billoak
Topic Starter
Computer has had a series of infections
I have run Nod 32 (no findings) malware bytes updated (no findings) antispyware blaster (no findings) Stopzilla Google redirector cognac and more findings including vundo 7, vundo fix no findings I then ran the self help for google redirector as instructed. It all worked except I have a suspicious file in tsskiller that I don't know how to treat.
Stopzilla keeps finding stuff on reboot. Only direct symptom is periodic sluggishness.
Here is Hijack this log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:03:56 PM, on 6/15/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17098)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\N-able Technologies\NRM\RSMWinService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe
C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Adobe Media Player\Adobe Media Player.exe
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1054\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1054\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1054\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1106\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1906\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1963\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2069\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2114\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2118\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2246\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O17 - HKLM\Software\..\Telephony: DomainName = goodwillcfl.org
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O20 - AppInit_DLLs: C:\WINDOWS\system32\
O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: RSMWebServer - Unknown owner - C:\Program Files\N-able Technologies\NRM\RSMWinService.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: Windows Agent Maintenance Service - N-able Technologies - C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe
O23 - Service: Windows Agent Service - N-able Technologies - C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe
O23 - Service: winrdp_service - WCCS - C:\Program Files\N-able Technologies\NRM\UltraVNCServer\winrdp.exe
–
End of file - 8405 bytes
Otl log:
OTL logfile created on: 6/15/2011 8:17:58 PM - Run 1
OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\ldegroff\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 0.72 Gb Available Physical Memory | 36.03% Memory free
3.84 Gb Paging File | 3.12 Gb Available in Paging File | 81.30% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149.05 Gb Total Space | 126.73 Gb Free Space | 85.02% Space Free | Partition Type: NTFS
Computer Name: GOODWILL058 | User Name: ldegroff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\ldegroff\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\STOPzilla!\STOPzilla.exe (iS3, Inc.)
PRC - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)
PRC - C:\Program Files\N-able Technologies\NRM\RSMWinService.exe ()
PRC - C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe (N-able Technologies)
PRC - C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe (N-able Technologies)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\UltraVNC\winvnc.exe (UltraVNC)
PRC - C:\Program Files\Adobe Media Player\Adobe Media Player.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\ldegroff\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (NMIndexingService) – File not found
SRV - (HidServ) – File not found
SRV - (szserver) – C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)
SRV - (RSMWebServer) – C:\Program Files\N-able Technologies\NRM\RSMWinService.exe ()
SRV - (Windows Agent Service) – C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe (N-able Technologies)
SRV - (Windows Agent Maintenance Service) – C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe (N-able Technologies)
SRV - (winrdp_service) – C:\Program Files\N-able Technologies\NRM\UltraVNCServer\winrdp.exe (WCCS)
SRV - (EhttpSrv) – C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn) – C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (uvnc_service) – C:\Program Files\UltraVNC\WinVNC.exe (UltraVNC)
========== Driver Services (SafeList) ==========
DRV - (xpsec) – File not found
DRV - (xcpip) – File not found
DRV - (eamon) – C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (ehdrv) – C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (epfwtdir) – C:\WINDOWS\system32\drivers\epfwtdir.sys (ESET)
DRV - (szkgfs) – C:\WINDOWS\system32\drivers\szkgfs.sys (iS3, Inc.)
DRV - (szkg5) – C:\WINDOWS\system32\DRIVERS\szkg.sys (iS3 Inc.)
DRV - (is3srv) – C:\WINDOWS\system32\drivers\is3srv.sys (iS3 Inc.)
DRV - (RTLE8023xp) – C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (DAmirr) – C:\WINDOWS\system32\drivers\DAmirr.sys (ScriptLogic Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/06/07 14:53:52 | 000,000,000 | —D | M]
O1 HOSTS File: ([2011/01/06 14:27:30 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (STOPzilla Browser Helper Object) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll (iS3, Inc.)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] File not found
O4 - Startup: C:\Documents and Settings\ldegroff\Start Menu\Programs\Startup\Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Java Plug-in 1.4.2_04)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O20 - AppInit_DLLs: (C:\WINDOWS\system32\) - C:\WINDOWS\System32\ [2011/06/15 18:21:54 | 000,000,000 | —D | M]
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\TPSvc: DllName - TPSvc.dll - File not found
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/01/13 14:44:34 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – Reg Error: Key error. File not found
NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)
========== Files/Folders - Created Within 30 Days ==========
[2011/06/15 20:15:19 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Documents and Settings\ldegroff\Desktop\OTL.exe
[2011/06/15 18:20:36 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Application Data\Ahead
[2011/06/15 17:56:51 | 000,000,000 | —D | C] – C:\TDSSKiller_Quarantine
[2011/06/15 17:54:32 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Desktop\tdsskiller
[2011/06/15 17:51:35 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Desktop\GooredFix Backups
[2011/06/15 17:50:48 | 000,071,398 | —- | C] (jpshortstuff) – C:\Documents and Settings\ldegroff\Desktop\GooredFix.exe
[2011/06/15 17:39:39 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
[2011/06/14 19:30:08 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2011/06/14 18:23:09 | 000,000,000 | —D | C] – C:\VundoFix Backups
[2011/06/14 18:22:53 | 000,119,808 | —- | C] (Atribune.org) – C:\Documents and Settings\ldegroff\Desktop\VundoFix.exe
[2011/06/13 21:04:29 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET
[2011/06/13 20:32:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\STOPzilla
[2011/06/13 20:32:47 | 000,000,000 | —D | C] – C:\Program Files\STOPzilla!
[2011/06/13 20:32:46 | 000,000,000 | —D | C] – C:\Program Files\Common Files\iS3
[2011/06/13 20:32:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2011/06/13 20:31:39 | 000,509,440 | —- | C] (iS3, Inc.) – C:\Documents and Settings\ldegroff\Desktop\STOPzilla_Setup.exe
[2011/06/13 19:36:08 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Application Data\SUPERAntiSpyware.com
[2011/06/12 15:58:38 | 000,132,560 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3HTUI5.dll
[2011/06/12 15:58:38 | 000,022,992 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\SZIO5.dll
[2011/06/12 15:58:36 | 000,546,256 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\SZComp5.dll
[2011/06/12 15:58:36 | 000,456,144 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\SZBase5.dll
[2011/06/12 15:58:36 | 000,398,800 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3DBA5.dll
[2011/06/12 15:58:36 | 000,067,024 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Hks5.dll
[2011/06/12 15:58:36 | 000,028,624 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3XDat5.dll
[2011/06/12 15:58:34 | 000,390,608 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3UI5.dll
[2011/06/12 15:58:34 | 000,230,864 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Win325.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Svc5.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Inet5.dll
[2011/06/12 15:58:32 | 000,738,768 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Base5.dll
[2011/06/10 08:34:50 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2011/06/10 08:34:47 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2011/06/10 08:34:40 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2011/06/10 08:34:28 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2011/06/10 08:34:25 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2011/06/10 08:34:24 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2011/06/10 08:34:21 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2011/06/10 08:34:20 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2011/06/10 08:34:19 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2011/06/10 08:34:10 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2011/06/10 08:34:08 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2011/06/10 08:34:05 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2011/06/10 08:33:58 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2011/06/10 08:33:54 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2011/06/10 08:33:51 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2011/06/10 08:33:46 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2011/06/10 08:33:45 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2011/06/10 08:33:45 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2011/06/10 08:33:42 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2011/06/10 08:33:40 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2011/06/10 08:33:39 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2011/06/10 08:33:38 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2011/06/10 08:33:37 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2011/06/10 08:33:36 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2011/06/10 08:33:35 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2011/06/10 08:33:32 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2011/06/10 08:33:29 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2011/06/10 08:33:26 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2011/06/10 08:33:21 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2011/06/10 08:33:18 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2011/06/10 08:33:15 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2011/06/10 08:33:12 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2011/06/10 08:33:09 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2011/06/10 08:33:08 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2011/06/10 08:33:06 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2011/06/10 08:33:03 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2011/06/10 08:33:00 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2011/06/10 08:32:57 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2011/06/10 08:32:54 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2011/06/10 08:32:51 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2011/06/10 08:32:48 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2011/06/10 08:32:45 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2011/06/10 08:32:42 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2011/06/10 08:32:40 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2011/06/10 08:32:39 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbprint.sys
[2011/06/10 08:32:39 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbohci.sys
[2011/06/10 08:32:38 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2011/06/10 08:32:37 | 000,060,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbaudio.sys
[2011/06/10 08:32:36 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2011/06/10 08:32:32 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2011/06/10 08:32:29 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2011/06/10 08:32:26 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2011/06/10 08:32:23 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2011/06/10 08:32:20 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2011/06/10 08:32:17 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2011/06/10 08:32:15 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2011/06/10 08:32:12 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2011/06/10 08:32:09 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2011/06/10 08:32:06 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2011/06/10 08:32:03 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2011/06/10 08:32:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2011/06/10 08:31:55 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2011/06/10 08:31:52 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2011/06/10 08:31:49 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2011/06/10 08:31:47 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2011/06/10 08:31:44 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2011/06/10 08:31:41 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2011/06/10 08:31:38 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2011/06/10 08:31:35 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2011/06/10 08:31:34 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2011/06/10 08:31:31 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2011/06/10 08:31:28 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2011/06/10 08:31:25 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2011/06/10 08:31:22 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2011/06/10 08:31:19 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2011/06/10 08:31:16 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2011/06/10 08:31:12 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2011/06/10 08:31:09 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2011/06/10 08:31:08 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2011/06/10 08:31:05 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2011/06/10 08:31:02 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2011/06/10 08:30:58 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2011/06/10 08:30:55 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2011/06/10 08:30:52 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2011/06/10 08:30:50 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2011/06/10 08:30:46 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2011/06/10 08:30:43 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2011/06/10 08:30:40 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2011/06/10 08:30:38 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2011/06/10 08:30:35 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2011/06/10 08:30:32 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2011/06/10 08:30:30 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2011/06/10 08:30:27 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2011/06/10 08:30:25 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2011/06/10 08:30:22 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2011/06/10 08:30:19 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2011/06/10 08:30:18 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2011/06/10 08:30:15 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2011/06/10 08:30:13 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2011/06/10 08:30:10 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2011/06/10 08:30:07 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2011/06/10 08:30:03 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2011/06/10 08:30:00 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2011/06/10 08:29:56 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2011/06/10 08:29:53 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2011/06/10 08:29:50 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2011/06/10 08:29:47 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2011/06/10 08:29:45 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2011/06/10 08:29:42 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2011/06/10 08:29:39 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2011/06/10 08:29:37 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2011/06/10 08:29:34 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2011/06/10 08:29:33 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2011/06/10 08:29:30 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2011/06/10 08:29:23 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2011/06/10 08:29:20 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2011/06/10 08:29:18 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2011/06/10 08:29:15 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2011/06/10 08:29:12 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2011/06/10 08:29:10 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2011/06/10 08:29:09 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2011/06/10 08:29:08 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2011/06/10 08:29:05 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2011/06/10 08:29:03 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2011/06/10 08:29:00 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2011/06/10 08:28:57 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2011/06/10 08:28:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2011/06/10 08:28:53 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2011/06/10 08:28:50 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2011/06/10 08:28:47 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2011/06/10 08:28:45 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2011/06/10 08:28:42 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2011/06/10 08:28:41 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2011/06/10 08:28:39 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2011/06/10 08:28:36 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2011/06/10 08:28:34 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2011/06/10 08:28:31 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2011/06/10 08:28:29 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2011/06/10 08:28:26 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2011/06/10 08:28:19 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2011/06/10 08:28:17 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2011/06/10 08:28:14 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2011/06/10 08:28:12 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2011/06/10 08:28:09 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2011/06/10 08:28:06 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2011/06/10 08:28:03 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2011/06/10 08:27:59 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2011/06/10 08:27:59 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2011/06/10 08:27:56 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2011/06/10 08:27:53 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2011/06/10 08:27:50 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2011/06/10 08:27:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2011/06/10 08:27:45 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2011/06/10 08:27:44 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2011/06/10 08:27:41 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2011/06/10 08:27:38 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2011/06/10 08:27:35 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2011/06/10 08:27:33 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2011/06/10 08:27:30 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2011/06/10 08:27:28 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2011/06/10 08:27:25 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2011/06/10 08:27:23 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2011/06/10 08:27:20 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2011/06/10 08:27:18 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2011/06/10 08:27:16 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2011/06/10 08:27:13 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2011/06/10 08:27:11 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2011/06/10 08:27:08 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2011/06/10 08:27:05 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2011/06/10 08:27:04 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2011/06/10 08:27:03 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2011/06/10 08:27:02 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8139.sys
[2011/06/10 08:26:59 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2011/06/10 08:26:57 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2011/06/10 08:26:54 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2011/06/10 08:26:51 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2011/06/10 08:26:49 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2011/06/10 08:26:46 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2011/06/10 08:26:44 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2011/06/10 08:26:37 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2011/06/10 08:26:34 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2011/06/10 08:26:31 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2011/06/10 08:26:29 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2011/06/10 08:26:26 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2011/06/10 08:26:22 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2011/06/10 08:26:19 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2011/06/10 08:26:17 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2011/06/10 08:26:15 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2011/06/10 08:26:12 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2011/06/10 08:26:11 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2011/06/10 08:26:08 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2011/06/10 08:26:06 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2011/06/10 08:26:03 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2011/06/10 08:26:03 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2011/06/10 08:26:00 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2011/06/10 08:25:57 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2011/06/10 08:25:54 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2011/06/10 08:25:51 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2011/06/10 08:25:49 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2011/06/10 08:25:48 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2011/06/10 08:25:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2011/06/10 08:25:41 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2011/06/10 08:25:38 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2011/06/10 08:25:36 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2011/06/10 08:25:33 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2011/06/10 08:25:31 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2011/06/10 08:25:28 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2011/06/10 08:25:26 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2011/06/10 08:25:25 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2011/06/10 08:25:24 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2011/06/10 08:25:24 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2011/06/10 08:25:23 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2011/06/10 08:25:20 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2011/06/10 08:25:18 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2011/06/10 08:25:17 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2011/06/10 08:25:15 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2011/06/10 08:25:12 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2011/06/10 08:25:10 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2011/06/10 08:25:07 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2011/06/10 08:25:05 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2011/06/10 08:25:04 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2011/06/10 08:25:02 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2011/06/10 08:24:57 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2011/06/10 08:24:54 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2011/06/10 08:24:52 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2011/06/10 08:24:50 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2011/06/10 08:24:47 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2011/06/10 08:24:45 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2011/06/10 08:24:42 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2011/06/10 08:24:40 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2011/06/10 08:24:38 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2011/06/10 08:24:35 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2011/06/10 08:24:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2011/06/10 08:24:30 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2011/06/10 08:24:28 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2011/06/10 08:24:26 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2011/06/10 08:24:23 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2011/06/10 08:24:21 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2011/06/10 08:24:17 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2011/06/10 08:24:15 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2011/06/10 08:24:10 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2011/06/10 08:24:07 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2011/06/10 08:24:05 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2011/06/10 08:24:04 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2011/06/10 08:24:01 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2011/06/10 08:23:59 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2011/06/10 08:23:56 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2011/06/10 08:23:55 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2011/06/10 08:23:51 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2011/06/10 08:23:48 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2011/06/10 08:23:46 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2011/06/10 08:23:44 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2011/06/10 08:23:43 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2011/06/10 08:23:42 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2011/06/10 08:23:40 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2011/06/10 08:23:37 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2011/06/10 08:23:35 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2011/06/10 08:23:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2011/06/10 08:23:30 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2011/06/10 08:23:28 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2011/06/10 08:23:26 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2011/06/10 08:23:24 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2011/06/10 08:23:21 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2011/06/10 08:23:19 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2011/06/10 08:23:17 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2011/06/10 08:23:14 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2011/06/10 08:23:12 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2011/06/10 08:23:08 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2011/06/10 08:23:03 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2011/06/10 08:23:03 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2011/06/10 08:22:59 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2011/06/10 08:22:54 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2011/06/10 08:22:53 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2011/06/10 08:22:47 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2011/06/10 08:22:45 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2011/06/10 08:22:44 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2011/06/10 08:22:39 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2011/06/10 08:22:36 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2011/06/10 08:22:32 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2011/06/10 08:22:28 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2011/06/10 08:22:24 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2011/06/10 08:22:22 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2011/06/10 08:22:20 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2011/06/10 08:22:18 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2011/06/10 08:22:16 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2011/06/10 08:22:13 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2011/06/10 08:22:10 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2011/06/10 08:22:07 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2011/06/10 08:22:05 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2011/06/10 08:22:03 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2011/06/10 08:22:00 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2011/06/10 08:22:00 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2011/06/10 08:21:58 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2011/06/10 08:21:55 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2011/06/10 08:21:55 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2011/06/10 08:21:55 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2011/06/10 08:21:53 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2011/06/10 08:21:52 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2011/06/10 08:21:50 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2011/06/10 08:21:47 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2011/06/10 08:21:44 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2011/06/10 08:21:42 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2011/06/10 08:21:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2011/06/10 08:21:38 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2011/06/10 08:21:37 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2011/06/10 08:21:35 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2011/06/10 08:21:33 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2011/06/10 08:21:32 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2011/06/10 08:21:32 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2011/06/10 08:21:32 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2011/06/10 08:21:29 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2011/06/10 08:21:26 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2011/06/10 08:21:26 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2011/06/10 08:21:19 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2011/06/10 08:21:17 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2011/06/10 08:21:14 | 000,014,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhid.sys
[2011/06/10 08:21:09 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2011/06/10 08:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2011/06/10 08:21:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2011/06/10 08:21:03 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2011/06/10 08:20:59 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2011/06/10 08:20:57 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2011/06/10 08:20:57 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2011/06/10 08:20:55 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2011/06/10 08:20:54 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2011/06/10 08:20:54 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2011/06/10 08:20:53 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2011/06/10 08:20:50 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2011/06/10 08:20:48 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2011/06/10 08:20:46 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2011/06/10 08:20:45 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2011/06/10 08:20:43 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2011/06/10 08:20:41 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2011/06/10 08:20:25 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2011/06/10 08:20:23 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2011/06/10 08:20:21 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2011/06/10 08:20:19 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2011/06/10 08:20:17 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2011/06/10 08:20:15 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2011/06/10 08:20:13 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2011/06/10 08:20:11 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2011/06/10 08:20:09 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2011/06/10 08:20:07 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2011/06/10 08:20:05 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2011/06/10 08:20:03 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2011/06/10 08:20:01 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2011/06/10 08:19:59 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2011/06/10 08:19:58 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2011/06/10 08:19:58 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2011/06/10 08:19:56 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2011/06/10 08:19:54 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2011/06/10 08:19:53 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2011/06/10 08:19:53 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2011/06/10 08:19:33 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2011/06/10 08:19:31 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2011/06/10 08:19:29 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2011/06/10 08:19:27 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2011/06/10 08:19:25 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2011/06/10 08:19:23 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2011/06/10 08:19:21 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2011/06/10 08:19:19 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2011/06/10 08:19:17 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2011/06/10 08:19:16 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2011/06/10 08:19:14 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2011/06/10 08:19:12 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2011/06/10 08:19:10 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2011/06/10 08:19:07 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2011/06/10 08:19:06 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2011/06/10 08:19:04 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2011/06/10 08:19:02 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2011/06/10 08:19:00 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2011/06/10 08:18:58 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2011/06/10 08:18:56 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2011/06/10 08:18:53 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2011/06/10 08:18:49 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2011/06/10 08:18:45 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2011/06/10 08:18:42 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2011/06/10 08:18:38 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2011/06/10 08:18:36 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2011/06/10 08:18:35 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidserv.dll
[2011/06/10 08:18:34 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2011/06/10 08:18:33 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2011/06/10 08:18:31 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2011/06/10 08:18:29 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2011/06/10 08:18:28 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2011/06/10 08:18:26 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2011/06/10 08:18:24 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2011/06/10 08:18:24 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2011/06/10 08:18:22 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2011/06/10 08:18:21 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2011/06/10 08:18:19 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2011/06/10 08:18:17 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2011/06/10 08:18:16 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2011/06/10 08:18:10 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2011/06/10 08:18:09 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2011/06/10 08:18:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2011/06/10 08:18:04 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2011/06/10 08:18:02 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2011/06/10 08:18:01 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2011/06/10 08:18:00 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2011/06/10 08:17:58 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2011/06/10 08:17:56 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2011/06/10 08:17:52 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2011/06/10 08:17:49 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2011/06/10 08:17:48 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2011/06/10 08:17:46 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2011/06/10 08:17:45 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2011/06/10 08:17:43 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2011/06/10 08:17:41 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2011/06/10 08:17:38 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2011/06/10 08:17:37 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2011/06/10 08:17:35 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2011/06/10 08:17:33 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2011/06/10 08:17:33 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2011/06/10 08:17:31 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2011/06/10 08:17:30 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2011/06/10 08:17:28 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2011/06/10 08:17:27 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2011/06/10 08:17:25 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2011/06/10 08:17:24 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2011/06/10 08:17:22 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2011/06/10 08:17:21 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2011/06/10 08:17:19 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2011/06/10 08:17:18 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2011/06/10 08:17:16 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2011/06/10 08:17:15 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2011/06/10 08:17:13 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2011/06/10 08:17:12 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2011/06/10 08:17:11 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2011/06/10 08:17:10 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2011/06/10 08:17:09 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2011/06/10 08:17:05 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2011/06/10 08:17:04 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2011/06/10 08:17:03 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2011/06/10 08:17:02 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2011/06/10 08:17:01 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2011/06/10 08:17:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2011/06/10 08:16:59 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2011/06/10 08:16:58 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2011/06/10 08:16:57 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2011/06/10 08:16:56 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2011/06/10 08:16:55 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2011/06/10 08:16:54 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2011/06/10 08:16:53 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2011/06/10 08:16:52 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2011/06/10 08:16:51 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2011/06/10 08:16:50 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2011/06/10 08:16:49 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2011/06/10 08:16:47 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2011/06/10 08:16:46 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2011/06/10 08:16:45 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2011/06/10 08:16:43 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2011/06/10 08:16:42 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2011/06/10 08:16:40 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2011/06/10 08:16:39 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2011/06/10 08:16:38 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2011/06/10 08:16:37 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2011/06/10 08:16:36 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2011/06/10 08:16:36 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2011/06/10 08:16:33 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2011/06/10 08:16:33 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2011/06/10 08:16:32 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2011/06/10 08:16:31 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2011/06/10 08:16:28 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2011/06/10 08:16:27 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2011/06/10 08:16:26 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2011/06/10 08:16:25 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2011/06/10 08:16:24 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2011/06/10 08:16:23 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2011/06/10 08:16:22 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2011/06/10 08:16:21 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2011/06/10 08:16:20 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2011/06/10 08:16:19 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2011/06/10 08:16:18 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2011/06/10 08:16:17 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2011/06/10 08:16:17 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2011/06/10 08:16:16 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2011/06/10 08:16:15 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2011/06/10 08:16:14 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2011/06/10 08:16:13 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2011/06/10 08:16:12 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2011/06/10 08:16:11 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2011/06/10 08:16:10 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2011/06/10 08:16:09 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2011/06/10 08:16:08 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2011/06/10 08:16:07 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2011/06/10 08:16:06 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2011/06/10 08:16:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2011/06/10 08:16:04 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2011/06/10 08:16:03 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2011/06/10 08:16:02 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2011/06/10 08:16:01 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2011/06/10 08:16:00 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2011/06/10 08:16:00 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2011/06/10 08:15:58 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2011/06/10 08:15:57 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2011/06/10 08:15:55 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2011/06/10 08:15:55 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2011/06/10 08:15:54 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2011/06/10 08:15:53 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2011/06/10 08:15:52 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2011/06/10 08:15:51 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2011/06/10 08:15:50 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2011/06/10 08:15:49 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2011/06/10 08:15:49 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2011/06/10 08:15:48 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2011/06/10 08:15:47 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2011/06/10 08:15:47 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2011/06/10 08:15:46 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2011/06/10 08:15:45 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2011/06/10 08:15:44 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2011/06/10 08:15:43 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2011/06/10 08:15:42 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2011/06/10 08:15:42 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2011/06/10 08:15:41 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2011/06/10 08:15:40 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2011/06/10 08:15:39 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2011/06/10 08:15:38 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2011/06/10 08:15:37 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2011/06/10 08:15:37 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2011/06/10 08:15:36 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2011/06/10 08:15:35 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2011/06/10 08:15:34 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2011/06/10 08:15:31 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2011/06/10 08:15:30 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2011/06/10 08:15:29 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2011/06/10 08:15:28 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2011/06/10 08:15:27 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2011/06/10 08:15:27 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2011/06/10 08:15:26 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2011/06/10 08:15:25 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2011/06/10 08:15:25 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2011/06/10 08:15:24 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2011/06/10 08:15:24 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2011/06/10 08:15:22 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2011/06/10 08:15:21 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2011/06/10 08:15:17 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2011/06/10 08:15:16 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2011/06/10 08:15:15 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2011/06/10 08:15:15 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2011/06/10 08:15:14 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2011/06/10 08:15:14 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2011/06/10 08:15:12 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2011/06/10 08:15:12 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2011/06/10 08:15:11 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2011/06/10 08:15:11 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2011/06/10 08:15:10 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2011/06/10 08:15:10 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2011/06/10 08:15:09 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2011/06/10 08:15:08 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2011/06/10 08:15:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2011/06/10 08:15:06 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2011/06/10 08:15:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2011/06/10 08:15:05 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2011/06/10 08:15:05 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2011/06/10 08:15:04 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2011/06/10 08:15:04 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2011/06/10 08:15:03 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2011/06/10 08:15:03 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2011/06/10 08:14:45 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2011/06/10 08:14:44 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2011/06/10 08:14:43 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2011/06/10 08:14:43 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2011/06/10 08:14:42 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2011/06/10 08:14:42 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2011/06/10 08:14:41 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2011/06/10 08:14:41 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2011/06/10 08:14:40 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2011/06/10 08:14:39 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2011/06/10 08:14:39 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2011/06/10 08:14:38 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2011/06/10 08:14:38 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2011/06/10 08:14:37 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2011/06/10 08:14:37 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2011/06/10 08:14:36 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2011/06/10 08:14:36 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2011/06/10 08:14:35 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2011/06/10 08:14:35 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2011/06/10 08:14:35 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2011/06/10 08:14:33 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2011/06/10 08:14:33 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2011/06/10 08:14:33 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2011/06/10 08:14:32 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2011/06/10 08:14:32 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2011/06/10 08:14:31 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2011/06/10 08:14:31 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2011/06/10 08:14:30 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2011/06/10 08:14:30 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2011/06/10 08:14:29 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2011/06/10 08:14:29 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2011/06/10 08:14:29 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2011/06/10 08:14:28 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2011/06/10 08:14:28 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2011/06/10 08:14:27 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2011/06/10 08:14:27 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2011/06/10 08:14:26 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2011/06/10 08:14:26 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2011/06/10 08:14:25 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2011/06/10 08:14:20 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2011/06/10 08:14:20 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2011/06/10 08:14:19 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2011/06/10 08:14:18 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2011/06/10 08:14:18 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2011/06/10 08:14:17 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2011/06/10 08:14:17 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2011/06/10 08:14:17 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2011/06/10 08:14:16 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2011/06/10 08:14:15 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2011/06/10 08:14:14 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2011/06/10 08:14:13 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2011/06/10 08:14:12 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2011/06/10 08:14:12 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2011/06/10 08:14:11 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2011/06/10 08:14:10 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2011/06/10 08:14:10 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2011/06/10 08:14:09 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2011/06/10 08:14:09 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2011/06/10 08:14:08 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2011/06/10 08:14:08 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2011/06/10 08:14:08 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2011/06/10 08:14:07 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2011/06/10 08:14:07 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2011/06/10 08:14:07 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2011/06/10 08:14:05 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2011/06/10 08:14:03 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2011/06/10 08:14:02 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2011/06/10 08:14:01 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2011/06/10 08:14:00 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2011/06/10 08:14:00 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2011/06/10 08:14:00 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2011/06/10 08:13:59 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2011/06/10 08:13:59 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2011/06/10 08:13:58 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2011/06/10 08:13:58 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2011/06/10 08:13:58 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2011/06/10 08:13:57 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2011/06/10 08:13:57 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2011/06/10 08:13:57 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2011/06/10 08:13:57 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2011/06/10 08:13:56 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2011/06/10 08:13:56 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2011/06/10 08:13:56 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2011/06/10 08:13:56 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2011/06/10 08:13:55 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2011/06/10 08:13:55 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2011/06/10 08:13:55 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2011/06/10 08:13:55 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2011/06/10 08:13:54 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2011/06/10 08:13:38 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2011/06/08 13:42:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\UltraVNC
[2011/06/08 13:42:13 | 000,000,000 | —D | C] – C:\Program Files\UltraVNC
[2011/06/08 13:32:00 | 000,000,000 | —D | C] – C:\Temp
[2011/06/08 13:28:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2011/06/08 13:28:49 | 000,073,728 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/06/08 13:28:48 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/06/08 13:28:48 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/06/08 13:28:48 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/06/08 13:28:48 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/06/08 13:28:31 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/06/07 14:53:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\ESET
[2011/06/07 14:53:50 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2011/06/07 14:53:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\ESET
[2011/06/07 14:39:25 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2011/06/07 10:23:20 | 000,000,000 | —D | C] – C:\ComboFix
[2011/06/06 10:46:05 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2011/06/06 09:39:34 | 000,012,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mouhid.sys
[2011/06/06 09:39:06 | 000,010,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidusb.sys
[2011/05/27 14:30:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2011/05/27 13:45:54 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Application Data\Malwarebytes
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/06/15 20:15:25 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\ldegroff\Desktop\OTL.exe
[2011/06/15 19:27:32 | 000,000,912 | —- | M] () – C:\WINDOWS\System32\drivers\kgpfr2.cfg
[2011/06/15 19:18:11 | 000,000,576 | —- | M] () – C:\WINDOWS\System32\drivers\kgpcpy.cfg
[2011/06/15 17:53:41 | 001,305,136 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\tdsskiller.zip
[2011/06/15 17:50:48 | 000,071,398 | —- | M] (jpshortstuff) – C:\Documents and Settings\ldegroff\Desktop\GooredFix.exe
[2011/06/15 17:39:40 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
[2011/06/15 17:37:08 | 000,000,742 | —- | M] () – C:\Documents and Settings\ldegroff\Start Menu\Programs\Startup\Adobe Media Player.lnk
[2011/06/15 17:36:13 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/06/15 17:25:25 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/06/14 19:39:44 | 000,497,946 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/06/14 19:39:44 | 000,086,088 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/06/14 19:37:41 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/06/14 18:22:55 | 000,119,808 | —- | M] (Atribune.org) – C:\Documents and Settings\ldegroff\Desktop\VundoFix.exe
[2011/06/13 20:31:40 | 000,509,440 | —- | M] (iS3, Inc.) – C:\Documents and Settings\ldegroff\Desktop\STOPzilla_Setup.exe
[2011/06/13 18:31:38 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2011/06/12 15:58:38 | 000,132,560 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3HTUI5.dll
[2011/06/12 15:58:38 | 000,022,992 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\SZIO5.dll
[2011/06/12 15:58:36 | 000,546,256 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\SZComp5.dll
[2011/06/12 15:58:36 | 000,456,144 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\SZBase5.dll
[2011/06/12 15:58:36 | 000,398,800 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3DBA5.dll
[2011/06/12 15:58:36 | 000,067,024 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Hks5.dll
[2011/06/12 15:58:36 | 000,028,624 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3XDat5.dll
[2011/06/12 15:58:34 | 000,390,608 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3UI5.dll
[2011/06/12 15:58:34 | 000,230,864 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Win325.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Svc5.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Inet5.dll
[2011/06/12 15:58:32 | 000,738,768 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Base5.dll
[2011/06/09 03:11:48 | 000,000,000 | —- | M] () – C:\WINDOWS\System32\client.db
[2011/06/08 13:28:36 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/06/08 13:28:36 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/06/08 13:28:36 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/06/08 13:28:36 | 000,073,728 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/06/08 13:28:35 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/06/08 13:25:39 | 000,000,819 | —- | M] () – C:\WINDOWS\ODBC.INI
[2011/06/07 14:44:15 | 000,002,657 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Online Check Deposit.lnk
[2011/05/29 09:11:30 | 000,039,984 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/05/29 09:11:20 | 000,022,712 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2011/05/26 16:05:17 | 001,712,024 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\PAYROLL CHANGE NOTICE-Lifestyle.FDD
[2011/05/26 08:42:18 | 000,165,757 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\Enrollment Form.pdf
[2011/05/25 10:26:02 | 001,712,288 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\Payroll Change Notice-Inc.FDD
[2011/05/19 14:07:50 | 000,008,957 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\FMLA Report.pdf
[2011/05/17 09:45:09 | 000,002,383 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\Crystal Reports 11.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/06/15 19:27:32 | 000,000,912 | —- | C] () – C:\WINDOWS\System32\drivers\kgpfr2.cfg
[2011/06/15 17:53:41 | 001,305,136 | —- | C] () – C:\Documents and Settings\ldegroff\Desktop\tdsskiller.zip
[2011/06/15 17:29:57 | 000,000,576 | —- | C] () – C:\WINDOWS\System32\drivers\kgpcpy.cfg
[2011/06/13 22:36:11 | 000,000,742 | —- | C] () – C:\Documents and Settings\ldegroff\Start Menu\Programs\Startup\Adobe Media Player.lnk
[2011/06/10 08:34:46 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2011/06/10 08:34:43 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2011/06/10 08:25:59 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2011/06/10 08:25:56 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2011/06/10 08:22:44 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2011/06/10 08:18:55 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2011/06/10 08:18:51 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2011/06/10 08:18:47 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2011/06/10 08:18:44 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2011/06/10 08:18:40 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2011/06/10 08:16:30 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2011/06/10 08:16:29 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2011/06/10 08:16:29 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2011/06/10 08:14:23 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2011/06/10 08:14:23 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2011/06/10 08:14:22 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2011/06/10 08:14:22 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2011/06/10 08:14:21 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2011/06/10 08:14:21 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2011/06/10 08:14:21 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2011/06/10 08:14:20 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2011/06/10 08:14:19 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2011/06/10 08:14:16 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2011/06/09 03:11:48 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\client.db
[2011/06/07 10:23:39 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2011/06/07 10:23:39 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2011/06/07 10:23:39 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2011/05/26 08:42:18 | 000,165,757 | —- | C] () – C:\Documents and Settings\ldegroff\Desktop\Enrollment Form.pdf
[2011/05/18 16:06:22 | 001,712,024 | —- | C] () – C:\Documents and Settings\ldegroff\Desktop\PAYROLL CHANGE NOTICE-Lifestyle.FDD
[2011/01/06 10:51:56 | 000,016,968 | —- | C] () – C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2010/05/13 08:53:11 | 000,014,290 | —- | C] () – C:\Program Files\settings.dat
[2009/06/23 09:57:57 | 000,475,136 | —- | C] () – C:\WINDOWS\System32\LM_A6D.dll
[2009/06/23 09:55:56 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\A6DCOM.dll
[2009/06/23 09:55:56 | 000,052,224 | —- | C] () – C:\WINDOWS\System32\A6D2USD.dll
[2009/04/28 08:12:31 | 000,013,029 | —- | C] () – C:\Documents and Settings\ldegroff\Application Data\Microsoft Excel.CAL
[2008/09/30 16:11:39 | 000,000,075 | —- | C] () – C:\WINDOWS\contain.INI
[2008/05/02 11:24:44 | 000,004,608 | —- | C] () – C:\Documents and Settings\ldegroff\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/02/06 11:56:22 | 000,000,135 | —- | C] () – C:\WINDOWS\GpsProd.ini
[2008/02/02 17:11:11 | 001,488,580 | —- | C] () – C:\WINDOWS\System32\OpenSshPackage.EXE
[2008/02/02 17:11:11 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\DARMConfig.exe
[2008/01/13 16:31:10 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2008/01/13 15:23:54 | 000,000,819 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/01/13 14:59:42 | 000,049,152 | R— | C] () – C:\WINDOWS\System32\ChCfg.exe
[2008/01/13 14:56:12 | 000,204,800 | R— | C] () – C:\WINDOWS\System32\igfxCoIn_v4785.dll
[2008/01/13 14:46:11 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2008/01/13 14:42:21 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2008/01/13 09:36:50 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2008/01/13 09:35:56 | 000,196,960 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2007/07/12 16:51:04 | 000,319,384 | —- | C] () – C:\WINDOWS\System32\drivers\TS230Firmware.bin
[2007/07/12 16:50:34 | 000,319,560 | —- | C] () – C:\WINDOWS\System32\drivers\TS440Firmware.bin
[2006/02/06 11:29:40 | 000,095,145 | —- | C] () – C:\WINDOWS\System32\drivers\TS220Firmware.bin
[2004/08/04 08:00:00 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2004/08/04 08:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/04 08:00:00 | 000,497,946 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004/08/04 08:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/04 08:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/04 08:00:00 | 000,086,088 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004/08/04 08:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/04 08:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/04 08:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/04 08:00:00 | 000,004,463 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004/08/04 08:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2004/08/04 08:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2003/01/07 16:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2002/02/27 10:41:28 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\nsldappr32v50.dll
[2002/02/27 10:41:26 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\nsldap32v50.dll
[2002/02/27 10:41:26 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\nsldapssl32v50.dll
[2000/06/13 13:18:18 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\mdexlib.dll
========== LOP Check ==========
[2009/06/23 11:57:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alogent
[2009/06/22 09:58:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Applications
[2011/06/07 14:53:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ESET
[2011/01/06 10:51:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Hitman Pro
[2008/01/13 15:47:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LightScribe
[2009/06/23 11:57:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nap
[2011/06/15 20:15:14 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2010/07/20 11:17:32 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{E45F96DF-A6AC-40E7-B69D-957A1DF7F263}
[2009/03/04 16:59:02 | 000,000,000 | —D | M] – C:\Documents and Settings\ldegroff\Application Data\Panasonic
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2008/02/02 17:11:17 | 000,001,024 | —- | M] () – C:\.rnd
[2008/01/13 14:44:34 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2008/02/02 16:49:16 | 000,000,211 | —- | M] () – C:\Boot.bak
[2011/06/13 18:31:38 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2004/08/04 00:00:00 | 000,260,272 | RHS- | M] () – C:\cmldr
[2011/06/07 10:31:07 | 000,111,022 | —- | M] () – C:\ComboFix.txt
[2008/01/13 14:44:34 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2008/09/01 11:29:24 | 000,061,433 | R— | M] () – C:\inoc6.icf
[2008/01/13 14:44:34 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2008/01/13 14:57:42 | 000,000,197 | —- | M] () – C:\lan.log
[2008/01/13 14:44:34 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/06/08 13:40:00 | 005,044,352 | —- | M] () – C:\n-able-net4-install.log-MSI_netfx_Core_x86.msi.txt
[2011/06/08 13:41:03 | 002,106,264 | —- | M] () – C:\n-able-net4-install.log-MSI_netfx_Extended_x86.msi.txt
[2004/08/04 08:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/12/18 17:06:57 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/06/15 17:25:23 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2008/01/13 14:59:45 | 000,000,206 | —- | M] () – C:\realtek.log
[2008/01/13 14:59:45 | 000,000,575 | —- | M] () – C:\RHDSetup.log
[2005/07/18 13:34:46 | 005,037,072 | —- | M] (Safer Networking Limited ) – C:\spybotsd14.exe
[2011/06/15 17:55:49 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_17.54.53_log.txt
[2011/06/15 17:58:04 | 000,065,120 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_17.55.59_log.txt
[2011/06/15 17:58:30 | 000,002,148 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_17.58.18_log.txt
[2011/06/15 19:28:33 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.28.04_log.txt
[2011/06/15 19:35:02 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.34.36_log.txt
[2011/06/15 19:36:41 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.36.07_log.txt
[2011/06/15 19:47:28 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.46.37_log.txt
[2011/06/15 19:49:48 | 000,034,852 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.48.33_log.txt
[2011/06/14 18:50:48 | 000,000,136 | —- | M] () – C:\VundoFix.txt
< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2008/01/13 14:44:16 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/04/04 21:01:40 | 000,272,896 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpcpp5r1.DLL
[2009/03/13 20:30:56 | 000,081,240 | —- | M] (Microsoft Corporation.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\lmdippr8.dll
[2003/06/18 18:31:48 | 000,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 06:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2010/05/13 08:53:11 | 000,014,290 | —- | M] () – C:\Program Files\settings.dat
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/01/13 09:35:01 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2008/01/13 09:35:01 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2008/01/13 09:35:01 | 000,888,832 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/12/18 17:12:06 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
[2011/06/09 03:11:48 | 000,000,000 | —- | M] () – C:\WINDOWS\system32\client.db
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/12/19 08:09:19 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\ldegroff\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2008/04/28 16:14:49 | 000,000,079 | —- | M] () – C:\Documents and Settings\ldegroff\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2011/06/15 17:50:48 | 000,071,398 | —- | M] (jpshortstuff) – C:\Documents and Settings\ldegroff\Desktop\GooredFix.exe
[2011/06/15 17:39:40 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
[2009/06/23 09:49:15 | 034,402,788 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\OnlineCheckDeposit6.3.exe
[2011/06/15 20:15:25 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\ldegroff\Desktop\OTL.exe
[2011/06/13 20:31:40 | 000,509,440 | —- | M] (iS3, Inc.) – C:\Documents and Settings\ldegroff\Desktop\STOPzilla_Setup.exe
[2011/06/14 18:22:55 | 000,119,808 | —- | M] (Atribune.org) – C:\Documents and Settings\ldegroff\Desktop\VundoFix.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-06-09 07:05:31
< End of report >
OTL Extras logfile created on: 6/15/2011 8:18:02 PM - Run 1
OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\ldegroff\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 0.72 Gb Available Physical Memory | 36.03% Memory free
3.84 Gb Paging File | 3.12 Gb Available in Paging File | 81.30% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149.05 Gb Total Space | 126.73 Gb Free Space | 85.02% Space Free | Partition Type: NTFS
Computer Name: GOODWILL058 | User Name: ldegroff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.exe [@ = exefile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings]
"Enabled" = 1
"RemoteAddresses" = *
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services
"3246:TCP" = 3246:TCP:*:Enabled:Services
"2479:TCP" = 2479:TCP:*:Enabled:Services
"9698:TCP" = 9698:TCP:*:Enabled:Services
"9699:TCP" = 9699:TCP:*:Enabled:Services
"4208:TCP" = 4208:TCP:*:Enabled:Services
"6916:TCP" = 6916:TCP:*:Enabled:Services
"80:TCP" = 80:TCP:*:Enabled:Services
"443:TCP" = 443:TCP:*:Enabled:Services
"7207:TCP" = 7207:TCP:*:Enabled:Services
"7208:TCP" = 7208:TCP:*:Enabled:Services
"1526:TCP" = 1526:TCP:*:Enabled:Services
"1552:TCP" = 1552:TCP:*:Enabled:Services
"8942:TCP" = 8942:TCP:*:Enabled:Services
"1567:TCP" = 1567:TCP:*:Enabled:Services
"6036:TCP" = 6036:TCP:*:Enabled:Services
"7755:TCP" = 7755:TCP:*:Enabled:Services
"6546:TCP" = 6546:TCP:*:Enabled:Services
"6145:TCP" = 6145:TCP:*:Enabled:Services
"2911:TCP" = 2911:TCP:*:Enabled:Services
"3255:TCP" = 3255:TCP:*:Enabled:Services
"3911:TCP" = 3911:TCP:*:Enabled:Services
"5645:TCP" = 5645:TCP:*:Enabled:Services
"5240:TCP" = 5240:TCP:*:Enabled:Services
"1598:TCP" = 1598:TCP:*:Enabled:Services
"2942:TCP" = 2942:TCP:*:Enabled:Services
"8707:TCP" = 8707:TCP:*:Enabled:Services
"7536:TCP" = 7536:TCP:*:Enabled:Services
"4692:TCP" = 4692:TCP:*:Enabled:Services
"4348:TCP" = 4348:TCP:*:Enabled:Services
"5880:TCP" = 5880:TCP:*:Enabled:Services
"6474:TCP" = 6474:TCP:*:Enabled:Services
"2317:TCP" = 2317:TCP:*:Enabled:Services
"4598:TCP" = 4598:TCP:*:Enabled:Services
"9675:TCP" = 9675:TCP:*:Enabled:Services
"1551:TCP" = 1551:TCP:*:Enabled:Services
"3473:TCP" = 3473:TCP:*:Enabled:Services
"9629:TCP" = 9629:TCP:*:Enabled:Services
"2146:TCP" = 2146:TCP:*:Enabled:Services
"5130:TCP" = 5130:TCP:*:Enabled:Services
"4083:TCP" = 4083:TCP:*:Enabled:Services
"9223:TCP" = 9223:TCP:*:Enabled:Services
"8926:TCP" = 8926:TCP:*:Enabled:Services
"4271:TCP" = 4271:TCP:*:Enabled:Services
"5567:TCP" = 5567:TCP:*:Enabled:Services
"7286:TCP" = 7286:TCP:*:Enabled:Services
"5834:TCP" = 5834:TCP:*:Enabled:Services
"7770:TCP" = 7770:TCP:*:Enabled:Services
"1989:TCP" = 1989:TCP:*:Enabled:Services
"5676:TCP" = 5676:TCP:*:Enabled:Services
"5817:TCP" = 5817:TCP:*:Enabled:Services
"3551:TCP" = 3551:TCP:*:Enabled:Services
"9333:TCP" = 9333:TCP:*:Enabled:Services
"3275:TCP" = 3275:TCP:*:Enabled:Services
"4973:TCP" = 4973:TCP:*:Enabled:Services
"3723:TCP" = 3723:TCP:*:Enabled:Services
"2973:TCP" = 2973:TCP:*:Enabled:Services
"1848:TCP" = 1848:TCP:*:Enabled:Services
"2415:TCP" = 2415:TCP:*:Enabled:Services
"6581:TCP" = 6581:TCP:*:Enabled:Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services
"3246:TCP" = 3246:TCP:*:Enabled:Services
"2479:TCP" = 2479:TCP:*:Enabled:Services
"9699:TCP" = 9699:TCP:*:Enabled:Services
"9698:TCP" = 9698:TCP:*:Enabled:Services
"4208:TCP" = 4208:TCP:*:Enabled:Services
"6916:TCP" = 6916:TCP:*:Enabled:Services
"7207:TCP" = 7207:TCP:*:Enabled:Services
"7208:TCP" = 7208:TCP:*:Enabled:Services
"1526:TCP" = 1526:TCP:*:Enabled:Services
"1552:TCP" = 1552:TCP:*:Enabled:Services
"8942:TCP" = 8942:TCP:*:Enabled:Services
"1567:TCP" = 1567:TCP:*:Enabled:Services
"6036:TCP" = 6036:TCP:*:Enabled:Services
"7755:TCP" = 7755:TCP:*:Enabled:Services
"6546:TCP" = 6546:TCP:*:Enabled:Services
"6145:TCP" = 6145:TCP:*:Enabled:Services
"2911:TCP" = 2911:TCP:*:Enabled:Services
"3255:TCP" = 3255:TCP:*:Enabled:Services
"3911:TCP" = 3911:TCP:*:Enabled:Services
"5645:TCP" = 5645:TCP:*:Enabled:Services
"5240:TCP" = 5240:TCP:*:Enabled:Services
"1598:TCP" = 1598:TCP:*:Enabled:Services
"2942:TCP" = 2942:TCP:*:Enabled:Services
"8707:TCP" = 8707:TCP:*:Enabled:Services
"7536:TCP" = 7536:TCP:*:Enabled:Services
"4692:TCP" = 4692:TCP:*:Enabled:Services
"4348:TCP" = 4348:TCP:*:Enabled:Services
"5880:TCP" = 5880:TCP:*:Enabled:Services
"6474:TCP" = 6474:TCP:*:Enabled:Services
"2317:TCP" = 2317:TCP:*:Enabled:Services
"4598:TCP" = 4598:TCP:*:Enabled:Services
"9675:TCP" = 9675:TCP:*:Enabled:Services
"1551:TCP" = 1551:TCP:*:Enabled:Services
"3473:TCP" = 3473:TCP:*:Enabled:Services
"9629:TCP" = 9629:TCP:*:Enabled:Services
"2146:TCP" = 2146:TCP:*:Enabled:Services
"5130:TCP" = 5130:TCP:*:Enabled:Services
"4083:TCP" = 4083:TCP:*:Enabled:Services
"9223:TCP" = 9223:TCP:*:Enabled:Services
"8926:TCP" = 8926:TCP:*:Enabled:Services
"4271:TCP" = 4271:TCP:*:Enabled:Services
"5567:TCP" = 5567:TCP:*:Enabled:Services
"7286:TCP" = 7286:TCP:*:Enabled:Services
"5834:TCP" = 5834:TCP:*:Enabled:Services
"7770:TCP" = 7770:TCP:*:Enabled:Services
"1989:TCP" = 1989:TCP:*:Enabled:Services
"5676:TCP" = 5676:TCP:*:Enabled:Services
"5817:TCP" = 5817:TCP:*:Enabled:Services
"3551:TCP" = 3551:TCP:*:Enabled:Services
"9333:TCP" = 9333:TCP:*:Enabled:Services
"3275:TCP" = 3275:TCP:*:Enabled:Services
"4973:TCP" = 4973:TCP:*:Enabled:Services
"3723:TCP" = 3723:TCP:*:Enabled:Services
"2973:TCP" = 2973:TCP:*:Enabled:Services
"1848:TCP" = 1848:TCP:*:Enabled:Services
"2415:TCP" = 2415:TCP:*:Enabled:Services
"6581:TCP" = 6581:TCP:*:Enabled:Services
"5900:TCP" = 5900:TCP:*:Enabled:vnc5900
"5800:TCP" = 5800:TCP:*:Enabled:vnc5800
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\WINDOWS\instsrv.exe" = C:\WINDOWS\instsrv.exe:*:Enabled:eTrust Antivirus Remote Installation Program
"C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe" = C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe:*:Enabled:Microsoft Office Live Meeting 2007 – (Microsoft Corporation)
"C:\Program Files\CA\eTrustITM\InoRpc.exe" = C:\Program Files\CA\eTrustITM\InoRpc.exe:*:Enabled:eTrust ITM - RPC Service
"C:\Program Files\CA\eTrustITM\Realmon.exe" = C:\Program Files\CA\eTrustITM\Realmon.exe:*:Enabled:eTrust ITM - Realtime monitor
"C:\Program Files\CA\eTrustITM\Shellscn.exe" = C:\Program Files\CA\eTrustITM\Shellscn.exe:*:Enabled:eTrust ITM - Shell Scanner
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe" = C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe:*:Enabled:Microsoft Office Live Meeting 2007 – (Microsoft Corporation)
"C:\Program Files\UltraVNC\vncviewer.exe" = C:\Program Files\UltraVNC\vncviewer.exe:*:Enabled:vncviewer.exe – (UltraVNC)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{05F5C83E-F33A-4EB9-8A71-7B477BF7DCA3}" = Learn.com CoursePlayer
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D13442D-BD71-4ADF-A71B-8B48C6A9558C}" = FMLA Manager II
"{1FEB495E-51AA-477C-BF43-62D96A7C8D8C}" = Microsoft Business Solutions-Great Plains Watson
"{2515BF88-E42E-4AFA-A8E7-DF272762589B}" = Microsoft Office Live Meeting 2007
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java™ 6 Update 26
"{2E56775F-12A6-44CB-A969-3C2CEB371313}" = Dexterity Shared Components 10.0
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50762AB3-EB19-41BE-A2E6-23771A579267}" = TellerScan Driver v2.3 Certified
"{50A0893D-47D8-48E0-A7E8-44BCD7E4422E}" = Microsoft SQL Server Native Client
"{5C74694C-A687-E3EB-FF18-B018D4A76ECD}" = Adobe Media Player
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6BE38376-FEB4-41D1-B69B-4C5796A5DD08}" = Microsoft Visual C++ 2005 Redistributable Components
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7505DE9C-4E85-4636-82F0-50F38077B900}" = Crystal Reports 11
"{795A3A1E-E06A-4214-A2EF-3DDF3BA05C2B}" = STOPzilla
"{896DCCC7-9749-4DD6-BAEF-49F9A9CEE295}" = Microsoft Dynamics GP 10.0
"{896DCCC7-9749-4DD6-BAEF-49F9A9CEE295}_Ex" = Microsoft Dynamics GP 10.0
"{8BED6A90-E6EB-11D2-AA54-0008C7408A5A}" = VBA (2720)
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{91710409-8000-11D3-8CFE-0150048383C9}" = Microsoft Application Error Reporting
"{9C4BE388-1F60-445C-BB69-20561B389D5B}" = CheckNique - Duplex Image MICR
"{9DE3F260-B88E-42CE-90E7-73C78C37D95E}" = 32 Bit HP BiDi Channel Components Installer
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A66242A1-9101-425D-9BE5-D19A50E1D0D8}" = ESET NOD32 Antivirus
"{AC76BA86-7AD7-1033-7B44-A81200000003}" = Adobe Reader 8.1.2
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BCE7CE69-91C6-479D-AACC-17E9DCC8E566}" = Mekorma MICR 10.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C6A69250-9C40-4235-BDB7-C25DFD3FD147}" = Windows Agent
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D9B4D7EE-481C-4C36-86AB-A8F7417725FF}" = LightScribe 1.6.43.1
"{D9D937B0-E842-4130-9588-B948E876904A}" = Microsoft SQL Server 2008 Native Client
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F54A5E01-9C57-4C09-ADC1-222BBB8B4142}" = Online Check Deposit
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"{FE820A0F-E7A4-412A-85B1-795309CDAAF0}" = FMLA Manager II
"69BD4AA45E9C862327EF05CEA66E45DE7DAF7F15" = Windows Driver Package - Digital Check Corporation (TSUSB2) USB (01/08/2007 1.10.0000)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"B61DBB3FD701FD725BC43B299669B773057E30E0" = Windows Driver Package - CTS Electronics, Inc (LS100UD) USB (07/18/2007 01.00.00.02)
"Fixed Asset Management for Great Plains 8.00" = Fixed Asset Management for Great Plains 8.00
"FormDocs" = FormDocs 6.5
"Great Plains 8.0" = Microsoft Business Solutions-Great Plains 8.0
"HDMI" = Intel® Graphics Media Accelerator Driver
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{0D13442D-BD71-4ADF-A71B-8B48C6A9558C}" = FMLA Manager II
"InstallShield_{FE820A0F-E7A4-412A-85B1-795309CDAAF0}" = FMLA Manager II
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Mekorma MICR 10.0" = Mekorma MICR 10.0
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Business Solutions Human Resources for Great Plains 8.0" = Microsoft Business Solutions Human Resources for Great Plains 8.0
"Microsoft Great Plains Package Loader" = Microsoft Great Plains Package Loader 8.00
"N-able Technologies Inc. OpenSShPackage" = N-able Technologies Inc. OpenSShPackage
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PDFCreator Toolbar" = PDFCreator Toolbar
"SmartSource" = SmartSource
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"Ultravnc2_is1" = UltraVNC [removed]
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting 4.5.0.457
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 6/14/2011 7:11:17 PM | Computer Name = GOODWILL058 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 6/14/2011 7:13:40 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/14/2011 7:48:05 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/14/2011 7:48:05 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/14/2011 7:48:06 PM | Computer Name = GOODWILL058 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 6/14/2011 7:50:14 PM | Computer Name = GOODWILL058 | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown
Error - 6/15/2011 5:27:44 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/15/2011 5:27:46 PM | Computer Name = GOODWILL058 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 6/15/2011 5:33:00 PM | Computer Name = GOODWILL058 | Source = TlntSvr | ID = 4031
Description = Error in reading console screen buffer output or its information.
System error: The parameter is incorrect.
Error - 6/15/2011 5:36:01 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
[ Dexterity Events ]
Error - 12/23/2008 1:01:09 PM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 4/14/2009 11:06:41 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 4/14/2009 11:07:17 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 4/14/2009 11:07:47 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 10/2/2009 1:33:39 PM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 1/4/2010 8:36:19 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 1/26/2011 9:31:47 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 2/4/2011 1:13:44 PM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
[ System Events ]
Error - 6/14/2011 9:33:28 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 119 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 5:27:44 PM | Computer Name = GOODWILL058 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain GOODWILL due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.
Error - 6/15/2011 5:27:55 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 5:27:55 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 5:28:43 PM | Computer Name = GOODWILL058 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL
Error - 6/15/2011 5:43:06 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 29 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 6:06:07 PM | Computer Name = GOODWILL058 | Source = Service Control Manager | ID = 7034
Description = The Windows User Mode Driver Framework service terminated unexpectedly.
It has done this 1 time(s).
Error - 6/15/2011 6:06:07 PM | Computer Name = GOODWILL058 | Source = Service Control Manager | ID = 7034
Description = The Telnet service terminated unexpectedly. It has done this 1 time(s).
Error - 6/15/2011 6:12:58 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 59 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 7:12:58 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 119 minutes. NtpClient has no source of accurate
time.
< End of report >
Otl extra:
I have run Nod 32 (no findings) malware bytes updated (no findings) antispyware blaster (no findings) Stopzilla Google redirector cognac and more findings including vundo 7, vundo fix no findings I then ran the self help for google redirector as instructed. It all worked except I have a suspicious file in tsskiller that I don't know how to treat.
Stopzilla keeps finding stuff on reboot. Only direct symptom is periodic sluggishness.
Here is Hijack this log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:03:56 PM, on 6/15/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17098)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\N-able Technologies\NRM\RSMWinService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe
C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Adobe Media Player\Adobe Media Player.exe
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1054\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1054\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1054\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1106\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1906\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-1963\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2069\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2114\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2118\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - HKUS\S-1-5-21-1214318980-2050774798-1845911597-2246\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User '?')
O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O17 - HKLM\Software\..\Telephony: DomainName = goodwillcfl.org
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O20 - AppInit_DLLs: C:\WINDOWS\system32\
O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: RSMWebServer - Unknown owner - C:\Program Files\N-able Technologies\NRM\RSMWinService.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
O23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: Windows Agent Maintenance Service - N-able Technologies - C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe
O23 - Service: Windows Agent Service - N-able Technologies - C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe
O23 - Service: winrdp_service - WCCS - C:\Program Files\N-able Technologies\NRM\UltraVNCServer\winrdp.exe
–
End of file - 8405 bytes
Otl log:
OTL logfile created on: 6/15/2011 8:17:58 PM - Run 1
OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\ldegroff\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 0.72 Gb Available Physical Memory | 36.03% Memory free
3.84 Gb Paging File | 3.12 Gb Available in Paging File | 81.30% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149.05 Gb Total Space | 126.73 Gb Free Space | 85.02% Space Free | Partition Type: NTFS
Computer Name: GOODWILL058 | User Name: ldegroff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\ldegroff\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\STOPzilla!\STOPzilla.exe (iS3, Inc.)
PRC - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)
PRC - C:\Program Files\N-able Technologies\NRM\RSMWinService.exe ()
PRC - C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe (N-able Technologies)
PRC - C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe (N-able Technologies)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\UltraVNC\winvnc.exe (UltraVNC)
PRC - C:\Program Files\Adobe Media Player\Adobe Media Player.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\ldegroff\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (NMIndexingService) – File not found
SRV - (HidServ) – File not found
SRV - (szserver) – C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)
SRV - (RSMWebServer) – C:\Program Files\N-able Technologies\NRM\RSMWinService.exe ()
SRV - (Windows Agent Service) – C:\Program Files\N-able Technologies\Windows Agent\bin\agent.exe (N-able Technologies)
SRV - (Windows Agent Maintenance Service) – C:\Program Files\N-able Technologies\Windows Agent\bin\AgentMaint.exe (N-able Technologies)
SRV - (winrdp_service) – C:\Program Files\N-able Technologies\NRM\UltraVNCServer\winrdp.exe (WCCS)
SRV - (EhttpSrv) – C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn) – C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (uvnc_service) – C:\Program Files\UltraVNC\WinVNC.exe (UltraVNC)
========== Driver Services (SafeList) ==========
DRV - (xpsec) – File not found
DRV - (xcpip) – File not found
DRV - (eamon) – C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (ehdrv) – C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (epfwtdir) – C:\WINDOWS\system32\drivers\epfwtdir.sys (ESET)
DRV - (szkgfs) – C:\WINDOWS\system32\drivers\szkgfs.sys (iS3, Inc.)
DRV - (szkg5) – C:\WINDOWS\system32\DRIVERS\szkg.sys (iS3 Inc.)
DRV - (is3srv) – C:\WINDOWS\system32\drivers\is3srv.sys (iS3 Inc.)
DRV - (RTLE8023xp) – C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (DAmirr) – C:\WINDOWS\system32\drivers\DAmirr.sys (ScriptLogic Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/06/07 14:53:52 | 000,000,000 | —D | M]
O1 HOSTS File: ([2011/01/06 14:27:30 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (STOPzilla Browser Helper Object) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll (iS3, Inc.)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] File not found
O4 - Startup: C:\Documents and Settings\ldegroff\Start Menu\Programs\Startup\Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Java Plug-in 1.4.2_04)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = goodwillcfl.org
O20 - AppInit_DLLs: (C:\WINDOWS\system32\) - C:\WINDOWS\System32\ [2011/06/15 18:21:54 | 000,000,000 | —D | M]
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\TPSvc: DllName - TPSvc.dll - File not found
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/01/13 14:44:34 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – Reg Error: Key error. File not found
NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)
========== Files/Folders - Created Within 30 Days ==========
[2011/06/15 20:15:19 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Documents and Settings\ldegroff\Desktop\OTL.exe
[2011/06/15 18:20:36 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Application Data\Ahead
[2011/06/15 17:56:51 | 000,000,000 | —D | C] – C:\TDSSKiller_Quarantine
[2011/06/15 17:54:32 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Desktop\tdsskiller
[2011/06/15 17:51:35 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Desktop\GooredFix Backups
[2011/06/15 17:50:48 | 000,071,398 | —- | C] (jpshortstuff) – C:\Documents and Settings\ldegroff\Desktop\GooredFix.exe
[2011/06/15 17:39:39 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
[2011/06/14 19:30:08 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2011/06/14 18:23:09 | 000,000,000 | —D | C] – C:\VundoFix Backups
[2011/06/14 18:22:53 | 000,119,808 | —- | C] (Atribune.org) – C:\Documents and Settings\ldegroff\Desktop\VundoFix.exe
[2011/06/13 21:04:29 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET
[2011/06/13 20:32:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\STOPzilla
[2011/06/13 20:32:47 | 000,000,000 | —D | C] – C:\Program Files\STOPzilla!
[2011/06/13 20:32:46 | 000,000,000 | —D | C] – C:\Program Files\Common Files\iS3
[2011/06/13 20:32:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2011/06/13 20:31:39 | 000,509,440 | —- | C] (iS3, Inc.) – C:\Documents and Settings\ldegroff\Desktop\STOPzilla_Setup.exe
[2011/06/13 19:36:08 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Application Data\SUPERAntiSpyware.com
[2011/06/12 15:58:38 | 000,132,560 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3HTUI5.dll
[2011/06/12 15:58:38 | 000,022,992 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\SZIO5.dll
[2011/06/12 15:58:36 | 000,546,256 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\SZComp5.dll
[2011/06/12 15:58:36 | 000,456,144 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\SZBase5.dll
[2011/06/12 15:58:36 | 000,398,800 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3DBA5.dll
[2011/06/12 15:58:36 | 000,067,024 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Hks5.dll
[2011/06/12 15:58:36 | 000,028,624 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3XDat5.dll
[2011/06/12 15:58:34 | 000,390,608 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3UI5.dll
[2011/06/12 15:58:34 | 000,230,864 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Win325.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Svc5.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Inet5.dll
[2011/06/12 15:58:32 | 000,738,768 | R— | C] (iS3, Inc.) – C:\WINDOWS\System32\IS3Base5.dll
[2011/06/10 08:34:50 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2011/06/10 08:34:47 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2011/06/10 08:34:40 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2011/06/10 08:34:28 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2011/06/10 08:34:25 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2011/06/10 08:34:24 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2011/06/10 08:34:21 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2011/06/10 08:34:20 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2011/06/10 08:34:19 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2011/06/10 08:34:10 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2011/06/10 08:34:08 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2011/06/10 08:34:05 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2011/06/10 08:33:58 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2011/06/10 08:33:54 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2011/06/10 08:33:51 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2011/06/10 08:33:46 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2011/06/10 08:33:45 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2011/06/10 08:33:45 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2011/06/10 08:33:42 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2011/06/10 08:33:40 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2011/06/10 08:33:39 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2011/06/10 08:33:38 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2011/06/10 08:33:37 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2011/06/10 08:33:36 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2011/06/10 08:33:35 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2011/06/10 08:33:32 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2011/06/10 08:33:29 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2011/06/10 08:33:26 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2011/06/10 08:33:21 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2011/06/10 08:33:18 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2011/06/10 08:33:15 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2011/06/10 08:33:12 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2011/06/10 08:33:09 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2011/06/10 08:33:08 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2011/06/10 08:33:06 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2011/06/10 08:33:03 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2011/06/10 08:33:00 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2011/06/10 08:32:57 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2011/06/10 08:32:54 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2011/06/10 08:32:51 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2011/06/10 08:32:48 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2011/06/10 08:32:45 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2011/06/10 08:32:42 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2011/06/10 08:32:40 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2011/06/10 08:32:39 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbprint.sys
[2011/06/10 08:32:39 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbohci.sys
[2011/06/10 08:32:38 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2011/06/10 08:32:37 | 000,060,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbaudio.sys
[2011/06/10 08:32:36 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2011/06/10 08:32:32 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2011/06/10 08:32:29 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2011/06/10 08:32:26 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2011/06/10 08:32:23 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2011/06/10 08:32:20 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2011/06/10 08:32:17 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2011/06/10 08:32:15 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2011/06/10 08:32:12 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2011/06/10 08:32:09 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2011/06/10 08:32:06 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2011/06/10 08:32:03 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2011/06/10 08:32:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2011/06/10 08:31:55 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2011/06/10 08:31:52 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2011/06/10 08:31:49 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2011/06/10 08:31:47 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2011/06/10 08:31:44 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2011/06/10 08:31:41 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2011/06/10 08:31:38 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2011/06/10 08:31:35 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2011/06/10 08:31:34 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2011/06/10 08:31:31 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2011/06/10 08:31:28 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2011/06/10 08:31:25 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2011/06/10 08:31:22 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2011/06/10 08:31:19 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2011/06/10 08:31:16 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2011/06/10 08:31:12 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2011/06/10 08:31:09 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2011/06/10 08:31:08 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2011/06/10 08:31:05 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2011/06/10 08:31:02 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2011/06/10 08:30:58 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2011/06/10 08:30:55 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2011/06/10 08:30:52 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2011/06/10 08:30:50 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2011/06/10 08:30:46 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2011/06/10 08:30:43 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2011/06/10 08:30:40 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2011/06/10 08:30:38 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2011/06/10 08:30:35 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2011/06/10 08:30:32 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2011/06/10 08:30:30 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2011/06/10 08:30:27 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2011/06/10 08:30:25 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2011/06/10 08:30:22 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2011/06/10 08:30:19 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2011/06/10 08:30:18 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2011/06/10 08:30:15 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2011/06/10 08:30:13 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2011/06/10 08:30:10 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2011/06/10 08:30:07 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2011/06/10 08:30:03 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2011/06/10 08:30:00 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2011/06/10 08:29:56 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2011/06/10 08:29:53 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2011/06/10 08:29:50 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2011/06/10 08:29:47 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2011/06/10 08:29:45 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2011/06/10 08:29:42 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2011/06/10 08:29:39 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2011/06/10 08:29:37 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2011/06/10 08:29:34 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2011/06/10 08:29:33 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2011/06/10 08:29:30 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2011/06/10 08:29:23 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2011/06/10 08:29:20 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2011/06/10 08:29:18 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2011/06/10 08:29:15 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2011/06/10 08:29:12 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2011/06/10 08:29:10 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2011/06/10 08:29:09 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2011/06/10 08:29:08 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2011/06/10 08:29:05 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2011/06/10 08:29:03 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2011/06/10 08:29:00 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2011/06/10 08:28:57 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2011/06/10 08:28:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2011/06/10 08:28:53 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2011/06/10 08:28:50 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2011/06/10 08:28:47 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2011/06/10 08:28:45 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2011/06/10 08:28:42 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2011/06/10 08:28:41 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2011/06/10 08:28:39 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2011/06/10 08:28:36 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2011/06/10 08:28:34 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2011/06/10 08:28:31 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2011/06/10 08:28:29 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2011/06/10 08:28:26 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2011/06/10 08:28:19 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2011/06/10 08:28:17 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2011/06/10 08:28:14 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2011/06/10 08:28:12 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2011/06/10 08:28:09 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2011/06/10 08:28:06 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2011/06/10 08:28:03 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2011/06/10 08:27:59 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2011/06/10 08:27:59 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2011/06/10 08:27:56 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2011/06/10 08:27:53 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2011/06/10 08:27:50 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2011/06/10 08:27:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2011/06/10 08:27:45 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2011/06/10 08:27:44 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2011/06/10 08:27:41 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2011/06/10 08:27:38 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2011/06/10 08:27:35 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2011/06/10 08:27:33 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2011/06/10 08:27:30 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2011/06/10 08:27:28 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2011/06/10 08:27:25 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2011/06/10 08:27:23 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2011/06/10 08:27:20 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2011/06/10 08:27:18 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2011/06/10 08:27:16 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2011/06/10 08:27:13 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2011/06/10 08:27:11 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2011/06/10 08:27:08 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2011/06/10 08:27:05 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2011/06/10 08:27:04 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2011/06/10 08:27:03 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2011/06/10 08:27:02 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8139.sys
[2011/06/10 08:26:59 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2011/06/10 08:26:57 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2011/06/10 08:26:54 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2011/06/10 08:26:51 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2011/06/10 08:26:49 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2011/06/10 08:26:46 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2011/06/10 08:26:44 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2011/06/10 08:26:37 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2011/06/10 08:26:34 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2011/06/10 08:26:31 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2011/06/10 08:26:29 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2011/06/10 08:26:26 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2011/06/10 08:26:22 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2011/06/10 08:26:19 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2011/06/10 08:26:17 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2011/06/10 08:26:15 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2011/06/10 08:26:12 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2011/06/10 08:26:11 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2011/06/10 08:26:08 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2011/06/10 08:26:06 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2011/06/10 08:26:03 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2011/06/10 08:26:03 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2011/06/10 08:26:00 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2011/06/10 08:25:57 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2011/06/10 08:25:54 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2011/06/10 08:25:51 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2011/06/10 08:25:49 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2011/06/10 08:25:48 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2011/06/10 08:25:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2011/06/10 08:25:41 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2011/06/10 08:25:38 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2011/06/10 08:25:36 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2011/06/10 08:25:33 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2011/06/10 08:25:31 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2011/06/10 08:25:28 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2011/06/10 08:25:26 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2011/06/10 08:25:25 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2011/06/10 08:25:24 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2011/06/10 08:25:24 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2011/06/10 08:25:23 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2011/06/10 08:25:20 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2011/06/10 08:25:18 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2011/06/10 08:25:17 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2011/06/10 08:25:15 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2011/06/10 08:25:12 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2011/06/10 08:25:10 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2011/06/10 08:25:07 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2011/06/10 08:25:05 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2011/06/10 08:25:04 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2011/06/10 08:25:02 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2011/06/10 08:24:57 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2011/06/10 08:24:54 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2011/06/10 08:24:52 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2011/06/10 08:24:50 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2011/06/10 08:24:47 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2011/06/10 08:24:45 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2011/06/10 08:24:42 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2011/06/10 08:24:40 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2011/06/10 08:24:38 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2011/06/10 08:24:35 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2011/06/10 08:24:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2011/06/10 08:24:30 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2011/06/10 08:24:28 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2011/06/10 08:24:26 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2011/06/10 08:24:23 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2011/06/10 08:24:21 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2011/06/10 08:24:17 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2011/06/10 08:24:15 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2011/06/10 08:24:10 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2011/06/10 08:24:07 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2011/06/10 08:24:05 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2011/06/10 08:24:04 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2011/06/10 08:24:01 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2011/06/10 08:23:59 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2011/06/10 08:23:56 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2011/06/10 08:23:55 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2011/06/10 08:23:51 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2011/06/10 08:23:48 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2011/06/10 08:23:46 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2011/06/10 08:23:44 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2011/06/10 08:23:43 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2011/06/10 08:23:42 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2011/06/10 08:23:40 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2011/06/10 08:23:37 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2011/06/10 08:23:35 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2011/06/10 08:23:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2011/06/10 08:23:30 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2011/06/10 08:23:28 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2011/06/10 08:23:26 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2011/06/10 08:23:24 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2011/06/10 08:23:21 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2011/06/10 08:23:19 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2011/06/10 08:23:17 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2011/06/10 08:23:14 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2011/06/10 08:23:12 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2011/06/10 08:23:08 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2011/06/10 08:23:03 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2011/06/10 08:23:03 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2011/06/10 08:22:59 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2011/06/10 08:22:54 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2011/06/10 08:22:53 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2011/06/10 08:22:47 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2011/06/10 08:22:45 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2011/06/10 08:22:44 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2011/06/10 08:22:39 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2011/06/10 08:22:36 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2011/06/10 08:22:32 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2011/06/10 08:22:28 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2011/06/10 08:22:24 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2011/06/10 08:22:22 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2011/06/10 08:22:20 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2011/06/10 08:22:18 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2011/06/10 08:22:16 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2011/06/10 08:22:13 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2011/06/10 08:22:10 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2011/06/10 08:22:07 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2011/06/10 08:22:05 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2011/06/10 08:22:03 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2011/06/10 08:22:00 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2011/06/10 08:22:00 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2011/06/10 08:21:58 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2011/06/10 08:21:55 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2011/06/10 08:21:55 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2011/06/10 08:21:55 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2011/06/10 08:21:53 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2011/06/10 08:21:52 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2011/06/10 08:21:50 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2011/06/10 08:21:47 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2011/06/10 08:21:44 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2011/06/10 08:21:42 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2011/06/10 08:21:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2011/06/10 08:21:38 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2011/06/10 08:21:37 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2011/06/10 08:21:35 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2011/06/10 08:21:33 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2011/06/10 08:21:32 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2011/06/10 08:21:32 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2011/06/10 08:21:32 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2011/06/10 08:21:29 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2011/06/10 08:21:26 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2011/06/10 08:21:26 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2011/06/10 08:21:19 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2011/06/10 08:21:17 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2011/06/10 08:21:14 | 000,014,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhid.sys
[2011/06/10 08:21:09 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2011/06/10 08:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2011/06/10 08:21:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2011/06/10 08:21:03 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2011/06/10 08:20:59 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2011/06/10 08:20:57 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2011/06/10 08:20:57 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2011/06/10 08:20:55 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2011/06/10 08:20:54 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2011/06/10 08:20:54 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2011/06/10 08:20:53 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2011/06/10 08:20:50 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2011/06/10 08:20:48 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2011/06/10 08:20:46 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2011/06/10 08:20:45 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2011/06/10 08:20:43 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2011/06/10 08:20:41 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2011/06/10 08:20:25 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2011/06/10 08:20:23 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2011/06/10 08:20:21 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2011/06/10 08:20:19 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2011/06/10 08:20:17 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2011/06/10 08:20:15 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2011/06/10 08:20:13 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2011/06/10 08:20:11 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2011/06/10 08:20:09 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2011/06/10 08:20:07 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2011/06/10 08:20:05 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2011/06/10 08:20:03 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2011/06/10 08:20:01 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2011/06/10 08:19:59 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2011/06/10 08:19:58 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2011/06/10 08:19:58 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2011/06/10 08:19:56 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2011/06/10 08:19:54 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2011/06/10 08:19:53 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2011/06/10 08:19:53 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2011/06/10 08:19:33 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2011/06/10 08:19:31 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2011/06/10 08:19:29 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2011/06/10 08:19:27 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2011/06/10 08:19:25 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2011/06/10 08:19:23 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2011/06/10 08:19:21 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2011/06/10 08:19:19 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2011/06/10 08:19:17 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2011/06/10 08:19:16 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2011/06/10 08:19:14 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2011/06/10 08:19:12 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2011/06/10 08:19:10 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2011/06/10 08:19:07 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2011/06/10 08:19:06 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2011/06/10 08:19:04 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2011/06/10 08:19:02 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2011/06/10 08:19:00 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2011/06/10 08:18:58 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2011/06/10 08:18:56 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2011/06/10 08:18:53 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2011/06/10 08:18:49 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2011/06/10 08:18:45 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2011/06/10 08:18:42 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2011/06/10 08:18:38 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2011/06/10 08:18:36 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2011/06/10 08:18:35 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidserv.dll
[2011/06/10 08:18:34 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2011/06/10 08:18:33 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2011/06/10 08:18:31 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2011/06/10 08:18:29 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2011/06/10 08:18:28 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2011/06/10 08:18:26 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2011/06/10 08:18:24 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2011/06/10 08:18:24 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2011/06/10 08:18:22 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2011/06/10 08:18:21 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2011/06/10 08:18:19 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2011/06/10 08:18:17 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2011/06/10 08:18:16 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2011/06/10 08:18:10 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2011/06/10 08:18:09 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2011/06/10 08:18:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2011/06/10 08:18:04 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2011/06/10 08:18:02 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2011/06/10 08:18:01 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2011/06/10 08:18:00 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2011/06/10 08:17:58 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2011/06/10 08:17:56 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2011/06/10 08:17:52 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2011/06/10 08:17:49 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2011/06/10 08:17:48 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2011/06/10 08:17:46 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2011/06/10 08:17:45 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2011/06/10 08:17:43 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2011/06/10 08:17:41 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2011/06/10 08:17:38 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2011/06/10 08:17:37 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2011/06/10 08:17:35 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2011/06/10 08:17:33 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2011/06/10 08:17:33 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2011/06/10 08:17:31 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2011/06/10 08:17:30 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2011/06/10 08:17:28 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2011/06/10 08:17:27 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2011/06/10 08:17:25 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2011/06/10 08:17:24 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2011/06/10 08:17:22 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2011/06/10 08:17:21 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2011/06/10 08:17:19 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2011/06/10 08:17:18 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2011/06/10 08:17:16 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2011/06/10 08:17:15 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2011/06/10 08:17:13 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2011/06/10 08:17:12 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2011/06/10 08:17:11 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2011/06/10 08:17:10 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2011/06/10 08:17:09 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2011/06/10 08:17:05 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2011/06/10 08:17:04 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2011/06/10 08:17:03 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2011/06/10 08:17:02 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2011/06/10 08:17:01 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2011/06/10 08:17:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2011/06/10 08:16:59 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2011/06/10 08:16:58 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2011/06/10 08:16:57 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2011/06/10 08:16:56 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2011/06/10 08:16:55 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2011/06/10 08:16:54 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2011/06/10 08:16:53 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2011/06/10 08:16:52 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2011/06/10 08:16:51 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2011/06/10 08:16:50 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2011/06/10 08:16:49 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2011/06/10 08:16:47 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2011/06/10 08:16:46 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2011/06/10 08:16:45 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2011/06/10 08:16:43 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2011/06/10 08:16:42 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2011/06/10 08:16:40 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2011/06/10 08:16:39 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2011/06/10 08:16:38 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2011/06/10 08:16:37 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2011/06/10 08:16:36 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2011/06/10 08:16:36 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2011/06/10 08:16:33 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2011/06/10 08:16:33 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2011/06/10 08:16:32 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2011/06/10 08:16:31 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2011/06/10 08:16:28 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2011/06/10 08:16:27 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2011/06/10 08:16:26 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2011/06/10 08:16:25 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2011/06/10 08:16:24 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2011/06/10 08:16:23 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2011/06/10 08:16:22 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2011/06/10 08:16:21 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2011/06/10 08:16:20 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2011/06/10 08:16:19 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2011/06/10 08:16:18 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2011/06/10 08:16:17 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2011/06/10 08:16:17 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2011/06/10 08:16:16 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2011/06/10 08:16:15 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2011/06/10 08:16:14 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2011/06/10 08:16:13 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2011/06/10 08:16:12 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2011/06/10 08:16:11 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2011/06/10 08:16:10 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2011/06/10 08:16:09 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2011/06/10 08:16:08 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2011/06/10 08:16:07 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2011/06/10 08:16:06 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2011/06/10 08:16:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2011/06/10 08:16:04 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2011/06/10 08:16:03 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2011/06/10 08:16:02 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2011/06/10 08:16:01 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2011/06/10 08:16:00 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2011/06/10 08:16:00 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2011/06/10 08:15:58 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2011/06/10 08:15:57 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2011/06/10 08:15:55 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2011/06/10 08:15:55 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2011/06/10 08:15:54 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2011/06/10 08:15:53 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2011/06/10 08:15:52 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2011/06/10 08:15:51 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2011/06/10 08:15:50 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2011/06/10 08:15:49 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2011/06/10 08:15:49 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2011/06/10 08:15:48 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2011/06/10 08:15:47 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2011/06/10 08:15:47 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2011/06/10 08:15:46 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2011/06/10 08:15:45 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2011/06/10 08:15:44 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2011/06/10 08:15:43 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2011/06/10 08:15:42 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2011/06/10 08:15:42 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2011/06/10 08:15:41 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2011/06/10 08:15:40 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2011/06/10 08:15:39 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2011/06/10 08:15:38 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2011/06/10 08:15:37 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2011/06/10 08:15:37 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2011/06/10 08:15:36 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2011/06/10 08:15:35 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2011/06/10 08:15:34 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2011/06/10 08:15:31 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2011/06/10 08:15:30 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2011/06/10 08:15:29 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2011/06/10 08:15:28 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2011/06/10 08:15:27 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2011/06/10 08:15:27 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2011/06/10 08:15:26 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2011/06/10 08:15:25 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2011/06/10 08:15:25 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2011/06/10 08:15:24 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2011/06/10 08:15:24 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2011/06/10 08:15:22 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2011/06/10 08:15:21 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2011/06/10 08:15:17 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2011/06/10 08:15:16 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2011/06/10 08:15:15 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2011/06/10 08:15:15 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2011/06/10 08:15:14 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2011/06/10 08:15:14 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2011/06/10 08:15:12 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2011/06/10 08:15:12 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2011/06/10 08:15:11 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2011/06/10 08:15:11 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2011/06/10 08:15:10 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2011/06/10 08:15:10 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2011/06/10 08:15:09 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2011/06/10 08:15:08 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2011/06/10 08:15:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2011/06/10 08:15:06 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2011/06/10 08:15:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2011/06/10 08:15:05 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2011/06/10 08:15:05 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2011/06/10 08:15:04 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2011/06/10 08:15:04 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2011/06/10 08:15:03 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2011/06/10 08:15:03 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2011/06/10 08:14:45 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2011/06/10 08:14:44 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2011/06/10 08:14:43 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2011/06/10 08:14:43 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2011/06/10 08:14:42 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2011/06/10 08:14:42 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2011/06/10 08:14:41 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2011/06/10 08:14:41 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2011/06/10 08:14:40 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2011/06/10 08:14:39 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2011/06/10 08:14:39 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2011/06/10 08:14:38 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2011/06/10 08:14:38 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2011/06/10 08:14:37 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2011/06/10 08:14:37 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2011/06/10 08:14:36 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2011/06/10 08:14:36 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2011/06/10 08:14:35 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2011/06/10 08:14:35 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2011/06/10 08:14:35 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2011/06/10 08:14:33 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2011/06/10 08:14:33 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2011/06/10 08:14:33 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2011/06/10 08:14:32 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2011/06/10 08:14:32 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2011/06/10 08:14:31 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2011/06/10 08:14:31 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2011/06/10 08:14:30 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2011/06/10 08:14:30 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2011/06/10 08:14:29 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2011/06/10 08:14:29 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2011/06/10 08:14:29 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2011/06/10 08:14:28 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2011/06/10 08:14:28 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2011/06/10 08:14:27 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2011/06/10 08:14:27 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2011/06/10 08:14:26 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2011/06/10 08:14:26 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2011/06/10 08:14:25 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2011/06/10 08:14:20 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2011/06/10 08:14:20 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2011/06/10 08:14:19 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2011/06/10 08:14:18 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2011/06/10 08:14:18 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2011/06/10 08:14:17 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2011/06/10 08:14:17 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2011/06/10 08:14:17 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2011/06/10 08:14:16 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2011/06/10 08:14:15 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2011/06/10 08:14:14 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2011/06/10 08:14:13 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2011/06/10 08:14:12 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2011/06/10 08:14:12 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2011/06/10 08:14:11 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2011/06/10 08:14:10 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2011/06/10 08:14:10 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2011/06/10 08:14:09 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2011/06/10 08:14:09 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2011/06/10 08:14:08 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2011/06/10 08:14:08 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2011/06/10 08:14:08 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2011/06/10 08:14:07 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2011/06/10 08:14:07 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2011/06/10 08:14:07 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2011/06/10 08:14:05 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2011/06/10 08:14:03 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2011/06/10 08:14:02 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2011/06/10 08:14:01 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2011/06/10 08:14:00 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2011/06/10 08:14:00 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2011/06/10 08:14:00 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2011/06/10 08:13:59 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2011/06/10 08:13:59 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2011/06/10 08:13:58 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2011/06/10 08:13:58 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2011/06/10 08:13:58 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2011/06/10 08:13:57 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2011/06/10 08:13:57 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2011/06/10 08:13:57 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2011/06/10 08:13:57 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2011/06/10 08:13:56 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2011/06/10 08:13:56 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2011/06/10 08:13:56 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2011/06/10 08:13:56 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2011/06/10 08:13:55 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2011/06/10 08:13:55 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2011/06/10 08:13:55 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2011/06/10 08:13:55 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2011/06/10 08:13:54 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2011/06/10 08:13:38 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2011/06/08 13:42:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\UltraVNC
[2011/06/08 13:42:13 | 000,000,000 | —D | C] – C:\Program Files\UltraVNC
[2011/06/08 13:32:00 | 000,000,000 | —D | C] – C:\Temp
[2011/06/08 13:28:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2011/06/08 13:28:49 | 000,073,728 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/06/08 13:28:48 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/06/08 13:28:48 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/06/08 13:28:48 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/06/08 13:28:48 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/06/08 13:28:31 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/06/07 14:53:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\ESET
[2011/06/07 14:53:50 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2011/06/07 14:53:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\ESET
[2011/06/07 14:39:25 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2011/06/07 10:23:20 | 000,000,000 | —D | C] – C:\ComboFix
[2011/06/06 10:46:05 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2011/06/06 09:39:34 | 000,012,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mouhid.sys
[2011/06/06 09:39:06 | 000,010,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidusb.sys
[2011/05/27 14:30:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2011/05/27 13:45:54 | 000,000,000 | —D | C] – C:\Documents and Settings\ldegroff\Application Data\Malwarebytes
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/06/15 20:15:25 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\ldegroff\Desktop\OTL.exe
[2011/06/15 19:27:32 | 000,000,912 | —- | M] () – C:\WINDOWS\System32\drivers\kgpfr2.cfg
[2011/06/15 19:18:11 | 000,000,576 | —- | M] () – C:\WINDOWS\System32\drivers\kgpcpy.cfg
[2011/06/15 17:53:41 | 001,305,136 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\tdsskiller.zip
[2011/06/15 17:50:48 | 000,071,398 | —- | M] (jpshortstuff) – C:\Documents and Settings\ldegroff\Desktop\GooredFix.exe
[2011/06/15 17:39:40 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
[2011/06/15 17:37:08 | 000,000,742 | —- | M] () – C:\Documents and Settings\ldegroff\Start Menu\Programs\Startup\Adobe Media Player.lnk
[2011/06/15 17:36:13 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/06/15 17:25:25 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/06/14 19:39:44 | 000,497,946 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/06/14 19:39:44 | 000,086,088 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/06/14 19:37:41 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/06/14 18:22:55 | 000,119,808 | —- | M] (Atribune.org) – C:\Documents and Settings\ldegroff\Desktop\VundoFix.exe
[2011/06/13 20:31:40 | 000,509,440 | —- | M] (iS3, Inc.) – C:\Documents and Settings\ldegroff\Desktop\STOPzilla_Setup.exe
[2011/06/13 18:31:38 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2011/06/12 15:58:38 | 000,132,560 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3HTUI5.dll
[2011/06/12 15:58:38 | 000,022,992 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\SZIO5.dll
[2011/06/12 15:58:36 | 000,546,256 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\SZComp5.dll
[2011/06/12 15:58:36 | 000,456,144 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\SZBase5.dll
[2011/06/12 15:58:36 | 000,398,800 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3DBA5.dll
[2011/06/12 15:58:36 | 000,067,024 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Hks5.dll
[2011/06/12 15:58:36 | 000,028,624 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3XDat5.dll
[2011/06/12 15:58:34 | 000,390,608 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3UI5.dll
[2011/06/12 15:58:34 | 000,230,864 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Win325.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Svc5.dll
[2011/06/12 15:58:34 | 000,099,792 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Inet5.dll
[2011/06/12 15:58:32 | 000,738,768 | R— | M] (iS3, Inc.) – C:\WINDOWS\System32\IS3Base5.dll
[2011/06/09 03:11:48 | 000,000,000 | —- | M] () – C:\WINDOWS\System32\client.db
[2011/06/08 13:28:36 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/06/08 13:28:36 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/06/08 13:28:36 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/06/08 13:28:36 | 000,073,728 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/06/08 13:28:35 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/06/08 13:25:39 | 000,000,819 | —- | M] () – C:\WINDOWS\ODBC.INI
[2011/06/07 14:44:15 | 000,002,657 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Online Check Deposit.lnk
[2011/05/29 09:11:30 | 000,039,984 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/05/29 09:11:20 | 000,022,712 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2011/05/26 16:05:17 | 001,712,024 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\PAYROLL CHANGE NOTICE-Lifestyle.FDD
[2011/05/26 08:42:18 | 000,165,757 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\Enrollment Form.pdf
[2011/05/25 10:26:02 | 001,712,288 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\Payroll Change Notice-Inc.FDD
[2011/05/19 14:07:50 | 000,008,957 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\FMLA Report.pdf
[2011/05/17 09:45:09 | 000,002,383 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\Crystal Reports 11.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/06/15 19:27:32 | 000,000,912 | —- | C] () – C:\WINDOWS\System32\drivers\kgpfr2.cfg
[2011/06/15 17:53:41 | 001,305,136 | —- | C] () – C:\Documents and Settings\ldegroff\Desktop\tdsskiller.zip
[2011/06/15 17:29:57 | 000,000,576 | —- | C] () – C:\WINDOWS\System32\drivers\kgpcpy.cfg
[2011/06/13 22:36:11 | 000,000,742 | —- | C] () – C:\Documents and Settings\ldegroff\Start Menu\Programs\Startup\Adobe Media Player.lnk
[2011/06/10 08:34:46 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2011/06/10 08:34:43 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2011/06/10 08:25:59 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2011/06/10 08:25:56 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2011/06/10 08:22:44 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2011/06/10 08:18:55 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2011/06/10 08:18:51 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2011/06/10 08:18:47 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2011/06/10 08:18:44 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2011/06/10 08:18:40 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2011/06/10 08:16:30 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2011/06/10 08:16:29 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2011/06/10 08:16:29 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2011/06/10 08:14:23 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2011/06/10 08:14:23 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2011/06/10 08:14:22 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2011/06/10 08:14:22 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2011/06/10 08:14:21 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2011/06/10 08:14:21 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2011/06/10 08:14:21 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2011/06/10 08:14:20 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2011/06/10 08:14:19 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2011/06/10 08:14:16 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2011/06/09 03:11:48 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\client.db
[2011/06/07 10:23:39 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2011/06/07 10:23:39 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2011/06/07 10:23:39 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2011/05/26 08:42:18 | 000,165,757 | —- | C] () – C:\Documents and Settings\ldegroff\Desktop\Enrollment Form.pdf
[2011/05/18 16:06:22 | 001,712,024 | —- | C] () – C:\Documents and Settings\ldegroff\Desktop\PAYROLL CHANGE NOTICE-Lifestyle.FDD
[2011/01/06 10:51:56 | 000,016,968 | —- | C] () – C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2010/05/13 08:53:11 | 000,014,290 | —- | C] () – C:\Program Files\settings.dat
[2009/06/23 09:57:57 | 000,475,136 | —- | C] () – C:\WINDOWS\System32\LM_A6D.dll
[2009/06/23 09:55:56 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\A6DCOM.dll
[2009/06/23 09:55:56 | 000,052,224 | —- | C] () – C:\WINDOWS\System32\A6D2USD.dll
[2009/04/28 08:12:31 | 000,013,029 | —- | C] () – C:\Documents and Settings\ldegroff\Application Data\Microsoft Excel.CAL
[2008/09/30 16:11:39 | 000,000,075 | —- | C] () – C:\WINDOWS\contain.INI
[2008/05/02 11:24:44 | 000,004,608 | —- | C] () – C:\Documents and Settings\ldegroff\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/02/06 11:56:22 | 000,000,135 | —- | C] () – C:\WINDOWS\GpsProd.ini
[2008/02/02 17:11:11 | 001,488,580 | —- | C] () – C:\WINDOWS\System32\OpenSshPackage.EXE
[2008/02/02 17:11:11 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\DARMConfig.exe
[2008/01/13 16:31:10 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2008/01/13 15:23:54 | 000,000,819 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/01/13 14:59:42 | 000,049,152 | R— | C] () – C:\WINDOWS\System32\ChCfg.exe
[2008/01/13 14:56:12 | 000,204,800 | R— | C] () – C:\WINDOWS\System32\igfxCoIn_v4785.dll
[2008/01/13 14:46:11 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2008/01/13 14:42:21 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2008/01/13 09:36:50 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2008/01/13 09:35:56 | 000,196,960 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2007/07/12 16:51:04 | 000,319,384 | —- | C] () – C:\WINDOWS\System32\drivers\TS230Firmware.bin
[2007/07/12 16:50:34 | 000,319,560 | —- | C] () – C:\WINDOWS\System32\drivers\TS440Firmware.bin
[2006/02/06 11:29:40 | 000,095,145 | —- | C] () – C:\WINDOWS\System32\drivers\TS220Firmware.bin
[2004/08/04 08:00:00 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2004/08/04 08:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/04 08:00:00 | 000,497,946 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004/08/04 08:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/04 08:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/04 08:00:00 | 000,086,088 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004/08/04 08:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/04 08:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/04 08:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/04 08:00:00 | 000,004,463 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004/08/04 08:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2004/08/04 08:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2003/01/07 16:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2002/02/27 10:41:28 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\nsldappr32v50.dll
[2002/02/27 10:41:26 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\nsldap32v50.dll
[2002/02/27 10:41:26 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\nsldapssl32v50.dll
[2000/06/13 13:18:18 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\mdexlib.dll
========== LOP Check ==========
[2009/06/23 11:57:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alogent
[2009/06/22 09:58:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Applications
[2011/06/07 14:53:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ESET
[2011/01/06 10:51:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Hitman Pro
[2008/01/13 15:47:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LightScribe
[2009/06/23 11:57:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nap
[2011/06/15 20:15:14 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2010/07/20 11:17:32 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{E45F96DF-A6AC-40E7-B69D-957A1DF7F263}
[2009/03/04 16:59:02 | 000,000,000 | —D | M] – C:\Documents and Settings\ldegroff\Application Data\Panasonic
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2008/02/02 17:11:17 | 000,001,024 | —- | M] () – C:\.rnd
[2008/01/13 14:44:34 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2008/02/02 16:49:16 | 000,000,211 | —- | M] () – C:\Boot.bak
[2011/06/13 18:31:38 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2004/08/04 00:00:00 | 000,260,272 | RHS- | M] () – C:\cmldr
[2011/06/07 10:31:07 | 000,111,022 | —- | M] () – C:\ComboFix.txt
[2008/01/13 14:44:34 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2008/09/01 11:29:24 | 000,061,433 | R— | M] () – C:\inoc6.icf
[2008/01/13 14:44:34 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2008/01/13 14:57:42 | 000,000,197 | —- | M] () – C:\lan.log
[2008/01/13 14:44:34 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/06/08 13:40:00 | 005,044,352 | —- | M] () – C:\n-able-net4-install.log-MSI_netfx_Core_x86.msi.txt
[2011/06/08 13:41:03 | 002,106,264 | —- | M] () – C:\n-able-net4-install.log-MSI_netfx_Extended_x86.msi.txt
[2004/08/04 08:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/12/18 17:06:57 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/06/15 17:25:23 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2008/01/13 14:59:45 | 000,000,206 | —- | M] () – C:\realtek.log
[2008/01/13 14:59:45 | 000,000,575 | —- | M] () – C:\RHDSetup.log
[2005/07/18 13:34:46 | 005,037,072 | —- | M] (Safer Networking Limited ) – C:\spybotsd14.exe
[2011/06/15 17:55:49 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_17.54.53_log.txt
[2011/06/15 17:58:04 | 000,065,120 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_17.55.59_log.txt
[2011/06/15 17:58:30 | 000,002,148 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_17.58.18_log.txt
[2011/06/15 19:28:33 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.28.04_log.txt
[2011/06/15 19:35:02 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.34.36_log.txt
[2011/06/15 19:36:41 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.36.07_log.txt
[2011/06/15 19:47:28 | 000,033,448 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.46.37_log.txt
[2011/06/15 19:49:48 | 000,034,852 | —- | M] () – C:\TDSSKiller.2.5.4.0_15.06.2011_19.48.33_log.txt
[2011/06/14 18:50:48 | 000,000,136 | —- | M] () – C:\VundoFix.txt
< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2008/01/13 14:44:16 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/04/04 21:01:40 | 000,272,896 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpcpp5r1.DLL
[2009/03/13 20:30:56 | 000,081,240 | —- | M] (Microsoft Corporation.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\lmdippr8.dll
[2003/06/18 18:31:48 | 000,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 06:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2010/05/13 08:53:11 | 000,014,290 | —- | M] () – C:\Program Files\settings.dat
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/01/13 09:35:01 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2008/01/13 09:35:01 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2008/01/13 09:35:01 | 000,888,832 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/12/18 17:12:06 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
[2011/06/09 03:11:48 | 000,000,000 | —- | M] () – C:\WINDOWS\system32\client.db
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/12/19 08:09:19 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\ldegroff\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2008/04/28 16:14:49 | 000,000,079 | —- | M] () – C:\Documents and Settings\ldegroff\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2011/06/15 17:50:48 | 000,071,398 | —- | M] (jpshortstuff) – C:\Documents and Settings\ldegroff\Desktop\GooredFix.exe
[2011/06/15 17:39:40 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\ldegroff\Desktop\HiJackThis.exe
[2009/06/23 09:49:15 | 034,402,788 | —- | M] () – C:\Documents and Settings\ldegroff\Desktop\OnlineCheckDeposit6.3.exe
[2011/06/15 20:15:25 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\ldegroff\Desktop\OTL.exe
[2011/06/13 20:31:40 | 000,509,440 | —- | M] (iS3, Inc.) – C:\Documents and Settings\ldegroff\Desktop\STOPzilla_Setup.exe
[2011/06/14 18:22:55 | 000,119,808 | —- | M] (Atribune.org) – C:\Documents and Settings\ldegroff\Desktop\VundoFix.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-06-09 07:05:31
< End of report >
OTL Extras logfile created on: 6/15/2011 8:18:02 PM - Run 1
OTL by OldTimer - Version 3.2.24.0 Folder = C:\Documents and Settings\ldegroff\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 0.72 Gb Available Physical Memory | 36.03% Memory free
3.84 Gb Paging File | 3.12 Gb Available in Paging File | 81.30% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149.05 Gb Total Space | 126.73 Gb Free Space | 85.02% Space Free | Partition Type: NTFS
Computer Name: GOODWILL058 | User Name: ldegroff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.exe [@ = exefile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings]
"Enabled" = 1
"RemoteAddresses" = *
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services
"3246:TCP" = 3246:TCP:*:Enabled:Services
"2479:TCP" = 2479:TCP:*:Enabled:Services
"9698:TCP" = 9698:TCP:*:Enabled:Services
"9699:TCP" = 9699:TCP:*:Enabled:Services
"4208:TCP" = 4208:TCP:*:Enabled:Services
"6916:TCP" = 6916:TCP:*:Enabled:Services
"80:TCP" = 80:TCP:*:Enabled:Services
"443:TCP" = 443:TCP:*:Enabled:Services
"7207:TCP" = 7207:TCP:*:Enabled:Services
"7208:TCP" = 7208:TCP:*:Enabled:Services
"1526:TCP" = 1526:TCP:*:Enabled:Services
"1552:TCP" = 1552:TCP:*:Enabled:Services
"8942:TCP" = 8942:TCP:*:Enabled:Services
"1567:TCP" = 1567:TCP:*:Enabled:Services
"6036:TCP" = 6036:TCP:*:Enabled:Services
"7755:TCP" = 7755:TCP:*:Enabled:Services
"6546:TCP" = 6546:TCP:*:Enabled:Services
"6145:TCP" = 6145:TCP:*:Enabled:Services
"2911:TCP" = 2911:TCP:*:Enabled:Services
"3255:TCP" = 3255:TCP:*:Enabled:Services
"3911:TCP" = 3911:TCP:*:Enabled:Services
"5645:TCP" = 5645:TCP:*:Enabled:Services
"5240:TCP" = 5240:TCP:*:Enabled:Services
"1598:TCP" = 1598:TCP:*:Enabled:Services
"2942:TCP" = 2942:TCP:*:Enabled:Services
"8707:TCP" = 8707:TCP:*:Enabled:Services
"7536:TCP" = 7536:TCP:*:Enabled:Services
"4692:TCP" = 4692:TCP:*:Enabled:Services
"4348:TCP" = 4348:TCP:*:Enabled:Services
"5880:TCP" = 5880:TCP:*:Enabled:Services
"6474:TCP" = 6474:TCP:*:Enabled:Services
"2317:TCP" = 2317:TCP:*:Enabled:Services
"4598:TCP" = 4598:TCP:*:Enabled:Services
"9675:TCP" = 9675:TCP:*:Enabled:Services
"1551:TCP" = 1551:TCP:*:Enabled:Services
"3473:TCP" = 3473:TCP:*:Enabled:Services
"9629:TCP" = 9629:TCP:*:Enabled:Services
"2146:TCP" = 2146:TCP:*:Enabled:Services
"5130:TCP" = 5130:TCP:*:Enabled:Services
"4083:TCP" = 4083:TCP:*:Enabled:Services
"9223:TCP" = 9223:TCP:*:Enabled:Services
"8926:TCP" = 8926:TCP:*:Enabled:Services
"4271:TCP" = 4271:TCP:*:Enabled:Services
"5567:TCP" = 5567:TCP:*:Enabled:Services
"7286:TCP" = 7286:TCP:*:Enabled:Services
"5834:TCP" = 5834:TCP:*:Enabled:Services
"7770:TCP" = 7770:TCP:*:Enabled:Services
"1989:TCP" = 1989:TCP:*:Enabled:Services
"5676:TCP" = 5676:TCP:*:Enabled:Services
"5817:TCP" = 5817:TCP:*:Enabled:Services
"3551:TCP" = 3551:TCP:*:Enabled:Services
"9333:TCP" = 9333:TCP:*:Enabled:Services
"3275:TCP" = 3275:TCP:*:Enabled:Services
"4973:TCP" = 4973:TCP:*:Enabled:Services
"3723:TCP" = 3723:TCP:*:Enabled:Services
"2973:TCP" = 2973:TCP:*:Enabled:Services
"1848:TCP" = 1848:TCP:*:Enabled:Services
"2415:TCP" = 2415:TCP:*:Enabled:Services
"6581:TCP" = 6581:TCP:*:Enabled:Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services
"3246:TCP" = 3246:TCP:*:Enabled:Services
"2479:TCP" = 2479:TCP:*:Enabled:Services
"9699:TCP" = 9699:TCP:*:Enabled:Services
"9698:TCP" = 9698:TCP:*:Enabled:Services
"4208:TCP" = 4208:TCP:*:Enabled:Services
"6916:TCP" = 6916:TCP:*:Enabled:Services
"7207:TCP" = 7207:TCP:*:Enabled:Services
"7208:TCP" = 7208:TCP:*:Enabled:Services
"1526:TCP" = 1526:TCP:*:Enabled:Services
"1552:TCP" = 1552:TCP:*:Enabled:Services
"8942:TCP" = 8942:TCP:*:Enabled:Services
"1567:TCP" = 1567:TCP:*:Enabled:Services
"6036:TCP" = 6036:TCP:*:Enabled:Services
"7755:TCP" = 7755:TCP:*:Enabled:Services
"6546:TCP" = 6546:TCP:*:Enabled:Services
"6145:TCP" = 6145:TCP:*:Enabled:Services
"2911:TCP" = 2911:TCP:*:Enabled:Services
"3255:TCP" = 3255:TCP:*:Enabled:Services
"3911:TCP" = 3911:TCP:*:Enabled:Services
"5645:TCP" = 5645:TCP:*:Enabled:Services
"5240:TCP" = 5240:TCP:*:Enabled:Services
"1598:TCP" = 1598:TCP:*:Enabled:Services
"2942:TCP" = 2942:TCP:*:Enabled:Services
"8707:TCP" = 8707:TCP:*:Enabled:Services
"7536:TCP" = 7536:TCP:*:Enabled:Services
"4692:TCP" = 4692:TCP:*:Enabled:Services
"4348:TCP" = 4348:TCP:*:Enabled:Services
"5880:TCP" = 5880:TCP:*:Enabled:Services
"6474:TCP" = 6474:TCP:*:Enabled:Services
"2317:TCP" = 2317:TCP:*:Enabled:Services
"4598:TCP" = 4598:TCP:*:Enabled:Services
"9675:TCP" = 9675:TCP:*:Enabled:Services
"1551:TCP" = 1551:TCP:*:Enabled:Services
"3473:TCP" = 3473:TCP:*:Enabled:Services
"9629:TCP" = 9629:TCP:*:Enabled:Services
"2146:TCP" = 2146:TCP:*:Enabled:Services
"5130:TCP" = 5130:TCP:*:Enabled:Services
"4083:TCP" = 4083:TCP:*:Enabled:Services
"9223:TCP" = 9223:TCP:*:Enabled:Services
"8926:TCP" = 8926:TCP:*:Enabled:Services
"4271:TCP" = 4271:TCP:*:Enabled:Services
"5567:TCP" = 5567:TCP:*:Enabled:Services
"7286:TCP" = 7286:TCP:*:Enabled:Services
"5834:TCP" = 5834:TCP:*:Enabled:Services
"7770:TCP" = 7770:TCP:*:Enabled:Services
"1989:TCP" = 1989:TCP:*:Enabled:Services
"5676:TCP" = 5676:TCP:*:Enabled:Services
"5817:TCP" = 5817:TCP:*:Enabled:Services
"3551:TCP" = 3551:TCP:*:Enabled:Services
"9333:TCP" = 9333:TCP:*:Enabled:Services
"3275:TCP" = 3275:TCP:*:Enabled:Services
"4973:TCP" = 4973:TCP:*:Enabled:Services
"3723:TCP" = 3723:TCP:*:Enabled:Services
"2973:TCP" = 2973:TCP:*:Enabled:Services
"1848:TCP" = 1848:TCP:*:Enabled:Services
"2415:TCP" = 2415:TCP:*:Enabled:Services
"6581:TCP" = 6581:TCP:*:Enabled:Services
"5900:TCP" = 5900:TCP:*:Enabled:vnc5900
"5800:TCP" = 5800:TCP:*:Enabled:vnc5800
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\WINDOWS\instsrv.exe" = C:\WINDOWS\instsrv.exe:*:Enabled:eTrust Antivirus Remote Installation Program
"C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe" = C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe:*:Enabled:Microsoft Office Live Meeting 2007 – (Microsoft Corporation)
"C:\Program Files\CA\eTrustITM\InoRpc.exe" = C:\Program Files\CA\eTrustITM\InoRpc.exe:*:Enabled:eTrust ITM - RPC Service
"C:\Program Files\CA\eTrustITM\Realmon.exe" = C:\Program Files\CA\eTrustITM\Realmon.exe:*:Enabled:eTrust ITM - Realtime monitor
"C:\Program Files\CA\eTrustITM\Shellscn.exe" = C:\Program Files\CA\eTrustITM\Shellscn.exe:*:Enabled:eTrust ITM - Shell Scanner
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe" = C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe:*:Enabled:Microsoft Office Live Meeting 2007 – (Microsoft Corporation)
"C:\Program Files\UltraVNC\vncviewer.exe" = C:\Program Files\UltraVNC\vncviewer.exe:*:Enabled:vncviewer.exe – (UltraVNC)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{05F5C83E-F33A-4EB9-8A71-7B477BF7DCA3}" = Learn.com CoursePlayer
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D13442D-BD71-4ADF-A71B-8B48C6A9558C}" = FMLA Manager II
"{1FEB495E-51AA-477C-BF43-62D96A7C8D8C}" = Microsoft Business Solutions-Great Plains Watson
"{2515BF88-E42E-4AFA-A8E7-DF272762589B}" = Microsoft Office Live Meeting 2007
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java™ 6 Update 26
"{2E56775F-12A6-44CB-A969-3C2CEB371313}" = Dexterity Shared Components 10.0
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50762AB3-EB19-41BE-A2E6-23771A579267}" = TellerScan Driver v2.3 Certified
"{50A0893D-47D8-48E0-A7E8-44BCD7E4422E}" = Microsoft SQL Server Native Client
"{5C74694C-A687-E3EB-FF18-B018D4A76ECD}" = Adobe Media Player
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6BE38376-FEB4-41D1-B69B-4C5796A5DD08}" = Microsoft Visual C++ 2005 Redistributable Components
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7505DE9C-4E85-4636-82F0-50F38077B900}" = Crystal Reports 11
"{795A3A1E-E06A-4214-A2EF-3DDF3BA05C2B}" = STOPzilla
"{896DCCC7-9749-4DD6-BAEF-49F9A9CEE295}" = Microsoft Dynamics GP 10.0
"{896DCCC7-9749-4DD6-BAEF-49F9A9CEE295}_Ex" = Microsoft Dynamics GP 10.0
"{8BED6A90-E6EB-11D2-AA54-0008C7408A5A}" = VBA (2720)
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{91710409-8000-11D3-8CFE-0150048383C9}" = Microsoft Application Error Reporting
"{9C4BE388-1F60-445C-BB69-20561B389D5B}" = CheckNique - Duplex Image MICR
"{9DE3F260-B88E-42CE-90E7-73C78C37D95E}" = 32 Bit HP BiDi Channel Components Installer
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A66242A1-9101-425D-9BE5-D19A50E1D0D8}" = ESET NOD32 Antivirus
"{AC76BA86-7AD7-1033-7B44-A81200000003}" = Adobe Reader 8.1.2
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BCE7CE69-91C6-479D-AACC-17E9DCC8E566}" = Mekorma MICR 10.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C6A69250-9C40-4235-BDB7-C25DFD3FD147}" = Windows Agent
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D9B4D7EE-481C-4C36-86AB-A8F7417725FF}" = LightScribe 1.6.43.1
"{D9D937B0-E842-4130-9588-B948E876904A}" = Microsoft SQL Server 2008 Native Client
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F54A5E01-9C57-4C09-ADC1-222BBB8B4142}" = Online Check Deposit
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"{FE820A0F-E7A4-412A-85B1-795309CDAAF0}" = FMLA Manager II
"69BD4AA45E9C862327EF05CEA66E45DE7DAF7F15" = Windows Driver Package - Digital Check Corporation (TSUSB2) USB (01/08/2007 1.10.0000)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"B61DBB3FD701FD725BC43B299669B773057E30E0" = Windows Driver Package - CTS Electronics, Inc (LS100UD) USB (07/18/2007 01.00.00.02)
"Fixed Asset Management for Great Plains 8.00" = Fixed Asset Management for Great Plains 8.00
"FormDocs" = FormDocs 6.5
"Great Plains 8.0" = Microsoft Business Solutions-Great Plains 8.0
"HDMI" = Intel® Graphics Media Accelerator Driver
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{0D13442D-BD71-4ADF-A71B-8B48C6A9558C}" = FMLA Manager II
"InstallShield_{FE820A0F-E7A4-412A-85B1-795309CDAAF0}" = FMLA Manager II
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Mekorma MICR 10.0" = Mekorma MICR 10.0
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Business Solutions Human Resources for Great Plains 8.0" = Microsoft Business Solutions Human Resources for Great Plains 8.0
"Microsoft Great Plains Package Loader" = Microsoft Great Plains Package Loader 8.00
"N-able Technologies Inc. OpenSShPackage" = N-able Technologies Inc. OpenSShPackage
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PDFCreator Toolbar" = PDFCreator Toolbar
"SmartSource" = SmartSource
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"Ultravnc2_is1" = UltraVNC [removed]
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting 4.5.0.457
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 6/14/2011 7:11:17 PM | Computer Name = GOODWILL058 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 6/14/2011 7:13:40 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/14/2011 7:48:05 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/14/2011 7:48:05 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/14/2011 7:48:06 PM | Computer Name = GOODWILL058 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 6/14/2011 7:50:14 PM | Computer Name = GOODWILL058 | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown
Error - 6/15/2011 5:27:44 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
Error - 6/15/2011 5:27:46 PM | Computer Name = GOODWILL058 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.
Error - 6/15/2011 5:33:00 PM | Computer Name = GOODWILL058 | Source = TlntSvr | ID = 4031
Description = Error in reading console screen buffer output or its information.
System error: The parameter is incorrect.
Error - 6/15/2011 5:36:01 PM | Computer Name = GOODWILL058 | Source = Userenv | ID = 1054
Description = Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be contacted.
). Group Policy processing aborted.
[ Dexterity Events ]
Error - 12/23/2008 1:01:09 PM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 4/14/2009 11:06:41 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 4/14/2009 11:07:17 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 4/14/2009 11:07:47 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 10/2/2009 1:33:39 PM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 1/4/2010 8:36:19 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 1/26/2011 9:31:47 AM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
Error - 2/4/2011 1:13:44 PM | Computer Name = GOODWILL058 | Source = Dexterity | ID = 1000
Description =
[ System Events ]
Error - 6/14/2011 9:33:28 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 119 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 5:27:44 PM | Computer Name = GOODWILL058 | Source = NETLOGON | ID = 5719
Description = No Domain Controller is available for domain GOODWILL due to the following:
%%1311. Make sure that the computer is connected to the network and try again. If
the problem persists, please contact your domain administrator.
Error - 6/15/2011 5:27:55 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 5:27:55 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 5:28:43 PM | Computer Name = GOODWILL058 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL
Error - 6/15/2011 5:43:06 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 29 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 6:06:07 PM | Computer Name = GOODWILL058 | Source = Service Control Manager | ID = 7034
Description = The Windows User Mode Driver Framework service terminated unexpectedly.
It has done this 1 time(s).
Error - 6/15/2011 6:06:07 PM | Computer Name = GOODWILL058 | Source = Service Control Manager | ID = 7034
Description = The Telnet service terminated unexpectedly. It has done this 1 time(s).
Error - 6/15/2011 6:12:58 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 59 minutes. NtpClient has no source of accurate
time.
Error - 6/15/2011 7:12:58 PM | Computer Name = GOODWILL058 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 119 minutes. NtpClient has no source of accurate
time.
< End of report >
Otl extra: