[2010/10/16 12:53:45 | 000,006,144 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdlv1.dll
[2010/10/16 12:53:45 | 000,006,144 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdlv.dll
[2010/10/16 12:53:45 | 000,006,144 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdest.dll
[2010/10/16 12:53:45 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdlv1.dll
[2010/10/16 12:53:45 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdlv.dll
[2010/10/16 12:53:45 | 000,006,144 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdest.dll
[2010/10/16 12:53:45 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdlt1.dll
[2010/10/16 12:53:45 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdlt.dll
[2010/10/16 12:53:45 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdlt1.dll
[2010/10/16 12:53:45 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdlt.dll
[2010/10/16 12:53:43 | 000,007,168 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdcz.dll
[2010/10/16 12:53:43 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdcz.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdycl.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdsl1.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdsl.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdpl.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhu.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdcz2.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdcz1.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdcr.dll
[2010/10/16 12:53:43 | 000,006,656 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\KBDAL.DLL
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdycl.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdsl1.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdsl.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdpl.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhu.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdcz2.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdcz1.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdcr.dll
[2010/10/16 12:53:43 | 000,006,656 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdal.dll
[2010/10/16 12:53:43 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdro.dll
[2010/10/16 12:53:43 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdpl1.dll
[2010/10/16 12:53:43 | 000,005,632 | R— | C] (Microsoft Corporation) – D:\WINDOWS\System32\kbdhu1.dll
[2010/10/16 12:53:43 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdro.dll
[2010/10/16 12:53:43 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdpl1.dll
[2010/10/16 12:53:43 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhu1.dll
[2010/10/16 12:53:41 | 000,176,157 | —- | C] (Digi International, Inc.) – D:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2010/10/16 12:53:41 | 000,176,157 | —- | C] (Digi International, Inc.) – D:\WINDOWS\System32\dgrpsetu.dll
[2010/10/16 12:53:41 | 000,085,020 | —- | C] (Digi International) – D:\WINDOWS\System32\dllcache\dgsetup.dll
[2010/10/16 12:53:41 | 000,085,020 | —- | C] (Digi International) – D:\WINDOWS\System32\dgsetup.dll
[2010/10/16 12:53:41 | 000,024,661 | —- | C] (Perle Systems Ltd.) – D:\WINDOWS\System32\spxcoins.dll
[2010/10/16 12:53:41 | 000,024,661 | —- | C] (Perle Systems Ltd.) – D:\WINDOWS\System32\dllcache\spxcoins.dll
[2010/10/16 12:53:41 | 000,013,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\irclass.dll
[2010/10/16 12:53:41 | 000,013,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\irclass.dll
[2010/10/16 12:53:40 | 000,126,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\MSVIDEO.DLL
[2010/10/16 12:53:40 | 000,103,424 | —- | C] (Equinox Systems Inc.) – D:\WINDOWS\System32\EqnClass.Dll
[2010/10/16 12:53:40 | 000,103,424 | —- | C] (Equinox Systems Inc.) – D:\WINDOWS\System32\dllcache\eqnclass.dll
[2010/10/16 12:53:40 | 000,082,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\OLECLI.DLL
[2010/10/16 12:53:40 | 000,024,064 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\OLESVR.DLL
[2010/10/16 12:53:40 | 000,019,200 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\TAPI.DLL
[2010/10/16 12:53:40 | 000,013,600 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\WFWNET.DRV
[2010/10/16 12:53:40 | 000,009,008 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\VER.DLL
[2010/10/16 12:53:40 | 000,005,120 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\SHELL.DLL
[2010/10/16 12:53:40 | 000,004,048 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\TIMER.DRV
[2010/10/16 12:53:40 | 000,003,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\SYSTEM.DRV
[2010/10/16 12:53:40 | 000,002,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\VGA.DRV
[2010/10/16 12:53:40 | 000,001,744 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\SOUND.DRV
[2010/10/16 12:53:39 | 000,109,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\AVIFILE.DLL
[2010/10/16 12:53:39 | 000,073,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\MCIAVI.DRV
[2010/10/16 12:53:39 | 000,069,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\AVICAP.DLL
[2010/10/16 12:53:39 | 000,032,816 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\COMMDLG.DLL
[2010/10/16 12:53:39 | 000,028,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\MCIWAVE.DRV
[2010/10/16 12:53:39 | 000,025,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\MCISEQ.DRV
[2010/10/16 12:53:39 | 000,015,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\TASKMAN.EXE
[2010/10/16 12:53:39 | 000,015,360 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\taskman.exe
[2010/10/16 12:53:39 | 000,009,936 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\LZEXPAND.DLL
[2010/10/16 12:53:39 | 000,002,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\MOUSE.DRV
[2010/10/16 12:53:39 | 000,002,000 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\KEYBOARD.DRV
[2010/10/16 12:53:39 | 000,001,152 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\MMTASK.TSK
[2010/10/16 12:53:38 | 000,146,432 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\WINSPOOL.DRV
[2010/10/16 12:53:38 | 000,068,768 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System\MMSYSTEM.DLL
[2010/10/16 12:53:38 | 000,011,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\irenum.sys
[2010/10/16 12:53:38 | 000,008,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\batt.dll
[2010/10/16 12:53:38 | 000,008,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\batt.dll
[2010/10/16 12:53:37 | 000,074,752 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\storprop.dll
[2010/10/16 12:53:28 | 000,000,000 | R–D | C] – D:\Documents and Settings\All Users\Start Menu
[2010/10/16 12:53:28 | 000,000,000 | R–D | C] – D:\Documents and Settings\All Users\Documents
[2010/10/16 12:53:28 | 000,000,000 | -H-D | C] – D:\Documents and Settings\All Users\Templates
[2010/10/16 12:53:28 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Favorites
[2010/10/16 12:53:28 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Desktop
[2010/10/16 12:53:13 | 000,000,000 | —D | C] – D:\WINDOWS\System32\CatRoot2
[2010/10/16 12:53:13 | 000,000,000 | —D | C] – D:\WINDOWS\System32\CatRoot
[2010/10/16 12:53:07 | 000,000,000 | –SD | C] – D:\Documents and Settings\All Users\Application Data\Microsoft
[2010/10/16 12:53:07 | 000,000,000 | RH-D | C] – D:\Documents and Settings\All Users\Application Data
[2010/10/16 12:52:38 | 000,000,000 | -HSD | C] – D:\System Volume Information
[2010/10/16 12:52:38 | 000,000,000 | —D | C] – D:\Documents and Settings
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\System32\scripting
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\PeerNet
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\pchealth
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\Network Diagnostic
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\L2Schemas
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\System32\en
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\ehome
[2010/10/16 12:42:04 | 000,000,000 | —D | C] – D:\WINDOWS\System32\3com_dmi
[2010/10/16 12:42:03 | 000,000,000 | R-SD | C] – D:\WINDOWS\Fonts
[2010/10/16 12:42:03 | 000,000,000 | RHSD | C] – D:\WINDOWS\System32\dllcache
[2010/10/16 12:42:03 | 000,000,000 | R–D | C] – D:\WINDOWS\Web
[2010/10/16 12:42:03 | 000,000,000 | -H-D | C] – D:\WINDOWS\inf
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\WinSxS
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\wins
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\wbem
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\usmt
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\twain_32
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Temp
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\system32
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\system
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\spool
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\ShellExt
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\Setup
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\security
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Resources
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\repair
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\ras
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Provisioning
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\oobe
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\npp
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\mui
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\mui
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\msapps
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\msagent
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Media
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\java
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\inetsrv
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\IME
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\ime
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\icsxml
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\ias
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Help
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\export
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\drivers\etc
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\drivers
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Driver Cache
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\drivers\disdn
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\dhcp
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Debug
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Cursors
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Connection Wizard
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\config
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\Config
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\AppPatch
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\addins
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\3076
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\2052
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1054
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1042
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1041
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1037
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1033
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1031
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1028
[2010/10/16 12:42:03 | 000,000,000 | —D | C] – D:\WINDOWS\System32\1025
[2010/09/24 20:24:46 | 000,081,920 | —- | C] (noOrg) – D:\Documents and Settings\Mike\Application Data\fbx.exe
[3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/10/22 11:52:00 | 000,000,882 | —- | M] () – D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/22 11:23:33 | 000,575,488 | —- | M] (OldTimer Tools) – D:\Documents and Settings\Mike\Desktop\OTL.exe
[2010/10/22 04:45:05 | 000,013,646 | —- | M] () – D:\WINDOWS\System32\wpa.dbl
[2010/10/22 04:44:21 | 000,000,878 | —- | M] () – D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/22 04:43:28 | 000,002,048 | –S- | M] () – D:\WINDOWS\bootstat.dat
[2010/10/20 17:33:35 | 000,423,219 | R— | M] () – D:\WINDOWS\System32\drivers\etc\hosts
[2010/10/20 16:04:41 | 000,000,951 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/10/20 16:04:41 | 000,000,933 | —- | M] () – D:\Documents and Settings\Mike\Desktop\Spybot - Search & Destroy.lnk
[2010/10/20 13:35:52 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\deployJava1.dll
[2010/10/20 13:35:52 | 000,153,376 | —- | M] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\javaws.exe
[2010/10/20 13:35:52 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\javaw.exe
[2010/10/20 13:35:52 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\java.exe
[2010/10/20 13:35:52 | 000,073,728 | —- | M] (Sun Microsystems, Inc.) – D:\WINDOWS\System32\javacpl.cpl
[2010/10/20 11:20:05 | 000,265,416 | —- | M] () – D:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/20 10:57:41 | 000,012,800 | —- | M] () – D:\Documents and Settings\Mike\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/20 10:55:21 | 000,001,800 | —- | M] () – D:\Documents and Settings\All Users\Desktop\Network Magic.lnk
[2010/10/20 10:36:12 | 008,892,928 | —- | M] () – D:\Documents and Settings\All Users\Application Data\atscie.msi
[2010/10/20 08:27:21 | 000,000,707 | —- | M] () – D:\Documents and Settings\All Users\Desktop\PS3 Media Server.lnk
[2010/10/20 03:02:02 | 000,001,700 | —- | M] () – D:\Documents and Settings\All Users\Desktop\avast! Internet Security.lnk
[2010/10/20 03:01:32 | 000,002,626 | —- | M] () – D:\WINDOWS\System32\CONFIG.NT
[2010/10/20 03:00:27 | 000,040,344 | —- | M] () – D:\Documents and Settings\Mike\Application Data\FbxU.exe
[2010/10/19 15:33:33 | 000,408,246 | —- | M] () – D:\WINDOWS\System32\perfh009.dat
[2010/10/19 15:33:33 | 000,055,404 | —- | M] () – D:\WINDOWS\System32\perfc009.dat
[2010/10/19 13:43:38 | 000,001,813 | —- | M] () – D:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2010/10/19 13:43:38 | 000,001,791 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/19 13:08:03 | 000,000,719 | —- | M] () – D:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010/10/19 13:02:37 | 000,000,682 | —- | M] () – D:\Documents and Settings\Mike\Desktop\CCleaner.lnk
[2010/10/18 15:46:38 | 000,000,802 | —- | M] () – D:\Documents and Settings\All Users\Desktop\GetDataBack for NTFS.lnk
[2010/10/18 01:45:59 | 000,361,600 | —- | M] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tcpip.sys
[2010/10/18 01:45:39 | 000,001,580 | —- | M] () – D:\Documents and Settings\Mike\Desktop\xp-AntiSpy.lnk
[2010/10/17 23:28:35 | 000,940,794 | —- | M] () – D:\WINDOWS\System32\LoopyMusic.wav
[2010/10/17 23:28:35 | 000,146,650 | —- | M] () – D:\WINDOWS\System32\BuzzingBee.wav
[2010/10/17 23:27:39 | 000,000,000 | —- | M] () – D:\WINDOWS\ativpsrm.bin
[2010/10/17 22:49:50 | 000,000,776 | —- | M] () – D:\Documents and Settings\Mike\Desktop\Driver Genius Professional Edition.lnk
[2010/10/17 21:53:51 | 000,000,664 | —- | M] () – D:\WINDOWS\System32\d3d9caps.dat
[2010/10/17 21:52:28 | 000,000,815 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/10/17 21:43:40 | 000,000,926 | —- | M] () – D:\Documents and Settings\All Users\Desktop\Media Player Classic.lnk
[2010/10/17 21:13:29 | 000,000,016 | —- | M] () – D:\WINDOWS\wininit.ini
[2010/10/17 17:18:06 | 000,000,654 | —- | M] () – D:\Documents and Settings\All Users\Desktop\Speccy.lnk
[2010/10/17 16:27:30 | 000,000,804 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/17 12:26:39 | 000,008,236 | —- | M] () – D:\WINDOWS\System32\LexFiles.ulf
[2010/10/17 10:37:13 | 000,001,732 | —- | M] () – D:\Documents and Settings\All Users\Desktop\WinZip.lnk
[2010/10/17 10:37:13 | 000,001,660 | —- | M] () – D:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
[2010/10/16 23:15:51 | 000,000,648 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/10/16 23:15:51 | 000,000,630 | —- | M] () – D:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/10/16 19:42:40 | 000,000,000 | —- | M] () – D:\WINDOWS\nsreg.dat
[2010/10/16 19:42:34 | 000,001,620 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/10/16 19:42:34 | 000,001,602 | —- | M] () – D:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/10/16 18:08:02 | 000,000,975 | —- | M] () – D:\Documents and Settings\Mike\Desktop\PC Inspector File Recovery.lnk
[2010/10/16 18:07:58 | 003,462,033 | —- | M] () – D:\Documents and Settings\Mike\Desktop\pci_filerecovery.exe
[2010/10/16 17:21:17 | 000,000,079 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/10/16 17:20:41 | 000,013,588 | —- | M] () – D:\WINDOWS\System32\wpa.bak
[2010/10/16 17:17:38 | 000,008,192 | —- | M] () – D:\WINDOWS\REGLOCS.OLD
[2010/10/16 17:16:08 | 000,000,261 | —- | M] () – D:\WINDOWS\System32\$winnt$.inf
[2010/10/16 17:13:09 | 000,316,640 | —- | M] () – D:\WINDOWS\WMSysPr9.prx
[2010/10/16 17:13:08 | 000,023,392 | —- | M] () – D:\WINDOWS\System32\nscompat.tlb
[2010/10/16 17:13:08 | 000,016,832 | —- | M] () – D:\WINDOWS\System32\amcompat.tlb
[2010/10/16 17:12:57 | 000,004,161 | —- | M] () – D:\WINDOWS\ODBCINST.INI
[2010/10/16 17:09:28 | 000,021,640 | —- | M] () – D:\WINDOWS\System32\emptyregdb.dat
[2010/10/16 12:58:26 | 000,004,444 | —- | M] () – D:\WINDOWS\System32\pid.PNF
[2010/10/01 17:51:02 | 000,111,191 | —- | M] () – D:\WINDOWS\System32\crack.exe
[2010/09/24 20:24:46 | 000,081,920 | —- | M] (noOrg) – D:\Documents and Settings\Mike\Application Data\fbx.exe
[3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/20 17:33:35 | 000,000,734 | —- | C] () – D:\WINDOWS\System32\drivers\etc\hosts.20101020-173335.backup
[2010/10/20 16:04:41 | 000,000,951 | —- | C] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/10/20 16:04:41 | 000,000,933 | —- | C] () – D:\Documents and Settings\Mike\Desktop\Spybot - Search & Destroy.lnk
[2010/10/20 10:55:21 | 000,001,800 | —- | C] () – D:\Documents and Settings\All Users\Desktop\Network Magic.lnk
[2010/10/20 10:36:03 | 008,892,928 | —- | C] () – D:\Documents and Settings\All Users\Application Data\atscie.msi
[2010/10/20 08:27:21 | 000,000,707 | —- | C] () – D:\Documents and Settings\All Users\Desktop\PS3 Media Server.lnk
[2010/10/20 03:02:02 | 000,001,700 | —- | C] () – D:\Documents and Settings\All Users\Desktop\avast! Internet Security.lnk
[2010/10/20 03:00:27 | 000,040,344 | —- | C] () – D:\Documents and Settings\Mike\Application Data\FbxU.exe
[2010/10/19 13:43:38 | 000,001,791 | —- | C] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/19 13:43:37 | 000,001,813 | —- | C] () – D:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2010/10/19 13:42:28 | 000,000,882 | —- | C] () – D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/19 13:42:27 | 000,000,878 | —- | C] () – D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/19 13:08:03 | 000,000,719 | —- | C] () – D:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010/10/19 13:02:37 | 000,000,682 | —- | C] () – D:\Documents and Settings\Mike\Desktop\CCleaner.lnk
[2010/10/18 15:46:38 | 000,000,802 | —- | C] () – D:\Documents and Settings\All Users\Desktop\GetDataBack for NTFS.lnk
[2010/10/18 01:45:39 | 000,001,580 | —- | C] () – D:\Documents and Settings\Mike\Desktop\xp-AntiSpy.lnk
[2010/10/17 23:28:35 | 000,146,650 | —- | C] () – D:\WINDOWS\System32\BuzzingBee.wav
[2010/10/17 23:28:34 | 000,940,794 | —- | C] () – D:\WINDOWS\System32\LoopyMusic.wav
[2010/10/17 23:27:39 | 000,000,000 | —- | C] () – D:\WINDOWS\ativpsrm.bin
[2010/10/17 23:22:21 | 000,593,920 | —- | C] () – D:\WINDOWS\System32\ati2sgag.exe
[2010/10/17 22:49:50 | 000,000,776 | —- | C] () – D:\Documents and Settings\Mike\Desktop\Driver Genius Professional Edition.lnk
[2010/10/17 21:43:39 | 000,000,926 | —- | C] () – D:\Documents and Settings\All Users\Desktop\Media Player Classic.lnk
[2010/10/17 21:43:36 | 000,165,376 | —- | C] () – D:\WINDOWS\System32\unrar.dll
[2010/10/17 21:43:36 | 000,000,038 | —- | C] () – D:\WINDOWS\avisplitter.ini
[2010/10/17 21:43:30 | 000,790,528 | —- | C] () – D:\WINDOWS\System32\xvidcore.dll
[2010/10/17 21:43:30 | 000,134,144 | —- | C] () – D:\WINDOWS\System32\xvidvfw.dll
[2010/10/17 21:43:30 | 000,108,032 | —- | C] () – D:\WINDOWS\System32\ff_vfw.dll
[2010/10/17 21:13:29 | 000,000,016 | —- | C] () – D:\WINDOWS\wininit.ini
[2010/10/17 17:18:06 | 000,000,654 | —- | C] () – D:\Documents and Settings\All Users\Desktop\Speccy.lnk
[2010/10/17 16:27:30 | 000,000,804 | —- | C] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/17 12:26:12 | 000,040,960 | —- | C] () – D:\WINDOWS\System32\lxdnvs.dll
[2010/10/17 12:26:10 | 000,348,160 | —- | C] () – D:\WINDOWS\System32\lxdncoin.dll
[2010/10/17 12:26:01 | 000,077,304 | —- | C] () – D:\WINDOWS\System32\lxdnprpr.chm
[2010/10/17 12:25:44 | 000,000,044 | —- | C] () – D:\WINDOWS\System32\lxdnrwrd.ini
[2010/10/17 10:37:13 | 000,001,732 | —- | C] () – D:\Documents and Settings\All Users\Desktop\WinZip.lnk
[2010/10/17 10:37:13 | 000,001,660 | —- | C] () – D:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
[2010/10/16 23:50:05 | 000,141,016 | —- | C] () – D:\WINDOWS\System32\alsndmgr.wav
[2010/10/16 23:50:05 | 000,040,448 | —- | C] () – D:\WINDOWS\System32\ChCfg.exe
[2010/10/16 23:50:05 | 000,001,136 | —- | C] () – D:\WINDOWS\System32\drivers\alcxinit.dat
[2010/10/16 23:15:51 | 000,000,648 | —- | C] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/10/16 23:15:51 | 000,000,630 | —- | C] () – D:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/10/16 22:08:35 | 000,000,664 | —- | C] () – D:\WINDOWS\System32\d3d9caps.dat
[2010/10/16 21:59:03 | 000,348,160 | —- | C] () – D:\WINDOWS\System32\LXDNinst.dll
[2010/10/16 21:59:01 | 000,208,896 | —- | C] () – D:\WINDOWS\System32\lxdngrd.dll
[2010/10/16 21:58:59 | 000,008,236 | —- | C] () – D:\WINDOWS\System32\LexFiles.ulf
[2010/10/16 21:58:59 | 000,001,633 | —- | C] () – D:\WINDOWS\System32\lxdn.loc
[2010/10/16 19:42:40 | 000,000,000 | —- | C] () – D:\WINDOWS\nsreg.dat
[2010/10/16 19:42:34 | 000,001,620 | —- | C] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/10/16 19:42:34 | 000,001,602 | —- | C] () – D:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/10/16 18:08:02 | 000,000,975 | —- | C] () – D:\Documents and Settings\Mike\Desktop\PC Inspector File Recovery.lnk
[2010/10/16 18:07:56 | 003,462,033 | —- | C] () – D:\Documents and Settings\Mike\Desktop\pci_filerecovery.exe
[2010/10/16 17:30:30 | 000,012,800 | —- | C] () – D:\Documents and Settings\Mike\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/16 17:21:17 | 000,000,079 | —- | C] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/10/16 17:21:06 | 000,000,815 | —- | C] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/10/16 17:20:42 | 000,013,588 | —- | C] () – D:\WINDOWS\System32\wpa.bak
[2010/10/16 17:17:38 | 000,008,192 | —- | C] () – D:\WINDOWS\REGLOCS.OLD
[2010/10/16 17:16:08 | 000,002,048 | –S- | C] () – D:\WINDOWS\bootstat.dat
[2010/10/16 17:15:20 | 000,175,104 | —- | C] () – D:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010/10/16 17:15:02 | 001,158,818 | —- | C] () – D:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010/10/16 17:14:55 | 000,059,392 | —- | C] () – D:\WINDOWS\System32\dllcache\imscinst.exe
[2010/10/16 17:14:54 | 000,196,665 | —- | C] () – D:\WINDOWS\System32\dllcache\imjpinst.exe
[2010/10/16 17:14:52 | 000,134,339 | —- | C] () – D:\WINDOWS\System32\dllcache\imekr.lex
[2010/10/16 17:14:35 | 013,463,552 | —- | C] () – D:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010/10/16 17:14:27 | 000,108,827 | —- | C] () – D:\WINDOWS\System32\dllcache\hanja.lex
[2010/10/16 17:14:22 | 000,094,208 | —- | C] () – D:\WINDOWS\System32\dllcache\fpencode.dll
[2010/10/16 17:14:11 | 000,173,568 | —- | C] () – D:\WINDOWS\System32\dllcache\chtskf.dll
[2010/10/16 17:13:17 | 000,002,626 | —- | C] () – D:\WINDOWS\System32\CONFIG.NT
[2010/10/16 17:13:08 | 000,023,392 | —- | C] () – D:\WINDOWS\System32\nscompat.tlb
[2010/10/16 17:13:08 | 000,016,832 | —- | C] () – D:\WINDOWS\System32\amcompat.tlb
[2010/10/16 17:13:07 | 000,316,640 | —- | C] () – D:\WINDOWS\WMSysPr9.prx
[2010/10/16 17:11:27 | 004,399,505 | —- | C] () – D:\WINDOWS\System32\dllcache\nls302en.lex
[2010/10/16 17:11:07 | 000,048,680 | -HS- | C] () – D:\WINDOWS\winnt256.bmp
[2010/10/16 17:11:07 | 000,048,680 | -HS- | C] () – D:\WINDOWS\winnt.bmp
[2010/10/16 17:10:58 | 000,000,984 | —- | C] () – D:\WINDOWS\System32\dllcache\srframe.mmf
[2010/10/16 17:10:17 | 000,376,832 | —- | C] () – D:\WINDOWS\System32\dllcache\msinfo.dll
[2010/10/16 17:09:28 | 000,021,640 | —- | C] () – D:\WINDOWS\System32\emptyregdb.dat
[2010/10/16 17:08:38 | 000,009,522 | —- | C] () – D:\WINDOWS\Zapotec.bmp
[2010/10/16 17:08:37 | 000,065,978 | —- | C] () – D:\WINDOWS\Soap Bubbles.bmp
[2010/10/16 17:08:37 | 000,065,954 | —- | C] () – D:\WINDOWS\Prairie Wind.bmp
[2010/10/16 17:08:37 | 000,065,832 | —- | C] () – D:\WINDOWS\Santa Fe Stucco.bmp
[2010/10/16 17:08:37 | 000,026,680 | —- | C] () – D:\WINDOWS\River Sumida.bmp
[2010/10/16 17:08:37 | 000,026,582 | —- | C] () – D:\WINDOWS\Greenstone.bmp
[2010/10/16 17:08:37 | 000,017,362 | —- | C] () – D:\WINDOWS\Rhododendron.bmp
[2010/10/16 17:08:37 | 000,017,336 | —- | C] () – D:\WINDOWS\Gone Fishing.bmp
[2010/10/16 17:08:37 | 000,017,062 | —- | C] () – D:\WINDOWS\Coffee Bean.bmp
[2010/10/16 17:08:37 | 000,016,730 | —- | C] () – D:\WINDOWS\FeatherTexture.bmp
[2010/10/16 17:08:37 | 000,001,272 | —- | C] () – D:\WINDOWS\Blue Lace 16.bmp
[2010/10/16 17:08:34 | 000,003,286 | —- | C] () – D:\WINDOWS\System32\tslabels.h
[2010/10/16 17:08:34 | 000,001,161 | —- | C] () – D:\WINDOWS\System32\usrlogon.cmd
[2010/10/16 17:08:33 | 000,000,768 | —- | C] () – D:\WINDOWS\System32\msdtcprf.h
[2010/10/16 17:08:29 | 000,063,488 | —- | C] () – D:\WINDOWS\System32\wmimgmt.msc
[2010/10/16 12:58:26 | 000,004,444 | —- | C] () – D:\WINDOWS\System32\pid.PNF
[2010/10/16 12:53:58 | 000,004,161 | —- | C] () – D:\WINDOWS\ODBCINST.INI
[2010/10/16 12:53:55 | 001,685,606 | —- | C] () – D:\WINDOWS\System32\dllcache\sam.spd
[2010/10/16 12:53:54 | 000,605,050 | —- | C] () – D:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010/10/16 12:53:54 | 000,000,888 | —- | C] () – D:\WINDOWS\System32\dllcache\sam.sdf
[2010/10/16 12:53:53 | 000,643,717 | —- | C] () – D:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010/10/16 12:53:38 | 000,001,688 | —- | C] () – D:\WINDOWS\System32\AUTOEXEC.NT
[2010/10/16 12:53:28 | 000,797,189 | —- | C] () – D:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010/10/16 12:53:28 | 000,399,645 | —- | C] () – D:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010/10/16 12:53:28 | 000,144,484 | —- | C] () – D:\WINDOWS\System32\dllcache\netfx.cat
[2010/10/16 12:53:28 | 000,112,918 | —- | C] () – D:\WINDOWS\System32\dllcache\tabletpc.cat
[2010/10/16 12:53:28 | 000,037,484 | —- | C] () – D:\WINDOWS\System32\dllcache\MW770.CAT
[2010/10/16 12:53:28 | 000,034,747 | —- | C] () – D:\WINDOWS\System32\dllcache\mediactr.cat
[2010/10/16 12:53:28 | 000,034,063 | —- | C] () – D:\WINDOWS\System32\dllcache\FP4.CAT
[2010/10/16 12:53:28 | 000,026,991 | —- | C] () – D:\WINDOWS\System32\dllcache\msn7.cat
[2010/10/16 12:53:28 | 000,016,535 | —- | C] () – D:\WINDOWS\System32\dllcache\IMS.CAT
[2010/10/16 12:53:28 | 000,014,433 | —- | C] () – D:\WINDOWS\System32\dllcache\msn9.cat
[2010/10/16 12:53:28 | 000,013,472 | —- | C] () – D:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010/10/16 12:53:28 | 000,012,363 | —- | C] () – D:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2010/10/16 12:53:28 | 000,010,027 | —- | C] () – D:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2010/10/16 12:53:28 | 000,008,574 | —- | C] () – D:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010/10/16 12:53:28 | 000,007,382 | —- | C] () – D:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010/10/16 12:53:28 | 000,007,334 | —- | C] () – D:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010/10/16 12:53:27 | 002,144,487 | —- | C] () – D:\WINDOWS\System32\dllcache\NT5.CAT
[2010/10/16 12:53:27 | 001,296,669 | —- | C] () – D:\WINDOWS\System32\dllcache\SP3.CAT
[2010/10/16 12:53:27 | 000,522,220 | —- | C] () – D:\WINDOWS\System32\dllcache\NT5INF.CAT
[2010/10/16 12:52:37 | 000,265,416 | —- | C] () – D:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/16 12:51:35 | 000,000,261 | —- | C] () – D:\WINDOWS\System32\$winnt$.inf
[2010/10/01 17:51:02 | 000,111,191 | —- | C] () – D:\WINDOWS\System32\crack.exe
[2009/07/23 19:49:04 | 000,782,336 | —- | C] () – D:\WINDOWS\System32\lxdndrs.dll
[2009/05/14 13:46:40 | 000,081,920 | —- | C] () – D:\WINDOWS\System32\lxdncaps.dll
[2007/10/02 14:51:10 | 000,069,632 | —- | C] () – D:\WINDOWS\System32\lxdncnv4.dll

========== LOP Check ==========

[2010/10/19 13:40:38 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/10/17 10:37:40 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\WinZip
[2010/10/22 04:44:13 | 000,000,000 | —D | M] – D:\Documents and Settings\Mike\Application Data\uTorrent

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/10/22 04:43:21 | 2145,386,496 | -HS- | M] () – D:\pagefile.sys

< %systemroot%\Fonts\*.com >

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/10/16 17:12:45 | 000,000,067 | -HS- | M] () – D:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/02/27 07:05:40 | 000,115,200 | —- | M] () – D:\WINDOWS\system32\spool\prtprocs\w32x86\lxdndrpp.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/09/07 11:12:17 | 000,038,848 | —- | M] (AVAST Software) – D:\WINDOWS\avastSS.scr
[3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/10/16 12:51:38 | 000,094,208 | —- | M] () – D:\WINDOWS\system32\config\default.sav
[2010/10/16 12:51:38 | 001,089,536 | —- | M] () – D:\WINDOWS\system32\config\software.sav
[2010/10/16 12:51:38 | 000,921,600 | —- | M] () – D:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/10/16 17:13:26 | 000,000,294 | -HS- | M] () – D:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/10/16 17:21:17 | 000,000,119 | -HS- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2010/10/16 17:21:17 | 000,000,079 | —- | M] () – D:\Documents and Settings\Mike\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2010/10/22 11:23:33 | 000,575,488 | —- | M] (OldTimer Tools) – D:\Documents and Settings\Mike\Desktop\OTL.exe
[2010/10/16 18:07:58 | 003,462,033 | —- | M] () – D:\Documents and Settings\Mike\Desktop\pci_filerecovery.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2010/10/16 17:21:17 | 000,000,122 | -HS- | M] () – D:\Documents and Settings\Mike\Favorites\Desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >
[2010/10/22 08:09:19 | 000,032,768 | -HS- | M] () – D:\Documents and Settings\Mike\Cookies\index.dat

< %SystemRoot%\system32\fonts\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-10-19 07:01:24

< End of report >


extras

OTL Extras logfile created on: 10/22/2010 12:02:41 PM - Run 1
OTL by OldTimer - Version 3.2.16.0 Folder = D:\Documents and Settings\Mike\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 88.00% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 107.34 Gb Total Space | 65.32 Gb Free Space | 60.86% Space Free | Partition Type: NTFS
Drive D: | 37.26 Gb Total Space | 11.61 Gb Free Space | 31.17% Space Free | Partition Type: NTFS
Drive E: | 4.44 Gb Total Space | 2.60 Gb Free Space | 58.47% Space Free | Partition Type: FAT32
Drive F: | 589.14 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: MIKE-9A167E4F2B | User Name: Mike | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – D:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – "D:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "D:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "D:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "D:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\WINDOWS\system32\lxdncoms.exe" = D:\WINDOWS\system32\lxdncoms.exe:*:Enabled:2600 Series Server – ( )
"D:\Program Files\uTorrent\uTorrent.exe" = D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"D:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnpswx.exe" = D:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnpswx.exe:*:Enabled:Printer Status Window Interface – ()
"D:\WINDOWS\system32\spool\drivers\w32x86\3\lxdntime.exe" = D:\WINDOWS\system32\spool\drivers\w32x86\3\lxdntime.exe:*:Enabled:Lexmark Connect Time Executable – (Lexmark International, Inc.)
"D:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnjswx.exe" = D:\WINDOWS\system32\spool\drivers\w32x86\3\lxdnjswx.exe:*:Enabled:Job Status Window Interface – ()
"D:\Program Files\Microsoft Office\Office14\GROOVE.EXE" = D:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace – (Microsoft Corporation)
"D:\Program Files\Microsoft Office\Office14\ONENOTE.EXE" = D:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote – (Microsoft Corporation)
"D:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE" = D:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook – (Microsoft Corporation)
"D:\Program Files\Java\jre6\bin\javaw.exe" = D:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"D:\Program Files\TVersity\Media Server\MediaServer.exe" = D:\Program Files\TVersity\Media Server\MediaServer.exe:*:Enabled:TVersity Media Server – File not found
"D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe" = D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe:LocalSubNet,0.0.0.0/255.255.255.255:Enabled:Pure Networks Platform Service – (Cisco Systems, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03ADC8AB-C130-0C3D-1FF9-2C385DF25689}" = CCC Help Czech
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{07021185-008D-ABF9-7716-475AC035F8B3}" = CCC Help Spanish
"{0F8D0406-7755-AC37-6529-73AD649DBE32}" = Catalyst Control Center Graphics Previews Common
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22072CC8-7230-96F8-52F4-05EAF3F906B6}" = CCC Help Polish
"{2368ADBD-6FDF-4B9F-FE41-E20B4D78E79E}" = CCC Help Chinese Standard
"{25EF0DC4-B072-2E04-4581-A13C91423CE6}" = CCC Help Portuguese
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java™ 6 Update 22
"{26F7855C-443B-00A6-F7B8-A97A5403F617}" = CCC Help Danish
"{2CB4A925-48A7-DA65-DCEE-D4DE224B7D84}" = CCC Help English
"{306D75B9-7FFF-FF65-0C76-57F2FE4FE1D6}" = Catalyst Control Center Core Implementation
"{32B12FE4-5A51-751A-1FB6-A14E97EBDD5C}" = CCC Help German
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{354A387E-0374-21A3-6832-335674A6D7D1}" = CCC Help French
"{3C00BEE9-26D0-D9E0-A2D1-62F70D412A12}" = CCC Help Turkish
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4346F7AA-3D56-0941-424C-4454E04D37F6}" = CCC Help Italian
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CAE2F2C-75CD-A0DE-7520-449BCBBCC833}" = CCC Help Korean
"{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}" = GetDataBack for NTFS
"{57F7F0A5-8F22-8E63-E819-803B5C9CA3A5}" = CCC Help Dutch
"{5EA437D2-7A57-B60E-E8F2-76BFAC0895A5}" = CCC Help Chinese Traditional
"{61AF4E75-050E-0304-3417-8BC16417FEB1}" = CCC Help Greek
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{7AC0886A-CE48-4EB6-9CC3-4C56D427F2E1}" = Cisco Network Magic
"{7FCC4EDC-6EE2-4309-ABD7-85F2667A7B90}" = WebEx Support Manager for Internet Explorer
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{8897CF22-DB6C-8248-895C-12BFA2677F51}" = CCC Help Hungarian
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{90140000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 14
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.0
"{AF710FDE-2815-8C8D-5281-8004C2654AA6}" = CCC Help Russian
"{AFF2D965-C6F2-A210-FBF7-532612AA1D23}" = CCC Help Swedish
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B21336EE-4AEF-9940-4AC7-EDB89854B8D3}" = CCC Help Thai
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{BFD5ED08-F066-92D5-BE67-3B9AE5DCFF0C}" = CCC Help Japanese
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}" = WinZip 14.5
"{D01FAC3D-86B4-3A19-9D10-9156A0EB3EBE}" = CCC Help Finnish
"{D73722C8-3F65-C75B-A631-5D36894DAB92}" = ccc-core-static
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FA38F9E4-BED7-E021-B660-8FDFF7EC6E1A}" = CCC Help Norwegian
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FC467B61-F890-4E29-8585-365DAB66F13E}" = Pure Networks Platform
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"avast5" = avast! Internet Security
"CCleaner" = CCleaner
"CNXT_MODEM_PCI_VEN_14F1&DEV;_2F40&SUBSYS;_200014F1" = Soft Data Fax Modem with SmartCP
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"Google Chrome" = Google Chrome
"ie8" = Windows Internet Explorer 8
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 6.4.0
"Lexmark 2600 Series" = Lexmark 2600 Series
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.11)" = Mozilla Firefox (3.6.11)
"Network MagicUninstall" = Network Magic
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Speccy" = Speccy
"TVersity Codec Pack" = TVersity Codec Pack 1.4
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.4
"xp-AntiSpy" = xp-AntiSpy 3.97-9

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/16/2010 6:19:40 PM | Computer Name = MIKE-9A167E4F2B | Source = Application Hang | ID = 1002
Description = Hanging application Filerecovery.exe, version 0.0.0.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 10/16/2010 6:27:47 PM | Computer Name = MIKE-9A167E4F2B | Source = Application Error | ID = 1000
Description = Faulting application ardc data recovery tools 1.1.exe, version 0.0.0.0,
faulting module ardc data recovery tools 1.1.exe, version 0.0.0.0, fault address
0x00007400.

Error - 10/16/2010 11:44:04 PM | Computer Name = MIKE-9A167E4F2B | Source = MsiInstaller | ID = 10005
Description = Product: AMD AC'97 Driver – This machine does not have a supported
AC 97 interface.

Error - 10/17/2010 9:29:45 PM | Computer Name = MIKE-9A167E4F2B | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting
module urlmon.dll, version 6.0.2900.6036, fault address 0x0003e59f.

[ System Events ]
Error - 10/20/2010 2:58:13 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7000
Description = The lxdnCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 10/20/2010 3:04:18 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the lxdnCATSCustConnectService
service to connect.

Error - 10/20/2010 3:04:18 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7000
Description = The lxdnCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 10/20/2010 3:10:35 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7034
Description = The FlvTube Toolbar Helper service terminated unexpectedly. It has
done this 1 time(s).

Error - 10/20/2010 8:31:57 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7034
Description = The TVersityMediaServer service terminated unexpectedly. It has done
this 1 time(s).

Error - 10/20/2010 11:22:15 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the lxdnCATSCustConnectService
service to connect.

Error - 10/20/2010 11:22:15 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7000
Description = The lxdnCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 10/20/2010 3:43:57 PM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7034
Description = The FlvTube Toolbar Helper service terminated unexpectedly. It has
done this 1 time(s).

Error - 10/22/2010 4:44:50 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the lxdnCATSCustConnectService
service to connect.

Error - 10/22/2010 4:44:50 AM | Computer Name = MIKE-9A167E4F2B | Source = Service Control Manager | ID = 7000
Description = The lxdnCATSCustConnectService service failed to start due to the
following error: %%1053


< End of report >

ttp://www.gmer.net Rootkit scan 2010-10-25 18:35:43 Windows 5.1.2600 Service Pack 3 Running: 05f6g86p.exe; Driver: D:\DOCUME~1\Mike\LOCALS~1\Temp\awnoaaod.sys —- System - GMER 1.0.15 —- SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwAddBootEntry [0xB0C44CAE] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwClose [0xB0C619A5] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEvent [0xB0C46B34] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateEventPair [0xB0C46B8C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateIoCompletion [0xB0C46CA2] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateKey [0xB0C61359] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateMutant [0xB0C46A8A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateSection [0xB0C46BDC] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateSemaphore [0xB0C46ADE] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwCreateTimer [0xB0C46C50] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDeleteBootEntry [0xB0C44CD2] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDeleteKey [0xB0C6206B] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDeleteValueKey [0xB0C62321] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwDuplicateObject [0xB0C473D4] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwEnumerateKey [0xB0C61ED6] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwEnumerateValueKey [0xB0C61D41] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwLoadDriver [0xB0C44ADA] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwModifyBootEntry [0xB0C44CF6] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeKey [0xB0C47548] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwNotifyChangeMultipleKeys [0xB0C457F8] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEvent [0xB0C46B64] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenEventPair [0xB0C46BB4] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenIoCompletion [0xB0C46CCC] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenKey [0xB0C616B5] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenMutant [0xB0C46AB6] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenProcess [0xB0C4720C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSection [0xB0C46C1C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenSemaphore [0xB0C46B0C] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenThread [0xB0C472F0] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwOpenTimer [0xB0C46C7A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryKey [0xB0C61BBC] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryObject [0xB0C456BE] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwQueryValueKey [0xB0C61A0E] SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwRenameKey [0xB0CBD22E] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwReplyWaitReceivePort [0xB0C4757E] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwReplyWaitReceivePortEx [0xB0C47142] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwRestoreKey [0xB0C609CC] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootEntryOrder [0xB0C44D1A] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetBootOptions [0xB0C44D3E] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetSystemInformation [0xB0C44B34] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSetValueKey [0xB0C62172] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwShutdownSystem [0xB0C44C44] SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwSystemDebugControl [0xB0C44C56] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAcceptConnectPort [0x805999BA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheck [0x805E6E36] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckAndAuditAlarm [0x805EA694] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByType [0x805E6E68] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeAndAuditAlarm [0x805EA6CE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultList [0x805E6E9E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultListAndAuditAlarm [0x805EA712] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAccessCheckByTypeResultListAndAuditAlarmByHandle [0x805EA756] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAddAtom [0x8060BEA8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAdjustGroupsToken [0x805E2234] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAdjustPrivilegesToken [0x805E1E8C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlertResumeThread [0x805CAE66] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAlertThread [0x805CAE16] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateLocallyUniqueId [0x8060C4CE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateUserPhysicalPages [0x805AB62E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateUuids [0x8060BAE6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAllocateVirtualMemory [0x8059DE30] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAreMappedFilesTheSame [0x805A5A70] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwAssignProcessToJobObject [0x805CC944] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCallbackReturn [0x804FF838] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelDeviceWakeupRequest [0x8060D12A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelIoFile [0x8056BD48] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCancelTimer [0x8053503E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwClearEvent [0x8060517E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCloseObjectAuditAlarm [0x805EABCE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompactKeys [0x80619F14] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompareTokens [0x805EF0E2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompleteConnectPort [0x8059A0A8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCompressKey [0x8061A168] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwConnectPort [0x8059995A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwContinue [0x80540E48] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateDebugObject [0x80638CE0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateDirectoryObject [0x805B3CEE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateFile [0x8056E2EE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateJobObject [0x805CB908] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateJobSet [0x805CB640] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateMailslotFile [0x8056E3FC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateNamedPipeFile [0x8056E328] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreatePagingFile [0x805A0E18] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreatePort [0x8059A476] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProcess [0x805C74A0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProcessEx [0x805C73EA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateProfile [0x8060DC88] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateSymbolicLinkObject [0x805B9614] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateThread [0x805C7288] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateToken [0x805EF48A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateWaitablePort [0x8059A49A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDebugActiveProcess [0x80639DBC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDebugContinue [0x80639F0C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDelayExecution [0x8060CB3C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteAtom [0x8060C35E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteFile [0x8056BE8E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteObjectAuditAlarm [0x805EACDA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeviceIoControlFile [0x8056E4B4] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDisplayString [0x80609178] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDuplicateToken [0x805E30E2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateBootEntries [0x8060CBEC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateSystemEnvironmentValuesEx [0x8060CBDE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwExtendSection [0x805A919A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFilterToken [0x805E328E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFindAtom [0x8060C112] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushBuffersFile [0x8056BF5A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushInstructionCache [0x805ABEB8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushKey [0x8061B064] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushVirtualMemory [0x805A1B28] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFlushWriteBuffer [0x805ABE5A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreeUserPhysicalPages [0x805AB9CA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFreeVirtualMemory [0x805A8470] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwFsControlFile [0x8056E4E8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetContextThread [0x805C779A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetDevicePowerState [0x805BE558] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetPlugPlayEvent [0x8058E5FA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwGetWriteWatch [0x8051D9D2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateAnonymousToken [0x805EEDD6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateClientOfPort [0x8059A504] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwImpersonateThread [0x805CDADC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitializeRegistry [0x80618486] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwInitiatePowerAction [0x805BE33E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsProcessInJob [0x805CB504] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwIsSystemResumeAutomatic [0x805BE544] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwListenPort [0x8059A710] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKey [0x8061C568] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLoadKey2 [0x8061C174] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockFile [0x8056E51C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockProductActivationKeys [0x806096DA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockRegistryKey [0x8061A214] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwLockVirtualMemory [0x805ABFC0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMakePermanentObject [0x805B516E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMakeTemporaryObject [0x805B1D5E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapUserPhysicalPages [0x805AA922] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapUserPhysicalPagesScatter [0x805AAEFA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwMapViewOfSection [0x805A74F0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwNotifyChangeDirectoryFile [0x8056F14C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenDirectoryObject [0x805B3DC0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenFile [0x8056F40C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenJobObject [0x805CBA8E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenObjectAuditAlarm [0x805EA79C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenProcessToken [0x805E3A7C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenProcessTokenEx [0x805E36E0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenSymbolicLinkObject [0x805B97FA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenThreadToken [0x805E3A9A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenThreadTokenEx [0x805E3850] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPlugPlayControl [0x8063BFAE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPowerInformation [0x805BF3C6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegeCheck [0x805EDE88] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegeObjectAuditAlarm [0x805E9AAE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPrivilegedServiceAuditAlarm [0x805E9C9A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwProtectVirtualMemory [0x805ADA88] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwPulseEvent [0x80605386] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryAttributesFile [0x8056C140] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDebugFilterState [0x8053C05E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDefaultLocale [0x80606F12] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDefaultUILanguage [0x80607B72] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDirectoryFile [0x8056F0E6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryDirectoryObject [0x805B3E60] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryEaFile [0x8056F43C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryEvent [0x8060544E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryFullAttributesFile [0x8056C294] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationAtom [0x8060C386] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationFile [0x8056FCB8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationJobObject [0x805CBF60] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationPort [0x8059A76E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationProcess [0x805C2C7C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationThread [0x805C1848] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInformationToken [0x805E3B7A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryInstallUILanguage [0x80607310] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryIntervalProfile [0x8060E10A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryIoCompletion [0x8056DE4C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryMultipleValueKey [0x80619492] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryMutant [0x8060D9E8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryOpenSubKeys [0x80619B3E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryPerformanceCounter [0x8060E198] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryQuotaInformationFile [0x80570B64] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySection [0x805ADC4A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySecurityObject [0x805B5A96] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySemaphore [0x8060B3B6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySymbolicLinkObject [0x805B989A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemEnvironmentValue [0x8060CC08] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemEnvironmentValueEx [0x8060CBD0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemInformation [0x80607BF2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQuerySystemTime [0x80609A8E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryTimer [0x8060D312] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryTimerResolution [0x80609346] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryVirtualMemory [0x805AE2D0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryVolumeInformationFile [0x80571054] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueueApcThread [0x805C74E6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRaiseException [0x80540E90] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRaiseHardError [0x8060B028] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadFile [0x8057181C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadFileScatter [0x80571DAA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadRequestData [0x8059B1F6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReadVirtualMemory [0x805A9786] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRegisterThreadTerminatePort [0x805C8A60] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseMutant [0x8060DB20] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseSemaphore [0x8060B4E6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveIoCompletion [0x8056E144] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRemoveProcessDebug [0x80639E8C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplaceKey [0x8061C418] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyPort [0x8059A876] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReplyWaitReplyPort [0x8059AB60] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRequestDeviceWakeup [0x805BE4D6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRequestPort [0x80597DD4] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRequestWaitReplyPort [0x80598100] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwRequestWakeupLatency [0x805BE2E4] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResetEvent [0x80605560] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResetWriteWatch [0x8051DEB2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResumeProcess [0x805CADC0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwResumeThread [0x805CACA2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveKey [0x8061BE20] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveKeyEx [0x8061BF06] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSaveMergedKeys [0x8061C02E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSecureConnectPort [0x805990EE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetContextThread [0x805C79AA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDebugFilterState [0x8063CB44] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultHardErrorPort [0x8060AED2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultLocale [0x80607062] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetDefaultUILanguage [0x806078D4] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEaFile [0x8056F958] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEvent [0x80605620] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetEventBoostPriority [0x806056EA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetHighEventPair [0x8060D804] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetHighWaitLowEventPair [0x8060D734] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationDebugObject [0x80639856] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationFile [0x805702F6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationJobObject [0x805CCC70] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationKey [0x8061905E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationObject [0x805BA510] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationProcess [0x805C3DD4] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationThread [0x805C1D94] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetInformationToken [0x805F0204] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIntervalProfile [0x8060DC6C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetIoCompletion [0x8056E0E2] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLdtEntries [0x805C9BEC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLowEventPair [0x8060D7A0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetLowWaitHighEventPair [0x8060D6C8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetQuotaInformationFile [0x80570B42] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSecurityObject [0x805B6040] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemEnvironmentValue [0x8060CE8C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemPowerState [0x806490D6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetSystemTime [0x8060A64E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetThreadExecutionState [0x805BE1F8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimer [0x8053517A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetTimerResolution [0x80609B20] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetUuidSeed [0x8060B99C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetVolumeInformationFile [0x80571478] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSignalAndWaitForSingleObject [0x80522C80] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwStartProfile [0x8060DEB6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwStopProfile [0x8060E060] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSuspendProcess [0x805CAD6A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSuspendThread [0x805CABDC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTerminateJobObject [0x805CD7DA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTerminateProcess [0x805C8CAA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTerminateThread [0x805C8EA4] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTestAlert [0x805CAF2A] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTraceEvent [0x80531858] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwTranslateFilePath [0x8060CBFA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadDriver [0x8057978E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKey [0x80618BE0] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnloadKeyEx [0x80618E02] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnlockFile [0x8056E8C8] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnlockVirtualMemory [0x805AC54E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwUnmapViewOfSection [0x805A8306] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwVdmControl [0x805F15BC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForDebugEvent [0x806395BE] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForMultipleObjects [0x805B61F6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForSingleObject [0x805B610C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitHighEventPair [0x8060D664] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitLowEventPair [0x8060D600] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteFile [0x805722BA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteFileGather [0x805728CA] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteRequestData [0x8059B21E] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWriteVirtualMemory [0x805A9890] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwYieldExecution [0x8050225C] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKeyedEvent [0x8060E6DC] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKeyedEvent [0x8060E7C6] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwReleaseKeyedEvent [0x8060E878] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwWaitForKeyedEvent [0x8060EB04] SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryPortInformationProcess [0x805C1818] INT 0x00 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053E1CC INT 0x01 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053E344 INT 0x03 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053E714 INT 0x04 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053E894 INT 0x05 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053E9F0 INT 0x06 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053EB64 INT 0x07 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053F1CC INT 0x09 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053F5F0 INT 0x0A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053F710 INT 0x0B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053F850 INT 0x0C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053FAAC INT 0x0D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053FD90 INT 0x0E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 80540498 INT 0x0F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x10 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805408E8 INT 0x11 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 80540A20 INT 0x12 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x13 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 80540B88 INT 0x14 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x15 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x16 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x17 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x18 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x19 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x1A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x1B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x1C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x1D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x1E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x1F \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D1FD0 INT 0x2A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053DA0E INT 0x2B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053DB10 INT 0x2C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053DCB0 INT 0x2D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053E5F0 INT 0x2E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D4B1 INT 0x2F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 805407C8 INT 0x30 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CB70 INT 0x31 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CB7A INT 0x32 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CB84 INT 0x33 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CB8E INT 0x34 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CB98 INT 0x35 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBA2 INT 0x36 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBAC INT 0x37 \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D1728 INT 0x38 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBC0 INT 0x39 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBCA INT 0x3A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBD4 INT 0x3B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBDE INT 0x3C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBE8 INT 0x3D \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D2B70 INT 0x3E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CBFC INT 0x3F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC06 INT 0x40 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC10 INT 0x41 \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D29CC INT 0x42 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC24 INT 0x43 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC2E INT 0x44 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC38 INT 0x45 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC42 INT 0x46 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC4C INT 0x47 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC56 INT 0x48 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC60 INT 0x49 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC6A INT 0x4A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC74 INT 0x4B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC7E INT 0x4C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC88 INT 0x4D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC92 INT 0x4E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CC9C INT 0x4F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCA6 INT 0x50 \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D1800 INT 0x51 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCBA INT 0x52 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCC4 INT 0x53 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCCE INT 0x54 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCD8 INT 0x55 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCE2 INT 0x56 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCEC INT 0x57 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CCF6 INT 0x58 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD00 INT 0x59 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD0A INT 0x5A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD14 INT 0x5B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD1E INT 0x5C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD28 INT 0x5D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD32 INT 0x5E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD3C INT 0x5F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD46 INT 0x60 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD50 INT 0x61 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD5A INT 0x62 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) B9F1067E INT 0x63 NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) B9E20E10 INT 0x64 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD78 INT 0x65 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD82 INT 0x66 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD8C INT 0x67 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CD96 INT 0x68 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDA0 INT 0x69 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDAA INT 0x6A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDB4 INT 0x6B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDBE INT 0x6C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDC8 INT 0x6D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDD2 INT 0x6E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDDC INT 0x6F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDE6 INT 0x70 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDF0 INT 0x71 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CDFA INT 0x72 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE04 INT 0x73 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) B9F1067E INT 0x74 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE18 INT 0x75 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE22 INT 0x76 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE2C INT 0x77 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE36 INT 0x78 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE40 INT 0x79 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE4A INT 0x7A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE54 INT 0x7B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE5E INT 0x7C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE68 INT 0x7D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE72 INT 0x7E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE7C INT 0x7F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE86 INT 0x80 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE90 INT 0x81 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CE9A INT 0x82 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) B9F1067E INT 0x83 ohci1394.sys (1394 OpenHCI Port Driver/Microsoft Corporation) BA0BE2F0 INT 0x83 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) B9F1067E INT 0x83 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) B9F1067E INT 0x83 ohci1394.sys (1394 OpenHCI Port Driver/Microsoft Corporation) BA0BE2F0 INT 0x84 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CEB8 INT 0x85 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CEC2 INT 0x86 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CECC INT 0x87 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CED6 INT 0x88 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CEE0 INT 0x89 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CEEA INT 0x8A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CEF4 INT 0x8B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CEFE INT 0x8C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF08 INT 0x8D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF12 INT 0x8E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF1C INT 0x8F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF26 INT 0x90 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF30 INT 0x91 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF3A INT 0x92 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF44 INT 0x93 \SystemRoot\system32\DRIVERS\i8042prt.sys (i8042 Port Driver/Microsoft Corporation) BA2C8495 INT 0x94 \SystemRoot\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver v1.0a/Windows ® Server 2003 DDK provider) B9942DFC INT 0x95 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF62 INT 0x96 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF6C INT 0x97 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF76 INT 0x98 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF80 INT 0x99 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF8A INT 0x9A \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF94 INT 0x9B \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CF9E INT 0x9C \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CFA8 INT 0x9D \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CFB2 INT 0x9E \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CFBC INT 0x9F \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CFC6 INT 0xA0 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CFD0 INT 0xA1 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CFDA INT 0xA2 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053CFE4 INT 0xA3 \SystemRoot\system32\DRIVERS\i8042prt.sys (i8042 Port Driver/Microsoft Corporation) BA2CFC90 INT 0xA4 \SystemRoot\system32\DRIVERS\USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) B99A5E54 INT 0xA4 \SystemRoot\system32\DRIVERS\USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) B99A5E54 INT 0xA4 \SystemRoot\system32\DRIVERS\USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) B99A5E54 INT 0xA4 \SystemRoot\system32\DRIVERS\USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) B99A5E54 INT 0xA5 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D002 INT 0xA6 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D00C INT 0xA7 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D016 INT 0xA8 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D020 INT 0xA9 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D02A INT 0xAA \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D034 INT 0xAB \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D03E INT 0xAC \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D048 INT 0xAD \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D052 INT 0xAE \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D05C INT 0xAF \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D066 INT 0xB0 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D070 INT 0xB1 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) B9F8431E INT 0xB2 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D084 INT 0xB3 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D08E INT 0xB4 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) B99B0CB8 INT 0xB5 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0A2 INT 0xB6 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0AC INT 0xB7 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0B6 INT 0xB8 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0C0 INT 0xB9 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0CA INT 0xBA \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0D4 INT 0xBB \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0DE INT 0xBC \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0E8 INT 0xBD \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0F2 INT 0xBE \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D0FC INT 0xBF \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D106 INT 0xC0 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D110 INT 0xC1 \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D1984 INT 0xC2 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D124 INT 0xC3 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D12E INT 0xC4 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D138 INT 0xC5 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D142 INT 0xC6 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D14C INT 0xC7 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D156 INT 0xC8 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D160 INT 0xC9 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D16A INT 0xCA \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D174 INT 0xCB \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D17E INT 0xCC \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D188 INT 0xCD \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D192 INT 0xCE \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D19C INT 0xCF \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1A6 INT 0xD0 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1B0 INT 0xD1 \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D0D34 INT 0xD2 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1C4 INT 0xD3 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1CE INT 0xD4 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1D8 INT 0xD5 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1E2 INT 0xD6 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1EC INT 0xD7 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D1F6 INT 0xD8 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D200 INT 0xD9 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D20A INT 0xDA \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D214 INT 0xDB \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D21E INT 0xDC \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D228 INT 0xDD \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D232 INT 0xDE \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D23C INT 0xDF \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D246 INT 0xE0 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D250 INT 0xE1 \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D1F0C INT 0xE2 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D264 INT 0xE3 \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D1C70 INT 0xE4 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D278 INT 0xE5 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D282 INT 0xE6 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D28C INT 0xE7 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D296 INT 0xE8 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2A0 INT 0xE9 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2AA INT 0xEA \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2B4 INT 0xEB \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2BE INT 0xEC \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2C8 INT 0xED \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2D2 INT 0xEE \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2D9 INT 0xEF \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2E0 INT 0xF0 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2E7 INT 0xF1 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2EE INT 0xF2 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2F5 INT 0xF3 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D2FC INT 0xF4 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D303 INT 0xF5 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D30A INT 0xF6 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D311 INT 0xF7 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D318 INT 0xF8 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D31F INT 0xF9 \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D326 INT 0xFA \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D32D INT 0xFB \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D334 INT 0xFC \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D33B INT 0xFD \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D2464 INT 0xFE \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D2604 INT 0xFF \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 8053D350 SYSENTER \WINDOWS\system32\ntkrnlpa.exe 8053D570 Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx [0xB0CC9BAE] Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObInsertObject Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObject —- Kernel code sections - GMER 1.0.15 —- .text ntkrnlpa.exe!ZwCallbackReturn + 23A8 80501BE0 4 Bytes [AE, 4C, C4, B0] .text ntkrnlpa.exe!ZwCallbackReturn + 23E8 80501C20 4 Bytes [A5, 19, C6, B0] .text ntkrnlpa.exe!ZwCallbackReturn + 2410 80501C48 8 Bytes [34, 6B, C4, B0, 8C, 6B, C4, …] {XOR AL, 0x6b; LES ESI, DWORD [EAX-0x4f3b9474]} .text ntkrnlpa.exe!ZwCallbackReturn + 241C 80501C54 4 Bytes [A2, 6C, C4, B0] .text ntkrnlpa.exe!ZwCallbackReturn + 2428 80501C60 4 Bytes [59, 13, C6, B0] .text … .text ntkrnlpa.exe!KeReleaseInStackQueuedSpinLockFromDpcLevel + C12 8053D766 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 22A 80541A9A 18 Bytes [E0, 25, 7F, FF, FF, FF, 0F, …] .text ntkrnlpa.exe!KiDispatchInterrupt + 242 80541AB2 1 Byte [00] .text ntkrnlpa.exe!RtlPrefetchMemoryNonTemporal 80542394 1 Byte [90] PAGE ntkrnlpa.exe!ObMakeTemporaryObject 805B1CE0 5 Bytes JMP B0CC55D4 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) PAGE ntkrnlpa.exe!ObInsertObject 805B8B58 5 Bytes JMP B0CC6FFA \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) PAGE ntkrnlpa.exe!ZwCreateProcessEx 805C73EA 7 Bytes JMP B0CC9BB2 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) .text hal.dll!HalBeginSystemInterrupt + 96C 806D3618 10 Bytes [87, 32, 87, 32, 17, 5A, 87, …] {XCHG [EDX], ESI; XCHG [EDX], ESI; POP SS; POP EDX; XCHG [EAX], ESI; POP SS; POP EDX} .text hal.dll!HalBeginSystemInterrupt + 978 806D3624 1 Byte [03] .text hal.dll!HalBeginSystemInterrupt + 978 806D3624 3 Bytes [03, 00, 75] .text hal.dll!HalBeginSystemInterrupt + 97C 806D3628 9 Bytes [FB, 59, 02, 30, 87, 32, 17, …] {STI ; POP ECX; ADD DH, [EAX]; XCHG [EDX], ESI; POP SS; POP EDX; PUSH EAX} .text hal.dll!HalBeginSystemInterrupt + 986 806D3632 1 Byte [02] .text … INIT ati2mtag.sys B9D650B1 3 Bytes [63, D6, B9] INIT ati2mtag.sys B9D650B5 3 Bytes [63, D6, B9] INIT ati2mtag.sys B9D650B9 3 Bytes [63, D6, B9] INIT ati2mtag.sys B9D650BD 3 Bytes [63, D6, B9] INIT ati2mtag.sys B9D650C1 3 Bytes [63, D6, B9] INIT … .text D:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xB99C4000, 0x1C5D38, 0xE8000020] .text aswSnx.SYS B0C44ADA 5 Bytes JMP B0CC9B10 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) .text aswSnx.SYS B0C46BDC 5 Bytes JMP B0CC99D6 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) —- User code sections - GMER 1.0.15 —- .text D:\WINDOWS\Explorer.EXE[216] GROOVEEX.DLL!DllCanUnloadNow + 60E0 4946B9C8 4 Bytes [7D, 02, 0A, 0D] .itext D:\WINDOWS\Explorer.EXE[216] D:\PROGRA~1\SPYBOT~1\SDHelper.dll entry point in ".itext" section [0x035AA7A4] UPX1 D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe[592] D:\Program Files\Common Files\Pure Networks Shared\Platform\CAntiVirusCOM.dll entry point in "UPX1" section [0x1006B5A0] UPX1 D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe[592] D:\Program Files\Common Files\Pure Networks Shared\Platform\CFireWallCOM.dll entry point in "UPX1" section [0x017EE2D0] UPX1 D:\Documents and Settings\Mike\Desktop\05f6g86p.exe[1876] D:\Documents and Settings\Mike\Desktop\05f6g86p.exe entry point in "UPX1" section [0x004B4480] .text D:\Program Files\Alwil Software\Avast5\AvastSvc.exe[2012] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 4 Bytes [C2, 04, 00, 90] {RET 0x4; NOP } D:\PROGRA~1\MAGICD~1\MAGICD~1.EXE[2076] D:\PROGRA~1\MAGICD~1\MAGICD~1.EXE entry point in "" section [0x005950C0] .text D:\Program Files\Mozilla Firefox\firefox.exe[2704] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 004013F0 D:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) .text D:\Program Files\Mozilla Firefox\firefox.exe[2704] GROOVEEX.DLL!DllCanUnloadNow + 60E0 4946B9C8 4 Bytes [86, 32, 7D, BA] {XCHG [EDX], DH; JGE 0xffffffffffffffbe} —- Devices - GMER 1.0.15 —- Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/AVAST Software) Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs Ntfs.sys (NT File System Driver/Microsoft Corporation) Device \FileSystem\Ntfs \Ntfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software) Device \FileSystem\Fastfat \FatCdrom aswSP.SYS (avast! self protection module/AVAST Software) Device \FileSystem\Fastfat \FatCdrom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fastfat \FatCdrom Fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation) Device \FileSystem\Fastfat \FatCdrom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Mup \Dfs Mup.sys (Multiple UNC Provider driver/Microsoft Corporation) Device \Driver\NDIS \Device\Ndis NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\KSecDD \Device\KsecDD KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation) Device \Driver\KSecDD \Device\KsecDD ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000019 Device \Device\00000025 Device \Driver\PnpManager \Device\00000032 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000032 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Beep \Device\Beep Beep.SYS (BEEP Driver/Microsoft Corporation) Device \Driver\Beep \Device\Beep ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswFW \Device\aswFw aswFW.SYS (avast! Filtering TDI driver/AVAST Software) Device \Driver\aswFW \Device\aswFw ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswSP \Device\aswSP aswSP.SYS (avast! self protection module/AVAST Software) Device \Driver\NIC1394 \Device\{C98C5A15-BABE-402E-9754-E7A14471AF33} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Device\00000026 Device \Device\00000033 Device \FileSystem\NetBIOS \Device\Netbios netbios.sys (NetBIOS interface driver/Microsoft Corporation) Device \FileSystem\NetBIOS \Device\Netbios ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Tcpip \Device\Ip tcpip.sys (TCP/IP Protocol Driver/Microsoft Corporation) AttachedDevice \Driver\Tcpip \Device\Ip aswFW.SYS (avast! Filtering TDI driver/AVAST Software) AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) Device \Device\00000027 Device \Device\00000034 Device \Device\00000040 Device \Driver\TermDD \Device\RDP_CONSOLE0 termdd.sys (Terminal Server Driver/Microsoft Corporation) Device \Driver\swenum \Device\KSENUM#00000001 swenum.sys (Plug and Play Software Device Enumerator/Microsoft Corporation) Device \Driver\swenum \Device\KSENUM#00000001 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\aswSP_Pot2 Device \Driver\swenum \Device\KSENUM#00000002 swenum.sys (Plug and Play Software Device Enumerator/Microsoft Corporation) Device \Driver\swenum \Device\KSENUM#00000002 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Kbdclass \Device\KeyboardClass0 kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) Device \Driver\Kbdclass \Device\KeyboardClass0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000028 Device \Device\00000041 Device \Driver\TermDD \Device\RDP_CONSOLE1 termdd.sys (Terminal Server Driver/Microsoft Corporation) Device \Device\Video0 Device \Driver\PnpManager \Device\00000035 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000035 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Fips \Device\Fips Fips.SYS (FIPS Crypto Driver/Microsoft Corporation) Device \Driver\Fips \Device\Fips ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Kbdclass \Device\KeyboardClass1 kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) Device \Driver\Kbdclass \Device\KeyboardClass1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000029 Device \Driver\ACPI \Device\00000042 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\NDProxy \Device\NDProxy NDProxy.SYS (NDIS Proxy/Microsoft Corporation) Device \Driver\NDProxy \Device\NDProxy ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswTdi \Device\AswUdpFilter aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) Device \Device\Video1 Device \Driver\PnpManager \Device\00000036 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000036 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\aswMon2 \Device\aswMon aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software) Device \Device\0000000a Device \Device\00000037 Device \Driver\ACPI \Device\00000043 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\isapnp \Device\00000050 isapnp.sys (PNP ISA Bus Driver/Microsoft Corporation) Device \Driver\isapnp \Device\00000050 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\RdpDrDvMgr Device \Driver\Mouclass \Device\PointerClass0 mouclass.sys (Mouse Class Driver/Microsoft Corporation) Device \Driver\Mouclass \Device\PointerClass0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Video2 Device \Driver\awnoaaod \Device\awnoaaod awnoaaod.sys Device \Driver\awnoaaod \Device\awnoaaod ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\0000000b Device \Device\00000044 Device \Device\00000051 Device \Driver\Mouclass \Device\PointerClass1 mouclass.sys (Mouse Class Driver/Microsoft Corporation) Device \Driver\Mouclass \Device\PointerClass1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Processor Device \Driver\PnpManager \Device\00000038 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000038 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Video3 Device \Driver\usbohci \Device\USBPDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbohci \Device\USBPDO-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIDataDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\WMIxWDM \Device\WMIDataDevice ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\0000000c Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawTape ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\00000045 Device \Device\00000052 Device \Driver\PnpManager \Device\00000039 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000039 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbohci \Device\USBPDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbohci \Device\USBPDO-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Video4 Device \Device\aswRoot Device \Driver\dmio \Device\DmControl\DmIoDaemon dmio.sys (NT Disk Manager I/O Driver/Microsoft Corp., Veritas Software) Device \Driver\dmio \Device\DmControl\DmIoDaemon ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\dmio \Device\DmControl\DmConfig dmio.sys (NT Disk Manager I/O Driver/Microsoft Corp., Veritas Software) Device \Driver\dmio \Device\DmControl\DmConfig ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\dmio \Device\DmControl\DmPnP dmio.sys (NT Disk Manager I/O Driver/Microsoft Corp., Veritas Software) Device \Driver\dmio \Device\DmControl\DmPnP ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\dmio \Device\DmControl\DmInfo dmio.sys (NT Disk Manager I/O Driver/Microsoft Corp., Veritas Software) Device \Driver\dmio \Device\DmControl\DmInfo ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\purendis \Device\purendis purendis.sys (NDIS Relay Driver/Cisco Systems, Inc.) Device \Driver\purendis \Device\purendis ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswNdis \Device\{EB610006-740B-469D-83C9-064C5D518C9D} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Device\i Device \Driver\rdpdr \Device\RdpDrPort rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-2 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\MRxDAV \Device\WebDavRedirector mrxdav.sys (Windows NT WebDav Minirdr/Microsoft Corporation) Device \FileSystem\MRxDAV \Device\WebDavRedirector ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswNdis \Device\{4238927E-A716-4DDE-A1C1-D490A8314742} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\ACPI \Device\00000054 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\ACPI \Device\00000060 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-3 usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbscan \Device\Usbscan0 usbscan.sys (USB Scanner Driver/Microsoft Corporation) Device \Driver\usbscan \Device\Usbscan0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\pnarp \Device\PnArp pnarp.sys (Address Resolution Protocol Driver/Cisco Systems, Inc.) Device \Driver\pnarp \Device\PnArp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\RasAcd \Device\RasAcd rasacd.sys (RAS Automatic Connection Driver/Microsoft Corporation) Device \Driver\RasAcd \Device\RasAcd ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\aswSnx \Device\aswSnx aswSnx.SYS (avast! Virtualization Driver/AVAST Software) Device \Driver\ACPI \Device\00000048 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\ACPI \Device\00000061 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PSched \Device\PSched NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\IpNat \Device\IPNAT ipnat.sys (IP Network Address Translator/Microsoft Corporation) Device \Driver\IpNat \Device\IPNAT ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Tcpip \Device\Tcp tcpip.sys (TCP/IP Protocol Driver/Microsoft Corporation) AttachedDevice \Driver\Tcpip \Device\Tcp aswFW.SYS (avast! Filtering TDI driver/AVAST Software) AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) Device \Driver\RasPppoe \Device\{E096A826-01BE-4334-B0E9-C948FA46764A} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0010 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0010 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\ACPI \Device\00000049 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\ACPI \Device\00000062 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\aswTdi \Device\ASWTDI aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) Device \Driver\Parport \Device\ParallelPort0 parport.sys (Parallel Port Driver/Microsoft Corporation) Device \Driver\Parport \Device\ParallelPort0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ParVdm \Device\ParallelVdm0 ParVdm.SYS (VDM Parallel Driver/Microsoft Corporation) Device \Driver\ParVdm \Device\ParallelVdm0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\00000057 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\rdpdr \Device\RdpDr rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0004 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0004 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\usbccgp \Device\00000070 usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) Device \Driver\usbccgp \Device\00000070 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Ftdisk \Device\HarddiskVolume1 ftdisk.sys (FT Disk Driver/Microsoft Corporation) Device \Driver\Ftdisk \Device\HarddiskVolume1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\mdmxsdk \Device\ConexantDiagnosticsServer mdmxsdk.sys (Diagnostic Interface x86 Driver/Conexant) Device \Driver\mdmxsdk \Device\ConexantDiagnosticsServer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0012 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0012 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0005 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0005 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\ACPI \Device\00000058 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\usbccgp \Device\00000071 usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) Device \Driver\usbccgp \Device\00000071 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Http\Filter Device \Device\Http\AppPool Device \Device\Http\Control Device \Driver\HSFHWBS2 \Device\RKSAMPLE0 HSFHWBS2.sys (HSF_HWB2 WDM driver/Conexant Systems, Inc.) Device \Driver\HSFHWBS2 \Device\RKSAMPLE0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Ftdisk \Device\HarddiskVolume2 ftdisk.sys (FT Disk Driver/Microsoft Corporation) Device \Driver\Ftdisk \Device\HarddiskVolume2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PptpMiniport \Device\{BCF04FD6-CB8F-4FD7-8514-77E5B052C2A1} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\Cdrom \Device\CdRom0 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Cdrom \Device\CdRom0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\TermDD \Device\Termdd termdd.sys (Terminal Server Driver/Microsoft Corporation) Device \Driver\usbccgp \Device\00000072 usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) Device \Driver\usbccgp \Device\00000072 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\sysaudio \Device\sysaudio ks.sys (Kernel CSA Library/Microsoft Corporation) Device \Driver\sysaudio \Device\sysaudio ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\sysaudio \Device\sysaudio sysaudio.sys (System Audio WDM Filter/Microsoft Corporation) Device \FileSystem\Rdbss \Device\FsWrap rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \FileSystem\Rdbss \Device\FsWrap ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0006 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0006 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0013 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0013 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\ACPI \Device\00000065 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\Ftdisk \Device\HarddiskVolume3 ftdisk.sys (FT Disk Driver/Microsoft Corporation) Device \Driver\Ftdisk \Device\HarddiskVolume3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort0 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde1Channel0-2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde1Channel0-2 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort1 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde0Channel0-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde0Channel0-0 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort2 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort3 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort4 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort4 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort5 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdePort5 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\amdide \Device\Ide\PciIde2Channel0-4 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\amdide \Device\Ide\PciIde2Channel0-4 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde1Channel1-3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde1Channel1-3 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP4T0L0-17 atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP4T0L0-17 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\amdide \Device\Ide\PciIde2Channel1-5 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\amdide \Device\Ide\PciIde2Channel1-5 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde0Channel1-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCIIde \Device\Ide\PciIde0Channel1-1 PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP4T1L0-1f atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP4T1L0-1f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP5T0L0-b atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) Device \Driver\atapi \Device\Ide\IdeDeviceP5T0L0-b ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Ide\PciIde0 Device \Device\Ide\PciIde1 Device \Device\Ide\PciIde2 Device \Driver\PnpManager \Device\0000003a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000003a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Parport \Device\Parallel0 parport.sys (Parallel Port Driver/Microsoft Corporation) Device \Driver\Parport \Device\Parallel0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\00000066 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0014 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0014 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\PnpManager \Device\0000002e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000002e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0015 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0015 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\ACPI \Device\00000067 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\Cdrom \Device\CdRom3 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Cdrom \Device\CdRom3 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\hidusb \Device\00000075 HIDCLASS.SYS (Hid Class Library/Microsoft Corporation) Device \Driver\hidusb \Device\00000075 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswFW \Device\AswFwTcp aswFW.SYS (avast! Filtering TDI driver/AVAST Software) Device \Driver\aswFW \Device\AswFwTcp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000002f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\0000002f ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\00000068 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0009 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PCI \Device\NTPNP_PCI0009 pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) Device \Driver\ACPI \Device\00000069 ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\PnpManager \Device\00000077 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000077 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NetBT \Device\NetBt_Wins_Export netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBt_Wins_Export ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\HSF_DPV \Device\HSF_MDMDevice0 HSF_DPV.sys (HSF_DP driver/Conexant Systems, Inc.) Device \Driver\HSF_DPV \Device\HSF_MDMDevice0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI_HAL \Device\0000003e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI_HAL \Device\0000003e hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) Device \Driver\mcdbus \Device\00000078 mcdbus.sys (MagicISO SCSI Host Controller/MagicISO, Inc.) Device \Driver\mcdbus \Device\00000078 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Arp1394 \Device\ARP1394 arp1394.sys (IP/1394 Arp Client/Microsoft Corporation) Device \Driver\Arp1394 \Device\ARP1394 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\0000004b ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{41447653-9A8A-456F-94F7-69123D3E2599} netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetBT_Tcpip_{41447653-9A8A-456F-94F7-69123D3E2599} ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NetBT \Device\NetbiosSmb netbt.sys (MBT Transport driver/Microsoft Corporation) Device \Driver\NetBT \Device\NetbiosSmb ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswTdi \Device\AswTcpFilter aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) Device \Driver\ACPI \Device\0000004c ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\ACPI \Device\0000005a ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\ACPI \Device\0000004d ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\MountMgr \Device\MountPointManager MountMgr.sys (Mount Manager/Microsoft Corporation) Device \Driver\MountMgr \Device\MountPointManager ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Aavmker4 \Device\AavmKer4 Aavmker4.SYS (avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP/AVAST Software) Device \Driver\ACPI \Device\0000005b ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \FileSystem\Mup \Device\Mup Mup.sys (Multiple UNC Provider driver/Microsoft Corporation) Device \Driver\mcdbus \Device\mcdbus mcdbus.sys (MagicISO SCSI Host Controller/MagicISO, Inc.) Device \Driver\mcdbus \Device\mcdbus ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Srv \Device\LanmanServer srv.sys (Server driver/Microsoft Corporation) Device \Driver\Wanarp \Device\WANARP wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\Udp tcpip.sys (TCP/IP Protocol Driver/Microsoft Corporation) AttachedDevice \Driver\Tcpip \Device\Udp aswFW.SYS (avast! Filtering TDI driver/AVAST Software) AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) Device \Driver\aswSP \Device\USNTracker aswSP.SYS (avast! self protection module/AVAST Software) Device \Driver\Tcpip \Device\RawIp tcpip.sys (TCP/IP Protocol Driver/Microsoft Corporation) AttachedDevice \Driver\Tcpip \Device\RawIp aswFW.SYS (avast! Filtering TDI driver/AVAST Software) AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) Device \Device\Harddisk0\DP(2)0x11cd80a00-0x1ad5977800+3 Device \Driver\Disk \Device\Harddisk0\DR0 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk0\DR0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Harddisk0\DP(1)0x7e00-0x11cd78c00+2 Device \Driver\NdisWan \Device\NdisWanIp NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\Modem \Device\0000006a Modem.SYS (Modem Device Driver/Microsoft Corporation) Device \Driver\Modem \Device\0000006a ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ohci1394 \Device\0000005e 1394BUS.SYS (1394 Bus Device Driver/Microsoft Corporation) Device \Driver\ohci1394 \Device\0000005e ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk1\DR1 CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) Device \Driver\Disk \Device\Harddisk1\DR1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Device\Harddisk1\DP(1)0x7e00-0x950a58200+4 Device \Driver\PSched \Device\{BCD03C1F-4A6B-4A94-9F82-528603C2D97E} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawDisk ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\0000006b usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\0000006b ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000002 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000002 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ACPI \Device\0000005f ACPI.sys (ACPI Driver for NT/Microsoft Corporation) Device \Driver\usbohci \Device\USBFDO-0 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbohci \Device\USBFDO-0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Null \Device\Null Null.SYS (NULL Driver/Microsoft Corporation) Device \Driver\Null \Device\Null ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\0000006c usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\0000006c ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000003 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\ohci1394 \Device\1394BUS0 1394BUS.SYS (1394 Bus Device Driver/Microsoft Corporation) Device \Driver\ohci1394 \Device\1394BUS0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\IPSec \Device\IPSEC ipsec.sys (IPSec Driver/Microsoft Corporation) Device \Driver\IPSec \Device\IPSEC ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbhub \Device\0000006d usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) Device \Driver\usbhub \Device\0000006d ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\usbohci \Device\USBFDO-1 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbohci \Device\USBFDO-1 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Ptilink \Device\ParTechInc0 ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.) Device \Driver\Ptilink \Device\ParTechInc0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PSched \Device\{A9511752-A649-45AC-ACE3-DED622B57DA8} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\Tcpip \Device\IPMULTICAST tcpip.sys (TCP/IP Protocol Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-2 USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBFDO-2 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\NdisWan \Device\NdisWan NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\NdisTapi \Device\NdisTapi ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) Device \Driver\NdisTapi \Device\NdisTapi ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\dmload \Device\DmLoader dmload.sys (NT Disk Manager Startup Driver/Microsoft Corp., Veritas Software.) Device \Driver\dmload \Device\DmLoader ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\MRxSmb \Device\LanmanRedirector mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) Device \FileSystem\MRxSmb \Device\LanmanRedirector rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) Device \Driver\Gpc \Device\Gpc msgpc.sys (MS General Packet Classifier/Microsoft Corporation) Device \FileSystem\Npfs \Device\NamedPipe Npfs.SYS (NPFS Driver/Microsoft Corporation) Device \FileSystem\Npfs \Device\NamedPipe ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\Ftdisk \Device\FtControl ftdisk.sys (FT Disk Driver/Microsoft Corporation) Device \Driver\Ftdisk \Device\FtControl ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\rtl8139 \Device\{41447653-9A8A-456F-94F7-69123D3E2599} NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) Device \Driver\aswSP \Device\aswSP_Avar aswSP.SYS (avast! self protection module/AVAST Software) Device \Driver\aswRdr \Device\ASWRDR aswRdr.SYS (avast! TDI RDR Driver/AVAST Software) Device \Driver\aswRdr \Device\AswRdrTcpFilter aswRdr.SYS (avast! TDI RDR Driver/AVAST Software) Device \FileSystem\Msfs \Device\Mailslot Msfs.SYS (Mailslot driver/Microsoft Corporation) Device \FileSystem\Msfs \Device\Mailslot ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\AFD \Device\Afd afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) Device \Driver\Ndisuio \Device\Ndisuio ndisuio.sys (NDIS User mode I/O Driver/Microsoft Corporation) Device \Driver\Ndisuio \Device\Ndisuio ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\RAW \Device\RawCdRom ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\winachsf \Device\Winachsf0 HSF_CNXT.sys (HSF_CNXT driver/Conexant Systems, Inc.) Device \Driver\winachsf \Device\Winachsf0 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\aswFW \Device\AswFwUdp aswFW.SYS (avast! Filtering TDI driver/AVAST Software) Device \Driver\aswFW \Device\AswFwUdp ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000030 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000030 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000031 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \Driver\PnpManager \Device\00000031 ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Mup \Device\WinDfs\Root Mup.sys (Multiple UNC Provider driver/Microsoft Corporation) Device \FileSystem\Fastfat \Fat aswSP.SYS (avast! self protection module/AVAST Software) Device \FileSystem\Fastfat \Fat ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fastfat \Fat Fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation) Device \FileSystem\Fastfat \Fat ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software) Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer Fs_Rec.SYS (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Filters\FltMgrMsg Device \FileSystem\Filters\SystemRestore Device \FileSystem\FltMgr \FileSystem\Filters\FltMgr fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer Fs_Rec.SYS (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer Fs_Rec.SYS (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer Fs_Rec.SYS (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer Fs_Rec.SYS (File System Recognizer Driver/Microsoft Corporation) Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Cdfs \Cdfs Cdfs.SYS (CD-ROM File System Driver/Microsoft Corporation) Device \FileSystem\Cdfs \Cdfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) Device \FileSystem\Cdfs \Cdfs ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) —- Modules - GMER 1.0.15 —- Module \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) 804D7000-806CF980 (2066816 bytes) Module \WINDOWS\system32\hal.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 806D0000-806F0300 (131840 bytes) Module \WINDOWS\system32\KDCOM.DLL (Kernel Debugger HW Extension DLL/Microsoft Corporation) BA5A8000-BA5AA000 (8192 bytes) Module \WINDOWS\system32\BOOTVID.dll (VGA Boot Driver/Microsoft Corporation) BA4B8000-BA4BB000 (12288 bytes) Module ACPI.sys (ACPI Driver for NT/Microsoft Corporation) B9F79000-B9FA7000 (188416 bytes) Module \WINDOWS\system32\DRIVERS\WMILIB.SYS (WMILIB WMI support library Dll/Microsoft Corporation) BA5AA000-BA5AC000 (8192 bytes) Module pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) B9F68000-B9F79000 (69632 bytes) Module isapnp.sys (PNP ISA Bus Driver/Microsoft Corporation) BA0A8000-BA0B2000 (40960 bytes) Module ohci1394.sys (1394 OpenHCI Port Driver/Microsoft Corporation) BA0B8000-BA0C8000 (65536 bytes) Module \WINDOWS\system32\DRIVERS\1394BUS.SYS (1394 Bus Device Driver/Microsoft Corporation) BA0C8000-BA0D6000 (57344 bytes) Module pciide.sys (Generic PCI IDE Bus Driver/Microsoft Corporation) BA670000-BA671000 (4096 bytes) Module \WINDOWS\system32\DRIVERS\PCIIDEX.SYS (PCI IDE Bus Driver Extension/Microsoft Corporation) BA328000-BA32F000 (28672 bytes) Module MountMgr.sys (Mount Manager/Microsoft Corporation) BA0D8000-BA0E3000 (45056 bytes) Module ftdisk.sys (FT Disk Driver/Microsoft Corporation) B9F49000-B9F68000 (126976 bytes) Module dmload.sys (NT Disk Manager Startup Driver/Microsoft Corp., Veritas Software.) BA5AC000-BA5AE000 (8192 bytes) Module dmio.sys (NT Disk Manager I/O Driver/Microsoft Corp., Veritas Software) B9F23000-B9F49000 (155648 bytes) Module PartMgr.sys (Partition Manager/Microsoft Corporation) BA330000-BA335000 (20480 bytes) Module amdide.sys (AMD PCI SATA/IDE Bus Driver/Advanced Micro Devices) BA671000-BA672000 (4096 bytes) Module VolSnap.sys (Volume Shadow Copy Driver/Microsoft Corporation) BA0E8000-BA0F5000 (53248 bytes) Module atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) B9F0B000-B9F23000 (98304 bytes) Module disk.sys (PnP Disk Driver/Microsoft Corporation) BA0F8000-BA101000 (36864 bytes) Module \WINDOWS\system32\DRIVERS\CLASSPNP.SYS (SCSI Class System Dll/Microsoft Corporation) BA108000-BA115000 (53248 bytes) Module fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) B9EEB000-B9F0B000 (131072 bytes) Module sr.sys (System Restore Filesystem Filter Driver/Microsoft Corporation) B9ED9000-B9EEB000 (73728 bytes) Module KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation) B9EC2000-B9ED9000 (94208 bytes) Module Ntfs.sys (NT File System Driver/Microsoft Corporation) B9E35000-B9EC2000 (577536 bytes) Module NDIS.sys (NDIS 5.1 wrapper driver/Microsoft Corporation) B9E08000-B9E35000 (184320 bytes) Module aswNdis2.sys (avast! Filtering NDIS driver/AVAST Software) B9DDB000-B9E08000 (184320 bytes) Module aswNdis.sys (avast! Filtering NDIS driver/ALWIL Software) BA5AE000-BA5B0000 (8192 bytes) Module Mup.sys (Multiple UNC Provider driver/Microsoft Corporation) B9DC1000-B9DDB000 (106496 bytes) Module \SystemRoot\system32\DRIVERS\nic1394.sys (IEEE1394 Ndis Miniport and Call Manager/Microsoft Corporation) BA178000-BA188000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\intelppm.sys (Processor Device Driver/Microsoft Corporation) BA278000-BA281000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\ati2mtag.sys (ATI Radeon WindowsNT Miniport Driver/ATI Technologies Inc.) B99C3000-B9D79000 (3891200 bytes) Module \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation) B99AF000-B99C3000 (81920 bytes) Module \SystemRoot\system32\DRIVERS\usbohci.sys (OHCI USB Miniport Driver/Microsoft Corporation) BA3C8000-BA3CD000 (20480 bytes) Module \SystemRoot\system32\DRIVERS\USBPORT.SYS (USB 1.1 & 2.0 Port Driver/Microsoft Corporation) B998B000-B99AF000 (147456 bytes) Module \SystemRoot\system32\DRIVERS\usbehci.sys (EHCI eUSB Miniport Driver/Microsoft Corporation) BA3D0000-BA3D8000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\imapi.sys (IMAPI Kernel Driver/Microsoft Corporation) BA298000-BA2A3000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\cdrom.sys (SCSI CD-ROM Driver/Microsoft Corporation) BA2A8000-BA2B8000 (65536 bytes) Module \SystemRoot\system32\DRIVERS\redbook.sys (Redbook Audio Filter Driver/Microsoft Corporation) BA2B8000-BA2C7000 (61440 bytes) Module \SystemRoot\system32\DRIVERS\ks.sys (Kernel CSA Library/Microsoft Corporation) B9968000-B998B000 (143360 bytes) Module \SystemRoot\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver v1.0a/Windows ® Server 2003 DDK provider) B9940000-B9968000 (163840 bytes) Module \SystemRoot\system32\DRIVERS\fdc.sys (Floppy Disk Controller Driver/Microsoft Corporation) BA3E8000-BA3EF000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\parport.sys (Parallel Port Driver/Microsoft Corporation) B992C000-B9940000 (81920 bytes) Module \SystemRoot\system32\DRIVERS\i8042prt.sys (i8042 Port Driver/Microsoft Corporation) BA2C8000-BA2D5000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) BA3F8000-BA3FE000 (24576 bytes) Module \SystemRoot\system32\DRIVERS\mouclass.sys (Mouse Class Driver/Microsoft Corporation) BA400000-BA406000 (24576 bytes) Module \SystemRoot\system32\DRIVERS\HSFHWBS2.sys (HSF_HWB2 WDM driver/Conexant Systems, Inc.) B98ED000-B992C000 (258048 bytes) Module \SystemRoot\system32\DRIVERS\HSF_DPV.sys (HSF_DP driver/Conexant Systems, Inc.) B97FB000-B98ED000 (991232 bytes) Module \SystemRoot\system32\DRIVERS\HSF_CNXT.sys (HSF_CNXT driver/Conexant Systems, Inc.) B9749000-B97FB000 (729088 bytes) Module \SystemRoot\System32\Drivers\Modem.SYS (Modem Device Driver/Microsoft Corporation) BA418000-BA420000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\RTL8139.SYS (Realtek RTL8139 NDIS 5.0 Driver/Realtek Semiconductor Corporation) BA420000-BA426000 (24576 bytes) Module \SystemRoot\system32\DRIVERS\audstub.sys (AudStub Driver/Microsoft Corporation) BA765000-BA766000 (4096 bytes) Module \SystemRoot\system32\DRIVERS\rasl2tp.sys (RAS L2TP mini-port/call-manager driver/Microsoft Corporation) BA2D8000-BA2E5000 (53248 bytes) Module \SystemRoot\system32\DRIVERS\ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) BA578000-BA57B000 (12288 bytes) Module \SystemRoot\system32\DRIVERS\ndiswan.sys (MS PPP Framing Driver (Strong Encryption)/Microsoft Corporation) B9732000-B9749000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\raspppoe.sys (RAS PPPoE mini-port/call-manager driver/Microsoft Corporation) BA2E8000-BA2F3000 (45056 bytes) Module \SystemRoot\system32\DRIVERS\raspptp.sys (Peer-to-Peer Tunneling Protocol/Microsoft Corporation) BA2F8000-BA304000 (49152 bytes) Module \SystemRoot\system32\DRIVERS\TDI.SYS (TDI Wrapper/Microsoft Corporation) BA440000-BA445000 (20480 bytes) Module \SystemRoot\system32\DRIVERS\psched.sys (MS QoS Packet Scheduler/Microsoft Corporation) B9681000-B9692000 (69632 bytes) Module \SystemRoot\system32\DRIVERS\msgpc.sys (MS General Packet Classifier/Microsoft Corporation) BA308000-BA311000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.) BA450000-BA455000 (20480 bytes) Module \SystemRoot\system32\DRIVERS\raspti.sys (PTI DirectParallel® mini-port/call-manager driver/Microsoft Corporation) BA460000-BA465000 (20480 bytes) Module \SystemRoot\system32\DRIVERS\rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) B9651000-B9681000 (196608 bytes) Module \SystemRoot\system32\DRIVERS\termdd.sys (Terminal Server Driver/Microsoft Corporation) BA318000-BA322000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\swenum.sys (Plug and Play Software Device Enumerator/Microsoft Corporation) BA5CA000-BA5CC000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\update.sys (Update Driver/Microsoft Corporation) B95F3000-B9651000 (385024 bytes) Module \SystemRoot\system32\DRIVERS\mssmbios.sys (System Management BIOS Driver/Microsoft Corporation) BA598000-BA59C000 (16384 bytes) Module \SystemRoot\System32\Drivers\NDProxy.SYS (NDIS Proxy/Microsoft Corporation) BA188000-BA192000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) BA1B8000-BA1C7000 (61440 bytes) Module \SystemRoot\system32\DRIVERS\USBD.SYS (Universal Serial Bus Driver/Microsoft Corporation) BA5D8000-BA5DA000 (8192 bytes) Module \SystemRoot\system32\drivers\RtkHDAud.sys (Realtek® High Definition Audio Function Driver/Realtek Semiconductor Corp.) B0F9D000-B15A9000 (6340608 bytes) Module \SystemRoot\system32\drivers\portcls.sys (Port Class (Class Driver for Port/Miniport Devices)/Microsoft Corporation) B0F79000-B0F9D000 (147456 bytes) Module \SystemRoot\system32\drivers\drmk.sys (Microsoft Kernel DRM Descrambler Filter/Microsoft Corporation) BA1D8000-BA1E7000 (61440 bytes) Module \SystemRoot\System32\Drivers\Fs_Rec.SYS (File System Recognizer Driver/Microsoft Corporation) BA5E8000-BA5EA000 (8192 bytes) Module \SystemRoot\System32\Drivers\Null.SYS (NULL Driver/Microsoft Corporation) BA7CA000-BA7CB000 (4096 bytes) Module \SystemRoot\System32\Drivers\Beep.SYS (BEEP Driver/Microsoft Corporation) BA5EC000-BA5EE000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\HIDPARSE.SYS (Hid Parsing Library/Microsoft Corporation) BA370000-BA377000 (28672 bytes) Module \SystemRoot\System32\drivers\vga.sys (VGA/Super VGA Video Driver/Microsoft Corporation) BA378000-BA37E000 (24576 bytes) Module \SystemRoot\System32\Drivers\mnmdd.SYS (Frame buffer simulator/Microsoft Corporation) BA5F0000-BA5F2000 (8192 bytes) Module \SystemRoot\System32\DRIVERS\RDPCDD.sys (RDP Miniport/Microsoft Corporation) BA5F4000-BA5F6000 (8192 bytes) Module \SystemRoot\System32\Drivers\Msfs.SYS (Mailslot driver/Microsoft Corporation) BA388000-BA38D000 (20480 bytes) Module \SystemRoot\System32\Drivers\Npfs.SYS (NPFS Driver/Microsoft Corporation) BA398000-BA3A0000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\rasacd.sys (RAS Automatic Connection Driver/Microsoft Corporation) B95D7000-B95DA000 (12288 bytes) Module \SystemRoot\system32\DRIVERS\ipsec.sys (IPSec Driver/Microsoft Corporation) B0E56000-B0E69000 (77824 bytes) Module \SystemRoot\system32\DRIVERS\tcpip.sys (TCP/IP Protocol Driver/Microsoft Corporation) B0DFD000-B0E56000 (364544 bytes) Module \SystemRoot\System32\Drivers\aswFW.SYS (avast! Filtering TDI driver/AVAST Software) B0DE6000-B0DFD000 (94208 bytes) Module \SystemRoot\system32\DRIVERS\ipnat.sys (IP Network Address Translator/Microsoft Corporation) B0DC0000-B0DE6000 (155648 bytes) Module \SystemRoot\system32\DRIVERS\wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) BA1F8000-BA201000 (36864 bytes) Module \SystemRoot\System32\Drivers\aswTdi.SYS (avast! TDI Filter Driver/AVAST Software) BA208000-BA212000 (40960 bytes) Module \SystemRoot\system32\DRIVERS\netbt.sys (MBT Transport driver/Microsoft Corporation) B0D98000-B0DC0000 (163840 bytes) Module \SystemRoot\System32\drivers\afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) B0D76000-B0D98000 (139264 bytes) Module \SystemRoot\system32\DRIVERS\arp1394.sys (IP/1394 Arp Client/Microsoft Corporation) BA218000-BA227000 (61440 bytes) Module \SystemRoot\system32\DRIVERS\netbios.sys (NetBIOS interface driver/Microsoft Corporation) BA228000-BA231000 (36864 bytes) Module \SystemRoot\system32\DRIVERS\rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) B0D4B000-B0D76000 (176128 bytes) Module \SystemRoot\system32\DRIVERS\mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) B0CDB000-B0D4B000 (458752 bytes) Module \SystemRoot\System32\Drivers\Fips.SYS (FIPS Crypto Driver/Microsoft Corporation) BA238000-BA243000 (45056 bytes) Module \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) B0CB4000-B0CDB000 (159744 bytes) Module \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) B0C33000-B0C8C000 (364544 bytes) Module \SystemRoot\system32\DRIVERS\usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) BA3C0000-BA3C8000 (32768 bytes) Module \SystemRoot\system32\DRIVERS\usbscan.sys (USB Scanner Driver/Microsoft Corporation) B0F39000-B0F3D000 (16384 bytes) Module \SystemRoot\System32\Drivers\Aavmker4.SYS (avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP/AVAST Software) BA3F0000-BA3F6000 (24576 bytes) Module \SystemRoot\system32\DRIVERS\usbprint.sys (USB Printer driver/Microsoft Corporation) BA410000-BA417000 (28672 bytes) Module \SystemRoot\system32\DRIVERS\hidusb.sys (USB Miniport Driver for Input Devices/Microsoft Corporation) B0F31000-B0F34000 (12288 bytes) Module \SystemRoot\system32\DRIVERS\HIDCLASS.SYS (Hid Class Library/Microsoft Corporation) BA268000-BA271000 (36864 bytes) Module \SystemRoot\System32\Drivers\Fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation) B0BE7000-B0C0B000 (147456 bytes) Module \SystemRoot\System32\Drivers\dump_atapi.sys B0BCF000-B0BE7000 (98304 bytes) Module \SystemRoot\System32\Drivers\dump_WMILIB.SYS BA616000-BA618000 (8192 bytes) Module \SystemRoot\System32\win32k.sys (Multi-User Win32 Driver/Microsoft Corporation) BF800000-BF9C5000 (1855488 bytes) Module \SystemRoot\System32\drivers\Dxapi.sys (DirectX API Driver/Microsoft Corporation) B0CAC000-B0CAF000 (12288 bytes) Module \SystemRoot\System32\watchdog.sys (Watchdog Driver/Microsoft Corporation) BA468000-BA46D000 (20480 bytes) Module \SystemRoot\System32\drivers\dxg.sys (DirectX Graphics Driver/Microsoft Corporation) BF000000-BF012000 (73728 bytes) Module \SystemRoot\System32\drivers\dxgthk.sys (DirectX Graphics Driver Thunk/Microsoft Corporation) BA78B000-BA78C000 (4096 bytes) Module \SystemRoot\System32\ati2dvag.dll (ATI Radeon WindowsNT Display Driver/ATI Technologies Inc.) BF012000-BF065000 (339968 bytes) Module \SystemRoot\System32\ati2cqag.dll (Central Memory Manager / Queue Server Module/ATI Technologies Inc.) BF065000-BF0FE000 (626688 bytes) Module \SystemRoot\System32\atikvmag.dll (Virtual Command And Memory Manager/ATI Technologies Inc.) BF0FE000-BF182000 (540672 bytes) Module \SystemRoot\System32\atiok3x2.dll (Ring 0 x2 component/ATI Technologies Inc.) BF182000-BF1CD000 (307200 bytes) Module \SystemRoot\System32\ati3duag.dll (ati3duag.dll/ATI Technologies Inc. ) BF1CD000-BF572000 (3821568 bytes) Module \SystemRoot\System32\ativvaxx.dll (Radeon Video Acceleration Universal Driver/ATI Technologies Inc. ) BF572000-BF7FE000 (2670592 bytes) Module \SystemRoot\System32\Drivers\aswFsBlk.SYS (avast! File System Access Blocking Driver/AVAST Software) AE80F000-AE812000 (12288 bytes) Module \SystemRoot\system32\DRIVERS\ndisuio.sys (NDIS User mode I/O Driver/Microsoft Corporation) AE79F000-AE7A3000 (16384 bytes) Module \SystemRoot\system32\DRIVERS\pnarp.sys (Address Resolution Protocol Driver/Cisco Systems, Inc.) BA3D8000-BA3DD000 (20480 bytes) Module \SystemRoot\system32\DRIVERS\purendis.sys (NDIS Relay Driver/Cisco Systems, Inc.) BA408000-BA40D000 (20480 bytes) Module \SystemRoot\System32\Drivers\aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software) AE548000-AE55F000 (94208 bytes) Module \SystemRoot\System32\Drivers\Cdfs.SYS (CD-ROM File System Driver/Microsoft Corporation) AE667000-AE677000 (65536 bytes) Module \SystemRoot\system32\drivers\wdmaud.sys (MMSYSTEM Wave/Midi API mapper/Microsoft Corporation) AE083000-AE098000 (86016 bytes) Module \SystemRoot\system32\drivers\sysaudio.sys (System Audio WDM Filter/Microsoft Corporation) AE2F0000-AE2FF000 (61440 bytes) Module \SystemRoot\system32\DRIVERS\mrxdav.sys (Windows NT WebDav Minirdr/Microsoft Corporation) ADF40000-ADF6D000 (184320 bytes) Module \SystemRoot\System32\Drivers\ParVdm.SYS (VDM Parallel Driver/Microsoft Corporation) BA62E000-BA630000 (8192 bytes) Module \SystemRoot\system32\DRIVERS\srv.sys (Server driver/Microsoft Corporation) ADDF8000-ADE50000 (360448 bytes) Module \SystemRoot\system32\DRIVERS\mdmxsdk.sys (Diagnostic Interface x86 Driver/Conexant) ADF08000-ADF0C000 (16384 bytes) Module \SystemRoot\System32\Drivers\HTTP.sys (HTTP Protocol Stack/Microsoft Corporation) ADA47000-ADA88000 (266240 bytes) Module \SystemRoot\System32\Drivers\aswRdr.SYS (avast! TDI RDR Driver/AVAST Software) AE380000-AE385000 (20480 bytes) Module \SystemRoot\system32\DRIVERS\mcdbus.sys (MagicISO SCSI Host Controller/MagicISO, Inc.) AD69B000-AD6B8000 (118784 bytes) Module \SystemRoot\system32\DRIVERS\SCSIPORT.SYS (SCSI Port Driver/Microsoft Corporation) AD683000-AD69B000 (98304 bytes) Module \??\D:\DOCUME~1\Mike\LOCALS~1\Temp\awnoaaod.sys (GMER) AD5A1000-AD5B8000 (94208 bytes) Module \WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation)

—- Processes - GMER 1.0.15 —- Process System Idle 0 Process System 4 Process D:\WINDOWS\Explorer.EXE (Windows Explorer/Microsoft Corporation) 216 Library D:\WINDOWS\Explorer.EXE (Windows Explorer/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\BROWSEUI.dll (Shell Browser UI Library/Microsoft Corporation) 0x75F80000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\SHDOCVW.dll (Shell Doc Object and Control Library/Microsoft Corporation) 0x7E290000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\CRYPTUI.dll (Microsoft Trust UI Provider/Microsoft Corporation) 0x754D0000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\appHelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft SharePoint Workspace Extensions/Microsoft Corporation) 0x49460000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78520000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x78480000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ATL90.DLL (ATL Module for Windows (Unicode)/Microsoft Corporation) 0x78E20000 Library D:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf 0x10000000 Library D:\PROGRA~1\MICROS~2\Office14\1033\GrooveIntlResource.dll 0x01350000 Library D:\WINDOWS\System32\cscui.dll (Client Side Caching UI/Microsoft Corporation) 0x77A20000 Library D:\WINDOWS\System32\CSCDLL.dll (Offline Network Agent/Microsoft Corporation) 0x76600000 Library D:\Program Files\Alwil Software\Avast5\snxPlugins.dll (DLL registration plugins extension/AVAST Software) 0x64D80000 Library D:\WINDOWS\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x7D1E0000 Library D:\WINDOWS\system32\themeui.dll (Windows Theme API/Microsoft Corporation) 0x5BA60000 Library D:\WINDOWS\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x76380000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x01C90000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\msxml3.dll (MSXML 3.0 SP10/Microsoft Corporation) 0x74980000 Library D:\WINDOWS\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x7E1E0000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\LINKINFO.dll (Windows Volume Tracking/Microsoft Corporation) 0x76980000 Library D:\WINDOWS\system32\ntshrui.dll (Shell extensions for sharing/Microsoft Corporation) 0x76990000 Library D:\WINDOWS\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x76B20000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\NETSHELL.dll (Network Connections Shell/Microsoft Corporation) 0x76400000 Library D:\WINDOWS\system32\credui.dll (Credential Manager User Interface/Microsoft Corporation) 0x76C00000 Library D:\WINDOWS\system32\dot3api.dll (802.3 Autoconfiguration API/Microsoft Corporation) 0x478C0000 Library D:\WINDOWS\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library D:\WINDOWS\system32\dot3dlg.dll (802.3 UI Helper/Microsoft Corporation) 0x736D0000 Library D:\WINDOWS\system32\OneX.DLL (IEEE 802.1X supplicant library/Microsoft Corporation) 0x5DCA0000 Library D:\WINDOWS\system32\WTSAPI32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\eappcfg.dll (Eap Peer Config/Microsoft Corporation) 0x745B0000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\eappprxy.dll (Microsoft EAPHost Peer Client DLL/Microsoft Corporation) 0x5DCD0000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\webcheck.dll (Web Site Monitor/Microsoft Corporation) 0x74B30000 Library D:\WINDOWS\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Library D:\WINDOWS\system32\stobject.dll (Systray shell service object/Microsoft Corporation) 0x76280000 Library D:\WINDOWS\system32\BatMeter.dll (Battery Meter Helper DLL/Microsoft Corporation) 0x74AF0000 Library D:\WINDOWS\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74AD0000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x71B20000 Library D:\WINDOWS\System32\drprov.dll (Microsoft Terminal Server Network Provider/Microsoft Corporation) 0x75F60000 Library D:\WINDOWS\System32\ntlanman.dll (Microsoft® Lan Manager/Microsoft Corporation) 0x71C10000 Library D:\WINDOWS\System32\NETUI0.dll (NT LM UI Common Code - GUI Classes/Microsoft Corporation) 0x71CD0000 Library D:\WINDOWS\System32\NETUI1.dll (NT LM UI Common Code - Networking classes/Microsoft Corporation) 0x71C90000 Library D:\WINDOWS\System32\NETRAP.dll (Net Remote Admin Protocol DLL/Microsoft Corporation) 0x71C80000 Library D:\WINDOWS\System32\davclnt.dll (Web DAV Client DLL/Microsoft Corporation) 0x75F70000 Library D:\WINDOWS\system32\wdmaud.drv (WDM Audio driver mapper/Microsoft Corporation) 0x72D20000 Library D:\WINDOWS\system32\msacm32.drv (Microsoft Sound Mapper/Microsoft Corporation) 0x72D10000 Library D:\WINDOWS\system32\midimap.dll (Microsoft MIDI Mapper/Microsoft Corporation) 0x77BD0000 Library D:\WINDOWS\system32\browselc.dll (Shell Browser UI Library/Microsoft Corporation) 0x71600000 Library D:\PROGRA~1\SPYBOT~1\SDHelper.dll (SBSD IE Protection/Safer Networking Limited) 0x03480000 Library D:\WINDOWS\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x763B0000 Library D:\WINDOWS\system32\winspool.drv (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\faultrep.dll (Windows Error Reporting/Microsoft Corporation) 0x69450000 Library D:\WINDOWS\system32\olepro32.dll (Microsoft Corporation) 0x5EDD0000 Library D:\WINDOWS\system32\jsproxy.dll (JScript Proxy Auto-Configuration/Microsoft Corporation) 0x65AF0000 Library D:\WINDOWS\system32\MSFTEDIT.DLL (Rich Text Edit Control, v4.1/Microsoft Corporation) 0x4B400000 Library D:\WINDOWS\system32\DUSER.dll (Windows DirectUser Engine/Microsoft Corporation) 0x6C1B0000 Library D:\WINDOWS\system32\MSGINA.dll (Windows NT Logon GINA DLL/Microsoft Corporation) 0x75970000 Library D:\WINDOWS\system32\ODBC32.dll (Microsoft Data Access - ODBC Driver Manager/Microsoft Corporation) 0x74320000 Library D:\WINDOWS\system32\odbcint.dll (Microsoft Data Access - ODBC Resources/Microsoft Corporation) 0x026B0000 Library D:\WINDOWS\system32\wiashext.dll (Imaging Devices Shell Folder UI/Microsoft Corporation) 0x593F0000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x4EC50000 Library D:\Program Files\Microsoft Office\Office14\msohevi.dll (Microsoft Office 2010 component/Microsoft Corporation) 0x6BD10000 Library D:\WINDOWS\system32\MLANG.dll (Multi Language Support DLL/Microsoft Corporation) 0x75CF0000 Library D:\Program Files\WinZip\wzshlstb.dll (WinZip Shell Extension DLL/WinZip Computing, S.L.) 0x00CE0000 Library D:\Program Files\Alwil Software\Avast5\ashShell.dll (avast! Shell Extension/AVAST Software) 0x64E40000 Library D:\WINDOWS\system32\diskcopy.dll (Windows DiskCopy/Microsoft Corporation) 0x6CC70000 Library D:\Program Files\Pure Networks\Network Magic\nmspce2.dll (nmspce Dynamic Link Library/Cisco Systems, Inc.) 0x676A0000 Library D:\WINDOWS\system32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x74C80000 Library D:\WINDOWS\system32\RICHED20.dll (Rich Text Edit Control, v3.0/Microsoft Corporation) 0x74E30000 Library D:\Program Files\Pure Networks\Network Magic\nmrsrc.dll (Network Magic Resource Dynamic Link Library/Cisco Systems, Inc.) 0x04230000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Pure Service Provider DLL/Cisco Systems, Inc.) 0x669F0000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\11.2.09195.1.nmcorePS.dll (nmcoreps Dynamic Link Library/Cisco Systems, Inc.) 0x67050000 Library D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (PDF Shell Extension/Adobe Systems, Inc.) 0x03CB0000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78130000 Process D:\WINDOWS\system32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) 348 Library D:\WINDOWS\system32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\SPOOLSS.DLL (Spooler SubSystem DLL/Microsoft Corporation) 0x742E0000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\WINDOWS\system32\localspl.dll (Local Spooler DLL/Microsoft Corporation) 0x75BB0000 Library D:\WINDOWS\system32\sfc_os.dll (Windows File Protection/Microsoft Corporation) 0x76C60000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\winspool.drv (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\netapi32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\lxdnlmpm.dll (Printer Communication System/ ) 0x51000000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\cfgMgr32.dll (Configuration Manager Forwarder DLL/Microsoft Corporation) 0x74AE0000 Library D:\WINDOWS\system32\cnbjmon.dll (Langage Monitor for Canon Bubble-Jet Printer/Microsoft Corporation) 0x742A0000 Library D:\WINDOWS\system32\pjlmon.dll (PJL Language monitor/Microsoft Corporation) 0x74280000 Library D:\WINDOWS\system32\tcpmon.dll (Standard TCP/IP Port Monitor DLL/Microsoft Corporation) 0x72400000 Library D:\WINDOWS\system32\usbmon.dll (Standard Dynamic Printing Port Monitor DLL/Microsoft Corporation) 0x723F0000 Library D:\WINDOWS\System32\spool\PRTPROCS\W32X86\lxdndrpp.dll 0x10000000 Library D:\WINDOWS\System32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x76FB0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\win32spl.dll (32-bit Spooler API DLL/Microsoft Corporation) 0x75C10000 Library D:\WINDOWS\system32\NETRAP.dll (Net Remote Admin Protocol DLL/Microsoft Corporation) 0x71C80000 Library D:\WINDOWS\system32\NTDSAPI.dll (NT5DS/Microsoft Corporation) 0x767A0000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\inetpp.dll (Internet Print Provider DLL/Microsoft Corporation) 0x74300000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x01010000 Process D:\WINDOWS\RTHDCPL.EXE (Realtek HD Audio Control Panel/Realtek Semiconductor Corp.) 520 Library D:\WINDOWS\RTHDCPL.EXE (Realtek HD Audio Control Panel/Realtek Semiconductor Corp.) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\DSOUND.DLL (DirectSound/Microsoft Corporation) 0x73F10000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\HHCTRL.OCX (Microsoft® HTML Help Control/Microsoft Corporation) 0x7E4B0000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\COMCTL32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\SETUPAPI.DLL (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\MPR.DLL (Multiple Provider Router DLL/Microsoft Corporation) 0x71B20000 Library D:\WINDOWS\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\COMDLG32.DLL (Common Dialogs DLL/Microsoft Corporation) 0x763B0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\wdmaud.drv (WDM Audio driver mapper/Microsoft Corporation) 0x72D20000 Library D:\WINDOWS\system32\msacm32.drv (Microsoft Sound Mapper/Microsoft Corporation) 0x72D10000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\midimap.dll (Microsoft MIDI Mapper/Microsoft Corporation) 0x77BD0000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\KsUser.dll (User CSA Library/Microsoft Corporation) 0x73EE0000 Process D:\Program Files\Alwil Software\Avast5\avastUI.exe (avast! Antivirus/AVAST Software) 580 Library D:\Program Files\Alwil Software\Avast5\avastUI.exe (avast! Antivirus/AVAST Software) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\Program Files\Alwil Software\Avast5\aswUtil.dll (avast! Utility library/AVAST Software) 0x64780000 Library D:\Program Files\Alwil Software\Avast5\ashBase.dll (Basic Functionality Module/AVAST Software) 0x64500000 Library D:\WINDOWS\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\Program Files\Alwil Software\Avast5\aswEngLdr.dll (Antivirus engine loader/AVAST Software) 0x64BC0000 Library D:\Program Files\Alwil Software\Avast5\aswCmnOS.dll (Antivirus HW dependent library/AVAST Software) 0x64C00000 Library D:\Program Files\Alwil Software\Avast5\aswCmnIS.dll (Antivirus independent functions/AVAST Software) 0x64C40000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78520000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x78480000 Library D:\Program Files\Alwil Software\Avast5\aswCmnBS.dll (Common functions/AVAST Software) 0x64C80000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\Program Files\Alwil Software\Avast5\ashTask.dll (Task Handling Module/AVAST Software) 0x64800000 Library D:\Program Files\Alwil Software\Avast5\aswAux.dll (avast! Auxiliary Library/AVAST Software) 0x64580000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\Program Files\Alwil Software\Avast5\aswLog.dll (avast! Log library/AVAST Software) 0x64700000 Library D:\Program Files\Alwil Software\Avast5\aswSqLt.dll (avast! SQLite library/AVAST Software) 0x64840000 Library D:\Program Files\Alwil Software\Avast5\aswProperty.dll (avast! Property Storage library/AVAST Software) 0x64740000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll (MFCDLL Shared Library - Retail Version/Microsoft Corporation) 0x789E0000 Library D:\WINDOWS\system32\COMCTL32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x76380000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x74C80000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\MFC90ENU.DLL (MFC Language Specific Resources/Microsoft Corporation) 0x5D360000 Library D:\WINDOWS\system32\dbghelp.dll (Windows Image Helper/Microsoft Corporation) 0x59A60000 Library D:\Program Files\Alwil Software\Avast5\1033\Base.dll (avast! English Basic Module/AVAST Software) 0x66080000 Library D:\Program Files\Alwil Software\Avast5\afwGeoIP.dll (avast! GeoIP library/AVAST Software) 0x67180000 Library D:\WINDOWS\system32\icmp.dll (ICMP DLL/Microsoft Corporation) 0x74290000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\usp10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x74D90000 Library D:\WINDOWS\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x763B0000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\Program Files\Alwil Software\Avast5\aswData.dll (avast! UI Layer library/AVAST Software) 0x64680000 Library D:\Program Files\Alwil Software\Avast5\ashTaskEx.dll (avast! TaskEx library/AVAST Software) 0x647C0000 Library D:\Program Files\Alwil Software\Avast5\Aavm4h.dll (avast! Asynchronous Virus Monitor (AAVM)/AVAST Software) 0x65000000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\Program Files\Alwil Software\Avast5\AavmRpch.dll (avast! AAVM Remote Procedure Call Library/AVAST Software) 0x65400000 Library D:\Program Files\Alwil Software\Avast5\snxPlugins.dll (DLL registration plugins extension/AVAST Software) 0x64D80000 Library D:\Program Files\Alwil Software\Avast5\afwCore.dll (avast! Firewall Core library/AVAST Software) 0x67000000 Library D:\Program Files\Alwil Software\Avast5\afwCoreClient.dll (avast! Firewall Core Client library/AVAST Software) 0x67080000 Library D:\Program Files\Alwil Software\Avast5\afwRpc.dll (avast! firewall Rpc/AVAST Software) 0x671C0000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\Program Files\Alwil Software\Avast5\1033\UILangRes.dll (UILangRes/AVAST Software) 0x660C0000 Library D:\Program Files\Alwil Software\Avast5\CommonRes.dll (Common UI resources/AVAST Software) 0x66100000 Library D:\WINDOWS\system32\wdmaud.drv (WDM Audio driver mapper/Microsoft Corporation) 0x72D20000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\msacm32.drv (Microsoft Sound Mapper/Microsoft Corporation) 0x72D10000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\midimap.dll (Microsoft MIDI Mapper/Microsoft Corporation) 0x77BD0000 Library D:\WINDOWS\system32\l3codeca.acm (MPEG Layer-3 Audio Codec for MSACM/Fraunhofer Institut Integrierte Schaltungen IIS) 0x3D520000 Process D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Pure Networks Platform Assistant/Cisco Systems, Inc.) 592 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Pure Networks Platform Assistant/Cisco Systems, Inc.) 0x65E00000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\version.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00AD0000 Library D:\WINDOWS\system32\userenv.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\netapi32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x75E60000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\SensApi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x722B0000 Library D:\WINDOWS\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x4D4F0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x75150000 Library D:\WINDOWS\system32\ws2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\WINDOWS\system32\RASAPI32.DLL (Remote Access API/Microsoft Corporation) 0x76EE0000 Library D:\WINDOWS\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x76E90000 Library D:\WINDOWS\system32\TAPI32.dll (Microsoft® Windows™ Telephony API Client DLL/Microsoft Corporation) 0x76EB0000 Library D:\WINDOWS\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxthl.dll (Pure Networks Platform Helper Application Dynamic Link Library/Cisco Systems, Inc.) 0x68630000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\WTSAPI32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxt.dll (Pure Networks Platform Helper Application Dynamic Link Library/Cisco Systems, Inc.) 0x68570000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Pure Service Provider DLL/Cisco Systems, Inc.) 0x669F0000 Library D:\WINDOWS\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x7E1E0000 Library D:\WINDOWS\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x71D40000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\11.2.09195.1.nmcorePS.dll (nmcoreps Dynamic Link Library/Cisco Systems, Inc.) 0x67050000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\11.2.09195.1.nmctxtPS.dll (nmctxtps Dynamic Link Library/Cisco Systems, Inc.) 0x009B0000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\CAntiVirusCOM.dll 0x10000000 Library D:\WINDOWS\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x71B20000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x78480000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78520000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x74EF0000 Library D:\WINDOWS\system32\wbem\wbemcomn.dll (WMI/Microsoft Corporation) 0x75290000 Library D:\WINDOWS\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x74ED0000 Library D:\WINDOWS\system32\wbem\fastprox.dll (WMI/Microsoft Corporation) 0x75690000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\NTDSAPI.dll (NT5DS/Microsoft Corporation) 0x767A0000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\CFireWallCOM.dll 0x017A0000 Process D:\Program Files\Pure Networks\Network Magic\nmapp.exe (Network Magic Application/Cisco Systems, Inc.) 600 Library D:\Program Files\Pure Networks\Network Magic\nmapp.exe (Network Magic Application/Cisco Systems, Inc.) 0x65A00000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\version.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00AD0000 Library D:\WINDOWS\system32\userenv.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\netapi32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x75E60000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\SensApi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x722B0000 Library D:\WINDOWS\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x4D4F0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x75150000 Library D:\WINDOWS\system32\ws2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\WINDOWS\system32\RASAPI32.DLL (Remote Access API/Microsoft Corporation) 0x76EE0000 Library D:\WINDOWS\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x76E90000 Library D:\WINDOWS\system32\TAPI32.dll (Microsoft® Windows™ Telephony API Client DLL/Microsoft Corporation) 0x76EB0000 Library D:\WINDOWS\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\Program Files\Pure Networks\Network Magic\nmapplb.dll (Network Magic Application Dynamic Link Library/Cisco Systems, Inc.) 0x66B00000 Library D:\WINDOWS\system32\COMDLG32.dll (Common Dialogs DLL/Microsoft Corporation) 0x763B0000 Library D:\WINDOWS\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x76380000 Library D:\WINDOWS\system32\OLEACC.dll (Active Accessibility Core Component/Microsoft Corporation) 0x74C80000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\RICHED20.dll (Rich Text Edit Control, v3.0/Microsoft Corporation) 0x74E30000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) 0x4EC50000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\Wintrust.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\Program Files\Pure Networks\Network Magic\nmrsrc.dll (Network Magic Resource Dynamic Link Library/Cisco Systems, Inc.) 0x10000000 Library D:\WINDOWS\system32\Wtsapi32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Pure Service Provider DLL/Cisco Systems, Inc.) 0x669F0000 Library D:\WINDOWS\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x7E1E0000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\11.2.09195.1.nmcorePS.dll (nmcoreps Dynamic Link Library/Cisco Systems, Inc.) 0x67050000 Library D:\WINDOWS\system32\shdocvw.dll (Shell Doc Object and Control Library/Microsoft Corporation) 0x7E290000 Library D:\WINDOWS\system32\CRYPTUI.dll (Microsoft Trust UI Provider/Microsoft Corporation) 0x754D0000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\shdoclc.dll (Shell Doc Object and Control Library/Microsoft Corporation) 0x71800000 Library D:\WINDOWS\system32\mshtml.dll (Microsoft ® HTML Viewer/Microsoft Corporation) 0x7DC30000 Library D:\WINDOWS\system32\msls31.dll (Microsoft Line Services library file/Microsoft Corporation) 0x746C0000 Library D:\WINDOWS\system32\mlang.dll (Multi Language Support DLL/Microsoft Corporation) 0x75CF0000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\msimtf.dll (Active IMM Server DLL/Microsoft Corporation) 0x746F0000 Library D:\WINDOWS\system32\appHelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library D:\WINDOWS\system32\inetcomm.dll (Microsoft Internet Messaging API/Microsoft Corporation) 0x76150000 Library D:\WINDOWS\system32\MSOERT2.dll (Microsoft Outlook Express RT Lib/Microsoft Corporation) 0x76880000 Library D:\WINDOWS\system32\inetres.dll (Microsoft Internet Messaging API Resources/Microsoft Corporation) 0x02A70000 Process D:\Program Files\Common Files\Java\Java Update\jusched.exe (Java™ Update Scheduler/Sun Microsystems, Inc.) 632 Library D:\Program Files\Common Files\Java\Java Update\jusched.exe (Java™ Update Scheduler/Sun Microsystems, Inc.) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Process D:\WINDOWS\system32\ctfmon.exe (CTF Loader/Microsoft Corporation) 656 Library D:\WINDOWS\system32\ctfmon.exe (CTF Loader/Microsoft Corporation) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\MSUTB.dll (MSUTB Server DLL/Microsoft Corporation) 0x5FC10000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Process D:\Documents and Settings\Mike\Application Data\fbx.exe (noOrg) 668 Library D:\Documents and Settings\Mike\Application Data\fbx.exe (noOrg) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\MSVBVM60.DLL (Visual Basic Virtual Machine/Microsoft Corporation) 0x73420000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x7E720000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x4D4F0000 Library D:\WINDOWS\system32\ws2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Process D:\WINDOWS\System32\smss.exe (Windows NT Session Manager/Microsoft Corporation) 784 Library D:\WINDOWS\System32\smss.exe (Windows NT Session Manager/Microsoft Corporation) 0x48580000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Process D:\WINDOWS\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 836 Library D:\WINDOWS\system32\csrss.exe (Client Server Runtime Process/Microsoft Corporation) 0x4A680000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\CSRSRV.dll (Client Server Runtime Process/Microsoft Corporation) 0x75B40000 Library D:\WINDOWS\system32\basesrv.dll (Windows NT BASE API Server DLL/Microsoft Corporation) 0x75B50000 Library D:\WINDOWS\system32\winsrv.dll (Windows Server DLL/Microsoft Corporation) 0x75B60000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\KERNEL32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\sxs.dll (Fusion 2.5/Microsoft Corporation) 0x7E720000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Process D:\WINDOWS\system32\winlogon.exe (Windows NT Logon Application/Microsoft Corporation) 868 Library D:\WINDOWS\system32\winlogon.exe (Windows NT Logon Application/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x776C0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\NDdeApi.dll (Network DDE Share Management APIs/Microsoft Corporation) 0x75940000 Library D:\WINDOWS\system32\PROFMAP.dll (Userenv/Microsoft Corporation) 0x75930000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\REGAPI.dll (Registry Configuration APIs/Microsoft Corporation) 0x76BC0000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\MSGINA.dll (Windows NT Logon GINA DLL/Microsoft Corporation) 0x75970000 Library D:\WINDOWS\system32\COMCTL32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\ODBC32.dll (Microsoft Data Access - ODBC Driver Manager/Microsoft Corporation) 0x74320000 Library D:\WINDOWS\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x763B0000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\odbcint.dll (Microsoft Data Access - ODBC Resources/Microsoft Corporation) 0x00930000 Library D:\WINDOWS\system32\SHSVCS.dll (Windows Shell Services Dll/Microsoft Corporation) 0x776E0000 Library D:\WINDOWS\system32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x76BB0000 Library D:\WINDOWS\system32\sfc_os.dll (Windows File Protection/Microsoft Corporation) 0x76C60000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\Apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\WINSCARD.DLL (Microsoft Smart Card API/Microsoft Corporation) 0x723D0000 Library D:\WINDOWS\system32\WTSAPI32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\sxs.dll (Fusion 2.5/Microsoft Corporation) 0x7E720000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\Ati2evxx.dll (ATI External Event Utility DLL Module/ATI Technologies Inc.) 0x10000000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\cscdll.dll (Offline Network Agent/Microsoft Corporation) 0x76600000 Library D:\WINDOWS\System32\dimsntfy.dll (DIMS Notification Handler/Microsoft Corporation) 0x47020000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\WlNotify.dll (Common DLL to receive Winlogon notifications/Microsoft Corporation) 0x75950000 Library D:\WINDOWS\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x71B20000 Library D:\WINDOWS\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\WgaLogon.dll (Windows Genuine Advantage Notifications/Microsoft Corporation) 0x02060000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\msv1_0.dll (Microsoft Authentication Package v1.0/Microsoft Corporation) 0x77C70000 Library D:\WINDOWS\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x76790000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\cscui.dll (Client Side Caching UI/Microsoft Corporation) 0x77A20000 Library D:\WINDOWS\system32\MPRAPI.dll (Windows NT MP Router Administration DLL/Microsoft Corporation) 0x76D40000 Library D:\WINDOWS\system32\ACTIVEDS.dll (ADs Router Layer DLL/Microsoft Corporation) 0x77CC0000 Library D:\WINDOWS\system32\adsldpc.dll (ADs LDAP Provider C DLL/Microsoft Corporation) 0x76E10000 Library D:\WINDOWS\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x76B20000 Library D:\WINDOWS\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x01660000 Library D:\WINDOWS\system32\wdmaud.drv (WDM Audio driver mapper/Microsoft Corporation) 0x72D20000 Library D:\WINDOWS\system32\msacm32.drv (Microsoft Sound Mapper/Microsoft Corporation) 0x72D10000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\midimap.dll (Microsoft MIDI Mapper/Microsoft Corporation) 0x77BD0000 Library D:\WINDOWS\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x74EF0000 Library D:\WINDOWS\system32\wbem\wbemcomn.dll (WMI/Microsoft Corporation) 0x75290000 Library D:\WINDOWS\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x74ED0000 Library D:\WINDOWS\system32\wbem\fastprox.dll (WMI/Microsoft Corporation) 0x75690000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\NTDSAPI.dll (NT5DS/Microsoft Corporation) 0x767A0000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\system32\msxml3.dll (MSXML 3.0 SP10/Microsoft Corporation) 0x74980000 Process D:\WINDOWS\system32\services.exe (Services and Controller app/Microsoft Corporation) 916 Library D:\WINDOWS\system32\services.exe (Services and Controller app/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\NCObjAPI.DLL (Microsoft Corporation) 0x5F770000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\SCESRV.dll (Windows Security Configuration Editor Engine/Microsoft Corporation) 0x7DBD0000 Library D:\WINDOWS\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x776C0000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\umpnpmgr.dll (User-mode Plug-and-Play Service/Microsoft Corporation) 0x7DBA0000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcAdProc.dll (Windows Compatibility DLL/Microsoft Corporation) 0x47260000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\Apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\eventlog.dll (Event Logging Service/Microsoft Corporation) 0x77B70000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\wtsapi32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x01380000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x75150000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Process D:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) 928 Library D:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\LSASRV.dll (LSA Server DLL/Microsoft Corporation) 0x75730000 Library D:\WINDOWS\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x71B20000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\NTDSAPI.dll (NT5DS/Microsoft Corporation) 0x767A0000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\SAMSRV.dll (SAM Server DLL/Microsoft Corporation) 0x74440000 Library D:\WINDOWS\system32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x76790000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\msprivs.dll (Microsoft Privilege Translations/Microsoft Corporation) 0x4D200000 Library D:\WINDOWS\system32\kerberos.dll (Kerberos Security Package/Microsoft Corporation) 0x71CF0000 Library D:\WINDOWS\system32\msv1_0.dll (Microsoft Authentication Package v1.0/Microsoft Corporation) 0x77C70000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\netlogon.dll (Net Logon Services DLL/Microsoft Corporation) 0x744B0000 Library D:\WINDOWS\system32\w32time.dll (Windows Time Service/Microsoft Corporation) 0x767C0000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\schannel.dll (TLS / SSL Security Provider/Microsoft Corporation) 0x767F0000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\wdigest.dll (Microsoft Digest Access/Microsoft Corporation) 0x7DFC0000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\setupapi.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\scecli.dll (Windows Security Configuration Editor Client Engine/Microsoft Corporation) 0x74410000 Library D:\WINDOWS\system32\ipsecsvc.dll (Windows IPSec SPD Server DLL/Microsoft Corporation) 0x743E0000 Library D:\WINDOWS\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x776C0000 Library D:\WINDOWS\system32\oakley.DLL (Oakley Key Manager/Microsoft Corporation) 0x75D90000 Library D:\WINDOWS\system32\WINIPSEC.DLL (Windows IPSec SPD Client DLL/Microsoft Corporation) 0x74370000 Library D:\WINDOWS\system32\pstorsvc.dll (Protected storage server/Microsoft Corporation) 0x743A0000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\WINDOWS\system32\psbase.dll (Protected Storage default provider/Microsoft Corporation) 0x743C0000 Library D:\WINDOWS\system32\dssenh.dll (Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider/Microsoft Corporation) 0x68100000 Process D:\WINDOWS\system32\Ati2evxx.exe (ATI External Event Utility EXE Module/ATI Technologies Inc.) 1108 Library D:\WINDOWS\system32\Ati2evxx.exe (ATI External Event Utility EXE Module/ATI Technologies Inc.) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\wtsapi32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\powrprof.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74AD0000 Library D:\WINDOWS\system32\cfgMgr32.dll (Configuration Manager Forwarder DLL/Microsoft Corporation) 0x74AE0000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\Ati2edxx.dll (ati2edxx/ATI Technologies, Inc.) 0x003C0000 Library D:\WINDOWS\system32\atipdlxx.dll (ATI Desktop CWDDEDI DLL/ATI Technologies, Inc.) 0x10000000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Process D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 1128 Library D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library d:\windows\system32\rpcss.dll (Distributed COM Services/Microsoft Corporation) 0x76A80000 Library d:\windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library d:\windows\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00670000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\Apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library d:\windows\system32\termsrv.dll (Terminal Server Service/Microsoft Corporation) 0x760F0000 Library d:\windows\system32\ICAAPI.dll (DLL Interface to TermDD Device Driver/Microsoft Corporation) 0x74F70000 Library d:\windows\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library d:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x776C0000 Library d:\windows\system32\mstlsapi.dll (Microsoft® Terminal Server Licensing/Microsoft Corporation) 0x75110000 Library d:\windows\system32\ACTIVEDS.dll (ADs Router Layer DLL/Microsoft Corporation) 0x77CC0000 Library d:\windows\system32\adsldpc.dll (ADs LDAP Provider C DLL/Microsoft Corporation) 0x76E10000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library d:\windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x76B20000 Library D:\WINDOWS\system32\REGAPI.dll (Registry Configuration APIs/Microsoft Corporation) 0x76BC0000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Process D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 1260 Library D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library d:\windows\system32\rpcss.dll (Distributed COM Services/Microsoft Corporation) 0x76A80000 Library d:\windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library d:\windows\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00670000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x76FB0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Process D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 1360 Library D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\System32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\System32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\System32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\System32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\System32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\System32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\System32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00630000 Library d:\windows\system32\shsvcs.dll (Windows Shell Services Dll/Microsoft Corporation) 0x776E0000 Library D:\WINDOWS\System32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library d:\windows\system32\dhcpcsvc.dll (DHCP Client Service/Microsoft Corporation) 0x7D4B0000 Library d:\windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library d:\windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library d:\windows\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library d:\windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\System32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library d:\windows\system32\wzcsvc.dll (Wireless Zero Configuration Service/Microsoft Corporation) 0x7DB10000 Library d:\windows\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library d:\windows\system32\WMI.dll (WMI DC and DP functionality/Microsoft Corporation) 0x76D30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library d:\windows\system32\EapolQec.dll (Microsoft EAPOL NAP Enforcement Client/Microsoft Corporation) 0x72810000 Library d:\windows\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x76B20000 Library d:\windows\system32\QUtil.dll (Quarantine Utilities/Microsoft Corporation) 0x726C0000 Library d:\windows\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library d:\windows\system32\dot3api.dll (802.3 Autoconfiguration API/Microsoft Corporation) 0x478C0000 Library d:\windows\system32\WTSAPI32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library d:\windows\system32\ESENT.dll (Server Database Storage Engine/Microsoft Corporation) 0x606B0000 Library D:\WINDOWS\System32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\System32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\System32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\System32\rastls.dll (Remote Access PPP EAP-TLS/Microsoft Corporation) 0x76B70000 Library D:\WINDOWS\system32\CRYPTUI.dll (Microsoft Trust UI Provider/Microsoft Corporation) 0x754D0000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\System32\MPRAPI.dll (Windows NT MP Router Administration DLL/Microsoft Corporation) 0x76D40000 Library D:\WINDOWS\System32\ACTIVEDS.dll (ADs Router Layer DLL/Microsoft Corporation) 0x77CC0000 Library D:\WINDOWS\System32\adsldpc.dll (ADs LDAP Provider C DLL/Microsoft Corporation) 0x76E10000 Library D:\WINDOWS\System32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\System32\RASAPI32.dll (Remote Access API/Microsoft Corporation) 0x76EE0000 Library D:\WINDOWS\System32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x76E90000 Library D:\WINDOWS\System32\TAPI32.dll (Microsoft® Windows™ Telephony API Client DLL/Microsoft Corporation) 0x76EB0000 Library D:\WINDOWS\System32\SCHANNEL.dll (TLS / SSL Security Provider/Microsoft Corporation) 0x767F0000 Library D:\WINDOWS\System32\WinSCard.dll (Microsoft Smart Card API/Microsoft Corporation) 0x723D0000 Library D:\WINDOWS\System32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\System32\raschap.dll (Remote Access PPP CHAP/Microsoft Corporation) 0x76BD0000 Library D:\WINDOWS\system32\msv1_0.dll (Microsoft Authentication Package v1.0/Microsoft Corporation) 0x77C70000 Library D:\WINDOWS\System32\cryptdll.dll (Cryptography Manager/Microsoft Corporation) 0x76790000 Library d:\windows\system32\schedsvc.dll (Task Scheduler Engine/Microsoft Corporation) 0x77300000 Library d:\windows\system32\NTDSAPI.dll (NT5DS/Microsoft Corporation) 0x767A0000 Library D:\WINDOWS\System32\MSIDLE.DLL (User Idle Monitor/Microsoft Corporation) 0x74F50000 Library d:\windows\system32\audiosrv.dll (Windows Audio Service/Microsoft Corporation) 0x708B0000 Library d:\windows\system32\wkssvc.dll (Workstation Service DLL/Microsoft Corporation) 0x76E40000 Library d:\windows\system32\qmgr.dll (Background Intelligent Transfer Service/Microsoft Corporation) 0x5B9F0000 Library D:\WINDOWS\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x71B20000 Library d:\windows\system32\SHFOLDER.dll (Shell Folder Service/Microsoft Corporation) 0x76780000 Library d:\windows\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x4D4F0000 Library D:\WINDOWS\System32\netman.dll (Network Connections Manager/Microsoft Corporation) 0x77D00000 Library D:\WINDOWS\System32\netshell.dll (Network Connections Shell/Microsoft Corporation) 0x76400000 Library D:\WINDOWS\System32\credui.dll (Credential Manager User Interface/Microsoft Corporation) 0x76C00000 Library D:\WINDOWS\System32\dot3dlg.dll (802.3 UI Helper/Microsoft Corporation) 0x736D0000 Library D:\WINDOWS\System32\OneX.DLL (IEEE 802.1X supplicant library/Microsoft Corporation) 0x5DCA0000 Library D:\WINDOWS\System32\eappcfg.dll (Eap Peer Config/Microsoft Corporation) 0x745B0000 Library D:\WINDOWS\System32\eappprxy.dll (Microsoft EAPHost Peer Client DLL/Microsoft Corporation) 0x5DCD0000 Library D:\WINDOWS\System32\WZCSAPI.DLL (Wireless Zero Configuration service API/Microsoft Corporation) 0x73030000 Library d:\windows\system32\cryptsvc.dll (Cryptographic Services/Microsoft Corporation) 0x76CE0000 Library d:\windows\system32\certcli.dll (Microsoft® Certificate Services Client/Microsoft Corporation) 0x77B90000 Library d:\windows\system32\hidserv.dll (HID Audio Service/Microsoft Corporation) 0x688E0000 Library d:\windows\system32\HID.DLL (Hid User Library/Microsoft Corporation) 0x688F0000 Library d:\windows\pchealth\helpctr\binaries\pchsvc.dll (Microsoft PCHealth Service Holder/Microsoft Corporation) 0x74F40000 Library d:\windows\system32\es.dll (Microsoft Corporation) 0x77710000 Library d:\windows\system32\ersvc.dll (Windows Error Reporting Service/Microsoft Corporation) 0x74F80000 Library d:\windows\system32\dmserver.dll (Logical Disk Manager service dll/Microsoft Corp.) 0x74F90000 Library d:\windows\system32\srvsvc.dll (Server Service DLL/Microsoft Corporation) 0x75090000 Library d:\windows\system32\seclogon.dll (Secondary Logon Service DLL/Microsoft Corporation) 0x73D20000 Library d:\windows\system32\browser.dll (Computer Browser Service DLL/Microsoft Corporation) 0x76DA0000 Library d:\windows\system32\wuauserv.dll (Windows Update AutoUpdate Service/Microsoft Corporation) 0x50000000 Library d:\windows\system32\wbem\wmisvc.dll (WMI/Microsoft Corporation) 0x59490000 Library D:\WINDOWS\system32\VSSAPI.DLL (Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL/Microsoft Corporation) 0x753E0000 Library D:\WINDOWS\system32\wuaueng.dll (Windows Update Agent/Microsoft Corporation) 0x50040000 Library D:\WINDOWS\System32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\System32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x75150000 Library D:\WINDOWS\System32\mspatcha.dll (Microsoft® Patch Engine/Microsoft Corporation) 0x600A0000 Library d:\windows\system32\w32time.dll (Windows Time Service/Microsoft Corporation) 0x767C0000 Library d:\windows\system32\trkwks.dll (Distributed Link Tracking Client/Microsoft Corporation) 0x75070000 Library d:\windows\system32\srsvc.dll (System Restore Service/Microsoft Corporation) 0x751A0000 Library d:\windows\system32\POWRPROF.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74AD0000 Library d:\windows\system32\sens.dll (System Event Notification Service (SENS)/Microsoft Corporation) 0x722D0000 Library D:\WINDOWS\System32\sfc.dll (Windows File Protection/Microsoft Corporation) 0x76BB0000 Library D:\WINDOWS\System32\sfc_os.dll (Windows File Protection/Microsoft Corporation) 0x76C60000 Library D:\WINDOWS\System32\SXS.DLL (Fusion 2.5/Microsoft Corporation) 0x7E720000 Library D:\WINDOWS\system32\comsvcs.dll (Microsoft Corporation) 0x76620000 Library D:\WINDOWS\system32\colbact.DLL (Microsoft Corporation) 0x75130000 Library D:\WINDOWS\system32\MTXCLU.DLL (MS DTC amd MTS clustering support DLL/Microsoft Corporation) 0x750F0000 Library D:\WINDOWS\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Library D:\WINDOWS\System32\CLUSAPI.DLL (Cluster API Library/Microsoft Corporation) 0x76D10000 Library D:\WINDOWS\System32\RESUTILS.DLL (Microsoft Cluster Resource Utility DLL/Microsoft Corporation) 0x750B0000 Library d:\windows\system32\ipnathlp.dll (Microsoft NAT Helper Components/Microsoft Corporation) 0x66460000 Library d:\windows\system32\AUTHZ.dll (Authorization Framework/Microsoft Corporation) 0x776C0000 Library d:\windows\system32\wscsvc.dll (Windows Security Center Service/Microsoft Corporation) 0x4C0A0000 Library d:\windows\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x7D1E0000 Library D:\WINDOWS\system32\Apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library D:\WINDOWS\system32\wbem\wbemcomn.dll (WMI/Microsoft Corporation) 0x75290000 Library D:\WINDOWS\System32\Wbem\wbemcore.dll (WMI/Microsoft Corporation) 0x762C0000 Library D:\WINDOWS\System32\Wbem\esscli.dll (WMI/Microsoft Corporation) 0x75310000 Library D:\WINDOWS\System32\Wbem\FastProx.dll (WMI/Microsoft Corporation) 0x75690000 Library D:\WINDOWS\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x74ED0000 Library D:\WINDOWS\system32\wbem\wmiutils.dll (WMI/Microsoft Corporation) 0x75020000 Library D:\WINDOWS\system32\wbem\repdrvfs.dll (WMI/Microsoft Corporation) 0x75200000 Library D:\WINDOWS\system32\wbem\wmiprvsd.dll (WMI/Microsoft Corporation) 0x3F1E0000 Library D:\WINDOWS\system32\NCObjAPI.DLL (Microsoft Corporation) 0x5F770000 Library D:\WINDOWS\system32\wbem\wbemess.dll (WMI/Microsoft Corporation) 0x75390000 Library D:\WINDOWS\system32\wups2.dll (Windows Update client proxy stub 2/Microsoft Corporation) 0x50F00000 Library D:\WINDOWS\system32\wbem\ncprov.dll (Non-COM WMI Event Provision APIs/Microsoft Corporation) 0x5F740000 Library D:\WINDOWS\system32\upnp.dll (Universal Plug and Play API/Microsoft Corporation) 0x76DE0000 Library D:\WINDOWS\system32\SSDPAPI.dll (SSDP Client API DLL/Microsoft Corporation) 0x74F00000 Library D:\WINDOWS\System32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\WINDOWS\System32\RASDLG.dll (Remote Access Common Dialog API/Microsoft Corporation) 0x768D0000 Library D:\WINDOWS\system32\msxml3.dll (MSXML 3.0 SP10/Microsoft Corporation) 0x74980000 Library D:\WINDOWS\system32\wups.dll (Windows Update client proxy stub/Microsoft Corporation) 0x50640000 Library D:\WINDOWS\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x76FB0000 Library D:\WINDOWS\System32\dssenh.dll (Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider/Microsoft Corporation) 0x68100000 Library D:\WINDOWS\system32\advpack.dll (ADVPACK/Microsoft Corporation) 0x75260000 Process D:\WINDOWS\system32\Ati2evxx.exe (ATI External Event Utility EXE Module/ATI Technologies Inc.) 1504 Library D:\WINDOWS\system32\Ati2evxx.exe (ATI External Event Utility EXE Module/ATI Technologies Inc.) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\wtsapi32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\powrprof.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74AD0000 Library D:\WINDOWS\system32\cfgMgr32.dll (Configuration Manager Forwarder DLL/Microsoft Corporation) 0x74AE0000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00D80000 Library D:\WINDOWS\system32\Ati2edxx.dll (ati2edxx/ATI Technologies, Inc.) 0x003C0000 Library D:\WINDOWS\system32\atipdlxx.dll (ATI Desktop CWDDEDI DLL/ATI Technologies, Inc.) 0x10000000 Library D:\WINDOWS\system32\ati2evxx.dll (ATI External Event Utility DLL Module/ATI Technologies Inc.) 0x00C80000 Library D:\WINDOWS\system32\winspool.drv (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Process D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 1540 Library D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library d:\windows\system32\dnsrslvr.dll (DNS Caching Resolver Service/Microsoft Corporation) 0x76770000 Library d:\windows\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library d:\windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library d:\windows\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library d:\windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Process D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 1696 Library D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00630000 Library d:\windows\system32\lmhsvc.dll (TCPIP NetBios Transport Services DLL/Microsoft Corporation) 0x74C40000 Library d:\windows\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library d:\windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library d:\windows\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library d:\windows\system32\regsvc.dll (Remote Registry Service/Microsoft Corporation) 0x76AF0000 Library d:\windows\system32\ssdpsrv.dll (SSDP Service DLL/Microsoft Corporation) 0x765E0000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Process D:\Program Files\Alwil Software\Avast5\afwServ.exe (avast! firewall service/AVAST Software) 1828 Library D:\Program Files\Alwil Software\Avast5\afwServ.exe (avast! firewall service/AVAST Software) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\Program Files\Alwil Software\Avast5\afwCore.dll (avast! Firewall Core library/AVAST Software) 0x67000000 Library D:\Program Files\Alwil Software\Avast5\Aavm4h.dll (avast! Asynchronous Virus Monitor (AAVM)/AVAST Software) 0x65000000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\Program Files\Alwil Software\Avast5\AavmRpch.dll (avast! AAVM Remote Procedure Call Library/AVAST Software) 0x65400000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78520000 Library D:\Program Files\Alwil Software\Avast5\ashBase.dll (Basic Functionality Module/AVAST Software) 0x64500000 Library D:\WINDOWS\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\Program Files\Alwil Software\Avast5\aswEngLdr.dll (Antivirus engine loader/AVAST Software) 0x64BC0000 Library D:\Program Files\Alwil Software\Avast5\aswCmnOS.dll (Antivirus HW dependent library/AVAST Software) 0x64C00000 Library D:\Program Files\Alwil Software\Avast5\aswCmnIS.dll (Antivirus independent functions/AVAST Software) 0x64C40000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x78480000 Library D:\Program Files\Alwil Software\Avast5\aswCmnBS.dll (Common functions/AVAST Software) 0x64C80000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\Program Files\Alwil Software\Avast5\ashTask.dll (Task Handling Module/AVAST Software) 0x64800000 Library D:\Program Files\Alwil Software\Avast5\aswAux.dll (avast! Auxiliary Library/AVAST Software) 0x64580000 Library D:\Program Files\Alwil Software\Avast5\aswLog.dll (avast! Log library/AVAST Software) 0x64700000 Library D:\Program Files\Alwil Software\Avast5\aswSqLt.dll (avast! SQLite library/AVAST Software) 0x64840000 Library D:\Program Files\Alwil Software\Avast5\aswProperty.dll (avast! Property Storage library/AVAST Software) 0x64740000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\Program Files\Alwil Software\Avast5\afwCoreServ.dll (avast! Firewall Server library/AVAST Software) 0x67100000 Library D:\Program Files\Alwil Software\Avast5\afwRpc.dll (avast! firewall Rpc/AVAST Software) 0x671C0000 Library D:\WINDOWS\system32\IPHLPAPI.DLL (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\RASAPI32.dll (Remote Access API/Microsoft Corporation) 0x76EE0000 Library D:\WINDOWS\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x76E90000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\TAPI32.dll (Microsoft® Windows™ Telephony API Client DLL/Microsoft Corporation) 0x76EB0000 Library D:\WINDOWS\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\Program Files\Alwil Software\Avast5\afwGeoIP.dll (avast! GeoIP library/AVAST Software) 0x67180000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\dbghelp.dll (Windows Image Helper/Microsoft Corporation) 0x59A60000 Library D:\Program Files\Alwil Software\Avast5\1033\Base.dll (avast! English Basic Module/AVAST Software) 0x66080000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\Wtsapi32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswEngin.dll (High level antivirus engine/AVAST Software) 0x64240000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswCmnOS.dll (Antivirus HW dependent library/AVAST Software) 0x64000000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswCmnIS.dll (Antivirus independent functions/AVAST Software) 0x64100000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswCmnBS.dll (Common functions/AVAST Software) 0x64080000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswScan.dll (Low level antivirus engine/AVAST Software) 0x64200000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\fwAux.dll (avast! Firewall Helper library/AVAST Software) 0x63B60000 Process D:\Documents and Settings\Mike\Desktop\05f6g86p.exe 1876 Library D:\Documents and Settings\Mike\Desktop\05f6g86p.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\COMCTL32.DLL (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\VERSION.DLL (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\OLEAUT32.DLL (Microsoft Corporation) 0x77120000 Process D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Service/AVAST Software) 2012 Library D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Service/AVAST Software) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\Program Files\Alwil Software\Avast5\aswCmnBS.dll (Common functions/AVAST Software) 0x64C80000 Library D:\Program Files\Alwil Software\Avast5\aswCmnOS.dll (Antivirus HW dependent library/AVAST Software) 0x64C00000 Library D:\Program Files\Alwil Software\Avast5\aswCmnIS.dll (Antivirus independent functions/AVAST Software) 0x64C40000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78520000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x78480000 Library D:\Program Files\Alwil Software\Avast5\ashBase.dll (Basic Functionality Module/AVAST Software) 0x64500000 Library D:\WINDOWS\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\Program Files\Alwil Software\Avast5\aswEngLdr.dll (Antivirus engine loader/AVAST Software) 0x64BC0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\dbghelp.dll (Windows Image Helper/Microsoft Corporation) 0x59A60000 Library D:\Program Files\Alwil Software\Avast5\1033\Base.dll (avast! English Basic Module/AVAST Software) 0x66080000 Library D:\Program Files\Alwil Software\Avast5\ashServ.dll (avast! antivirus service/AVAST Software) 0x65080000 Library D:\Program Files\Alwil Software\Avast5\aswAux.dll (avast! Auxiliary Library/AVAST Software) 0x64580000 Library D:\Program Files\Alwil Software\Avast5\ashTask.dll (Task Handling Module/AVAST Software) 0x64800000 Library D:\Program Files\Alwil Software\Avast5\ashTaskEx.dll (avast! TaskEx library/AVAST Software) 0x647C0000 Library D:\Program Files\Alwil Software\Avast5\aswLog.dll (avast! Log library/AVAST Software) 0x64700000 Library D:\Program Files\Alwil Software\Avast5\aswSqLt.dll (avast! SQLite library/AVAST Software) 0x64840000 Library D:\Program Files\Alwil Software\Avast5\aswProperty.dll (avast! Property Storage library/AVAST Software) 0x64740000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\Program Files\Alwil Software\Avast5\Aavm4h.dll (avast! Asynchronous Virus Monitor (AAVM)/AVAST Software) 0x65000000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\Program Files\Alwil Software\Avast5\AavmRpch.dll (avast! AAVM Remote Procedure Call Library/AVAST Software) 0x65400000 Library D:\Program Files\Alwil Software\Avast5\aswIdle.dll (avast! Idle Hook Library/AVAST Software) 0x64A00000 Library D:\Program Files\Alwil Software\Avast5\defs\10102500\aswEngin.dll (High level antivirus engine/AVAST Software) 0x64240000 Library D:\Program Files\Alwil Software\Avast5\defs\10102500\aswCmnOS.dll (Antivirus HW dependent library/AVAST Software) 0x64000000 Library D:\WINDOWS\system32\Wtsapi32.dll (Windows Terminal Server SDK APIs/Microsoft Corporation) 0x76F50000 Library D:\WINDOWS\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\Program Files\Alwil Software\Avast5\defs\10102500\aswCmnIS.dll (Antivirus independent functions/AVAST Software) 0x64100000 Library D:\Program Files\Alwil Software\Avast5\defs\10102500\aswCmnBS.dll (Common functions/AVAST Software) 0x64080000 Library D:\Program Files\Alwil Software\Avast5\defs\10102500\aswScan.dll (Low level antivirus engine/AVAST Software) 0x64200000 Library D:\Program Files\Alwil Software\Avast5\defs\10102500\algo.dll 0x63400000 Library D:\Program Files\Alwil Software\Avast5\AhResBhv.dll (avast! Behavior Shield AAVM Provider Library/AVAST Software) 0x65920000 Library D:\Program Files\Alwil Software\Avast5\AhResJs.dll (avast! Script Blocking AAVM Provider Library/AVAST Software) 0x65860000 Library D:\Program Files\Alwil Software\Avast5\AhResMai.dll (avast! e-Mail Scanner AAVM Provider Library/AVAST Software) 0x65840000 Library D:\Program Files\Alwil Software\Avast5\ahResMes.dll (avast! Messenger scanner AAVM Provider Library/AVAST Software) 0x65880000 Library D:\Program Files\Alwil Software\Avast5\AhResNS.dll (avast! Network Shield AAVM Provider Library/AVAST Software) 0x658C0000 Library D:\Program Files\Alwil Software\Avast5\ahResP2P.dll (avast! P2P Shield AAVM Provider Library/AVAST Software) 0x658A0000 Library D:\Program Files\Alwil Software\Avast5\AhResSPM.dll (avast! Spam Shield AAVM Provider Library/AVAST Software) 0x65900000 Library D:\Program Files\Alwil Software\Avast5\AhResStd.dll (avast! Standard Shield AAVM Provider Library/AVAST Software) 0x65800000 Library D:\Program Files\Alwil Software\Avast5\AhResWS.dll (avast! HTTP Scanner AAVM Provider Library/AVAST Software) 0x658E0000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x05750000 Library D:\WINDOWS\System32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x76FB0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\Program Files\Alwil Software\Avast5\ashMaiSv.dll (avast! e-Mail Scanner Service/AVAST Software) 0x65200000 Library D:\Program Files\Alwil Software\Avast5\ashWebSv.dll (avast! Web Scanner/AVAST Software) 0x65100000 Library D:\WINDOWS\system32\security.dll (Security Support Provider Interface/Microsoft Corporation) 0x71F80000 Library D:\Program Files\Alwil Software\Avast5\ashWsFtr.dll (avast! Web Shield Filter Module/AVAST Software) 0x68300000 Library D:\Program Files\Alwil Software\Avast5\aswDld.dll 0x646C0000 Library D:\WINDOWS\system32\wininet.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\Program Files\Alwil Software\Avast5\aswSpam.dll (avast! Spam library/AVAST Software) 0x65500000 Library D:\Program Files\Alwil Software\Avast5\WINSPAMCATCHER.dll (Mailshell Anti-Spam SDK/Mailshell) 0x10000000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\rsvpsp.dll (Microsoft Windows Rsvp 1.0 Service Provider/Microsoft Corporation) 0x73080000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswEngin.dll (High level antivirus engine/AVAST Software) 0x09A80000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswCmnOS.dll (Antivirus HW dependent library/AVAST Software) 0x05BF0000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswCmnIS.dll (Antivirus independent functions/AVAST Software) 0x065E0000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswCmnBS.dll (Common functions/AVAST Software) 0x07720000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\aswScan.dll (Low level antivirus engine/AVAST Software) 0x07780000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\algo.dll 0x09BA0000 Library D:\Program Files\Alwil Software\Avast5\defs\10102501\arPot.dll (ArPot usermode dll component/AVAST Software) 0x63B20000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\Apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000

Process D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 2172 Library D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00630000 Library d:\windows\system32\webclnt.dll (Web DAV Service DLL/Microsoft Corporation) 0x5A6E0000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library d:\windows\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library d:\windows\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\wsock32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Process D:\WINDOWS\system32\cisvc.exe (Content Index service/Microsoft Corporation) 2392 Library D:\WINDOWS\system32\cisvc.exe (Content Index service/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\query.dll (Content Index Utility DLL/Microsoft Corporation) 0x7D9A0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\Apphelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Process D:\Program Files\Java\jre6\bin\jqs.exe (Java™ Quick Starter Service/Sun Microsystems, Inc.) 2536 Library D:\Program Files\Java\jre6\bin\jqs.exe (Java™ Quick Starter Service/Sun Microsystems, Inc.) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\Program Files\Java\jre6\bin\MSVCR71.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x7C340000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\psapi.dll (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\pdh.dll (Windows Performance Data Helper DLL/Microsoft Corporation) 0x74000000 Library D:\WINDOWS\system32\comdlg32.dll (Common Dialogs DLL/Microsoft Corporation) 0x763B0000 Library D:\WINDOWS\system32\COMCTL32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\ODBC32.dll (Microsoft Data Access - ODBC Driver Manager/Microsoft Corporation) 0x74320000 Library D:\WINDOWS\system32\odbcbcp.dll (Microsoft BCP for ODBC/Microsoft Corporation) 0x711A0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\odbcint.dll (Microsoft Data Access - ODBC Resources/Microsoft Corporation) 0x006A0000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\WINDOWS\system32\perfos.dll (Windows System Performance Objects DLL/Microsoft Corporation) 0x5E760000 Library D:\WINDOWS\system32\perfdisk.dll (Windows Disk Performance Objects DLL/Microsoft Corporation) 0x5E790000 Process D:\WINDOWS\system32\lxdncoms.exe (Printer Communication System/ ) 2676 Library D:\WINDOWS\system32\lxdncoms.exe (Printer Communication System/ ) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\ws2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\cfgMgr32.dll (Configuration Manager Forwarder DLL/Microsoft Corporation) 0x74AE0000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Process D:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) 2704 Library D:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) 0x10000000 Library D:\Program Files\Mozilla Firefox\sqlite3.dll (SQLite Database Library/sqlite.org) 0x00280000 Library D:\Program Files\Mozilla Firefox\MOZCRT19.dll (User-Generated Microsoft ® C/C++ Runtime Library/Mozilla Foundation) 0x78130000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\Program Files\Mozilla Firefox\js3250.dll 0x00300000 Library D:\Program Files\Mozilla Firefox\nspr4.dll (NSPR Library/Mozilla Foundation) 0x004E0000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\Program Files\Mozilla Firefox\smime3.dll (NSS S/MIME Library/Mozilla Foundation) 0x00520000 Library D:\Program Files\Mozilla Firefox\nss3.dll (NSS Base Library/Mozilla Foundation) 0x00540000 Library D:\Program Files\Mozilla Firefox\nssutil3.dll (NSS Utility Library/Mozilla Foundation) 0x005E0000 Library D:\Program Files\Mozilla Firefox\plc4.dll (PLC Library/Mozilla Foundation) 0x00600000 Library D:\Program Files\Mozilla Firefox\plds4.dll (PLDS Library/Mozilla Foundation) 0x00610000 Library D:\Program Files\Mozilla Firefox\ssl3.dll (NSS SSL Library/Mozilla Foundation) 0x00620000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\COMDLG32.dll (Common Dialogs DLL/Microsoft Corporation) 0x763B0000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\IMM32.dll (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x76380000 Library D:\WINDOWS\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x74D90000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\Program Files\Mozilla Firefox\MOZCPP19.dll (User-Generated Microsoft ® C/C++ Runtime Library/Mozilla Foundation) 0x7C420000 Library D:\Program Files\Mozilla Firefox\xpcom.dll (Mozilla Foundation) 0x00650000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\dbghelp.dll (Windows Image Helper/Microsoft Corporation) 0x59A60000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\Program Files\Mozilla Firefox\components\browserdirprovider.dll (Mozilla Foundation) 0x01230000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\Program Files\Mozilla Firefox\components\brwsrcmp.dll (Mozilla Foundation) 0x01450000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x76FB0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\t2embed.dll (Microsoft T2Embed Font Embedding/Microsoft Corporation) 0x73CE0000 Library D:\WINDOWS\system32\LZ32.dll (LZ Expand/Compress API DLL/Microsoft Corporation) 0x73DC0000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x04A00000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\kyf3fj6p.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll 0x01490000 Library D:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\kyf3fj6p.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll 0x04300000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\Program Files\Mozilla Firefox\softokn3.dll (NSS PKCS #11 Library/Mozilla Foundation) 0x014D0000 Library D:\Program Files\Mozilla Firefox\nssdbm3.dll (Legacy Database Driver/Mozilla Foundation) 0x04360000 Library D:\Program Files\Mozilla Firefox\freebl3.dll (NSS freebl Library/Mozilla Foundation) 0x04380000 Library D:\Program Files\Mozilla Firefox\nssckbi.dll (NSS Builtin Trusted Root CAs/Mozilla Foundation) 0x04E20000 Library D:\WINDOWS\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\WINDOWS\system32\netapi32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\appHelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library D:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft SharePoint Workspace Extensions/Microsoft Corporation) 0x49460000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78520000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x78480000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ATL90.DLL (ATL Module for Windows (Unicode)/Microsoft Corporation) 0x78E20000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\msxml3.dll (MSXML 3.0 SP10/Microsoft Corporation) 0x74980000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x7E1E0000 Library D:\WINDOWS\system32\mscms.dll (Microsoft Color Matching System DLL/Microsoft Corporation) 0x73B30000 Library D:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\kyf3fj6p.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll 0x06400000 Library D:\WINDOWS\system32\RASAPI32.DLL (Remote Access API/Microsoft Corporation) 0x76EE0000 Library D:\WINDOWS\system32\rasman.dll (Remote Access Connection Manager/Microsoft Corporation) 0x76E90000 Library D:\WINDOWS\system32\TAPI32.dll (Microsoft® Windows™ Telephony API Client DLL/Microsoft Corporation) 0x76EB0000 Library D:\WINDOWS\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library D:\WINDOWS\system32\sensapi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x722B0000 Library D:\WINDOWS\system32\shdocvw.dll (Shell Doc Object and Control Library/Microsoft Corporation) 0x7E290000 Library D:\WINDOWS\system32\CRYPTUI.dll (Microsoft Trust UI Provider/Microsoft Corporation) 0x754D0000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\DSOUND.dll (DirectSound/Microsoft Corporation) 0x73F10000 Library D:\WINDOWS\system32\wdmaud.drv (WDM Audio driver mapper/Microsoft Corporation) 0x72D20000 Library D:\WINDOWS\system32\msacm32.drv (Microsoft Sound Mapper/Microsoft Corporation) 0x72D10000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\midimap.dll (Microsoft MIDI Mapper/Microsoft Corporation) 0x77BD0000 Library D:\WINDOWS\system32\icm32.dll (Microsoft Color Management Module (CMM)/Microsoft Corporation) 0x66E90000 Library D:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf 0x0D880000 Library D:\PROGRA~1\MICROS~2\Office14\1033\GrooveIntlResource.dll 0x1BC00000 Library D:\WINDOWS\System32\cscui.dll (Client Side Caching UI/Microsoft Corporation) 0x77A20000 Library D:\WINDOWS\System32\CSCDLL.dll (Offline Network Agent/Microsoft Corporation) 0x76600000 Library D:\Program Files\Alwil Software\Avast5\snxPlugins.dll (DLL registration plugins extension/AVAST Software) 0x64D80000 Library D:\WINDOWS\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x7D1E0000 Library D:\WINDOWS\system32\wuapi.dll (Windows Update Client API/Microsoft Corporation) 0x506A0000 Library D:\WINDOWS\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x75150000 Process D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 2784 Library D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library d:\windows\system32\wiaservc.dll (Still Image Devices Service/Microsoft Corporation) 0x75AA0000 Library d:\windows\system32\CFGMGR32.dll (Configuration Manager Forwarder DLL/Microsoft Corporation) 0x74AE0000 Library d:\windows\system32\setupapi.DLL (Windows Setup API/Microsoft Corporation) 0x77920000 Library d:\windows\system32\mscms.dll (Microsoft Color Matching System DLL/Microsoft Corporation) 0x73B30000 Library d:\windows\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library d:\windows\system32\WINSTA.dll (Winstation Library/Microsoft Corporation) 0x76360000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00680000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\wiafbdrv.dll (Flatbed Scanner Still Image Devices DLL/Microsoft Corporation) 0x5A5D0000 Library D:\WINDOWS\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x76B20000 Library D:\WINDOWS\system32\lxdndrs.dll 0x10000000 Library D:\WINDOWS\system32\lxdncfg.dll (config/Lexmark International) 0x00B40000 Library D:\WINDOWS\system32\lxdncaps.dll 0x00B70000 Library D:\WINDOWS\system32\lxdncnv4.dll 0x00BB0000 Library D:\WINDOWS\system32\actxprxy.dll (ActiveX Interface Marshaling Library/Microsoft Corporation) 0x71D40000 Library D:\WINDOWS\system32\sti.dll (Still Image Devices client DLL /Microsoft Corporation) 0x73BA0000 Process D:\WINDOWS\system32\cidaemon.exe (Indexing Service filter daemon/Microsoft Corporation) 2868 Library D:\WINDOWS\system32\cidaemon.exe (Indexing Service filter daemon/Microsoft Corporation) 0x01000000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\query.dll (Content Index Utility DLL/Microsoft Corporation) 0x7D9A0000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\comctl32.dll (Common Controls Library/Microsoft Corporation) 0x5D090000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\NTMARTA.DLL (Windows NT MARTA provider/Microsoft Corporation) 0x77690000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x009F0000 Library D:\WINDOWS\system32\LINKINFO.dll (Windows Volume Tracking/Microsoft Corporation) 0x76980000 Library D:\WINDOWS\system32\ntshrui.dll (Shell extensions for sharing/Microsoft Corporation) 0x76990000 Library D:\WINDOWS\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x76B20000 Library D:\WINDOWS\system32\NETAPI32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\appHelp.dll (Application Compatibility Client Library/Microsoft Corporation) 0x77B40000 Library D:\WINDOWS\system32\msctfime.ime (Microsoft Text Frame Work Service IME/Microsoft Corporation) 0x755C0000 Library D:\WINDOWS\system32\MSVFW32.dll (Microsoft Video for Windows DLL/Microsoft Corporation) 0x75A70000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78130000 Library D:\Program Files\Adobe\Reader 9.0\Reader\ace.dll (Adobe Color Engine/Adobe Systems Incorporated) 0x05000000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCP80.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x7C420000 Library D:\Program Files\Adobe\Reader 9.0\Reader\agm.dll (Adobe Graphics Manager/Adobe Systems Incorporated) 0x06000000 Library D:\Program Files\Adobe\Reader 9.0\Reader\axe8sharedexpat.dll (AXE Shared EXPAT (UTF-8 native)/Adobe Systems Incorporated) 0x01470000 Library D:\Program Files\Adobe\Reader 9.0\Reader\cooltype.dll (CoolType Typography Engine/Adobe Systems Incorporated) 0x08000000 Library D:\Program Files\Adobe\Reader 9.0\Reader\bib.dll (Bravo Interface Binder/Adobe Systems Incorporated) 0x07000000 Library D:\Program Files\Adobe\Reader 9.0\Reader\bibutils.dll (Bravo Interface Binder Utilities/Adobe Systems Incorporated) 0x014A0000 Library D:\Program Files\Adobe\Reader 9.0\Reader\jp2klib.dll (Adobe JPEG2000 Core Library/Adobe Systems Incorporated) 0x014E0000 Library D:\Program Files\Adobe\Reader 9.0\Reader\adobexmp.dll 0x015B0000 Library D:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll (Adobe Reader 9.4/Adobe Systems Incorporated) 0x01760000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\mscms.dll (Microsoft Color Matching System DLL/Microsoft Corporation) 0x73B30000 Library D:\WINDOWS\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\wmvcore.dll (Windows Media Playback/Authoring DLL/Microsoft Corporation) 0x7D790000 Library D:\WINDOWS\system32\DRMClien.DLL (DRM Client DLL/Microsoft Corporation) 0x02B40000 Library D:\WINDOWS\system32\msdmo.dll 0x736B0000 Library D:\WINDOWS\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x7E1E0000 Library D:\WINDOWS\system32\WMASF.DLL (Windows Media ASF DLL/Microsoft Corporation) 0x59A10000 Library D:\WINDOWS\system32\wmidx.dll (Windows Media Indexer DLL/Microsoft Corporation) 0x4B320000 Library D:\WINDOWS\system32\WSOCK32.dll (Windows Socket 32-Bit DLL/Microsoft Corporation) 0x71AD0000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\LangWrbk.dll (English wordbreaker/Microsoft Corporation) 0x62C70000 Process D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Pure Networks Platform Service/Cisco Systems, Inc.) 2920 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Pure Networks Platform Service/Cisco Systems, Inc.) 0x65C00000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\uxtheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\version.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\Wintrust.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\rsaenh.dll (Microsoft Enhanced Cryptographic Provider/Microsoft Corporation) 0x68000000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00800000 Library D:\WINDOWS\system32\userenv.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\netapi32.dll (Net Win32 API DLL/Microsoft Corporation) 0x5B860000 Library D:\WINDOWS\system32\cryptnet.dll (Crypto Network Related API/Microsoft Corporation) 0x75E60000 Library D:\WINDOWS\system32\PSAPI.DLL (Process Status Helper/Microsoft Corporation) 0x76BF0000 Library D:\WINDOWS\system32\SensApi.dll (SENS Connectivity API DLL/Microsoft Corporation) 0x722B0000 Library D:\WINDOWS\system32\WINHTTP.dll (Windows HTTP Services/Microsoft Corporation) 0x4D4F0000 Library D:\WINDOWS\system32\WLDAP32.dll (Win32 LDAP API DLL/Microsoft Corporation) 0x76F60000 Library D:\WINDOWS\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x75150000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvclb.dll (Network Magic Service Dynamic Link Library/Cisco Systems, Inc.) 0x68190000 Library D:\WINDOWS\system32\WS2_32.dll (Windows Socket 2.0 32-Bit DLL/Microsoft Corporation) 0x71AB0000 Library D:\WINDOWS\system32\WS2HELP.dll (Windows Socket 2.0 Helper for Windows NT/Microsoft Corporation) 0x71AA0000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmagnt.dll (nmagnt Dynamic Link Library/Cisco Systems, Inc.) 0x66A20000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmcore.dll (nmcore Dynamic Link Library/Cisco Systems, Inc.) 0x66D50000 Library D:\WINDOWS\system32\MPR.dll (Multiple Provider Router DLL/Microsoft Corporation) 0x71B20000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll (Microsoft® C++ Runtime Library/Microsoft Corporation) 0x78480000 Library D:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll (Microsoft® C Runtime Library/Microsoft Corporation) 0x78520000 Library D:\WINDOWS\system32\urlmon.dll (OLE32 Extensions for Win32/Microsoft Corporation) 0x7E1E0000 Library D:\WINDOWS\system32\WININET.dll (Internet Extensions for Win32/Microsoft Corporation) 0x771B0000 Library D:\WINDOWS\system32\wlanapi.dll (Windows Wireless LAN 802.11 Client Side API DLL/Microsoft Corporation) 0x46FF0000 Library D:\WINDOWS\system32\WZCSAPI.DLL (Wireless Zero Configuration service API/Microsoft Corporation) 0x73030000 Library D:\WINDOWS\system32\rtutils.dll (Routing Utilities/Microsoft Corporation) 0x76E80000 Library D:\WINDOWS\system32\WINSPOOL.DRV (Windows Spooler Driver/Microsoft Corporation) 0x73000000 Library D:\WINDOWS\system32\iphlpapi.dll (IP Helper API/Microsoft Corporation) 0x76D60000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\nmrasv.dll (NmRaService Library/Cisco Systems, Inc.) 0x67180000 Library D:\WINDOWS\system32\wbem\wbemprox.dll (WMI/Microsoft Corporation) 0x74EF0000 Library D:\WINDOWS\system32\wbem\wbemcomn.dll (WMI/Microsoft Corporation) 0x75290000 Library D:\WINDOWS\system32\wbem\wbemsvc.dll (WMI/Microsoft Corporation) 0x74ED0000 Library D:\WINDOWS\system32\wbem\fastprox.dll (WMI/Microsoft Corporation) 0x75690000 Library D:\WINDOWS\system32\MSVCP60.dll (Microsoft ® C++ Runtime Library/Microsoft Corporation) 0x76080000 Library D:\WINDOWS\system32\NTDSAPI.dll (NT5DS/Microsoft Corporation) 0x767A0000 Library D:\WINDOWS\system32\DNSAPI.dll (DNS Client API DLL/Microsoft Corporation) 0x76F20000 Library D:\WINDOWS\system32\powrprof.dll (Power Profile Helper DLL/Microsoft Corporation) 0x74AD0000 Library D:\WINDOWS\system32\netcfgx.dll (Network Configuration Objects/Microsoft Corporation) 0x755F0000 Library D:\WINDOWS\system32\CLUSAPI.dll (Cluster API Library/Microsoft Corporation) 0x76D10000 Library D:\WINDOWS\system32\SETUPAPI.dll (Windows Setup API/Microsoft Corporation) 0x77920000 Library D:\WINDOWS\system32\MPRAPI.dll (Windows NT MP Router Administration DLL/Microsoft Corporation) 0x76D40000 Library D:\WINDOWS\system32\ACTIVEDS.dll (ADs Router Layer DLL/Microsoft Corporation) 0x77CC0000 Library D:\WINDOWS\system32\adsldpc.dll (ADs LDAP Provider C DLL/Microsoft Corporation) 0x76E10000 Library D:\WINDOWS\system32\ATL.DLL (ATL Module for Windows XP (Unicode)/Microsoft Corporation) 0x76B20000 Library D:\WINDOWS\system32\SAMLIB.dll (SAM Library DLL/Microsoft Corporation) 0x71BF0000 Library D:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider/Microsoft Corporation) 0x71A50000 Library D:\WINDOWS\system32\hnetcfg.dll (Home Networking Configuration Manager/Microsoft Corporation) 0x662B0000 Library D:\WINDOWS\System32\wshtcpip.dll (Windows Sockets Helper DLL/Microsoft Corporation) 0x71A90000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\11.2.09195.1.nmcorePS.dll (nmcoreps Dynamic Link Library/Cisco Systems, Inc.) 0x02BD0000 Library D:\WINDOWS\system32\rasadhlp.dll (Remote Access AutoDial Helper/Microsoft Corporation) 0x76FC0000 Library D:\WINDOWS\System32\winrnr.dll (LDAP RnR Provider DLL/Microsoft Corporation) 0x76FB0000 Library D:\Program Files\Common Files\Pure Networks Shared\Platform\11.2.09195.1.nmctxtPS.dll (nmctxtps Dynamic Link Library/Cisco Systems, Inc.) 0x68610000 Library D:\WINDOWS\system32\msi.dll (Windows Installer/Microsoft Corporation) 0x7D1E0000 Library D:\WINDOWS\system32\cscdll.dll (Offline Network Agent/Microsoft Corporation) 0x76600000 Library D:\WINDOWS\system32\wuapi.dll (Windows Update Client API/Microsoft Corporation) 0x506A0000 Library D:\WINDOWS\system32\wups.dll (Windows Update client proxy stub/Microsoft Corporation) 0x50640000 Process D:\WINDOWS\system32\wuauclt.exe (Windows Update/Microsoft Corporation) 2968 Library D:\WINDOWS\system32\wuauclt.exe (Windows Update/Microsoft Corporation) 0x00400000 Library D:\WINDOWS\system32\ntdll.dll (NT Layer DLL/Microsoft Corporation) 0x7C900000 Library D:\WINDOWS\system32\kernel32.dll (Windows NT BASE API Client DLL/Microsoft Corporation) 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll (Windows NT CRT DLL/Microsoft Corporation) 0x77C10000 Library D:\WINDOWS\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation) 0x774E0000 Library D:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation) 0x77DD0000 Library D:\WINDOWS\system32\RPCRT4.dll (Remote Procedure Call Runtime/Microsoft Corporation) 0x77E70000 Library D:\WINDOWS\system32\Secur32.dll (Security Support Provider Interface/Microsoft Corporation) 0x77FE0000 Library D:\WINDOWS\system32\GDI32.dll (GDI Client DLL/Microsoft Corporation) 0x77F10000 Library D:\WINDOWS\system32\USER32.dll (Windows XP USER API Client DLL/Microsoft Corporation) 0x7E410000 Library D:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 0x77120000 Library D:\WINDOWS\system32\SHLWAPI.dll (Shell Light-weight Utility Library/Microsoft Corporation) 0x77F60000 Library D:\WINDOWS\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation) 0x5CB70000 Library D:\WINDOWS\AppPatch\AcGenral.DLL (Windows Compatibility DLL/Microsoft Corporation) 0x6F880000 Library D:\WINDOWS\system32\WINMM.dll (MCI API DLL/Microsoft Corporation) 0x76B40000 Library D:\WINDOWS\system32\MSACM32.dll (Microsoft ACM Audio Filter/Microsoft Corporation) 0x77BE0000 Library D:\WINDOWS\system32\VERSION.dll (Version Checking and File Installation Libraries/Microsoft Corporation) 0x77C00000 Library D:\WINDOWS\system32\SHELL32.dll (Windows Shell Common Dll/Microsoft Corporation) 0x7C9C0000 Library D:\WINDOWS\system32\USERENV.dll (Userenv/Microsoft Corporation) 0x769C0000 Library D:\WINDOWS\system32\UxTheme.dll (Microsoft UxTheme Library/Microsoft Corporation) 0x5AD70000 Library D:\WINDOWS\system32\IMM32.DLL (Windows XP IMM32 API Client DLL/Microsoft Corporation) 0x76390000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (User Experience Controls Library/Microsoft Corporation) 0x773D0000 Library D:\WINDOWS\system32\wucltui.dll (Windows Update Client UI Plugin/Microsoft Corporation) 0x507E0000 Library D:\WINDOWS\system32\MSIMG32.dll (GDIEXT Client DLL/Microsoft Corporation) 0x76380000 Library D:\WINDOWS\system32\Cabinet.dll (Microsoft® Cabinet File API/Microsoft Corporation) 0x75150000 Library D:\WINDOWS\system32\CRYPT32.dll (Crypto API32/Microsoft Corporation) 0x77A80000 Library D:\WINDOWS\system32\MSASN1.dll (ASN.1 Runtime APIs/Microsoft Corporation) 0x77B20000 Library D:\WINDOWS\system32\WINTRUST.dll (Microsoft Trust Verification APIs/Microsoft Corporation) 0x76C30000 Library D:\WINDOWS\system32\IMAGEHLP.dll (Windows NT Image Helper/Microsoft Corporation) 0x76C90000 Library D:\WINDOWS\system32\MSCTF.dll (MSCTF Server DLL/Microsoft Corporation) 0x74720000 Library D:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 0x76FD0000 Library D:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 0x77050000 Library D:\WINDOWS\system32\xpsp2res.dll (Service Pack 2 Messages/Microsoft Corporation) 0x00A70000 Library D:\WINDOWS\system32\wups2.dll (Windows Update client proxy stub 2/Microsoft Corporation) 0x50F00000 Library D:\WINDOWS\system32\wuaucpl.cpl (Automatic Updates Control Panel/Microsoft Corporation) 0x508E0000 Library D:\WINDOWS\system32\mucltui.dll (Microsoft Update Client UI Plugin/Microsoft Corporation) 0x509E0000 —- Services - GMER 1.0.15 —- Service .NET CLR Data Service .NET CLR Networking Service .NET CLR Networking 4.0.0.0 Service .NET Data Provider for SqlServer Service .NETFramework Service (avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP/AVAST Software) [SYSTEM] Aavmker4 Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service D:\WINDOWS\system32\DRIVERS\ACPI.sys (ACPI Driver for NT/Microsoft Corporation) [BOOT] ACPI Service (ACPI Embedded Controller Driver/Microsoft Corporation) [DISABLED] ACPIEC Service [DISABLED] adpu160m Service adsi Service D:\WINDOWS\system32\drivers\aec.sys (Microsoft Acoustic Echo Canceller/Microsoft Corporation) [MANUAL] aec Service D:\WINDOWS\System32\drivers\afd.sys (Ancillary Function Driver for WinSock/Microsoft Corporation) [SYSTEM] AFD Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [DISABLED] Alerter Service D:\WINDOWS\System32\alg.exe (Application Layer Gateway Service/Microsoft Corporation) [MANUAL] ALG Service [DISABLED] AliIde Service D:\WINDOWS\system32\drivers\Ambfilt.sys (Creative WDM 3D Audio Driver/Creative) [MANUAL] Ambfilt Service D:\WINDOWS\system32\DRIVERS\amdide.sys (AMD PCI SATA/IDE Bus Driver/Advanced Micro Devices) [BOOT] amdide Service [DISABLED] amsint Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] AppMgmt Service D:\WINDOWS\system32\DRIVERS\arp1394.sys (IP/1394 Arp Client/Microsoft Corporation) [MANUAL] Arp1394 Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service (avast! File System Access Blocking Driver/AVAST Software) [AUTO] aswFsBlk Service (avast! Filtering TDI driver/AVAST Software) [SYSTEM] aswFW Service (avast! File System Filter Driver for Windows XP/AVAST Software) [AUTO] aswMon2 Service D:\WINDOWS\system32\DRIVERS\aswNdis.sys (avast! Filtering NDIS driver/ALWIL Software) [BOOT] aswNdis Service (avast! Filtering NDIS driver/AVAST Software) [BOOT] aswNdis2 Service (avast! TDI RDR Driver/AVAST Software) [MANUAL] aswRdr Service (avast! Virtualization Driver/AVAST Software) [SYSTEM] aswSnx Service (avast! self protection module/AVAST Software) [SYSTEM] aswSP Service (avast! TDI Filter Driver/AVAST Software) [SYSTEM] aswTdi Service D:\WINDOWS\system32\DRIVERS\asyncmac.sys (MS Remote Access serial network driver/Microsoft Corporation) [MANUAL] AsyncMac Service D:\WINDOWS\system32\DRIVERS\atapi.sys (IDE/ATAPI Port Driver/Microsoft Corporation) [BOOT] atapi Service [DISABLED] Atdisk Service D:\WINDOWS\system32\Ati2evxx.exe (ATI External Event Utility EXE Module/ATI Technologies Inc.) [AUTO] Ati HotKey Poller Service D:\WINDOWS\system32\ati2sgag.exe [AUTO] ATI Smart Service D:\WINDOWS\system32\DRIVERS\ati2mtag.sys (ATI Radeon WindowsNT Miniport Driver/ATI Technologies Inc.) [MANUAL] ati2mtag Service Atierecord Service D:\WINDOWS\system32\DRIVERS\atmarpc.sys (IP/ATM Arp Client/Microsoft Corporation) [MANUAL] Atmarpc Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] AudioSrv Service D:\WINDOWS\system32\DRIVERS\audstub.sys (AudStub Driver/Microsoft Corporation) [MANUAL] audstub Service D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Service/AVAST Software) [AUTO] avast! Antivirus Service D:\Program Files\Alwil Software\Avast5\afwServ.exe (avast! firewall service/AVAST Software) [AUTO] avast! Firewall Service D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Service/AVAST Software) [MANUAL] avast! Mail Scanner Service D:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Service/AVAST Software) [MANUAL] avast! Web Scanner Service BattC Service (BEEP Driver/Microsoft Corporation) [SYSTEM] Beep Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] BITS Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] Browser Service (CardBus/PCMCIA IDE Miniport Driver/Microsoft Corporation) [DISABLED] cbidf2k Service [DISABLED] cd20xrnt Service (CD-ROM Audio Filter Driver/Microsoft Corporation) [SYSTEM] Cdaudio Service (CD-ROM File System Driver/Microsoft Corporation) [DISABLED] Cdfs Service D:\WINDOWS\system32\DRIVERS\cdrom.sys (SCSI CD-ROM Driver/Microsoft Corporation) [SYSTEM] Cdrom Service [SYSTEM] Changer Service D:\WINDOWS\system32\cisvc.exe (Content Index service/Microsoft Corporation) [AUTO] CiSvc Service D:\WINDOWS\system32\clipsrv.exe (Windows NT DDE Server/Microsoft Corporation) [DISABLED] ClipSrv Service D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (.NET Runtime Optimization Service/Microsoft Corporation) [AUTO] clr_optimization_v4.0.30319_32 Service [DISABLED] CmdIde Service D:\WINDOWS\system32\dllhost.exe (COM Surrogate/Microsoft Corporation) [MANUAL] COMSysApp Service ContentFilter Service ContentIndex Service [DISABLED] Cpqarray Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] CryptSvc Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] DcomLaunch Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] Dhcp Service D:\WINDOWS\system32\DRIVERS\disk.sys (PnP Disk Driver/Microsoft Corporation) [BOOT] Disk Service D:\WINDOWS\System32\dmadmin.exe (Logical Disk Manager service process/Microsoft Corp., Veritas Software) [MANUAL] dmadmin Service D:\WINDOWS\System32\drivers\dmboot.sys (NT Disk Manager Startup Driver/Microsoft Corp., Veritas Software) [DISABLED] dmboot Service D:\WINDOWS\System32\drivers\dmio.sys (NT Disk Manager I/O Driver/Microsoft Corp., Veritas Software) [BOOT] dmio Service D:\WINDOWS\System32\drivers\dmload.sys (NT Disk Manager Startup Driver/Microsoft Corp., Veritas Software.) [BOOT] dmload Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] dmserver Service D:\WINDOWS\system32\drivers\DMusic.sys (Microsoft Kernel DLS Synthesizer/Microsoft Corporation) [MANUAL] DMusic Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] Dnscache Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] Dot3svc Service [DISABLED] dpti2o Service D:\WINDOWS\system32\drivers\drmkaud.sys (Microsoft Kernel DRM Audio Descrambler Filter/Microsoft Corporation) [MANUAL] drmkaud Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] EapHost Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] ERSvc Service D:\WINDOWS\system32\services.exe (Services and Controller app/Microsoft Corporation) [AUTO] Eventlog Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] EventSystem Service (Fast FAT File System Driver/Microsoft Corporation) [DISABLED] Fastfat Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] FastUserSwitchingCompatibility Service D:\WINDOWS\system32\DRIVERS\fdc.sys (Floppy Disk Controller Driver/Microsoft Corporation) [MANUAL] Fdc Service (FIPS Crypto Driver/Microsoft Corporation) [SYSTEM] Fips Service (Floppy Driver/Microsoft Corporation) [SYSTEM] Flpydisk Service D:\WINDOWS\system32\DRIVERS\fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) [BOOT] FltMgr Service (File System Recognizer Driver/Microsoft Corporation) [SYSTEM] Fs_Rec Service D:\WINDOWS\system32\DRIVERS\ftdisk.sys (FT Disk Driver/Microsoft Corporation) [BOOT] Ftdisk Service D:\WINDOWS\system32\DRIVERS\msgpc.sys (MS General Packet Classifier/Microsoft Corporation) [MANUAL] Gpc Service D:\WINDOWS\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver v1.0a/Windows ® Server 2003 DDK provider) [MANUAL] HDAudBus Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] helpsvc Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] HidServ Service D:\WINDOWS\system32\DRIVERS\hidusb.sys (USB Miniport Driver for Input Devices/Microsoft Corporation) [MANUAL] hidusb Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] hkmsvc Service [DISABLED] hpn Service D:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys (HSF_HWB2 WDM driver/Conexant Systems, Inc.) [MANUAL] HSFHWBS2 Service D:\WINDOWS\system32\DRIVERS\HSF_DPV.sys (HSF_DP driver/Conexant Systems, Inc.) [MANUAL] HSF_DPV Service D:\WINDOWS\System32\Drivers\HTTP.sys (HTTP Protocol Stack/Microsoft Corporation) [MANUAL] HTTP Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] HTTPFilter Service [SYSTEM] i2omgmt Service [DISABLED] i2omp Service D:\WINDOWS\system32\DRIVERS\i8042prt.sys (i8042 Port Driver/Microsoft Corporation) [SYSTEM] i8042prt Service D:\WINDOWS\system32\DRIVERS\imapi.sys (IMAPI Kernel Driver/Microsoft Corporation) [SYSTEM] Imapi Service D:\WINDOWS\system32\imapi.exe (Image Mastering API/Microsoft Corporation) [MANUAL] ImapiService Service inetaccs Service [DISABLED] ini910u Service Inport Service D:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek® High Definition Audio Function Driver/Realtek Semiconductor Corp.) [MANUAL] IntcAzAudAddService Service [DISABLED] IntelIde Service D:\WINDOWS\system32\DRIVERS\intelppm.sys (Processor Device Driver/Microsoft Corporation) [SYSTEM] intelppm Service D:\WINDOWS\system32\DRIVERS\Ip6Fw.sys (IPv6 Windows Firewall Driver/Microsoft Corporation) [MANUAL] Ip6Fw Service D:\WINDOWS\system32\DRIVERS\ipfltdrv.sys (IP FILTER DRIVER/Microsoft Corporation) [MANUAL] IpFilterDriver Service D:\WINDOWS\system32\DRIVERS\ipinip.sys (IP in IP Encapsulation Driver/Microsoft Corporation) [MANUAL] IpInIp Service D:\WINDOWS\system32\DRIVERS\ipnat.sys (IP Network Address Translator/Microsoft Corporation) [MANUAL] IpNat Service D:\WINDOWS\system32\DRIVERS\ipsec.sys (IPSec Driver/Microsoft Corporation) [SYSTEM] IPSec Service D:\WINDOWS\system32\DRIVERS\irenum.sys (Infra-Red Bus Enumerator/Microsoft Corporation) [MANUAL] IRENUM Service ISAPISearch Service D:\WINDOWS\system32\DRIVERS\isapnp.sys (PNP ISA Bus Driver/Microsoft Corporation) [BOOT] isapnp Service D:\Program Files\Java\jre6\bin\jqs.exe (Java™ Quick Starter Service/Sun Microsystems, Inc.) [AUTO] JavaQuickStarterService Service D:\WINDOWS\system32\DRIVERS\kbdclass.sys (Keyboard Class Driver/Microsoft Corporation) [SYSTEM] Kbdclass Service D:\WINDOWS\system32\DRIVERS\kbdhid.sys (HID Mouse Filter Driver/Microsoft Corporation) [SYSTEM] kbdhid Service D:\WINDOWS\system32\drivers\kmixer.sys (Kernel Mode Audio Mixer/Microsoft Corporation) [MANUAL] kmixer Service (Kernel Security Support Provider Interface/Microsoft Corporation) [BOOT] KSecDD Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] LanmanServer Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] lanmanworkstation Service [SYSTEM] lbrtfdc Service ldap Service LicenseService Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] LmHosts Service D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdnserv.exe (Lexmark Connect Service Executable/Lexmark International, Inc.) [AUTO] lxdnCATSCustConnectService Service D:\WINDOWS\system32\lxdncoms.exe (Printer Communication System/ ) [AUTO] lxdn_device Service D:\WINDOWS\system32\DRIVERS\mcdbus.sys (MagicISO SCSI Host Controller/MagicISO, Inc.) [MANUAL] mcdbus Service D:\WINDOWS\system32\DRIVERS\mdmxsdk.sys (Diagnostic Interface x86 Driver/Conexant) [AUTO] mdmxsdk Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [DISABLED] Messenger Service D:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft SharePoint Workspace/Microsoft Corporation) [MANUAL] Microsoft SharePoint Workspace Audit Service Service (Frame buffer simulator/Microsoft Corporation) [SYSTEM] mnmdd Service D:\WINDOWS\system32\mnmsrvc.exe (NetMeeting Remote Desktop Sharing/Microsoft Corporation) [MANUAL] mnmsrvc Service (Modem Device Driver/Microsoft Corporation) [MANUAL] Modem Service D:\WINDOWS\system32\drivers\Monfilt.sys (Creative WDM Audio Driver (32-bit)/Creative Technology Ltd.) [MANUAL] Monfilt Service D:\WINDOWS\system32\DRIVERS\mouclass.sys (Mouse Class Driver/Microsoft Corporation) [SYSTEM] Mouclass Service D:\WINDOWS\system32\DRIVERS\mouhid.sys (HID Mouse Filter Driver/Microsoft Corporation) [MANUAL] mouhid Service (Mount Manager/Microsoft Corporation) [BOOT] MountMgr Service [DISABLED] mraid35x Service D:\WINDOWS\system32\DRIVERS\mrxdav.sys (Windows NT WebDav Minirdr/Microsoft Corporation) [MANUAL] MRxDAV Service D:\WINDOWS\system32\DRIVERS\mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation) [SYSTEM] MRxSmb Service D:\WINDOWS\system32\msdtc.exe (MS DTC console program/Microsoft Corporation) [MANUAL] MSDTC Service MSDTC Bridge 4.0.0.0 Service (Mailslot driver/Microsoft Corporation) [SYSTEM] Msfs Service D:\WINDOWS\system32\msiexec.exe (Windows® installer/Microsoft Corporation) [MANUAL] MSIServer Service D:\WINDOWS\system32\drivers\MSKSSRV.sys (MS KS Server/Microsoft Corporation) [MANUAL] MSKSSRV Service D:\WINDOWS\system32\drivers\MSPCLOCK.sys (MS Proxy Clock/Microsoft Corporation) [MANUAL] MSPCLOCK Service D:\WINDOWS\system32\drivers\MSPQM.sys (MS Proxy Quality Manager/Microsoft Corporation) [MANUAL] MSPQM Service D:\WINDOWS\system32\DRIVERS\mssmbios.sys (System Management BIOS Driver/Microsoft Corporation) [MANUAL] mssmbios Service (Multiple UNC Provider driver/Microsoft Corporation) [BOOT] Mup Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] napagent Service (NDIS 5.1 wrapper driver/Microsoft Corporation) [BOOT] NDIS Service D:\WINDOWS\system32\DRIVERS\ndistapi.sys (NDIS 3.0 connection wrapper driver/Microsoft Corporation) [MANUAL] NdisTapi Service D:\WINDOWS\system32\DRIVERS\ndisuio.sys (NDIS User mode I/O Driver/Microsoft Corporation) [MANUAL] Ndisuio Service D:\WINDOWS\system32\DRIVERS\ndiswan.sys (MS PPP Framing Driver (Strong Encryption)/Microsoft Corporation) [MANUAL] NdisWan Service (NDIS Proxy/Microsoft Corporation) [MANUAL] NDProxy Service D:\WINDOWS\system32\DRIVERS\netbios.sys (NetBIOS interface driver/Microsoft Corporation) [SYSTEM] NetBIOS Service D:\WINDOWS\system32\DRIVERS\netbt.sys (MBT Transport driver/Microsoft Corporation) [SYSTEM] NetBT Service D:\WINDOWS\system32\netdde.exe (Network DDE - DDE Communication/Microsoft Corporation) [DISABLED] NetDDE Service D:\WINDOWS\system32\netdde.exe (Network DDE - DDE Communication/Microsoft Corporation) [DISABLED] NetDDEdsdm Service D:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) [MANUAL] Netlogon Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] Netman Service D:\WINDOWS\system32\DRIVERS\nic1394.sys (IEEE1394 Ndis Miniport and Call Manager/Microsoft Corporation) [MANUAL] NIC1394 Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] Nla Service D:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Pure Networks Platform Service/Cisco Systems, Inc.) [AUTO] nmservice Service (NPFS Driver/Microsoft Corporation) [SYSTEM] Npfs Service (NT File System Driver/Microsoft Corporation) [DISABLED] Ntfs Service D:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) [MANUAL] NtLmSsp Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] NtmsSvc Service (NULL Driver/Microsoft Corporation) [SYSTEM] Null Service D:\WINDOWS\system32\DRIVERS\nwlnkflt.sys (NWLINK2 Traffic Filter Driver/Microsoft Corporation) [MANUAL] NwlnkFlt Service D:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys (NWLINK2 Forwarder Driver/Microsoft Corporation) [MANUAL] NwlnkFwd Service D:\WINDOWS\system32\DRIVERS\ohci1394.sys (1394 OpenHCI Port Driver/Microsoft Corporation) [BOOT] ohci1394 Service D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Office Source Engine/Microsoft Corporation) [MANUAL] ose Service D:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Office Software Protection Platform Service/Microsoft Corporation) [MANUAL] osppsvc Service Outlook Service D:\WINDOWS\system32\DRIVERS\parport.sys (Parallel Port Driver/Microsoft Corporation) [MANUAL] Parport Service (Partition Manager/Microsoft Corporation) [BOOT] PartMgr Service (VDM Parallel Driver/Microsoft Corporation) [AUTO] ParVdm Service D:\WINDOWS\system32\DRIVERS\pci.sys (NT Plug and Play PCI Enumerator/Microsoft Corporation) [BOOT] PCI Service [SYSTEM] PCIDump Service D:\WINDOWS\system32\DRIVERS\pciide.sys (Generic PCI IDE Bus Driver/Microsoft Corporation) [BOOT] PCIIde Service (PCMCIA Bus Driver/Microsoft Corporation) [DISABLED] Pcmcia Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service D:\WINDOWS\system32\services.exe (Services and Controller app/Microsoft Corporation) [AUTO] PlugPlay Service D:\WINDOWS\system32\DRIVERS\pnarp.sys (Address Resolution Protocol Driver/Cisco Systems, Inc.) [AUTO] pnarp Service D:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) [AUTO] PolicyAgent Service D:\WINDOWS\system32\DRIVERS\raspptp.sys (Peer-to-Peer Tunneling Protocol/Microsoft Corporation) [MANUAL] PptpMiniport Service D:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) [AUTO] ProtectedStorage Service D:\WINDOWS\system32\DRIVERS\psched.sys (MS QoS Packet Scheduler/Microsoft Corporation) [MANUAL] PSched Service D:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.) [MANUAL] Ptilink Service D:\WINDOWS\system32\DRIVERS\purendis.sys (NDIS Relay Driver/Cisco Systems, Inc.) [AUTO] purendis Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service D:\WINDOWS\system32\DRIVERS\rasacd.sys (RAS Automatic Connection Driver/Microsoft Corporation) [SYSTEM] RasAcd Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] RasAuto Service D:\WINDOWS\system32\DRIVERS\rasl2tp.sys (RAS L2TP mini-port/call-manager driver/Microsoft Corporation) [MANUAL] Rasl2tp Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] RasMan Service D:\WINDOWS\system32\DRIVERS\raspppoe.sys (RAS PPPoE mini-port/call-manager driver/Microsoft Corporation) [MANUAL] RasPppoe Service D:\WINDOWS\system32\DRIVERS\raspti.sys (PTI DirectParallel® mini-port/call-manager driver/Microsoft Corporation) [MANUAL] Raspti Service D:\WINDOWS\system32\DRIVERS\rdbss.sys (Redirected Drive Buffering SubSystem Driver/Microsoft Corporation) [SYSTEM] Rdbss Service D:\WINDOWS\System32\DRIVERS\RDPCDD.sys (RDP Miniport/Microsoft Corporation) [SYSTEM] RDPCDD Service RDPDD Service D:\WINDOWS\system32\DRIVERS\rdpdr.sys (Microsoft RDP Device redirector/Microsoft Corporation) [MANUAL] rdpdr Service RDPNP Service (RDP Terminal Stack Driver (US/Canada Only, Not for Export)/Microsoft Corporation) [MANUAL] RDPWD Service D:\WINDOWS\system32\sessmgr.exe (Microsoft® Remote Desktop Help Session Manager/Microsoft Corporation) [MANUAL] RDSessMgr Service D:\WINDOWS\system32\DRIVERS\redbook.sys (Redbook Audio Filter Driver/Microsoft Corporation) [SYSTEM] redbook Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [DISABLED] RemoteAccess Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] RemoteRegistry Service D:\WINDOWS\system32\locator.exe (Rpc Locator/Microsoft Corporation) [MANUAL] RpcLocator Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] RpcSs Service D:\WINDOWS\system32\rsvp.exe (Microsoft RSVP/Microsoft Corporation) [MANUAL] RSVP Service D:\WINDOWS\system32\DRIVERS\RTL8139.SYS (Realtek RTL8139 NDIS 5.0 Driver/Realtek Semiconductor Corporation) [MANUAL] rtl8139 Service D:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) [AUTO] SamSs Service D:\WINDOWS\System32\SCardSvr.exe (Smart Card Resource Management Server/Microsoft Corporation) [MANUAL] SCardSvr Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] Schedule Service D:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [MANUAL] Secdrv Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] seclogon Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] SENS Service (Serial Device Driver/Microsoft Corporation) [AUTO] Serial Service ServiceModelEndpoint 4.0.0.0 Service ServiceModelOperation 4.0.0.0 Service ServiceModelService 4.0.0.0 Service (SCSI Floppy Driver/Microsoft Corporation) [SYSTEM] Sfloppy Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] SharedAccess Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] ShellHWDetection Service [DISABLED] Simbad Service SMSvcHost 4.0.0.0 Service [DISABLED] Sparrow Service D:\WINDOWS\system32\drivers\splitter.sys (Microsoft Kernel Audio Splitter/Microsoft Corporation) [MANUAL] splitter Service D:\WINDOWS\system32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) [AUTO] Spooler Service D:\WINDOWS\system32\DRIVERS\sr.sys (System Restore Filesystem Filter Driver/Microsoft Corporation) [BOOT] sr Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] srservice Service D:\WINDOWS\system32\DRIVERS\srv.sys (Server driver/Microsoft Corporation) [MANUAL] Srv Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] SSDPSRV Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] stisvc Service D:\WINDOWS\system32\DRIVERS\swenum.sys (Plug and Play Software Device Enumerator/Microsoft Corporation) [MANUAL] swenum Service D:\WINDOWS\system32\drivers\swmidi.sys (Microsoft GS Wavetable Synthesizer/Microsoft Corporation) [MANUAL] swmidi Service D:\WINDOWS\system32\dllhost.exe (COM Surrogate/Microsoft Corporation) [MANUAL] SwPrv Service [DISABLED] symc810 Service [DISABLED] symc8xx Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service D:\WINDOWS\system32\drivers\sysaudio.sys (System Audio WDM Filter/Microsoft Corporation) [MANUAL] sysaudio Service D:\WINDOWS\system32\smlogsvc.exe (Performance Logs and Alerts Service/Microsoft Corporation) [MANUAL] SysmonLog Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] TapiSrv Service D:\WINDOWS\system32\DRIVERS\tcpip.sys (TCP/IP Protocol Driver/Microsoft Corporation) [SYSTEM] Tcpip Service (Named Pipe Transport Driver/Microsoft Corporation) [MANUAL] TDPIPE Service (TCP Transport Driver/Microsoft Corporation) [MANUAL] TDTCP Service D:\WINDOWS\system32\DRIVERS\termdd.sys (Terminal Server Driver/Microsoft Corporation) [SYSTEM] TermDD Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] TermService Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] Themes Service D:\WINDOWS\system32\tlntsvr.exe (Telnet/Microsoft Corporation) [DISABLED] TlntSvr Service [DISABLED] TosIde Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] TrkWks Service TSDDD Service (UDF File System Driver/Microsoft Corporation) [DISABLED] Udfs Service [DISABLED] ultra Service D:\WINDOWS\system32\DRIVERS\update.sys (Update Driver/Microsoft Corporation) [MANUAL] Update Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] upnphost Service D:\WINDOWS\System32\ups.exe (UPS Service/Microsoft Corporation) [MANUAL] UPS Service D:\WINDOWS\system32\DRIVERS\usbccgp.sys (USB Common Class Generic Parent Driver/Microsoft Corporation) [MANUAL] usbccgp Service D:\WINDOWS\system32\DRIVERS\usbehci.sys (EHCI eUSB Miniport Driver/Microsoft Corporation) [MANUAL] usbehci Service D:\WINDOWS\system32\DRIVERS\usbhub.sys (Default Hub Driver for USB/Microsoft Corporation) [MANUAL] usbhub Service D:\WINDOWS\system32\DRIVERS\usbohci.sys (OHCI USB Miniport Driver/Microsoft Corporation) [MANUAL] usbohci Service D:\WINDOWS\system32\DRIVERS\usbprint.sys (USB Printer driver/Microsoft Corporation) [MANUAL] usbprint Service D:\WINDOWS\system32\DRIVERS\usbscan.sys (USB Scanner Driver/Microsoft Corporation) [MANUAL] usbscan Service D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS (USB Mass Storage Class Driver/Microsoft Corporation) [MANUAL] USBSTOR Service D:\WINDOWS\System32\drivers\vga.sys (VGA/Super VGA Video Driver/Microsoft Corporation) [SYSTEM] VgaSave Service [DISABLED] ViaIde Service (Volume Shadow Copy Driver/Microsoft Corporation) [BOOT] VolSnap Service D:\WINDOWS\System32\vssvc.exe (Microsoft® Volume Shadow Copy Service/Microsoft Corporation) [MANUAL] VSS Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] W32Time Service W3SVC Service D:\WINDOWS\system32\DRIVERS\wanarp.sys (MS Remote Access and Routing ARP Driver/Microsoft Corporation) [MANUAL] Wanarp Service [MANUAL] WDICA Service D:\WINDOWS\system32\drivers\wdmaud.sys (MMSYSTEM Wave/Midi API mapper/Microsoft Corporation) [MANUAL] wdmaud Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] WebClient Service D:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys (HSF_CNXT driver/Conexant Systems, Inc.) [MANUAL] winachsf Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] winmgmt Service [MANUAL] Winsock Service WinSock2 Service WinTrust Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] WmdmPmSN Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] Wmi Service WmiApRpl Service D:\WINDOWS\system32\wbem\wmiapsrv.exe (WMI Performance Adapter Service/Microsoft Corporation) [MANUAL] WmiApSrv Service D:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (wpffontcache_v0400.exe/Microsoft Corporation) [MANUAL] WPFFontCache_v0400 Service (Winsock2 IFS Layer/Microsoft Corporation) [SYSTEM] WS2IFSL Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] wscsvc Service D:\WINDOWS\system32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] wuauserv Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [AUTO] WZCSVC Service D:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) [MANUAL] xmlprov Service {41447653-9A8A-456F-94F7-69123D3E2599} Service {C98C5A15-BABE-402E-9754-E7A14471AF33} —- EOF - GMER 1.0.15 —-