bunky6000
Topic Starter
I'm not sure what's going on but for like the past 2 months all 3 computers in my house have been weird…nothing has been found when I've run different scans but my settings keep being changed, there are drivers being installed for hardware thats not on my computer, just alot of things that just aren't right- I've done clean windows installs on all 3 computers but hasn't helped… if someone could take a look at OTL results & see if anything looks weird would appreciate, thx-
OTL logfile created on: 2/19/2011 7:22:22 PM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\lisa\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1,022.00 Mb Total Physical Memory | 739.00 Mb Available Physical Memory | 72.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 91.75 Gb Total Space | 84.21 Gb Free Space | 91.78% Space Free | Partition Type: NTFS
Computer Name: LISA-1 | User Name: lisa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Documents and Settings\lisa\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFirewallTray.exe (Lavasoft AB)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKService.exe (Lavasoft AB)
PRC - C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (Lavasoft AB)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKTray\AVKTray.exe (Lavasoft AB)
PRC - C:\Program Files\Common Files\G Data\GDScan\GDScan.exe (Lavasoft AB)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKWCtl.exe ()
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFwSvc.exe (Lavasoft AB)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\lisa\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AVKService) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKService.exe (Lavasoft AB)
SRV - (AVKProxy) – C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (Lavasoft AB)
SRV - (GDScan) – C:\Program Files\Common Files\G Data\GDScan\GDScan.exe (Lavasoft AB)
SRV - (GDBackupSvc) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKBackup\AVKBackupService.exe (Lavasoft AB)
SRV - (GDTunerSvc) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKTuner\AVKTunerService.exe (Lavasoft AB)
SRV - (AVKWCtl) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKWCtl.exe ()
SRV - (GDFwSvc) – C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFwSvc.exe (Lavasoft AB)
========== Driver Services (SafeList) ==========
DRV - (GRD) – C:\WINDOWS\system32\drivers\GRD.sys (G Data Software)
DRV - (GDTdiInterceptor) – C:\WINDOWS\system32\drivers\GDTdiIcpt.sys (G Data Software AG)
DRV - (GDNdisIc) – C:\WINDOWS\system32\drivers\GDNdisIc.sys (G Data Software AG)
DRV - (GDMnIcpt) – C:\WINDOWS\system32\drivers\MiniIcpt.sys (G Data Software AG)
DRV - (HookCentre) – C:\WINDOWS\system32\drivers\HookCentre.sys (G Data Software AG)
DRV - (GDBehave) – C:\WINDOWS\system32\drivers\GDBehave.sys (G Data Software AG)
DRV - (NETwLx32) Intel® – C:\WINDOWS\system32\drivers\NETwLx32.sys (Intel Corporation)
DRV - (epmntdrv) – C:\WINDOWS\system32\epmntdrv.sys ()
DRV - (EuGdiDrv) – C:\WINDOWS\system32\EuGdiDrv.sys ()
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (bcm4sbxp) – C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig
IE - HKU\S-1-5-21-1844237615-492894223-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/ig|http://en-us.start3.mozilla.com/firefox?client=firefox-a&rlz=1R0GGHP_en"
FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=navclient&hl=en&q="
FF - prefs.js..network.proxy.type: 0
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Documents and Settings\All Users\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2011/02/19 15:10:01 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/17 15:55:19 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/17 15:55:10 | 000,000,000 | —D | M]
[2011/02/17 15:55:25 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\lisa\Application Data\Mozilla\Extensions
[2011/02/17 15:55:25 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\lisa\Application Data\Mozilla\Firefox\Profiles\nrke3vlq.default\extensions
[2011/02/17 15:55:11 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/02/19 15:10:01 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\GOOGLE\TOOLBAR FOR FIREFOX\{3112CA9C-DE6D-4884-A869-9855DE68056C}
O1 HOSTS File: ([2004/08/04 02:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Ad-Aware WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\Lavasoft\Ad-Aware Total Security\Webfilter\AvkWebIE.dll (G Data Software AG)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ad-Aware WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\Lavasoft\Ad-Aware Total Security\Webfilter\AvkWebIE.dll (G Data Software AG)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKTray\AVKTray.exe (Lavasoft AB)
O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFirewallTray.exe (Lavasoft AB)
O4 - HKU\S-1-5-21-1844237615-492894223-725345543-1003..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\lisa\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\lisa\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/02/17 01:49:16 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)
========== Files/Folders - Created Within 30 Days ==========
[2011/02/19 19:20:50 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\lisa\Desktop\HiJackThis.exe
[2011/02/19 15:11:18 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Google
[2011/02/19 15:10:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google
[2011/02/19 15:09:44 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Temp
[2011/02/19 15:09:43 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2011/02/19 15:09:23 | 000,000,000 | —D | C] – C:\Program Files\Google
[2011/02/19 15:09:23 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Google
[2011/02/19 15:08:02 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\PrivacIE
[2011/02/18 18:58:01 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2011/02/18 18:58:01 | 000,161,792 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2011/02/18 18:58:01 | 000,136,704 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2011/02/18 18:58:01 | 000,031,232 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2011/02/18 18:57:36 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2011/02/18 18:57:24 | 000,000,000 | —D | C] – C:\Qoobox
[2011/02/18 18:09:52 | 008,582,536 | —- | C] (Mozilla) – C:\Program Files\Firefox Setup 3.6.13.exe
[2011/02/18 18:09:52 | 007,716,072 | —- | C] (Intel® Corporation) – C:\Program Files\ICS_Dx32.exe
[2011/02/18 18:09:17 | 407,956,128 | —- | C] (Lavasoft AB) – C:\Program Files\ENG_R_TRL_2011_LAVATC.exe
[2011/02/18 18:09:15 | 016,883,056 | —- | C] (Microsoft Corporation) – C:\Program Files\IE8-WindowsXP-x86-ENU.exe
[2011/02/18 13:14:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011/02/18 13:10:28 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidserv.dll
[2011/02/18 12:39:14 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2011/02/18 12:39:04 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2011/02/18 12:39:04 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2011/02/18 12:39:00 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2011/02/18 12:39:00 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2011/02/18 12:38:42 | 000,357,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2011/02/18 12:38:24 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2011/02/18 12:38:17 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2011/02/18 12:38:14 | 000,455,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2011/02/18 12:38:01 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2011/02/18 12:36:57 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2011/02/18 12:35:56 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2011/02/18 12:35:53 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2011/02/18 12:34:36 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2011/02/18 12:33:36 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/02/18 12:33:21 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2011/02/18 12:32:50 | 002,192,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2011/02/18 12:32:50 | 002,148,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2011/02/18 12:32:50 | 002,027,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2011/02/18 12:32:49 | 002,069,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2011/02/18 12:31:00 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2011/02/18 12:30:51 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2011/02/18 12:11:45 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Roxio
[2011/02/18 12:07:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Uninstall
[2011/02/18 12:07:42 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SureThing Shared
[2011/02/18 12:06:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sonic
[2011/02/18 12:06:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Roxio Creator DE
[2011/02/18 12:06:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Sonic Shared
[2011/02/18 12:05:59 | 000,000,000 | —D | C] – C:\Program Files\Roxio
[2011/02/18 11:55:33 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2011/02/18 11:49:36 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\IETldCache
[2011/02/18 11:45:34 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2011/02/18 11:43:15 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2011/02/18 11:41:19 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2011/02/18 11:35:05 | 000,602,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2011/02/18 11:35:05 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2011/02/18 11:35:01 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2011/02/18 11:34:59 | 001,991,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2011/02/18 11:34:53 | 011,080,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2011/02/18 11:32:36 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\UserData
[2011/02/18 11:07:18 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2011/02/18 11:07:18 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2011/02/18 11:07:15 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2011/02/18 11:07:14 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\1394bus.sys
[2011/02/18 11:07:14 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2011/02/18 03:07:37 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2011/02/18 03:01:38 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2011/02/18 03:01:38 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2011/02/18 03:01:38 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2011/02/18 03:01:25 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2011/02/18 03:01:21 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2011/02/18 03:01:18 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2011/02/18 02:59:22 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2011/02/18 02:59:21 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smtpapi.dll
[2011/02/18 02:59:21 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwnh.dll
[2011/02/18 02:59:21 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsdupd.exe
[2011/02/18 02:59:05 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2011/02/18 02:59:05 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2011/02/18 02:59:05 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2011/02/18 02:59:05 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2011/02/18 02:59:05 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2011/02/18 02:59:04 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2011/02/18 02:59:04 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2011/02/18 02:59:04 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2011/02/18 02:59:04 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2011/02/18 02:59:04 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2011/02/18 02:59:04 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2011/02/18 02:59:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2011/02/18 02:59:03 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2011/02/18 02:59:03 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2011/02/18 02:59:03 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2011/02/18 02:59:03 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3api.dll
[2011/02/18 02:59:03 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3dlg.dll
[2011/02/18 02:59:02 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2011/02/18 02:59:02 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2011/02/18 02:59:02 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2011/02/18 02:59:01 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2011/02/18 02:59:01 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2011/02/18 02:59:01 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappcfg.dll
[2011/02/18 02:59:01 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2011/02/18 02:59:01 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2011/02/18 02:59:01 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappprxy.dll
[2011/02/18 02:59:01 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapolqec.dll
[2011/02/18 02:58:59 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2011/02/18 02:58:58 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2011/02/18 02:58:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2011/02/18 02:58:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2011/02/18 02:58:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2011/02/18 02:58:56 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2011/02/18 02:58:55 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2011/02/18 02:58:54 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2011/02/18 02:58:54 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2011/02/18 02:58:54 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2011/02/18 02:58:54 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2011/02/18 02:58:53 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2011/02/18 02:58:52 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2011/02/18 02:58:52 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2011/02/18 02:58:52 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2011/02/18 02:58:52 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2011/02/18 02:58:52 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2011/02/18 02:58:51 | 004,274,816 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2011/02/18 02:58:51 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\onex.dll
[2011/02/18 02:58:50 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2011/02/18 02:58:50 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2011/02/18 02:58:49 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2011/02/18 02:58:49 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2011/02/18 02:58:49 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2011/02/18 02:58:49 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2011/02/18 02:58:49 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qutil.dll
[2011/02/18 02:58:49 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2011/02/18 02:58:49 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2011/02/18 02:58:49 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rasqec.dll
[2011/02/18 02:58:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2011/02/18 02:58:49 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2011/02/18 02:58:48 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2011/02/18 02:58:48 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2011/02/18 02:58:48 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2011/02/18 02:58:47 | 000,712,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecs.dll
[2011/02/18 02:58:47 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2011/02/18 02:58:46 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2011/02/18 02:58:46 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2011/02/18 02:58:45 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2011/02/18 02:58:43 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2011/02/18 02:58:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2011/02/18 02:58:37 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2011/02/18 02:58:32 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2011/02/18 02:58:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2011/02/18 02:58:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2011/02/18 02:51:11 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2011/02/18 02:50:05 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlimport.exe
[2011/02/18 02:45:00 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2011/02/18 02:45:00 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2011/02/18 02:45:00 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2011/02/18 02:45:00 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2011/02/18 02:44:59 | 000,043,008 | —- | C] (Advanced Micro Devices, Inc.) – C:\WINDOWS\System32\drivers\amdagp.sys
[2011/02/18 02:44:59 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2011/02/18 02:44:59 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2011/02/18 02:44:59 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2011/02/18 02:44:59 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2011/02/18 02:44:58 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2011/02/18 02:44:58 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2011/02/18 02:44:58 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2011/02/18 02:44:58 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2011/02/18 02:44:58 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2011/02/18 02:44:57 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2011/02/18 02:44:57 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2011/02/18 02:44:57 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2011/02/18 02:44:57 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2011/02/18 02:44:57 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2011/02/18 02:44:56 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2011/02/18 02:44:56 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2011/02/18 02:44:56 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2011/02/18 02:44:56 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2011/02/18 02:44:56 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2011/02/18 02:44:55 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2011/02/18 02:44:55 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2011/02/18 02:44:55 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2011/02/18 02:44:55 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2011/02/18 02:44:55 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2011/02/18 02:44:55 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2011/02/18 02:44:54 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2011/02/18 02:44:54 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2011/02/18 02:44:54 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2011/02/18 02:44:54 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2011/02/18 02:44:54 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2011/02/18 02:44:53 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2011/02/18 02:44:52 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2011/02/18 02:44:52 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2011/02/18 02:44:51 | 000,144,384 | —- | C] (Windows ® Server 2003 DDK provider) – C:\WINDOWS\System32\drivers\hdaudbus.sys
[2011/02/18 02:44:49 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2011/02/18 02:44:48 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2011/02/18 02:44:48 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2011/02/18 02:44:48 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2011/02/18 02:44:47 | 001,897,408 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2011/02/18 02:44:47 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2011/02/18 02:44:47 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2011/02/18 02:44:46 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2011/02/18 02:44:46 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2011/02/18 02:44:46 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2011/02/18 02:44:45 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2011/02/18 02:44:45 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2011/02/18 02:44:45 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2011/02/18 02:44:45 | 000,040,960 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\drivers\sisagp.sys
[2011/02/18 02:44:45 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2011/02/18 02:44:44 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2011/02/18 02:44:43 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2011/02/18 02:44:43 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2011/02/18 02:44:43 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2011/02/18 02:44:42 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2011/02/18 02:44:42 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2011/02/18 02:44:42 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2011/02/18 02:44:42 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2011/02/18 02:42:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2011/02/18 02:38:55 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2011/02/18 00:24:43 | 000,675,840 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETwLc32.dll
[2011/02/18 00:24:42 | 006,607,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\NETwLx32.sys
[2011/02/18 00:24:42 | 002,756,608 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETwLr32.dll
[2011/02/18 00:24:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2011/02/18 00:22:31 | 000,000,000 | —D | C] – C:\Intel
[2011/02/17 23:43:02 | 000,602,624 | —- | C] (OldTimer Tools) – C:\Documents and Settings\lisa\Desktop\OTL.exe
[2011/02/17 16:26:20 | 000,068,976 | —- | C] (G Data Software) – C:\WINDOWS\System32\drivers\GRD.sys
[2011/02/17 15:58:50 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\My Documents\Downloads
[2011/02/17 15:57:54 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2011/02/17 15:56:55 | 000,045,568 | R— | C] (Broadcom Corporation) – C:\WINDOWS\System32\drivers\bcm4sbxp.sys
[2011/02/17 15:55:18 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Mozilla
[2011/02/17 15:55:18 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Mozilla
[2011/02/17 15:55:14 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox
[2011/02/17 15:55:10 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2011/02/17 15:31:23 | 000,000,000 | —D | C] – C:\#GDATA.Trash.Store#
[2011/02/17 15:10:55 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Ad-Aware Total Security
[2011/02/17 15:10:13 | 000,051,400 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDTdiIcpt.sys
[2011/02/17 15:10:13 | 000,029,640 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDNdisIc.sys
[2011/02/17 15:10:08 | 000,062,024 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\MiniIcpt.sys
[2011/02/17 15:10:08 | 000,038,600 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\HookCentre.sys
[2011/02/17 15:10:07 | 000,033,480 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDBehave.sys
[2011/02/17 15:09:00 | 000,000,000 | —D | C] – C:\Program Files\Lavasoft
[2011/02/17 15:09:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\G Data
[2011/02/17 15:09:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\G DATA
[2011/02/17 15:08:46 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2011/02/17 15:08:45 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2011/02/17 15:07:44 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Downloaded Installations
[2011/02/17 15:07:30 | 000,000,000 | -H-D | C] – C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2011/02/17 14:50:34 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop\winaudit
[2011/02/17 14:46:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\EASEUS Partition Master 7.0.1 Professional Edition Demo
[2011/02/17 14:46:28 | 000,000,000 | —D | C] – C:\Program Files\EASEUS
[2011/02/17 14:46:12 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop\epmprodemo
[2011/02/17 14:45:08 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop\mbrfix
[2011/02/17 14:44:47 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton
[2011/02/17 14:44:40 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\NPE
[2011/02/17 14:43:49 | 006,080,440 | —- | C] (Symantec Corporation) – C:\Documents and Settings\lisa\Desktop\NPE.exe
[2011/02/17 14:32:37 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Roxio Shared
[2011/02/17 14:32:34 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\InstallShield
[2011/02/17 14:32:32 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2011/02/17 14:25:28 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\My Documents\New Folder
[2011/02/17 02:14:44 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu\Programs\Administrative Tools
[2011/02/17 01:56:02 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Identities
[2011/02/17 01:56:00 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2011/02/17 01:55:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\My Documents\My Pictures
[2011/02/17 01:55:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\My Documents\My Music
[2011/02/17 01:55:53 | 000,000,000 | –SD | C] – C:\Documents and Settings\lisa\Application Data\Microsoft
[2011/02/17 01:55:53 | 000,000,000 | RH-D | C] – C:\Documents and Settings\lisa\Application Data
[2011/02/17 01:55:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\My Documents
[2011/02/17 01:55:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Favorites
[2011/02/17 01:55:53 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\Cookies
[2011/02/17 01:55:53 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\Local Settings
[2011/02/17 01:55:53 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Microsoft
[2011/02/17 01:55:53 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop
[2011/02/17 01:55:52 | 000,000,000 | RH-D | C] – C:\Documents and Settings\lisa\SendTo
[2011/02/17 01:55:52 | 000,000,000 | RH-D | C] – C:\Documents and Settings\lisa\Recent
[2011/02/17 01:55:52 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu\Programs\Startup
[2011/02/17 01:55:52 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu
[2011/02/17 01:55:52 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu\Programs\Accessories
[2011/02/17 01:55:52 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\Templates
[2011/02/17 01:55:52 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\PrintHood
[2011/02/17 01:55:52 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\NetHood
[2011/02/17 01:54:44 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2011/02/17 01:54:42 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2011/02/17 01:54:41 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2011/02/17 01:54:41 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2011/02/17 01:53:46 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2011/02/17 01:53:46 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2011/02/17 01:52:36 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2011/02/17 01:52:35 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2011/02/17 01:52:35 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2011/02/17 01:52:34 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2011/02/17 01:52:34 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2011/02/17 01:52:34 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2011/02/17 01:52:33 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2011/02/17 01:52:33 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2011/02/17 01:52:31 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2011/02/17 01:52:30 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2011/02/17 01:52:30 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2011/02/17 01:52:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2011/02/17 01:52:30 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2011/02/17 01:52:29 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2011/02/17 01:52:29 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2011/02/17 01:52:27 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2011/02/17 01:52:26 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2011/02/17 01:52:26 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2011/02/17 01:52:24 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2011/02/17 01:52:24 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2011/02/17 01:52:24 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2011/02/17 01:52:24 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2011/02/17 01:52:23 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2011/02/17 01:52:23 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2011/02/17 01:52:23 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2011/02/17 01:52:23 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2011/02/17 01:52:21 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2011/02/17 01:52:20 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2011/02/17 01:52:18 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2011/02/17 01:52:17 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2011/02/17 01:52:16 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2011/02/17 01:52:14 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2011/02/17 01:52:14 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2011/02/17 01:52:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2011/02/17 01:52:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2011/02/17 01:52:13 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2011/02/17 01:52:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2011/02/17 01:52:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2011/02/17 01:52:13 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2011/02/17 01:52:13 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2011/02/17 01:52:13 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2011/02/17 01:52:13 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2011/02/17 01:52:12 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2011/02/17 01:52:12 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2011/02/17 01:52:12 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2011/02/17 01:52:12 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2011/02/17 01:52:12 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2011/02/17 01:52:12 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2011/02/17 01:52:11 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2011/02/17 01:52:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2011/02/17 01:52:07 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2011/02/17 01:52:06 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2011/02/17 01:52:06 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2011/02/17 01:52:04 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2011/02/17 01:52:04 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2011/02/17 01:52:04 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2011/02/17 01:52:02 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2011/02/17 01:52:02 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2011/02/17 01:52:01 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2011/02/17 01:51:59 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2011/02/17 01:51:59 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2011/02/17 01:51:59 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2011/02/17 01:51:59 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2011/02/17 01:51:58 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2011/02/17 01:51:58 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2011/02/17 01:51:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2011/02/17 01:51:57 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2011/02/17 01:51:57 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2011/02/17 01:51:56 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2011/02/17 01:51:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2011/02/17 01:51:56 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2011/02/17 01:51:55 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2011/02/17 01:51:55 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2011/02/17 01:51:53 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2011/02/17 01:51:51 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2011/02/17 01:51:50 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2011/02/17 01:51:46 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2011/02/17 01:51:45 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2011/02/17 01:51:39 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2011/02/17 01:51:39 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2011/02/17 01:51:39 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2011/02/17 01:51:38 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2011/02/17 01:51:36 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2011/02/17 01:51:34 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2011/02/17 01:51:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2011/02/17 01:51:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2011/02/17 01:51:33 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2011/02/17 01:51:33 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2011/02/17 01:51:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2011/02/17 01:51:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2011/02/17 01:51:32 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2011/02/17 01:51:32 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2011/02/17 01:51:31 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2011/02/17 01:51:30 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2011/02/17 01:51:30 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2011/02/17 01:51:30 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2011/02/17 01:51:29 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2011/02/17 01:51:29 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2011/02/17 01:51:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2011/02/17 01:51:27 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2011/02/17 01:51:26 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2011/02/17 01:51:26 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2011/02/17 01:51:25 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2011/02/17 01:51:25 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2011/02/17 01:51:25 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2011/02/17 01:51:25 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2011/02/17 01:51:25 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2011/02/17 01:51:24 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2011/02/17 01:51:24 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2011/02/17 01:51:24 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2011/02/17 01:51:24 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2011/02/17 01:51:24 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2011/02/17 01:51:24 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2011/02/17 01:51:23 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2011/02/17 01:51:23 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2011/02/17 01:51:23 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2011/02/17 01:51:22 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2011/02/17 01:51:22 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2011/02/17 01:51:22 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2011/02/17 01:51:22 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2011/02/17 01:51:22 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2011/02/17 01:51:22 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2011/02/17 01:51:22 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2011/02/17 01:51:21 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2011/02/17 01:51:21 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2011/02/17 01:51:21 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2011/02/17 01:51:21 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2011/02/17 01:51:13 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2011/02/17 01:50:57 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2011/02/17 01:50:55 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2011/02/17 01:50:52 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/02/17 01:50:52 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/02/17 01:50:50 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/02/17 01:50:50 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/02/17 01:50:49 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2011/02/17 01:50:49 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2011/02/17 01:50:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2011/02/17 01:50:47 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2011/02/17 01:50:46 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2011/02/17 01:50:46 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2011/02/17 01:50:45 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2011/02/17 01:50:45 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2011/02/17 01:50:45 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2011/02/17 01:50:40 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2011/02/17 01:50:39 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2011/02/17 01:50:39 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2011/02/17 01:50:38 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2011/02/17 01:50:38 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2011/02/17 01:50:38 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2011/02/17 01:50:36 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2011/02/17 01:50:36 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2011/02/17 01:50:36 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2011/02/17 01:50:35 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2011/02/17 01:50:35 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2011/02/17 01:50:35 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2011/02/17 01:50:34 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2011/02/17 01:50:34 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2011/02/17 01:50:34 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2011/02/17 01:50:34 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2011/02/17 01:50:34 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2011/02/17 01:50:33 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2011/02/17 01:50:32 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2011/02/17 01:50:32 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2011/02/17 01:50:32 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2011/02/17 01:50:23 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2011/02/17 01:50:22 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2011/02/17 01:50:22 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2011/02/17 01:50:22 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2011/02/17 01:50:21 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2011/02/17 01:50:19 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2011/02/17 01:50:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2011/02/17 01:50:18 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2011/02/17 01:50:15 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2011/02/17 01:50:08 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2011/02/17 01:50:08 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2011/02/17 01:50:08 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2011/02/17 01:50:07 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2011/02/17 01:50:07 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2011/02/17 01:50:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2011/02/17 01:50:03 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2011/02/17 01:49:58 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2011/02/17 01:49:58 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2011/02/17 01:49:58 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2011/02/17 01:49:47 | 000,000,000 | —D | C] – C:\DELL
[2011/02/17 01:49:37 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2011/02/17 01:49:36 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2011/02/17 01:49:34 | 000,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2011/02/17 01:49:01 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2011/02/17 01:48:14 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2011/02/17 01:48:04 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2011/02/17 01:48:04 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2011/02/17 01:47:53 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2011/02/17 01:47:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2011/02/17 01:47:09 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2011/02/17 01:47:09 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2011/02/17 01:47:08 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2011/02/17 01:47:08 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2011/02/17 01:47:08 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2011/02/17 01:47:08 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2011/02/17 01:47:00 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2011/02/17 01:46:59 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2011/02/17 01:46:59 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2011/02/17 01:46:58 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2011/02/17 01:46:58 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2011/02/17 01:46:58 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2011/02/17 01:46:58 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2011/02/17 01:46:58 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2011/02/17 01:46:57 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2011/02/17 01:46:55 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2011/02/17 01:46:55 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2011/02/17 01:46:55 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2011/02/17 01:46:55 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2011/02/17 01:46:55 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2011/02/17 01:46:54 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2011/02/17 01:46:54 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2011/02/17 01:46:54 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2011/02/17 01:46:54 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2011/02/17 01:46:54 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2011/02/17 01:46:54 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2011/02/17 01:46:53 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2011/02/17 01:46:49 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2011/02/17 01:46:48 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2011/02/17 01:46:48 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2011/02/17 01:46:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2011/02/17 01:46:47 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2011/02/17 01:46:47 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2011/02/17 01:46:47 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2011/02/17 01:46:47 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2011/02/17 01:46:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2011/02/17 01:46:46 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2011/02/17 01:46:46 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2011/02/17 01:46:46 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2011/02/17 01:46:46 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2011/02/17 01:46:45 | 001,929,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2011/02/17 01:46:45 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2011/02/17 01:46:45 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2011/02/17 01:46:45 | 000,217,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2011/02/17 01:46:45 | 000,209,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2011/02/17 01:46:45 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2011/02/17 01:46:45 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2011/02/17 01:46:45 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2011/02/17 01:46:45 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2011/02/17 01:46:44 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2011/02/17 01:46:44 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2011/02/17 01:46:44 | 000,053,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2011/02/17 01:46:44 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2011/02/17 01:46:44 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2011/02/17 01:46:44 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2011/02/17 01:46:39 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2011/02/17 01:46:35 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2011/02/17 01:46:35 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2011/02/17 01:46:35 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2011/02/17 01:46:35 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2011/02/17 01:46:30 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2011/02/17 01:46:30 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2011/02/17 01:46:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2011/02/17 01:46:29 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2011/02/17 01:46:29 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2011/02/17 01:46:29 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2011/02/17 01:46:28 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2011/02/17 01:46:28 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2011/02/17 01:46:26 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2011/02/17 01:46:26 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2011/02/17 01:46:25 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2011/02/17 01:46:24 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2011/02/17 01:46:22 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2011/02/17 01:46:22 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2011/02/17 01:46:21 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2011/02/17 01:46:21 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2011/02/17 01:46:21 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2011/02/17 01:46:21 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2011/02/17 01:46:15 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2011/02/17 01:46:11 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2011/02/17 01:46:10 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2011/02/17 01:45:48 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2011/02/17 01:45:35 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2011/02/17 01:45:27 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2011/02/17 01:45:27 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2011/02/17 01:45:19 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2011/02/17 01:45:19 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2011/02/17 01:45:19 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2011/02/17 01:45:12 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2011/02/17 01:45:11 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2011/02/17 01:45:11 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2011/02/17 01:45:11 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2011/02/17 01:45:11 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2011/02/17 01:45:11 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2011/02/17 01:45:11 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2011/02/17 01:45:10 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2011/02/17 01:45:10 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2011/02/17 01:45:10 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2011/02/17 01:45:10 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2011/02/17 01:45:10 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2011/02/17 01:45:10 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2011/02/17 01:45:10 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2011/02/17 01:45:10 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2011/02/17 01:45:10 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2011/02/17 01:45:10 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2011/02/17 01:45:09 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2011/02/17 01:45:09 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2011/02/17 01:45:09 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2011/02/17 01:45:09 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2011/02/17 01:45:09 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2011/02/17 01:45:08 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2011/02/17 01:45:08 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2011/02/17 01:45:08 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2011/02/17 01:45:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2011/02/17 01:45:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2011/02/17 01:45:08 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2011/02/17 01:44:59 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2011/02/17 01:44:59 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2011/02/17 01:44:59 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2011/02/17 01:44:59 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2011/02/17 01:44:59 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2011/02/17 01:44:59 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2011/02/17 01:44:59 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2011/02/17 01:44:59 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2011/02/17 01:44:59 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2011/02/17 01:44:59 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2011/02/17 01:44:58 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2011/02/17 01:44:58 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2011/02/17 01:44:52 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2011/02/17 01:44:52 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2011/02/17 01:44:52 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2011/02/17 01:44:52 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2011/02/17 01:44:52 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2011/02/17 01:44:52 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2011/02/17 01:44:51 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2011/02/17 01:44:51 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2011/02/17 01:44:51 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2011/02/17 01:44:51 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2011/02/17 01:44:50 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2011/02/17 01:44:50 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2011/02/17 01:44:50 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2011/02/17 01:44:50 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2011/02/17 01:44:50 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2011/02/17 01:44:50 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2011/02/17 01:44:50 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2011/02/17 01:44:50 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2011/02/17 01:44:50 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2011/02/17 01:44:50 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2011/02/17 01:44:50 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2011/02/17 01:44:50 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2011/02/17 01:44:50 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2011/02/17 01:44:50 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2011/02/17 01:44:50 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2011/02/17 01:44:50 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2011/02/17 01:44:49 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2011/02/17 01:44:49 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2011/02/17 01:44:49 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2011/02/17 01:44:49 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2011/02/17 01:44:48 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2011/02/17 01:44:48 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2011/02/17 01:44:48 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2011/02/17 01:44:48 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2011/02/17 01:44:48 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2011/02/17 01:44:48 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2011/02/17 01:44:48 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2011/02/17 01:44:48 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2011/02/17 01:44:45 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2011/02/17 01:44:45 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2011/02/17 01:44:45 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2011/02/17 01:44:44 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2011/02/17 01:44:44 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2011/02/17 01:44:44 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2011/02/17 01:44:44 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2011/02/17 01:44:44 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2011/02/17 01:44:44 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2011/02/17 01:44:44 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2011/02/17 01:44:44 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2011/02/17 01:44:44 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2011/02/17 01:44:44 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2011/02/17 01:44:44 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2011/02/17 01:44:43 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2011/02/17 01:44:43 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2011/02/17 01:44:24 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2011/02/17 01:44:23 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2011/02/17 01:44:23 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2011/02/17 01:44:23 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2011/02/17 01:44:23 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2011/02/17 01:44:23 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2011/02/17 01:44:23 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2011/02/17 01:44:22 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2011/02/17 01:44:22 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2011/02/17 01:44:22 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2011/02/17 01:44:21 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2011/02/17 01:44:21 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2011/02/17 01:44:21 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2011/02/17 01:44:20 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2011/02/17 01:44:20 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2011/02/17 01:44:20 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2011/02/17 01:44:20 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2011/02/17 01:44:20 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2011/02/17 01:44:20 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2011/02/17 01:44:20 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2011/02/17 01:44:20 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2011/02/17 01:44:19 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2011/02/17 01:44:19 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2011/02/17 01:44:19 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2011/02/17 01:44:19 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2011/02/17 01:44:19 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2011/02/17 01:44:19 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2011/02/17 01:44:19 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2011/02/17 01:44:18 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2011/02/17 01:44:18 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2011/02/17 01:44:18 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2011/02/17 01:44:17 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2011/02/17 01:44:17 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2011/02/17 01:44:17 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2011/02/17 01:44:17 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2011/02/17 01:44:17 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2011/02/17 01:44:17 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2011/02/17 01:44:16 | 001,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2011/02/17 01:44:16 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2011/02/17 01:44:08 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2011/02/17 01:44:08 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2011/02/17 01:44:08 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2011/02/17 01:44:08 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2011/02/17 01:44:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2011/02/17 01:43:38 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2011/02/16 17:31:37 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2011/02/16 17:31:25 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\battc.sys
[2011/02/16 17:30:28 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2011/02/16 17:30:27 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2011/02/16 17:30:26 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2011/02/16 17:30:26 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2011/02/16 17:30:24 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2011/02/16 17:30:23 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2011/02/16 17:30:23 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2011/02/16 17:30:22 | 000,000,000 | R–D | C] – C:\Program Files
[2011/02/16 17:30:22 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2011/02/16 17:30:22 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2011/02/16 17:30:20 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2011/02/16 17:30:20 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2011/02/16 17:30:20 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2011/02/16 17:30:20 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2011/02/16 17:30:20 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2011/02/16 17:30:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2011/02/16 17:30:16 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2011/02/16 17:30:16 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2011/02/16 17:30:16 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2011/02/16 17:30:16 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2011/02/16 17:30:16 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2011/02/16 17:30:16 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2011/02/16 17:30:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2011/02/16 17:30:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2011/02/16 17:30:16 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2011/02/16 17:30:16 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2011/02/16 17:30:16 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2011/02/16 17:30:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2011/02/16 17:30:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2011/02/16 17:30:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2011/02/16 17:30:15 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2011/02/16 17:30:15 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2011/02/16 17:30:15 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2011/02/16 17:30:15 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2011/02/16 17:30:15 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2011/02/16 17:30:15 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2011/02/16 17:30:15 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2011/02/16 17:30:15 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2011/02/16 17:30:15 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2011/02/16 17:30:15 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2011/02/16 17:30:13 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2011/02/16 17:30:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2011/02/16 17:30:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2011/02/16 17:30:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2011/02/16 17:30:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2011/02/16 17:30:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2011/02/16 17:30:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2011/02/16 17:30:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2011/02/16 17:30:10 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2011/02/16 17:30:10 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2011/02/16 17:30:10 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2011/02/16 17:30:10 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2011/02/16 17:30:10 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2011/02/16 17:30:10 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2011/02/16 17:30:10 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2011/02/16 17:30:10 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2011/02/16 17:30:10 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2011/02/16 17:30:10 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2011/02/16 17:30:10 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2011/02/16 17:30:10 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2011/02/16 17:30:10 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2011/02/16 17:30:10 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2011/02/16 17:30:09 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2011/02/16 17:30:09 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2011/02/16 17:30:09 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2011/02/16 17:30:09 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2011/02/16 17:30:09 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2011/02/16 17:30:09 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2011/02/16 17:30:09 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2011/02/16 17:30:09 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2011/02/16 17:30:09 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2011/02/16 17:30:09 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2011/02/16 17:30:09 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2011/02/16 17:30:09 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2011/02/16 17:30:09 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2011/02/16 17:30:08 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2011/02/16 17:30:08 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2011/02/16 17:30:08 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2011/02/16 17:30:08 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2011/02/16 17:30:08 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2011/02/16 17:30:08 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2011/02/16 17:30:08 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2011/02/16 17:30:07 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2011/02/16 17:30:07 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2011/02/16 17:30:06 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2011/02/16 17:29:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2011/02/16 17:29:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2011/02/16 17:29:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2011/02/16 17:29:57 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2011/02/16 17:29:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2011/02/16 17:29:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2011/02/16 17:29:43 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2011/02/16 17:29:43 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2011/02/16 17:29:37 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2011/02/16 17:29:37 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2011/02/16 17:29:10 | 000,000,000 | —D | C] – C:\Documents and Settings
[2011/02/16 17:29:09 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2011/02/16 17:19:56 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2011/02/16 17:19:56 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2011/02/16 17:19:56 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2011/02/16 17:19:56 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\ehome
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\dell
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[2011/01/21 06:44:37 | 000,439,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shimgvw.dll
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/19 19:20:51 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\lisa\Desktop\HiJackThis.exe
[2011/02/19 19:14:26 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/19 17:27:24 | 000,312,172 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/02/19 17:27:24 | 000,040,394 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/02/19 17:24:45 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/02/19 17:24:44 | 000,000,878 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/19 17:23:05 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/02/19 16:27:56 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/02/18 13:23:00 | 000,091,888 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/02/18 13:10:52 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2011/02/18 13:10:49 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2011/02/18 12:06:53 | 000,001,931 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Roxio Creator Home.lnk
[2011/02/18 11:51:04 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2011/02/18 02:43:55 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/02/18 00:18:19 | 007,716,072 | —- | M] (Intel® Corporation) – C:\Program Files\ICS_Dx32.exe
[2011/02/18 00:07:39 | 000,823,571 | —- | M] () – C:\Program Files\wgr614v6_2_0_19_1_0_19_na.chk
[2011/02/17 23:47:53 | 004,270,656 | R— | M] () – C:\Documents and Settings\lisa\Desktop\ComboFix.exe
[2011/02/17 23:43:02 | 000,602,624 | —- | M] (OldTimer Tools) – C:\Documents and Settings\lisa\Desktop\OTL.exe
[2011/02/17 23:24:35 | 016,883,056 | —- | M] (Microsoft Corporation) – C:\Program Files\IE8-WindowsXP-x86-ENU.exe
[2011/02/17 16:26:20 | 000,068,976 | —- | M] (G Data Software) – C:\WINDOWS\System32\drivers\GRD.sys
[2011/02/17 15:55:21 | 000,000,000 | —- | M] () – C:\WINDOWS\nsreg.dat
[2011/02/17 15:55:14 | 000,001,602 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/17 15:10:13 | 000,051,400 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDTdiIcpt.sys
[2011/02/17 15:10:13 | 000,029,640 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDNdisIc.sys
[2011/02/17 15:10:08 | 000,062,024 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\MiniIcpt.sys
[2011/02/17 15:10:08 | 000,038,600 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\HookCentre.sys
[2011/02/17 15:10:07 | 000,033,480 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDBehave.sys
[2011/02/17 15:09:54 | 000,001,896 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware Total Security.lnk
[2011/02/17 15:07:11 | 000,015,880 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2011/02/17 14:46:40 | 000,001,152 | —- | M] () – C:\Documents and Settings\All Users\Desktop\EASEUS Partition Master 7.0.1 Professional Edition Demo.lnk
[2011/02/17 02:52:40 | 000,000,212 | RHS- | M] () – C:\boot.ini
[2011/02/17 02:14:44 | 000,042,300 | —- | M] () – C:\WINDOWS\System32\services.msc
[2011/02/17 01:53:49 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2011/02/17 01:53:02 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2011/02/17 01:49:16 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/02/17 01:49:12 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2011/02/17 01:49:12 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2011/02/17 01:49:01 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2011/02/17 01:45:47 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/02/13 13:57:32 | 006,080,440 | —- | M] (Symantec Corporation) – C:\Documents and Settings\lisa\Desktop\NPE.exe
[2011/02/11 23:40:20 | 000,042,285 | —- | M] () – C:\Program Files\mbrfix.zip
[2011/02/11 23:27:54 | 042,548,520 | —- | M] () – C:\Program Files\epmprodemo.zip
[2011/02/01 12:57:50 | 000,877,939 | —- | M] () – C:\Program Files\winaudit.zip
[2011/01/21 06:44:37 | 008,462,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shell32.dll
[2011/01/21 06:44:37 | 000,439,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shimgvw.dll
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/19 15:09:39 | 000,000,882 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/19 15:09:39 | 000,000,878 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/18 18:58:01 | 000,256,512 | —- | C] () – C:\WINDOWS\PEV.exe
[2011/02/18 18:58:01 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2011/02/18 18:58:01 | 000,089,088 | —- | C] () – C:\WINDOWS\MBR.exe
[2011/02/18 18:58:01 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2011/02/18 18:58:01 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2011/02/18 18:09:50 | 042,548,520 | —- | C] () – C:\Program Files\epmprodemo.zip
[2011/02/18 18:09:17 | 000,877,939 | —- | C] () – C:\Program Files\winaudit.zip
[2011/02/18 18:09:17 | 000,823,571 | —- | C] () – C:\Program Files\wgr614v6_2_0_19_1_0_19_na.chk
[2011/02/18 18:09:16 | 000,042,285 | —- | C] () – C:\Program Files\mbrfix.zip
[2011/02/18 13:10:52 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2011/02/18 13:10:49 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2011/02/18 12:06:53 | 000,001,931 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Roxio Creator Home.lnk
[2011/02/18 03:01:32 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2011/02/18 03:01:32 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2011/02/18 03:01:32 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2011/02/18 03:01:31 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2011/02/18 03:01:31 | 000,067,374 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2011/02/18 03:01:31 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2011/02/18 03:01:31 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2011/02/18 03:01:30 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2011/02/18 03:01:30 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2011/02/18 03:01:30 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2011/02/18 03:01:29 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2011/02/18 03:01:29 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2011/02/18 03:01:29 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2011/02/18 03:01:29 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2011/02/18 03:01:29 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2011/02/18 03:01:29 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2011/02/18 03:01:29 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2011/02/18 03:01:28 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2011/02/18 03:01:27 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2011/02/18 03:01:27 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2011/02/18 03:01:27 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2011/02/18 03:01:27 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2011/02/18 03:01:27 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2011/02/18 03:01:27 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2011/02/18 03:01:27 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2011/02/18 03:01:27 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2011/02/18 03:01:27 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2011/02/18 03:01:27 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2011/02/18 03:01:27 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2011/02/18 03:01:26 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2011/02/18 03:01:26 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2011/02/18 03:01:26 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2011/02/18 03:01:26 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2011/02/18 03:01:26 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2011/02/18 03:01:26 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2011/02/18 03:01:26 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2011/02/18 03:01:26 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2011/02/18 03:01:26 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2011/02/18 03:01:26 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2011/02/18 03:01:26 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2011/02/18 03:01:26 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2011/02/18 03:01:25 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2011/02/18 03:01:25 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2011/02/18 03:01:25 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2011/02/18 03:01:25 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2011/02/18 03:01:24 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2011/02/18 03:01:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2011/02/18 03:01:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2011/02/18 03:01:23 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2011/02/18 03:01:23 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2011/02/18 03:01:23 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2011/02/18 03:01:23 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2011/02/18 03:01:23 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2011/02/18 03:01:23 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2011/02/18 03:01:23 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2011/02/18 03:01:23 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2011/02/18 03:01:23 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2011/02/18 03:01:23 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2011/02/18 03:01:22 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2011/02/18 03:01:22 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2011/02/18 03:01:22 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2011/02/18 03:01:22 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2011/02/18 03:01:22 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2011/02/18 03:01:22 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2011/02/18 03:01:20 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2011/02/18 03:01:20 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2011/02/18 03:01:20 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2011/02/18 03:01:19 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2011/02/18 03:01:18 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2011/02/18 03:01:18 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2011/02/18 03:01:18 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2011/02/18 03:01:18 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2011/02/18 03:01:17 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2011/02/18 03:01:17 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2011/02/18 03:01:17 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2011/02/18 03:01:17 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2011/02/18 03:01:17 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2011/02/18 03:01:17 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2011/02/18 03:01:17 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2011/02/18 03:01:16 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2011/02/18 02:44:54 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2011/02/18 02:44:52 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2011/02/18 02:44:47 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2011/02/17 23:47:50 | 004,270,656 | R— | C] () – C:\Documents and Settings\lisa\Desktop\ComboFix.exe
[2011/02/17 15:55:21 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2011/02/17 15:55:14 | 000,001,602 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/17 15:10:34 | 000,015,880 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2011/02/17 15:09:54 | 000,001,896 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware Total Security.lnk
[2011/02/17 14:46:40 | 002,336,384 | —- | C] () – C:\WINDOWS\System32\BootMan.exe
[2011/02/17 14:46:40 | 000,086,408 | —- | C] () – C:\WINDOWS\System32\setupempdrv03.exe
[2011/02/17 14:46:40 | 000,014,848 | —- | C] () – C:\WINDOWS\System32\EuEpmGdi.dll
[2011/02/17 14:46:40 | 000,013,192 | —- | C] () – C:\WINDOWS\System32\epmntdrv.sys
[2011/02/17 14:46:40 | 000,008,456 | —- | C] () – C:\WINDOWS\System32\EuGdiDrv.sys
[2011/02/17 14:46:40 | 000,001,152 | —- | C] () – C:\Documents and Settings\All Users\Desktop\EASEUS Partition Master 7.0.1 Professional Edition Demo.lnk
[2011/02/17 01:56:00 | 000,000,803 | —- | C] () – C:\Documents and Settings\lisa\Start Menu\Programs\Internet Explorer.lnk
[2011/02/17 01:53:49 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2011/02/17 01:52:56 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/02/17 01:51:57 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2011/02/17 01:51:34 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2011/02/17 01:51:25 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2011/02/17 01:51:24 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2011/02/17 01:51:22 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2011/02/17 01:51:06 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2011/02/17 01:50:55 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2011/02/17 01:50:36 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2011/02/17 01:49:16 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2011/02/17 01:49:16 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2011/02/17 01:49:12 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2011/02/17 01:49:12 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2011/02/17 01:49:11 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2011/02/17 01:47:37 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2011/02/17 01:47:06 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2011/02/17 01:47:06 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2011/02/17 01:47:00 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2011/02/17 01:45:47 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/02/17 01:44:54 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2011/02/17 01:44:54 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2011/02/17 01:44:54 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2011/02/17 01:44:54 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2011/02/17 01:44:54 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2011/02/17 01:44:54 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2011/02/17 01:44:53 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2011/02/17 01:44:53 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2011/02/17 01:44:53 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2011/02/17 01:44:53 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2011/02/17 01:44:53 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2011/02/17 01:44:50 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2011/02/17 01:44:50 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2011/02/17 01:44:49 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2011/02/17 01:44:43 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2011/02/16 17:30:31 | 000,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2011/02/16 17:30:27 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/02/16 17:30:24 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2011/02/16 17:30:24 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2011/02/16 17:30:24 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2011/02/16 17:30:23 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2011/02/16 17:30:08 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2011/02/16 17:29:56 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2011/02/16 17:29:56 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2011/02/16 17:29:56 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2011/02/16 17:29:56 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2011/02/16 17:29:56 | 000,007,710 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2011/02/16 17:29:56 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2011/02/16 17:29:55 | 001,042,903 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2011/02/16 17:29:55 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2011/02/16 17:29:09 | 000,091,888 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/02/16 17:28:12 | 000,000,212 | RHS- | C] () – C:\boot.ini
[2011/02/16 17:28:08 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
========== LOP Check ==========
[2011/02/17 15:57:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\G DATA
[2011/02/18 12:07:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Uninstall
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/02/19 17:23:03 | 000,004,252 | —- | M] () – C:\aaw7boot.log
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/02/17 02:52:40 | 000,000,212 | RHS- | M] () – C:\boot.ini
[2011/02/18 19:22:01 | 000,005,770 | —- | M] () – C:\ComboFix.txt
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/04 02:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2011/02/18 02:43:55 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/02/19 17:23:03 | 1610,612,736 | -HS- | M] () – C:\pagefile.sys
< %systemroot%\Fonts\*.com >
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2011/02/17 01:48:50 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2010/12/30 18:52:24 | 407,956,128 | —- | M] (Lavasoft AB) – C:\Program Files\ENG_R_TRL_2011_LAVATC.exe
[2011/02/11 23:27:54 | 042,548,520 | —- | M] () – C:\Program Files\epmprodemo.zip
[2010/12/30 18:36:12 | 008,582,536 | —- | M] (Mozilla) – C:\Program Files\Firefox Setup 3.6.13.exe
[2011/02/18 00:18:19 | 007,716,072 | —- | M] (Intel® Corporation) – C:\Program Files\ICS_Dx32.exe
[2011/02/17 23:24:35 | 016,883,056 | —- | M] (Microsoft Corporation) – C:\Program Files\IE8-WindowsXP-x86-ENU.exe
[2011/02/11 23:40:20 | 000,042,285 | —- | M] () – C:\Program Files\mbrfix.zip
[2011/02/18 00:07:39 | 000,823,571 | —- | M] () – C:\Program Files\wgr614v6_2_0_19_1_0_19_na.chk
[2011/02/01 12:57:50 | 000,877,939 | —- | M] () – C:\Program Files\winaudit.zip
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2011/02/16 17:28:12 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2011/02/16 17:28:11 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2011/02/16 17:28:11 | 000,892,928 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011/02/18 03:02:12 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
< %USERPROFILE%\Desktop\*.exe >
[2011/02/17 23:47:53 | 004,270,656 | R— | M] () – C:\Documents and Settings\lisa\Desktop\ComboFix.exe
[2011/02/19 19:20:51 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\lisa\Desktop\HiJackThis.exe
[2011/02/13 13:57:32 | 006,080,440 | —- | M] (Symantec Corporation) – C:\Documents and Settings\lisa\Desktop\NPE.exe
[2011/02/17 23:43:02 | 000,602,624 | —- | M] (OldTimer Tools) – C:\Documents and Settings\lisa\Desktop\OTL.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-02-18 21:44:36
< End of report >
OTL logfile created on: 2/19/2011 7:22:22 PM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\lisa\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1,022.00 Mb Total Physical Memory | 739.00 Mb Available Physical Memory | 72.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 91.75 Gb Total Space | 84.21 Gb Free Space | 91.78% Space Free | Partition Type: NTFS
Computer Name: LISA-1 | User Name: lisa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Documents and Settings\lisa\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFirewallTray.exe (Lavasoft AB)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKService.exe (Lavasoft AB)
PRC - C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (Lavasoft AB)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKTray\AVKTray.exe (Lavasoft AB)
PRC - C:\Program Files\Common Files\G Data\GDScan\GDScan.exe (Lavasoft AB)
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKWCtl.exe ()
PRC - C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFwSvc.exe (Lavasoft AB)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\lisa\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AVKService) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKService.exe (Lavasoft AB)
SRV - (AVKProxy) – C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (Lavasoft AB)
SRV - (GDScan) – C:\Program Files\Common Files\G Data\GDScan\GDScan.exe (Lavasoft AB)
SRV - (GDBackupSvc) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKBackup\AVKBackupService.exe (Lavasoft AB)
SRV - (GDTunerSvc) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKTuner\AVKTunerService.exe (Lavasoft AB)
SRV - (AVKWCtl) – C:\Program Files\Lavasoft\Ad-Aware Total Security\AVK\AVKWCtl.exe ()
SRV - (GDFwSvc) – C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFwSvc.exe (Lavasoft AB)
========== Driver Services (SafeList) ==========
DRV - (GRD) – C:\WINDOWS\system32\drivers\GRD.sys (G Data Software)
DRV - (GDTdiInterceptor) – C:\WINDOWS\system32\drivers\GDTdiIcpt.sys (G Data Software AG)
DRV - (GDNdisIc) – C:\WINDOWS\system32\drivers\GDNdisIc.sys (G Data Software AG)
DRV - (GDMnIcpt) – C:\WINDOWS\system32\drivers\MiniIcpt.sys (G Data Software AG)
DRV - (HookCentre) – C:\WINDOWS\system32\drivers\HookCentre.sys (G Data Software AG)
DRV - (GDBehave) – C:\WINDOWS\system32\drivers\GDBehave.sys (G Data Software AG)
DRV - (NETwLx32) Intel® – C:\WINDOWS\system32\drivers\NETwLx32.sys (Intel Corporation)
DRV - (epmntdrv) – C:\WINDOWS\system32\epmntdrv.sys ()
DRV - (EuGdiDrv) – C:\WINDOWS\system32\EuGdiDrv.sys ()
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (bcm4sbxp) – C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig
IE - HKU\S-1-5-21-1844237615-492894223-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/ig|http://en-us.start3.mozilla.com/firefox?client=firefox-a&rlz=1R0GGHP_en"
FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=navclient&hl=en&q="
FF - prefs.js..network.proxy.type: 0
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Documents and Settings\All Users\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2011/02/19 15:10:01 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/17 15:55:19 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/17 15:55:10 | 000,000,000 | —D | M]
[2011/02/17 15:55:25 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\lisa\Application Data\Mozilla\Extensions
[2011/02/17 15:55:25 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\lisa\Application Data\Mozilla\Firefox\Profiles\nrke3vlq.default\extensions
[2011/02/17 15:55:11 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/02/19 15:10:01 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\GOOGLE\TOOLBAR FOR FIREFOX\{3112CA9C-DE6D-4884-A869-9855DE68056C}
O1 HOSTS File: ([2004/08/04 02:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Ad-Aware WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\Lavasoft\Ad-Aware Total Security\Webfilter\AvkWebIE.dll (G Data Software AG)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ad-Aware WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\Lavasoft\Ad-Aware Total Security\Webfilter\AvkWebIE.dll (G Data Software AG)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files\Lavasoft\Ad-Aware Total Security\AVKTray\AVKTray.exe (Lavasoft AB)
O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files\Lavasoft\Ad-Aware Total Security\Firewall\GDFirewallTray.exe (Lavasoft AB)
O4 - HKU\S-1-5-21-1844237615-492894223-725345543-1003..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1844237615-492894223-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\lisa\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\lisa\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/02/17 01:49:16 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)
========== Files/Folders - Created Within 30 Days ==========
[2011/02/19 19:20:50 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\lisa\Desktop\HiJackThis.exe
[2011/02/19 15:11:18 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Google
[2011/02/19 15:10:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google
[2011/02/19 15:09:44 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Temp
[2011/02/19 15:09:43 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2011/02/19 15:09:23 | 000,000,000 | —D | C] – C:\Program Files\Google
[2011/02/19 15:09:23 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Google
[2011/02/19 15:08:02 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\PrivacIE
[2011/02/18 18:58:01 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2011/02/18 18:58:01 | 000,161,792 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2011/02/18 18:58:01 | 000,136,704 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2011/02/18 18:58:01 | 000,031,232 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2011/02/18 18:57:36 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2011/02/18 18:57:24 | 000,000,000 | —D | C] – C:\Qoobox
[2011/02/18 18:09:52 | 008,582,536 | —- | C] (Mozilla) – C:\Program Files\Firefox Setup 3.6.13.exe
[2011/02/18 18:09:52 | 007,716,072 | —- | C] (Intel® Corporation) – C:\Program Files\ICS_Dx32.exe
[2011/02/18 18:09:17 | 407,956,128 | —- | C] (Lavasoft AB) – C:\Program Files\ENG_R_TRL_2011_LAVATC.exe
[2011/02/18 18:09:15 | 016,883,056 | —- | C] (Microsoft Corporation) – C:\Program Files\IE8-WindowsXP-x86-ENU.exe
[2011/02/18 13:14:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011/02/18 13:10:28 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidserv.dll
[2011/02/18 12:39:14 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2011/02/18 12:39:04 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2011/02/18 12:39:04 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2011/02/18 12:39:00 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2011/02/18 12:39:00 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2011/02/18 12:38:42 | 000,357,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2011/02/18 12:38:24 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2011/02/18 12:38:17 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2011/02/18 12:38:14 | 000,455,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2011/02/18 12:38:01 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2011/02/18 12:36:57 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2011/02/18 12:35:56 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2011/02/18 12:35:53 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2011/02/18 12:34:36 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2011/02/18 12:33:36 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/02/18 12:33:21 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2011/02/18 12:32:50 | 002,192,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2011/02/18 12:32:50 | 002,148,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2011/02/18 12:32:50 | 002,027,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2011/02/18 12:32:49 | 002,069,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2011/02/18 12:31:00 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2011/02/18 12:30:51 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2011/02/18 12:11:45 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Roxio
[2011/02/18 12:07:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Uninstall
[2011/02/18 12:07:42 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SureThing Shared
[2011/02/18 12:06:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sonic
[2011/02/18 12:06:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Roxio Creator DE
[2011/02/18 12:06:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Sonic Shared
[2011/02/18 12:05:59 | 000,000,000 | —D | C] – C:\Program Files\Roxio
[2011/02/18 11:55:33 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2011/02/18 11:49:36 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\IETldCache
[2011/02/18 11:45:34 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2011/02/18 11:43:15 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2011/02/18 11:41:19 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2011/02/18 11:35:05 | 000,602,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2011/02/18 11:35:05 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2011/02/18 11:35:01 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2011/02/18 11:34:59 | 001,991,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2011/02/18 11:34:53 | 011,080,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2011/02/18 11:32:36 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\UserData
[2011/02/18 11:07:18 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2011/02/18 11:07:18 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2011/02/18 11:07:15 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2011/02/18 11:07:14 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\1394bus.sys
[2011/02/18 11:07:14 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2011/02/18 03:07:37 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2011/02/18 03:01:38 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2011/02/18 03:01:38 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2011/02/18 03:01:38 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2011/02/18 03:01:25 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2011/02/18 03:01:21 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2011/02/18 03:01:18 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2011/02/18 02:59:22 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2011/02/18 02:59:21 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smtpapi.dll
[2011/02/18 02:59:21 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwnh.dll
[2011/02/18 02:59:21 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsdupd.exe
[2011/02/18 02:59:05 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2011/02/18 02:59:05 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2011/02/18 02:59:05 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2011/02/18 02:59:05 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2011/02/18 02:59:05 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2011/02/18 02:59:04 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2011/02/18 02:59:04 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2011/02/18 02:59:04 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2011/02/18 02:59:04 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2011/02/18 02:59:04 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2011/02/18 02:59:04 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2011/02/18 02:59:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2011/02/18 02:59:03 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2011/02/18 02:59:03 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2011/02/18 02:59:03 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2011/02/18 02:59:03 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3api.dll
[2011/02/18 02:59:03 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3dlg.dll
[2011/02/18 02:59:02 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2011/02/18 02:59:02 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2011/02/18 02:59:02 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2011/02/18 02:59:01 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2011/02/18 02:59:01 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2011/02/18 02:59:01 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappcfg.dll
[2011/02/18 02:59:01 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2011/02/18 02:59:01 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2011/02/18 02:59:01 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappprxy.dll
[2011/02/18 02:59:01 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapolqec.dll
[2011/02/18 02:58:59 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2011/02/18 02:58:58 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2011/02/18 02:58:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2011/02/18 02:58:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2011/02/18 02:58:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2011/02/18 02:58:56 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2011/02/18 02:58:55 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2011/02/18 02:58:54 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2011/02/18 02:58:54 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2011/02/18 02:58:54 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2011/02/18 02:58:54 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2011/02/18 02:58:53 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2011/02/18 02:58:52 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2011/02/18 02:58:52 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2011/02/18 02:58:52 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2011/02/18 02:58:52 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2011/02/18 02:58:52 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2011/02/18 02:58:51 | 004,274,816 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2011/02/18 02:58:51 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\onex.dll
[2011/02/18 02:58:50 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2011/02/18 02:58:50 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2011/02/18 02:58:49 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2011/02/18 02:58:49 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2011/02/18 02:58:49 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2011/02/18 02:58:49 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2011/02/18 02:58:49 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qutil.dll
[2011/02/18 02:58:49 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2011/02/18 02:58:49 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2011/02/18 02:58:49 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rasqec.dll
[2011/02/18 02:58:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2011/02/18 02:58:49 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2011/02/18 02:58:48 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2011/02/18 02:58:48 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2011/02/18 02:58:48 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2011/02/18 02:58:47 | 000,712,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecs.dll
[2011/02/18 02:58:47 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2011/02/18 02:58:46 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2011/02/18 02:58:46 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2011/02/18 02:58:45 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2011/02/18 02:58:43 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2011/02/18 02:58:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2011/02/18 02:58:37 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2011/02/18 02:58:32 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2011/02/18 02:58:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2011/02/18 02:58:29 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2011/02/18 02:51:11 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2011/02/18 02:50:05 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlimport.exe
[2011/02/18 02:45:00 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2011/02/18 02:45:00 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2011/02/18 02:45:00 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2011/02/18 02:45:00 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2011/02/18 02:44:59 | 000,043,008 | —- | C] (Advanced Micro Devices, Inc.) – C:\WINDOWS\System32\drivers\amdagp.sys
[2011/02/18 02:44:59 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2011/02/18 02:44:59 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2011/02/18 02:44:59 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2011/02/18 02:44:59 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2011/02/18 02:44:58 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2011/02/18 02:44:58 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2011/02/18 02:44:58 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2011/02/18 02:44:58 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2011/02/18 02:44:58 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2011/02/18 02:44:57 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2011/02/18 02:44:57 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2011/02/18 02:44:57 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2011/02/18 02:44:57 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2011/02/18 02:44:57 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2011/02/18 02:44:56 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2011/02/18 02:44:56 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2011/02/18 02:44:56 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2011/02/18 02:44:56 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2011/02/18 02:44:56 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2011/02/18 02:44:55 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2011/02/18 02:44:55 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2011/02/18 02:44:55 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2011/02/18 02:44:55 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2011/02/18 02:44:55 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2011/02/18 02:44:55 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2011/02/18 02:44:54 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2011/02/18 02:44:54 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2011/02/18 02:44:54 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2011/02/18 02:44:54 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2011/02/18 02:44:54 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2011/02/18 02:44:53 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2011/02/18 02:44:52 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2011/02/18 02:44:52 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2011/02/18 02:44:51 | 000,144,384 | —- | C] (Windows ® Server 2003 DDK provider) – C:\WINDOWS\System32\drivers\hdaudbus.sys
[2011/02/18 02:44:49 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2011/02/18 02:44:48 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2011/02/18 02:44:48 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2011/02/18 02:44:48 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2011/02/18 02:44:47 | 001,897,408 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2011/02/18 02:44:47 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2011/02/18 02:44:47 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2011/02/18 02:44:46 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2011/02/18 02:44:46 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2011/02/18 02:44:46 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2011/02/18 02:44:45 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2011/02/18 02:44:45 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2011/02/18 02:44:45 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2011/02/18 02:44:45 | 000,040,960 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\drivers\sisagp.sys
[2011/02/18 02:44:45 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2011/02/18 02:44:44 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2011/02/18 02:44:43 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2011/02/18 02:44:43 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2011/02/18 02:44:43 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2011/02/18 02:44:42 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2011/02/18 02:44:42 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2011/02/18 02:44:42 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2011/02/18 02:44:42 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2011/02/18 02:42:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2011/02/18 02:38:55 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2011/02/18 00:24:43 | 000,675,840 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETwLc32.dll
[2011/02/18 00:24:42 | 006,607,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\NETwLx32.sys
[2011/02/18 00:24:42 | 002,756,608 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETwLr32.dll
[2011/02/18 00:24:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2011/02/18 00:22:31 | 000,000,000 | —D | C] – C:\Intel
[2011/02/17 23:43:02 | 000,602,624 | —- | C] (OldTimer Tools) – C:\Documents and Settings\lisa\Desktop\OTL.exe
[2011/02/17 16:26:20 | 000,068,976 | —- | C] (G Data Software) – C:\WINDOWS\System32\drivers\GRD.sys
[2011/02/17 15:58:50 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\My Documents\Downloads
[2011/02/17 15:57:54 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2011/02/17 15:56:55 | 000,045,568 | R— | C] (Broadcom Corporation) – C:\WINDOWS\System32\drivers\bcm4sbxp.sys
[2011/02/17 15:55:18 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Mozilla
[2011/02/17 15:55:18 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Mozilla
[2011/02/17 15:55:14 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox
[2011/02/17 15:55:10 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2011/02/17 15:31:23 | 000,000,000 | —D | C] – C:\#GDATA.Trash.Store#
[2011/02/17 15:10:55 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Ad-Aware Total Security
[2011/02/17 15:10:13 | 000,051,400 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDTdiIcpt.sys
[2011/02/17 15:10:13 | 000,029,640 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDNdisIc.sys
[2011/02/17 15:10:08 | 000,062,024 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\MiniIcpt.sys
[2011/02/17 15:10:08 | 000,038,600 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\HookCentre.sys
[2011/02/17 15:10:07 | 000,033,480 | —- | C] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDBehave.sys
[2011/02/17 15:09:00 | 000,000,000 | —D | C] – C:\Program Files\Lavasoft
[2011/02/17 15:09:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\G Data
[2011/02/17 15:09:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\G DATA
[2011/02/17 15:08:46 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2011/02/17 15:08:45 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2011/02/17 15:07:44 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Downloaded Installations
[2011/02/17 15:07:30 | 000,000,000 | -H-D | C] – C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2011/02/17 14:50:34 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop\winaudit
[2011/02/17 14:46:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\EASEUS Partition Master 7.0.1 Professional Edition Demo
[2011/02/17 14:46:28 | 000,000,000 | —D | C] – C:\Program Files\EASEUS
[2011/02/17 14:46:12 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop\epmprodemo
[2011/02/17 14:45:08 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop\mbrfix
[2011/02/17 14:44:47 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton
[2011/02/17 14:44:40 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\NPE
[2011/02/17 14:43:49 | 006,080,440 | —- | C] (Symantec Corporation) – C:\Documents and Settings\lisa\Desktop\NPE.exe
[2011/02/17 14:32:37 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Roxio Shared
[2011/02/17 14:32:34 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\InstallShield
[2011/02/17 14:32:32 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2011/02/17 14:25:28 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\My Documents\New Folder
[2011/02/17 02:14:44 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu\Programs\Administrative Tools
[2011/02/17 01:56:02 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Application Data\Identities
[2011/02/17 01:56:00 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2011/02/17 01:55:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\My Documents\My Pictures
[2011/02/17 01:55:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\My Documents\My Music
[2011/02/17 01:55:53 | 000,000,000 | –SD | C] – C:\Documents and Settings\lisa\Application Data\Microsoft
[2011/02/17 01:55:53 | 000,000,000 | RH-D | C] – C:\Documents and Settings\lisa\Application Data
[2011/02/17 01:55:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\My Documents
[2011/02/17 01:55:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Favorites
[2011/02/17 01:55:53 | 000,000,000 | -HSD | C] – C:\Documents and Settings\lisa\Cookies
[2011/02/17 01:55:53 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\Local Settings
[2011/02/17 01:55:53 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Local Settings\Application Data\Microsoft
[2011/02/17 01:55:53 | 000,000,000 | —D | C] – C:\Documents and Settings\lisa\Desktop
[2011/02/17 01:55:52 | 000,000,000 | RH-D | C] – C:\Documents and Settings\lisa\SendTo
[2011/02/17 01:55:52 | 000,000,000 | RH-D | C] – C:\Documents and Settings\lisa\Recent
[2011/02/17 01:55:52 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu\Programs\Startup
[2011/02/17 01:55:52 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu
[2011/02/17 01:55:52 | 000,000,000 | R–D | C] – C:\Documents and Settings\lisa\Start Menu\Programs\Accessories
[2011/02/17 01:55:52 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\Templates
[2011/02/17 01:55:52 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\PrintHood
[2011/02/17 01:55:52 | 000,000,000 | -H-D | C] – C:\Documents and Settings\lisa\NetHood
[2011/02/17 01:54:44 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2011/02/17 01:54:42 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2011/02/17 01:54:41 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2011/02/17 01:54:41 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2011/02/17 01:53:46 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2011/02/17 01:53:46 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2011/02/17 01:52:36 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2011/02/17 01:52:35 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2011/02/17 01:52:35 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2011/02/17 01:52:34 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2011/02/17 01:52:34 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2011/02/17 01:52:34 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2011/02/17 01:52:33 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2011/02/17 01:52:33 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2011/02/17 01:52:31 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2011/02/17 01:52:30 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2011/02/17 01:52:30 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2011/02/17 01:52:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2011/02/17 01:52:30 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2011/02/17 01:52:29 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2011/02/17 01:52:29 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2011/02/17 01:52:27 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2011/02/17 01:52:26 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2011/02/17 01:52:26 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2011/02/17 01:52:24 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2011/02/17 01:52:24 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2011/02/17 01:52:24 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2011/02/17 01:52:24 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2011/02/17 01:52:23 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2011/02/17 01:52:23 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2011/02/17 01:52:23 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2011/02/17 01:52:23 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2011/02/17 01:52:21 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2011/02/17 01:52:20 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2011/02/17 01:52:18 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2011/02/17 01:52:17 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2011/02/17 01:52:16 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2011/02/17 01:52:14 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2011/02/17 01:52:14 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2011/02/17 01:52:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2011/02/17 01:52:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2011/02/17 01:52:13 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2011/02/17 01:52:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2011/02/17 01:52:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2011/02/17 01:52:13 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2011/02/17 01:52:13 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2011/02/17 01:52:13 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2011/02/17 01:52:13 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2011/02/17 01:52:12 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2011/02/17 01:52:12 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2011/02/17 01:52:12 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2011/02/17 01:52:12 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2011/02/17 01:52:12 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2011/02/17 01:52:12 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2011/02/17 01:52:11 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2011/02/17 01:52:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2011/02/17 01:52:07 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2011/02/17 01:52:06 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2011/02/17 01:52:06 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2011/02/17 01:52:04 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2011/02/17 01:52:04 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2011/02/17 01:52:04 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2011/02/17 01:52:02 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2011/02/17 01:52:02 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2011/02/17 01:52:01 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2011/02/17 01:51:59 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2011/02/17 01:51:59 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2011/02/17 01:51:59 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2011/02/17 01:51:59 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2011/02/17 01:51:58 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2011/02/17 01:51:58 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2011/02/17 01:51:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2011/02/17 01:51:57 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2011/02/17 01:51:57 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2011/02/17 01:51:56 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2011/02/17 01:51:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2011/02/17 01:51:56 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2011/02/17 01:51:55 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2011/02/17 01:51:55 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2011/02/17 01:51:53 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2011/02/17 01:51:51 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2011/02/17 01:51:50 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2011/02/17 01:51:46 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2011/02/17 01:51:45 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2011/02/17 01:51:39 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2011/02/17 01:51:39 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2011/02/17 01:51:39 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2011/02/17 01:51:38 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2011/02/17 01:51:36 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2011/02/17 01:51:34 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2011/02/17 01:51:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2011/02/17 01:51:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2011/02/17 01:51:33 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2011/02/17 01:51:33 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2011/02/17 01:51:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2011/02/17 01:51:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2011/02/17 01:51:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2011/02/17 01:51:32 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2011/02/17 01:51:32 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2011/02/17 01:51:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2011/02/17 01:51:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2011/02/17 01:51:31 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2011/02/17 01:51:30 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2011/02/17 01:51:30 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2011/02/17 01:51:30 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2011/02/17 01:51:30 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2011/02/17 01:51:29 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2011/02/17 01:51:29 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2011/02/17 01:51:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2011/02/17 01:51:27 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2011/02/17 01:51:26 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2011/02/17 01:51:26 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2011/02/17 01:51:25 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2011/02/17 01:51:25 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2011/02/17 01:51:25 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2011/02/17 01:51:25 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2011/02/17 01:51:25 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2011/02/17 01:51:24 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2011/02/17 01:51:24 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2011/02/17 01:51:24 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2011/02/17 01:51:24 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2011/02/17 01:51:24 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2011/02/17 01:51:24 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2011/02/17 01:51:23 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2011/02/17 01:51:23 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2011/02/17 01:51:23 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2011/02/17 01:51:22 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2011/02/17 01:51:22 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2011/02/17 01:51:22 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2011/02/17 01:51:22 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2011/02/17 01:51:22 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2011/02/17 01:51:22 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2011/02/17 01:51:22 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2011/02/17 01:51:21 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2011/02/17 01:51:21 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2011/02/17 01:51:21 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2011/02/17 01:51:21 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2011/02/17 01:51:13 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2011/02/17 01:50:57 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2011/02/17 01:50:55 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2011/02/17 01:50:52 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/02/17 01:50:52 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/02/17 01:50:50 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/02/17 01:50:50 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/02/17 01:50:49 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2011/02/17 01:50:49 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2011/02/17 01:50:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2011/02/17 01:50:47 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2011/02/17 01:50:46 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2011/02/17 01:50:46 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2011/02/17 01:50:45 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2011/02/17 01:50:45 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2011/02/17 01:50:45 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2011/02/17 01:50:40 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2011/02/17 01:50:39 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2011/02/17 01:50:39 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2011/02/17 01:50:38 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2011/02/17 01:50:38 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2011/02/17 01:50:38 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2011/02/17 01:50:36 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2011/02/17 01:50:36 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2011/02/17 01:50:36 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2011/02/17 01:50:35 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2011/02/17 01:50:35 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2011/02/17 01:50:35 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2011/02/17 01:50:34 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2011/02/17 01:50:34 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2011/02/17 01:50:34 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2011/02/17 01:50:34 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2011/02/17 01:50:34 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2011/02/17 01:50:33 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2011/02/17 01:50:32 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2011/02/17 01:50:32 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2011/02/17 01:50:32 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2011/02/17 01:50:23 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2011/02/17 01:50:22 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2011/02/17 01:50:22 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2011/02/17 01:50:22 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2011/02/17 01:50:21 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2011/02/17 01:50:19 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2011/02/17 01:50:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2011/02/17 01:50:18 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2011/02/17 01:50:15 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2011/02/17 01:50:08 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2011/02/17 01:50:08 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2011/02/17 01:50:08 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2011/02/17 01:50:07 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2011/02/17 01:50:07 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2011/02/17 01:50:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2011/02/17 01:50:03 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2011/02/17 01:49:58 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2011/02/17 01:49:58 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2011/02/17 01:49:58 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2011/02/17 01:49:47 | 000,000,000 | —D | C] – C:\DELL
[2011/02/17 01:49:37 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2011/02/17 01:49:36 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2011/02/17 01:49:34 | 000,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2011/02/17 01:49:01 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2011/02/17 01:48:14 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2011/02/17 01:48:04 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2011/02/17 01:48:04 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2011/02/17 01:47:53 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2011/02/17 01:47:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2011/02/17 01:47:09 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2011/02/17 01:47:09 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2011/02/17 01:47:08 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2011/02/17 01:47:08 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2011/02/17 01:47:08 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2011/02/17 01:47:08 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2011/02/17 01:47:00 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2011/02/17 01:46:59 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2011/02/17 01:46:59 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2011/02/17 01:46:58 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2011/02/17 01:46:58 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2011/02/17 01:46:58 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2011/02/17 01:46:58 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2011/02/17 01:46:58 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2011/02/17 01:46:57 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2011/02/17 01:46:55 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2011/02/17 01:46:55 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2011/02/17 01:46:55 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2011/02/17 01:46:55 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2011/02/17 01:46:55 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2011/02/17 01:46:54 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2011/02/17 01:46:54 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2011/02/17 01:46:54 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2011/02/17 01:46:54 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2011/02/17 01:46:54 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2011/02/17 01:46:54 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2011/02/17 01:46:53 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2011/02/17 01:46:49 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2011/02/17 01:46:48 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2011/02/17 01:46:48 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2011/02/17 01:46:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2011/02/17 01:46:47 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2011/02/17 01:46:47 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2011/02/17 01:46:47 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2011/02/17 01:46:47 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2011/02/17 01:46:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2011/02/17 01:46:46 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2011/02/17 01:46:46 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2011/02/17 01:46:46 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2011/02/17 01:46:46 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2011/02/17 01:46:45 | 001,929,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2011/02/17 01:46:45 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2011/02/17 01:46:45 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2011/02/17 01:46:45 | 000,217,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2011/02/17 01:46:45 | 000,209,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2011/02/17 01:46:45 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2011/02/17 01:46:45 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2011/02/17 01:46:45 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2011/02/17 01:46:45 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2011/02/17 01:46:44 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2011/02/17 01:46:44 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2011/02/17 01:46:44 | 000,053,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2011/02/17 01:46:44 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2011/02/17 01:46:44 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2011/02/17 01:46:44 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2011/02/17 01:46:39 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2011/02/17 01:46:35 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2011/02/17 01:46:35 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2011/02/17 01:46:35 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2011/02/17 01:46:35 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2011/02/17 01:46:30 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2011/02/17 01:46:30 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2011/02/17 01:46:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2011/02/17 01:46:29 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2011/02/17 01:46:29 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2011/02/17 01:46:29 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2011/02/17 01:46:28 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2011/02/17 01:46:28 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2011/02/17 01:46:26 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2011/02/17 01:46:26 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2011/02/17 01:46:25 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2011/02/17 01:46:24 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2011/02/17 01:46:22 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2011/02/17 01:46:22 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2011/02/17 01:46:21 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2011/02/17 01:46:21 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2011/02/17 01:46:21 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2011/02/17 01:46:21 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2011/02/17 01:46:15 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2011/02/17 01:46:11 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2011/02/17 01:46:10 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2011/02/17 01:45:48 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2011/02/17 01:45:35 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2011/02/17 01:45:27 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2011/02/17 01:45:27 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2011/02/17 01:45:19 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2011/02/17 01:45:19 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2011/02/17 01:45:19 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2011/02/17 01:45:12 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2011/02/17 01:45:11 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2011/02/17 01:45:11 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2011/02/17 01:45:11 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2011/02/17 01:45:11 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2011/02/17 01:45:11 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2011/02/17 01:45:11 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2011/02/17 01:45:10 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2011/02/17 01:45:10 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2011/02/17 01:45:10 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2011/02/17 01:45:10 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2011/02/17 01:45:10 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2011/02/17 01:45:10 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2011/02/17 01:45:10 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2011/02/17 01:45:10 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2011/02/17 01:45:10 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2011/02/17 01:45:10 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2011/02/17 01:45:09 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2011/02/17 01:45:09 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2011/02/17 01:45:09 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2011/02/17 01:45:09 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2011/02/17 01:45:09 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2011/02/17 01:45:08 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2011/02/17 01:45:08 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2011/02/17 01:45:08 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2011/02/17 01:45:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2011/02/17 01:45:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2011/02/17 01:45:08 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2011/02/17 01:44:59 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2011/02/17 01:44:59 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2011/02/17 01:44:59 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2011/02/17 01:44:59 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2011/02/17 01:44:59 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2011/02/17 01:44:59 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2011/02/17 01:44:59 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2011/02/17 01:44:59 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2011/02/17 01:44:59 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2011/02/17 01:44:59 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2011/02/17 01:44:58 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2011/02/17 01:44:58 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2011/02/17 01:44:52 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2011/02/17 01:44:52 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2011/02/17 01:44:52 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2011/02/17 01:44:52 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2011/02/17 01:44:52 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2011/02/17 01:44:52 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2011/02/17 01:44:51 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2011/02/17 01:44:51 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2011/02/17 01:44:51 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2011/02/17 01:44:51 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2011/02/17 01:44:50 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2011/02/17 01:44:50 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2011/02/17 01:44:50 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2011/02/17 01:44:50 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2011/02/17 01:44:50 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2011/02/17 01:44:50 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2011/02/17 01:44:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2011/02/17 01:44:50 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2011/02/17 01:44:50 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2011/02/17 01:44:50 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2011/02/17 01:44:50 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2011/02/17 01:44:50 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2011/02/17 01:44:50 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2011/02/17 01:44:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2011/02/17 01:44:50 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2011/02/17 01:44:50 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2011/02/17 01:44:50 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2011/02/17 01:44:50 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2011/02/17 01:44:49 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2011/02/17 01:44:49 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2011/02/17 01:44:49 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2011/02/17 01:44:49 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2011/02/17 01:44:48 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2011/02/17 01:44:48 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2011/02/17 01:44:48 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2011/02/17 01:44:48 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2011/02/17 01:44:48 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2011/02/17 01:44:48 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2011/02/17 01:44:48 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2011/02/17 01:44:48 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2011/02/17 01:44:45 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2011/02/17 01:44:45 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2011/02/17 01:44:45 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2011/02/17 01:44:44 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2011/02/17 01:44:44 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2011/02/17 01:44:44 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2011/02/17 01:44:44 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2011/02/17 01:44:44 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2011/02/17 01:44:44 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2011/02/17 01:44:44 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2011/02/17 01:44:44 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2011/02/17 01:44:44 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2011/02/17 01:44:44 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2011/02/17 01:44:44 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2011/02/17 01:44:43 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2011/02/17 01:44:43 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2011/02/17 01:44:24 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2011/02/17 01:44:23 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2011/02/17 01:44:23 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2011/02/17 01:44:23 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2011/02/17 01:44:23 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2011/02/17 01:44:23 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2011/02/17 01:44:23 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2011/02/17 01:44:22 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2011/02/17 01:44:22 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2011/02/17 01:44:22 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2011/02/17 01:44:21 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2011/02/17 01:44:21 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2011/02/17 01:44:21 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2011/02/17 01:44:20 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2011/02/17 01:44:20 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2011/02/17 01:44:20 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2011/02/17 01:44:20 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2011/02/17 01:44:20 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2011/02/17 01:44:20 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2011/02/17 01:44:20 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2011/02/17 01:44:20 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2011/02/17 01:44:19 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2011/02/17 01:44:19 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2011/02/17 01:44:19 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2011/02/17 01:44:19 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2011/02/17 01:44:19 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2011/02/17 01:44:19 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2011/02/17 01:44:19 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2011/02/17 01:44:18 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2011/02/17 01:44:18 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2011/02/17 01:44:18 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2011/02/17 01:44:17 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2011/02/17 01:44:17 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2011/02/17 01:44:17 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2011/02/17 01:44:17 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2011/02/17 01:44:17 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2011/02/17 01:44:17 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2011/02/17 01:44:16 | 001,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2011/02/17 01:44:16 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2011/02/17 01:44:08 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2011/02/17 01:44:08 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2011/02/17 01:44:08 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2011/02/17 01:44:08 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2011/02/17 01:44:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2011/02/17 01:43:38 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2011/02/16 17:31:37 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2011/02/16 17:31:25 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\battc.sys
[2011/02/16 17:30:28 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2011/02/16 17:30:27 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2011/02/16 17:30:26 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2011/02/16 17:30:26 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2011/02/16 17:30:24 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2011/02/16 17:30:23 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2011/02/16 17:30:23 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2011/02/16 17:30:22 | 000,000,000 | R–D | C] – C:\Program Files
[2011/02/16 17:30:22 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2011/02/16 17:30:22 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2011/02/16 17:30:20 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2011/02/16 17:30:20 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2011/02/16 17:30:20 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2011/02/16 17:30:20 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2011/02/16 17:30:20 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2011/02/16 17:30:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2011/02/16 17:30:18 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2011/02/16 17:30:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2011/02/16 17:30:16 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2011/02/16 17:30:16 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2011/02/16 17:30:16 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2011/02/16 17:30:16 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2011/02/16 17:30:16 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2011/02/16 17:30:16 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2011/02/16 17:30:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2011/02/16 17:30:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2011/02/16 17:30:16 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2011/02/16 17:30:16 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2011/02/16 17:30:16 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2011/02/16 17:30:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2011/02/16 17:30:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2011/02/16 17:30:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2011/02/16 17:30:15 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2011/02/16 17:30:15 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2011/02/16 17:30:15 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2011/02/16 17:30:15 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2011/02/16 17:30:15 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2011/02/16 17:30:15 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2011/02/16 17:30:15 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2011/02/16 17:30:15 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2011/02/16 17:30:15 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2011/02/16 17:30:15 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2011/02/16 17:30:13 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2011/02/16 17:30:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2011/02/16 17:30:13 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2011/02/16 17:30:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2011/02/16 17:30:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2011/02/16 17:30:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2011/02/16 17:30:13 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2011/02/16 17:30:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2011/02/16 17:30:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2011/02/16 17:30:13 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2011/02/16 17:30:10 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2011/02/16 17:30:10 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2011/02/16 17:30:10 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2011/02/16 17:30:10 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2011/02/16 17:30:10 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2011/02/16 17:30:10 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2011/02/16 17:30:10 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2011/02/16 17:30:10 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2011/02/16 17:30:10 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2011/02/16 17:30:10 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2011/02/16 17:30:10 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2011/02/16 17:30:10 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2011/02/16 17:30:10 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2011/02/16 17:30:10 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2011/02/16 17:30:09 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2011/02/16 17:30:09 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2011/02/16 17:30:09 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2011/02/16 17:30:09 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2011/02/16 17:30:09 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2011/02/16 17:30:09 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2011/02/16 17:30:09 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2011/02/16 17:30:09 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2011/02/16 17:30:09 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2011/02/16 17:30:09 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2011/02/16 17:30:09 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2011/02/16 17:30:09 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2011/02/16 17:30:09 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2011/02/16 17:30:08 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2011/02/16 17:30:08 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2011/02/16 17:30:08 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2011/02/16 17:30:08 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2011/02/16 17:30:08 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2011/02/16 17:30:08 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2011/02/16 17:30:08 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2011/02/16 17:30:07 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2011/02/16 17:30:07 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2011/02/16 17:30:06 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2011/02/16 17:29:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2011/02/16 17:29:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2011/02/16 17:29:57 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2011/02/16 17:29:57 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2011/02/16 17:29:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2011/02/16 17:29:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2011/02/16 17:29:43 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2011/02/16 17:29:43 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2011/02/16 17:29:37 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2011/02/16 17:29:37 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2011/02/16 17:29:10 | 000,000,000 | —D | C] – C:\Documents and Settings
[2011/02/16 17:29:09 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2011/02/16 17:19:56 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2011/02/16 17:19:56 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2011/02/16 17:19:56 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2011/02/16 17:19:56 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\ehome
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\dell
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2011/02/16 17:19:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[2011/01/21 06:44:37 | 000,439,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shimgvw.dll
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/19 19:20:51 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\lisa\Desktop\HiJackThis.exe
[2011/02/19 19:14:26 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/19 17:27:24 | 000,312,172 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/02/19 17:27:24 | 000,040,394 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/02/19 17:24:45 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/02/19 17:24:44 | 000,000,878 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/19 17:23:05 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/02/19 16:27:56 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/02/18 13:23:00 | 000,091,888 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/02/18 13:10:52 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2011/02/18 13:10:49 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2011/02/18 12:06:53 | 000,001,931 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Roxio Creator Home.lnk
[2011/02/18 11:51:04 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2011/02/18 02:43:55 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/02/18 00:18:19 | 007,716,072 | —- | M] (Intel® Corporation) – C:\Program Files\ICS_Dx32.exe
[2011/02/18 00:07:39 | 000,823,571 | —- | M] () – C:\Program Files\wgr614v6_2_0_19_1_0_19_na.chk
[2011/02/17 23:47:53 | 004,270,656 | R— | M] () – C:\Documents and Settings\lisa\Desktop\ComboFix.exe
[2011/02/17 23:43:02 | 000,602,624 | —- | M] (OldTimer Tools) – C:\Documents and Settings\lisa\Desktop\OTL.exe
[2011/02/17 23:24:35 | 016,883,056 | —- | M] (Microsoft Corporation) – C:\Program Files\IE8-WindowsXP-x86-ENU.exe
[2011/02/17 16:26:20 | 000,068,976 | —- | M] (G Data Software) – C:\WINDOWS\System32\drivers\GRD.sys
[2011/02/17 15:55:21 | 000,000,000 | —- | M] () – C:\WINDOWS\nsreg.dat
[2011/02/17 15:55:14 | 000,001,602 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/17 15:10:13 | 000,051,400 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDTdiIcpt.sys
[2011/02/17 15:10:13 | 000,029,640 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDNdisIc.sys
[2011/02/17 15:10:08 | 000,062,024 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\MiniIcpt.sys
[2011/02/17 15:10:08 | 000,038,600 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\HookCentre.sys
[2011/02/17 15:10:07 | 000,033,480 | —- | M] (G Data Software AG) – C:\WINDOWS\System32\drivers\GDBehave.sys
[2011/02/17 15:09:54 | 000,001,896 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware Total Security.lnk
[2011/02/17 15:07:11 | 000,015,880 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2011/02/17 14:46:40 | 000,001,152 | —- | M] () – C:\Documents and Settings\All Users\Desktop\EASEUS Partition Master 7.0.1 Professional Edition Demo.lnk
[2011/02/17 02:52:40 | 000,000,212 | RHS- | M] () – C:\boot.ini
[2011/02/17 02:14:44 | 000,042,300 | —- | M] () – C:\WINDOWS\System32\services.msc
[2011/02/17 01:53:49 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2011/02/17 01:53:02 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2011/02/17 01:49:16 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/02/17 01:49:12 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2011/02/17 01:49:12 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2011/02/17 01:49:01 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2011/02/17 01:45:47 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/02/13 13:57:32 | 006,080,440 | —- | M] (Symantec Corporation) – C:\Documents and Settings\lisa\Desktop\NPE.exe
[2011/02/11 23:40:20 | 000,042,285 | —- | M] () – C:\Program Files\mbrfix.zip
[2011/02/11 23:27:54 | 042,548,520 | —- | M] () – C:\Program Files\epmprodemo.zip
[2011/02/01 12:57:50 | 000,877,939 | —- | M] () – C:\Program Files\winaudit.zip
[2011/01/21 06:44:37 | 008,462,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shell32.dll
[2011/01/21 06:44:37 | 000,439,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shimgvw.dll
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/19 15:09:39 | 000,000,882 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/19 15:09:39 | 000,000,878 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/18 18:58:01 | 000,256,512 | —- | C] () – C:\WINDOWS\PEV.exe
[2011/02/18 18:58:01 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2011/02/18 18:58:01 | 000,089,088 | —- | C] () – C:\WINDOWS\MBR.exe
[2011/02/18 18:58:01 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2011/02/18 18:58:01 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2011/02/18 18:09:50 | 042,548,520 | —- | C] () – C:\Program Files\epmprodemo.zip
[2011/02/18 18:09:17 | 000,877,939 | —- | C] () – C:\Program Files\winaudit.zip
[2011/02/18 18:09:17 | 000,823,571 | —- | C] () – C:\Program Files\wgr614v6_2_0_19_1_0_19_na.chk
[2011/02/18 18:09:16 | 000,042,285 | —- | C] () – C:\Program Files\mbrfix.zip
[2011/02/18 13:10:52 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2011/02/18 13:10:49 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2011/02/18 12:06:53 | 000,001,931 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Roxio Creator Home.lnk
[2011/02/18 03:01:32 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2011/02/18 03:01:32 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2011/02/18 03:01:32 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2011/02/18 03:01:31 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2011/02/18 03:01:31 | 000,067,374 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2011/02/18 03:01:31 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2011/02/18 03:01:31 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2011/02/18 03:01:30 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2011/02/18 03:01:30 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2011/02/18 03:01:30 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2011/02/18 03:01:29 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2011/02/18 03:01:29 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2011/02/18 03:01:29 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2011/02/18 03:01:29 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2011/02/18 03:01:29 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2011/02/18 03:01:29 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2011/02/18 03:01:29 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2011/02/18 03:01:28 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2011/02/18 03:01:27 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2011/02/18 03:01:27 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2011/02/18 03:01:27 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2011/02/18 03:01:27 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2011/02/18 03:01:27 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2011/02/18 03:01:27 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2011/02/18 03:01:27 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2011/02/18 03:01:27 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2011/02/18 03:01:27 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2011/02/18 03:01:27 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2011/02/18 03:01:27 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2011/02/18 03:01:26 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2011/02/18 03:01:26 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2011/02/18 03:01:26 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2011/02/18 03:01:26 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2011/02/18 03:01:26 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2011/02/18 03:01:26 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2011/02/18 03:01:26 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2011/02/18 03:01:26 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2011/02/18 03:01:26 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2011/02/18 03:01:26 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2011/02/18 03:01:26 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2011/02/18 03:01:26 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2011/02/18 03:01:25 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2011/02/18 03:01:25 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2011/02/18 03:01:25 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2011/02/18 03:01:25 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2011/02/18 03:01:24 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2011/02/18 03:01:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2011/02/18 03:01:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2011/02/18 03:01:23 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2011/02/18 03:01:23 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2011/02/18 03:01:23 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2011/02/18 03:01:23 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2011/02/18 03:01:23 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2011/02/18 03:01:23 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2011/02/18 03:01:23 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2011/02/18 03:01:23 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2011/02/18 03:01:23 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2011/02/18 03:01:23 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2011/02/18 03:01:22 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2011/02/18 03:01:22 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2011/02/18 03:01:22 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2011/02/18 03:01:22 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2011/02/18 03:01:22 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2011/02/18 03:01:22 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2011/02/18 03:01:20 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2011/02/18 03:01:20 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2011/02/18 03:01:20 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2011/02/18 03:01:19 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2011/02/18 03:01:18 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2011/02/18 03:01:18 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2011/02/18 03:01:18 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2011/02/18 03:01:18 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2011/02/18 03:01:17 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2011/02/18 03:01:17 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2011/02/18 03:01:17 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2011/02/18 03:01:17 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2011/02/18 03:01:17 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2011/02/18 03:01:17 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2011/02/18 03:01:17 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2011/02/18 03:01:16 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2011/02/18 02:44:54 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2011/02/18 02:44:52 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2011/02/18 02:44:47 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2011/02/17 23:47:50 | 004,270,656 | R— | C] () – C:\Documents and Settings\lisa\Desktop\ComboFix.exe
[2011/02/17 15:55:21 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2011/02/17 15:55:14 | 000,001,602 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/17 15:10:34 | 000,015,880 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2011/02/17 15:09:54 | 000,001,896 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware Total Security.lnk
[2011/02/17 14:46:40 | 002,336,384 | —- | C] () – C:\WINDOWS\System32\BootMan.exe
[2011/02/17 14:46:40 | 000,086,408 | —- | C] () – C:\WINDOWS\System32\setupempdrv03.exe
[2011/02/17 14:46:40 | 000,014,848 | —- | C] () – C:\WINDOWS\System32\EuEpmGdi.dll
[2011/02/17 14:46:40 | 000,013,192 | —- | C] () – C:\WINDOWS\System32\epmntdrv.sys
[2011/02/17 14:46:40 | 000,008,456 | —- | C] () – C:\WINDOWS\System32\EuGdiDrv.sys
[2011/02/17 14:46:40 | 000,001,152 | —- | C] () – C:\Documents and Settings\All Users\Desktop\EASEUS Partition Master 7.0.1 Professional Edition Demo.lnk
[2011/02/17 01:56:00 | 000,000,803 | —- | C] () – C:\Documents and Settings\lisa\Start Menu\Programs\Internet Explorer.lnk
[2011/02/17 01:53:49 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2011/02/17 01:52:56 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/02/17 01:51:57 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2011/02/17 01:51:34 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2011/02/17 01:51:25 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2011/02/17 01:51:24 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2011/02/17 01:51:22 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2011/02/17 01:51:06 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2011/02/17 01:50:55 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2011/02/17 01:50:36 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2011/02/17 01:49:16 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2011/02/17 01:49:16 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2011/02/17 01:49:16 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2011/02/17 01:49:12 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2011/02/17 01:49:12 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2011/02/17 01:49:11 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2011/02/17 01:47:37 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2011/02/17 01:47:06 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2011/02/17 01:47:06 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2011/02/17 01:47:00 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2011/02/17 01:45:47 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/02/17 01:44:54 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2011/02/17 01:44:54 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2011/02/17 01:44:54 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2011/02/17 01:44:54 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2011/02/17 01:44:54 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2011/02/17 01:44:54 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2011/02/17 01:44:53 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2011/02/17 01:44:53 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2011/02/17 01:44:53 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2011/02/17 01:44:53 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2011/02/17 01:44:53 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2011/02/17 01:44:50 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2011/02/17 01:44:50 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2011/02/17 01:44:49 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2011/02/17 01:44:43 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2011/02/16 17:30:31 | 000,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2011/02/16 17:30:27 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/02/16 17:30:24 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2011/02/16 17:30:24 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2011/02/16 17:30:24 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2011/02/16 17:30:23 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2011/02/16 17:30:08 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2011/02/16 17:29:56 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2011/02/16 17:29:56 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2011/02/16 17:29:56 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2011/02/16 17:29:56 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2011/02/16 17:29:56 | 000,007,710 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2011/02/16 17:29:56 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2011/02/16 17:29:55 | 001,042,903 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2011/02/16 17:29:55 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2011/02/16 17:29:09 | 000,091,888 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/02/16 17:28:12 | 000,000,212 | RHS- | C] () – C:\boot.ini
[2011/02/16 17:28:08 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
========== LOP Check ==========
[2011/02/17 15:57:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\G DATA
[2011/02/18 12:07:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Uninstall
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/02/19 17:23:03 | 000,004,252 | —- | M] () – C:\aaw7boot.log
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/02/17 02:52:40 | 000,000,212 | RHS- | M] () – C:\boot.ini
[2011/02/18 19:22:01 | 000,005,770 | —- | M] () – C:\ComboFix.txt
[2011/02/17 01:49:16 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/02/17 01:49:16 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/04 02:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2011/02/18 02:43:55 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/02/19 17:23:03 | 1610,612,736 | -HS- | M] () – C:\pagefile.sys
< %systemroot%\Fonts\*.com >
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2011/02/17 01:48:50 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2010/12/30 18:52:24 | 407,956,128 | —- | M] (Lavasoft AB) – C:\Program Files\ENG_R_TRL_2011_LAVATC.exe
[2011/02/11 23:27:54 | 042,548,520 | —- | M] () – C:\Program Files\epmprodemo.zip
[2010/12/30 18:36:12 | 008,582,536 | —- | M] (Mozilla) – C:\Program Files\Firefox Setup 3.6.13.exe
[2011/02/18 00:18:19 | 007,716,072 | —- | M] (Intel® Corporation) – C:\Program Files\ICS_Dx32.exe
[2011/02/17 23:24:35 | 016,883,056 | —- | M] (Microsoft Corporation) – C:\Program Files\IE8-WindowsXP-x86-ENU.exe
[2011/02/11 23:40:20 | 000,042,285 | —- | M] () – C:\Program Files\mbrfix.zip
[2011/02/18 00:07:39 | 000,823,571 | —- | M] () – C:\Program Files\wgr614v6_2_0_19_1_0_19_na.chk
[2011/02/01 12:57:50 | 000,877,939 | —- | M] () – C:\Program Files\winaudit.zip
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2011/02/16 17:28:12 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2011/02/16 17:28:11 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2011/02/16 17:28:11 | 000,892,928 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011/02/18 03:02:12 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
< %USERPROFILE%\Desktop\*.exe >
[2011/02/17 23:47:53 | 004,270,656 | R— | M] () – C:\Documents and Settings\lisa\Desktop\ComboFix.exe
[2011/02/19 19:20:51 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\lisa\Desktop\HiJackThis.exe
[2011/02/13 13:57:32 | 006,080,440 | —- | M] (Symantec Corporation) – C:\Documents and Settings\lisa\Desktop\NPE.exe
[2011/02/17 23:43:02 | 000,602,624 | —- | M] (OldTimer Tools) – C:\Documents and Settings\lisa\Desktop\OTL.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-02-18 21:44:36
< End of report >