What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Wndows XP Antivirus 2011

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hello, My name is Beautiful Keeper



Had XP Antivirus 2011, I downloaded Malwarebytes which stopped the annoying fake antivirus alerts. I also downloaded a trial version of Norton Virus Scan. Since running Malwarebytes scan and Norton Virus scan, my executables don't work so well, and my Desktop shortcuts aren't opening my programs as well. When I try to run my programs, I get a dialog box stating that I have to pick which program in order to run the program. I can still open my photo files, but I can't open my programs. I am currently running the Recover My Files program, but I really do not know what to do or if this will work.

I ran Hijack and here is the report


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:41:17 PM, on 5/27/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Clearwire\Connection Manager\clearwireDeviceDiagnosticsService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Clearwire\Connection Manager\ClearwireCM.exe
C:\Program Files\Clearwire\Connection Manager\RcAppSvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Clearwire\Connection Manager\SwiApiMuxCdma.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ebony Encounters\My Documents\Downloads\HiJackThis.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Clearwire Connection Manager] "C:\Program Files\Clearwire\Connection Manager\ClearwireCM.exe" -a
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1305398564870
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Clearwire Device Diagnostics Service (clearwireDeviceDiagnosticsService) - Unknown owner - C:\Program Files\Clearwire\Connection Manager\clearwireDeviceDiagnosticsService.exe
O23 - Service: Clearwire RcAppSvc (CLEARWIRERcAppSvc) - SmithMicro Inc. - C:\Program Files\Clearwire\Connection Manager\RcAppSvc.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Clearwire Device Launch Service (SMSI Device Launch Service) - Unknown owner - C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe
O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 7311 bytes
Post #2
Hello BeautifulKeeper and welcome to the WTT forum.


My username is Astabi and I would be glad to help you with your computer problem. Please read the following guidelines which will help to make cleaning your machine easier:

Please do not install/uninstall any programs unless asked to.
Please do not run any scans other than those requested
Please follow all instructions in the order posted
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
If you don't understand something, please don't hesitate to ask for clarification before proceeding
The fixes are specific to your problem and should only be used for this issue on this machine.
Please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!


Please note that I am still in training and my replies need to be checked by an expert in order for you to receive the best possible advice. This may result in a small delay between my posts but I shall try to keep this to a minimum.


Thanks,
Astabi
Post #3
Hello BeautifulKeeper,

For now, please don't run any file recovery program until we are sure you are clean and I give you the all clear.
Please Download FixNCR.reg

Double-click on the FixNCR.reg file to fix the Registry. Restart your computer. You should now be able to run your normal executable programs.

Next,

We need to get a better look see to make sure you're computer is clean.

  • Download OTL to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
    Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

Then,

[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and attach it in your reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries


In your next post provide:
OTL.Txt
Extras.Txt
Gmer.txt

Thanks,
Astabi
Post #4
Hello Astabi

Thank you for responding. I downloaded the FixNCR.reg file as well as OTL. The OTL results are as follows:

OLT.txt

OTL logfile created on: 5/28/2011 9:45:56 PM - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Documents and Settings\Ebony Encounters\My Documents\Downloads
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1022.37 Mb Total Physical Memory | 454.73 Mb Available Physical Memory | 44.48% Memory free
2.40 Gb Paging File | 1.93 Gb Available in Paging File | 80.45% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 117.95 Gb Free Space | 50.65% Space Free | Partition Type: NTFS

Computer Name: OWNER-5309936EE | User Name: Ebony Encounters | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Ebony Encounters\My Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\Clearwire\Connection Manager\ClearwireCM.exe (ClearwireCM)
PRC - C:\Program Files\Clearwire\Connection Manager\SwiApiMuxCdma.exe (Sierra Wireless, Inc.)
PRC - C:\Program Files\Clearwire\Connection Manager\RcAppSvc.exe (SmithMicro Inc.)
PRC - C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe ()
PRC - C:\Program Files\Clearwire\Connection Manager\clearwireDeviceDiagnosticsService.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe (SigmaTel, Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe (ATI Technologies Inc.)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Ebony Encounters\My Documents\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\asOEHook.dll (Symantec Corporation)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\Microsoft.VC90.CRT\msvcr90.dll (Microsoft Corporation)
MOD - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\Microsoft.VC90.CRT\msvcp90.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (HidServ) – File not found
SRV - (NIS) – C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (Symantec Corporation)
SRV - (CLEARWIRERcAppSvc) – C:\Program Files\Clearwire\Connection Manager\RcAppSvc.exe (SmithMicro Inc.)
SRV - (SMSI Device Launch Service) – C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe ()
SRV - (clearwireDeviceDiagnosticsService) – C:\Program Files\Clearwire\Connection Manager\clearwireDeviceDiagnosticsService.exe ()
SRV - (WLANKEEPER) Intel® – C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe (Intel Corporation)


========== Driver Services (SafeList) ==========

DRV - (NAVEX15) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20110528.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20110528.003\NAVENG.SYS (Symantec Corporation)
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (BHDrvx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\BASHDefs\20110518.001\BHDrvx86.sys (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\system32\drivers\NIS\1206000.01D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\WINDOWS\system32\drivers\NIS\1206000.01D\SRTSPX.SYS (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\system32\drivers\NIS\1206000.01D\SYMTDI.SYS (Symantec Corporation)
DRV - (SymEFA) – C:\WINDOWS\system32\drivers\NIS\1206000.01D\SYMEFA.SYS (Symantec Corporation)
DRV - (IDSxpx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\IPSDefs\20110527.001\IDSXpx86.sys (Symantec Corporation)
DRV - (SymDS) – C:\WINDOWS\system32\drivers\NIS\1206000.01D\SYMDS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\WINDOWS\system32\drivers\NIS\1206000.01D\Ironx86.SYS (Symantec Corporation)
DRV - (SWNC5E00) Sierra Wireless MUX NDIS Driver (#00) – C:\WINDOWS\system32\drivers\SWNC5E00.sys (Sierra Wireless Inc.)
DRV - (swmx00) Sierra Wireless USB MUX Driver (#00) – C:\WINDOWS\system32\drivers\swmx00.sys (Sierra Wireless Inc.)
DRV - (swmsflt) – C:\WINDOWS\system32\drivers\swmsflt.sys ()
DRV - (PCTINDIS5) – C:\WINDOWS\system32\PCTINDIS5.sys (Smith Micro Inc.)
DRV - (bcm) – C:\WINDOWS\system32\drivers\drxvi314.sys (Beceem communications pvt ltd.)
DRV - (bcmbusctr) – C:\WINDOWS\system32\drivers\BcmBusCtr.sys (Beceem communications pvt ltd.)
DRV - (NETw4x32) Intel® – C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation)
DRV - (s24trans) – C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (STHDA) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (bcm4sbxp) – C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)
DRV - (rimmptsk) – C:\WINDOWS\system32\drivers\rimmptsk.sys (REDC)
DRV - (rimsptsk) – C:\WINDOWS\system32\drivers\rimsptsk.sys (REDC)
DRV - (rismxdp) – C:\WINDOWS\system32\drivers\rixdptsk.sys (REDC)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (HSF_DPV) – C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) – C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (ADM8511) – C:\WINDOWS\system32\drivers\ADM8511.SYS (ADMtek Incorporated)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\software\mozilla\Firefox\extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\IPSFFPlgn\ [2011/05/22 01:01:01 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\coFFPlgn\ [2011/05/22 00:58:51 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/14 20:45:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2011/05/21 23:34:15 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Ebony Encounters\Application Data\Mozilla\Extensions
[2011/05/16 14:02:02 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/05/16 14:02:02 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
File not found (No name found) –
[2011/05/22 00:58:51 | 000,000,000 | —D | M] (Norton Toolbar) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\COFFPLGN
[2011/05/22 01:01:01 | 000,000,000 | —D | M] (Symantec IPS) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\IPSFFPLGN
[2011/05/16 14:01:48 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/04/14 11:26:02 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\bing.xml

O1 HOSTS File: ([2004/08/10 06:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [Clearwire Connection Manager] C:\Program Files\Clearwire\Connection Manager\ClearwireCM.exe (ClearwireCM)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe (SigmaTel, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/…b?1305398564870 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_25)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/05/14 13:30:53 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/05/27 20:23:16 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\TEMP
[2011/05/27 20:23:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Recover My Files v4
[2011/05/27 14:41:51 | 000,000,000 | —D | C] – C:\Program Files\GetData
[2011/05/27 11:44:33 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\Adobe
[2011/05/22 03:16:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Malwarebytes
[2011/05/22 03:16:35 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/05/22 03:16:35 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/05/22 03:16:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/05/22 03:16:30 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2011/05/22 03:16:29 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/05/22 03:11:13 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2011/05/22 01:01:53 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\My Documents\Symantec
[2011/05/22 00:59:27 | 000,126,584 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2011/05/22 00:59:27 | 000,060,872 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2011/05/22 00:59:27 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2011/05/22 00:59:27 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2011/05/22 00:59:16 | 000,744,568 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymEFA.sys
[2011/05/22 00:59:16 | 000,516,216 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\srtsp.sys
[2011/05/22 00:59:16 | 000,369,784 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\symtdi.sys
[2011/05/22 00:59:16 | 000,340,088 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymDS.sys
[2011/05/22 00:59:16 | 000,331,384 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\symtdiv.sys
[2011/05/22 00:59:16 | 000,296,568 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\symnets.sys
[2011/05/22 00:59:16 | 000,136,312 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\Ironx86.sys
[2011/05/22 00:59:16 | 000,050,168 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1206000.01D\srtspx.sys
[2011/05/22 00:58:55 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\NIS
[2011/05/22 00:58:55 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\NIS\1206000.01D
[2011/05/22 00:58:51 | 000,000,000 | —D | C] – C:\Program Files\Windows Sidebar
[2011/05/22 00:58:51 | 000,000,000 | —D | C] – C:\Program Files\Norton Internet Security
[2011/05/22 00:58:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Norton Internet Security
[2011/05/22 00:58:38 | 000,000,000 | —D | C] – C:\Program Files\NortonInstaller
[2011/05/22 00:58:38 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2011/05/22 00:26:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Norton
[2011/05/22 00:26:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Norton
[2011/05/22 00:24:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Sun
[2011/05/22 00:22:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Sierra Wireless
[2011/05/22 00:01:12 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton
[2011/05/21 23:37:46 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Macromedia
[2011/05/21 23:37:46 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Adobe
[2011/05/21 23:35:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\My Documents\Downloads
[2011/05/21 23:34:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\Mozilla
[2011/05/21 23:34:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Mozilla
[2011/05/21 23:32:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\ATI
[2011/05/21 23:32:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\ATI
[2011/05/21 23:32:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Clearwire
[2011/05/21 23:32:40 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\ApplicationHistory
[2011/05/21 23:32:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Identities
[2011/05/21 23:32:07 | 000,000,000 | R–D | C] – C:\Documents and Settings\Ebony Encounters\My Documents\My Music
[2011/05/21 23:32:06 | 000,000,000 | R–D | C] – C:\Documents and Settings\Ebony Encounters\My Documents\My Pictures
[2011/05/21 23:31:29 | 000,000,000 | –SD | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Microsoft
[2011/05/21 23:31:29 | 000,000,000 | –SD | C] – C:\Documents and Settings\Ebony Encounters\Cookies
[2011/05/21 23:31:29 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Ebony Encounters\SendTo
[2011/05/21 23:31:29 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Ebony Encounters\Recent
[2011/05/21 23:31:29 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Ebony Encounters\Application Data
[2011/05/21 23:31:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Startup
[2011/05/21 23:31:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\Ebony Encounters\Start Menu
[2011/05/21 23:31:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\Ebony Encounters\My Documents
[2011/05/21 23:31:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\Ebony Encounters\Favorites
[2011/05/21 23:31:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Accessories
[2011/05/21 23:31:29 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Ebony Encounters\Templates
[2011/05/21 23:31:29 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Ebony Encounters\PrintHood
[2011/05/21 23:31:29 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Ebony Encounters\NetHood
[2011/05/21 23:31:29 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Ebony Encounters\Local Settings
[2011/05/21 23:31:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\Microsoft Help
[2011/05/21 23:31:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\Microsoft
[2011/05/21 23:31:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Application Data\Intel
[2011/05/21 23:31:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Ebony Encounters\Desktop
[2011/05/20 21:18:27 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\Documents\MCE Logs
[2011/05/20 21:18:12 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2011/05/16 14:02:20 | 000,000,000 | —D | C] – C:\WINDOWS\Sun
[2011/05/16 14:02:15 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2011/05/16 14:02:14 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2011/05/16 14:02:00 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/05/16 14:02:00 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/05/16 14:02:00 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/05/16 14:02:00 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/05/16 14:02:00 | 000,073,728 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/05/16 14:01:42 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/05/15 10:07:07 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Clearwire
[2011/05/15 10:07:06 | 000,000,000 | —D | C] – C:\Program Files\Common Files\PctelEapPeer Authentication
[2011/05/15 10:07:02 | 000,000,000 | —D | C] – C:\Program Files\Clearwire
[2011/05/15 10:06:35 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Clearwire
[2011/05/14 20:56:32 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2011/05/14 20:55:43 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2011/05/14 20:52:32 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2011/05/14 20:49:29 | 000,455,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2011/05/14 20:49:06 | 000,404,640 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/05/14 20:46:41 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/05/14 20:45:01 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2011/05/14 20:42:49 | 002,192,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2011/05/14 20:42:49 | 002,148,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2011/05/14 20:42:48 | 002,069,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2011/05/14 20:42:48 | 002,027,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2011/05/14 20:42:46 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2011/05/14 20:40:41 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2011/05/14 20:29:27 | 000,000,000 | —D | C] – C:\Program Files\Sierra Wireless Inc
[2011/05/14 18:28:06 | 000,045,568 | R— | C] (Broadcom Corporation) – C:\WINDOWS\System32\drivers\bcm4sbxp.sys
[2011/05/14 18:27:58 | 000,000,000 | —D | C] – C:\Program Files\Broadcom
[2011/05/14 18:26:23 | 000,000,000 | —D | C] – C:\Program Files\DIFX
[2011/05/14 18:26:12 | 000,090,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\snymsico.dll
[2011/05/14 18:26:12 | 000,043,520 | —- | C] (REDC) – C:\WINDOWS\System32\drivers\rimsptsk.sys
[2011/05/14 18:26:12 | 000,037,376 | —- | C] (REDC) – C:\WINDOWS\System32\drivers\rixdptsk.sys
[2011/05/14 18:26:12 | 000,032,256 | —- | C] (REDC) – C:\WINDOWS\System32\drivers\rimmptsk.sys
[2011/05/14 18:18:15 | 000,274,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2011/05/14 18:18:15 | 000,016,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2011/05/14 18:13:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office
[2011/05/14 18:13:25 | 000,032,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msonpmon.dll
[2011/05/14 18:10:28 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2011/05/14 18:10:13 | 000,000,000 | —D | C] – C:\Program Files\MSBuild
[2011/05/14 18:09:50 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio
[2011/05/14 18:09:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DESIGNER
[2011/05/14 18:09:04 | 000,000,000 | —D | C] – C:\Program Files\Microsoft.NET
[2011/05/14 18:05:37 | 000,000,000 | —D | C] – C:\WINDOWS\SHELLNEW
[2011/05/14 18:05:11 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2011/05/14 18:05:10 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2011/05/14 18:04:53 | 000,000,000 | RH-D | C] – C:\MSOCache
[2011/05/14 18:01:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\CyberLink PowerDVD
[2011/05/14 18:00:56 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\CyberLink
[2011/05/14 18:00:52 | 000,000,000 | —D | C] – C:\Program Files\CyberLink
[2011/05/14 18:00:21 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Nero
[2011/05/14 18:00:16 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Nero
[2011/05/14 17:59:26 | 000,106,496 | —- | C] (Pegasus Software) – C:\WINDOWS\System32\TwnLib20.dll
[2011/05/14 17:59:25 | 000,471,040 | —- | C] (Pegasus Imaging Corp.) – C:\WINDOWS\System32\ImagXRA7.dll
[2011/05/14 17:59:25 | 000,262,144 | —- | C] (Pegasus Imaging Corp.) – C:\WINDOWS\System32\ImagXR7.dll
[2011/05/14 17:59:24 | 001,568,768 | —- | C] (Pegasus Imaging Corp.) – C:\WINDOWS\System32\ImagX7.dll
[2011/05/14 17:59:24 | 000,476,320 | —- | C] (Pegasus Imaging Corp.) – C:\WINDOWS\System32\ImagXpr7.dll
[2011/05/14 17:59:24 | 000,155,648 | —- | C] (Ahead Software Gmbh) – C:\WINDOWS\System32\NeroCheck.exe
[2011/05/14 17:59:21 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Ahead
[2011/05/14 17:59:21 | 000,000,000 | —D | C] – C:\Program Files\Ahead
[2011/05/14 17:57:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2011/05/14 17:57:34 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2011/05/14 17:57:34 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2011/05/14 15:54:51 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2011/05/14 14:45:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2011/05/14 14:45:12 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2011/05/14 14:45:12 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2011/05/14 14:45:11 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2011/05/14 14:45:11 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2011/05/14 14:43:46 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2011/05/14 14:41:47 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2011/05/14 14:39:36 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2011/05/14 14:36:32 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2011/05/14 14:31:01 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2011/05/14 14:31:01 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2011/05/14 14:31:01 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2011/05/14 14:31:01 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2011/05/14 14:31:01 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2011/05/14 14:31:01 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2011/05/14 14:30:58 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2011/05/14 14:30:58 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2011/05/14 14:30:58 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2011/05/14 14:30:58 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2011/05/14 14:30:58 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2011/05/14 14:30:57 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2011/05/14 14:30:57 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2011/05/14 14:30:56 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2011/05/14 14:30:56 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2011/05/14 14:30:56 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2011/05/14 14:30:13 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2011/05/14 14:30:13 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2011/05/14 14:30:13 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2011/05/14 14:30:13 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2011/05/14 14:30:13 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2011/05/14 14:30:13 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2011/05/14 14:30:13 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2011/05/14 14:30:13 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2011/05/14 14:30:13 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2011/05/14 14:30:13 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2011/05/14 14:30:13 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2011/05/14 14:30:13 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2011/05/14 14:30:13 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2011/05/14 14:30:13 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2011/05/14 14:30:13 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2011/05/14 14:30:13 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2011/05/14 14:30:12 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2011/05/14 14:30:12 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2011/05/14 14:30:12 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2011/05/14 14:30:12 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2011/05/14 14:30:12 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2011/05/14 14:23:47 | 004,952,064 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\stacgui.cpl
[2011/05/14 14:23:47 | 001,601,536 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\stlang.dll
[2011/05/14 14:23:47 | 000,405,504 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\stsystra.exe
[2011/05/14 14:23:45 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2011/05/14 14:23:45 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2011/05/14 14:23:45 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2011/05/14 14:23:18 | 001,222,840 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\drivers\sthda.sys
[2011/05/14 14:23:17 | 000,270,336 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\stacapi.dll
[2011/05/14 14:23:17 | 000,146,944 | —- | C] (IDT, Inc.) – C:\WINDOWS\System32\st325602.dll
[2011/05/14 14:23:16 | 000,000,000 | —D | C] – C:\Program Files\SigmaTel
[2011/05/14 14:22:18 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Intel PROSet Wireless
[2011/05/14 14:22:13 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Intel
[2011/05/14 14:22:13 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Application Data\Intel
[2011/05/14 14:22:07 | 000,021,361 | —- | C] (Cisco Systems, Inc.) – C:\WINDOWS\AegisP.sys
[2011/05/14 14:21:44 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Intel
[2011/05/14 14:21:23 | 002,777,088 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETw4r32.dll
[2011/05/14 14:21:23 | 002,236,032 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\drivers\NETw4x32.sys
[2011/05/14 14:21:23 | 000,745,472 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\NETw4c32.dll
[2011/05/14 14:21:22 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2011/05/14 14:21:19 | 000,000,000 | —D | C] – C:\Program Files\Intel
[2011/05/14 14:21:01 | 000,000,000 | —D | C] – C:\Intel
[2011/05/14 14:20:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Catalyst Control Center
[2011/05/14 14:19:24 | 000,000,000 | —D | C] – C:\Program Files\ATI Technologies
[2011/05/14 14:19:07 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2011/05/14 14:18:45 | 000,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2011/05/14 14:18:00 | 000,026,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbstor.sys
[2011/05/14 14:07:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011/05/14 14:04:28 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2011/05/14 14:03:59 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2011/05/14 14:03:11 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2011/05/14 14:03:11 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2011/05/14 14:03:07 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2011/05/14 14:03:05 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2011/05/14 14:02:25 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2011/05/14 14:00:52 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2011/05/14 13:59:27 | 000,000,000 | —D | C] – C:\WINDOWS\RegisteredPackages
[2011/05/14 13:58:24 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2011/05/14 13:57:55 | 000,000,000 | —D | C] – C:\Program Files\CONEXANT
[2011/05/14 13:57:29 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2011/05/14 13:57:10 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2011/05/14 13:55:41 | 000,026,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2011/05/14 13:53:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\URTTemp
[2011/05/14 13:52:35 | 000,000,000 | —D | C] – C:\Program Files\RGB
[2011/05/14 13:51:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\DIGStream
[2011/05/14 13:51:00 | 000,000,000 | —D | C] – C:\Program Files\DIGStream
[2011/05/14 13:50:58 | 000,000,000 | —D | C] – C:\Program Files\ESPNMotion
[2011/05/14 13:50:55 | 000,000,000 | —D | C] – C:\Program Files\GemMaster
[2011/05/14 13:50:52 | 000,000,000 | —D | C] – C:\Program Files\EnglishOtto
[2011/05/14 13:48:41 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2011/05/14 13:47:52 | 000,017,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2011/05/14 13:47:33 | 000,000,000 | -H-D | C] – C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2011/05/14 13:43:10 | 000,044,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups2.dll
[2011/05/14 13:43:10 | 000,021,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll.mui
[2011/05/14 13:43:08 | 000,015,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll.mui
[2011/05/14 13:43:07 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2011/05/14 13:39:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Recorded TV
[2011/05/14 13:39:39 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2011/05/14 13:39:35 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2011/05/14 13:39:35 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2011/05/14 13:39:34 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2011/05/14 13:39:21 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2011/05/14 13:39:21 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2011/05/14 13:38:05 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresko.dll
[2011/05/14 13:38:04 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresja.dll
[2011/05/14 13:38:03 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresfr.dll
[2011/05/14 13:38:02 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehresde.dll
[2011/05/14 13:37:25 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehreschs.dll
[2011/05/14 13:37:13 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2011/05/14 13:37:09 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2011/05/14 13:37:08 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2011/05/14 13:37:08 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2011/05/14 13:37:07 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2011/05/14 13:37:07 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2011/05/14 13:37:07 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2011/05/14 13:37:06 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2011/05/14 13:37:06 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2011/05/14 13:37:04 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2011/05/14 13:37:03 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2011/05/14 13:37:02 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2011/05/14 13:37:02 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2011/05/14 13:37:02 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2011/05/14 13:37:01 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2011/05/14 13:37:01 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2011/05/14 13:36:58 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2011/05/14 13:36:58 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2011/05/14 13:36:57 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2011/05/14 13:36:55 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2011/05/14 13:36:55 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2011/05/14 13:36:55 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2011/05/14 13:36:54 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2011/05/14 13:36:54 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2011/05/14 13:36:53 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2011/05/14 13:36:53 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2011/05/14 13:36:53 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2011/05/14 13:36:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2011/05/14 13:36:49 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2011/05/14 13:36:46 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2011/05/14 13:36:45 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2011/05/14 13:36:44 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2011/05/14 13:36:41 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2011/05/14 13:36:40 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2011/05/14 13:36:40 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2011/05/14 13:36:40 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2011/05/14 13:36:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2011/05/14 13:36:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2011/05/14 13:36:39 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2011/05/14 13:36:39 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2011/05/14 13:36:39 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2011/05/14 13:36:39 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2011/05/14 13:36:39 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2011/05/14 13:36:38 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2011/05/14 13:36:38 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2011/05/14 13:36:38 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2011/05/14 13:36:38 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2011/05/14 13:36:38 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2011/05/14 13:36:38 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2011/05/14 13:36:37 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2011/05/14 13:36:33 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2011/05/14 13:36:33 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2011/05/14 13:36:31 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2011/05/14 13:36:31 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2011/05/14 13:36:29 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2011/05/14 13:36:28 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2011/05/14 13:36:28 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2011/05/14 13:36:26 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2011/05/14 13:36:25 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2011/05/14 13:36:25 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2011/05/14 13:36:22 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2011/05/14 13:36:22 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2011/05/14 13:36:22 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2011/05/14 13:36:20 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2011/05/14 13:36:19 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2011/05/14 13:36:19 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2011/05/14 13:36:18 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2011/05/14 13:36:18 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2011/05/14 13:36:17 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2011/05/14 13:36:16 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2011/05/14 13:36:16 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2011/05/14 13:36:16 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2011/05/14 13:36:15 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2011/05/14 13:36:15 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2011/05/14 13:36:12 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2011/05/14 13:36:11 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2011/05/14 13:36:10 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2011/05/14 13:36:08 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2011/05/14 13:36:02 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2011/05/14 13:36:01 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2011/05/14 13:35:54 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2011/05/14 13:35:54 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2011/05/14 13:35:53 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2011/05/14 13:35:52 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2011/05/14 13:35:51 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2011/05/14 13:35:48 | 000,024,555 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\drivers\ADM8511.SYS
[2011/05/14 13:35:43 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2011/05/14 13:35:42 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2011/05/14 13:35:42 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2011/05/14 13:35:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2011/05/14 13:35:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2011/05/14 13:35:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2011/05/14 13:35:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2011/05/14 13:35:41 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2011/05/14 13:35:41 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2011/05/14 13:35:41 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2011/05/14 13:35:41 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2011/05/14 13:35:41 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2011/05/14 13:35:41 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2011/05/14 13:35:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2011/05/14 13:35:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2011/05/14 13:35:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2011/05/14 13:35:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2011/05/14 13:35:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2011/05/14 13:35:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2011/05/14 13:35:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2011/05/14 13:35:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2011/05/14 13:35:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2011/05/14 13:35:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2011/05/14 13:35:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2011/05/14 13:35:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2011/05/14 13:35:38 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2011/05/14 13:35:37 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2011/05/14 13:35:37 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2011/05/14 13:35:37 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2011/05/14 13:35:37 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2011/05/14 13:35:37 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2011/05/14 13:35:36 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2011/05/14 13:35:36 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2011/05/14 13:35:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2011/05/14 13:35:35 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2011/05/14 13:35:34 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2011/05/14 13:35:32 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2011/05/14 13:35:32 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2011/05/14 13:35:31 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2011/05/14 13:35:31 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2011/05/14 13:35:30 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2011/05/14 13:35:30 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2011/05/14 13:35:30 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2011/05/14 13:35:30 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2011/05/14 13:35:29 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2011/05/14 13:35:29 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2011/05/14 13:35:29 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2011/05/14 13:35:28 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2011/05/14 13:35:28 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2011/05/14 13:35:28 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2011/05/14 13:35:28 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2011/05/14 13:35:27 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2011/05/14 13:35:26 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2011/05/14 13:35:26 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2011/05/14 13:35:26 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2011/05/14 13:35:26 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2011/05/14 13:35:26 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2011/05/14 13:35:25 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2011/05/14 13:35:25 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2011/05/14 13:35:25 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2011/05/14 13:35:24 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2011/05/14 13:35:24 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2011/05/14 13:35:24 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2011/05/14 13:35:13 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2011/05/14 13:34:50 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2011/05/14 13:34:47 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2011/05/14 13:34:43 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/05/14 13:34:43 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/05/14 13:34:41 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/05/14 13:34:41 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/05/14 13:34:40 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2011/05/14 13:34:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2011/05/14 13:34:38 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2011/05/14 13:34:37 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2011/05/14 13:34:35 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2011/05/14 13:34:35 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2011/05/14 13:34:35 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2011/05/14 13:34:34 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2011/05/14 13:34:33 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2011/05/14 13:34:28 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2011/05/14 13:34:26 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2011/05/14 13:34:26 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2011/05/14 13:34:26 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2011/05/14 13:34:25 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2011/05/14 13:34:25 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2011/05/14 13:34:21 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2011/05/14 13:34:21 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2011/05/14 13:34:21 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2011/05/14 13:34:20 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2011/05/14 13:34:20 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2011/05/14 13:34:19 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2011/05/14 13:34:18 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2011/05/14 13:34:17 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2011/05/14 13:34:17 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2011/05/14 13:34:17 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2011/05/14 13:34:17 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2011/05/14 13:34:16 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2011/05/14 13:34:15 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2011/05/14 13:34:15 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2011/05/14 13:34:14 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2011/05/14 13:34:03 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2011/05/14 13:34:01 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2011/05/14 13:34:00 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2011/05/14 13:34:00 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2011/05/14 13:33:58 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2011/05/14 13:33:55 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2011/05/14 13:33:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2011/05/14 13:33:55 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2011/05/14 13:33:53 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2011/05/14 13:33:53 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2011/05/14 13:33:50 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2011/05/14 13:33:50 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2011/05/14 13:33:40 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2011/05/14 13:33:40 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2011/05/14 13:33:39 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2011/05/14 13:33:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2011/05/14 13:33:38 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2011/05/14 13:33:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2011/05/14 13:33:31 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2011/05/14 13:33:23 | 000,000,000 | —D | C] – C:\backup
[2011/05/14 13:33:11 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2011/05/14 13:33:11 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2011/05/14 13:33:10 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2011/05/14 13:31:33 | 000,000,000 | —D | C] – C:\DELL
[2011/05/14 13:31:19 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2011/05/14 13:31:16 | 000,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2011/05/14 13:30:30 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2011/05/14 13:28:56 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2011/05/14 13:28:40 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2011/05/14 13:28:40 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2011/05/14 13:28:20 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2011/05/14 13:27:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2011/05/14 13:27:07 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2011/05/14 13:27:07 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2011/05/14 13:27:07 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2011/05/14 13:27:06 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2011/05/14 13:27:06 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2011/05/14 13:27:06 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2011/05/14 13:26:53 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2011/05/14 13:26:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2011/05/14 13:26:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2011/05/14 13:26:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2011/05/14 13:26:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2011/05/14 13:26:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2011/05/14 13:26:50 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2011/05/14 13:26:50 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2011/05/14 13:26:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2011/05/14 13:26:45 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2011/05/14 13:26:45 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2011/05/14 13:26:45 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2011/05/14 13:26:45 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2011/05/14 13:26:44 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2011/05/14 13:26:44 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2011/05/14 13:26:44 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2011/05/14 13:26:44 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2011/05/14 13:26:44 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2011/05/14 13:26:44 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2011/05/14 13:26:43 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2011/05/14 13:26:42 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2011/05/14 13:26:36 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2011/05/14 13:26:34 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2011/05/14 13:26:32 | 000,819,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2011/05/14 13:26:31 | 000,991,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2011/05/14 13:26:31 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2011/05/14 13:26:30 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2011/05/14 13:26:30 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2011/05/14 13:26:29 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2011/05/14 13:26:29 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2011/05/14 13:26:29 | 000,209,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2011/05/14 13:26:28 | 001,929,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2011/05/14 13:26:28 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2011/05/14 13:26:27 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2011/05/14 13:26:27 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2011/05/14 13:26:27 | 000,217,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2011/05/14 13:26:27 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2011/05/14 13:26:27 | 000,053,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2011/05/14 13:26:27 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2011/05/14 13:26:27 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2011/05/14 13:26:27 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2011/05/14 13:26:26 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2011/05/14 13:26:26 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2011/05/14 13:26:11 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2011/05/14 13:26:10 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2011/05/14 13:26:10 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2011/05/14 13:26:10 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2011/05/14 13:26:02 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2011/05/14 13:26:01 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2011/05/14 13:26:01 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2011/05/14 13:25:59 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2011/05/14 13:25:59 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2011/05/14 13:25:59 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2011/05/14 13:25:57 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2011/05/14 13:25:57 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2011/05/14 13:25:51 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2011/05/14 13:25:51 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2011/05/14 13:25:51 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2011/05/14 13:25:49 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2011/05/14 13:25:45 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2011/05/14 13:25:44 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2011/05/14 13:25:43 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2011/05/14 13:25:43 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2011/05/14 13:25:43 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2011/05/14 13:25:43 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2011/05/14 13:25:33 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2011/05/14 13:25:26 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2011/05/14 13:25:24 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2011/05/14 13:24:32 | 000,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2011/05/14 13:23:55 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2011/05/14 13:23:40 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2011/05/14 13:23:33 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2011/05/14 13:23:33 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2011/05/14 13:23:25 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2011/05/14 13:23:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Digital Media Enhancements
[2011/05/14 13:22:49 | 000,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2011/05/14 13:22:40 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2011/05/14 13:21:53 | 000,000,000 | —D | C] – C:\Program Files\Windows Plus
[2011/05/14 13:21:52 | 001,742,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mypixdx.scr
[2011/05/14 13:21:48 | 007,093,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\space.scr
[2011/05/14 13:21:45 | 004,396,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wpgldfsh.scr
[2011/05/14 13:21:42 | 003,343,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nature.scr
[2011/05/14 13:21:37 | 005,068,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\davinci.scr
[2011/05/14 13:21:26 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\igdetect.dll
[2011/05/14 13:21:19 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2ext.dll
[2011/05/14 13:21:19 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2eres.dll
[2011/05/14 13:21:19 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2011/05/14 13:19:05 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqse20.dll
[2011/05/14 13:19:04 | 000,462,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqqp20.dll
[2011/05/14 13:19:04 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqdb20.dll
[2011/05/14 13:19:04 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdatunepia.dll
[2011/05/14 13:19:04 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\medctrro.exe
[2011/05/14 13:19:04 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehmsas.exe
[2011/05/14 13:19:01 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2011/05/14 13:18:47 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiuserxp.dll
[2011/05/14 13:18:45 | 001,370,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehchsime.dll
[2011/05/14 13:18:45 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehcommon.dll
[2011/05/14 13:18:45 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehjpnime.dll
[2011/05/14 13:18:45 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehentt.dll
[2011/05/14 13:18:44 | 003,219,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehshell.exe
[2011/05/14 13:18:44 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehSched.exe
[2011/05/14 13:18:44 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRec.exe
[2011/05/14 13:18:43 | 001,863,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EhCM.dll
[2011/05/14 13:18:43 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehtray.exe
[2011/05/14 13:18:43 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdebug.dll
[2011/05/14 13:18:42 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehui.dll
[2011/05/14 13:18:42 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdrop.dll
[2011/05/14 13:18:32 | 008,843,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehres.dll
[2011/05/14 13:18:31 | 001,349,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehuihlp.dll
[2011/05/14 13:18:31 | 000,269,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehglid.dll
[2011/05/14 13:18:31 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\debugsvc.dll
[2011/05/14 13:18:31 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdat.dll
[2011/05/14 13:18:31 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdec.dll
[2011/05/14 13:18:31 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgnet.dll
[2011/05/14 13:18:30 | 000,864,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepg.dll
[2011/05/14 13:18:30 | 000,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiProxy.dll
[2011/05/14 13:18:30 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehPlayer.dll
[2011/05/14 13:18:30 | 000,278,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiVidCtl.dll
[2011/05/14 13:18:30 | 000,204,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiPlay.dll
[2011/05/14 13:18:30 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehCIR.dll
[2011/05/14 13:18:30 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehProxy.dll
[2011/05/14 13:18:29 | 000,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRecObj.dll
[2011/05/14 13:18:29 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiwmp.dll
[2011/05/14 13:18:29 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiExtens.dll
[2011/05/14 13:18:25 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2011/05/14 13:18:24 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2011/05/14 13:18:24 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2011/05/14 13:18:24 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2011/05/14 13:18:23 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2011/05/14 13:18:23 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2011/05/14 13:18:23 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2011/05/14 13:18:23 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2011/05/14 13:18:23 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2011/05/14 13:18:23 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2011/05/14 13:18:22 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2011/05/14 13:18:22 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2011/05/14 13:18:22 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2011/05/14 13:18:22 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2011/05/14 13:18:22 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2011/05/14 13:18:21 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2011/05/14 13:18:21 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2011/05/14 13:18:21 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2011/05/14 13:18:21 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2011/05/14 13:18:21 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2011/05/14 13:18:20 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2011/05/14 13:18:20 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2011/05/14 13:18:20 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2011/05/14 13:18:19 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2011/05/14 13:18:19 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2011/05/14 13:18:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2011/05/14 13:18:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2011/05/14 13:18:19 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2011/05/14 13:18:04 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2011/05/14 13:18:04 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2011/05/14 13:18:04 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2011/05/14 13:18:04 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2011/05/14 13:18:03 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2011/05/14 13:18:03 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2011/05/14 13:18:03 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2011/05/14 13:18:03 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2011/05/14 13:18:03 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2011/05/14 13:18:03 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2011/05/14 13:18:02 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2011/05/14 13:18:02 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2011/05/14 13:17:52 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2011/05/14 13:17:52 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2011/05/14 13:17:51 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2011/05/14 13:17:51 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2011/05/14 13:17:51 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2011/05/14 13:17:51 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2011/05/14 13:17:50 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2011/05/14 13:17:50 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2011/05/14 13:17:50 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2011/05/14 13:17:50 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2011/05/14 13:17:50 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2011/05/14 13:17:50 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2011/05/14 13:17:49 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2011/05/14 13:17:49 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2011/05/14 13:17:48 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2011/05/14 13:17:48 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2011/05/14 13:17:48 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2011/05/14 13:17:48 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2011/05/14 13:17:48 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2011/05/14 13:17:48 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2011/05/14 13:17:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2011/05/14 13:17:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2011/05/14 13:17:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2011/05/14 13:17:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2011/05/14 13:17:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2011/05/14 13:17:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2011/05/14 13:17:48 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2011/05/14 13:17:48 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2011/05/14 13:17:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2011/05/14 13:17:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2011/05/14 13:17:47 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2011/05/14 13:17:47 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2011/05/14 13:17:47 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2011/05/14 13:17:47 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2011/05/14 13:17:47 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2011/05/14 13:17:47 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2011/05/14 13:17:47 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2011/05/14 13:17:47 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2011/05/14 13:17:47 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2011/05/14 13:17:47 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2011/05/14 13:17:47 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2011/05/14 13:17:47 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2011/05/14 13:17:46 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2011/05/14 13:17:45 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2011/05/14 13:17:45 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2011/05/14 13:17:45 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2011/05/14 13:17:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2011/05/14 13:17:45 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2011/05/14 13:17:44 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2011/05/14 13:17:44 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2011/05/14 13:17:44 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2011/05/14 13:17:44 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2011/05/14 13:17:39 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2011/05/14 13:17:39 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2011/05/14 13:17:39 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2011/05/14 13:17:38 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2011/05/14 13:17:38 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2011/05/14 13:17:38 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2011/05/14 13:17:38 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2011/05/14 13:17:38 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2011/05/14 13:17:38 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2011/05/14 13:17:38 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2011/05/14 13:17:37 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2011/05/14 13:17:37 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2011/05/14 13:17:37 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2011/05/14 13:17:37 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2011/05/14 13:17:36 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2011/05/14 13:17:36 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2011/05/14 13:17:04 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2011/05/14 13:17:03 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2011/05/14 13:17:03 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2011/05/14 13:17:02 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2011/05/14 13:17:02 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2011/05/14 13:17:02 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2011/05/14 13:17:02 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2011/05/14 13:17:01 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2011/05/14 13:17:01 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2011/05/14 13:17:01 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2011/05/14 13:17:00 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2011/05/14 13:16:59 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2011/05/14 13:16:58 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2011/05/14 13:16:58 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2011/05/14 13:16:58 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2011/05/14 13:16:58 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2011/05/14 13:16:57 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2011/05/14 13:16:57 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2011/05/14 13:16:57 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2011/05/14 13:16:56 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2011/05/14 13:16:56 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2011/05/14 13:16:56 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2011/05/14 13:16:56 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2011/05/14 13:16:56 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2011/05/14 13:16:56 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2011/05/14 13:16:55 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2011/05/14 13:16:55 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2011/05/14 13:16:55 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2011/05/14 13:16:55 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2011/05/14 13:16:54 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2011/05/14 13:16:53 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2011/05/14 13:16:53 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2011/05/14 13:16:52 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2011/05/14 13:16:52 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2011/05/14 13:16:51 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2011/05/14 13:16:51 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2011/05/14 13:16:51 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2011/05/14 13:16:51 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2011/05/14 13:16:50 | 001,267,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2011/05/14 13:16:49 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2011/05/14 13:16:37 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2011/05/14 13:16:37 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2011/05/14 13:16:36 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2011/05/14 13:16:36 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2011/05/14 13:16:26 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2011/05/14 08:13:29 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irftp.exe
[2011/05/14 08:13:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wshirda.dll
[2011/05/14 08:13:17 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2011/05/14 08:12:25 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2011/05/14 08:11:58 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2011/05/14 08:11:58 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbui.dll
[2011/05/14 08:11:39 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\battc.sys
[2011/05/14 08:10:17 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2011/05/14 08:10:16 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2011/05/14 08:10:14 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2011/05/14 08:10:14 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2011/05/14 08:10:12 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2011/05/14 08:10:10 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2011/05/14 08:10:10 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2011/05/14 08:10:09 | 000,000,000 | R–D | C] – C:\Program Files
[2011/05/14 08:10:09 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2011/05/14 08:10:09 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2011/05/14 08:10:05 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2011/05/14 08:10:05 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2011/05/14 08:10:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2011/05/14 08:10:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2011/05/14 08:10:05 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2011/05/14 08:10:05 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2011/05/14 08:10:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2011/05/14 08:10:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2011/05/14 08:09:59 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2011/05/14 08:09:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2011/05/14 08:09:59 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2011/05/14 08:09:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2011/05/14 08:09:59 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2011/05/14 08:09:59 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2011/05/14 08:09:59 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2011/05/14 08:09:59 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2011/05/14 08:09:59 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2011/05/14 08:09:59 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2011/05/14 08:09:59 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2011/05/14 08:09:59 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2011/05/14 08:09:59 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2011/05/14 08:09:59 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2011/05/14 08:09:57 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2011/05/14 08:09:57 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2011/05/14 08:09:57 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2011/05/14 08:09:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2011/05/14 08:09:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2011/05/14 08:09:57 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2011/05/14 08:09:57 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2011/05/14 08:09:57 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2011/05/14 08:09:57 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2011/05/14 08:09:57 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2011/05/14 08:09:54 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2011/05/14 08:09:54 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2011/05/14 08:09:54 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2011/05/14 08:09:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2011/05/14 08:09:54 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2011/05/14 08:09:54 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2011/05/14 08:09:54 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2011/05/14 08:09:54 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2011/05/14 08:09:54 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2011/05/14 08:09:54 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2011/05/14 08:09:53 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2011/05/14 08:09:53 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2011/05/14 08:09:50 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2011/05/14 08:09:50 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2011/05/14 08:09:50 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2011/05/14 08:09:50 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2011/05/14 08:09:50 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2011/05/14 08:09:50 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2011/05/14 08:09:49 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2011/05/14 08:09:49 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2011/05/14 08:09:49 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2011/05/14 08:09:49 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2011/05/14 08:09:49 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2011/05/14 08:09:49 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2011/05/14 08:09:49 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2011/05/14 08:09:48 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2011/05/14 08:09:48 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2011/05/14 08:09:48 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2011/05/14 08:09:48 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2011/05/14 08:09:48 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2011/05/14 08:09:48 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2011/05/14 08:09:48 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2011/05/14 08:09:48 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2011/05/14 08:09:47 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2011/05/14 08:09:47 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2011/05/14 08:09:47 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2011/05/14 08:09:47 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2011/05/14 08:09:47 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2011/05/14 08:09:47 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2011/05/14 08:09:47 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2011/05/14 08:09:46 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2011/05/14 08:09:46 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2011/05/14 08:09:46 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2011/05/14 08:09:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2011/05/14 08:09:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2011/05/14 08:09:45 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2011/05/14 08:09:45 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2011/05/14 08:09:45 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2011/05/14 08:09:43 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2011/05/14 08:09:33 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2011/05/14 08:09:33 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2011/05/14 08:09:33 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2011/05/14 08:09:33 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2011/05/14 08:09:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2011/05/14 08:09:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2011/05/14 08:09:14 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2011/05/14 08:09:14 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2011/05/14 08:09:08 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2011/05/14 08:09:08 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2011/05/14 08:08:32 | 000,000,000 | —D | C] – C:\Documents and Settings
[2011/05/14 07:56:41 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2011/05/14 07:44:50 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2011/05/14 07:44:50 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2011/05/14 07:44:50 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2011/05/14 07:44:50 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\ehome
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\dell
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2011/05/14 07:44:50 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[2011/05/13 19:16:03 | 000,077,824 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\Oemdspif.dll
[2011/05/13 19:16:02 | 001,751,296 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\dllcache\ativvaxx.dll
[2011/05/13 19:16:02 | 001,751,296 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2011/05/13 19:16:01 | 000,024,064 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\ativcoxx.dll
[2011/05/13 19:15:59 | 000,114,688 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\atipdlxx.dll
[2011/05/13 19:15:59 | 000,017,408 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\atitvo32.dll
[2011/05/13 19:15:57 | 005,050,368 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\atioglxx.dll
[2011/05/13 19:15:55 | 006,684,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\atioglx1.dll
[2011/05/13 19:15:54 | 000,307,200 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\atiiiexx.dll
[2011/05/13 19:15:54 | 000,290,816 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ATIDEMGR.dll
[2011/05/13 19:15:54 | 000,204,800 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\atikvmag.dll
[2011/05/13 19:15:54 | 000,053,248 | —- | C] ( ATI Technologies Inc.) – C:\WINDOWS\System32\ATIDDC.DLL
[2011/05/13 19:15:53 | 002,754,848 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\dllcache\ati3duag.dll
[2011/05/13 19:15:53 | 002,754,848 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2011/05/13 19:15:52 | 001,578,496 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2011/05/13 19:15:52 | 001,578,496 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\ati2mtag.sys
[2011/05/13 19:15:51 | 000,260,096 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\ati2dvag.dll
[2011/05/13 19:15:51 | 000,260,096 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2011/05/13 19:15:51 | 000,061,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2evxx.dll
[2011/05/13 19:15:51 | 000,045,056 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2erec.dll
[2011/05/13 19:15:51 | 000,041,984 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\ati2edxx.dll
[2011/05/13 19:15:51 | 000,026,112 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\Ati2mdxx.exe
[2011/05/13 19:15:50 | 000,282,624 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\ati2cqag.dll
[2011/05/13 19:15:50 | 000,282,624 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/05/28 19:49:47 | 000,380,918 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/05/28 19:49:47 | 000,053,166 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/05/28 19:45:32 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/05/27 20:50:42 | 000,000,614 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Desktop\Shortcut to OTL.lnk
[2011/05/27 20:50:14 | 000,000,655 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Desktop\Shortcut to HiJackThis.lnk
[2011/05/27 14:41:58 | 000,000,889 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Desktop\Recover My Files.lnk
[2011/05/27 09:44:38 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/05/22 08:18:06 | 000,014,650 | -HS- | M] () – C:\Documents and Settings\All Users\Application Data\w70st7567b4372d
[2011/05/22 03:16:36 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/05/22 00:59:42 | 000,572,746 | —- | M] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\Cat.DB
[2011/05/22 00:59:27 | 000,126,584 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2011/05/22 00:59:27 | 000,060,872 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2011/05/22 00:59:27 | 000,007,468 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2011/05/22 00:59:27 | 000,000,806 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2011/05/22 00:59:18 | 000,001,973 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Norton Internet Security.LNK
[2011/05/22 00:26:52 | 000,000,765 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Desktop\Norton Installation Files.lnk
[2011/05/21 23:32:45 | 000,000,139 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\fusioncache.dat
[2011/05/21 23:32:30 | 000,000,779 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/05/21 23:32:28 | 000,000,079 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/05/21 23:32:19 | 000,001,478 | —- | M] () – C:\Documents and Settings\Ebony Encounters\Application Data\Microsoft\Internet Explorer\Quick Launch\Media Center.lnk
[2011/05/21 12:20:28 | 000,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/05/16 14:01:47 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/05/16 14:01:47 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/05/16 14:01:47 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/05/16 14:01:47 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/05/16 14:01:47 | 000,073,728 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/05/16 07:51:29 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/05/15 10:07:07 | 000,001,811 | —- | M] () – C:\Documents and Settings\All Users\Desktop\CLEAR Connection Manager.lnk
[2011/05/15 10:00:56 | 000,267,008 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/05/14 20:49:06 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/05/14 20:45:09 | 000,000,000 | —- | M] () – C:\WINDOWS\nsreg.dat
[2011/05/14 20:45:04 | 000,000,724 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/05/14 18:01:00 | 000,001,684 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PowerDVD.lnk
[2011/05/14 18:00:20 | 000,001,239 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk
[2011/05/14 17:57:56 | 000,001,729 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/05/14 15:56:49 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2011/05/14 14:41:30 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/05/14 14:22:07 | 000,376,832 | —- | M] () – C:\WINDOWS\System32\AegisI5Installer.exe
[2011/05/14 14:22:07 | 000,021,361 | —- | M] (Cisco Systems, Inc.) – C:\WINDOWS\AegisP.sys
[2011/05/14 14:22:07 | 000,013,984 | —- | M] () – C:\WINDOWS\AegisP.inf
[2011/05/14 14:22:07 | 000,010,640 | —- | M] () – C:\WINDOWS\AegisP.cat
[2011/05/14 13:51:02 | 000,001,637 | —- | M] () – C:\Documents and Settings\All Users\Desktop\ESPN Motion.lnk
[2011/05/14 13:39:24 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2011/05/14 13:38:41 | 000,000,237 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2011/05/14 13:30:53 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2011/05/14 13:30:53 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/05/14 13:30:53 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/05/14 13:30:53 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/05/14 13:30:53 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/05/14 13:30:43 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2011/05/14 13:30:43 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2011/05/14 13:30:30 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2011/05/14 13:23:51 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/05/14 13:16:26 | 000,000,209 | -HS- | M] () – C:\boot.ini
[2011/04/28 22:36:57 | 000,000,172 | —- | M] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\isolate.ini
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/05/27 20:50:42 | 000,000,614 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Desktop\Shortcut to OTL.lnk
[2011/05/27 20:50:13 | 000,000,655 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Desktop\Shortcut to HiJackThis.lnk
[2011/05/27 14:41:58 | 000,000,889 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Desktop\Recover My Files.lnk
[2011/05/22 03:16:36 | 000,000,784 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/05/22 00:59:32 | 000,572,746 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\Cat.DB
[2011/05/22 00:59:27 | 000,007,468 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2011/05/22 00:59:27 | 000,000,806 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2011/05/22 00:59:18 | 000,001,973 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Norton Internet Security.LNK
[2011/05/22 00:59:16 | 000,000,000 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymDS.cat
[2011/05/22 00:58:56 | 000,003,373 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymEFA.inf
[2011/05/22 00:58:56 | 000,002,792 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymDS.inf
[2011/05/22 00:58:56 | 000,001,474 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymNetV.inf
[2011/05/22 00:58:56 | 000,001,446 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymNet.inf
[2011/05/22 00:58:56 | 000,001,389 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\srtspx.inf
[2011/05/22 00:58:56 | 000,001,383 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\srtsp.inf
[2011/05/22 00:58:56 | 000,000,742 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\Iron.inf
[2011/05/22 00:58:55 | 000,007,877 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\symnetv.cat
[2011/05/22 00:58:55 | 000,007,528 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\iron.cat
[2011/05/22 00:58:55 | 000,007,458 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymNet.cat
[2011/05/22 00:58:55 | 000,007,456 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\SymEFA.cat
[2011/05/22 00:58:55 | 000,007,454 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\srtspx.cat
[2011/05/22 00:58:55 | 000,007,450 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\srtsp.cat
[2011/05/22 00:58:55 | 000,000,172 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1206000.01D\isolate.ini
[2011/05/22 00:26:52 | 000,000,765 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Desktop\Norton Installation Files.lnk
[2011/05/21 23:32:45 | 000,000,139 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Local Settings\Application Data\fusioncache.dat
[2011/05/21 23:32:28 | 000,000,079 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/05/21 23:32:20 | 000,000,738 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Outlook Express.lnk
[2011/05/21 23:32:19 | 000,001,478 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Application Data\Microsoft\Internet Explorer\Quick Launch\Media Center.lnk
[2011/05/21 23:32:10 | 000,000,779 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/05/21 23:32:10 | 000,000,767 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Internet Explorer.lnk
[2011/05/21 23:31:30 | 000,001,599 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Remote Assistance.lnk
[2011/05/21 23:31:29 | 000,000,792 | —- | C] () – C:\Documents and Settings\Ebony Encounters\Start Menu\Programs\Windows Media Player.lnk
[2011/05/21 23:19:11 | 000,014,650 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\w70st7567b4372d
[2011/05/21 12:20:28 | 000,000,069 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2011/05/15 10:07:07 | 000,001,811 | —- | C] () – C:\Documents and Settings\All Users\Desktop\CLEAR Connection Manager.lnk
[2011/05/14 20:45:09 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2011/05/14 20:45:04 | 000,000,730 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/05/14 20:45:04 | 000,000,724 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/05/14 20:34:09 | 000,000,144 | —- | C] () – C:\WINDOWS\System32\drivers\macxvi.cfg
[2011/05/14 18:26:12 | 000,016,480 | —- | C] () – C:\WINDOWS\System32\rixdicon.dll
[2011/05/14 18:01:00 | 000,001,684 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PowerDVD.lnk
[2011/05/14 18:00:20 | 000,001,239 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk
[2011/05/14 17:57:56 | 000,001,804 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader 9.lnk
[2011/05/14 17:57:56 | 000,001,729 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/05/14 14:30:56 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2011/05/14 14:30:48 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2011/05/14 14:30:13 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2011/05/14 14:22:07 | 000,376,832 | —- | C] () – C:\WINDOWS\System32\AegisI5Installer.exe
[2011/05/14 14:22:07 | 000,013,984 | —- | C] () – C:\WINDOWS\AegisP.inf
[2011/05/14 14:22:07 | 000,010,640 | —- | C] () – C:\WINDOWS\AegisP.cat
[2011/05/14 13:59:16 | 000,001,466 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Media Center.lnk
[2011/05/14 13:51:02 | 000,001,637 | —- | C] () – C:\Documents and Settings\All Users\Desktop\ESPN Motion.lnk
[2011/05/14 13:39:24 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2011/05/14 13:38:24 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/05/14 13:36:18 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2011/05/14 13:35:43 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2011/05/14 13:35:31 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2011/05/14 13:35:29 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2011/05/14 13:35:25 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2011/05/14 13:35:00 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2011/05/14 13:34:47 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2011/05/14 13:34:20 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2011/05/14 13:30:53 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2011/05/14 13:30:53 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2011/05/14 13:30:53 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2011/05/14 13:30:53 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2011/05/14 13:30:53 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2011/05/14 13:30:43 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2011/05/14 13:30:43 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2011/05/14 13:30:41 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2011/05/14 13:28:19 | 000,000,786 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
[2011/05/14 13:28:00 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2011/05/14 13:27:03 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2011/05/14 13:27:02 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2011/05/14 13:26:53 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2011/05/14 13:23:55 | 000,000,609 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
[2011/05/14 13:23:51 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/05/14 13:23:25 | 000,001,986 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk
[2011/05/14 13:21:53 | 000,011,452 | —- | C] () – C:\WINDOWS\System32\mypixdx.chm
[2011/05/14 13:18:47 | 010,604,352 | —- | C] () – C:\WINDOWS\System32\dllcache\ehcir.ird
[2011/05/14 13:17:55 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2011/05/14 13:17:55 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2011/05/14 13:17:55 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2011/05/14 13:17:55 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2011/05/14 13:17:54 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2011/05/14 13:17:54 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2011/05/14 13:17:54 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2011/05/14 13:17:54 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2011/05/14 13:17:53 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2011/05/14 13:17:53 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2011/05/14 13:17:53 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2011/05/14 13:17:48 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2011/05/14 13:17:48 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2011/05/14 13:17:46 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2011/05/14 13:17:36 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2011/05/14 08:10:20 | 000,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2011/05/14 08:10:16 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/05/14 08:10:12 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2011/05/14 08:10:12 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2011/05/14 08:10:11 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2011/05/14 08:10:10 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2011/05/14 08:09:45 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2011/05/14 08:09:32 | 000,077,881 | —- | C] () – C:\WINDOWS\System32\dllcache\plus.cat
[2011/05/14 08:09:32 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2011/05/14 08:09:32 | 000,017,916 | —- | C] () – C:\WINDOWS\System32\dllcache\sonic.cat
[2011/05/14 08:09:32 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2011/05/14 08:09:32 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2011/05/14 08:09:32 | 000,007,710 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2011/05/14 08:09:32 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2011/05/14 08:09:31 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2011/05/14 08:09:31 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2011/05/14 08:09:31 | 000,106,147 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2011/05/14 08:08:31 | 000,267,008 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/05/14 07:59:31 | 000,000,209 | -HS- | C] () – C:\boot.ini
[2011/05/14 07:59:27 | 000,000,237 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2011/05/13 19:16:02 | 000,028,976 | —- | C] () – C:\WINDOWS\System32\drivers\ativvpxx.vp
[2011/05/13 19:16:01 | 000,058,560 | —- | C] () – C:\WINDOWS\System32\drivers\ativckxx.vp
[2011/05/13 19:16:01 | 000,000,929 | —- | C] () – C:\WINDOWS\System32\drivers\ativcaxx.vp
[2011/05/13 19:16:00 | 001,114,674 | —- | C] () – C:\WINDOWS\System32\drivers\ativcaxx.cpa
[2011/05/13 19:15:54 | 000,127,614 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2011/05/13 19:15:54 | 000,006,005 | —- | C] () – C:\WINDOWS\System32\atifglpf.xml
[2010/05/25 21:48:08 | 000,039,632 | —- | C] () – C:\WINDOWS\System32\drivers\swmsflt.sys
[2010/03/26 21:00:56 | 002,033,744 | —- | C] () – C:\WINDOWS\System32\drivers\macxvi200.bin
[2005/08/05 14:01:54 | 000,239,104 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2005/03/22 17:38:24 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2005/03/22 17:38:24 | 000,004,627 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004/08/10 06:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/10 06:00:00 | 000,380,918 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004/08/10 06:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/10 06:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/10 06:00:00 | 000,053,166 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004/08/10 06:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/10 06:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/10 06:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/10 06:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2004/08/10 06:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat

========== LOP Check ==========

[2011/05/15 10:06:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Clearwire
[2011/05/14 13:51:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DIGStream
[2011/05/27 20:23:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2011/05/21 23:32:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Ebony Encounters\Application Data\Clearwire
[2011/05/22 00:22:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Ebony Encounters\Application Data\Sierra Wireless

========== Purity Check ==========



< End of report >




EXTRAS.txt

OTL Extras logfile created on: 5/28/2011 9:45:56 PM - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Documents and Settings\Ebony Encounters\My Documents\Downloads
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1022.37 Mb Total Physical Memory | 454.73 Mb Available Physical Memory | 44.48% Memory free
2.40 Gb Paging File | 1.93 Gb Available in Paging File | 80.45% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 117.95 Gb Free Space | 50.65% Space Free | Partition Type: NTFS

Computer Name: OWNER-5309936EE | User Name: Ebony Encounters | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
InternetShortcut [open] – rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Clearwire\Connection Manager\SwiApiMux.exe" = C:\Program Files\Clearwire\Connection Manager\SwiApiMux.exe:*:Enabled:SwiApiMux


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}" = mSSO
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java™ 6 Update 25
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}" = mHlpDell
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{612B9183-67A9-4B44-9877-2F059E35B86A}" = Broadcom 440x 10/100 Integrated Controller
"{63DB9CCD-2B56-4217-9A3D-507AC78320CA}" = mWMI
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{829CD169-E692-48E8-9BDE-A3E8D8B65538}" = mSCfg
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{926CC8AE-8414-43DF-8EB4-CF26D9C3C663}" =
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{9941F0AA-B903-4AF4-A055-83A9815CC011}" = Sonic Encoders
"{A02ED372-22FA-448B-AB6A-1B0FC23B7D08}" = ATI Catalyst Control Center
"{A0F1CE9B-1908-4BDA-8298-2DAB5F2040F6}" = CLEAR Connection Manager
"{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{AC76BA86-7AD7-1033-7B44-A92000000001}" = Adobe Reader 9.2
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"12133444-BF36-4d4e-B7FB-A3424C645DE4" = GemMaster Mystic
"4569969E1360D2854474C661EF9B4D54F143EB16" = Windows Driver Package - Ricoh Company (rimsptsk) hdc (11/14/2006 6.00.01.04)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"B3EE3001-DC24-4cd1-8743-5692C716659F" = Otto
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3" = Conexant HDA D110 MDC V.92 Modem
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ESPNMotion" = ESPNMotion
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Mozilla Firefox 4.0.1 (x86 en-US)" = Mozilla Firefox 4.0.1 (x86 en-US)
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NIS" = Norton Internet Security
"ProInst" = Intel® PROSet/Wireless Software
"Recover My Files_is1" = Recover My Files
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 3

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5/14/2011 9:38:43 PM | Computer Name = OWNER-5309936EE | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting
module mshtml.dll, version 6.0.2900.5512, fault address 0x001daa55.

Error - 5/14/2011 9:39:45 PM | Computer Name = OWNER-5309936EE | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting
module mshtml.dll, version 6.0.2900.5512, fault address 0x001daa55.

Error - 5/14/2011 9:39:50 PM | Computer Name = OWNER-5309936EE | Source = Application Error | ID = 1001
Description = Fault bucket 770142957.

Error - 5/14/2011 9:48:22 PM | Computer Name = OWNER-5309936EE | Source = crypt32 | ID = 131077
Description = Failed auto update retrieval of third-party root certificate from:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5.crt>
with error: This operation returned because the timeout period expired.

Error - 5/14/2011 9:48:22 PM | Computer Name = OWNER-5309936EE | Source = crypt32 | ID = 131077
Description = Failed auto update retrieval of third-party root certificate from:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5.crt>
with error: The specified server cannot perform the requested operation.

Error - 5/22/2011 12:21:44 AM | Computer Name = OWNER-5309936EE | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 2.0.1.4120, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 5/22/2011 12:26:41 AM | Computer Name = OWNER-5309936EE | Source = Application Hang | ID = 1002
Description = Hanging application url.exe, version 0.0.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 5/22/2011 12:27:39 AM | Computer Name = OWNER-5309936EE | Source = Application Hang | ID = 1002
Description = Hanging application url.exe, version 0.0.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 5/23/2011 1:16:00 PM | Computer Name = OWNER-5309936EE | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.

Error - 5/23/2011 1:17:32 PM | Computer Name = OWNER-5309936EE | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 001302A8AFED. The following
error occurred: %%121. Your computer will continue to try and obtain an address on
its own from the network address (DHCP) server.

Error - 5/23/2011 1:18:28 PM | Computer Name = OWNER-5309936EE | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)

Error - 5/23/2011 1:18:28 PM | Computer Name = OWNER-5309936EE | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.

Error - 5/23/2011 1:40:14 PM | Computer Name = OWNER-5309936EE | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 001302A8AFED. The following
error occurred: %%121. Your computer will continue to try and obtain an address on
its own from the network address (DHCP) server.

Error - 5/23/2011 2:16:32 PM | Computer Name = OWNER-5309936EE | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 001302A8AFED. The following
error occurred: %%121. Your computer will continue to try and obtain an address on
its own from the network address (DHCP) server.

Error - 5/23/2011 2:34:50 PM | Computer Name = OWNER-5309936EE | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 001302A8AFED. The following
error occurred: %%121. Your computer will continue to try and obtain an address on
its own from the network address (DHCP) server.

Error - 5/23/2011 2:49:39 PM | Computer Name = OWNER-5309936EE | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 001302A8AFED. The following
error occurred: %%1223. Your computer will continue to try and obtain an address
on its own from the network address (DHCP) server.

Error - 5/23/2011 3:14:23 PM | Computer Name = OWNER-5309936EE | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 001302A8AFED. The following
error occurred: %%1223. Your computer will continue to try and obtain an address
on its own from the network address (DHCP) server.

Error - 5/23/2011 3:35:50 PM | Computer Name = OWNER-5309936EE | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 001302A8AFED. The following
error occurred: %%121. Your computer will continue to try and obtain an address on
its own from the network address (DHCP) server.


< End of report >



I will run GMER Rootkit Scanner now…..
Post #5
I also want to add that I have to log on to a different administrator account for my business (ebony encounters) but I am having issues with my regular administrator's account (owner). Under the (owner) administrator account, I can not open my programs and executable files and I can't use my clear wire service to log on to the internet But, Under my (ebony encounters) administrator's account I can log on to the internet. This is also the account in which I ran FixNCR.reg and OTL. Please advise. Thanks BKeeper
Post #6
I don't think that what I said above is clear – The virus attacked my owner administration user account – I have to use my business administrator account to open the internet – I can not open any programs or executable files on my owner administration user account – So I am downloading and running the suggested programs (FixNCR.reg and OTL) from my business administrator account Sorry, hope that's more clear.
Post #8
Hello,

Is this computer part of a home network using custom name servers?
Also, are you still having trouble running executable files from any of your profiles?

Download ComboFix from one of these locations:


Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
[external image: Posted Image]




Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
[external image: Posted Image]



Click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Thanks,
Astabi

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI