Whatever it is, it also makes the sound wow

Dell Inspiron E1405
Windows XP SP3
1G RAM

On thursday night I was playing music on blip.fm and I noticed it was making a wow sort of sound, a rhythmic slowing of the music. At first I thought it was my internet connection but it doesn't do this on another Dell laptop.

The computer seems to stop but if I keep typing the letters will appear in a few seconds.

Everything runs much slower than before. Programs take longer to start up, windows takes longer to boot. Open windows take a long time to refresh.

I have tried mbam and Spybot S&D. Panda Scan gave an error message after unpacking so I was unable to run it.

Here are OTL files:

Extras.txt
OTL Extras logfile created on: 11/14/2010 10:00:39 AM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Downloads\antivirus
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,014.00 Mb Total Physical Memory | 458.00 Mb Available Physical Memory | 45.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 69.63 Gb Total Space | 52.72 Gb Free Space | 75.71% Space Free | Partition Type: NTFS
Drive K: | 186.30 Gb Total Space | 53.55 Gb Free Space | 28.74% Space Free | Partition Type: NTFS

Computer Name: TITAN | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\AVG\AVG10\avgdiagex.exe" = C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostics 2011 – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgnsx.exe" = C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Online Shield – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG Installer – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgemcx.exe" = C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Personal E-mail Scanner – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"C:\Program Files\Ratajik Software\StationRipper\StationRipperConsole.exe" = C:\Program Files\Ratajik Software\StationRipper\StationRipperConsole.exe:*:Enabled:StationRipperConsole – ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{0323CB96-221A-4042-84A3-93EDE47099FC}" = AVG 2011
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}" = mSSO
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{1A258E63-8DF5-4ADB-9832-38A0121D65EB}" = AVG 2011
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{3F4EC965-28EF-45C3-B063-04B25D4E9679}" = WIDCOMM Bluetooth Software
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}" = mHlpDell
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{612B9183-67A9-4B44-9877-2F059E35B86A}" = Broadcom 440x 10/100 Integrated Controller
"{63DB9CCD-2B56-4217-9A3D-507AC78320CA}" = mWMI
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{829CD169-E692-48E8-9BDE-A3E8D8B65538}" = mSCfg
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{9D7E5329-5751-435B-B585-0EFF51783A20}" = NWZ-E350 WALKMAN Guide
"{A09199CA-01F9-5CCD-74D4-5AC85F2BD2BF}" = Seesmic Desktop
"{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.0
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C5074CC4-0E26-4716-A307-960272A90040}" = QuickSet
"{C6E388F5-F0BE-A758-93BE-15758C09C0ED}" = TweetDeck
"{CFADE4AF-C0CF-4A04-A776-741318F1658F}" = Content Transfer
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"4569969E1360D2854474C661EF9B4D54F143EB16" = Windows Driver Package - Ricoh Company (rimsptsk) hdc (11/14/2006 6.00.01.04)
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"AVG" = AVG 2011
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3" = Conexant HDA D110 MDC V.92 Modem
"com.seesmic.desktop.client.D89F32799270693BEF34AAA36E9B2632B59240FA.1" = Seesmic Desktop
"Google Chrome" = Google Chrome
"HDMI" = Intel® Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"ProInst" = Intel® PROSet/Wireless Software
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1" = TweetDeck
"uTorrent" = µTorrent
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"StationRipper" = StationRipper 2.98.2

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 11/5/2010 8:57:40 PM | Computer Name = TITAN | Source = Application Hang | ID = 1002
Description = Hanging application explorer.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 11/8/2010 1:23:12 AM | Computer Name = TITAN | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module shell32.dll, version 6.0.2900.6018, fault address 0x0002ce4d.

Error - 11/8/2010 1:23:39 AM | Computer Name = TITAN | Source = Application Error | ID = 1000
Description = Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
dbghelp.dll, version 5.1.2600.5512, fault address 0x0001295d.

Error - 11/9/2010 11:08:14 PM | Computer Name = TITAN | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.3951, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 11/9/2010 11:08:15 PM | Computer Name = TITAN | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.3951, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 11/9/2010 11:08:59 PM | Computer Name = TITAN | Source = Application Hang | ID = 1001
Description = Fault bucket -2137877539.

Error - 11/11/2010 12:06:15 AM | Computer Name = TITAN | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 11/11/2010 6:09:26 PM | Computer Name = TITAN | Source = Application Hang | ID = 1002
Description = Hanging application Photoshop.exe, version 10.0.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 11/12/2010 12:32:09 AM | Computer Name = TITAN | Source = MsiInstaller | ID = 10005
Description = Product: Dell Support Center (Support Software) – This program requires
that the .Net Framework be installed. Please go to http://msdn2.microsoft.com/netframework/
to download and install .Net Framework prior and then try again.

Error - 11/13/2010 8:59:46 PM | Computer Name = TITAN | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 11/7/2010 6:57:45 PM | Computer Name = TITAN | Source = Service Control Manager | ID = 7034
Description = The ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## service terminated
unexpectedly. It has done this 1 time(s).

Error - 11/11/2010 12:16:28 AM | Computer Name = TITAN | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80246007: Security Update for Windows XP Service Pack 3 (KB952069).

Error - 11/11/2010 12:19:44 AM | Computer Name = TITAN | Source = Service Control Manager | ID = 7034
Description = The ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## service terminated
unexpectedly. It has done this 1 time(s).

Error - 11/11/2010 12:19:46 AM | Computer Name = TITAN | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80246007: Security Update for Windows Media Format Runtime 9, 9.5
& 11 for Windows XP SP3 (KB978695).

Error - 11/11/2010 12:27:31 AM | Computer Name = TITAN | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80246007: Security Update for Windows Media Format Runtime 9, 9.5
& 11 for Windows XP SP 3 (KB954155).

Error - 11/11/2010 12:28:36 AM | Computer Name = TITAN | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80246007: Security Update for Windows XP (KB975558).

Error - 11/11/2010 9:19:32 AM | Computer Name = TITAN | Source = Service Control Manager | ID = 7034
Description = The ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## service terminated
unexpectedly. It has done this 1 time(s).

Error - 11/12/2010 12:27:21 AM | Computer Name = TITAN | Source = Service Control Manager | ID = 7000
Description = The DellBIOS service failed to start due to the following error: %%2

Error - 11/12/2010 12:14:07 PM | Computer Name = TITAN | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetBT_Tcpip_{20E56B56-19CC-4174-B99D-72EAFB8552B5}
because another computer on the network has the same name. The server could not
start.

Error - 11/14/2010 8:52:46 AM | Computer Name = TITAN | Source = Service Control Manager | ID = 7034
Description = The ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## service terminated
unexpectedly. It has done this 1 time(s).


< End of report >


OTL.txt
OTL logfile created on: 11/14/2010 10:00:37 AM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Downloads\antivirus
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,014.00 Mb Total Physical Memory | 458.00 Mb Available Physical Memory | 45.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 69.63 Gb Total Space | 52.72 Gb Free Space | 75.71% Space Free | Partition Type: NTFS
Drive K: | 186.30 Gb Total Space | 53.55 Gb Free Space | 28.74% Space Free | Partition Type: NTFS

Computer Name: TITAN | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Downloads\antivirus\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG10\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe (Sony Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (Intel Corporation )
PRC - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (Intel Corporation)
PRC - C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc)
PRC - C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe (SigmaTel, Inc.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)


========== Modules (SafeList) ==========

MOD - C:\Downloads\antivirus\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Dell\QuickSet\dadkeyb.dll ()
MOD - C:\WINDOWS\system32\hccutils.dll (Intel Corporation)
MOD - C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll ()


========== Win32 Services (SafeList) ==========

SRV - (HidServ) – C:\WINDOWS\System32\hidserv.dll File not found
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (AVGIDSAgent) – C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVG Security Toolbar Service) – C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe ()
SRV - (avgwd) – C:\Program Files\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (EvtEng) Intel® – C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (Intel Corporation)
SRV - (WLANKEEPER) Intel® – C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe (Intel Corporation)
SRV - (S24EventMonitor) Intel® – C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (Intel Corporation )
SRV - (RegSrvc) Intel® – C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (Intel Corporation)


========== Driver Services (SafeList) ==========

DRV - (UIUSys) – C:\WINDOWS\System32\DRIVERS\UIUSYS.SYS File not found
DRV - (DellBIOS) – C:\WINDOWS\DellBIOS.Sys File not found
DRV - (AVGIDSEH) – C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgtdix) – C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) – C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgldx86) – C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgrkx86) – C:\WINDOWS\system32\DRIVERS\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSFilter) – C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSDriver) – C:\WINDOWS\system32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShim) – C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (NETw4x32) Intel® – C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation)
DRV - (s24trans) – C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (STHDA) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (ialm) – C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation)
DRV - (bcm4sbxp) – C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)
DRV - (rimmptsk) – C:\WINDOWS\system32\drivers\rimmptsk.sys (REDC)
DRV - (rimsptsk) – C:\WINDOWS\system32\drivers\rimsptsk.sys (REDC)
DRV - (rismxdp) – C:\WINDOWS\system32\drivers\rixdptsk.sys (REDC)
DRV - (BTSERIAL) – C:\WINDOWS\system32\drivers\btserial.sys (Broadcom Corporation.)
DRV - (BTKRNL) – C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.)
DRV - (SynTP) – C:\WINDOWS\system32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (HSF_DPV) – C:\WINDOWS\system32\drivers\HSX_DPV.sys (Conexant Systems, Inc.)
DRV - (HSXHWAZL) – C:\WINDOWS\system32\drivers\HSXHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSX_CNXT.sys (Conexant Systems, Inc.)
DRV - (APPDRV) – C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS (Dell Inc)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1151
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2010/10/28 17:39:36 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/11/04 23:01:35 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/04 22:42:01 | 000,000,000 | —D | M]

[2010/11/04 23:08:09 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions
[2010/11/13 17:45:24 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\ou6tdmgw.default\extensions
[2010/11/07 14:42:54 | 000,000,000 | —D | M] (DownloadHelper) – C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\ou6tdmgw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/11/04 22:42:01 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2004/08/04 05:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ContentTransferWMDetector.exe] C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe (Sony Corporation)
O4 - HKLM..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe (SigmaTel, Inc.)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKLM..\RunOnce\Setup: [Registering ActiveScan 2.0 Components] C:\Program Files\Panda Security\ActiveScan 2.0\as2guiie.dll (Panda Security, S.L.)
O4 - HKLM..\RunOnce\Setup: [Registering ActiveScan 2.0 Components.] C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
O4 - HKLM..\RunOnce\Setup: [Registering ActiveScan 2.0 Components..] C:\Program Files\Panda Security\ActiveScan 2.0\libcomm.dll (Panda Security, S.L.)
O4 - HKLM..\RunOnce\Setup: [Registering ActiveScan 2.0 Components…] C:\Program Files\Panda Security\ActiveScan 2.0\as2inst.dll (Panda Security, S.L.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Send to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\RSLSP.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\System32\RSLSP.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\System32\RSLSP.dll ()
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1288332977796 (MUWebControl Class)
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.123.254
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/27 12:35:20 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax ()
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (55182706186649600)

========== Files/Folders - Created Within 30 Days ==========

[2010/11/14 08:10:09 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro
[2010/11/13 23:50:19 | 000,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2010/11/13 23:50:19 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2010/11/13 23:36:58 | 000,000,000 | —D | C] – C:\Program Files\Panda Security
[2010/11/13 19:55:13 | 000,060,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\USBAUDIO.sys
[2010/11/13 19:55:13 | 000,060,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbaudio.sys
[2010/11/13 19:53:30 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2010/11/12 13:18:27 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
[2010/11/12 11:14:15 | 000,012,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mouhid.sys
[2010/11/12 11:13:59 | 000,010,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidusb.sys
[2010/11/11 22:11:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop\New Folder
[2010/11/11 17:03:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-TW
[2010/11/11 17:03:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\zh-HK
[2010/11/11 17:03:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\tr-TR
[2010/11/11 17:03:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\sv-SE
[2010/11/11 17:03:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\pt-BR
[2010/11/11 17:03:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\nl-NL
[2010/11/11 17:03:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\nb-NO
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ko-KR
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\it-IT
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\he-IL
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\fr-FR
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\fi-FI
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\es-ES
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\el-GR
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\de-DE
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\da-DK
[2010/11/11 17:03:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ar-SA
[2010/11/10 23:19:27 | 000,016,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2010/11/10 22:59:52 | 000,000,000 | —D | C] – C:\Office
[2010/11/10 21:11:18 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2010/11/10 21:10:12 | 000,000,000 | —D | C] – C:\Program Files\MSECache
[2010/11/10 13:50:55 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Local Settings\Application Data\Identities
[2010/11/10 07:58:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sony Corporation
[2010/11/10 07:57:41 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\Sony Corporation
[2010/11/10 02:51:58 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Sony Shared
[2010/11/10 02:23:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Local Settings\Application Data\Downloaded Installations
[2010/11/09 23:39:25 | 000,000,000 | —D | C] – C:\Program Files\TweetDeck
[2010/11/09 22:11:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\UMDF
[2010/11/09 22:11:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\LogFiles
[2010/11/09 22:09:45 | 000,000,000 | —D | C] – C:\Program Files\Sony
[2010/11/08 00:19:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop\upload
[2010/11/07 15:01:33 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop\test_files
[2010/11/07 14:52:38 | 000,000,000 | —D | C] – C:\Program Files\ConvertHelper
[2010/11/07 14:45:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\My Documents\ffdownloads
[2010/11/05 08:54:31 | 000,000,000 | -H-D | C] – C:\$AVG
[2010/11/04 23:15:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\My Documents\StationRipper
[2010/11/04 23:14:11 | 000,000,000 | —D | C] – C:\Program Files\Ratajik Software
[2010/11/04 23:01:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Local Settings\Application Data\Mozilla
[2010/11/04 23:01:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\Mozilla
[2010/11/04 22:42:00 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2010/10/31 20:45:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\appmgmt
[2010/10/29 22:33:39 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Owner\Recent
[2010/10/29 21:53:08 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop\kittehboilaptop
[2010/10/29 21:53:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop\pandypetie
[2010/10/29 21:52:18 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\FLEXnet
[2010/10/29 21:29:19 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/10/29 21:21:33 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Macrovision Shared
[2010/10/29 19:44:03 | 000,000,000 | -H-D | C] – C:\WINDOWS\PIF
[2010/10/29 19:31:55 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\My Documents\Downloads
[2010/10/29 19:28:19 | 000,000,000 | —D | C] – C:\Program Files\uTorrent
[2010/10/29 19:27:34 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2010/10/29 19:27:34 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2010/10/29 19:27:24 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2010/10/29 19:26:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\uTorrent
[2010/10/29 19:24:10 | 000,274,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2010/10/29 19:24:10 | 000,016,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2010/10/29 19:15:09 | 000,026,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbstor.sys
[2010/10/29 01:58:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\WinRAR
[2010/10/29 01:56:27 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2010/10/29 01:37:21 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2010/10/29 01:34:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop\USB
[2010/10/29 01:26:11 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2010/10/29 01:21:08 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\Malwarebytes
[2010/10/29 01:20:23 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/10/29 01:20:21 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2010/10/29 01:20:21 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2010/10/29 01:20:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/10/28 21:20:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1
[2010/10/28 20:27:59 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\com.seesmic.desktop.client.D89F32799270693BEF34AAA36E9B2632B59240FA.1
[2010/10/28 20:27:56 | 000,000,000 | —D | C] – C:\Program Files\Seesmic Desktop
[2010/10/28 20:20:49 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Owner\IECompatCache
[2010/10/28 20:18:17 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Owner\PrivacIE
[2010/10/28 20:16:16 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Owner\IETldCache
[2010/10/28 20:16:12 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010/10/28 20:12:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Local Settings\Application Data\Temp
[2010/10/28 20:09:15 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2010/10/28 20:08:29 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2010/10/28 20:07:35 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2010/10/28 20:07:16 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010/10/28 20:07:05 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Local Settings\Application Data\Google
[2010/10/28 20:06:48 | 000,000,000 | —D | C] – C:\Program Files\Google
[2010/10/28 20:06:43 | 000,000,000 | -H-D | C] – C:\WINDOWS\msdownld.tmp
[2010/10/28 19:45:17 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2010/10/28 19:40:42 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2010/10/28 19:40:41 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2010/10/28 19:40:39 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe AIR
[2010/10/28 19:40:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Local Settings\Application Data\Adobe
[2010/10/28 19:39:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\Adobe
[2010/10/28 18:33:39 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\My Documents\Seesmic
[2010/10/28 18:32:26 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2010/10/28 17:46:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\AVG10
[2010/10/28 17:40:24 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\Common Files
[2010/10/28 17:40:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2010/10/28 17:39:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AVG10
[2010/10/28 17:39:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\AVG
[2010/10/28 17:39:14 | 000,000,000 | —D | C] – C:\Program Files\AVG
[2010/10/28 17:33:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\Macromedia
[2010/10/28 17:31:59 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\MFAData
[2010/10/28 17:31:05 | 000,000,000 | —D | C] – C:\Downloads
[2010/10/28 10:44:14 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2010/10/28 09:28:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2010/10/28 09:28:45 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2010/10/28 09:28:45 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2010/10/28 09:28:45 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2010/10/28 09:28:45 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2010/10/28 09:25:32 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2010/10/28 09:22:15 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2010/10/28 09:04:37 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2010/10/28 09:04:35 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2010/10/28 09:04:34 | 000,712,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecs.dll
[2010/10/28 09:04:34 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2010/10/28 09:04:32 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2010/10/28 09:04:32 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2010/10/28 09:04:32 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2010/10/28 09:04:32 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2010/10/28 09:04:32 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2010/10/28 09:04:32 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2010/10/28 09:04:30 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2010/10/28 09:04:30 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2010/10/28 09:04:30 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2010/10/28 09:04:26 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2010/10/28 09:04:19 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdwxp.exe
[2010/10/28 09:04:18 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spdwnwxp.exe
[2010/10/28 09:04:14 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2010/10/28 09:04:14 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2010/10/28 09:04:14 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2010/10/28 09:04:14 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2010/10/28 09:04:14 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2010/10/28 09:04:14 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2010/10/28 09:04:14 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2010/10/28 09:04:13 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2010/10/28 09:04:13 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2010/10/28 09:04:13 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2010/10/28 09:04:13 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2010/10/28 09:04:13 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2010/10/28 09:04:13 | 000,040,960 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\drivers\sisagp.sys
[2010/10/28 09:04:13 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2010/10/28 09:04:08 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2010/10/28 09:04:03 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2010/10/28 09:04:03 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2010/10/28 09:04:02 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2010/10/28 09:04:02 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2010/10/28 09:04:01 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rasqec.dll
[2010/10/28 09:04:01 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2010/10/28 09:04:00 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qutil.dll
[2010/10/28 09:03:58 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2010/10/28 09:03:57 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2010/10/28 09:03:55 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2010/10/28 09:03:51 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\onex.dll
[2010/10/28 09:03:47 | 001,897,408 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010/10/28 09:03:46 | 004,274,816 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2010/10/28 09:03:44 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2010/10/28 09:03:38 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2010/10/28 09:03:38 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2010/10/28 09:03:38 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2010/10/28 09:03:38 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2010/10/28 09:03:37 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2010/10/28 09:03:37 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2010/10/28 09:03:36 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2010/10/28 09:03:36 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2010/10/28 09:03:36 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2010/10/28 09:03:36 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2010/10/28 09:03:36 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2010/10/28 09:03:32 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2010/10/28 09:03:32 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2010/10/28 09:03:20 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2010/10/28 09:03:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2010/10/28 09:03:12 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2010/10/28 09:03:12 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2010/10/28 09:03:12 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2010/10/28 09:03:03 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2010/10/28 09:03:03 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2010/10/28 09:03:01 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2010/10/28 09:03:01 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2010/10/28 09:03:01 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2010/10/28 09:03:00 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2010/10/28 09:02:49 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smtpapi.dll
[2010/10/28 09:02:49 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwnh.dll
[2010/10/28 09:02:45 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2010/10/28 09:02:45 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsdupd.exe
[2010/10/28 09:02:42 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2010/10/28 09:02:39 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\faxpatch.exe
[2010/10/28 09:02:37 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2010/10/28 09:02:37 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2010/10/28 09:02:37 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappcfg.dll
[2010/10/28 09:02:37 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2010/10/28 09:02:37 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2010/10/28 09:02:37 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappprxy.dll
[2010/10/28 09:02:37 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapolqec.dll
[2010/10/28 09:02:34 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2010/10/28 09:02:34 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2010/10/28 09:02:34 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2010/10/28 09:02:34 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2010/10/28 09:02:34 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3api.dll
[2010/10/28 09:02:34 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3dlg.dll
[2010/10/28 09:02:33 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlimport.exe
[2010/10/28 09:02:33 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2010/10/28 09:02:33 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2010/10/28 09:02:27 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2010/10/28 09:02:27 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2010/10/28 09:02:27 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2010/10/28 09:02:26 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2010/10/28 09:02:26 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2010/10/28 09:02:26 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2010/10/28 09:02:26 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2010/10/28 09:02:26 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2010/10/28 09:02:26 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2010/10/28 09:02:25 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2010/10/28 09:02:25 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2010/10/28 09:02:25 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2010/10/28 09:02:25 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2010/10/28 09:02:25 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2010/10/28 09:02:25 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2010/10/28 09:02:25 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2010/10/28 09:02:25 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2010/10/28 09:02:25 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2010/10/28 09:02:25 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2010/10/28 09:02:25 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2010/10/28 09:02:25 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2010/10/28 09:02:25 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2010/10/28 09:02:25 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2010/10/28 09:02:24 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2010/10/28 09:02:24 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2010/10/28 09:02:24 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2010/10/28 09:02:24 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2010/10/28 09:02:24 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2010/10/28 09:02:24 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2010/10/28 09:02:24 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2010/10/28 09:02:23 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2010/10/28 09:02:23 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2010/10/28 09:02:23 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2010/10/28 09:02:23 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2010/10/28 09:02:23 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2010/10/28 09:02:23 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2010/10/28 09:02:23 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2010/10/28 09:02:23 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2010/10/28 09:02:23 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2010/10/28 09:02:23 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2010/10/28 09:02:22 | 000,043,008 | —- | C] (Advanced Micro Devices, Inc.) – C:\WINDOWS\System32\drivers\amdagp.sys
[2010/10/28 09:02:22 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2010/10/28 09:02:22 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2010/10/28 09:02:22 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2010/10/28 09:02:22 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2010/10/28 09:02:22 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2010/10/28 09:02:22 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2010/10/28 09:02:22 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2010/10/28 09:02:21 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2010/10/28 08:56:37 | 000,602,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/10/28 08:56:37 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/10/28 08:56:36 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2010/10/28 08:56:35 | 001,986,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/10/28 08:56:33 | 011,080,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/10/28 08:52:12 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2010/10/28 08:49:22 | 000,000,000 | —D | C] – C:\Program Files\MSXML 6.0
[2010/10/28 08:46:32 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2010/10/28 08:46:32 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2010/10/28 08:46:23 | 000,357,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2010/10/28 08:46:10 | 000,455,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/10/28 08:45:45 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010/10/28 08:44:36 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2010/10/28 08:44:22 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/10/28 08:44:22 | 000,730,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2010/10/28 08:44:21 | 002,189,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/10/28 08:44:21 | 002,024,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/10/28 08:43:00 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2010/10/28 08:42:58 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2010/10/28 08:42:38 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2010/10/28 08:41:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2010/10/28 08:39:32 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2010/10/28 08:39:10 | 000,000,000 | -H-D | C] – C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2010/10/28 08:38:28 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Owner\UserData
[2010/10/28 08:35:36 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2010/10/28 08:33:38 | 000,172,032 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxres.dll
[2010/10/28 08:32:06 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Dell
[2010/10/28 08:30:58 | 001,601,536 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\stlang.dll
[2010/10/28 08:30:58 | 000,405,504 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\stsystra.exe
[2010/10/28 08:30:58 | 000,094,208 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\stacsv.exe
[2010/10/28 08:30:57 | 004,952,064 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\stacgui.cpl
[2010/10/28 08:30:56 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2010/10/28 08:30:56 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2010/10/28 08:30:56 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2010/10/28 08:30:49 | 001,222,840 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\drivers\sthda.sys
[2010/10/28 08:30:49 | 000,270,336 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\stacapi.dll
[2010/10/28 08:30:49 | 000,146,944 | —- | C] (IDT, Inc.) – C:\WINDOWS\System32\st325602.dll
[2010/10/28 08:30:48 | 000,000,000 | —D | C] – C:\Program Files\SigmaTel
[2010/10/28 08:30:05 | 000,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2010/10/28 08:29:50 | 000,016,128 | —- | C] (Dell Inc) – C:\WINDOWS\System32\drivers\APPDRV.SYS
[2010/10/28 08:29:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\InstallShield
[2010/10/28 08:28:50 | 005,704,672 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\igxpmp32.sys
[2010/10/28 08:28:50 | 003,293,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxress.dll
[2010/10/28 08:28:50 | 002,556,928 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igxpdx32.dll
[2010/10/28 08:28:50 | 002,334,720 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\iglicd32.dll
[2010/10/28 08:28:50 | 001,612,992 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igxpdv32.dll
[2010/10/28 08:28:50 | 000,535,320 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxcfg.exe
[2010/10/28 08:28:50 | 000,450,560 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igldev32.dll
[2010/10/28 08:28:50 | 000,204,800 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxdev.dll
[2010/10/28 08:28:50 | 000,200,704 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxpph.dll
[2010/10/28 08:28:50 | 000,192,512 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrdeu.lrc
[2010/10/28 08:28:50 | 000,188,416 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrita.lrc
[2010/10/28 08:28:50 | 000,188,416 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxresp.lrc
[2010/10/28 08:28:50 | 000,184,320 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrfra.lrc
[2010/10/28 08:28:50 | 000,180,224 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrptb.lrc
[2010/10/28 08:28:50 | 000,172,032 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrenu.lrc
[2010/10/28 08:28:50 | 000,170,776 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxzoom.exe
[2010/10/28 08:28:50 | 000,166,680 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxext.exe
[2010/10/28 08:28:50 | 000,149,504 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igxpgd32.dll
[2010/10/28 08:28:50 | 000,135,168 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxdo.dll
[2010/10/28 08:28:50 | 000,131,072 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrjpn.lrc
[2010/10/28 08:28:50 | 000,126,976 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrkor.lrc
[2010/10/28 08:28:50 | 000,122,880 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxcpl.cpl
[2010/10/28 08:28:50 | 000,110,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrcht.lrc
[2010/10/28 08:28:50 | 000,110,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxrchs.lrc
[2010/10/28 08:28:50 | 000,102,400 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\hccutils.dll
[2010/10/28 08:28:50 | 000,057,344 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igxprd32.dll
[2010/10/28 08:28:50 | 000,047,616 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxsrvc.dll
[2010/10/28 08:28:50 | 000,024,576 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxexps.dll
[2010/10/28 08:28:49 | 000,400,152 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\igxpun.exe
[2010/10/28 08:28:49 | 000,319,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\difxapi.dll
[2010/10/28 08:28:49 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Lang
[2010/10/28 08:28:36 | 000,000,000 | —D | C] – C:\Intel
[2010/10/28 08:27:40 | 000,045,568 | R— | C] (Broadcom Corporation) – C:\WINDOWS\System32\drivers\bcm4sbxp.sys
[2010/10/28 08:27:35 | 000,000,000 | —D | C] – C:\Program Files\Broadcom
[2010/10/28 08:25:42 | 000,000,000 | —D | C] – C:\Program Files\Dell
[2010/10/28 08:24:34 | 000,191,872 | —- | C] (Synaptics, Inc.) – C:\WINDOWS\System32\drivers\SynTP.sys
[2010/10/28 08:24:34 | 000,094,299 | —- | C] (Synaptics, Inc.) – C:\WINDOWS\System32\SynTPAPI.dll
[2010/10/28 08:24:34 | 000,081,920 | —- | C] (Synaptics, Inc.) – C:\WINDOWS\System32\SynTPCo2.dll
[2010/10/28 08:24:34 | 000,069,723 | —- | C] (Synaptics, Inc.) – C:\WINDOWS\System32\SynTPFcs.dll
[2010/10/28 08:24:33 | 000,114,688 | —- | C] (Synaptics, Inc.) – C:\WINDOWS\System32\SynCtrl.dll
[2010/10/28 08:24:33 | 000,082,014 | —- | C] (Synaptics, Inc.) – C:\WINDOWS\System32\SynCOM.dll
[2010/10/28 08:24:33 | 000,000,000 | —D | C] – C:\Program Files\Synaptics
[2010/10/28 08:24:27 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2010/10/28 08:22:00 | 000,000,000 | —D | C] – C:\Program Files\CONEXANT
[2010/10/28 08:21:37 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2010/10/28 08:21:10 | 000,936,960 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\drivers\HSX_DPV.sys
[2010/10/28 08:21:10 | 000,669,696 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\drivers\HSX_CNXT.sys
[2010/10/28 08:21:10 | 000,192,512 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\drivers\HSXHWAZL.sys
[2010/10/28 08:21:10 | 000,114,688 | —- | C] (Conexant Systems, Inc) – C:\WINDOWS\System32\Uci32103.dll
[2010/10/28 08:21:10 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2010/10/28 08:18:09 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\Intel
[2010/10/28 08:18:09 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Intel
[2010/10/28 08:18:09 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Application Data\Intel
[2010/10/28 08:17:46 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Intel
[2010/10/28 08:17:25 | 002,777,088 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETw4r32.dll
[2010/10/28 08:17:25 | 002,236,032 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\NETw4x32.sys
[2010/10/28 08:17:25 | 000,745,472 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETw4c32.dll
[2010/10/28 08:15:30 | 000,000,000 | —D | C] – C:\Program Files\WIDCOMM
[2010/10/28 08:13:28 | 000,000,000 | —D | C] – C:\Program Files\DIFX
[2010/10/28 08:13:22 | 000,037,376 | —- | C] (REDC) – C:\WINDOWS\System32\drivers\rixdptsk.sys
[2010/10/28 08:13:22 | 000,032,256 | —- | C] (REDC) – C:\WINDOWS\System32\drivers\rimmptsk.sys
[2010/10/28 08:13:20 | 000,090,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\snymsico.dll
[2010/10/28 08:13:20 | 000,043,520 | —- | C] (REDC) – C:\WINDOWS\System32\drivers\rimsptsk.sys
[2010/10/28 08:13:20 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2010/10/28 08:07:05 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2010/10/28 08:07:03 | 000,000,000 | —D | C] – C:\Program Files\Intel
[2010/10/28 08:03:17 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop\drivers
[2010/10/27 12:43:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Application Data\Identities
[2010/10/27 12:43:57 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2010/10/27 12:43:51 | 000,000,000 | R–D | C] – C:\Documents and Settings\Owner\My Documents\My Music
[2010/10/27 12:43:50 | 000,000,000 | R–D | C] – C:\Documents and Settings\Owner\My Documents\My Pictures
[2010/10/27 12:43:47 | 000,000,000 | –SD | C] – C:\Documents and Settings\Owner\Application Data\Microsoft
[2010/10/27 12:43:47 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Owner\SendTo
[2010/10/27 12:43:47 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Owner\Application Data
[2010/10/27 12:43:47 | 000,000,000 | R–D | C] – C:\Documents and Settings\Owner\Start Menu
[2010/10/27 12:43:47 | 000,000,000 | R–D | C] – C:\Documents and Settings\Owner\My Documents
[2010/10/27 12:43:47 | 000,000,000 | R–D | C] – C:\Documents and Settings\Owner\Favorites
[2010/10/27 12:43:47 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Owner\Cookies
[2010/10/27 12:43:47 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Owner\Templates
[2010/10/27 12:43:47 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Owner\PrintHood
[2010/10/27 12:43:47 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Owner\NetHood
[2010/10/27 12:43:47 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Owner\Local Settings
[2010/10/27 12:43:47 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft
[2010/10/27 12:43:47 | 000,000,000 | —D | C] – C:\Documents and Settings\Owner\Desktop
[2010/10/27 12:41:22 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2010/10/27 12:41:20 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2010/10/27 12:41:20 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/10/27 12:41:19 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/10/27 12:39:36 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/10/27 12:39:36 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/10/27 12:38:29 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2010/10/27 12:38:28 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2010/10/27 12:38:28 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2010/10/27 12:38:28 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2010/10/27 12:38:28 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2010/10/27 12:38:27 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2010/10/27 12:38:26 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2010/10/27 12:38:26 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2010/10/27 12:38:25 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2010/10/27 12:38:24 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2010/10/27 12:38:24 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2010/10/27 12:38:24 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2010/10/27 12:38:23 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2010/10/27 12:38:23 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2010/10/27 12:38:23 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2010/10/27 12:38:21 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2010/10/27 12:38:21 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2010/10/27 12:38:20 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2010/10/27 12:38:18 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2010/10/27 12:38:18 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2010/10/27 12:38:18 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2010/10/27 12:38:18 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2010/10/27 12:38:17 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2010/10/27 12:38:17 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2010/10/27 12:38:17 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2010/10/27 12:38:17 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2010/10/27 12:38:15 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2010/10/27 12:38:13 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2010/10/27 12:38:12 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2010/10/27 12:38:11 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2010/10/27 12:38:11 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2010/10/27 12:38:09 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2010/10/27 12:38:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2010/10/27 12:38:08 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2010/10/27 12:38:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2010/10/27 12:38:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2010/10/27 12:38:08 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2010/10/27 12:38:08 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2010/10/27 12:38:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2010/10/27 12:38:07 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2010/10/27 12:38:07 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2010/10/27 12:38:07 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2010/10/27 12:38:07 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2010/10/27 12:38:07 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2010/10/27 12:38:07 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2010/10/27 12:38:07 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2010/10/27 12:38:07 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2010/10/27 12:38:07 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2010/10/27 12:38:06 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2010/10/27 12:38:03 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2010/10/27 12:38:02 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2010/10/27 12:38:01 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2010/10/27 12:38:01 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2010/10/27 12:38:00 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2010/10/27 12:37:59 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2010/10/27 12:37:59 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2010/10/27 12:37:57 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2010/10/27 12:37:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2010/10/27 12:37:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2010/10/27 12:37:55 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2010/10/27 12:37:55 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2010/10/27 12:37:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2010/10/27 12:37:54 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2010/10/27 12:37:54 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2010/10/27 12:37:53 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2010/10/27 12:37:53 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2010/10/27 12:37:53 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2010/10/27 12:37:52 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2010/10/27 12:37:52 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2010/10/27 12:37:52 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2010/10/27 12:37:51 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2010/10/27 12:37:51 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2010/10/27 12:37:51 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2010/10/27 12:37:49 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2010/10/27 12:37:48 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2010/10/27 12:37:46 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2010/10/27 12:37:42 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2010/10/27 12:37:42 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2010/10/27 12:37:36 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2010/10/27 12:37:36 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2010/10/27 12:37:36 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2010/10/27 12:37:35 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2010/10/27 12:37:34 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2010/10/27 12:37:31 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2010/10/27 12:37:31 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2010/10/27 12:37:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2010/10/27 12:37:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2010/10/27 12:37:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2010/10/27 12:37:30 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2010/10/27 12:37:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2010/10/27 12:37:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2010/10/27 12:37:30 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2010/10/27 12:37:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2010/10/27 12:37:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2010/10/27 12:37:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2010/10/27 12:37:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2010/10/27 12:37:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2010/10/27 12:37:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2010/10/27 12:37:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2010/10/27 12:37:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2010/10/27 12:37:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2010/10/27 12:37:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2010/10/27 12:37:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2010/10/27 12:37:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2010/10/27 12:37:28 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2010/10/27 12:37:28 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2010/10/27 12:37:28 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2010/10/27 12:37:28 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2010/10/27 12:37:28 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2010/10/27 12:37:28 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2010/10/27 12:37:28 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2010/10/27 12:37:27 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2010/10/27 12:37:27 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2010/10/27 12:37:27 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2010/10/27 12:37:27 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2010/10/27 12:37:27 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2010/10/27 12:37:27 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2010/10/27 12:37:26 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2010/10/27 12:37:25 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2010/10/27 12:37:24 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2010/10/27 12:37:23 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2010/10/27 12:37:23 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2010/10/27 12:37:23 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2010/10/27 12:37:23 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2010/10/27 12:37:23 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2010/10/27 12:37:23 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2010/10/27 12:37:22 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2010/10/27 12:37:22 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2010/10/27 12:37:22 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2010/10/27 12:37:22 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2010/10/27 12:37:22 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2010/10/27 12:37:22 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2010/10/27 12:37:21 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2010/10/27 12:37:21 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2010/10/27 12:37:21 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2010/10/27 12:37:21 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2010/10/27 12:37:20 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2010/10/27 12:37:20 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2010/10/27 12:37:20 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2010/10/27 12:37:20 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2010/10/27 12:37:20 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2010/10/27 12:37:20 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2010/10/27 12:37:19 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2010/10/27 12:37:19 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2010/10/27 12:37:19 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2010/10/27 12:37:19 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2010/10/27 12:37:12 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2010/10/27 12:36:58 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2010/10/27 12:36:56 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2010/10/27 12:36:54 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2010/10/27 12:36:54 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2010/10/27 12:36:53 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2010/10/27 12:36:52 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2010/10/27 12:36:52 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2010/10/27 12:36:52 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2010/10/27 12:36:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2010/10/27 12:36:49 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2010/10/27 12:36:48 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2010/10/27 12:36:48 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2010/10/27 12:36:48 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2010/10/27 12:36:48 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2010/10/27 12:36:47 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2010/10/27 12:36:43 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2010/10/27 12:36:41 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2010/10/27 12:36:41 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2010/10/27 12:36:41 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2010/10/27 12:36:41 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2010/10/27 12:36:41 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2010/10/27 12:36:39 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2010/10/27 12:36:39 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2010/10/27 12:36:39 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2010/10/27 12:36:38 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2010/10/27 12:36:38 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2010/10/27 12:36:38 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2010/10/27 12:36:37 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2010/10/27 12:36:37 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2010/10/27 12:36:37 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2010/10/27 12:36:36 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2010/10/27 12:36:36 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2010/10/27 12:36:36 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2010/10/27 12:36:35 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2010/10/27 12:36:35 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2010/10/27 12:36:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2010/10/27 12:36:28 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2010/10/27 12:36:27 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2010/10/27 12:36:26 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2010/10/27 12:36:26 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2010/10/27 12:36:25 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2010/10/27 12:36:24 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2010/10/27 12:36:23 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2010/10/27 12:36:23 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2010/10/27 12:36:20 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2010/10/27 12:36:15 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2010/10/27 12:36:15 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2010/10/27 12:36:14 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2010/10/27 12:36:14 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2010/10/27 12:36:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2010/10/27 12:36:13 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2010/10/27 12:36:09 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2010/10/27 12:36:04 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2010/10/27 12:36:04 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2010/10/27 12:36:04 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2010/10/27 12:35:49 | 000,000,000 | —D | C] – C:\DELL
[2010/10/27 12:35:38 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2010/10/27 12:35:36 | 000,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2010/10/27 12:35:05 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2010/10/27 12:34:14 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2010/10/27 12:34:03 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2010/10/27 12:34:02 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2010/10/27 12:33:50 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2010/10/27 12:33:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2010/10/27 12:33:05 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2010/10/27 12:33:05 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2010/10/27 12:33:05 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2010/10/27 12:33:05 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2010/10/27 12:33:05 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2010/10/27 12:33:04 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2010/10/27 12:32:54 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2010/10/27 12:32:53 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2010/10/27 12:32:53 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2010/10/27 12:32:53 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2010/10/27 12:32:52 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2010/10/27 12:32:52 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2010/10/27 12:32:52 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2010/10/27 12:32:52 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2010/10/27 12:32:51 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2010/10/27 12:32:48 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2010/10/27 12:32:48 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2010/10/27 12:32:48 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2010/10/27 12:32:48 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2010/10/27 12:32:48 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2010/10/27 12:32:48 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2010/10/27 12:32:48 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2010/10/27 12:32:47 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2010/10/27 12:32:47 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2010/10/27 12:32:47 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2010/10/27 12:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2010/10/27 12:32:46 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2010/10/27 12:32:42 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2010/10/27 12:32:41 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2010/10/27 12:32:40 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2010/10/27 12:32:40 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2010/10/27 12:32:39 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2010/10/27 12:32:39 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2010/10/27 12:32:39 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2010/10/27 12:32:39 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2010/10/27 12:32:38 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2010/10/27 12:32:38 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2010/10/27 12:32:38 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2010/10/27 12:32:38 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2010/10/27 12:32:38 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2010/10/27 12:32:37 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2010/10/27 12:32:37 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2010/10/27 12:32:37 | 000,209,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2010/10/27 12:32:37 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2010/10/27 12:32:36 | 001,929,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2010/10/27 12:32:36 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2010/10/27 12:32:36 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2010/10/27 12:32:36 | 000,217,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2010/10/27 12:32:36 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2010/10/27 12:32:36 | 000,053,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2010/10/27 12:32:36 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2010/10/27 12:32:36 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2010/10/27 12:32:35 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2010/10/27 12:32:35 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2010/10/27 12:32:35 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2010/10/27 12:32:30 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2010/10/27 12:32:30 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2010/10/27 12:32:25 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2010/10/27 12:32:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2010/10/27 12:32:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2010/10/27 12:32:25 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2010/10/27 12:32:20 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2010/10/27 12:32:19 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2010/10/27 12:32:19 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2010/10/27 12:32:18 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2010/10/27 12:32:18 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2010/10/27 12:32:18 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2010/10/27 12:32:17 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2010/10/27 12:32:17 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2010/10/27 12:32:14 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2010/10/27 12:32:14 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2010/10/27 12:32:14 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2010/10/27 12:32:12 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2010/10/27 12:32:10 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2010/10/27 12:32:10 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2010/10/27 12:32:09 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2010/10/27 12:32:09 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2010/10/27 12:32:09 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2010/10/27 12:32:08 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2010/10/27 12:32:02 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2010/10/27 12:32:02 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2010/10/27 12:31:54 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2010/10/27 12:31:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2010/10/27 12:31:17 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2010/10/27 12:31:11 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2010/10/27 12:31:06 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2010/10/27 12:31:05 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2010/10/27 12:31:05 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2010/10/27 12:31:00 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2010/10/27 12:30:59 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2010/10/27 12:30:59 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2010/10/27 12:30:59 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2010/10/27 12:30:58 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2010/10/27 12:30:58 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2010/10/27 12:30:58 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2010/10/27 12:30:58 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2010/10/27 12:30:58 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2010/10/27 12:30:58 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2010/10/27 12:30:58 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2010/10/27 12:30:57 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2010/10/27 12:30:57 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2010/10/27 12:30:57 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2010/10/27 12:30:57 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2010/10/27 12:30:57 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2010/10/27 12:30:57 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2010/10/27 12:30:57 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2010/10/27 12:30:57 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2010/10/27 12:30:56 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2010/10/27 12:30:56 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2010/10/27 12:30:56 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2010/10/27 12:30:55 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2010/10/27 12:30:55 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2010/10/27 12:30:55 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2010/10/27 12:30:55 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2010/10/27 12:30:55 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2010/10/27 12:30:55 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2010/10/27 12:30:45 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2010/10/27 12:30:45 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2010/10/27 12:30:45 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2010/10/27 12:30:45 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2010/10/27 12:30:44 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2010/10/27 12:30:44 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2010/10/27 12:30:44 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2010/10/27 12:30:44 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2010/10/27 12:30:44 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2010/10/27 12:30:44 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2010/10/27 12:30:44 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2010/10/27 12:30:44 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2010/10/27 12:30:36 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2010/10/27 12:30:36 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2010/10/27 12:30:36 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2010/10/27 12:30:36 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2010/10/27 12:30:36 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2010/10/27 12:30:36 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2010/10/27 12:30:35 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2010/10/27 12:30:35 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2010/10/27 12:30:35 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2010/10/27 12:30:35 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2010/10/27 12:30:35 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2010/10/27 12:30:35 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2010/10/27 12:30:34 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2010/10/27 12:30:34 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2010/10/27 12:30:34 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2010/10/27 12:30:34 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2010/10/27 12:30:34 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2010/10/27 12:30:34 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2010/10/27 12:30:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2010/10/27 12:30:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2010/10/27 12:30:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2010/10/27 12:30:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2010/10/27 12:30:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2010/10/27 12:30:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2010/10/27 12:30:34 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2010/10/27 12:30:34 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2010/10/27 12:30:33 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2010/10/27 12:30:33 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2010/10/27 12:30:33 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2010/10/27 12:30:33 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2010/10/27 12:30:33 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2010/10/27 12:30:33 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2010/10/27 12:30:33 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2010/10/27 12:30:33 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2010/10/27 12:30:33 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2010/10/27 12:30:33 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2010/10/27 12:30:33 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2010/10/27 12:30:33 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2010/10/27 12:30:33 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2010/10/27 12:30:33 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2010/10/27 12:30:33 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2010/10/27 12:30:33 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2010/10/27 12:30:32 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2010/10/27 12:30:32 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2010/10/27 12:30:32 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2010/10/27 12:30:32 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2010/10/27 12:30:32 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2010/10/27 12:30:31 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2010/10/27 12:30:31 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2010/10/27 12:30:31 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2010/10/27 12:30:31 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2010/10/27 12:30:31 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2010/10/27 12:30:27 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2010/10/27 12:30:27 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2010/10/27 12:30:27 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2010/10/27 12:30:27 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2010/10/27 12:30:27 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2010/10/27 12:30:27 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2010/10/27 12:30:27 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2010/10/27 12:30:27 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2010/10/27 12:30:26 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2010/10/27 12:30:26 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2010/10/27 12:30:26 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2010/10/27 12:30:26 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2010/10/27 12:30:26 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2010/10/27 12:30:26 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2010/10/27 12:30:26 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2010/10/27 12:30:25 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2010/10/27 12:30:06 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2010/10/27 12:30:05 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2010/10/27 12:30:05 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2010/10/27 12:30:05 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2010/10/27 12:30:04 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2010/10/27 12:30:04 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2010/10/27 12:30:04 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2010/10/27 12:30:04 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2010/10/27 12:30:03 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2010/10/27 12:30:03 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2010/10/27 12:30:03 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2010/10/27 12:30:02 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2010/10/27 12:30:02 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2010/10/27 12:30:01 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2010/10/27 12:30:01 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2010/10/27 12:30:01 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2010/10/27 12:30:01 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2010/10/27 12:30:01 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2010/10/27 12:30:01 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2010/10/27 12:30:00 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2010/10/27 12:30:00 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2010/10/27 12:30:00 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2010/10/27 12:30:00 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2010/10/27 12:30:00 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2010/10/27 12:30:00 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2010/10/27 12:30:00 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2010/10/27 12:30:00 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2010/10/27 12:30:00 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2010/10/27 12:29:59 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2010/10/27 12:29:59 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2010/10/27 12:29:59 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2010/10/27 12:29:59 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2010/10/27 12:29:58 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2010/10/27 12:29:58 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2010/10/27 12:29:58 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2010/10/27 12:29:57 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2010/10/27 12:29:57 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2010/10/27 12:29:57 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2010/10/27 12:29:56 | 001,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2010/10/27 12:29:56 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2010/10/27 12:29:48 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2010/10/27 12:29:48 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2010/10/27 12:29:47 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2010/10/27 12:29:47 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2010/10/27 12:29:39 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2010/10/27 08:24:33 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2010/10/27 08:24:15 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2010/10/27 08:24:08 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\battc.sys
[2010/10/27 08:23:20 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2010/10/27 08:23:20 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2010/10/27 08:23:19 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2010/10/27 08:23:19 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2010/10/27 08:23:17 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2010/10/27 08:23:16 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2010/10/27 08:23:16 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2010/10/27 08:23:15 | 000,000,000 | R–D | C] – C:\Program Files
[2010/10/27 08:23:15 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2010/10/27 08:23:15 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2010/10/27 08:23:13 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2010/10/27 08:23:13 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2010/10/27 08:23:13 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2010/10/27 08:23:13 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2010/10/27 08:23:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2010/10/27 08:23:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2010/10/27 08:23:11 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2010/10/27 08:23:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2010/10/27 08:23:09 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2010/10/27 08:23:09 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2010/10/27 08:23:09 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2010/10/27 08:23:09 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2010/10/27 08:23:09 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2010/10/27 08:23:09 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2010/10/27 08:23:09 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2010/10/27 08:23:09 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2010/10/27 08:23:09 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2010/10/27 08:23:09 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2010/10/27 08:23:09 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2010/10/27 08:23:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2010/10/27 08:23:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2010/10/27 08:23:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2010/10/27 08:23:07 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2010/10/27 08:23:07 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2010/10/27 08:23:07 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2010/10/27 08:23:07 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2010/10/27 08:23:07 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2010/10/27 08:23:07 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2010/10/27 08:23:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2010/10/27 08:23:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2010/10/27 08:23:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2010/10/27 08:23:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2010/10/27 08:23:06 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2010/10/27 08:23:06 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2010/10/27 08:23:06 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2010/10/27 08:23:06 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2010/10/27 08:23:05 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2010/10/27 08:23:05 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2010/10/27 08:23:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2010/10/27 08:23:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2010/10/27 08:23:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2010/10/27 08:23:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2010/10/27 08:23:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2010/10/27 08:23:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2010/10/27 08:23:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2010/10/27 08:23:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2010/10/27 08:23:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2010/10/27 08:23:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2010/10/27 08:23:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2010/10/27 08:23:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2010/10/27 08:23:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2010/10/27 08:23:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2010/10/27 08:23:05 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2010/10/27 08:23:05 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2010/10/27 08:23:05 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2010/10/27 08:23:05 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2010/10/27 08:23:05 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2010/10/27 08:23:05 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2010/10/27 08:23:03 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2010/10/27 08:23:03 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2010/10/27 08:23:03 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2010/10/27 08:23:03 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2010/10/27 08:23:03 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2010/10/27 08:23:03 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2010/10/27 08:23:02 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2010/10/27 08:23:02 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2010/10/27 08:23:02 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2010/10/27 08:23:02 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2010/10/27 08:23:02 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2010/10/27 08:23:02 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2010/10/27 08:23:02 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2010/10/27 08:23:02 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2010/10/27 08:23:02 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2010/10/27 08:23:02 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2010/10/27 08:23:02 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2010/10/27 08:23:02 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2010/10/27 08:23:02 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2010/10/27 08:23:02 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2010/10/27 08:23:01 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2010/10/27 08:23:01 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2010/10/27 08:23:01 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2010/10/27 08:23:01 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2010/10/27 08:23:01 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2010/10/27 08:23:01 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2010/10/27 08:23:01 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2010/10/27 08:23:01 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2010/10/27 08:23:01 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2010/10/27 08:23:01 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2010/10/27 08:23:01 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2010/10/27 08:23:00 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2010/10/27 08:23:00 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2010/10/27 08:23:00 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2010/10/27 08:23:00 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2010/10/27 08:22:59 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2010/10/27 08:22:58 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2010/10/27 08:22:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2010/10/27 08:22:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2010/10/27 08:22:53 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2010/10/27 08:22:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2010/10/27 08:22:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2010/10/27 08:22:37 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2010/10/27 08:22:37 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2010/10/27 08:22:31 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2010/10/27 08:22:31 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2010/10/27 08:22:00 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/10/27 08:22:00 | 000,000,000 | —D | C] – C:\Documents and Settings
[2010/10/27 08:12:29 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2010/10/27 08:12:29 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2010/10/27 08:12:29 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2010/10/27 08:12:29 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\ehome
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\dell
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2010/10/27 08:12:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/11/14 09:48:40 | 099,194,032 | —- | M] () – C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2010/11/14 09:46:26 | 000,010,355 | —- | M] () – C:\Documents and Settings\Owner\Desktop\DesktopDDS.zip
[2010/11/14 09:44:20 | 000,000,236 | —- | M] () – C:\WINDOWS\tasks\OGALogon.job
[2010/11/14 09:44:00 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/11/14 09:43:30 | 000,000,880 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/14 09:43:08 | 001,415,320 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/11/14 09:40:52 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/11/14 09:40:25 | 1063,714,816 | -HS- | M] () – C:\hiberfil.sys
[2010/11/14 08:17:00 | 000,000,884 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/14 08:10:14 | 000,001,734 | —- | M] () – C:\Documents and Settings\Owner\Desktop\HijackThis.lnk
[2010/11/14 06:11:32 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{E7E0FC26-F35E-42AA-ACA0-4A8CD8EF5763}.job
[2010/11/13 23:50:48 | 000,000,951 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/11/13 23:50:48 | 000,000,933 | —- | M] () – C:\Documents and Settings\Owner\Desktop\Spybot - Search & Destroy.lnk
[2010/11/11 01:05:52 | 000,006,656 | —- | M] () – C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/10 21:26:18 | 000,312,172 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/11/10 21:26:18 | 000,040,394 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/11/10 13:51:36 | 002,528,310 | —- | M] () – C:\Documents and Settings\Owner\Desktop\supernatural808.bmp
[2010/11/10 02:52:21 | 000,000,772 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Content Transfer.lnk
[2010/11/10 02:33:56 | 000,001,841 | —- | M] () – C:\Documents and Settings\All Users\Desktop\NWZ-E350 WALKMAN Guide.lnk
[2010/11/09 23:39:29 | 000,000,640 | —- | M] () – C:\Documents and Settings\All Users\Desktop\TweetDeck.lnk
[2010/11/09 22:15:34 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf
[2010/11/09 22:14:22 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2010/11/09 22:11:22 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2010/11/07 23:32:46 | 000,012,695 | —- | M] () – C:\Documents and Settings\Owner\Desktop\imits.htm
[2010/11/07 15:01:37 | 000,124,468 | —- | M] () – C:\Documents and Settings\Owner\Desktop\test.htm
[2010/11/07 09:59:14 | 000,449,527 | —- | M] () – C:\Documents and Settings\Owner\Desktop\kbback.htm
[2010/11/07 09:32:15 | 000,445,933 | —- | M] () – C:\Documents and Settings\Owner\Desktop\kittehboi_backup-2010-11-07.html
[2010/11/05 13:18:09 | 000,001,813 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2010/11/05 13:18:09 | 000,001,791 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/11/04 23:33:27 | 000,000,822 | —- | M] () – C:\Documents and Settings\Owner\Desktop\Shortcut to output.lnk
[2010/11/04 23:25:01 | 000,000,804 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/11/04 23:14:12 | 000,000,907 | —- | M] () – C:\Documents and Settings\All Users\Desktop\StationRipper.lnk
[2010/11/04 23:01:37 | 000,000,000 | —- | M] () – C:\WINDOWS\nsreg.dat
[2010/11/04 22:42:06 | 000,001,620 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/11/04 22:42:06 | 000,001,602 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/10/29 19:28:22 | 000,000,648 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/10/29 19:28:22 | 000,000,630 | —- | M] () – C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/10/29 01:57:49 | 000,000,692 | —- | M] () – C:\Documents and Settings\Owner\Desktop\WinRAR.lnk
[2010/10/29 01:37:22 | 000,000,682 | —- | M] () – C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2010/10/29 01:29:13 | 000,000,640 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\TweetDeck.lnk
[2010/10/29 01:27:50 | 000,001,498 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Calculator.lnk
[2010/10/29 01:27:23 | 000,000,700 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Seesmic Desktop.lnk
[2010/10/29 01:20:26 | 000,000,696 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/28 20:27:57 | 000,000,700 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Seesmic Desktop.lnk
[2010/10/28 20:16:34 | 000,000,815 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/10/28 19:45:52 | 000,001,729 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/10/28 17:40:08 | 000,000,690 | —- | M] () – C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2010/10/28 09:25:17 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/10/28 08:26:16 | 000,000,005 | —- | M] () – C:\WINDOWS\System32\drivers\DELL_XPS_MXC061 .MRK
[2010/10/28 08:26:16 | 000,000,005 | —- | M] () – C:\WINDOWS\System32\drivers\1028_DELL_XPS_MXC061 .MRK
[2010/10/28 08:15:34 | 000,000,637 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk
[2010/10/27 12:44:06 | 000,000,079 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/10/27 12:39:39 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2010/10/27 12:38:53 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2010/10/27 12:35:20 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2010/10/27 12:35:20 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2010/10/27 12:35:20 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/10/27 12:35:20 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/10/27 12:35:20 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2010/10/27 12:35:15 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2010/10/27 12:35:15 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2010/10/27 12:35:05 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2010/10/27 12:31:27 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2010/10/27 12:26:39 | 000,000,211 | -HS- | M] () – C:\boot.ini
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/11/14 09:48:40 | 099,194,032 | —- | C] () – C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2010/11/14 09:46:25 | 000,010,355 | —- | C] () – C:\Documents and Settings\Owner\Desktop\DesktopDDS.zip
[2010/11/14 08:10:14 | 000,001,734 | —- | C] () – C:\Documents and Settings\Owner\Desktop\HijackThis.lnk
[2010/11/13 23:50:48 | 000,000,951 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/11/13 23:50:48 | 000,000,933 | —- | C] () – C:\Documents and Settings\Owner\Desktop\Spybot - Search & Destroy.lnk
[2010/11/11 17:03:58 | 000,000,236 | —- | C] () – C:\WINDOWS\tasks\OGALogon.job
[2010/11/10 13:51:34 | 002,528,310 | —- | C] () – C:\Documents and Settings\Owner\Desktop\supernatural808.bmp
[2010/11/10 02:52:21 | 000,000,772 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Content Transfer.lnk
[2010/11/10 02:33:56 | 000,001,841 | —- | C] () – C:\Documents and Settings\All Users\Desktop\NWZ-E350 WALKMAN Guide.lnk
[2010/11/09 23:39:29 | 000,000,640 | —- | C] () – C:\Documents and Settings\All Users\Desktop\TweetDeck.lnk
[2010/11/09 22:15:34 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf
[2010/11/09 22:11:22 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2010/11/07 21:46:15 | 000,012,695 | —- | C] () – C:\Documents and Settings\Owner\Desktop\imits.htm
[2010/11/07 15:01:31 | 000,124,468 | —- | C] () – C:\Documents and Settings\Owner\Desktop\test.htm
[2010/11/07 09:47:57 | 000,449,527 | —- | C] () – C:\Documents and Settings\Owner\Desktop\kbback.htm
[2010/11/07 09:32:13 | 000,445,933 | —- | C] () – C:\Documents and Settings\Owner\Desktop\kittehboi_backup-2010-11-07.html
[2010/11/05 09:13:34 | 000,006,656 | —- | C] () – C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/04 23:33:27 | 000,000,822 | —- | C] () – C:\Documents and Settings\Owner\Desktop\Shortcut to output.lnk
[2010/11/04 23:25:01 | 000,000,804 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/11/04 23:14:16 | 000,372,736 | —- | C] () – C:\WINDOWS\System32\RSLSP.dll
[2010/11/04 23:14:12 | 000,000,907 | —- | C] () – C:\Documents and Settings\All Users\Desktop\StationRipper.lnk
[2010/11/04 23:01:37 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2010/11/04 22:42:06 | 000,001,620 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/11/04 22:42:06 | 000,001,602 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/10/29 19:28:22 | 000,000,648 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/10/29 19:28:22 | 000,000,630 | —- | C] () – C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/10/29 01:57:49 | 000,000,692 | —- | C] () – C:\Documents and Settings\Owner\Desktop\WinRAR.lnk
[2010/10/29 01:40:13 | 1063,714,816 | -HS- | C] () – C:\hiberfil.sys
[2010/10/29 01:37:22 | 000,000,682 | —- | C] () – C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2010/10/29 01:37:19 | 000,001,813 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2010/10/29 01:37:19 | 000,001,791 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/29 01:29:13 | 000,000,640 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\TweetDeck.lnk
[2010/10/29 01:27:50 | 000,001,498 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Calculator.lnk
[2010/10/29 01:27:23 | 000,000,700 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Seesmic Desktop.lnk
[2010/10/29 01:20:26 | 000,000,696 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/28 20:27:57 | 000,000,700 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Seesmic Desktop.lnk
[2010/10/28 20:19:32 | 000,000,422 | -H– | C] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{E7E0FC26-F35E-42AA-ACA0-4A8CD8EF5763}.job
[2010/10/28 20:07:14 | 000,000,884 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/28 20:07:14 | 000,000,880 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/28 19:45:51 | 000,001,729 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/10/28 17:40:08 | 000,000,690 | —- | C] () – C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2010/10/28 09:04:39 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2010/10/28 09:04:39 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2010/10/28 09:04:39 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2010/10/28 09:04:38 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2010/10/28 09:04:37 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2010/10/28 09:04:37 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2010/10/28 09:04:37 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2010/10/28 09:04:37 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2010/10/28 09:04:37 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2010/10/28 09:04:37 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2010/10/28 09:04:37 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2010/10/28 09:04:37 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2010/10/28 09:04:37 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2010/10/28 09:04:37 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2010/10/28 09:04:37 | 000,067,374 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2010/10/28 09:04:37 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2010/10/28 09:04:37 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2010/10/28 09:04:36 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2010/10/28 09:04:36 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2010/10/28 09:04:36 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2010/10/28 09:04:36 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2010/10/28 09:04:36 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2010/10/28 09:04:36 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2010/10/28 09:04:36 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2010/10/28 09:04:36 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2010/10/28 09:04:36 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2010/10/28 09:04:36 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2010/10/28 09:04:36 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2010/10/28 09:04:30 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2010/10/28 09:04:30 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2010/10/28 09:04:30 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2010/10/28 09:04:26 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2010/10/28 09:04:26 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2010/10/28 09:04:26 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2010/10/28 09:04:26 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2010/10/28 09:04:26 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2010/10/28 09:04:26 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2010/10/28 09:04:25 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2010/10/28 09:04:25 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2010/10/28 09:04:25 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2010/10/28 09:04:25 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2010/10/28 09:04:14 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2010/10/28 09:04:13 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2010/10/28 09:04:03 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2010/10/28 09:04:02 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2010/10/28 09:03:55 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2010/10/28 09:03:55 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2010/10/28 09:03:55 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2010/10/28 09:03:55 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2010/10/28 09:03:54 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2010/10/28 09:03:54 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2010/10/28 09:03:54 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2010/10/28 09:03:54 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2010/10/28 09:03:54 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2010/10/28 09:03:54 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2010/10/28 09:03:54 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2010/10/28 09:03:54 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2010/10/28 09:03:54 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2010/10/28 09:03:54 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2010/10/28 09:03:54 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2010/10/28 09:03:54 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2010/10/28 09:03:45 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2010/10/28 09:03:42 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2010/10/28 09:03:42 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2010/10/28 09:03:41 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2010/10/28 09:03:17 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2010/10/28 09:03:17 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2010/10/28 09:03:17 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2010/10/28 09:03:11 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2010/10/28 09:02:49 | 000,000,974 | —- | C] () – C:\WINDOWS\System32\pid.inf
[2010/10/28 09:02:38 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2010/10/28 09:02:32 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010/10/28 09:02:31 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2010/10/28 09:02:31 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2010/10/28 09:02:31 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2010/10/28 09:02:31 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2010/10/28 09:02:30 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2010/10/28 09:02:30 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2010/10/28 09:02:30 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2010/10/28 09:02:30 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2010/10/28 09:02:29 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2010/10/28 09:02:29 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2010/10/28 09:02:27 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2010/10/28 09:02:25 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2010/10/28 08:28:50 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\igfxCoIn_v4814.dll
[2010/10/28 08:28:50 | 000,025,472 | —- | C] () – C:\WINDOWS\System32\igxpxs32.vp
[2010/10/28 08:28:50 | 000,002,096 | —- | C] () – C:\WINDOWS\System32\igxpxk32.vp
[2010/10/28 08:28:49 | 000,121,232 | —- | C] () – C:\WINDOWS\System32\IScrNBR.bmp
[2010/10/28 08:28:49 | 000,121,232 | —- | C] () – C:\WINDOWS\System32\IScrNB.bmp
[2010/10/28 08:26:16 | 000,000,005 | —- | C] () – C:\WINDOWS\System32\drivers\DELL_XPS_MXC061 .MRK
[2010/10/28 08:26:16 | 000,000,005 | —- | C] () – C:\WINDOWS\System32\drivers\1028_DELL_XPS_MXC061 .MRK
[2010/10/28 08:25:42 | 000,000,666 | —- | C] () – C:\WINDOWS\speed.reg
[2010/10/28 08:21:10 | 000,141,497 | —- | C] () – C:\WINDOWS\System32\drivers\del1028.cty
[2010/10/28 08:15:34 | 000,000,637 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk
[2010/10/28 08:13:22 | 000,016,480 | —- | C] () – C:\WINDOWS\System32\rixdicon.dll
[2010/10/27 12:44:06 | 000,000,079 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/10/27 12:43:57 | 000,000,815 | —- | C] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/10/27 12:39:39 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2010/10/27 12:38:46 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2010/10/27 12:37:53 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010/10/27 12:37:32 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010/10/27 12:37:23 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2010/10/27 12:37:22 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010/10/27 12:37:20 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2010/10/27 12:37:04 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010/10/27 12:36:56 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2010/10/27 12:36:38 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2010/10/27 12:35:20 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2010/10/27 12:35:20 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2010/10/27 12:35:20 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2010/10/27 12:35:20 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2010/10/27 12:35:20 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2010/10/27 12:35:15 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2010/10/27 12:35:15 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2010/10/27 12:35:13 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2010/10/27 12:33:38 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2010/10/27 12:33:02 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2010/10/27 12:33:02 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2010/10/27 12:32:54 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2010/10/27 12:31:27 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2010/10/27 12:30:38 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2010/10/27 12:30:38 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2010/10/27 12:30:38 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2010/10/27 12:30:38 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2010/10/27 12:30:38 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2010/10/27 12:30:38 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2010/10/27 12:30:38 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2010/10/27 12:30:38 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2010/10/27 12:30:38 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2010/10/27 12:30:37 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2010/10/27 12:30:37 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2010/10/27 12:30:34 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2010/10/27 12:30:34 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2010/10/27 12:30:33 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2010/10/27 12:30:25 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2010/10/27 08:23:20 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2010/10/27 08:23:18 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2010/10/27 08:23:17 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010/10/27 08:23:17 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2010/10/27 08:23:16 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010/10/27 08:23:00 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2010/10/27 08:22:52 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2010/10/27 08:22:52 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010/10/27 08:22:52 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010/10/27 08:22:52 | 000,007,710 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010/10/27 08:22:52 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010/10/27 08:22:51 | 001,042,903 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2010/10/27 08:22:51 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010/10/27 08:22:51 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010/10/27 08:21:59 | 001,415,320 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/27 08:20:53 | 000,000,211 | -HS- | C] () – C:\boot.ini
[2010/10/27 08:20:50 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2006/05/24 17:16:22 | 000,090,112 | —- | C] () – C:\WINDOWS\System32\btprn2k.dll
[2004/08/04 05:00:00 | 000,755,200 | —- | C] () – C:\WINDOWS\System32\ir50_32.dll
[2004/08/04 05:00:00 | 000,338,432 | —- | C] () – C:\WINDOWS\System32\ir41_qcx.dll
[2004/08/04 05:00:00 | 000,200,192 | —- | C] () – C:\WINDOWS\System32\ir50_qc.dll
[2004/08/04 05:00:00 | 000,183,808 | —- | C] () – C:\WINDOWS\System32\ir50_qcx.dll
[2004/08/04 05:00:00 | 000,120,320 | —- | C] () – C:\WINDOWS\System32\ir41_qc.dll
[2001/11/14 12:56:00 | 001,802,240 | —- | C] () – C:\WINDOWS\System32\lcppn21.dll

========== LOP Check ==========

[2010/10/28 17:48:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2010/10/28 17:40:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG10
[2010/10/28 17:40:24 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\Common Files
[2010/10/28 17:39:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MFAData
[2010/10/28 17:46:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\AVG10
[2010/10/28 20:27:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\com.seesmic.desktop.client.D89F32799270693BEF34AAA36E9B2632B59240FA.1
[2010/10/28 21:20:45 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1
[2010/11/14 09:45:02 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\uTorrent
[2010/11/14 09:44:20 | 000,000,236 | —- | M] () – C:\WINDOWS\Tasks\OGALogon.job
[2010/11/14 06:11:32 | 000,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{E7E0FC26-F35E-42AA-ACA0-4A8CD8EF5763}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/10/27 12:35:20 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2010/10/27 12:26:39 | 000,000,211 | -HS- | M] () – C:\boot.ini
[2010/10/27 12:35:20 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/11/14 09:40:25 | 1063,714,816 | -HS- | M] () – C:\hiberfil.sys
[2010/10/27 12:35:20 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/10/27 12:35:20 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2010/10/28 09:25:17 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/11/14 09:40:15 | 1598,029,824 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\Fonts\*.com >

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/10/27 12:34:51 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/10/27 08:20:52 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2010/10/27 08:20:52 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2010/10/27 08:20:52 | 000,897,024 | —- | M] () – C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/10/28 09:29:27 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/10/28 17:29:47 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2010/10/27 12:44:06 | 000,000,079 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-11-11 22:04:13

< End of report >

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.


Next:


Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2

• Ensure all Firefox windows are closed.
• To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
• When prompted to run the scan, click Yes.
• It doesn't take long to run, once it is finished move onto the next step

Next:

Note: if the Cure option is not there, please select 'Skip'.

Please read carefully and follow these steps.

• Please download TDSSKiller.zip
  • Extract it to your desktop
  • Double click TDSSKiller.exe
  • Press Start Scan
    
    • Only if Malicious objects are found then ensure Cure is selected
    • Then click Continue > Reboot now
  • Copy and paste the log in your next reply
    
    • A copy of the log will be saved automatically to the root directory, root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
  please post the contents of that log TDSSKiller and GooredFix log.

Ah, ok. The power button normally goes to standby. I didn't know I could hold it down and shut down entirely. You learn something new every day.

When I rebooted the combofix window came up again and this time it ran through 50-some tests, deleted two Dell drivers, and popped up a log file. I'm pasting the log file below.

Sound is still scratchy.

Should I pop over to the hardware forums and ask for a non-destructive hard drive/HD controller test? I know what this thing usually acts like. There are extra clicks from the HD as I do things and I THINK the HD light is sort of matching the "scratches" in the sound.. Wow, as I'm typing I can see the cursor hourglass thingy flashing as I type.

I haven't installed AVAST yet. Should I do that now or wait?


Leslie



ComboFix 10-11-18.04 - Owner 11/19/2010 13:06:47.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.734 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\1028_DELL_XPS_MXC061 .MRK
c:\windows\system32\drivers\DELL_XPS_MXC061 .MRK

.
((((((((((((((((((((((((( Files Created from 2010-10-19 to 2010-11-19 )))))))))))))))))))))))))))))))
.

2010-11-19 05:28 . 2010-11-19 05:28 ——– d—–r- C:\MSOCache
2010-11-11 03:59 . 2010-11-11 04:09 ——– d—–w- C:\Office
2010-10-28 22:31 . 2010-11-12 22:20 ——– d—–w- C:\Downloads
2010-10-28 13:28 . 2010-10-28 13:28 ——– d—–w- C:\Intel

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-18 16:23 . 2004-08-04 10:00 974848 —-a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2004-08-04 10:00 974848 —-a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2004-08-04 10:00 954368 —-a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2004-08-04 10:00 953856 —-a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:58 . 2006-03-04 03:33 916480 —-a-w- c:\windows\system32\wininet.dll
2010-09-10 05:58 . 2004-08-04 10:00 43520 ——w- c:\windows\system32\licmgr10.dll
2010-09-10 05:58 . 2004-08-04 10:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:51 . 2004-08-04 10:00 285824 —-a-w- c:\windows\system32\atmfd.dll
2010-08-31 13:42 . 2004-08-04 10:00 1852800 —-a-w- c:\windows\system32\win32k.sys
2010-08-27 08:02 . 2004-08-04 10:00 119808 —-a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:57 . 2004-08-04 10:00 99840 —-a-w- c:\windows\system32\srvsvc.dll
2010-08-26 13:39 . 2004-08-04 10:00 357248 —-a-w- c:\windows\system32\drivers\srv.sys
2010-08-23 16:12 . 2004-08-04 10:00 617472 —-a-w- c:\windows\system32\comctl32.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-10-30 328568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-10-08 995328]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-10-08 1101824]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-03-31 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-03-31 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-03-30 138008]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2007-05-14 1191936]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"ContentTransferWMDetector.exe"="c:\program files\Sony\Content Transfer\ContentTransferWMDetector.exe" [2009-11-19 583016]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-5-24 622653]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Ratajik Software\\StationRipper\\StationRipperConsole.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [11/18/2010 11:29 PM 28552]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [10/28/2010 8:07 PM 135664]
S3 DellBIOS;DellBIOS;\??\c:\windows\DellBIOS.Sys –> c:\windows\DellBIOS.Sys [?]
.
Contents of the 'Scheduled Tasks' folder

2010-11-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-29 01:07]

2010-11-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-29 01:07]

2010-11-19 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 20:07]

2010-11-19 c:\windows\Tasks\User_Feed_Synchronization-{E7E0FC26-F35E-42AA-ACA0-4A8CD8EF5763}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 08:31]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
IE: Send to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
LSP: c:\windows\system32\RSLSP.dll
FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\ou6tdmgw.default\
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

—- FIREFOX POLICIES —-
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHANS REMOVED - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-SigmatelSysTrayApp - %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-19 13:15
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(928)
c:\windows\system32\netprovcredman.dll
c:\windows\system32\igfxdev.dll

- - - - - - - > 'lsass.exe'(984)
c:\windows\system32\RSLSP.dll
.
Completion time: 2010-11-19 13:18:23
ComboFix-quarantined-files.txt 2010-11-19 18:18

Pre-Run: 53,766,418,432 bytes free
Post-Run: 53,914,734,592 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 4410B065D1ED303446F8BC5CD1346AAF