Spyware / Malware / Virus Removal

Hijackthis diagnosis

1 min read

Looking for the outcome? Ask AI

free Topic Starter

Post #1July 18, 2011, 5:34 AM UTC

Hey,

Have another log review for you guys.

Used hijackthis.de website, recommended that I should fix this entry: R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm

Would this be safe to remove, have copied the rest of the scan result below.

Regards

Free

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:19:05 PM, on 18/07/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1248238891750
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

–
End of file - 4778 bytes

Blottedisk

Post #2July 19, 2011, 12:49 PM UTC

Hi,

Yes, that's not a legit website. But do not fix it with HijackThis. Instead, please do the following:

Please download OTL from one of the following mirrors:

This is THE Mirror

——————————————————————–

Save it to your desktop.
Double click on the [external image: Posted Image] icon on your desktop.
Click the "Scan All Users" checkbox.
Push the [external image: Posted Image] button.
Two reports will open, copy and paste them in your next reply:

OTListIt.txt <– Will be opened
Extras.txt <– Will be minimized

PS: Are you experiencing any issues/symptoms?

free

Post #3July 20, 2011, 12:03 PM UTC

Hey,

Not really experiencing any issues at the moment, other than computer locking up some times.

Here is the two reports as requested.

Regards

Free

OTL logfile created on: 20/07/2011 9:43:46 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Hills\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

223.53 Mb Total Physical Memory | 113.44 Mb Available Physical Memory | 50.75% Memory free
930.03 Mb Paging File | 665.68 Mb Available in Paging File | 71.58% Paging File free
Paging file location(s): C:\pagefile.sys 720 1440 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 10.60 Gb Free Space | 28.46% Space Free | Partition Type: NTFS

Computer Name: YEOLDINN | User Name: Hills | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/07/20 21:41:34 | 000,579,584 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Hills\desktop\OTL.exe
PRC - [2011/06/15 15:16:48 | 000,997,920 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2011/04/27 15:39:26 | 000,011,736 | —- | M] (Microsoft Corporation) – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2011/03/17 08:32:59 | 000,325,000 | —- | M] (BillP Studios) – C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
PRC - [2008/04/14 10:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (SafeList) ==========

MOD - [2011/07/20 21:41:34 | 000,579,584 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Hills\desktop\OTL.exe
MOD - [2010/08/24 02:12:02 | 001,054,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2007/03/27 04:03:20 | 000,057,344 | —- | M] (BillP Studios) – C:\Program Files\BillP Studios\WinPatrol\patrolpro.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] – – (SeaPort)
SRV - File not found [Disabled | Stopped] – – (HidServ)
SRV - [2011/04/27 15:39:26 | 000,011,736 | —- | M] (Microsoft Corporation) [Auto | Running] – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe – (MsMpSvc)
SRV - [2010/07/07 05:32:04 | 000,014,088 | —- | M] (Memeo) [Disabled | Stopped] – C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe – (SeagateDashboardService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | System | Running] – – (MpKsl75d516d3)
DRV - [2011/07/20 21:38:29 | 000,028,752 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{41FD6114-1571-4BCF-9345-44F17D7E821E}\MpKslaa673e0c.sys – (MpKslaa673e0c)
DRV - [2011/05/17 19:13:59 | 000,436,792 | —- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\Drivers\sptd.sys – (sptd)
DRV - [2011/04/20 23:07:38 | 000,019,072 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\PS2.sys – (Ps2)
DRV - [2011/01/19 17:47:12 | 000,022,504 | —- | M] (CPUID) [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\cpuz135_x32.sys – (cpuz135)
DRV - [2009/06/30 10:37:16 | 000,028,552 | —- | M] (Panda Security, S.L.) [File_System | Boot | Running] – C:\WINDOWS\system32\drivers\pavboot.sys – (pavboot)
DRV - [2008/04/14 04:56:49 | 000,012,800 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\usb8023.sys – (USB_RNDIS)
DRV - [2008/04/14 04:45:29 | 000,010,624 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\gameenum.sys – (gameenum)
DRV - [2008/04/14 04:40:30 | 000,096,512 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\atapi_TM.sys – (atapi)
DRV - [2007/02/18 00:15:34 | 000,232,816 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\VMM.sys – (vmm)
DRV - [2007/01/29 06:20:34 | 000,059,280 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\VMNetSrv.sys – (VPCNetS2)
DRV - [2004/08/04 08:31:20 | 000,036,224 | —- | M] (ADMtek Incorporated.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\an983.sys – (AN983)
DRV - [2004/04/08 17:57:44 | 000,070,688 | R— | M] (THOMSON) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\alcaudsl.sys – (alcaudsl)
DRV - [2003/12/08 12:53:50 | 000,036,256 | —- | M] (THOMSON) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\alcan5ln.sys – (alcan5ln) SpeedTouch™ USB ADSL RFC1483 Networking Driver (NDIS)
DRV - [2003/09/17 11:35:24 | 000,425,728 | —- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\sisgrp.sys – (SiS315)
DRV - [2003/07/24 02:32:12 | 000,011,264 | —- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\srvkp.sys – (SiSkp)
DRV - [2003/03/25 17:50:46 | 000,004,096 | —- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\siside.sys – (SiSide)
DRV - [2003/01/13 10:43:56 | 000,030,720 | —- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\SISAGPX.sys – (sisagp)
DRV - [2002/04/23 23:02:48 | 000,177,280 | R— | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\sis7012.sys – (SiS7012) Service for AC'97 Sample Driver (WDM)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.au/
IE - HKU\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-au
IE - HKU\S-1-5-21-842925246-1592454029-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Yahoo-FileServe"
FF - prefs.js..browser.search.defaultenginename: "Yahoo-FileServe"
FF - prefs.js..browser.search.order.1: "Yahoo-FileServe"
FF - prefs.js..browser.search.selectedEngine: "Yahoo-FileServe"
FF - prefs.js..browser.search.selectedEngineURL: "http://www.google.com.au/"
FF - prefs.js..browser.startup.homepage: "http://www.google.com.au/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..keyword.URL: "http://www.google.com.au/"
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.type: 0

FF - user.js..keyword.URL: "http://www.google.com.au/"
FF - user.js..keyword.enabled: 1

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/06/29 13:01:51 | 000,000,000 | —D | M]

[2011/03/09 11:09:31 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Hills\Application Data\Mozilla\Extensions
[2011/04/12 11:49:48 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Hills\Application Data\Mozilla\Firefox\Profiles\7ostmh8m.default\extensions
[2011/03/25 00:22:50 | 000,000,000 | —D | M] (startup.service) – C:\Documents and Settings\Hills\Application Data\Mozilla\Firefox\Profiles\7ostmh8m.default\extensions\[removed]
[2011/07/03 12:12:05 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/07/03 12:12:08 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) –
[2011/07/03 12:11:10 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/05/17 22:09:41 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/06/29 13:01:49 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/01/01 18:00:00 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/04/12 10:30:05 | 000,001,213 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\fileserve.xml

O1 HOSTS File: ([2011/07/13 19:42:31 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe (BillP Studios)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-842925246-1592454029-839522115-1003\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/betapit/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab (Symantec RuFSI Utility Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1248238891750 (MUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Hills\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Hills\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/07/21 09:34:02 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/07/20 21:41:16 | 000,579,584 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Hills\Desktop\OTL.exe
[2011/07/18 14:15:17 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Hills\Recent
[2011/07/16 14:04:28 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2011/07/13 21:25:28 | 000,096,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\atapi_TM.sys
[2011/07/13 21:05:46 | 000,190,032 | —- | C] (Trend Micro Inc.) – C:\WINDOWS\System32\drivers\tmcomm.sys
[2011/07/13 19:50:06 | 000,000,000 | —D | C] – C:\WINDOWS\temp
[2011/07/13 19:04:07 | 000,000,000 | RHSD | C] – C:\cmdcons
[2011/07/12 17:10:21 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Security Client
[2011/07/12 16:47:35 | 000,000,000 | -H-D | C] – C:\WINDOWS\System32\GroupPolicy
[2011/07/11 13:33:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Hills\My Documents\Double Driver Backup
[2011/07/10 22:47:35 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro
[2011/07/10 22:47:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Hills\Start Menu\Programs\HiJackThis
[2011/07/10 22:47:02 | 000,602,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2011/07/10 22:47:01 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2011/07/10 22:47:00 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2011/07/10 22:46:51 | 001,991,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2011/07/10 21:43:37 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Hills\IECompatCache
[2011/07/08 18:40:39 | 000,028,552 | —- | C] (Panda Security, S.L.) – C:\WINDOWS\System32\drivers\pavboot.sys
[2011/07/08 18:40:22 | 000,000,000 | —D | C] – C:\Program Files\Panda Security
[2011/07/04 19:37:07 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2011/07/04 19:36:52 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2011/07/04 19:36:14 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2011/07/04 19:35:33 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2011/07/04 19:35:16 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2011/07/04 19:35:13 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2011/07/04 19:35:08 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2011/07/04 19:35:07 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2011/07/04 19:35:01 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2011/07/04 19:34:37 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2011/07/04 19:34:29 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2011/07/04 19:34:16 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2011/07/04 19:34:03 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2011/07/04 19:33:56 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2011/07/04 19:33:44 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2011/07/04 19:33:43 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2011/07/04 19:33:42 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2011/07/04 19:33:28 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2011/07/04 19:33:26 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2011/07/04 19:33:20 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2011/07/04 19:33:08 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2011/07/04 19:33:04 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2011/07/04 19:33:03 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2011/07/04 19:33:01 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2011/07/04 19:32:59 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2011/07/04 19:32:56 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2011/07/04 19:32:54 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2011/07/04 19:32:50 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2011/07/04 19:32:44 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2011/07/04 19:32:38 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2011/07/04 19:32:32 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2011/07/04 19:32:31 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2011/07/04 19:32:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2011/07/04 19:32:30 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2011/07/04 19:32:29 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2011/07/04 19:32:21 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2011/07/04 19:32:15 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2011/07/04 19:32:08 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2011/07/04 19:32:02 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2011/07/04 19:31:49 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2011/07/04 19:31:47 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2011/07/04 19:31:35 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2011/07/04 19:31:27 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2011/07/04 19:31:20 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2011/07/04 19:31:13 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2011/07/04 19:31:07 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2011/07/04 19:31:00 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2011/07/04 19:30:54 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2011/07/04 19:30:49 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2011/07/04 19:30:34 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2011/07/04 19:30:31 | 000,020,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbuhci.sys
[2011/07/04 19:30:29 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2011/07/04 19:30:27 | 000,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2011/07/04 19:30:25 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbprint.sys
[2011/07/04 19:30:23 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2011/07/04 19:30:21 | 000,060,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbaudio.sys
[2011/07/04 19:30:16 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2011/07/04 19:30:08 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2011/07/04 19:30:03 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2011/07/04 19:29:57 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2011/07/04 19:29:52 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2011/07/04 19:29:47 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2011/07/04 19:29:42 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2011/07/04 19:29:37 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2011/07/04 19:29:31 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2011/07/04 19:29:26 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2011/07/04 19:29:21 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2011/07/04 19:29:15 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2011/07/04 19:29:07 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2011/07/04 19:29:07 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2011/07/04 19:28:59 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2011/07/04 19:28:54 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2011/07/04 19:28:48 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2011/07/04 19:28:43 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2011/07/04 19:28:38 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2011/07/04 19:28:32 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2011/07/04 19:28:26 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2011/07/04 19:28:15 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2011/07/04 19:28:11 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2011/07/04 19:28:05 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2011/07/04 19:28:04 | 003,374,640 | —- | C] (Macromedia, Inc.) – C:\WINDOWS\System32\dllcache\tourW.exe
[2011/07/04 19:27:59 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2011/07/04 19:27:53 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2011/07/04 19:27:48 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2011/07/04 19:27:43 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2011/07/04 19:27:35 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2011/07/04 19:27:32 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2011/07/04 19:27:26 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2011/07/04 19:27:15 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2011/07/04 19:27:10 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2011/07/04 19:27:09 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2011/07/04 19:27:04 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2011/07/04 19:26:59 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2011/07/04 19:26:59 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2011/07/04 19:26:58 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2011/07/04 19:26:50 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2011/07/04 19:26:43 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2011/07/04 19:26:38 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2011/07/04 19:26:33 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2011/07/04 19:26:25 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2011/07/04 19:26:20 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2011/07/04 19:26:16 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2011/07/04 19:26:11 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2011/07/04 19:26:06 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2011/07/04 19:26:01 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2011/07/04 19:25:56 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2011/07/04 19:25:52 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2011/07/04 19:25:47 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2011/07/04 19:25:42 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2011/07/04 19:25:31 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2011/07/04 19:25:25 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2011/07/04 19:25:19 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2011/07/04 19:25:15 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2011/07/04 19:25:10 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2011/07/04 19:25:04 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2011/07/04 19:25:04 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2011/07/04 19:24:54 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2011/07/04 19:24:49 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2011/07/04 19:24:48 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2011/07/04 19:24:38 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2011/07/04 19:24:30 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2011/07/04 19:24:26 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2011/07/04 19:24:21 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2011/07/04 19:24:15 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2011/07/04 19:24:11 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2011/07/04 19:24:06 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2011/07/04 19:24:01 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2011/07/04 19:23:40 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2011/07/04 19:23:36 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2011/07/04 19:23:35 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2011/07/04 19:23:30 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2011/07/04 19:23:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2011/07/04 19:23:28 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2011/07/04 19:23:26 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2011/07/04 19:23:23 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2011/07/04 19:23:17 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2011/07/04 19:23:16 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2011/07/04 19:23:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2011/07/04 19:23:11 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2011/07/04 19:23:06 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2011/07/04 19:23:01 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2011/07/04 19:22:56 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2011/07/04 19:22:51 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2011/07/04 19:22:49 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2011/07/04 19:22:45 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2011/07/04 19:22:44 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2011/07/04 19:22:40 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2011/07/04 19:22:35 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2011/07/04 19:22:35 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2011/07/04 19:22:30 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2011/07/04 19:22:30 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2011/07/04 19:22:29 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2011/07/04 19:22:29 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2011/07/04 19:22:19 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2011/07/04 19:22:18 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2011/07/04 19:22:18 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2011/07/04 19:22:17 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2011/07/04 19:22:17 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2011/07/04 19:22:16 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2011/07/04 19:22:16 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2011/07/04 19:22:15 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2011/07/04 19:22:15 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2011/07/04 19:22:10 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2011/07/04 19:22:03 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2011/07/04 19:21:59 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2011/07/04 19:21:54 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2011/07/04 19:21:49 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2011/07/04 19:21:39 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2011/07/04 19:21:35 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2011/07/04 19:21:29 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2011/07/04 19:21:25 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2011/07/04 19:21:20 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2011/07/04 19:21:09 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2011/07/04 19:21:08 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2011/07/04 19:20:53 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2011/07/04 19:20:49 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2011/07/04 19:20:44 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2011/07/04 19:20:39 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2011/07/04 19:20:35 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2011/07/04 19:20:33 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2011/07/04 19:20:28 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2011/07/04 19:20:23 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2011/07/04 19:20:22 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2011/07/04 19:20:15 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2011/07/04 19:20:11 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2011/07/04 19:20:06 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2011/07/04 19:20:05 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2011/07/04 19:19:57 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2011/07/04 19:19:52 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2011/07/04 19:19:46 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2011/07/04 19:19:42 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2011/07/04 19:19:38 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2011/07/04 19:19:33 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2011/07/04 19:19:27 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2011/07/04 19:19:22 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2011/07/04 19:19:17 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2011/07/04 19:19:13 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2011/07/04 19:19:08 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2011/07/04 19:19:04 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2011/07/04 19:18:59 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2011/07/04 19:18:55 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2011/07/04 19:18:50 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2011/07/04 19:18:45 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2011/07/04 19:18:41 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2011/07/04 19:18:36 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2011/07/04 19:18:30 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2011/07/04 19:18:20 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2011/07/04 19:18:19 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2011/07/04 19:18:19 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2011/07/04 19:18:16 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2011/07/04 19:18:14 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2011/07/04 19:18:02 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8139.sys
[2011/07/04 19:17:57 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2011/07/04 19:17:52 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2011/07/04 19:17:46 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2011/07/04 19:17:34 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2011/07/04 19:17:27 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2011/07/04 19:17:22 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2011/07/04 19:17:17 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2011/07/04 19:17:14 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2011/07/04 19:17:13 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2011/07/04 19:17:06 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2011/07/04 19:16:59 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2011/07/04 19:16:55 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2011/07/04 19:16:50 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2011/07/04 19:16:46 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2011/07/04 19:16:45 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2011/07/04 19:16:44 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2011/07/04 19:16:34 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2011/07/04 19:16:30 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2011/07/04 19:16:25 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2011/07/04 19:16:21 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2011/07/04 19:16:16 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2011/07/04 19:16:14 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2011/07/04 19:16:07 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2011/07/04 19:16:02 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2011/07/04 19:15:58 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2011/07/04 19:15:56 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2011/07/04 19:15:52 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2011/07/04 19:15:46 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2011/07/04 19:15:39 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2011/07/04 19:15:35 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2011/07/04 19:15:30 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2011/07/04 19:15:27 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2011/07/04 19:15:21 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2011/07/04 19:15:20 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2011/07/04 19:15:20 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2011/07/04 19:15:20 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2011/07/04 19:15:10 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2011/07/04 19:15:05 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2011/07/04 19:15:01 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2011/07/04 19:14:56 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2011/07/04 19:14:51 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2011/07/04 19:14:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2011/07/04 19:14:42 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2011/07/04 19:14:42 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2011/07/04 19:14:39 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2011/07/04 19:14:38 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2011/07/04 19:14:36 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2011/07/04 19:14:35 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2011/07/04 19:14:30 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2011/07/04 19:14:25 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2011/07/04 19:14:22 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2011/07/04 19:14:17 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2011/07/04 19:14:13 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2011/07/04 19:14:08 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2011/07/04 19:14:04 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2011/07/04 19:13:52 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2011/07/04 19:13:48 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2011/07/04 19:13:43 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2011/07/04 19:13:42 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2011/07/04 19:13:41 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2011/07/04 19:13:40 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2011/07/04 19:13:33 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2011/07/04 19:13:28 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2011/07/04 19:13:24 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2011/07/04 19:13:19 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2011/07/04 19:13:15 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2011/07/04 19:13:10 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2011/07/04 19:13:05 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2011/07/04 19:13:01 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2011/07/04 19:12:56 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2011/07/04 19:12:52 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2011/07/04 19:12:47 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2011/07/04 19:12:42 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2011/07/04 19:12:38 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2011/07/04 19:12:33 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2011/07/04 19:12:22 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2011/07/04 19:12:15 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2011/07/04 19:12:06 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2011/07/04 19:12:01 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2011/07/04 19:11:52 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2011/07/04 19:11:52 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2011/07/04 19:11:45 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2011/07/04 19:11:40 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2011/07/04 19:11:36 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2011/07/04 19:11:31 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2011/07/04 19:11:26 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2011/07/04 19:11:12 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2011/07/04 19:11:12 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2011/07/04 19:11:05 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2011/07/04 19:10:58 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2011/07/04 19:10:52 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2011/07/04 19:10:48 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2011/07/04 19:10:37 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2011/07/04 19:10:35 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2011/07/04 19:10:32 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2011/07/04 19:10:27 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2011/07/04 19:10:23 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2011/07/04 19:10:19 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2011/07/04 19:10:15 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2011/07/04 19:10:10 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2011/07/04 19:10:06 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2011/07/04 19:10:02 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2011/07/04 19:09:57 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2011/07/04 19:09:53 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2011/07/04 19:09:49 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2011/07/04 19:09:44 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2011/07/04 19:09:40 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2011/07/04 19:09:36 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2011/07/04 19:09:35 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2011/07/04 19:09:24 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2011/07/04 19:09:14 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2011/07/04 19:09:12 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2011/07/04 19:08:59 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2011/07/04 19:08:36 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2011/07/04 19:08:32 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2011/07/04 19:08:31 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2011/07/04 19:08:30 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2011/07/04 19:08:17 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2011/07/04 19:08:12 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2011/07/04 19:08:09 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2011/07/04 19:07:59 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2011/07/04 19:07:54 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2011/07/04 19:07:53 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/07/04 19:07:48 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2011/07/04 19:07:44 | 001,414,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mmc.exe
[2011/07/04 19:07:39 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2011/07/04 19:07:37 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migisol.exe
[2011/07/04 19:07:32 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2011/07/04 19:07:28 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2011/07/04 19:07:28 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2011/07/04 19:07:27 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2011/07/04 19:07:25 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2011/07/04 19:07:21 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2011/07/04 19:07:17 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2011/07/04 19:07:16 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2011/07/04 19:07:11 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2011/07/04 19:07:04 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2011/07/04 19:07:03 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2011/07/04 19:06:58 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2011/07/04 19:06:54 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2011/07/04 19:06:49 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2011/07/04 19:06:45 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2011/07/04 19:06:44 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2011/07/04 19:06:37 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2011/07/04 19:06:33 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2011/07/04 19:06:32 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2011/07/04 19:06:31 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2011/07/04 19:06:27 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2011/07/04 19:06:26 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2011/07/04 19:06:22 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2011/07/04 19:06:17 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2011/07/04 19:06:16 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2011/07/04 19:06:10 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2011/07/04 19:06:06 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2011/07/04 19:06:02 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2011/07/04 19:05:58 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2011/07/04 19:05:57 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2011/07/04 19:05:53 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2011/07/04 19:05:49 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2011/07/04 19:05:48 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2011/07/04 19:05:47 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2011/07/04 19:05:46 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2011/07/04 19:05:41 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2011/07/04 19:05:40 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2011/07/04 19:05:38 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2011/07/04 19:05:37 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2011/07/04 19:05:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2011/07/04 19:05:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2011/07/04 19:05:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2011/07/04 19:05:34 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2011/07/04 19:05:34 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2011/07/04 19:05:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2011/07/04 19:05:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2011/07/04 19:05:33 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2011/07/04 19:05:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2011/07/04 19:05:30 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2011/07/04 19:05:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2011/07/04 19:05:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2011/07/04 19:05:24 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2011/07/04 19:05:20 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2011/07/04 19:05:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2011/07/04 19:05:19 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2011/07/04 19:05:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2011/07/04 19:05:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2011/07/04 19:05:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2011/07/04 19:05:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2011/07/04 19:05:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2011/07/04 19:05:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2011/07/04 19:05:15 | 000,014,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhid.sys
[2011/07/04 19:05:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2011/07/04 19:05:13 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2011/07/04 19:05:12 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2011/07/04 19:05:12 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2011/07/04 19:05:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2011/07/04 19:05:09 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2011/07/04 19:05:09 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2011/07/04 19:05:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2011/07/04 19:05:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2011/07/04 19:05:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2011/07/04 19:05:06 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2011/07/04 19:05:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2011/07/04 19:04:59 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2011/07/04 19:04:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2011/07/04 19:04:54 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2011/07/04 19:04:53 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2011/07/04 19:04:52 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2011/07/04 19:04:50 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2011/07/04 19:04:46 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2011/07/04 19:04:43 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2011/07/04 19:04:42 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2011/07/04 19:04:38 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2011/07/04 19:04:37 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2011/07/04 19:04:36 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2011/07/04 19:04:34 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2011/07/04 19:04:28 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2011/07/04 19:04:24 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2011/07/04 19:04:20 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2011/07/04 19:04:18 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2011/07/04 19:04:14 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2011/07/04 19:04:10 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2011/07/04 19:04:10 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2011/07/04 19:04:06 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2011/07/04 19:04:04 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2011/07/04 19:04:02 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2011/07/04 19:03:59 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2011/07/04 19:03:56 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2011/07/04 19:03:55 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2011/07/04 19:03:55 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2011/07/04 19:03:52 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2011/07/04 19:03:51 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2011/07/04 19:03:50 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2011/07/04 19:03:50 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2011/07/04 19:03:39 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2011/07/04 19:03:35 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2011/07/04 19:03:32 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2011/07/04 19:03:28 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2011/07/04 19:03:24 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2011/07/04 19:03:21 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2011/07/04 19:03:17 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2011/07/04 19:03:13 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2011/07/04 19:03:09 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2011/07/04 19:03:05 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2011/07/04 19:03:02 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2011/07/04 19:02:58 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2011/07/04 19:02:54 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2011/07/04 19:02:50 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2011/07/04 19:02:48 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2011/07/04 19:02:48 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2011/07/04 19:02:44 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2011/07/04 19:02:37 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2011/07/04 19:02:36 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2011/07/04 19:02:35 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2011/07/04 19:02:30 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2011/07/04 19:02:22 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2011/07/04 19:02:15 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2011/07/04 19:02:11 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2011/07/04 19:02:07 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2011/07/04 19:02:04 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2011/07/04 19:02:00 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2011/07/04 19:01:56 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2011/07/04 19:01:52 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2011/07/04 19:01:49 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2011/07/04 19:01:45 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2011/07/04 19:01:42 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2011/07/04 19:01:38 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2011/07/04 19:01:34 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2011/07/04 19:01:31 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2011/07/04 19:01:26 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2011/07/04 19:01:22 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2011/07/04 19:01:19 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2011/07/04 19:01:15 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2011/07/04 19:01:11 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2011/07/04 19:01:08 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2011/07/04 19:01:05 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2011/07/04 19:00:58 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2011/07/04 19:00:51 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2011/07/04 19:00:44 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2011/07/04 19:00:37 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2011/07/04 19:00:29 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2011/07/04 19:00:24 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2011/07/04 19:00:23 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidserv.dll
[2011/07/04 19:00:20 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2011/07/04 19:00:19 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2011/07/04 19:00:15 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2011/07/04 19:00:14 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2011/07/04 19:00:10 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2011/07/04 19:00:06 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2011/07/04 19:00:03 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2011/07/04 18:59:59 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2011/07/04 18:59:56 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2011/07/04 18:59:52 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2011/07/04 18:59:49 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2011/07/04 18:59:46 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2011/07/04 18:59:43 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2011/07/04 18:59:37 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2011/07/04 18:59:34 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2011/07/04 18:59:31 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2011/07/04 18:59:29 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2011/07/04 18:59:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2011/07/04 18:59:25 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2011/07/04 18:59:21 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2011/07/04 18:59:18 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2011/07/04 18:59:16 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2011/07/04 18:59:13 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2011/07/04 18:59:11 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2011/07/04 18:59:07 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2011/07/04 18:58:58 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2011/07/04 18:58:57 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2011/07/04 18:58:54 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2011/07/04 18:58:51 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2011/07/04 18:58:48 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2011/07/04 18:58:45 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2011/07/04 18:58:40 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2011/07/04 18:58:38 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2011/07/04 18:58:36 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2011/07/04 18:58:35 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2011/07/04 18:58:32 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2011/07/04 18:58:30 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2011/07/04 18:58:29 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2011/07/04 18:58:26 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2011/07/04 18:58:26 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2011/07/04 18:58:22 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2011/07/04 18:58:21 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2011/07/04 18:58:18 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2011/07/04 18:58:14 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2011/07/04 18:58:12 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2011/07/04 18:58:09 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2011/07/04 18:58:06 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2011/07/04 18:58:03 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2011/07/04 18:58:00 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2011/07/04 18:57:58 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2011/07/04 18:57:55 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2011/07/04 18:57:52 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2011/07/04 18:57:49 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2011/07/04 18:57:46 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2011/07/04 18:57:43 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2011/07/04 18:57:40 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2011/07/04 18:57:38 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2011/07/04 18:57:36 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2011/07/04 18:57:33 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2011/07/04 18:57:27 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2011/07/04 18:57:25 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2011/07/04 18:57:23 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2011/07/04 18:57:20 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2011/07/04 18:57:18 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2011/07/04 18:57:16 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2011/07/04 18:57:14 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2011/07/04 18:57:12 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2011/07/04 18:57:10 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2011/07/04 18:57:08 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2011/07/04 18:57:06 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2011/07/04 18:57:04 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2011/07/04 18:57:02 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2011/07/04 18:57:00 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2011/07/04 18:56:58 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2011/07/04 18:56:56 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2011/07/04 18:56:54 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2011/07/04 18:56:53 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2011/07/04 18:56:50 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2011/07/04 18:56:48 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2011/07/04 18:56:46 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2011/07/04 18:56:44 | 001,298,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxdiag.exe
[2011/07/04 18:56:38 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2011/07/04 18:56:35 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2011/07/04 18:56:30 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2011/07/04 18:56:26 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2011/07/04 18:56:25 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2011/07/04 18:56:23 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2011/07/04 18:56:21 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2011/07/04 18:56:20 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2011/07/04 18:56:15 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2011/07/04 18:56:14 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2011/07/04 18:56:12 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2011/07/04 18:56:10 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2011/07/04 18:56:03 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2011/07/04 18:56:01 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2011/07/04 18:55:59 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2011/07/04 18:55:57 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2011/07/04 18:55:54 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2011/07/04 18:55:52 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2011/07/04 18:55:50 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2011/07/04 18:55:49 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2011/07/04 18:55:47 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2011/07/04 18:55:45 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2011/07/04 18:55:43 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2011/07/04 18:55:41 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2011/07/04 18:55:39 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2011/07/04 18:55:38 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2011/07/04 18:55:36 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2011/07/04 18:55:34 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2011/07/04 18:55:32 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2011/07/04 18:55:31 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2011/07/04 18:55:27 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2011/07/04 18:55:26 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2011/07/04 18:55:24 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2011/07/04 18:55:22 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2011/07/04 18:55:20 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2011/07/04 18:55:18 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2011/07/04 18:55:16 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2011/07/04 18:55:14 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2011/07/04 18:55:12 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2011/07/04 18:55:10 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2011/07/04 18:55:09 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2011/07/04 18:55:07 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2011/07/04 18:55:05 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2011/07/04 18:55:01 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2011/07/04 18:54:59 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2011/07/04 18:54:56 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2011/07/04 18:54:54 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2011/07/04 18:54:53 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2011/07/04 18:54:51 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2011/07/04 18:54:49 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2011/07/04 18:54:48 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2011/07/04 18:54:46 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2011/07/04 18:54:44 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2011/07/04 18:54:43 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2011/07/04 18:54:42 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2011/07/04 18:54:40 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2011/07/04 18:54:39 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2011/07/04 18:54:37 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2011/07/04 18:54:35 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2011/07/04 18:54:34 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2011/07/04 18:54:32 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2011/07/04 18:54:30 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2011/07/04 18:54:29 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2011/07/04 18:54:28 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2011/07/04 18:54:26 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2011/07/04 18:54:25 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2011/07/04 18:54:22 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2011/07/04 18:54:20 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2011/07/04 18:54:19 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2011/07/04 18:54:18 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2011/07/04 18:54:17 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2011/07/04 18:54:15 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2011/07/04 18:54:14 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2011/07/04 18:54:13 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2011/07/04 18:54:12 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2011/07/04 18:54:12 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2011/07/04 18:54:07 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2011/07/04 18:54:05 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2011/07/04 18:54:03 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2011/07/04 18:54:01 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2011/07/04 18:53:59 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2011/07/04 18:53:58 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2011/07/04 18:53:56 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2011/07/04 18:53:55 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2011/07/04 18:53:54 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2011/07/04 18:53:53 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2011/07/04 18:53:52 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2011/07/04 18:53:48 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2011/07/04 18:53:47 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2011/07/04 18:53:44 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2011/07/04 18:53:43 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2011/07/04 18:53:42 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2011/07/04 18:53:42 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2011/07/04 18:53:41 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2011/07/04 18:53:40 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2011/07/04 18:53:40 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2011/07/04 18:53:37 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2011/07/04 18:53:36 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2011/07/04 18:53:35 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2011/07/04 18:53:34 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2011/07/04 18:53:33 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2011/07/04 18:53:31 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2011/07/04 18:53:30 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2011/07/04 18:53:29 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2011/07/04 18:53:28 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2011/07/04 18:53:27 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2011/07/04 18:53:26 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2011/07/04 18:53:24 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2011/07/04 18:53:21 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2011/07/04 18:53:20 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2011/07/04 18:53:19 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2011/07/04 18:53:18 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2011/07/04 18:53:17 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2011/07/04 18:53:16 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2011/07/04 18:53:15 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2011/07/04 18:53:14 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2011/07/04 18:53:13 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2011/07/04 18:53:12 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2011/07/04 18:53:11 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2011/07/04 18:53:10 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2011/07/04 18:53:09 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2011/07/04 18:52:37 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2011/07/04 18:52:34 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2011/07/04 18:52:33 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2011/07/04 18:52:32 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2011/07/04 18:52:31 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2011/07/04 18:52:30 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2011/07/04 18:52:30 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2011/07/04 18:52:28 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2011/07/04 18:52:27 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2011/07/04 18:52:26 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2011/07/04 18:52:25 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2011/07/04 18:52:24 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2011/07/04 18:52:23 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2011/07/04 18:52:22 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2011/07/04 18:52:21 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2011/07/04 18:52:20 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2011/07/04 18:52:19 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2011/07/04 18:52:18 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2011/07/04 18:52:17 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2011/07/04 18:52:16 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2011/07/04 18:52:15 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2011/07/04 18:52:12 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2011/07/04 18:52:10 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2011/07/04 18:52:10 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2011/07/04 18:52:08 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2011/07/04 18:52:07 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2011/07/04 18:52:07 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2011/07/04 18:52:06 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2011/07/04 18:52:04 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2011/07/04 18:52:03 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2011/07/04 18:52:02 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2011/07/04 18:52:02 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2011/07/04 18:52:01 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2011/07/04 18:52:00 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2011/07/04 18:51:59 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2011/07/04 18:51:58 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2011/07/04 18:51:57 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2011/07/04 18:51:56 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2011/07/04 18:51:55 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2011/07/04 18:51:54 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2011/07/04 18:51:52 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2011/07/04 18:51:43 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2011/07/04 18:51:42 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2011/07/04 18:51:40 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2011/07/04 18:51:39 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2011/07/04 18:51:38 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2011/07/04 18:51:38 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2011/07/04 18:51:37 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2011/07/04 18:51:36 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2011/07/04 18:51:35 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2011/07/04 18:51:31 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2011/07/04 18:51:30 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2011/07/04 18:51:29 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2011/07/04 18:51:29 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2011/07/04 18:51:27 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2011/07/04 18:51:26 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2011/07/04 18:51:25 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2011/07/04 18:51:24 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2011/07/04 18:51:23 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2011/07/04 18:51:21 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2011/07/04 18:51:20 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2011/07/04 18:51:19 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2011/07/04 18:51:18 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2011/07/04 18:51:18 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2011/07/04 18:51:17 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2011/07/04 18:51:16 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2011/07/04 18:51:15 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2011/07/04 18:51:14 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2011/07/04 18:51:07 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2011/07/04 18:51:04 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2011/07/04 18:51:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2011/07/04 18:51:03 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2011/07/04 18:51:02 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2011/07/04 18:51:01 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2011/07/04 18:50:59 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2011/07/04 18:50:57 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2011/07/04 18:50:56 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2011/07/04 18:50:55 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2011/07/04 18:50:54 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2011/07/04 18:50:53 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2011/07/04 18:50:52 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2011/07/04 18:50:51 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2011/07/04 18:50:50 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2011/07/04 18:50:49 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2011/07/04 18:50:48 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2011/07/04 18:50:47 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2011/07/04 18:50:47 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2011/07/04 18:50:46 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2011/07/04 18:50:45 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2011/07/04 18:50:44 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2011/07/04 18:50:44 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2011/07/04 18:50:43 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2011/07/04 18:50:42 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2011/07/04 18:50:41 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2011/07/04 18:50:40 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2011/07/04 18:50:26 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2011/07/04 18:50:01 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2011/07/04 18:49:42 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2011/07/04 18:49:42 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2011/07/04 18:49:41 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2011/07/04 18:49:38 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2011/07/04 18:49:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2011/07/04 18:49:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2011/07/04 18:49:19 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2011/07/03 12:13:03 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2011/07/03 12:12:55 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2011/07/03 12:11:57 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/07/03 12:11:57 | 000,073,728 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/07/03 12:11:56 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/07/03 12:11:56 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/07/03 12:10:41 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/06/30 11:56:08 | 000,000,000 | —D | C] – C:\WINDOWS\System32\FxsTmp
[2011/06/30 11:55:39 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2011/06/30 11:55:38 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2011/06/30 11:55:38 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2011/06/30 11:55:38 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2011/06/30 11:55:38 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2011/06/30 11:55:38 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2011/06/30 11:55:38 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2011/06/30 11:55:38 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2011/06/30 11:55:38 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2011/06/30 11:55:37 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2011/06/30 11:55:37 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2011/06/30 11:55:37 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2011/06/30 11:55:37 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2011/06/30 11:55:37 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2011/06/30 11:55:37 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2011/06/30 11:55:36 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2011/06/30 11:55:36 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2011/06/30 11:55:36 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2011/06/30 11:55:36 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2011/06/30 11:55:36 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2011/06/30 11:55:35 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2011/06/30 11:55:35 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2011/06/30 11:55:35 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2011/06/30 11:55:35 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2011/06/30 11:55:25 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2011/06/30 11:55:18 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclntR.dll
[2011/06/30 11:55:18 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/06/30 11:55:18 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsroute.dll
[2011/06/30 11:55:18 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/06/30 11:55:18 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxssend.exe
[2011/06/30 11:55:18 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/06/30 11:55:17 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscfgwz.dll
[2011/06/30 11:55:17 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/06/22 01:51:30 | 000,110,592 | —- | C] (Common Controls Replacement Project (CCRP)) – C:\WINDOWS\System32\ccrpbds6.dll
[2011/06/22 00:08:09 | 000,608,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\COMCTL32.OCX

========== Files - Modified Within 30 Days ==========

[2011/07/20 21:47:00 | 000,000,438 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{52F6F575-AC44-42F4-8EBB-0811180128D0}.job
[2011/07/20 21:41:34 | 000,579,584 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Hills\Desktop\OTL.exe
[2011/07/20 21:31:07 | 000,000,884 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/07/20 21:27:11 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011/07/20 21:23:59 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{10E034B1-B71A-4087-9E07-C1D0A21684BB}.job
[2011/07/20 21:20:51 | 000,002,422 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/07/20 21:20:45 | 000,000,312 | —- | M] () – C:\WINDOWS\tasks\GlaryInitialize.job
[2011/07/20 21:20:29 | 000,000,880 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/07/20 21:20:10 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/07/18 15:36:37 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2011/07/13 21:05:46 | 000,190,032 | —- | M] (Trend Micro Inc.) – C:\WINDOWS\System32\drivers\tmcomm.sys
[2011/07/13 19:42:31 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2011/07/13 18:56:58 | 000,000,281 | —- | M] () – C:\Boot.bak
[2011/07/13 18:41:37 | 000,126,112 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/07/12 17:16:16 | 000,001,945 | —- | M] () – C:\WINDOWS\epplauncher.mif
[2011/07/09 20:15:28 | 000,101,720 | —- | M] (Sunbelt Software) – C:\WINDOWS\System32\drivers\SBREDrv.sys
[2011/07/09 18:56:53 | 000,000,036 | —- | M] () – C:\Documents and Settings\Hills\Local Settings\Application Data\housecall.guid.cache
[2011/07/08 00:48:37 | 000,478,632 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/07/08 00:48:37 | 000,079,276 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/07/03 12:11:00 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/07/03 12:10:59 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/07/03 12:10:58 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/07/03 12:10:58 | 000,073,728 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011/07/03 12:10:53 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/06/30 11:56:08 | 000,000,535 | —- | M] () – C:\WINDOWS\System32\mapisvc.inf

========== Files Created - No Company Name ==========

[2011/07/13 19:04:16 | 000,000,281 | —- | C] () – C:\Boot.bak
[2011/07/13 19:04:10 | 000,260,272 | RHS- | C] () – C:\cmldr
[2011/07/12 17:15:59 | 000,000,424 | -H– | C] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011/07/12 17:10:38 | 000,001,680 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011/07/09 18:56:53 | 000,000,036 | —- | C] () – C:\Documents and Settings\Hills\Local Settings\Application Data\housecall.guid.cache
[2011/07/04 19:36:46 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2011/07/04 19:36:34 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2011/07/04 19:15:50 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2011/07/04 19:15:44 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2011/07/04 19:08:11 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2011/07/04 19:05:40 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2011/07/04 19:03:53 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2011/07/04 19:01:01 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2011/07/04 19:00:54 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2011/07/04 19:00:47 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2011/07/04 19:00:40 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2011/07/04 19:00:33 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2011/07/04 19:00:13 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2011/07/04 18:56:08 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2011/07/04 18:56:06 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2011/07/04 18:56:04 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2011/07/04 18:51:50 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2011/07/04 18:51:49 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2011/07/04 18:51:48 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2011/07/04 18:51:47 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2011/07/04 18:51:46 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2011/07/04 18:51:46 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2011/07/04 18:51:45 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2011/07/04 18:51:44 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2011/07/04 18:51:42 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2011/07/04 18:51:34 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2011/06/30 11:55:43 | 000,000,535 | —- | C] () – C:\WINDOWS\System32\mapisvc.inf
[2011/06/30 11:55:20 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2011/06/30 11:55:20 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2011/06/30 11:55:20 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2011/06/30 11:55:20 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2011/06/30 11:55:20 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2011/06/30 11:55:19 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2011/06/30 11:55:19 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2011/06/30 11:55:19 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2011/06/30 11:55:19 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2011/06/30 11:55:19 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2011/06/30 11:55:19 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2011/06/30 11:55:18 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2011/06/30 11:55:18 | 000,001,361 | —- | C] () – C:\WINDOWS\System32\fxscount.h
[2011/06/06 14:06:48 | 000,000,767 | —- | C] () – C:\Documents and Settings\Hills\Application Data\burnaware.ini
[2011/06/04 22:02:25 | 000,133,710 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2011/06/03 13:29:20 | 000,395,776 | —- | C] () – C:\WINDOWS\System32\libmplayer.dll
[2011/06/03 13:29:18 | 002,255,360 | —- | C] () – C:\WINDOWS\System32\libavcodec.dll
[2011/05/21 20:11:04 | 000,000,022 | -HS- | C] () – C:\Documents and Settings\Hills\Application Data\Sys2662.Config.Repository.bin
[2011/05/21 17:26:46 | 000,000,016 | —- | C] () – C:\WINDOWS\wininit.ini
[2011/05/20 19:44:39 | 000,000,169 | —- | C] () – C:\WINDOWS\RtlRack.ini
[2011/05/17 20:30:47 | 000,000,241 | —- | C] () – C:\WINDOWS\Clony2.ini
[2011/05/03 08:30:50 | 001,144,147 | —- | C] () – C:\WINDOWS\System32\ffmpegmt.dll
[2011/05/03 08:27:54 | 003,935,545 | —- | C] () – C:\WINDOWS\System32\ffmpeg.dll
[2011/05/03 06:23:46 | 000,324,096 | —- | C] () – C:\WINDOWS\System32\TomsMoComp_ff.dll
[2011/05/03 06:19:34 | 000,100,352 | —- | C] () – C:\WINDOWS\System32\ff_wmv9.dll
[2011/05/03 06:19:20 | 000,080,896 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2011/04/11 03:15:04 | 000,002,572 | —- | C] () – C:\WINDOWS\System32\ASOROSet.bin
[2011/04/10 20:40:48 | 000,055,808 | —- | C] () – C:\WINDOWS\System32\zlib1.dll
[2011/03/19 07:32:44 | 000,163,840 | —- | C] () – C:\WINDOWS\System32\libmpeg2_ff.dll
[2011/03/19 07:29:56 | 000,181,248 | —- | C] () – C:\WINDOWS\System32\ff_unrar.dll
[2011/03/19 07:28:30 | 001,557,504 | —- | C] () – C:\WINDOWS\System32\ff_samplerate.dll
[2011/03/19 07:27:08 | 000,178,688 | —- | C] () – C:\WINDOWS\System32\ff_libmad.dll
[2011/03/19 07:26:44 | 000,484,864 | —- | C] () – C:\WINDOWS\System32\ff_libfaad2.dll
[2011/03/19 07:25:38 | 000,257,024 | —- | C] () – C:\WINDOWS\System32\ff_libdts.dll
[2011/03/19 07:25:24 | 000,141,312 | —- | C] () – C:\WINDOWS\System32\ff_liba52.dll
[2011/03/03 21:40:08 | 000,150,528 | —- | C] () – C:\WINDOWS\System32\mkx.dll
[2011/03/03 21:39:56 | 000,109,568 | —- | C] () – C:\WINDOWS\System32\avi.dll
[2011/03/03 21:39:46 | 000,141,824 | —- | C] () – C:\WINDOWS\System32\mp4.dll
[2011/03/03 21:39:34 | 000,123,392 | —- | C] () – C:\WINDOWS\System32\ogm.dll
[2011/03/03 21:39:02 | 000,113,152 | —- | C] () – C:\WINDOWS\System32\dsmux.exe
[2011/03/03 21:38:54 | 000,154,112 | —- | C] () – C:\WINDOWS\System32\ts.dll
[2011/03/03 21:38:40 | 000,249,856 | —- | C] () – C:\WINDOWS\System32\dxr.dll
[2011/03/03 21:38:10 | 000,097,792 | —- | C] () – C:\WINDOWS\System32\avs.dll
[2011/03/03 21:38:04 | 000,137,728 | —- | C] () – C:\WINDOWS\System32\mkv2vfr.exe
[2011/03/03 21:37:50 | 000,093,184 | —- | C] () – C:\WINDOWS\System32\avss.dll
[2011/03/03 21:37:40 | 000,358,400 | —- | C] () – C:\WINDOWS\System32\gdsmux.exe
[2011/03/03 21:35:32 | 000,080,384 | —- | C] () – C:\WINDOWS\System32\mkzlib.dll
[2011/03/03 21:35:26 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\mkunicode.dll
[2011/02/23 05:39:04 | 000,240,640 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2011/02/23 05:37:30 | 000,650,752 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2010/10/13 18:47:24 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2010/08/19 05:56:38 | 000,000,151 | —- | C] () – C:\WINDOWS\System32\Registration.ini
[2010/03/30 18:41:59 | 000,000,069 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2010/01/07 15:00:23 | 000,000,205 | —- | C] () – C:\WINDOWS\youtube2mp3.ini
[2009/11/11 13:20:49 | 000,000,000 | —- | C] () – C:\Documents and Settings\Hills\Local Settings\Application Data\prvlcl.dat
[2009/11/07 10:42:49 | 000,034,645 | —- | C] () – C:\WINDOWS\System32\1_ssetup.ini
[2009/11/07 10:42:49 | 000,016,819 | —- | C] () – C:\WINDOWS\System32\sunistlog.ini
[2009/11/07 10:40:22 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\waitwnd.exe
[2009/11/07 10:40:21 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\setuplib.dll
[2009/09/23 01:25:30 | 000,043,520 | —- | C] () – C:\Documents and Settings\Hills\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/12 07:21:26 | 000,087,552 | —- | C] () – C:\WINDOWS\System32\ac3config.exe
[2009/08/12 07:21:20 | 001,021,440 | —- | C] () – C:\WINDOWS\System32\ac3filter_intl.dll
[2009/07/22 15:46:26 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/07/22 10:13:14 | 000,005,606 | R— | C] () – C:\WINDOWS\System32\stci.dll
[2009/07/21 22:20:41 | 000,155,648 | R— | C] () – C:\WINDOWS\System32\TVModeLib.dll
[2009/07/21 22:20:17 | 000,121,948 | —- | C] () – C:\WINDOWS\VGAsetup.ini
[2009/07/21 22:20:00 | 000,108,562 | —- | C] () – C:\WINDOWS\System32\VGAunistlog.ini
[2009/07/21 19:18:39 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2009/07/21 19:17:13 | 000,126,112 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/07/21 09:39:05 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2009/07/21 09:29:14 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2009/05/20 22:04:42 | 000,045,568 | —- | C] () – C:\WINDOWS\System32\spdifer_config.exe
[2008/11/07 01:37:32 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2007/07/27 22:00:00 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2007/07/27 22:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2007/07/27 22:00:00 | 000,478,632 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2007/07/27 22:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2007/07/27 22:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2007/07/27 22:00:00 | 000,079,276 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2007/07/27 22:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2007/07/27 22:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2007/07/27 22:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2007/07/27 22:00:00 | 000,004,461 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2007/07/27 22:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2007/07/27 22:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2006/03/04 14:52:00 | 000,088,576 | —- | C] () – C:\WINDOWS\System32\OptimFROG.dll
[2004/04/23 22:02:10 | 000,233,472 | —- | C] () – C:\WINDOWS\System32\cmirmdrv.exe
[2004/02/27 03:21:16 | 000,049,152 | —- | C] () – C:\WINDOWS\System32\sis740.bin
[2004/02/27 03:21:16 | 000,049,152 | —- | C] () – C:\WINDOWS\System32\sis650.bin
[2003/02/19 01:26:28 | 000,028,672 | —- | C] () – C:\WINDOWS\System32\cmirmdrv.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 16 bytes -> C:\WINDOWS\System32\mswinsck32.ocx:rsrc
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2

< End of report >

OTL Extras logfile created on: 20/07/2011 9:43:46 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Hills\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

223.53 Mb Total Physical Memory | 113.44 Mb Available Physical Memory | 50.75% Memory free
930.03 Mb Paging File | 665.68 Mb Available in Paging File | 71.58% Paging File free
Paging file location(s): C:\pagefile.sys 720 1440 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 10.60 Gb Free Space | 28.46% Space Free | Partition Type: NTFS

Computer Name: YEOLDINN | User Name: Hills | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-842925246-1592454029-839522115-1003\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
https [open] – Reg Error: Key error.
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"C:\WINDOWS\system32\usmt\migwiz.exe" = C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard – (Microsoft Corporation)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007811BF-E310-4285-BFC6-55DB29B3EDDE}" = WinPatrol
"{05BFB060-4F22-4710-B0A2-2801A1B606C5}" = Microsoft Antimalware
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.7.1
"{1BD07DF4-FB06-41BA-B896-B2DA59000C96}" = Windows Live Toolbar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java™ 6 Update 26
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}" = Microsoft Security Client
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8A7CAA24-7B23-410B-A7C3-F994B0944160}" = Microsoft Virtual PC 2007
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.0)
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BEFBEDDF-1417-4C8A-92FB-F003C0D41199}" = OpenOffice.org 3.2
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3A11907-930D-41AC-A135-CC3B12F92011}" = Seagate Dashboard
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CCleaner" = CCleaner
"C-Media Audio Driver" = C-Media WDM Audio Driver
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.57
"Glary Utilities_is1" = Glary Utilities Pro 2.33.0.1158
"GOM Player" = GOM Player
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Magic ISO Maker v5.5 (build 0274)" = Magic ISO Maker v5.5 (build 0274)
"Media Player - Codec Pack" = Media Player Codec Pack 4.0.0
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 5.0 (x86 en-US)" = Mozilla Firefox 5.0 (x86 en-US)
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Puran Defrag Free Edition_is1" = Puran Defrag Free Edition 7.1
"SiS VGA Utilities" = SiS VGA Utilities
"uTorrent" = µTorrent
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.01 (32-bit)
"Wise Registry Cleaner_is1" = Wise Registry Cleaner 5.9.4
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3/07/2011 12:41:40 AM | Computer Name = YEOLDINN | Source = WinMgmt | ID = 4
Description = Failed to load MOF C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MOF\SERVICEMODEL.MOF
while recovering repository file.

Error - 6/07/2011 11:04:33 PM | Computer Name = YEOLDINN | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 0x80070005, P2 mpupdateengine, P3 am fe,
P4 10.3.1781.0, P5 mpsigstub.exe, P6 3.0.8107.0, P7 microsoft security essentials,
P8 NIL, P9 NIL, P10 NIL.

Error - 10/07/2011 12:40:22 AM | Computer Name = YEOLDINN | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 3.0.8107.0,
P5 mpsigdwn.dll, P6 3.0.8107.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P8 NIL, P9 NIL, P10 NIL.

Error - 10/07/2011 11:30:40 PM | Computer Name = YEOLDINN | Source = Application Error | ID = 1000
Description = Faulting application dd.exe, version 4.1.0.0, faulting module kernel32.dll,
version 5.1.2600.5781, fault address 0x00012afb.

Error - 10/07/2011 11:33:58 PM | Computer Name = YEOLDINN | Source = Application Error | ID = 1000
Description = Faulting application dd.exe, version 4.1.0.0, faulting module kernel32.dll,
version 5.1.2600.5781, fault address 0x00012afb.

Error - 10/07/2011 11:37:51 PM | Computer Name = YEOLDINN | Source = Application Error | ID = 1000
Description = Faulting application dd.exe, version 4.1.0.0, faulting module kernel32.dll,
version 5.1.2600.5781, fault address 0x00012afb.

Error - 12/07/2011 3:10:57 AM | Computer Name = YEOLDINN | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 0x80070003, P2 moac, P3 cachereset, P4 3.0.8402.0,
P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.

Error - 13/07/2011 4:30:55 AM | Computer Name = YEOLDINN | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 0, P2 moaccapability, P3 3.0.8402.0, P4
0, P5 0, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.

Error - 14/07/2011 10:40:30 PM | Computer Name = YEOLDINN | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 3.0.8402.0,
P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P8 NIL, P9 NIL, P10 NIL.

Error - 15/07/2011 1:52:32 AM | Computer Name = YEOLDINN | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 3.0.8402.0,
P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P8 NIL, P9 NIL, P10 NIL.

[ System Events ]
Error - 16/07/2011 12:14:34 AM | Computer Name = YEOLDINN | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL sisidex sisperf

Error - 17/07/2011 9:53:02 PM | Computer Name = YEOLDINN | Source = Service Control Manager | ID = 7000
Description = The SeaPort service failed to start due to the following error: %%3

Error - 17/07/2011 9:53:17 PM | Computer Name = YEOLDINN | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL sisidex sisperf

Error - 17/07/2011 11:54:12 PM | Computer Name = YEOLDINN | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL sisidex sisperf

Error - 18/07/2011 4:40:51 AM | Computer Name = YEOLDINN | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL sisidex sisperf

Error - 18/07/2011 5:31:07 AM | Computer Name = YEOLDINN | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 18/07/2011 9:58:23 PM | Computer Name = YEOLDINN | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL sisidex sisperf

Error - 18/07/2011 10:31:03 PM | Computer Name = YEOLDINN | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error - 20/07/2011 7:20:21 AM | Computer Name = YEOLDINN | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SASDIFSV SASKUTIL sisidex sisperf

Error - 20/07/2011 7:31:03 AM | Computer Name = YEOLDINN | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service gupdate with
arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

< End of report >

Blottedisk

Post #4July 20, 2011, 3:47 PM UTC

Please download DDS from any of the links below:

Link 1
Link 2
Link 2

——————————————————————–

Save it to your desktop.
Please disable any anti-malware program that will block scripts from running before running DDS.
Double-Click on dds and a command window will appear. This is normal.
Shortly after two logs will appear:
- DDS.txt
- Attach.txt
A window will open instructing you save & post the logs.
Save the logs to a convenient place such as your desktop.
Post the contents of the DDS.txt report in your next reply.
Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.

Blottedisk

Post #5July 23, 2011, 4:36 PM UTC

Are you still there?

free

Post #6July 24, 2011, 1:42 AM UTC

Hi, Sorry for the late reply. Here is the dds logs posted and attached below as requested. . DDS (Ver_2011-06-23.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26 Run by [removed] at 11:34:36 on 2011-07-24 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.224.122 [GMT 10:00] . AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095} . ============== Running Processes =============== . C:\WINDOWS\system32\svchost.exe -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\WINDOWS\system32\ctfmon.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com.au/ uSearchURL,(Default) = hxxp://www.forumswatcher.com/search.htm mURLSearchHooks: H - No File BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [WinPatrol] c:\program files\billp studios\winpatrol\winpatrol.exe -expressboot mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://www.pcpitstop.com/betapit/PCPitStop.CAB DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - hxxp://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1248238891750 DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} - hxxp://acs.pandasoftware.com/activescan/cabs/as2stubie.cab DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: DhcpNameServer = [removed] [removed] [removed] TCP: Interfaces\{9F67C2E3-6EEA-4267-A836-83C46EAA4F60} : DhcpNameServer = [removed] [removed] [removed] TCP: Interfaces\{EF4F9F77-2B63-4233-BB35-4DF722598121} : DhcpNameServer = 10.0.0.138 SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\hills\application data\mozilla\firefox\profiles\7ostmh8m.default\ FF - prefs.js: browser.search.selectedEngine - Yahoo-FileServe FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.au/ FF - prefs.js: keyword.URL - hxxp://www.google.com.au/ FF - prefs.js: network.proxy.type - 0 FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\microsoft silverlight\4.0.60531.0\npctrlui.dll . —- FIREFOX POLICIES —- FF - user.js: keyword.URL - hxxp://www.google.com.au/ FF - user.js: keyword.enabled - 1 . ============= SERVICES / DRIVERS =============== . R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2011-7-8 28552] R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 165648] R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2011-4-11 22504] R3 SiS7012;Service for AC'97 Sample Driver (WDM);c:\windows\system32\drivers\sis7012.sys [2009-7-21 177280] S0 ncnvyc;ncnvyc;c:\windows\system32\drivers\pqnersy.sys –> c:\windows\system32\drivers\pqnersy.sys [?] S1 MpKsl0fb37875;MpKsl0fb37875;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb8ed481-7edf-406b-9f35-59ce2ba53447}\mpksl0fb37875.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb8ed481-7edf-406b-9f35-59ce2ba53447}\MpKsl0fb37875.sys [?] S1 MpKsl1d181bf8;MpKsl1d181bf8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2ed5ff7-d054-4783-a86d-760b190f89e4}\mpksl1d181bf8.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2ed5ff7-d054-4783-a86d-760b190f89e4}\MpKsl1d181bf8.sys [?] S1 MpKsl21812df6;MpKsl21812df6;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2615e64-93d4-40d5-b8bc-c090a313dee2}\mpksl21812df6.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2615e64-93d4-40d5-b8bc-c090a313dee2}\MpKsl21812df6.sys [?] S1 MpKsl25caf545;MpKsl25caf545;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{32bb4219-4d88-48e2-a5e5-936bde97230f}\mpksl25caf545.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{32bb4219-4d88-48e2-a5e5-936bde97230f}\MpKsl25caf545.sys [?] S1 MpKsl33b3a1ac;MpKsl33b3a1ac;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5bc72cd4-71eb-4ac8-8ff3-4d88eb0db0a4}\mpksl33b3a1ac.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5bc72cd4-71eb-4ac8-8ff3-4d88eb0db0a4}\MpKsl33b3a1ac.sys [?] S1 MpKsl4053706f;MpKsl4053706f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7248df8a-4f44-464f-ba4b-5f98ec90a592}\mpksl4053706f.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7248df8a-4f44-464f-ba4b-5f98ec90a592}\MpKsl4053706f.sys [?] S1 MpKsl4083cabc;MpKsl4083cabc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c32b66c4-be68-4e67-8d4a-ce7af8eacc18}\mpksl4083cabc.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c32b66c4-be68-4e67-8d4a-ce7af8eacc18}\MpKsl4083cabc.sys [?] S1 MpKsl46e9b91d;MpKsl46e9b91d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f0ddaae1-6c69-4b3e-bb6c-e424fdd4720a}\mpksl46e9b91d.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f0ddaae1-6c69-4b3e-bb6c-e424fdd4720a}\MpKsl46e9b91d.sys [?] S1 MpKsl493a3a28;MpKsl493a3a28;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f55d21bc-324a-41de-b81f-0a7eb91827fe}\mpksl493a3a28.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f55d21bc-324a-41de-b81f-0a7eb91827fe}\MpKsl493a3a28.sys [?] S1 MpKsl4ce43e45;MpKsl4ce43e45;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ea57b3d9-0282-4b83-8faa-f25fcaedf375}\mpksl4ce43e45.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ea57b3d9-0282-4b83-8faa-f25fcaedf375}\MpKsl4ce43e45.sys [?] S1 MpKsl512dd4b4;MpKsl512dd4b4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fb0c375a-7721-4759-8e3f-59539922c84a}\mpksl512dd4b4.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{fb0c375a-7721-4759-8e3f-59539922c84a}\MpKsl512dd4b4.sys [?] S1 MpKsl53b0c832;MpKsl53b0c832;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{213f7a1d-e50d-4d06-a227-c59f23a15cf5}\mpksl53b0c832.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{213f7a1d-e50d-4d06-a227-c59f23a15cf5}\MpKsl53b0c832.sys [?] S1 MpKsl54faf401;MpKsl54faf401;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{95ee9adc-abb9-4b41-a22a-00eee94b4dff}\mpksl54faf401.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{95ee9adc-abb9-4b41-a22a-00eee94b4dff}\MpKsl54faf401.sys [?] S1 MpKsl559256ec;MpKsl559256ec;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46afe2d0-a218-4dec-94de-0a0a103f6c19}\mpksl559256ec.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46afe2d0-a218-4dec-94de-0a0a103f6c19}\MpKsl559256ec.sys [?] S1 MpKsl6476238b;MpKsl6476238b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2af13516-a17c-4702-bc7c-6fcf83949039}\mpksl6476238b.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2af13516-a17c-4702-bc7c-6fcf83949039}\MpKsl6476238b.sys [?] S1 MpKsl6a3759a4;MpKsl6a3759a4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{53e26349-05fb-44fe-8d8b-195c14019141}\mpksl6a3759a4.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{53e26349-05fb-44fe-8d8b-195c14019141}\MpKsl6a3759a4.sys [?] S1 MpKsl6b90c65f;MpKsl6b90c65f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dbbd9b5-af9b-4330-9643-342fe97ec9dc}\mpksl6b90c65f.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dbbd9b5-af9b-4330-9643-342fe97ec9dc}\MpKsl6b90c65f.sys [?] S1 MpKsl6d015d6d;MpKsl6d015d6d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5ffeb89f-3873-4d73-ae03-e16c9b999aa0}\mpksl6d015d6d.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5ffeb89f-3873-4d73-ae03-e16c9b999aa0}\MpKsl6d015d6d.sys [?] S1 MpKsl71926a0c;MpKsl71926a0c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb119949-977e-4161-ac27-28214fed85fe}\mpksl71926a0c.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bb119949-977e-4161-ac27-28214fed85fe}\MpKsl71926a0c.sys [?] S1 MpKsl7eef24e0;MpKsl7eef24e0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6397dd5e-b2f2-4e75-802f-dc089bbfcb6f}\mpksl7eef24e0.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6397dd5e-b2f2-4e75-802f-dc089bbfcb6f}\MpKsl7eef24e0.sys [?] S1 MpKsl8a57a207;MpKsl8a57a207;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d21dae6c-d3f4-4d5e-b082-5658742802f5}\mpksl8a57a207.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d21dae6c-d3f4-4d5e-b082-5658742802f5}\MpKsl8a57a207.sys [?] S1 MpKsl93571654;MpKsl93571654;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f94dc3ce-fa93-4e3e-a3c0-dd4333470f1a}\mpksl93571654.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f94dc3ce-fa93-4e3e-a3c0-dd4333470f1a}\MpKsl93571654.sys [?] S1 MpKsl96adc073;MpKsl96adc073;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{213f7a1d-e50d-4d06-a227-c59f23a15cf5}\mpksl96adc073.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{213f7a1d-e50d-4d06-a227-c59f23a15cf5}\MpKsl96adc073.sys [?] S1 MpKsl98d60509;MpKsl98d60509;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dbbd9b5-af9b-4330-9643-342fe97ec9dc}\mpksl98d60509.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5dbbd9b5-af9b-4330-9643-342fe97ec9dc}\MpKsl98d60509.sys [?] S1 MpKsl9fb5136b;MpKsl9fb5136b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2af13516-a17c-4702-bc7c-6fcf83949039}\mpksl9fb5136b.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2af13516-a17c-4702-bc7c-6fcf83949039}\MpKsl9fb5136b.sys [?] S1 MpKsladef329c;MpKsladef329c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d5966e74-4f00-4c32-b3b7-5f1c6ccd234c}\mpksladef329c.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d5966e74-4f00-4c32-b3b7-5f1c6ccd234c}\MpKsladef329c.sys [?] S1 MpKslb15c7bd2;MpKslb15c7bd2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{32bb4219-4d88-48e2-a5e5-936bde97230f}\mpkslb15c7bd2.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{32bb4219-4d88-48e2-a5e5-936bde97230f}\MpKslb15c7bd2.sys [?] S1 MpKslc72a02d3;MpKslc72a02d3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f94dc3ce-fa93-4e3e-a3c0-dd4333470f1a}\mpkslc72a02d3.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f94dc3ce-fa93-4e3e-a3c0-dd4333470f1a}\MpKslc72a02d3.sys [?] S1 MpKslcc4e918a;MpKslcc4e918a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46afe2d0-a218-4dec-94de-0a0a103f6c19}\mpkslcc4e918a.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{46afe2d0-a218-4dec-94de-0a0a103f6c19}\MpKslcc4e918a.sys [?] S1 MpKslcdf7b8d1;MpKslcdf7b8d1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3a4e6679-33f7-4cf8-81c7-b65d02b3dc30}\mpkslcdf7b8d1.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3a4e6679-33f7-4cf8-81c7-b65d02b3dc30}\MpKslcdf7b8d1.sys [?] S1 MpKsleb30e3b0;MpKsleb30e3b0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f0ddaae1-6c69-4b3e-bb6c-e424fdd4720a}\mpksleb30e3b0.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f0ddaae1-6c69-4b3e-bb6c-e424fdd4720a}\MpKsleb30e3b0.sys [?] S1 MpKslebbeb1ad;MpKslebbeb1ad;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6f298684-3aa3-4456-b7fd-23d4453a67b3}\mpkslebbeb1ad.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6f298684-3aa3-4456-b7fd-23d4453a67b3}\MpKslebbeb1ad.sys [?] S1 MpKslecf18eb9;MpKslecf18eb9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{213f7a1d-e50d-4d06-a227-c59f23a15cf5}\mpkslecf18eb9.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{213f7a1d-e50d-4d06-a227-c59f23a15cf5}\MpKslecf18eb9.sys [?] S1 MpKslf2f10a77;MpKslf2f10a77;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2eee4fb2-39dd-4964-8023-946a65526b54}\mpkslf2f10a77.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2eee4fb2-39dd-4964-8023-946a65526b54}\MpKslf2f10a77.sys [?] S1 MpKslf2fe9e77;MpKslf2fe9e77;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{26d63a75-036b-4758-9db4-592a9b48c90a}\mpkslf2fe9e77.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{26d63a75-036b-4758-9db4-592a9b48c90a}\MpKslf2fe9e77.sys [?] S1 SASDIFSV;SASDIFSV;\??\c:\docume~1\hills\locals~1\temp\sas_selfextract\sasdifsv.sys –> c:\docume~1\hills\locals~1\temp\sas_selfextract\SASDIFSV.SYS [?] S1 SASKUTIL;SASKUTIL;\??\c:\docume~1\hills\locals~1\temp\sas_selfextract\saskutil.sys –> c:\docume~1\hills\locals~1\temp\sas_selfextract\SASKUTIL.SYS [?] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 alcan5ln;SpeedTouch™ USB ADSL RFC1483 Networking Driver (NDIS);c:\windows\system32\drivers\alcan5ln.sys [2009-7-22 36256] S3 CrucialSMBusScan;CrucialSMBusScan;\??\c:\docume~1\admini~1\locals~1\temp\crucialsmbusscan_xp32.sys –> c:\docume~1\admini~1\locals~1\temp\CrucialSMBusScan_XP32.sys [?] S3 Lavasoft Kernexplorer;Lavasoft helper driver;\??\c:\program files\lavasoft\ad-aware\kernexplorer.sys –> c:\program files\lavasoft\ad-aware\KernExplorer.sys [?] S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys –> c:\windows\system32\drivers\mbamswissarmy.sys [?] S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\drivers\wg111v2.sys –> c:\windows\system32\drivers\wg111v2.sys [?] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-7-20 136176] S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-7-20 136176] S4 PuranDefrag;PuranDefrag;c:\windows\system32\PuranDefragS.exe [2010-12-24 229376] S4 SeagateDashboardService;Seagate Dashboard Service;c:\program files\seagate\seagate dashboard\SeagateDashboardService.exe [2010-7-7 14088] . =============== File Associations =============== . vbefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %* vbsfile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %* jsefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %* . =============== Created Last 30 ================ . 2011-07-23 01:03:55 6881616 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{01730313-107f-41ef-85eb-b7aa60d8fe3e}\mpengine.dll 2011-07-20 12:23:56 7074640 ——w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5fb42f6b-316f-4872-8d8b-0e64c39763ad}\mpengine.dll 2011-07-13 11:25:28 96512 —-a-w- c:\windows\system32\drivers\atapi_TM.sys 2011-07-13 11:05:46 190032 —-a-w- c:\windows\system32\drivers\tmcomm.sys 2011-07-13 11:00:30 ——– d—–w- c:\windows\system32\wbem\repository\FS 2011-07-13 11:00:30 ——– d—–w- c:\windows\system32\wbem\Repository 2011-07-13 09:04:07 ——– d-sha-r- C:\cmdcons 2011-07-13 07:41:40 7074640 ——w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll 2011-07-12 07:10:21 ——– d—–w- c:\program files\Microsoft Security Client 2011-07-12 06:47:35 ——– d–h–w- c:\windows\system32\GroupPolicy 2011-07-10 12:47:38 388096 —-a-r- c:\documents and settings\hills\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe 2011-07-10 12:47:35 ——– d—–w- c:\program files\Trend Micro 2011-07-10 12:47:02 602112 -c—-w- c:\windows\system32\dllcache\msfeeds.dll 2011-07-10 12:47:01 55296 -c—-w- c:\windows\system32\dllcache\msfeedsbs.dll 2011-07-10 12:47:00 743424 -c—-w- c:\windows\system32\dllcache\iedvtool.dll 2011-07-10 12:46:55 247808 -c—-w- c:\windows\system32\dllcache\ieproxy.dll 2011-07-10 12:46:55 12800 -c—-w- c:\windows\system32\dllcache\xpshims.dll 2011-07-10 12:46:51 1991680 -c—-w- c:\windows\system32\dllcache\iertutil.dll 2011-07-10 11:43:37 ——– d-sh–w- c:\documents and settings\hills\IECompatCache 2011-07-08 08:40:39 28552 —-a-w- c:\windows\system32\drivers\pavboot.sys 2011-07-08 08:40:22 ——– d—–w- c:\program files\Panda Security 2011-07-04 09:37:07 116224 -c–a-w- c:\windows\system32\dllcache\xrxwiadr.dll 2011-07-04 09:36:52 23040 -c–a-w- c:\windows\system32\dllcache\xrxwbtmp.dll 2011-07-04 09:36:46 18944 -c–a-w- c:\windows\system32\dllcache\xrxscnui.dll 2011-07-04 09:36:34 27648 -c–a-w- c:\windows\system32\dllcache\xrxftplt.exe 2011-07-04 09:36:14 4608 -c–a-w- c:\windows\system32\dllcache\xrxflnch.exe 2011-07-04 09:35:33 99865 -c–a-w- c:\windows\system32\dllcache\xlog.exe 2011-07-04 09:35:16 16970 -c–a-w- c:\windows\system32\dllcache\xem336n5.sys 2011-07-04 09:35:13 19455 -c–a-w- c:\windows\system32\dllcache\wvchntxx.sys 2011-07-04 09:35:08 19200 -c–a-w- c:\windows\system32\dllcache\wstcodec.sys 2011-07-04 09:35:07 12063 -c–a-w- c:\windows\system32\dllcache\wsiintxx.sys 2011-07-04 09:35:01 8192 -c–a-w- c:\windows\system32\dllcache\wshirda.dll 2011-07-04 09:34:37 8832 -c–a-w- c:\windows\system32\dllcache\wmiacpi.sys 2011-07-04 09:34:29 154624 -c–a-w- c:\windows\system32\dllcache\wlluc48.sys 2011-07-04 09:34:16 34890 -c–a-w- c:\windows\system32\dllcache\wlandrv2.sys 2011-07-04 09:34:03 771581 -c–a-w- c:\windows\system32\dllcache\winacisa.sys 2011-07-04 09:33:56 53760 -c–a-w- c:\windows\system32\dllcache\wiamsmud.dll 2011-07-04 09:33:44 87040 -c–a-w- c:\windows\system32\dllcache\wiafbdrv.dll 2011-07-04 09:33:43 31232 -c–a-w- c:\windows\system32\dllcache\weitekp9.sys 2011-07-04 09:33:42 41600 -c–a-w- c:\windows\system32\dllcache\weitekp9.dll 2011-07-04 09:33:28 701386 -c–a-w- c:\windows\system32\dllcache\wdhaalba.sys 2011-07-04 09:33:26 23615 -c–a-w- c:\windows\system32\dllcache\wch7xxnt.sys 2011-07-04 09:33:20 31744 -c–a-w- c:\windows\system32\dllcache\wceusbsh.sys 2011-07-04 09:33:08 35871 -c–a-w- c:\windows\system32\dllcache\wbfirdma.sys 2011-07-04 09:33:04 33599 -c–a-w- c:\windows\system32\dllcache\watv04nt.sys 2011-07-04 09:33:03 19551 -c–a-w- c:\windows\system32\dllcache\watv02nt.sys 2011-07-04 09:33:01 29311 -c–a-w- c:\windows\system32\dllcache\watv01nt.sys 2011-07-04 09:31:49 24576 -c–a-w- c:\windows\system32\dllcache\viairda.sys 2011-07-04 09:31:47 5376 -c–a-w- c:\windows\system32\dllcache\viaide.sys 2011-07-04 09:31:35 53760 -c–a-w- c:\windows\system32\dllcache\vfwwdm32.dll 2011-07-04 09:31:27 687999 -c–a-w- c:\windows\system32\dllcache\usrwdxjs.sys 2011-07-04 09:31:20 765884 -c–a-w- c:\windows\system32\dllcache\usrti.sys 2011-07-04 09:31:13 113762 -c–a-w- c:\windows\system32\dllcache\usrpda.sys 2011-07-04 09:31:07 7556 -c–a-w- c:\windows\system32\dllcache\usroslba.sys 2011-07-04 09:31:00 224802 -c–a-w- c:\windows\system32\dllcache\usr1807a.sys 2011-07-04 09:30:54 794399 -c–a-w- c:\windows\system32\dllcache\usr1806v.sys 2011-07-04 09:30:49 793598 -c–a-w- c:\windows\system32\dllcache\usr1806.sys 2011-07-04 09:30:34 794654 -c–a-w- c:\windows\system32\dllcache\usr1801.sys 2011-07-04 09:30:31 20608 -c–a-w- c:\windows\system32\dllcache\usbuhci.sys 2011-07-04 09:30:29 26112 -c–a-w- c:\windows\system32\dllcache\usbser.sys 2011-07-04 09:30:27 15104 -c–a-w- c:\windows\system32\dllcache\usbscan.sys 2011-07-04 09:30:25 25856 -c–a-w- c:\windows\system32\dllcache\usbprint.sys 2011-07-04 09:30:23 32128 -c–a-w- c:\windows\system32\dllcache\usbccgp.sys 2011-07-04 09:30:21 60032 -c–a-w- c:\windows\system32\dllcache\usbaudio.sys 2011-07-04 09:30:16 32384 -c–a-w- c:\windows\system32\dllcache\usb101et.sys 2011-07-04 09:30:08 94720 -c–a-w- c:\windows\system32\dllcache\umaxud32.dll 2011-07-04 09:30:03 28160 -c–a-w- c:\windows\system32\dllcache\umaxu40.dll 2011-07-04 09:29:57 26624 -c–a-w- c:\windows\system32\dllcache\umaxu22.dll 2011-07-04 09:29:52 69632 -c–a-w- c:\windows\system32\dllcache\umaxu12.dll 2011-07-04 09:29:47 50688 -c–a-w- c:\windows\system32\dllcache\umaxscan.dll 2011-07-04 09:29:42 22912 -c–a-w- c:\windows\system32\dllcache\umaxpcls.sys 2011-07-04 09:29:37 50176 -c–a-w- c:\windows\system32\dllcache\umaxp60.dll 2011-07-04 09:29:31 47616 -c–a-w- c:\windows\system32\dllcache\umaxcam.dll 2011-07-04 09:29:26 211968 -c–a-w- c:\windows\system32\dllcache\um54scan.dll 2011-07-04 09:29:21 216064 -c–a-w- c:\windows\system32\dllcache\um34scan.dll 2011-07-04 09:29:15 36736 -c–a-w- c:\windows\system32\dllcache\ultra.sys 2011-07-04 09:29:07 14336 -c–a-w- c:\windows\system32\dllcache\tsprof.exe 2011-07-04 09:29:07 11520 -c–a-w- c:\windows\system32\dllcache\twotrack.sys 2011-07-04 09:28:59 166784 -c–a-w- c:\windows\system32\dllcache\tridxpm.sys 2011-07-04 09:28:54 525568 -c–a-w- c:\windows\system32\dllcache\tridxp.dll 2011-07-04 09:28:48 159232 -c–a-w- c:\windows\system32\dllcache\tridkbm.sys 2011-07-04 09:28:43 440576 -c–a-w- c:\windows\system32\dllcache\tridkb.dll 2011-07-04 09:28:38 222336 -c–a-w- c:\windows\system32\dllcache\trid3dm.sys 2011-07-04 09:28:32 315520 -c–a-w- c:\windows\system32\dllcache\trid3d.dll 2011-07-04 09:28:26 34375 -c–a-w- c:\windows\system32\dllcache\tpro4.sys 2011-07-04 09:28:15 42496 -c–a-w- c:\windows\system32\dllcache\tp4res.dll 2011-07-04 09:28:11 82944 -c–a-w- c:\windows\system32\dllcache\tp4mon.exe 2011-07-04 09:28:05 31744 -c–a-w- c:\windows\system32\dllcache\tp4.dll 2011-07-04 09:28:04 3374640 -c–a-w- c:\windows\system32\dllcache\tourW.exe 2011-07-04 09:27:59 4992 -c–a-w- c:\windows\system32\dllcache\toside.sys 2011-07-04 09:27:53 230912 -c–a-w- c:\windows\system32\dllcache\tosdvd03.sys 2011-07-04 09:27:48 241664 -c–a-w- c:\windows\system32\dllcache\tosdvd02.sys 2011-07-04 09:27:43 28232 -c–a-w- c:\windows\system32\dllcache\tos4mo.sys 2011-07-04 09:27:35 123995 -c–a-w- c:\windows\system32\dllcache\tjisdn.sys 2011-07-04 09:27:32 185344 -c–a-w- c:\windows\system32\dllcache\thawbrkr.dll 2011-07-04 09:27:26 138528 -c–a-w- c:\windows\system32\dllcache\tgiulnt5.sys 2011-07-04 09:27:15 81408 -c–a-w- c:\windows\system32\dllcache\tgiul50.dll 2011-07-04 09:27:10 149376 -c–a-w- c:\windows\system32\dllcache\tffsport.sys 2011-07-04 09:27:09 19464 -c–a-w- c:\windows\system32\dllcache\tdspx.sys 2011-07-04 09:27:04 17129 -c–a-w- c:\windows\system32\dllcache\tdkcd31.sys 2011-07-04 09:25:56 3968 -c–a-w- c:\windows\system32\dllcache\swusbflt.sys 2011-07-04 09:25:52 10240 -c–a-w- c:\windows\system32\dllcache\swpidflt.dll 2011-07-04 09:25:47 10240 -c–a-w- c:\windows\system32\dllcache\swpdflt2.dll 2011-07-04 09:25:42 53760 -c–a-w- c:\windows\system32\dllcache\sw_wheel.dll 2011-07-04 09:25:31 41472 -c–a-w- c:\windows\system32\dllcache\sw_effct.dll 2011-07-04 09:25:25 15232 -c–a-w- c:\windows\system32\dllcache\streamip.sys 2011-07-04 09:25:19 155648 -c–a-w- c:\windows\system32\dllcache\stlnprop.dll 2011-07-04 09:25:15 53248 -c–a-w- c:\windows\system32\dllcache\stlncoin.dll 2011-07-04 09:25:10 285760 -c–a-w- c:\windows\system32\dllcache\stlnata.sys 2011-07-04 09:25:04 16896 -c–a-w- c:\windows\system32\dllcache\stcusb.sys 2011-07-04 09:25:04 16896 -c–a-w- c:\windows\system32\dllcache\status.dll 2011-07-04 09:24:54 48736 -c–a-w- c:\windows\system32\dllcache\srwlnd5.sys 2011-07-04 09:24:49 99328 -c–a-w- c:\windows\system32\dllcache\srusd.dll 2011-07-04 09:24:48 101376 -c–a-w- c:\windows\system32\dllcache\srusbusd.dll 2011-07-04 09:24:38 24660 -c–a-w- c:\windows\system32\dllcache\spxupchk.dll 2011-07-04 09:24:30 61824 -c–a-w- c:\windows\system32\dllcache\speed.sys 2011-07-04 09:24:26 106584 -c–a-w- c:\windows\system32\dllcache\spdports.dll 2011-07-04 09:24:21 19072 -c–a-w- c:\windows\system32\dllcache\sparrow.sys 2011-07-04 09:24:15 7552 -c–a-w- c:\windows\system32\dllcache\sonypvu1.sys 2011-07-04 09:24:11 37040 -c–a-w- c:\windows\system32\dllcache\sonypi.sys 2011-07-04 09:24:06 114688 -c–a-w- c:\windows\system32\dllcache\sonypi.dll 2011-07-04 09:24:01 20752 -c–a-w- c:\windows\system32\dllcache\sonync.sys 2011-07-04 09:22:56 24576 -c–a-w- c:\windows\system32\dllcache\smc8000n.sys 2011-07-04 09:21:59 91294 -c–a-w- c:\windows\system32\dllcache\skfpwin.sys 2011-07-04 09:21:54 94698 -c–a-w- c:\windows\system32\dllcache\sk98xwin.sys 2011-07-04 09:21:49 157696 -c–a-w- c:\windows\system32\dllcache\sisv256.dll 2011-07-04 09:21:39 50432 -c–a-w- c:\windows\system32\dllcache\sisv.sys 2011-07-04 09:21:35 32768 -c–a-w- c:\windows\system32\dllcache\sisnic.sys 2011-07-04 09:21:29 150144 -c–a-w- c:\windows\system32\dllcache\sis6306v.dll 2011-07-04 09:21:25 68608 -c–a-w- c:\windows\system32\dllcache\sis6306p.sys 2011-07-04 09:21:20 252032 -c–a-w- c:\windows\system32\dllcache\sis300iv.dll 2011-07-04 09:21:09 101760 -c–a-w- c:\windows\system32\dllcache\sis300ip.sys 2011-07-04 09:21:08 18944 -c–a-w- c:\windows\system32\dllcache\simptcp.dll 2011-07-04 09:19:57 17280 -c–a-w- c:\windows\system32\dllcache\scr111.sys 2011-07-04 09:19:52 16640 -c–a-w- c:\windows\system32\dllcache\scmstcs.sys 2011-07-04 09:19:46 23936 -c–a-w- c:\windows\system32\dllcache\sccmusbm.sys 2011-07-04 09:19:42 23936 -c–a-w- c:\windows\system32\dllcache\sccmn50m.sys 2011-07-04 09:19:38 43904 -c–a-w- c:\windows\system32\dllcache\sbp2port.sys 2011-07-04 09:19:33 495616 -c–a-w- c:\windows\system32\dllcache\sblfx.dll 2011-07-04 09:19:27 75392 -c–a-w- c:\windows\system32\dllcache\s3savmxm.sys 2011-07-04 09:19:22 245632 -c–a-w- c:\windows\system32\dllcache\s3savmx.dll 2011-07-04 09:19:17 77824 -c–a-w- c:\windows\system32\dllcache\s3sav4m.sys 2011-07-04 09:19:13 198400 -c–a-w- c:\windows\system32\dllcache\s3sav4.dll 2011-07-04 09:19:08 61504 -c–a-w- c:\windows\system32\dllcache\s3sav3dm.sys 2011-07-04 09:19:04 179264 -c–a-w- c:\windows\system32\dllcache\s3sav3d.dll 2011-07-04 09:17:57 19017 -c–a-w- c:\windows\system32\dllcache\rtl8029.sys 2011-07-04 09:17:52 30720 -c–a-w- c:\windows\system32\dllcache\rthwcls.sys 2011-07-04 09:17:46 9216 -c–a-w- c:\windows\system32\dllcache\rsmgrstr.dll 2011-07-04 09:17:34 3840 -c–a-w- c:\windows\system32\dllcache\rpfun.sys 2011-07-04 09:17:27 79104 -c–a-w- c:\windows\system32\dllcache\rocket.sys 2011-07-04 09:17:22 37563 -c–a-w- c:\windows\system32\dllcache\rlnet5.sys 2011-07-04 09:17:17 86097 -c–a-w- c:\windows\system32\dllcache\reslog32.dll 2011-07-04 09:17:14 23040 -c–a-w- c:\windows\system32\dllcache\EXCH_regtrace.exe 2011-07-04 09:17:13 14848 -c–a-w- c:\windows\system32\dllcache\register.exe 2011-07-04 09:17:06 19584 -c–a-w- c:\windows\system32\dllcache\rasirda.sys 2011-07-04 09:15:58 128286 -c–a-w- c:\windows\system32\dllcache\ptserli.sys 2011-07-04 09:14:56 173696 -c–a-w- c:\windows\system32\dllcache\philcam2.sys 2011-07-04 09:13:52 26153 -c–a-w- c:\windows\system32\dllcache\pcmlm56.sys 2011-07-04 09:12:56 28032 -c–a-w- c:\windows\system32\dllcache\ovcd.sys 2011-07-04 09:12:52 48000 -c–a-w- c:\windows\system32\dllcache\ovcam2.sys 2011-07-04 09:12:47 25088 -c–a-w- c:\windows\system32\dllcache\ovca.sys 2011-07-04 09:12:42 54186 -c–a-w- c:\windows\system32\dllcache\otcsercb.sys 2011-07-04 09:12:38 43689 -c–a-w- c:\windows\system32\dllcache\otceth5.sys 2011-07-04 09:12:33 27209 -c–a-w- c:\windows\system32\dllcache\otc06x5.sys 2011-07-04 09:12:22 54528 -c–a-w- c:\windows\system32\dllcache\opl3sax.sys 2011-07-04 09:12:15 61696 -c–a-w- c:\windows\system32\dllcache\ohci1394.sys 2011-07-04 09:12:06 198144 -c–a-w- c:\windows\system32\dllcache\nv3.sys 2011-07-04 09:12:01 123776 -c–a-w- c:\windows\system32\dllcache\nv3.dll 2011-07-04 09:11:52 51552 -c–a-w- c:\windows\system32\dllcache\ntgrip.sys 2011-07-04 09:11:52 38912 -c–a-w- c:\windows\system32\dllcache\EXCH_ntfsdrv.dll 2011-07-04 09:11:45 9344 -c–a-w- c:\windows\system32\dllcache\ntapm.sys 2011-07-04 09:11:40 7552 -c–a-w- c:\windows\system32\dllcache\nsmmc.sys 2011-07-04 09:11:36 28672 -c–a-w- c:\windows\system32\dllcache\nscirda.sys 2011-07-04 09:11:31 87040 -c–a-w- c:\windows\system32\dllcache\nm6wdm.sys 2011-07-04 09:11:26 126080 -c–a-w- c:\windows\system32\dllcache\nm5a2wdm.sys 2011-07-04 09:11:12 53248 -c–a-w- c:\windows\system32\dllcache\nextlink.dll 2011-07-04 09:11:12 32840 -c–a-w- c:\windows\system32\dllcache\ngrpci.sys 2011-07-04 09:11:05 132695 -c–a-w- c:\windows\system32\dllcache\netwlan5.sys 2011-07-04 09:09:57 52255 -c–a-w- c:\windows\system32\dllcache\n1000nt5.sys 2011-07-04 09:09:53 75520 -c–a-w- c:\windows\system32\dllcache\mxport.sys 2011-07-04 09:09:49 7168 -c–a-w- c:\windows\system32\dllcache\mxport.dll 2011-07-04 09:09:44 19968 -c–a-w- c:\windows\system32\dllcache\mxnic.sys 2011-07-04 09:09:40 19968 -c–a-w- c:\windows\system32\dllcache\mxicfg.dll 2011-07-04 09:09:36 21888 -c–a-w- c:\windows\system32\dllcache\mxcard.sys 2011-07-04 09:09:35 229439 -c–a-w- c:\windows\system32\dllcache\multibox.dll 2011-07-04 09:09:24 103296 -c–a-w- c:\windows\system32\dllcache\mtxvideo.sys 2011-07-04 09:09:14 5504 -c–a-w- c:\windows\system32\dllcache\mstee.sys 2011-07-04 09:09:12 49024 -c–a-w- c:\windows\system32\dllcache\mstape.sys 2011-07-04 09:08:59 12416 -c–a-w- c:\windows\system32\dllcache\msriffwv.sys 2011-07-04 09:08:36 2944 -c–a-w- c:\windows\system32\dllcache\msmpu401.sys 2011-07-04 09:08:32 22016 -c–a-w- c:\windows\system32\dllcache\msircomm.sys 2011-07-04 09:08:30 98304 -c–a-w- c:\windows\system32\dllcache\msir3jp.dll 2011-07-04 09:08:17 35200 -c–a-w- c:\windows\system32\dllcache\msgame.sys 2011-07-04 09:08:12 6016 -c–a-w- c:\windows\system32\dllcache\msfsio.sys 2011-07-04 09:08:09 51200 -c–a-w- c:\windows\system32\dllcache\msdv.sys 2011-07-04 09:06:58 48768 -c–a-w- c:\windows\system32\dllcache\maestro.sys 2011-07-04 09:05:58 15744 -c–a-w- c:\windows\system32\dllcache\lit220p.sys 2011-07-04 09:04:59 6144 -c–a-w- c:\windows\system32\dllcache\kbd101c.dll 2011-07-04 09:03:59 57398 -c–a-w- c:\windows\system32\dllcache\imjpdadm.exe 2011-07-04 09:02:58 100936 -c–a-w- c:\windows\system32\dllcache\ibmtok.sys 2011-07-04 09:01:56 542879 -c–a-w- c:\windows\system32\dllcache\hsf_msft.sys 2011-07-04 09:00:58 31232 -c–a-w- c:\windows\system32\dllcache\hpgt42tk.dll 2011-07-04 08:59:59 59136 -c–a-w- c:\windows\system32\dllcache\gckernel.sys 2011-07-04 08:58:58 22090 -c–a-w- c:\windows\system32\dllcache\fem556n5.sys 2011-07-04 08:57:58 37120 -c–a-w- c:\windows\system32\dllcache\es1370mp.sys 2011-07-04 08:56:58 24653 -c–a-w- c:\windows\system32\dllcache\el574nd4.sys 2011-07-04 08:55:59 31305 -c–a-w- c:\windows\system32\dllcache\disrvpp.dll 2011-07-04 08:54:59 179584 -c–a-w- c:\windows\system32\dllcache\dac2w2k.sys 2011-07-04 08:53:59 20736 -c–a-w- c:\windows\system32\dllcache\cmbp0wdm.sys 2011-07-04 08:52:37 13824 -c–a-w- c:\windows\system32\dllcache\bulltlp3.sys 2011-07-04 08:51:59 37568 -c–a-w- c:\windows\system32\dllcache\avmwan.sys 2011-07-04 08:50:59 10880 -c–a-w- c:\windows\system32\dllcache\admjoy.sys 2011-07-04 08:49:42 7680 -c–a-w- c:\windows\system32\dllcache\inetmgr.exe 2011-07-04 08:49:42 19968 -c–a-w- c:\windows\system32\dllcache\inetsloc.dll 2011-07-04 08:49:41 169984 -c–a-w- c:\windows\system32\dllcache\iisui.dll 2011-07-04 08:49:38 5632 -c–a-w- c:\windows\system32\dllcache\iisrstap.dll 2011-07-04 08:49:38 14336 -c–a-w- c:\windows\system32\dllcache\iisreset.exe 2011-07-04 08:49:36 6144 -c–a-w- c:\windows\system32\dllcache\ftpsapi2.dll 2011-07-03 04:36:49 ——– d—–w- c:\windows\system32\wbem\repository.old\FS 2011-07-03 04:36:49 ——– d—–w- c:\windows\system32\wbem\repository.old 2011-07-03 02:11:57 73728 —-a-w- c:\windows\system32\javacpl.cpl 2011-06-30 01:56:08 ——– d—–w- c:\windows\system32\FxsTmp 2011-06-29 03:01:50 2106216 —-a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll 2011-06-29 03:01:49 1998168 —-a-w- c:\program files\mozilla firefox\d3dx9_43.dll . ==================== Find3M ==================== . 2011-07-09 10:15:28 101720 —-a-w- c:\windows\system32\drivers\SBREDrv.sys 2011-07-03 02:10:53 472808 —-a-w- c:\windows\system32\deployJava1.dll 2011-06-19 06:13:03 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-06-02 14:02:05 1858944 —-a-w- c:\windows\system32\win32k.sys 2011-05-21 10:11:04 22 –sha-w- c:\documents and settings\hills\application data\Sys2662.Config.Repository.bin 2011-05-21 09:28:01 1060864 —-a-w- c:\windows\system32\mfc71.dll 2011-05-21 09:27:58 348160 —-a-w- c:\windows\system32\msvcr71.dll 2011-05-21 09:27:58 1700352 —-a-w- c:\windows\system32\gdiplus.dll 2011-05-17 09:13:59 436792 —-a-w- c:\windows\system32\drivers\sptd.sys 2011-05-02 23:05:10 3661824 —-a-w- c:\windows\system32\ffdshow.ax 2011-05-02 22:30:50 1144147 —-a-w- c:\windows\system32\ffmpegmt.dll 2011-05-02 22:27:54 3935545 —-a-w- c:\windows\system32\ffmpeg.dll 2011-05-02 20:23:46 324096 —-a-w- c:\windows\system32\TomsMoComp_ff.dll 2011-05-02 20:19:34 100352 —-a-w- c:\windows\system32\ff_wmv9.dll 2011-05-02 20:19:20 80896 —-a-w- c:\windows\system32\ff_vfw.dll 2011-05-02 15:31:52 692736 —-a-w- c:\windows\system32\inetcomm.dll 2011-04-29 17:25:27 151552 —-a-w- c:\windows\system32\schannel.dll 2011-04-29 16:19:43 456320 —-a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-04-26 11:22:28 20800 —-a-w- c:\windows\system32\cnat.exe 2011-04-26 11:07:50 33280 —-a-w- c:\windows\system32\csrsrv.dll 2011-04-26 11:07:50 293376 —-a-w- c:\windows\system32\winsrv.dll 2011-04-25 16:11:12 916480 —-a-w- c:\windows\system32\wininet.dll 2011-04-25 16:11:11 43520 —-a-w- c:\windows\system32\licmgr10.dll 2011-04-25 16:11:11 1469440 ——w- c:\windows\system32\inetcpl.cpl 2011-04-25 12:01:22 385024 —-a-w- c:\windows\system32\html.iec . ============= FINISH: 11:36:06.76 ===============

Attachments:

📎attach.txt

Blottedisk

Post #7July 27, 2011, 6:15 PM UTC

Hi there,

Sorry for the delay.

I've been researching your logs, and I can't find any malware. You can (and should) fix the R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm entry as suggested.

free

Post #8July 29, 2011, 5:30 AM UTC

Yeah no worries,

So It will be okay if I fix the R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.forumswatcher.com/search.htm entry with Highjack This.

Blottedisk

Post #9July 29, 2011, 4:36 PM UTC

Correct

free

Post #10August 1, 2011, 6:58 AM UTC

Hey, I have fixed the entry with HijackThis, Thanksalot for all your help too diagnose spyware/malware on the system. Thanks again Regards Free

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Hijackthis diagnosis

✨ Ask AI

Ask AI