Superantispyware finds Rogue.agent/GEN - Nullo[dll]

hi,

i have the same problem as
http://forums.whatthetech.com/index.php?showtopic=116902

PC with operating system Win XP Browser IE 8. the machine is slow. Multiple window pops up. I must log in every time I go on internet. Superantispyware finds Rogue.agent/GEN - Nullo[dll] removes it then it is back over and over again.

Hope you can help!!!!




Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:09:05, on 8/17/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Avira\AntiVir Desktop\sched.exe
D:\Program Files\Avira\AntiVir Desktop\avguard.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\Program Files\Avira\AntiVir Desktop\avshadow.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Avira\AntiVir Desktop\avgnt.exe
D:\Program Files\Wireless\Common\Utility.exe
C:\Program Files\BitTorrent\bittorrent.exe
D:\Documents and Settings\my pc\Application Data\Dropbox\bin\Dropbox.exe
D:\Program Files\QvodPlayer\QvodPlayer.exe
D:\Program Files\QvodPlayer\QvodTerminal.exe
D:\WINDOWS\system32\taskmgr.exe
D:\WINDOWS\system32\SearchIndexer.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Documents and Settings\my pc\My Documents\Downloaded Installations\HiJackThis.exe

O2 - BHO: WebThunderBHO - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IE2EMBHO Class - {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} - D:\Program Files\easyMule\modules\IE2EM.dll
O2 - BHO: MediaMonitor.XlMediaMonitorBhoObject - {0EA37B17-6B8B-4085-8257-F3A4AA69C27A} - D:\Program Files\Thunder Network\Thunder\BHO\XlBrowserAddin1.0.1.29.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - D:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - D:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: XunleiBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\Program Files\Thunder Network\Thunder\BHO\XunleiBHO7.1.8.2302.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: DownloadAssistant.XlDownloadAssistantBhoObject - {B0E2F470-0B07-48f0-B3B1-5749505FAE9B} - D:\Program Files\Thunder Network\Thunder\BHO\XlBrowserAddin1.0.1.29.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - D:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - D:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - D:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - D:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: BitTorrent (2).lnk = C:\Program Files\BitTorrent\bittorrent.exe
O4 - Startup: Dropbox.lnk = D:\Documents and Settings\my pc\Application Data\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Wireless Utility.lnk = D:\Program Files\Wireless\Common\Utility.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo…toUploader5.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///D:/Program%20Files/Plants%20vs.%20Zombies/Images/stg_drm.ocx
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} (Cdmcco Class) - http://cafeimg.daum-img.net/cab9_1/dmcc2.c…ersion=1,0,0,10
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///D:/Program%20Files/Plants%20vs.%20Zombies/Images/armhelper.ocx
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: GoToAssist - D:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: StumbleUponUpdateService - stumbleupon.com - D:\Program Files\StumbleUpon\StumbleUponUpdateService.exe

–
End of file - 8893 bytes

btw this is OTL.txt log:

OTL logfile created on: 8/17/2011 9:26:31 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = D:\Documents and Settings\my pc\My Documents\Downloaded Installations
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.20 Gb Available Physical Memory | 60.01% Memory free
3.85 Gb Paging File | 2.91 Gb Available in Paging File | 75.64% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 238.05 Gb Total Space | 142.82 Gb Free Space | 60.00% Space Free | Partition Type: NTFS
Drive D: | 227.71 Gb Total Space | 73.20 Gb Free Space | 32.15% Space Free | Partition Type: NTFS
Drive G: | 465.76 Gb Total Space | 32.38 Gb Free Space | 6.95% Space Free | Partition Type: NTFS
Drive H: | 74.53 Gb Total Space | 50.16 Gb Free Space | 67.31% Space Free | Partition Type: NTFS

Computer Name: WAYNE | User Name: my pc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - D:\Documents and Settings\my pc\My Documents\Downloaded Installations\OTL.exe (OldTimer Tools)
PRC - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - D:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - D:\Documents and Settings\my pc\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
PRC - D:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - D:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - D:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - D:\Program Files\QvodPlayer\QvodTerminal.exe (Shenzhen QVOD Technology Co.,Ltd)
PRC - D:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - D:\Program Files\Wireless\Common\Utility.exe (Technology, Corp.)


========== Modules (SafeList) ==========

MOD - D:\Documents and Settings\my pc\My Documents\Downloaded Installations\OTL.exe (OldTimer Tools)
MOD - D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - D:\WINDOWS\system32\msacm32.dll (Microsoft Corporation)
MOD - D:\WINDOWS\AppPatch\acgenral.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (mi-raysat_3dsmax9_32) mental ray 3.5 Satellite (32-bit) – File not found
SRV - (AppMgmt) – File not found
SRV - (!SASCORE) – D:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
SRV - (MBAMService) – D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AntiVirService) – D:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (XLDoctor Service) – D:\Program Files\Thunder Network\Thunder\Program\DctSer.dll (ShenZhen Xunlei Networking Technologies,LTD)
SRV - (nvUpdatusService) – D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (AntiVirSchedulerService) – D:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (StumbleUponUpdateService) – D:\Program Files\StumbleUpon\StumbleUponUpdateService.exe (stumbleupon.com)
SRV - (afcdpsrv) – D:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
SRV - (SpyHunter 4 Service) – D:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe (Enigma Software Group USA, LLC.)
SRV - (ServiceLayer) – D:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (FLEXnet Licensing Service) – D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (AcrSch2Svc) – D:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (GoToAssist) – D:\Program Files\Citrix\GoToAssist\480\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (YahooAUService) – D:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (mi-raysat_3dsMax2009_32) – C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe ()
SRV - (Autodesk Licensing Service) – D:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe (Autodesk)


========== Driver Services (SafeList) ==========

DRV - (SASDIFSV) – D:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – D:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (MBAMProtector) – D:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avipbb) – D:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) – D:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (dgderdrv) – D:\WINDOWS\system32\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV - (afcdp) – D:\WINDOWS\system32\drivers\afcdp.sys (Acronis)
DRV - (tdrpman251) Acronis Try&Decide and Restore Points filter (build 251) – D:\WINDOWS\system32\DRIVERS\tdrpm251.sys (Acronis)
DRV - (timounter) – D:\WINDOWS\system32\DRIVERS\timntr.sys (Acronis)
DRV - (snapman) – D:\WINDOWS\system32\DRIVERS\snapman.sys (Acronis)
DRV - (FsUsbExDisk) – D:\WINDOWS\system32\FsUsbExDisk.Sys ()
DRV - (esgiguard) – D:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys ()
DRV - (Revoflt) – D:\WINDOWS\system32\drivers\revoflt.sys (VS Revo Group)
DRV - (fssfltr) – D:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (pavboot) – D:\WINDOWS\system32\drivers\pavboot.sys (Panda Security, S.L.)
DRV - (avgio) – D:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (ssmdrv) – D:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (pccsmcfd) – D:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (sptd) – D:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (RT73) – D:\WINDOWS\system32\drivers\rt73.sys (Ralink Technology, Corp.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – D:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (RTLE8023xp) – D:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (DLADResM) – D:\WINDOWS\system32\DLA\DLADResM.SYS (Roxio)
DRV - (DLABMFSM) – D:\WINDOWS\system32\DLA\DLABMFSM.SYS (Roxio)
DRV - (DLAUDF_M) – D:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Roxio)
DRV - (DLAUDFAM) – D:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Roxio)
DRV - (DLAOPIOM) – D:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Roxio)
DRV - (DLABOIOM) – D:\WINDOWS\system32\DLA\DLABOIOM.SYS (Roxio)
DRV - (DLAIFS_M) – D:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Roxio)
DRV - (DLAPoolM) – D:\WINDOWS\system32\DLA\DLAPoolM.SYS (Roxio)
DRV - (DLACDBHM) – D:\WINDOWS\system32\drivers\DLACDBHM.SYS (Roxio)
DRV - (DLARTL_M) – D:\WINDOWS\system32\drivers\DLARTL_M.SYS (Roxio)
DRV - (FsVga) – D:\WINDOWS\system32\drivers\fsvga.sys (Microsoft Corporation)
DRV - (tandpl) – D:\WINDOWS\system32\drivers\tandpl.sys ()
DRV - (enodpl) – D:\WINDOWS\system32\drivers\enodpl.sys ()
DRV - (PQNTDrv) – D:\WINDOWS\System32\drivers\PQNTDRV.sys (PowerQuest Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://sg.yahoo.com/?fr=fp-yie8/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: D:\Program Files\BitTorrent_DNA\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: D:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: D:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: D:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: D:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: D:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: D:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: D:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.660: D:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.660: D:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.660: D:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@xunlei.com/DapCtrlPlugin: D:\Program Files\Common Files\Thunder Network\KanKan\npDapCtrlFirefox.2.0.5901.12.(581).dll (ShenZhen Thunder Networking Technologies Ltd.)
FF - HKCU\Software\MozillaPlugins\@octoshape.com/Octoshape Streaming Services,version=1.0: D:\Documents and Settings\my pc\Application Data\Octoshape\Octoshape Streaming Services\sua-1010122-0-npoctoshape.dll (Octoshape ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: D:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011/04/22 10:58:42 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: D:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011/04/22 10:58:43 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: D:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/08/13 14:43:22 | 000,000,000 | —D | M]

[2008/10/11 13:30:06 | 000,000,000 | —D | M] (No name found) – D:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2011/08/13 15:42:22 | 000,000,027 | —- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - No CLSID value found.
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IE2EMBHO Class) - {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} - D:\Program Files\easyMule\modules\IE2EM.dll (VeryCD.com)
O2 - BHO: (ѸÀ×FLVÊÓƵÐá̽¼°ÏÂÔØÖ§³Ö) - {0EA37B17-6B8B-4085-8257-F3A4AA69C27A} - D:\Program Files\Thunder Network\Thunder\BHO\XlBrowserAddin1.0.1.29.dll (ShenZhen Xunlei Networking Technologies,LTD)
O2 - BHO: (StumbleUpon Launcher) - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - D:\Program Files\StumbleUpon\StumbleUponIEBar.dll (stumbleupon.com)
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - No CLSID value found.
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - D:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (ѸÀ×ÏÂÔØÖ§³Ö) - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\Program Files\Thunder Network\Thunder\BHO\XunleiBHO7.1.8.2302.dll (深圳市迅雷网络技术有限公司)
O2 - BHO: (ѸÀ×ÏÂÔØÖúÊÖ) - {B0E2F470-0B07-48f0-B3B1-5749505FAE9B} - D:\Program Files\Thunder Network\Thunder\BHO\XlBrowserAddin1.0.1.29.dll (ShenZhen Xunlei Networking Technologies,LTD)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - D:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (StumbleUpon Toolbar) - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - D:\Program Files\StumbleUpon\StumbleUponIEBar.dll (stumbleupon.com)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [avgnt] D:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - Startup: D:\Documents and Settings\All Users\Start Menu\Programs\Startup\Wireless Utility.lnk = D:\Program Files\Wireless\Common\Utility.exe (Technology, Corp.)
O4 - Startup: D:\Documents and Settings\my pc\Start Menu\Programs\Startup\BitTorrent (2).lnk = C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
O4 - Startup: D:\Documents and Settings\my pc\Start Menu\Programs\Startup\Dropbox.lnk = D:\Documents and Settings\my pc\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - D:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/Facebo…toUploader5.cab (Facebook Photo Uploader 5)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///D:/Program%20Files/Plants%20vs.%20Zombies/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab (Windows Live Safety Center Base Module)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} http://cafeimg.daum-img.net/cab9_1/dmcc2.c…ersion=1,0,0,10 (Cdmcco Class)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///D:/Program%20Files/Plants%20vs.%20Zombies/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - D:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\GoToAssist: DllName - D:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll - D:\Program Files\Citrix\GoToAssist\480\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O24 - Desktop WallPaper: D:\Documents and Settings\my pc\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Documents and Settings\my pc\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - D:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/12/26 12:52:24 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2011/08/13 11:40:34 | 000,000,000 | —- | M] () - D:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - D:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.ac3filter - D:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.iac2 - D:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - D:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - D:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - D:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - D:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - D:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - D:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - D:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - D:\WINDOWS\System32\ffdshow.ax ()
Drivers32: vidc.I420 - D:\WINDOWS\System32\i420vfw.dll (www.helixcommunity.org)
Drivers32: vidc.iv31 - D:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - D:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - D:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - D:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XVID - D:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - D:\WINDOWS\System32\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/08/16 23:50:25 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Start Menu\Programs\SpywareBlaster
[2011/08/16 23:50:18 | 000,000,000 | —D | C] – D:\Program Files\SpywareBlaster
[2011/08/16 23:47:53 | 000,000,000 | —D | C] – D:\Program Files\ESET
[2011/08/16 23:29:41 | 000,028,552 | —- | C] (Panda Security, S.L.) – D:\WINDOWS\System32\drivers\pavboot.sys
[2011/08/16 23:29:08 | 000,000,000 | —D | C] – D:\Program Files\Panda Security
[2011/08/16 23:25:59 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Desktop\GooredFix Backups
[2011/08/16 23:08:31 | 004,406,784 | —- | C] (Geza Kovacs) – D:\Documents and Settings\my pc\Desktop\unetbootin-xpud-windows-387.exe
[2011/08/16 22:57:43 | 004,174,902 | —- | C] (Swearware) – D:\Documents and Settings\my pc\Desktop\ComboFix.exe
[2011/08/16 22:20:46 | 001,416,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\WdfCoInstaller01005.dll
[2011/08/15 20:22:46 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Start Menu\Programs\XP Codec Pack 2.4.3
[2011/08/15 20:22:43 | 000,000,000 | —D | C] – D:\Program Files\XP Codec Pack
[2011/08/13 18:51:29 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware
[2011/08/13 13:55:00 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Start Menu\Programs\CleanUp!
[2011/08/13 13:54:50 | 000,000,000 | —D | C] – D:\Program Files\CleanUp!
[2011/08/13 13:39:07 | 000,000,000 | —D | C] – D:\WINDOWS\temp
[2011/08/13 13:16:45 | 000,000,000 | —D | C] – D:\Program Files\FileHippo.com
[2011/08/13 12:46:56 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Application Data\SUPERAntiSpyware.com
[2011/08/13 12:46:32 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2011/08/13 12:46:32 | 000,000,000 | —D | C] – D:\Program Files\SUPERAntiSpyware
[2011/08/13 12:23:20 | 081,053,128 | —- | C] (Samsung Electronics Co., Ltd. ) – D:\Documents and Settings\my pc\My Documents\Kies_2.0.1.11053_66_6.exe
[2011/08/13 11:40:14 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Start Menu\Programs\SpyHunter
[2011/08/13 11:40:12 | 000,000,000 | —D | C] – D:\sh4ldr
[2011/08/13 11:40:12 | 000,000,000 | —D | C] – D:\Program Files\Enigma Software Group
[2011/08/13 11:39:48 | 000,000,000 | —D | C] – D:\Program Files\Common Files\Wise Installation Wizard
[2011/08/12 23:59:29 | 000,000,000 | —D | C] – D:\WINDOWS\Prefetch
[2011/08/12 22:16:05 | 000,081,920 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\ieencode.dll
[2011/08/11 23:04:55 | 000,116,224 | —- | C] (Xerox) – D:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2011/08/11 23:04:52 | 000,023,040 | —- | C] (Xerox Corporation) – D:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2011/08/11 23:04:44 | 000,004,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\xrxflnch.exe
[2011/08/11 23:04:39 | 000,099,865 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\xlog.exe
[2011/08/11 23:04:35 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – D:\WINDOWS\System32\dllcache\xem336n5.sys
[2011/08/11 23:04:34 | 000,019,455 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\wvchntxx.sys
[2011/08/11 23:04:32 | 000,012,063 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\wsiintxx.sys
[2011/08/11 23:04:31 | 000,008,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wshirda.dll
[2011/08/11 23:04:19 | 000,008,832 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wmiacpi.sys
[2011/08/11 23:04:17 | 000,154,624 | —- | C] (Lucent Technologies) – D:\WINDOWS\System32\dllcache\wlluc48.sys
[2011/08/11 23:04:14 | 000,034,890 | —- | C] (Raytheon Corp.) – D:\WINDOWS\System32\dllcache\wlandrv2.sys
[2011/08/11 23:04:04 | 000,771,581 | —- | C] (Rockwell) – D:\WINDOWS\System32\dllcache\winacisa.sys
[2011/08/11 23:03:58 | 000,053,760 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wiamsmud.dll
[2011/08/11 23:03:55 | 000,087,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2011/08/11 23:03:49 | 000,701,386 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\wdhaalba.sys
[2011/08/11 23:03:48 | 000,023,615 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2011/08/11 23:03:45 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – D:\WINDOWS\System32\dllcache\wbfirdma.sys
[2011/08/11 23:03:43 | 000,033,599 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\watv04nt.sys
[2011/08/11 23:03:42 | 000,019,551 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\watv02nt.sys
[2011/08/11 23:03:41 | 000,029,311 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\watv01nt.sys
[2011/08/11 23:03:40 | 000,011,775 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\wadv05nt.sys
[2011/08/11 23:03:39 | 000,012,415 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\wadv01nt.sys
[2011/08/11 23:03:39 | 000,012,127 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\wadv02nt.sys
[2011/08/11 23:03:35 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – D:\WINDOWS\System32\dllcache\w940nd.sys
[2011/08/11 23:03:32 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – D:\WINDOWS\System32\dllcache\w926nd.sys
[2011/08/11 23:03:29 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – D:\WINDOWS\System32\dllcache\w840nd.sys
[2011/08/11 23:03:22 | 000,064,605 | —- | C] (PCtel, Inc.) – D:\WINDOWS\System32\dllcache\vvoice.sys
[2011/08/11 23:03:18 | 000,397,502 | —- | C] (PCtel, Inc.) – D:\WINDOWS\System32\dllcache\vpctcom.sys
[2011/08/11 23:03:14 | 000,604,253 | —- | C] (PCTEL, INC.) – D:\WINDOWS\System32\dllcache\vmodem.sys
[2011/08/11 23:03:10 | 000,249,402 | —- | C] (Xircom) – D:\WINDOWS\System32\dllcache\vinwm.sys
[2011/08/11 23:03:07 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – D:\WINDOWS\System32\dllcache\viairda.sys
[2011/08/11 23:03:06 | 000,005,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\viaide.sys
[2011/08/11 23:03:04 | 000,053,760 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2011/08/11 23:02:59 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – D:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2011/08/11 23:02:56 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – D:\WINDOWS\System32\dllcache\usrti.sys
[2011/08/11 23:02:52 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – D:\WINDOWS\System32\dllcache\usrpda.sys
[2011/08/11 23:02:49 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – D:\WINDOWS\System32\dllcache\usroslba.sys
[2011/08/11 23:02:45 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – D:\WINDOWS\System32\dllcache\usr1807a.sys
[2011/08/11 23:02:41 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – D:\WINDOWS\System32\dllcache\usr1806v.sys
[2011/08/11 23:02:38 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – D:\WINDOWS\System32\dllcache\usr1806.sys
[2011/08/11 23:02:35 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – D:\WINDOWS\System32\dllcache\usr1801.sys
[2011/08/11 23:02:34 | 000,017,152 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\usbohci.sys
[2011/08/11 23:02:32 | 000,032,384 | —- | C] (KLSI USA, Inc.) – D:\WINDOWS\System32\dllcache\usb101et.sys
[2011/08/11 23:02:28 | 000,094,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\umaxud32.dll
[2011/08/11 23:02:25 | 000,028,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\umaxu40.dll
[2011/08/11 23:02:21 | 000,026,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\umaxu22.dll
[2011/08/11 23:02:18 | 000,069,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\umaxu12.dll
[2011/08/11 23:02:15 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – D:\WINDOWS\System32\dllcache\umaxscan.dll
[2011/08/11 23:02:12 | 000,022,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\umaxpcls.sys
[2011/08/11 23:02:09 | 000,050,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\umaxp60.dll
[2011/08/11 23:02:05 | 000,047,616 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\umaxcam.dll
[2011/08/11 23:02:02 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – D:\WINDOWS\System32\dllcache\um54scan.dll
[2011/08/11 23:01:59 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – D:\WINDOWS\System32\dllcache\um34scan.dll
[2011/08/11 23:01:56 | 000,036,736 | —- | C] (Promise Technology, Inc.) – D:\WINDOWS\System32\dllcache\ultra.sys
[2011/08/11 23:01:52 | 000,011,520 | —- | C] (IBM Corporation) – D:\WINDOWS\System32\dllcache\twotrack.sys
[2011/08/11 23:01:43 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\tridxpm.sys
[2011/08/11 23:01:40 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\tridxp.dll
[2011/08/11 23:01:37 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\tridkbm.sys
[2011/08/11 23:01:34 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\tridkb.dll
[2011/08/11 23:01:31 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\trid3dm.sys
[2011/08/11 23:01:27 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\trid3d.dll
[2011/08/11 23:01:23 | 000,034,375 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\tpro4.sys
[2011/08/11 23:01:20 | 000,042,496 | —- | C] (IBM Corporation) – D:\WINDOWS\System32\dllcache\tp4res.dll
[2011/08/11 23:01:19 | 000,082,944 | —- | C] (IBM Corporation) – D:\WINDOWS\System32\dllcache\tp4mon.exe
[2011/08/11 23:01:16 | 000,031,744 | —- | C] (IBM Corporation) – D:\WINDOWS\System32\dllcache\tp4.dll
[2011/08/11 23:01:10 | 000,004,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\toside.sys
[2011/08/11 23:01:07 | 000,230,912 | —- | C] (Toshiba Corporation) – D:\WINDOWS\System32\dllcache\tosdvd03.sys
[2011/08/11 23:01:03 | 000,241,664 | —- | C] (Toshiba Corporation) – D:\WINDOWS\System32\dllcache\tosdvd02.sys
[2011/08/11 23:01:00 | 000,028,232 | —- | C] (TOSHIBA Corporation) – D:\WINDOWS\System32\dllcache\tos4mo.sys
[2011/08/11 23:00:56 | 000,123,995 | —- | C] (Tiger Jet Network) – D:\WINDOWS\System32\dllcache\tjisdn.sys
[2011/08/11 23:00:51 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2011/08/11 23:00:48 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\tgiul50.dll
[2011/08/11 23:00:47 | 000,149,376 | —- | C] (M-Systems) – D:\WINDOWS\System32\dllcache\tffsport.sys
[2011/08/11 23:00:44 | 000,017,129 | —- | C] (TDK Corporation) – D:\WINDOWS\System32\dllcache\tdkcd31.sys
[2011/08/11 23:00:40 | 000,037,961 | —- | C] (TDK Corporation) – D:\WINDOWS\System32\dllcache\tdk100b.sys
[2011/08/11 23:00:33 | 000,030,464 | —- | C] (Toshiba Corporation) – D:\WINDOWS\System32\dllcache\tbatm155.sys
[2011/08/11 23:00:29 | 000,007,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\tandqic.sys
[2011/08/11 23:00:26 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – D:\WINDOWS\System32\dllcache\t2r4mini.sys
[2011/08/11 23:00:23 | 000,172,768 | —- | C] (Number Nine Visual Technology) – D:\WINDOWS\System32\dllcache\t2r4disp.dll
[2011/08/11 23:00:19 | 000,032,640 | —- | C] (LSI Logic) – D:\WINDOWS\System32\dllcache\symc8xx.sys
[2011/08/11 23:00:16 | 000,016,256 | —- | C] (Symbios Logic Inc.) – D:\WINDOWS\System32\dllcache\symc810.sys
[2011/08/11 23:00:13 | 000,030,688 | —- | C] (LSI Logic) – D:\WINDOWS\System32\dllcache\sym_u3.sys
[2011/08/11 23:00:10 | 000,028,384 | —- | C] (LSI Logic) – D:\WINDOWS\System32\dllcache\sym_hi.sys
[2011/08/11 23:00:07 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – D:\WINDOWS\System32\dllcache\sxports.dll
[2011/08/11 23:00:04 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – D:\WINDOWS\System32\dllcache\sx.sys
[2011/08/11 23:00:01 | 000,003,968 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\swusbflt.sys
[2011/08/11 22:59:58 | 000,010,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\swpidflt.dll
[2011/08/11 22:59:55 | 000,010,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\swpdflt2.dll
[2011/08/11 22:59:52 | 000,053,760 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sw_wheel.dll
[2011/08/11 22:59:49 | 000,041,472 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sw_effct.dll
[2011/08/11 22:59:45 | 000,155,648 | —- | C] (Stallion Technologies) – D:\WINDOWS\System32\dllcache\stlnprop.dll
[2011/08/11 22:59:42 | 000,053,248 | —- | C] (Stallion Technologies) – D:\WINDOWS\System32\dllcache\stlncoin.dll
[2011/08/11 22:59:39 | 000,285,760 | —- | C] (Stallion Technologies) – D:\WINDOWS\System32\dllcache\stlnata.sys
[2011/08/11 22:59:36 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – D:\WINDOWS\System32\dllcache\stcusb.sys
[2011/08/11 22:59:32 | 000,048,736 | —- | C] (3Com) – D:\WINDOWS\System32\dllcache\srwlnd5.sys
[2011/08/11 22:59:29 | 000,099,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\srusd.dll
[2011/08/11 22:59:23 | 000,024,660 | —- | C] (Perle Systems Ltd.) – D:\WINDOWS\System32\dllcache\spxupchk.dll
[2011/08/11 22:59:19 | 000,061,824 | —- | C] (Perle Systems Ltd.) – D:\WINDOWS\System32\dllcache\speed.sys
[2011/08/11 22:59:16 | 000,106,584 | —- | C] (Perle Systems Ltd.) – D:\WINDOWS\System32\dllcache\spdports.dll
[2011/08/11 22:59:13 | 000,019,072 | —- | C] (Adaptec, Inc.) – D:\WINDOWS\System32\dllcache\sparrow.sys
[2011/08/11 22:59:09 | 000,007,552 | —- | C] (Sony Corporation) – D:\WINDOWS\System32\dllcache\sonypvu1.sys
[2011/08/11 22:59:06 | 000,037,040 | —- | C] (Sony Corporation) – D:\WINDOWS\System32\dllcache\sonypi.sys
[2011/08/11 22:59:03 | 000,114,688 | —- | C] (Sony Corporation) – D:\WINDOWS\System32\dllcache\sonypi.dll
[2011/08/11 22:59:01 | 000,020,752 | —- | C] (Sony Corporation) – D:\WINDOWS\System32\dllcache\sonync.sys
[2011/08/11 22:58:58 | 000,009,600 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sonymc.sys
[2011/08/11 22:58:57 | 000,007,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sonyait.sys
[2011/08/11 22:58:54 | 000,007,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\snyaitmc.sys
[2011/08/11 22:58:47 | 000,058,368 | —- | C] (Silicon Motion Inc.) – D:\WINDOWS\System32\dllcache\smiminib.sys
[2011/08/11 22:58:43 | 000,147,200 | —- | C] (Silicon Motion Inc.) – D:\WINDOWS\System32\dllcache\smidispb.dll
[2011/08/11 22:58:40 | 000,025,034 | —- | C] (SMC Networks, Inc.) – D:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2011/08/11 22:58:37 | 000,035,913 | —- | C] (SMC) – D:\WINDOWS\System32\dllcache\smcirda.sys
[2011/08/11 22:58:34 | 000,024,576 | —- | C] (SMC Networks, Inc.) – D:\WINDOWS\System32\dllcache\smc8000n.sys
[2011/08/11 22:58:31 | 000,006,784 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smbhc.sys
[2011/08/11 22:58:30 | 000,016,000 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smbbatt.sys
[2011/08/11 22:58:30 | 000,006,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smbclass.sys
[2011/08/11 22:58:26 | 000,045,568 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smb3w.dll
[2011/08/11 22:58:23 | 000,033,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\smb0w.dll
[2011/08/11 22:58:20 | 000,028,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sma0w.dll
[2011/08/11 22:58:16 | 000,028,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sm91w.dll
[2011/08/11 22:58:11 | 000,063,547 | —- | C] (Symbol Technologies) – D:\WINDOWS\System32\dllcache\sla30nd5.sys
[2011/08/11 22:58:08 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – D:\WINDOWS\System32\dllcache\skfpwin.sys
[2011/08/11 22:58:05 | 000,094,698 | —- | C] (SysKonnect GmbH.) – D:\WINDOWS\System32\dllcache\sk98xwin.sys
[2011/08/11 22:58:02 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sisv256.dll
[2011/08/11 22:57:59 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sisv.sys
[2011/08/11 22:57:58 | 000,032,768 | —- | C] (SiS Corporation) – D:\WINDOWS\System32\dllcache\sisnic.sys
[2011/08/11 22:57:55 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sisgrv.dll
[2011/08/11 22:57:52 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sisgrp.sys
[2011/08/11 22:57:49 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sis6306v.dll
[2011/08/11 22:57:46 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sis6306p.sys
[2011/08/11 22:57:44 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sis300iv.dll
[2011/08/11 22:57:41 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – D:\WINDOWS\System32\dllcache\sis300ip.sys
[2011/08/11 22:57:33 | 000,161,568 | —- | C] (Micro Systemation) – D:\WINDOWS\System32\dllcache\sgsmusb.sys
[2011/08/11 22:57:30 | 000,018,400 | —- | C] (Micro Systemation) – D:\WINDOWS\System32\dllcache\sgsmld.sys
[2011/08/11 22:57:27 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2011/08/11 22:57:25 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – D:\WINDOWS\System32\dllcache\sgiul50.dll
[2011/08/11 22:57:22 | 000,036,480 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\sfmanm.sys
[2011/08/11 22:57:18 | 000,006,784 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\serscan.sys
[2011/08/11 22:57:15 | 000,017,664 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sermouse.sys
[2011/08/11 22:57:08 | 000,006,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\seaddsmc.sys
[2011/08/11 22:57:07 | 000,011,520 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\scsiscan.sys
[2011/08/11 22:57:04 | 000,011,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\scsiprnt.sys
[2011/08/11 22:57:01 | 000,017,280 | —- | C] (SCM Microsystems) – D:\WINDOWS\System32\dllcache\scr111.sys
[2011/08/11 22:56:58 | 000,016,640 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\scmstcs.sys
[2011/08/11 22:56:55 | 000,023,936 | —- | C] (OMNIKEY AG) – D:\WINDOWS\System32\dllcache\sccmusbm.sys
[2011/08/11 22:56:52 | 000,023,936 | —- | C] (OMNIKEY AG) – D:\WINDOWS\System32\dllcache\sccmn50m.sys
[2011/08/11 22:56:51 | 000,043,904 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\sbp2port.sys
[2011/08/11 22:56:48 | 000,495,616 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\sblfx.dll
[2011/08/11 22:56:45 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – D:\WINDOWS\System32\dllcache\s3savmxm.sys
[2011/08/11 22:56:42 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – D:\WINDOWS\System32\dllcache\s3savmx.dll
[2011/08/11 22:56:39 | 000,077,824 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3sav4m.sys
[2011/08/11 22:56:36 | 000,198,400 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3sav4.dll
[2011/08/11 22:56:33 | 000,061,504 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2011/08/11 22:56:30 | 000,179,264 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3sav3d.dll
[2011/08/11 22:56:27 | 000,210,496 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3mvirge.dll
[2011/08/11 22:56:25 | 000,062,496 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3mtrio.dll
[2011/08/11 22:56:22 | 000,041,216 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3mt3d.sys
[2011/08/11 22:56:19 | 000,182,272 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3mt3d.dll
[2011/08/11 22:56:16 | 000,166,720 | —- | C] (S3 Incorporated) – D:\WINDOWS\System32\dllcache\s3m.sys
[2011/08/11 22:56:13 | 000,065,664 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\s3legacy.sys
[2011/08/11 22:56:10 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – D:\WINDOWS\System32\dllcache\rwia450.dll
[2011/08/11 22:56:07 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – D:\WINDOWS\System32\dllcache\rwia430.dll
[2011/08/11 22:56:04 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – D:\WINDOWS\System32\dllcache\rw450ext.dll
[2011/08/11 22:56:03 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – D:\WINDOWS\System32\dllcache\rw430ext.dll
[2011/08/11 22:56:02 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – D:\WINDOWS\System32\dllcache\rtl8139.sys
[2011/08/11 22:55:59 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – D:\WINDOWS\System32\dllcache\rtl8029.sys
[2011/08/11 22:55:56 | 000,030,720 | —- | C] (Conexant Systems Inc.) – D:\WINDOWS\System32\dllcache\rthwcls.sys
[2011/08/11 22:55:52 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2011/08/11 22:55:49 | 000,003,840 | —- | C] (Conexant Systems Inc.) – D:\WINDOWS\System32\dllcache\rpfun.sys
[2011/08/11 22:55:47 | 000,079,104 | —- | C] (Comtrol Corporation) – D:\WINDOWS\System32\dllcache\rocket.sys
[2011/08/11 22:55:44 | 000,037,563 | —- | C] (RadioLAN) – D:\WINDOWS\System32\dllcache\rlnet5.sys
[2011/08/11 22:55:41 | 000,086,097 | —- | C] (Xircom) – D:\WINDOWS\System32\dllcache\reslog32.dll
[2011/08/11 22:55:33 | 000,019,584 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\rasirda.sys
[2011/08/11 22:55:30 | 000,714,762 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2011/08/11 22:55:27 | 000,899,146 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2011/08/11 22:55:24 | 000,041,472 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qvusd.dll
[2011/08/11 22:55:21 | 000,003,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qv2kux.sys
[2011/08/11 22:55:16 | 000,049,024 | —- | C] (QLogic Corporation) – D:\WINDOWS\System32\dllcache\ql1280.sys
[2011/08/11 22:55:13 | 000,040,448 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ql1240.sys
[2011/08/11 22:55:10 | 000,045,312 | —- | C] (QLogic Corporation) – D:\WINDOWS\System32\dllcache\ql12160.sys
[2011/08/11 22:55:08 | 000,033,152 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ql10wnt.sys
[2011/08/11 22:55:05 | 000,040,320 | —- | C] (QLogic Corporation) – D:\WINDOWS\System32\dllcache\ql1080.sys
[2011/08/11 22:55:04 | 000,006,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\qic157.sys
[2011/08/11 22:55:01 | 000,130,942 | —- | C] (PCTEL, INC.) – D:\WINDOWS\System32\dllcache\ptserlv.sys
[2011/08/11 22:54:58 | 000,112,574 | —- | C] (PCTEL, INC.) – D:\WINDOWS\System32\dllcache\ptserlp.sys
[2011/08/11 22:54:55 | 000,128,286 | —- | C] (PCTEL, INC.) – D:\WINDOWS\System32\dllcache\ptserli.sys
[2011/08/11 22:54:54 | 000,159,232 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ptpusd.dll
[2011/08/11 22:54:51 | 000,005,632 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ptpusb.dll
[2011/08/11 22:54:48 | 000,035,328 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\psisload.dll
[2011/08/11 22:54:45 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – D:\WINDOWS\System32\dllcache\pscr.sys
[2011/08/11 22:54:44 | 000,017,664 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ppa3.sys
[2011/08/11 22:54:41 | 000,017,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ppa.sys
[2011/08/11 22:54:41 | 000,008,832 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\powerfil.sys
[2011/08/11 22:54:38 | 000,007,168 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\pnrmc.sys
[2011/08/11 22:54:30 | 000,121,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\phvfwext.dll
[2011/08/11 22:54:27 | 000,019,840 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\philtune.sys
[2011/08/11 22:54:24 | 000,092,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\phildec.sys
[2011/08/11 22:54:21 | 000,173,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\philcam2.sys
[2011/08/11 22:54:18 | 000,075,776 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\philcam1.sys
[2011/08/11 22:54:16 | 000,016,384 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\philcam1.dll
[2011/08/11 22:54:13 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – D:\WINDOWS\System32\dllcache\perm3dd.dll
[2011/08/11 22:54:13 | 000,105,984 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\phdsext.ax
[2011/08/11 22:54:12 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – D:\WINDOWS\System32\dllcache\perm3.sys
[2011/08/11 22:54:11 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – D:\WINDOWS\System32\dllcache\perm2dll.dll
[2011/08/11 22:54:11 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – D:\WINDOWS\System32\dllcache\perm2.sys
[2011/08/11 22:54:08 | 000,005,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\perc2hib.sys
[2011/08/11 22:54:05 | 000,027,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\perc2.sys
[2011/08/11 22:54:04 | 000,169,984 | —- | C] (Cisco Systems) – D:\WINDOWS\System32\dllcache\pcx500.sys
[2011/08/11 22:54:02 | 000,086,016 | —- | C] (PCtel, Inc.) – D:\WINDOWS\System32\dllcache\pctspk.exe
[2011/08/11 22:53:59 | 000,035,328 | —- | C] (AMD Inc.) – D:\WINDOWS\System32\dllcache\pcntpci5.sys
[2011/08/11 22:53:56 | 000,029,769 | —- | C] (AMD Inc.) – D:\WINDOWS\System32\dllcache\pcntn5m.sys
[2011/08/11 22:53:53 | 000,030,282 | —- | C] (AMD Inc.) – D:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2011/08/11 22:53:50 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – D:\WINDOWS\System32\dllcache\pca200e.sys
[2011/08/11 22:53:50 | 000,026,153 | —- | C] (Linksys) – D:\WINDOWS\System32\dllcache\pcmlm56.sys
[2011/08/11 22:53:47 | 000,030,495 | —- | C] (Linksys) – D:\WINDOWS\System32\dllcache\pc100nds.sys
[2011/08/11 22:53:43 | 000,041,984 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovui2rc.dll
[2011/08/11 22:53:40 | 000,044,544 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovui2.dll
[2011/08/11 22:53:38 | 000,025,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovsound2.sys
[2011/08/11 22:53:35 | 000,039,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovcoms.exe
[2011/08/11 22:53:32 | 000,020,480 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovcomc.dll
[2011/08/11 22:53:30 | 000,351,616 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovcodek2.sys
[2011/08/11 22:53:27 | 000,116,736 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovcodec2.dll
[2011/08/11 22:53:24 | 000,031,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovce.sys
[2011/08/11 22:53:21 | 000,028,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovcd.sys
[2011/08/11 22:53:19 | 000,048,000 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovcam2.sys
[2011/08/11 22:53:16 | 000,025,088 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ovca.sys
[2011/08/11 22:53:13 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – D:\WINDOWS\System32\dllcache\otcsercb.sys
[2011/08/11 22:53:11 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – D:\WINDOWS\System32\dllcache\otceth5.sys
[2011/08/11 22:53:08 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – D:\WINDOWS\System32\dllcache\otc06x5.sys
[2011/08/11 22:53:05 | 000,054,528 | —- | C] (Yamaha Corp.) – D:\WINDOWS\System32\dllcache\opl3sax.sys
[2011/08/11 22:53:03 | 000,061,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ohci1394.sys
[2011/08/11 22:52:55 | 000,198,144 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\dllcache\nv3.sys
[2011/08/11 22:52:53 | 000,123,776 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\dllcache\nv3.dll
[2011/08/11 22:52:47 | 000,051,552 | —- | C] (Kensington Technology Group) – D:\WINDOWS\System32\dllcache\ntgrip.sys
[2011/08/11 22:52:44 | 000,009,344 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ntapm.sys
[2011/08/11 22:52:41 | 000,007,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\nsmmc.sys
[2011/08/11 22:52:40 | 000,028,672 | —- | C] (National Semiconductor Corporation) – D:\WINDOWS\System32\dllcache\nscirda.sys
[2011/08/11 22:52:36 | 000,087,040 | —- | C] (NeoMagic Corporation) – D:\WINDOWS\System32\dllcache\nm6wdm.sys
[2011/08/11 22:52:34 | 000,126,080 | —- | C] (NeoMagic Corporation) – D:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2011/08/11 22:52:30 | 000,032,840 | —- | C] (NETGEAR Corporation.) – D:\WINDOWS\System32\dllcache\ngrpci.sys
[2011/08/11 22:52:29 | 000,132,695 | —- | C] (802.11b) – D:\WINDOWS\System32\dllcache\netwlan5.sys
[2011/08/11 22:52:25 | 000,065,278 | —- | C] (Compaq Computer Corporation) – D:\WINDOWS\System32\dllcache\netflx3.sys
[2011/08/11 22:52:22 | 000,039,264 | —- | C] (NeoMagic Corporation) – D:\WINDOWS\System32\dllcache\neo20xx.sys
[2011/08/11 22:52:20 | 000,060,480 | —- | C] (NeoMagic Corporation) – D:\WINDOWS\System32\dllcache\neo20xx.dll
[2011/08/11 22:52:17 | 000,015,872 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ne2000.sys
[2011/08/11 22:52:13 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – D:\WINDOWS\System32\dllcache\n9i3disp.dll
[2011/08/11 22:52:11 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – D:\WINDOWS\System32\dllcache\n9i3d.sys
[2011/08/11 22:52:08 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – D:\WINDOWS\System32\dllcache\n9i128v2.sys
[2011/08/11 22:52:06 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – D:\WINDOWS\System32\dllcache\n9i128v2.dll
[2011/08/11 22:52:03 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – D:\WINDOWS\System32\dllcache\n9i128.sys
[2011/08/11 22:52:00 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – D:\WINDOWS\System32\dllcache\n9i128.dll
[2011/08/11 22:51:58 | 000,128,000 | —- | C] (Compaq Computer Corporation) – D:\WINDOWS\System32\dllcache\n100325.sys
[2011/08/11 22:51:55 | 000,052,255 | —- | C] (Compaq Computer Corporation) – D:\WINDOWS\System32\dllcache\n1000nt5.sys
[2011/08/11 22:51:53 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – D:\WINDOWS\System32\dllcache\mxport.sys
[2011/08/11 22:51:50 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – D:\WINDOWS\System32\dllcache\mxport.dll
[2011/08/11 22:51:47 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – D:\WINDOWS\System32\dllcache\mxnic.sys
[2011/08/11 22:51:45 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – D:\WINDOWS\System32\dllcache\mxicfg.dll
[2011/08/11 22:51:42 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – D:\WINDOWS\System32\dllcache\mxcard.sys
[2011/08/11 22:51:39 | 000,103,296 | —- | C] (Matrox Graphics Inc) – D:\WINDOWS\System32\dllcache\mtxvideo.sys
[2011/08/11 22:51:33 | 000,049,024 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mstape.sys
[2011/08/11 22:51:29 | 000,012,416 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msriffwv.sys
[2011/08/11 22:51:24 | 000,002,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msmpu401.sys
[2011/08/11 22:51:23 | 000,022,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msircomm.sys
[2011/08/11 22:51:14 | 000,035,200 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msgame.sys
[2011/08/11 22:51:11 | 000,006,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\msfsio.sys
[2011/08/11 22:51:05 | 000,017,280 | —- | C] (American Megatrends Inc.) – D:\WINDOWS\System32\dllcache\mraid35x.sys
[2011/08/11 22:50:59 | 000,016,128 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\modemcsa.sys
[2011/08/11 22:50:55 | 000,006,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\miniqic.sys
[2011/08/11 22:50:50 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – D:\WINDOWS\System32\dllcache\mgaum.sys
[2011/08/11 22:50:48 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – D:\WINDOWS\System32\dllcache\mgaud.dll
[2011/08/11 22:50:45 | 000,026,112 | —- | C] (Sony Corporation) – D:\WINDOWS\System32\dllcache\memstpci.sys
[2011/08/11 22:50:43 | 000,047,616 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\memgrp.dll
[2011/08/11 22:50:40 | 000,008,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\memcard.sys
[2011/08/11 22:50:38 | 000,164,586 | —- | C] (Madge Networks Ltd) – D:\WINDOWS\System32\dllcache\mdgndis5.sys
[2011/08/11 22:50:34 | 000,007,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mammoth.sys
[2011/08/11 22:50:28 | 000,048,768 | —- | C] (ESS Technology, Inc.) – D:\WINDOWS\System32\dllcache\maestro.sys
[2011/08/11 22:50:26 | 000,058,880 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\m3092dc.dll
[2011/08/11 22:50:23 | 000,058,368 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\m3091dc.dll
[2011/08/11 22:50:21 | 000,022,848 | —- | C] (Logitech Inc.) – D:\WINDOWS\System32\dllcache\lwusbhid.sys
[2011/08/11 22:50:20 | 000,020,864 | —- | C] (Logitech Inc.) – D:\WINDOWS\System32\dllcache\lwadihid.sys
[2011/08/11 22:50:17 | 000,797,500 | —- | C] (LT) – D:\WINDOWS\System32\dllcache\ltsmt.sys
[2011/08/11 22:50:15 | 000,802,683 | —- | C] (Lucent Technologies) – D:\WINDOWS\System32\dllcache\ltsm.sys
[2011/08/11 22:50:14 | 000,420,992 | —- | C] (LT) – D:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2011/08/11 22:50:14 | 000,007,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ltotape.sys
[2011/08/11 22:50:11 | 000,606,684 | —- | C] (LT) – D:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2011/08/11 22:50:11 | 000,576,746 | —- | C] (LT) – D:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2011/08/11 22:50:09 | 000,727,786 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\ltck000c.sys
[2011/08/11 22:50:05 | 000,004,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\loop.sys
[2011/08/11 22:50:01 | 000,070,730 | —- | C] (Linksys Group, Inc.) – D:\WINDOWS\System32\dllcache\lne100tx.sys
[2011/08/11 22:49:59 | 000,020,573 | —- | C] (The Linksts Group ) – D:\WINDOWS\System32\dllcache\lne100.sys
[2011/08/11 22:49:57 | 000,025,065 | —- | C] (D-Link) – D:\WINDOWS\System32\dllcache\lmndis3.sys
[2011/08/11 22:49:54 | 000,015,744 | —- | C] (Litronic Industries) – D:\WINDOWS\System32\dllcache\lit220p.sys
[2011/08/11 22:49:53 | 000,034,688 | —- | C] (Toshiba Corp.) – D:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2011/08/11 22:49:50 | 000,026,442 | —- | C] (SMSC) – D:\WINDOWS\System32\dllcache\lanepic5.sys
[2011/08/11 22:49:48 | 000,019,016 | —- | C] (Kingston Technology Company ) – D:\WINDOWS\System32\dllcache\ktc111.sys
[2011/08/11 22:49:45 | 000,037,376 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kousd.dll
[2011/08/11 22:49:43 | 000,253,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kdsusd.dll
[2011/08/11 22:49:43 | 000,048,640 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kdsui.dll
[2011/08/11 22:49:35 | 000,014,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\kbdhid.sys
[2011/08/11 22:49:24 | 000,026,624 | —- | C] (SigmaTel, Inc.) – D:\WINDOWS\System32\dllcache\irstusb.sys
[2011/08/11 22:49:21 | 000,028,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\irmon.dll
[2011/08/11 22:49:21 | 000,018,688 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\irsir.sys
[2011/08/11 22:49:18 | 000,151,552 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\irftp.exe
[2011/08/11 22:49:18 | 000,023,552 | —- | C] (MKNet Corporation) – D:\WINDOWS\System32\dllcache\irmk7.sys
[2011/08/11 22:49:17 | 000,088,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\irda.sys
[2011/08/11 22:49:13 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – D:\WINDOWS\System32\dllcache\ip5515.sys
[2011/08/11 22:49:11 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – D:\WINDOWS\System32\dllcache\io8ports.dll
[2011/08/11 22:49:08 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – D:\WINDOWS\System32\dllcache\io8.sys
[2011/08/11 22:49:07 | 000,005,504 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\intelide.sys
[2011/08/11 22:49:05 | 000,013,056 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\inport.sys
[2011/08/11 22:49:02 | 000,016,000 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ini910u.sys
[2011/08/11 22:48:53 | 000,372,824 | —- | C] (Xircom) – D:\WINDOWS\System32\dllcache\iconf32.dll
[2011/08/11 22:48:50 | 000,100,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam5usb.sys
[2011/08/11 22:48:48 | 000,020,480 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam5ext.dll
[2011/08/11 22:48:46 | 000,045,056 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam5com.dll
[2011/08/11 22:48:43 | 000,154,496 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam4usb.sys
[2011/08/11 22:48:41 | 000,061,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam4ext.dll
[2011/08/11 22:48:39 | 000,091,136 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam4com.dll
[2011/08/11 22:48:37 | 000,026,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam3ext.dll
[2011/08/11 22:48:34 | 000,141,056 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\icam3.sys
[2011/08/11 22:48:32 | 000,038,528 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ibmvcap.sys
[2011/08/11 22:48:30 | 000,109,085 | —- | C] (IBM Corporation) – D:\WINDOWS\System32\dllcache\ibmtrp.sys
[2011/08/11 22:48:27 | 000,100,936 | —- | C] (IBM Corporation) – D:\WINDOWS\System32\dllcache\ibmtok.sys
[2011/08/11 22:48:25 | 000,009,216 | —- | C] (IBM Corporation) – D:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2011/08/11 22:48:23 | 000,028,700 | —- | C] (IBM Corp.) – D:\WINDOWS\System32\dllcache\ibmexmp.sys
[2011/08/11 22:48:21 | 000,702,845 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2011/08/11 22:48:21 | 000,161,020 | —- | C] (Intel® Corporation) – D:\WINDOWS\System32\dllcache\i81xnt5.sys
[2011/08/11 22:48:18 | 000,058,592 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\i740nt5.sys
[2011/08/11 22:48:16 | 000,353,184 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\i740dnt5.dll
[2011/08/11 22:48:15 | 000,018,560 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\i2omp.sys
[2011/08/11 22:48:14 | 000,008,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\i2omgmt.sys
[2011/08/11 22:48:05 | 000,488,383 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_v124.sys
[2011/08/11 22:48:03 | 000,050,751 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_tone.sys
[2011/08/11 22:48:01 | 000,073,279 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2011/08/11 22:47:58 | 000,044,863 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_soar.sys
[2011/08/11 22:47:56 | 000,057,471 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_samp.sys
[2011/08/11 22:47:54 | 000,542,879 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_msft.sys
[2011/08/11 22:47:52 | 000,391,199 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2011/08/11 22:47:50 | 000,009,759 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_inst.dll
[2011/08/11 22:47:47 | 000,115,807 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2011/08/11 22:47:45 | 000,199,711 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2011/08/11 22:47:43 | 000,289,887 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_fall.sys
[2011/08/11 22:47:41 | 000,067,167 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2011/08/11 22:47:39 | 000,150,239 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hsf_amos.sys
[2011/08/11 22:47:36 | 000,019,456 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hr1w.dll
[2011/08/11 22:47:34 | 000,005,760 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpt4qic.sys
[2011/08/11 22:47:32 | 000,013,312 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2011/08/11 22:47:30 | 000,324,608 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpojwia.dll
[2011/08/11 22:47:27 | 000,025,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpn.sys
[2011/08/11 22:47:25 | 000,032,768 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2011/08/11 22:47:23 | 000,068,608 | —- | C] (Avisioin) – D:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2011/08/11 22:47:19 | 000,031,232 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2011/08/11 22:47:15 | 000,126,976 | —- | C] (Hewlett Packard) – D:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2011/08/11 22:47:10 | 000,048,128 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2011/08/11 22:47:06 | 000,123,392 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2011/08/11 22:47:02 | 000,119,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hpdigwia.dll
[2011/08/11 22:46:59 | 000,002,688 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hidswvd.sys
[2011/08/11 22:46:57 | 000,008,576 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hidgame.sys
[2011/08/11 22:46:56 | 000,020,352 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\hidbatt.sys
[2011/08/11 22:46:53 | 000,907,456 | —- | C] (Conexant) – D:\WINDOWS\System32\dllcache\hcf_msft.sys
[2011/08/11 22:46:52 | 000,028,288 | —- | C] (Gemplus) – D:\WINDOWS\System32\dllcache\grserial.sys
[2011/08/11 22:46:50 | 000,082,304 | —- | C] (Gemplus) – D:\WINDOWS\System32\dllcache\grclass.sys
[2011/08/11 22:46:48 | 000,017,408 | —- | C] (Gemplus) – D:\WINDOWS\System32\dllcache\gpr400.sys
[2011/08/11 22:46:47 | 000,059,136 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\gckernel.sys
[2011/08/11 22:46:46 | 000,010,624 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\gameenum.sys
[2011/08/11 22:46:44 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – D:\WINDOWS\System32\dllcache\g400m.sys
[2011/08/11 22:46:43 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – D:\WINDOWS\System32\dllcache\g400d.dll
[2011/08/11 22:46:41 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – D:\WINDOWS\System32\dllcache\g200m.sys
[2011/08/11 22:46:39 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – D:\WINDOWS\System32\dllcache\g200d.dll
[2011/08/11 22:46:37 | 000,454,912 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\fxusbase.sys
[2011/08/11 22:46:29 | 000,092,160 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fuusd.dll
[2011/08/11 22:46:27 | 000,455,296 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\fusbbase.sys
[2011/08/11 22:46:25 | 000,455,680 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\fus2base.sys
[2011/08/11 22:46:22 | 000,442,240 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\fpnpbase.sys
[2011/08/11 22:46:20 | 000,441,728 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\fpcmbase.sys
[2011/08/11 22:46:18 | 000,444,416 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\fpcibase.sys
[2011/08/11 22:46:17 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – D:\WINDOWS\System32\dllcache\forehe.sys
[2011/08/11 22:46:15 | 000,071,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\fnfilter.dll
[2011/08/11 22:46:12 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – D:\WINDOWS\System32\dllcache\fetnd5.sys
[2011/08/11 22:46:07 | 000,022,090 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\fem556n5.sys
[2011/08/11 22:46:05 | 000,024,618 | —- | C] (NETGEAR) – D:\WINDOWS\System32\dllcache\fa410nd5.sys
[2011/08/11 22:46:03 | 000,016,074 | —- | C] (NETGEAR Corp.) – D:\WINDOWS\System32\dllcache\fa312nd5.sys
[2011/08/11 22:46:01 | 000,011,850 | —- | C] (FUJITSU LIMITED) – D:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2011/08/11 22:45:59 | 000,012,362 | —- | C] (FUJITSU LIMITED) – D:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2011/08/11 22:45:57 | 000,007,040 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\exabyte2.sys
[2011/08/11 22:45:55 | 000,016,998 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\ex10.sys
[2011/08/11 22:45:52 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – D:\WINDOWS\System32\dllcache\esunib.dll
[2011/08/11 22:45:50 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – D:\WINDOWS\System32\dllcache\esuni.dll
[2011/08/11 22:45:48 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – D:\WINDOWS\System32\dllcache\esuimg.dll
[2011/08/11 22:45:44 | 000,137,088 | —- | C] (ESS Technology, Inc.) – D:\WINDOWS\System32\dllcache\essm2e.sys
[2011/08/11 22:45:44 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – D:\WINDOWS\System32\dllcache\esucm.dll
[2011/08/11 22:45:42 | 000,063,360 | —- | C] (ESS Technology, Inc.) – D:\WINDOWS\System32\dllcache\ess.sys
[2011/08/11 22:45:40 | 000,347,550 | —- | C] (ESS Technology, Inc.) – D:\WINDOWS\System32\dllcache\es56tpi.sys
[2011/08/11 22:45:38 | 000,594,238 | —- | C] (ESS Technology, Inc.) – D:\WINDOWS\System32\dllcache\es56hpi.sys
[2011/08/11 22:45:37 | 000,595,647 | —- | C] (ESS Technology, Inc.) – D:\WINDOWS\System32\dllcache\es56cvmp.sys
[2011/08/11 22:45:35 | 000,174,464 | —- | C] (ESS Technology, Inc.) – D:\WINDOWS\System32\dllcache\es198x.sys
[2011/08/11 22:45:33 | 000,072,192 | —- | C] (ESS Technology Inc.) – D:\WINDOWS\System32\dllcache\es1969.sys
[2011/08/11 22:45:32 | 000,040,704 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\es1371mp.sys
[2011/08/11 22:45:30 | 000,037,120 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\es1370mp.sys
[2011/08/11 22:45:28 | 000,061,952 | —- | C] (Equinox Systems Inc.) – D:\WINDOWS\System32\dllcache\eqnloop.exe
[2011/08/11 22:45:27 | 000,051,200 | —- | C] (Equinox Systems Inc.) – D:\WINDOWS\System32\dllcache\eqnlogr.exe
[2011/08/11 22:45:25 | 000,053,248 | —- | C] (Equinox Systems Inc.) – D:\WINDOWS\System32\dllcache\eqndiag.exe
[2011/08/11 22:45:23 | 000,629,952 | —- | C] (Equinox Systems Inc.) – D:\WINDOWS\System32\dllcache\eqn.sys
[2011/08/11 22:45:22 | 000,114,944 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\epstw2k.sys
[2011/08/11 22:45:19 | 000,018,503 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\epro4.sys
[2011/08/11 22:45:18 | 000,144,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\epcfw2k.sys
[2011/08/11 22:45:17 | 000,006,400 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\enum1394.sys
[2011/08/11 22:45:15 | 000,283,904 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\emu10k1m.sys
[2011/08/11 22:45:12 | 000,019,996 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\em556n4.sys
[2011/08/11 22:45:10 | 000,025,159 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\elnk3.sys
[2011/08/11 22:45:09 | 000,007,296 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\elmsmc.sys
[2011/08/11 22:45:08 | 000,171,520 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el99xn51.sys
[2011/08/11 22:45:07 | 000,070,174 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el98xn5.sys
[2011/08/11 22:45:06 | 000,455,199 | —- | C] (3Com Corporation.) – D:\WINDOWS\System32\dllcache\el985n51.sys
[2011/08/11 22:45:05 | 000,153,631 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el90xnd5.sys
[2011/08/11 22:45:03 | 000,066,591 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el90xbc5.sys
[2011/08/11 22:45:02 | 000,241,206 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el656se5.sys
[2011/08/11 22:45:01 | 000,077,386 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el656nd5.sys
[2011/08/11 22:45:00 | 000,634,134 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el656ct5.sys
[2011/08/11 22:44:59 | 000,069,194 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el656cd5.sys
[2011/08/11 22:44:57 | 000,026,141 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el589nd5.sys
[2011/08/11 22:44:56 | 000,069,692 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el575nd5.sys
[2011/08/11 22:44:55 | 000,024,653 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el574nd4.sys
[2011/08/11 22:44:54 | 000,055,999 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el556nd5.sys
[2011/08/11 22:44:53 | 000,044,103 | —- | C] (3Com Corporation) – D:\WINDOWS\System32\dllcache\el515.sys
[2011/08/11 22:44:48 | 000,019,594 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\e100isa4.sys
[2011/08/11 22:44:47 | 000,117,760 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\e100b325.sys
[2011/08/11 22:44:46 | 000,050,719 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\e1000nt5.sys
[2011/08/11 22:44:44 | 000,020,992 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dshowext.ax
[2011/08/11 22:44:43 | 000,334,208 | —- | C] (Yamaha Corp.) – D:\WINDOWS\System32\dllcache\ds1wdm.sys
[2011/08/11 22:44:41 | 000,020,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dpti2o.sys
[2011/08/11 22:44:39 | 000,028,062 | —- | C] (National Semiconductor Coproration) – D:\WINDOWS\System32\dllcache\dp83820.sys
[2011/08/11 22:44:38 | 000,023,808 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dot4usb.sys
[2011/08/11 22:44:37 | 000,008,704 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dot4scan.sys
[2011/08/11 22:44:36 | 000,012,928 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dot4prt.sys
[2011/08/11 22:44:35 | 000,206,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dot4.sys
[2011/08/11 22:44:31 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – D:\WINDOWS\System32\dllcache\dm9pci5.sys
[2011/08/11 22:44:30 | 000,008,320 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dlttape.sys
[2011/08/11 22:44:29 | 000,026,698 | —- | C] (D-Link Corporation) – D:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2011/08/11 22:44:28 | 000,952,007 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\diwan.sys
[2011/08/11 22:44:24 | 000,236,060 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\ditrace.exe
[2011/08/11 22:44:23 | 000,038,985 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\disrvsu.dll
[2011/08/11 22:44:22 | 000,031,305 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\disrvpp.dll
[2011/08/11 22:44:21 | 000,006,729 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\disrvci.dll
[2011/08/11 22:44:19 | 000,091,305 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\dimaint.sys
[2011/08/11 22:44:18 | 000,614,429 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digiview.exe
[2011/08/11 22:44:17 | 000,042,432 | —- | C] (Digi International, Inc.) – D:\WINDOWS\System32\dllcache\digirlpt.sys
[2011/08/11 22:44:16 | 000,110,621 | —- | C] (Digi International, Inc.) – D:\WINDOWS\System32\dllcache\digirlpt.dll
[2011/08/11 22:44:15 | 000,021,606 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digiisdn.sys
[2011/08/11 22:44:14 | 000,041,046 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digiisdn.dll
[2011/08/11 22:44:13 | 000,102,484 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digiinf.dll
[2011/08/11 22:44:12 | 000,159,828 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digihlc.dll
[2011/08/11 22:44:11 | 000,229,462 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digifwrk.dll
[2011/08/11 22:44:10 | 000,090,525 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digifep5.sys
[2011/08/11 22:44:09 | 000,103,044 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digidxb.sys
[2011/08/11 22:44:08 | 000,131,156 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digidbp.dll
[2011/08/11 22:44:07 | 000,037,735 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digiasyn.sys
[2011/08/11 22:44:06 | 000,065,622 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\digiasyn.dll
[2011/08/11 22:44:04 | 000,419,357 | —- | C] (Digi International) – D:\WINDOWS\System32\dllcache\dgconfig.dll
[2011/08/11 22:44:03 | 000,029,531 | —- | C] (Digi International Inc.) – D:\WINDOWS\System32\dllcache\dgapci.sys
[2011/08/11 22:44:01 | 000,024,649 | —- | C] (D-Link) – D:\WINDOWS\System32\dllcache\dfe650d.sys
[2011/08/11 22:44:00 | 000,024,648 | —- | C] (D-Link) – D:\WINDOWS\System32\dllcache\dfe650.sys
[2011/08/11 22:43:59 | 000,024,064 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\devldr32.exe
[2011/08/11 22:43:58 | 000,256,512 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\devcon32.dll
[2011/08/11 22:43:57 | 000,020,928 | —- | C] (Digital Networks, LLC) – D:\WINDOWS\System32\dllcache\defpa.sys
[2011/08/11 22:43:56 | 000,007,424 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\ddsmc.sys
[2011/08/11 22:43:54 | 000,110,592 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dc260usd.dll
[2011/08/11 22:43:53 | 000,086,016 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dc240usd.dll
[2011/08/11 22:43:52 | 000,063,208 | —- | C] (Intel Corporation.) – D:\WINDOWS\System32\dllcache\dc21x4.sys
[2011/08/11 22:43:51 | 000,080,896 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dc210usd.dll
[2011/08/11 22:43:50 | 000,025,600 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dc210_32.dll
[2011/08/11 22:43:48 | 000,014,720 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\dac960nt.sys
[2011/08/11 22:43:47 | 000,179,584 | —- | C] (Mylex Corporation) – D:\WINDOWS\System32\dllcache\dac2w2k.sys
[2011/08/11 22:43:45 | 000,117,760 | —- | C] (Intel Corporation) – D:\WINDOWS\System32\dllcache\d100ib5.sys
[2011/08/11 22:43:44 | 000,027,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyzports.dll
[2011/08/11 22:43:43 | 000,049,792 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyzport.sys
[2011/08/11 22:43:42 | 000,027,136 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyzcoins.dll
[2011/08/11 22:43:41 | 000,027,648 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyyports.dll
[2011/08/11 22:43:40 | 000,050,176 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyyport.sys
[2011/08/11 22:43:39 | 000,028,672 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyycoins.dll
[2011/08/11 22:43:38 | 000,014,848 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyclom-y.sys
[2011/08/11 22:43:37 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – D:\WINDOWS\System32\dllcache\cwrwdm.sys
[2011/08/11 22:43:37 | 000,017,152 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cyclad-z.sys
[2011/08/11 22:43:36 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – D:\WINDOWS\System32\dllcache\cwcwdm.sys
[2011/08/11 22:43:35 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – D:\WINDOWS\System32\dllcache\cwcspud.sys
[2011/08/11 22:43:34 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – D:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2011/08/11 22:43:33 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – D:\WINDOWS\System32\dllcache\cwbwdm.sys
[2011/08/11 22:43:32 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – D:\WINDOWS\System32\dllcache\cwbmidi.sys
[2011/08/11 22:43:31 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – D:\WINDOWS\System32\dllcache\cwbase.sys
[2011/08/11 22:43:30 | 000,249,856 | —- | C] (Comtrol® Corporation) – D:\WINDOWS\System32\dllcache\ctmasetp.dll
[2011/08/11 22:43:30 | 000,004,096 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\ctwdm32.dll
[2011/08/11 22:43:29 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – D:\WINDOWS\System32\dllcache\ctlsb16.sys
[2011/08/11 22:43:28 | 000,003,712 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\ctljystk.sys
[2011/08/11 22:43:27 | 000,006,912 | —- | C] (Creative Technology Ltd.) – D:\WINDOWS\System32\dllcache\ctlfacem.sys
[2011/08/11 22:43:25 | 000,175,104 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\csamsp.dll
[2011/08/11 22:43:24 | 000,042,112 | —- | C] (Conexant Systems Inc.) – D:\WINDOWS\System32\dllcache\crtaud.sys
[2011/08/11 22:43:23 | 000,216,064 | —- | C] (COMPAQ Inc.) – D:\WINDOWS\System32\dllcache\cpscan.dll
[2011/08/11 22:43:22 | 000,060,970 | —- | C] (Compaq Computer Corp.) – D:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2011/08/11 22:43:21 | 000,021,533 | —- | C] (Compaq Computer Corporation) – D:\WINDOWS\System32\dllcache\cpqndis5.sys
[2011/08/11 22:43:20 | 000,014,976 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cpqarray.sys
[2011/08/11 22:43:17 | 000,010,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\compbatt.sys
[2011/08/11 22:43:16 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – D:\WINDOWS\System32\dllcache\cnxt1803.sys
[2011/08/11 22:43:15 | 000,044,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cnusd.dll
[2011/08/11 22:43:14 | 000,006,656 | —- | C] (CMD Technology, Inc.) – D:\WINDOWS\System32\dllcache\cmdide.sys
[2011/08/11 22:43:13 | 000,020,736 | —- | C] (OMNIKEY AG) – D:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2011/08/11 22:43:12 | 000,013,952 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cmbatt.sys
[2011/08/11 22:43:11 | 000,248,064 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cl546xm.sys
[2011/08/11 22:43:11 | 000,170,880 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cl546x.dll
[2011/08/11 22:43:10 | 000,111,232 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cl5465.dll
[2011/08/11 22:43:09 | 000,045,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cirrus.sys
[2011/08/11 22:43:08 | 000,091,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cirrus.dll
[2011/08/11 22:43:07 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – D:\WINDOWS\System32\dllcache\cinemclc.sys
[2011/08/11 22:43:06 | 000,980,034 | —- | C] (Xircom) – D:\WINDOWS\System32\dllcache\cicap.sys
[2011/08/11 22:43:02 | 000,008,192 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\changer.sys
[2011/08/11 22:43:00 | 000,049,182 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\cem56n5.sys
[2011/08/11 22:43:00 | 000,022,044 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\cem33n5.sys
[2011/08/11 22:42:59 | 000,027,164 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\ce3n5.sys
[2011/08/11 22:42:59 | 000,022,044 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\cem28n5.sys
[2011/08/11 22:42:58 | 000,021,530 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\ce2n5.sys
[2011/08/11 22:42:57 | 000,007,680 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2011/08/11 22:42:55 | 000,714,698 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2011/08/11 22:42:54 | 000,046,108 | —- | C] (Xircom, Inc.) – D:\WINDOWS\System32\dllcache\cben5.sys
[2011/08/11 22:42:54 | 000,039,680 | —- | C] (Silicom Ltd.) – D:\WINDOWS\System32\dllcache\cb325.sys
[2011/08/11 22:42:53 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – D:\WINDOWS\System32\dllcache\cb102.sys
[2011/08/11 22:42:52 | 000,032,256 | —- | C] (Eicon Technology Corporation) – D:\WINDOWS\System32\dllcache\diapi2NT.dll
[2011/08/11 22:42:51 | 000,164,923 | —- | C] (Eicon Technology) – D:\WINDOWS\System32\dllcache\diapi2.sys
[2011/08/11 22:42:49 | 000,121,856 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camext30.dll
[2011/08/11 22:42:48 | 000,236,032 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camext20.dll
[2011/08/11 22:42:48 | 000,116,736 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camext30.ax
[2011/08/11 22:42:47 | 000,244,224 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camext20.ax
[2011/08/11 22:42:47 | 000,074,240 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camexo20.dll
[2011/08/11 22:42:46 | 000,171,264 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camdrv30.sys
[2011/08/11 22:42:46 | 000,073,216 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camexo20.ax
[2011/08/11 22:42:45 | 000,223,232 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camdrv21.sys
[2011/08/11 22:42:44 | 000,314,752 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\camdro21.sys
[2011/08/10 21:35:16 | 000,013,824 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\bulltlp3.sys
[2011/08/10 21:35:14 | 000,031,529 | —- | C] (BreezeCOM) – D:\WINDOWS\System32\dllcache\brzwlan.sys
[2011/08/10 21:35:14 | 000,010,368 | —- | C] (Brother Industries Ltd.) – D:\WINDOWS\System32\dllcache\brusbscn.sys
[2011/08/10 21:35:13 | 000,060,416 | —- | C] (Brother Industries Ltd.) – D:\WINDOWS\System32\dllcache\brserwdm.sys
[2011/08/10 21:35:13 | 000,011,008 | —- | C] (Brother Industries Ltd.) – D:\WINDOWS\System32\dllcache\brusbmdm.sys
[2011/08/10 21:35:12 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brserif.dll
[2011/08/10 21:35:12 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – D:\WINDOWS\System32\dllcache\brscnrsm.dll
[2011/08/10 21:35:11 | 000,039,552 | —- | C] (Brother Industries Ltd.) – D:\WINDOWS\System32\dllcache\brparwdm.sys
[2011/08/10 21:35:10 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brmfusb.dll
[2011/08/10 21:35:10 | 000,003,168 | —- | C] (Brother Industries Ltd.) – D:\WINDOWS\System32\dllcache\brparimg.sys
[2011/08/10 21:35:09 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2011/08/10 21:35:08 | 000,081,408 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\brmfcwia.dll
[2011/08/10 21:35:08 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brmflpt.dll
[2011/08/10 21:35:06 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brmfbidi.dll
[2011/08/10 21:35:06 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brfiltup.sys
[2011/08/10 21:35:05 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brfiltlo.sys
[2011/08/10 21:35:05 | 000,002,944 | —- | C] (Brother Industries Ltd.) – D:\WINDOWS\System32\dllcache\brfilt.sys
[2011/08/10 21:35:04 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brevif.dll
[2011/08/10 21:35:03 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – D:\WINDOWS\System32\dllcache\brbidiif.dll
[2011/08/10 21:35:03 | 000,009,728 | —- | C] (Brother Industries Ltd.) – D:\WINDOWS\System32\dllcache\brcoinst.dll
[2011/08/10 21:35:02 | 000,102,400 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\binlsvc.dll
[2011/08/10 21:35:01 | 000,871,388 | —- | C] (BCM) – D:\WINDOWS\System32\dllcache\bcmdm.sys
[2011/08/10 21:35:01 | 000,026,568 | —- | C] (Broadcom Corporation) – D:\WINDOWS\System32\dllcache\bcm4e5.sys
[2011/08/10 21:35:00 | 000,066,557 | —- | C] (Broadcom Corporation) – D:\WINDOWS\System32\dllcache\bcm42u.sys
[2011/08/10 21:35:00 | 000,054,271 | —- | C] (Broadcom Corporation) – D:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2011/08/10 21:34:59 | 000,014,208 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\battc.sys
[2011/08/10 21:34:58 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – D:\WINDOWS\System32\dllcache\banshee.dll
[2011/08/10 21:34:58 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – D:\WINDOWS\System32\dllcache\banshee.sys
[2011/08/10 21:34:57 | 000,096,640 | —- | C] (Broadcom Corporation) – D:\WINDOWS\System32\dllcache\b57xp32.sys
[2011/08/10 21:34:57 | 000,089,952 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\b1cbase.sys
[2011/08/10 21:34:56 | 000,036,992 | —- | C] (Aztech Systems Ltd) – D:\WINDOWS\System32\dllcache\aztw2320.sys
[2011/08/10 21:34:55 | 000,144,384 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\avmenum.dll
[2011/08/10 21:34:55 | 000,037,568 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\avmwan.sys
[2011/08/10 21:34:54 | 000,087,552 | —- | C] (AVM GmbH) – D:\WINDOWS\System32\dllcache\avmcoxp.dll
[2011/08/10 21:34:53 | 000,013,696 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\avcstrm.sys
[2011/08/10 21:34:52 | 000,038,912 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\avc.sys
[2011/08/10 21:34:52 | 000,036,096 | —- | C] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\avcaudio.sys
[2011/08/09 18:36:15 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Local Settings\Application Data\Octoshape
[2011/08/09 18:36:15 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Application Data\Mozilla
[2011/08/09 18:36:14 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Start Menu\Programs\Octoshape Streaming Services
[2011/08/09 18:36:13 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Application Data\Octoshape
[2011/08/09 11:12:13 | 000,000,000 | —D | C] – D:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2011/08/09 11:12:02 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Application Data\Windows Search
[2011/08/09 11:11:46 | 000,000,000 | —D | C] – D:\WINDOWS\System32\WindowsPowerShell
[2011/08/09 11:11:45 | 000,000,000 | —D | C] – D:\WINDOWS\System32\winrm
[2011/08/09 11:11:40 | 000,000,000 | -H-D | C] – D:\WINDOWS\$968930Uinstall_KB968930$
[2011/08/09 11:11:22 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\Application Data\Windows Desktop Search
[2011/08/09 11:10:48 | 000,000,000 | —D | C] – D:\Program Files\Windows Desktop Search
[2011/08/09 11:10:48 | 000,000,000 | —D | C] – D:\WINDOWS\System32\GroupPolicy
[2011/08/09 08:52:31 | 000,000,000 | —D | C] – D:\Program Files\Microsoft.NET
[2011/08/07 10:15:12 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2011/08/07 10:14:13 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\NVIDIA
[2011/08/07 10:13:56 | 000,543,336 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\easyupdatusapiu.dll
[2011/08/07 10:12:47 | 000,061,440 | —- | C] (Khronos Group) – D:\WINDOWS\System32\OpenCL.dll
[2011/08/07 10:12:46 | 000,865,896 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\nvgenco322090.dll
[2011/08/07 10:12:45 | 013,004,800 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\nvcompiler.dll
[2011/08/07 10:12:45 | 005,332,992 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\nvcuda.dll
[2011/08/07 10:12:45 | 002,808,936 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\nvcuvid.dll
[2011/08/07 10:12:45 | 002,082,408 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\nvcuvenc.dll
[2011/08/07 10:12:45 | 000,899,688 | —- | C] (NVIDIA Corporation) – D:\WINDOWS\System32\nvdispco3220150.dll
[2011/08/07 10:12:09 | 000,000,000 | —D | C] – D:\Program Files\NVIDIA Corporation
[2011/08/07 10:11:18 | 000,000,000 | —D | C] – D:\NVIDIA
[2011/07/29 22:09:33 | 000,000,000 | —D | C] – D:\656008adc7c9fc63a82d60b0e996
[2011/07/29 21:25:07 | 000,000,000 | —D | C] – D:\Documents and Settings\my pc\My Documents\BFBC2
[2011/07/29 21:02:22 | 000,000,000 | —D | C] – D:\Documents and Settings\All Users\Start Menu\Programs\Electronic Arts
[2011/07/29 20:56:49 | 000,000,000 | —D | C] – D:\Program Files\Electronic Arts
[2011/04/24 12:10:05 | 000,197,632 | —- | C] (Microsoft) – D:\Program Files\Common Files\OnlineFilesManager.dll
[2004/11/25 02:25:52 | 000,335,872 | —- | C] ( ) – D:\WINDOWS\System32\drvc.dll
[9 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[6 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/17 21:37:02 | 000,000,884 | —- | M] () – D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/17 20:46:49 | 000,000,101 | —- | M] () – D:\Documents and Settings\my pc\update.jpg
[2011/08/17 20:46:30 | 000,000,000 | —- | M] () – D:\Documents and Settings\my pc\admovie.jpg
[2011/08/17 20:41:22 | 000,000,278 | —- | M] () – D:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-299502267-1788223648-725345543-1004.job
[2011/08/17 20:41:10 | 000,000,880 | —- | M] () – D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/17 20:39:49 | 000,002,048 | –S- | M] () – D:\WINDOWS\bootstat.dat
[2011/08/16 23:50:33 | 000,000,690 | —- | M] () – D:\Documents and Settings\my pc\Desktop\SpywareBlaster.lnk
[2011/08/16 23:21:08 | 000,001,324 | —- | M] () – D:\WINDOWS\System32\d3d9caps.dat
[2011/08/16 23:13:17 | 067,108,864 | —- | M] () – D:\Documents and Settings\my pc\Desktop\xpud-0.9.2.iso
[2011/08/16 23:09:14 | 004,406,784 | —- | M] (Geza Kovacs) – D:\Documents and Settings\my pc\Desktop\unetbootin-xpud-windows-387.exe
[2011/08/16 23:03:17 | 000,080,384 | —- | M] () – D:\Documents and Settings\my pc\Desktop\MBRCheck.exe
[2011/08/16 22:57:45 | 004,174,902 | —- | M] (Swearware) – D:\Documents and Settings\my pc\Desktop\ComboFix.exe
[2011/08/16 20:04:07 | 000,000,069 | —- | M] () – D:\WINDOWS\NeroDigital.ini
[2011/08/16 20:03:28 | 000,231,936 | —- | M] () – D:\Documents and Settings\my pc\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/16 19:56:55 | 000,012,642 | —- | M] () – D:\WINDOWS\System32\wpa.dbl
[2011/08/15 20:23:21 | 000,000,755 | —- | M] () – D:\Documents and Settings\my pc\Desktop\Media Player Classic.lnk
[2011/08/15 19:56:50 | 000,000,286 | —- | M] () – D:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-299502267-1788223648-725345543-1004.job
[2011/08/14 09:12:18 | 000,001,632 | —- | M] () – D:\Documents and Settings\my pc\Desktop\Update Checker.lnk
[2011/08/14 08:59:35 | 000,000,483 | —- | M] () – D:\Documents and Settings\my pc\Desktop\Shortcut to system32.lnk
[2011/08/13 19:35:53 | 000,000,048 | —- | M] () – D:\boot.ini
[2011/08/13 18:51:29 | 000,001,678 | —- | M] () – D:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Professional.lnk
[2011/08/13 14:43:10 | 000,198,848 | —- | M] (RealNetworks, Inc.) – D:\WINDOWS\System32\rmoc3260.dll
[2011/08/13 14:42:54 | 000,006,656 | —- | M] (RealNetworks, Inc.) – D:\WINDOWS\System32\pndx5016.dll
[2011/08/13 14:42:54 | 000,005,632 | —- | M] (RealNetworks, Inc.) – D:\WINDOWS\System32\pndx5032.dll
[2011/08/13 13:44:25 | 000,001,978 | —- | M] () – D:\WINDOWS\System32\tmp.reg
[2011/08/13 12:23:26 | 081,053,128 | —- | M] (Samsung Electronics Co., Ltd. ) – D:\Documents and Settings\my pc\My Documents\Kies_2.0.1.11053_66_6.exe
[2011/08/13 12:22:28 | 000,000,152 | —- | M] () – D:\spyhunter.fix
[2011/08/13 11:40:34 | 000,000,000 | —- | M] () – D:\autoexec.bat
[2011/08/13 00:00:33 | 002,739,856 | —- | M] () – D:\WINDOWS\System32\FNTCACHE.DAT
[2011/08/12 23:41:50 | 000,001,374 | —- | M] () – D:\WINDOWS\imsins.BAK
[2011/08/11 21:55:35 | 000,505,968 | —- | M] () – D:\WINDOWS\System32\perfh009.dat
[2011/08/11 21:55:35 | 000,088,374 | —- | M] () – D:\WINDOWS\System32\perfc009.dat
[2011/08/07 22:04:36 | 000,000,384 | —- | M] () – D:\WINDOWS\tasks\SmartDefrag.job
[2011/08/07 16:49:25 | 000,273,344 | —- | M] () – D:\WINDOWS\System32\nvdrsdb1.bin
[2011/08/07 16:49:25 | 000,000,001 | —- | M] () – D:\WINDOWS\System32\nvdrssel.bin
[2011/08/07 10:13:51 | 000,273,344 | —- | M] () – D:\WINDOWS\System32\nvdrsdb0.bin
[2011/08/07 10:13:46 | 000,000,000 | —- | M] () – D:\WINDOWS\System32\nvdrswr.lk
[2011/08/07 09:22:06 | 000,000,032 | —- | M] () – D:\WINDOWS\System32\thxcfg.ini
[2011/07/30 08:22:11 | 000,002,515 | —- | M] () – D:\WINDOWS\psnetwork.ini
[2011/07/30 08:20:56 | 000,000,091 | —- | M] () – D:\WINDOWS\PCDNSetting.ini
[2011/07/29 21:02:22 | 000,001,923 | —- | M] () – D:\Documents and Settings\All Users\Desktop\Battlefield Bad Company 2.lnk
[2011/07/25 23:17:44 | 005,969,920 | —- | M] (Microsoft Corporation) – D:\WINDOWS\System32\dllcache\mshtml.dll
[2011/07/24 16:24:28 | 000,001,453 | —- | M] () – D:\WINDOWS\powerplayer.ini
[9 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[6 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/16 23:50:33 | 000,000,690 | —- | C] () – D:\Documents and Settings\my pc\Desktop\SpywareBlaster.lnk
[2011/08/16 23:12:39 | 067,108,864 | —- | C] () – D:\Documents and Settings\my pc\Desktop\xpud-0.9.2.iso
[2011/08/16 23:03:13 | 000,080,384 | —- | C] () – D:\Documents and Settings\my pc\Desktop\MBRCheck.exe
[2011/08/15 20:23:21 | 000,000,755 | —- | C] () – D:\Documents and Settings\my pc\Desktop\Media Player Classic.lnk
[2011/08/15 20:23:19 | 000,421,888 | —- | C] () – D:\WINDOWS\System32\ac3filter.acm
[2011/08/14 09:12:18 | 000,001,638 | —- | C] () – D:\Documents and Settings\my pc\Start Menu\Programs\Update Checker.lnk
[2011/08/14 08:59:35 | 000,000,483 | —- | C] () – D:\Documents and Settings\my pc\Desktop\Shortcut to system32.lnk
[2011/08/14 08:36:14 | 000,000,101 | —- | C] () – D:\Documents and Settings\my pc\update.jpg
[2011/08/14 08:36:11 | 000,000,000 | —- | C] () – D:\Documents and Settings\my pc\admovie.jpg
[2011/08/13 19:35:53 | 000,000,048 | —- | C] () – D:\boot.ini
[2011/08/13 18:51:29 | 000,001,678 | —- | C] () – D:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Professional.lnk
[2011/08/13 14:19:28 | 000,001,632 | —- | C] () – D:\Documents and Settings\my pc\Desktop\Update Checker.lnk
[2011/08/13 13:10:50 | 000,001,978 | —- | C] () – D:\WINDOWS\System32\tmp.reg
[2011/08/13 12:22:28 | 000,000,152 | —- | C] () – D:\spyhunter.fix
[2011/08/13 11:40:34 | 000,000,000 | —- | C] () – D:\autoexec.bat
[2011/08/11 23:04:51 | 000,018,944 | —- | C] () – D:\WINDOWS\System32\dllcache\xrxscnui.dll
[2011/08/11 23:04:48 | 000,027,648 | —- | C] () – D:\WINDOWS\System32\dllcache\xrxftplt.exe
[2011/08/11 22:47:21 | 000,165,888 | —- | C] () – D:\WINDOWS\System32\dllcache\hpgt53.dll
[2011/08/11 22:47:17 | 000,093,696 | —- | C] () – D:\WINDOWS\System32\dllcache\hpgt42.dll
[2011/08/11 22:47:13 | 000,101,376 | —- | C] () – D:\WINDOWS\System32\dllcache\hpgt34.dll
[2011/08/11 22:47:08 | 000,089,088 | —- | C] () – D:\WINDOWS\System32\dllcache\hpgt33.dll
[2011/08/11 22:47:04 | 000,083,968 | —- | C] () – D:\WINDOWS\System32\dllcache\hpgt21.dll
[2011/08/11 22:44:27 | 000,029,768 | —- | C] () – D:\WINDOWS\System32\dllcache\divasu.dll
[2011/08/11 22:44:26 | 000,037,962 | —- | C] () – D:\WINDOWS\System32\dllcache\divaprop.dll
[2011/08/11 22:44:25 | 000,006,216 | —- | C] () – D:\WINDOWS\System32\dllcache\divaci.dll
[2011/08/10 21:34:49 | 000,023,552 | —- | C] () – D:\WINDOWS\System32\dllcache\atixbar.sys
[2011/08/10 21:34:48 | 000,026,624 | —- | C] () – D:\WINDOWS\System32\dllcache\ativxbar.sys
[2011/08/10 21:34:48 | 000,019,456 | —- | C] () – D:\WINDOWS\System32\dllcache\ativttxx.sys
[2011/08/10 21:34:47 | 000,009,472 | —- | C] () – D:\WINDOWS\System32\dllcache\ativmdcd.sys
[2011/08/09 11:10:58 | 000,001,803 | —- | C] () – D:\Documents and Settings\All Users\Start Menu\Programs\Windows Search.lnk
[2011/08/07 10:13:46 | 000,273,344 | —- | C] () – D:\WINDOWS\System32\nvdrsdb1.bin
[2011/08/07 10:13:46 | 000,273,344 | —- | C] () – D:\WINDOWS\System32\nvdrsdb0.bin
[2011/08/07 10:13:46 | 000,000,001 | —- | C] () – D:\WINDOWS\System32\nvdrssel.bin
[2011/08/07 10:13:46 | 000,000,000 | —- | C] () – D:\WINDOWS\System32\nvdrswr.lk
[2011/08/07 10:12:47 | 000,003,249 | —- | C] () – D:\WINDOWS\System32\nvinfo.pb
[2011/08/07 10:12:45 | 002,123,582 | —- | C] () – D:\WINDOWS\System32\nvdata.data
[2011/07/29 21:47:47 | 000,101,376 | —- | C] () – D:\WINDOWS\System32\rld.dll
[2011/07/29 21:47:43 | 000,101,376 | —- | C] () – D:\WINDOWS\System\rld.dll
[2011/07/29 21:02:22 | 000,001,923 | —- | C] () – D:\Documents and Settings\All Users\Desktop\Battlefield Bad Company 2.lnk
[2011/06/07 11:13:38 | 000,974,848 | —- | C] () – D:\WINDOWS\System32\cis-2.4.dll
[2011/06/07 11:13:38 | 000,081,920 | —- | C] () – D:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011/06/07 11:13:38 | 000,065,536 | —- | C] () – D:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011/06/07 11:13:38 | 000,057,344 | —- | C] () – D:\WINDOWS\System32\issacapi_se-2.3.dll
[2011/06/07 11:13:38 | 000,030,568 | —- | C] () – D:\WINDOWS\MusiccityDownload.exe
[2011/05/21 08:11:58 | 000,000,032 | —- | C] () – D:\WINDOWS\System32\thxcfg.ini
[2011/03/12 09:54:09 | 000,165,376 | —- | C] () – D:\WINDOWS\System32\unrar.dll
[2011/03/12 09:54:09 | 000,000,038 | —- | C] () – D:\WINDOWS\avisplitter.ini
[2011/03/12 09:54:07 | 001,559,040 | —- | C] () – D:\WINDOWS\System32\xvidcore.dll
[2011/03/12 09:54:07 | 000,282,624 | —- | C] () – D:\WINDOWS\System32\xvidvfw.dll
[2011/01/22 11:10:17 | 000,000,091 | —- | C] () – D:\WINDOWS\PCDNSetting.ini
[2011/01/22 11:08:31 | 000,000,060 | —- | C] () – D:\WINDOWS\MediaList.ini
[2011/01/22 11:07:51 | 000,001,379 | —- | C] () – D:\WINDOWS\Powerlist.ini
[2011/01/22 11:07:49 | 000,001,453 | —- | C] () – D:\WINDOWS\powerplayer.ini
[2011/01/22 11:07:46 | 000,002,515 | —- | C] () – D:\WINDOWS\psnetwork.ini
[2010/12/29 07:31:22 | 000,311,296 | —- | C] () – D:\WINDOWS\System32\AegisI5.exe
[2010/12/29 07:31:22 | 000,290,918 | —- | C] () – D:\WINDOWS\System32\Install7x.dll
[2010/12/29 07:31:22 | 000,002,048 | —- | C] () – D:\WINDOWS\System32\drivers\rt73.bin
[2010/12/11 19:05:00 | 000,059,392 | R— | C] () – D:\WINDOWS\System32\streamhlp.dll
[2010/12/02 07:11:26 | 000,037,888 | —- | C] () – D:\WINDOWS\System32\setupnt.dll
[2010/10/16 09:25:46 | 000,256,512 | —- | C] () – D:\WINDOWS\PEV.exe
[2010/10/16 09:25:46 | 000,098,816 | —- | C] () – D:\WINDOWS\sed.exe
[2010/10/16 09:25:46 | 000,080,412 | —- | C] () – D:\WINDOWS\grep.exe
[2010/10/16 09:25:46 | 000,077,312 | —- | C] () – D:\WINDOWS\MBR.exe
[2010/10/16 09:25:46 | 000,068,096 | —- | C] () – D:\WINDOWS\zip.exe
[2010/10/14 05:13:35 | 000,000,025 | —- | C] () – D:\WINDOWS\popcinfot.dat
[2010/07/12 23:05:37 | 005,964,744 | —- | C] () – D:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2010/07/12 21:57:47 | 000,110,592 | —- | C] () – D:\WINDOWS\System32\FsUsbExDevice.Dll
[2010/07/12 21:57:47 | 000,036,640 | —- | C] () – D:\WINDOWS\System32\FsUsbExDisk.Sys
[2010/07/12 21:57:29 | 000,002,528 | —- | C] () – D:\Documents and Settings\my pc\Application Data\$_hpcst$.hpc
[2010/07/04 19:40:34 | 000,003,164 | —- | C] () – D:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2010/06/25 21:29:10 | 000,007,552 | —- | C] () – D:\WINDOWS\System32\drivers\enodpl.sys
[2010/06/25 21:29:10 | 000,004,736 | —- | C] () – D:\WINDOWS\System32\drivers\tandpl.sys
[2010/01/23 06:41:30 | 000,000,017 | —- | C] () – D:\WINDOWS\popcinfo.dat
[2009/11/28 19:49:18 | 000,001,324 | —- | C] () – D:\WINDOWS\System32\d3d9caps.dat
[2009/04/11 14:46:07 | 000,000,419 | —- | C] () – D:\WINDOWS\BRWMARK.INI
[2009/04/11 14:46:07 | 000,000,027 | —- | C] () – D:\WINDOWS\BRPP2KA.INI
[2009/04/11 14:38:53 | 000,000,050 | —- | C] () – D:\WINDOWS\System32\bridf08b.dat
[2009/04/11 14:34:13 | 000,031,567 | —- | C] () – D:\WINDOWS\maxlink.ini
[2008/12/31 16:22:57 | 000,363,520 | —- | C] () – D:\WINDOWS\System32\psisdecd.dll
[2008/10/06 20:42:14 | 000,000,000 | —- | C] () – D:\WINDOWS\nsreg.dat
[2008/07/17 21:00:10 | 000,027,136 | —- | C] () – D:\WINDOWS\System32\QTUninst.dll
[2008/07/05 18:14:48 | 000,456,192 | —- | C] () – D:\WINDOWS\System32\libmplayer.dll
[2008/07/05 18:14:44 | 003,591,168 | —- | C] () – D:\WINDOWS\System32\libavcodec.dll
[2008/07/05 18:13:16 | 000,708,096 | —- | C] () – D:\WINDOWS\System32\ff_x264.dll
[2008/06/23 00:34:00 | 000,177,664 | —- | C] () – D:\WINDOWS\System32\ff_theora.dll
[2008/06/18 05:21:57 | 001,633,361 | -HS- | C] () – D:\WINDOWS\System32\lnpireud.ini
[2008/06/18 03:40:12 | 000,000,552 | —- | C] () – D:\WINDOWS\System32\d3d8caps.dat
[2008/06/16 20:50:01 | 001,655,651 | -HS- | C] () – D:\WINDOWS\System32\giaolrnu.ini
[2008/06/15 17:06:58 | 000,394,240 | —- | C] () – D:\WINDOWS\System32\Smab.dll
[2008/06/15 17:06:57 | 000,502,784 | —- | C] () – D:\WINDOWS\x2.64.exe
[2008/06/15 17:06:57 | 000,240,128 | —- | C] () – D:\WINDOWS\System32\x.264.exe
[2008/06/15 17:06:57 | 000,217,073 | —- | C] () – D:\WINDOWS\meta4.exe
[2008/06/15 17:06:57 | 000,066,560 | —- | C] () – D:\WINDOWS\MOTA113.exe
[2008/06/15 17:06:57 | 000,027,648 | —- | C] () – D:\WINDOWS\System32\AVSredirect.dll
[2008/06/14 19:40:21 | 000,083,544 | —- | C] () – D:\Documents and Settings\my pc\Application Data\NMM-MetaData.db
[2008/06/13 18:39:38 | 000,023,552 | —- | C] () – D:\WINDOWS\System32\ff_wmv9.dll
[2008/06/13 01:36:38 | 000,007,680 | —- | C] () – D:\WINDOWS\System32\ff_vfw.dll
[2008/05/26 21:59:42 | 000,018,904 | —- | C] () – D:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | —- | C] () – D:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/12 13:35:48 | 000,000,048 | —- | C] () – D:\WINDOWS\System32\xlhcc.dat
[2008/04/12 13:35:48 | 000,000,020 | —- | C] () – D:\WINDOWS\System32\pub_store.dat
[2008/04/01 20:54:00 | 001,003,520 | —- | C] () – D:\WINDOWS\System32\ltmm_n.dll
[2008/03/23 18:40:25 | 000,000,275 | —- | C] () – D:\WINDOWS\cdplayer.ini
[2008/03/23 14:18:46 | 000,262,144 | —- | C] () – D:\WINDOWS\System32\TomsMoComp_ff.dll
[2008/03/23 14:18:46 | 000,112,640 | —- | C] () – D:\WINDOWS\System32\libmpeg2_ff.dll
[2008/02/23 12:31:58 | 000,056,056 | —- | C] () – D:\WINDOWS\System32\DLAAPI_W.DLL
[2008/02/23 12:31:58 | 000,000,167 | —- | C] () – D:\WINDOWS\wininit.ini
[2008/02/20 22:00:46 | 000,000,231 | —- | C] () – D:\WINDOWS\System32\3dsmax.ini
[2008/02/20 22:00:46 | 000,000,043 | —- | C] () – D:\WINDOWS\System32\InstallSettings.ini
[2008/02/18 12:13:00 | 000,000,021 | —- | C] () – D:\WINDOWS\KwYl.dat
[2008/02/02 10:23:03 | 000,000,001 | —- | C] () – D:\WINDOWS\System32\SI.bin
[2008/01/23 20:26:15 | 000,000,000 | —- | C] () – D:\WINDOWS\Ui.INI
[2007/12/28 12:44:55 | 000,001,915 | —- | C] () – D:\WINDOWS\System32\cid_store.dat
[2007/12/28 11:27:50 | 000,007,680 | —- | C] () – D:\WINDOWS\System32\CNMVS66.DLL
[2007/12/26 20:40:30 | 000,004,161 | —- | C] () – D:\WINDOWS\ODBCINST.INI
[2007/12/26 20:39:34 | 002,739,856 | —- | C] () – D:\WINDOWS\System32\FNTCACHE.DAT
[2007/12/26 20:17:58 | 000,000,319 | —- | C] () – D:\WINDOWS\game.ini
[2007/12/26 17:46:33 | 000,016,384 | —- | C] () – D:\WINDOWS\System32\FileOps.exe
[2007/12/26 17:29:28 | 000,000,069 | —- | C] () – D:\WINDOWS\NeroDigital.ini
[2007/12/26 16:45:37 | 000,000,008 | —- | C] () – D:\WINDOWS\System32\nvModes.dat
[2007/12/26 15:57:41 | 000,000,766 | —- | C] () – D:\WINDOWS\ODBC.INI
[2007/12/26 15:33:51 | 000,231,936 | —- | C] () – D:\Documents and Settings\my pc\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/12/26 13:04:59 | 000,049,152 | R— | C] () – D:\WINDOWS\System32\ChCfg.exe
[2007/12/26 12:53:51 | 000,002,048 | –S- | C] () – D:\WINDOWS\bootstat.dat
[2007/12/26 12:50:23 | 000,021,640 | —- | C] () – D:\WINDOWS\System32\emptyregdb.dat
[2007/11/29 16:50:20 | 000,038,567 | —- | C] () – D:\WINDOWS\System32\pcpbios.exe
[2007/11/29 16:50:20 | 000,004,096 | —- | C] () – D:\WINDOWS\System32\sysres.dll
[2007/09/27 10:51:02 | 000,020,698 | —- | C] () – D:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | —- | C] () – D:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | —- | C] () – D:\WINDOWS\System32\gthrctr.ini
[2007/09/17 01:07:00 | 000,286,720 | —- | C] () – D:\WINDOWS\System32\nvnt4cpl.dll
[2007/08/07 19:22:22 | 000,141,180 | —- | C] () – D:\WINDOWS\System32\xlive.dll.cat
[2006/11/10 05:07:44 | 000,000,000 | —- | C] () – D:\WINDOWS\System32\px.ini
[2006/11/02 23:10:16 | 000,080,912 | —- | C] () – D:\WINDOWS\System32\sherlock2.exe
[2006/09/16 23:36:50 | 000,520,192 | —- | C] () – D:\WINDOWS\System32\CddbPlaylist2Roxio.dll
[2006/09/16 23:36:50 | 000,204,800 | —- | C] () – D:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2006/02/28 20:00:00 | 013,107,200 | —- | C] () – D:\WINDOWS\System32\oembios.bin
[2006/02/28 20:00:00 | 000,673,088 | —- | C] () – D:\WINDOWS\System32\mlang.dat
[2006/02/28 20:00:00 | 000,505,968 | —- | C] () – D:\WINDOWS\System32\perfh009.dat
[2006/02/28 20:00:00 | 000,272,128 | —- | C] () – D:\WINDOWS\System32\perfi009.dat
[2006/02/28 20:00:00 | 000,218,003 | —- | C] () – D:\WINDOWS\System32\dssec.dat
[2006/02/28 20:00:00 | 000,088,374 | —- | C] () – D:\WINDOWS\System32\perfc009.dat
[2006/02/28 20:00:00 | 000,046,258 | —- | C] () – D:\WINDOWS\System32\mib.bin
[2006/02/28 20:00:00 | 000,028,626 | —- | C] () – D:\WINDOWS\System32\perfd009.dat
[2006/02/28 20:00:00 | 000,004,569 | —- | C] () – D:\WINDOWS\System32\secupd.dat
[2006/02/28 20:00:00 | 000,004,461 | —- | C] () – D:\WINDOWS\System32\oembios.dat
[2006/02/28 20:00:00 | 000,001,804 | —- | C] () – D:\WINDOWS\System32\dcache.bin
[2006/02/28 20:00:00 | 000,000,741 | —- | C] () – D:\WINDOWS\System32\noise.dat
[2005/05/25 04:45:04 | 000,172,032 | —- | C] () – D:\WINDOWS\System32\dmvm.dll
[2004/10/04 00:50:54 | 000,129,024 | —- | C] () – D:\WINDOWS\System32\ff_mpeg2enc.dll
[2003/01/07 15:05:08 | 000,002,695 | —- | C] () – D:\WINDOWS\System32\OUTLPERF.INI
[1997/11/17 17:13:16 | 000,010,240 | —- | C] () – D:\WINDOWS\System32\vidx16.dll

========== LOP Check ==========

[2010/12/05 08:19:33 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Acronis
[2010/10/23 12:30:54 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/12/25 10:12:14 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Autodesk
[2008/02/11 12:27:28 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Individual Software
[2010/04/04 10:40:06 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Installations
[2010/08/19 06:23:33 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\IObit
[2007/12/28 12:55:56 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\mvcache
[2008/06/17 05:00:11 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Nokia
[2008/10/23 21:53:43 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\NokiaMusic
[2010/04/04 10:55:13 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\OviInstallerCache
[2008/06/17 05:09:59 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PC Suite
[2010/02/21 08:19:26 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PCSettings
[2010/01/06 19:46:32 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PopCap
[2010/09/19 18:09:11 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PopCap Games
[2011/06/16 21:42:52 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Samsung
[2009/04/11 14:34:12 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\ScanSoft
[2011/08/17 06:19:02 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\TEMP
[2011/08/06 19:28:56 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Thunder Network
[2008/04/12 13:35:48 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\thunder_dctemp
[2011/06/26 09:59:13 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\TSLOG
[2008/04/12 13:35:48 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\vucache
[2010/10/23 12:41:44 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Xunlei
[2011/03/06 19:38:23 | 000,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/12/05 08:19:54 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Acronis
[2010/10/24 09:57:26 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Autodesk
[2011/08/17 21:38:52 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\BitTorrent
[2007/12/31 16:06:20 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\BitTorrent DNA
[2008/02/08 00:02:37 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\DAEMON Tools Pro
[2011/05/17 16:42:14 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\DDMSettings
[2011/08/17 20:43:00 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Dropbox
[2009/08/25 20:27:37 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\FlashgetSetup
[2008/02/16 17:25:28 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Gentle Computing
[2008/02/11 12:28:28 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Individual Software
[2010/08/19 06:22:32 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\IObit
[2009/10/12 19:43:20 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Nokia
[2009/07/29 22:18:11 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\NSeries
[2011/08/09 18:36:13 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Octoshape
[2009/12/14 17:13:35 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Opera
[2009/07/29 22:16:54 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\PC Suite
[2011/03/21 19:56:14 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\PPStream
[2011/06/16 21:42:43 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Samsung
[2009/08/05 21:02:17 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\ScanSoft
[2008/02/08 07:41:57 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Sierra Entertainment
[2010/09/19 08:10:09 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\SpinTop
[2011/08/17 21:38:32 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\StumbleUpon
[2008/05/25 15:29:47 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Thinstall
[2010/12/11 19:07:07 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\TrojanHunter
[2008/07/26 13:21:53 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\uTorrent
[2011/08/09 11:11:22 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Windows Desktop Search
[2011/08/09 11:12:02 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\Windows Search
[2009/08/21 14:57:23 | 000,000,000 | —D | M] – D:\Documents and Settings\my pc\Application Data\偡偨偠偍椢拑
[2011/08/07 22:04:36 | 000,000,384 | —- | M] () – D:\WINDOWS\Tasks\SmartDefrag.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/08/19 21:09:55 | 000,002,006 | —- | M] () – D:\aqua_bitmap.cpp
[2011/08/13 11:40:34 | 000,000,000 | —- | M] () – D:\autoexec.bat
[2011/08/13 19:35:53 | 000,000,048 | —- | M] () – D:\boot.ini
[2010/10/16 09:46:26 | 000,047,466 | —- | M] () – D:\ComboFix.txt
[2011/03/21 20:30:04 | 000,486,872 | —- | M] () – D:\minixl_05615.exe
[2009/12/29 23:16:09 | 000,065,863 | —- | M] () – D:\MP4debug.log
[2009/04/13 11:10:42 | 000,163,256 | —- | M] (Microsoft Corporation) – D:\np-mswmp.dll
[2011/08/17 20:39:22 | 2145,386,496 | -HS- | M] () – D:\pagefile.sys
[2011/08/13 13:47:41 | 000,002,864 | —- | M] () – D:\rapport.txt
[2011/08/13 13:39:08 | 000,013,682 | —- | M] () – D:\smitfiles.txt
[2011/08/13 12:22:28 | 000,000,152 | —- | M] () – D:\spyhunter.fix
[2011/08/16 23:05:56 | 000,044,656 | —- | M] () – D:\TDSSKiller.2.5.15.0_16.08.2011_23.02.03_log.txt
[2011/08/17 21:24:16 | 000,044,900 | —- | M] () – D:\TDSSKiller.2.5.15.0_17.08.2011_21.21.53_log.txt

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – D:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – D:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – D:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – D:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2007/12/26 12:52:03 | 000,000,067 | -HS- | M] () – D:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2004/05/21 13:00:00 | 000,017,920 | —- | M] (CANON INC.) – D:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPD66.DLL
[2004/05/21 12:00:00 | 000,054,272 | —- | M] (CANON INC.) – D:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPP66.DLL
[2008/07/06 20:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – D:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – D:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 18:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – D:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/04/17 00:04:40 | 000,306,032 | —- | M] (Microsoft Corporation) – D:\WINDOWS\WLXPGSS.SCR
[9 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >
[2010/06/09 23:15:12 | 000,000,174 | —- | M] () – D:\Documents and Settings\All Users\Favorites\The NeoSmart Files.url

< %APPDATA%\Microsoft\*.* >
[2011/08/09 13:12:42 | 000,001,714 | -H– | M] () – D:\Documents and Settings\my pc\Application Data\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2007/12/26 20:38:37 | 000,094,208 | —- | M] () – D:\WINDOWS\System32\config\default.sav
[2007/12/26 20:38:37 | 000,634,880 | —- | M] () – D:\WINDOWS\System32\config\software.sav
[2007/12/26 20:38:37 | 000,884,736 | —- | M] () – D:\WINDOWS\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011/08/12 22:16:24 | 000,000,272 | -HS- | M] () – D:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2007/12/26 12:59:59 | 000,000,119 | -HS- | M] () – D:\Documents and Settings\my pc\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2007/12/26 12:59:58 | 000,000,079 | —- | M] () – D:\Documents and Settings\my pc\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2011/08/16 22:57:45 | 004,174,902 | —- | M] (Swearware) – D:\Documents and Settings\my pc\Desktop\ComboFix.exe
[2011/08/16 23:03:17 | 000,080,384 | —- | M] () – D:\Documents and Settings\my pc\Desktop\MBRCheck.exe
[2011/08/16 23:09:14 | 004,406,784 | —- | M] (Geza Kovacs) – D:\Documents and Settings\my pc\Desktop\unetbootin-xpud-windows-387.exe

< %PROGRAMFILES%\Common Files\*.* >
[2011/04/24 12:10:05 | 000,197,632 | —- | M] (Microsoft) – D:\Program Files\Common Files\OnlineFilesManager.dll

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
"NoAutoUpdate" = 0

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-08-12 16:03:56

< >

========== Alternate Data Streams ==========

@Alternate Data Stream - 95 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 147 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:E1BDAB24
@Alternate Data Stream - 141 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:3E23391B
@Alternate Data Stream - 137 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:8C1E6289
@Alternate Data Stream - 125 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:89E253FE
@Alternate Data Stream - 117 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:7D6EC5BE
@Alternate Data Stream - 115 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:196FC0A6

< End of report >

and Extras.txt:

OTL Extras logfile created on: 8/17/2011 9:26:31 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = D:\Documents and Settings\my pc\My Documents\Downloaded Installations
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.20 Gb Available Physical Memory | 60.01% Memory free
3.85 Gb Paging File | 2.91 Gb Available in Paging File | 75.64% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 238.05 Gb Total Space | 142.82 Gb Free Space | 60.00% Space Free | Partition Type: NTFS
Drive D: | 227.71 Gb Total Space | 73.20 Gb Free Space | 32.15% Space Free | Partition Type: NTFS
Drive G: | 465.76 Gb Total Space | 32.38 Gb Free Space | 6.95% Space Free | Partition Type: NTFS
Drive H: | 74.53 Gb Total Space | 50.16 Gb Free Space | 67.31% Space Free | Partition Type: NTFS

Computer Name: WAYNE | User Name: my pc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.js [@ = Reg Error: Value error.] – Reg Error: Key error. File not found
.txt [@ = Reg Error: Value error.] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
jsfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "D:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "D:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1542:TCP" = 1542:TCP:*:Enabled:Realtek WPS TCP Prot
"1542:UDP" = 1542:UDP:*:Enabled:Realtek WPS UDP Prot
"53:UDP" = 53:UDP:*:Enabled:Realtek AP UDP Prot
"5353:TCP" = 5353:TCP:*:Enabled:Adobe CSI CS4
"33674:UDP" = 33674:UDP:*:Enabled:ThunderLAN(UDP)
"33673:TCP" = 33673:TCP:*:Enabled:ThunderLAN(TCP)
"5985:TCP" = 5985:TCP:*:Disabled:Windows Remote Management
"80:TCP" = 80:TCP:*:Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:bittorrent – (BitTorrent, Inc.)
"D:\Program Files\ArchVision\ArchVision Content Manager\rpcACMapp.exe" = D:\Program Files\ArchVision\ArchVision Content Manager\rpcACMapp.exe:*:Enabled:ArchVision Content Manager – (ArchVision)
"D:\Program Files\ArchVision\ArchVision Content Manager\rpcACMftp.exe" = D:\Program Files\ArchVision\ArchVision Content Manager\rpcACMftp.exe:*:Enabled:ArchVision Download Processor – (ArchVision)
"D:\Program Files\uTorrent\uTorrent.exe" = D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:|ìTorrent – ()
"D:\Program Files\TVAnts\Tvants.exe" = D:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts – (Zhejiang University)
"D:\Program Files\SimpleCenter\Home Media Server.exe" = D:\Program Files\SimpleCenter\Home Media Server.exe:*:Enabled:Home Media Server – (Universal Electronics, Inc.)
"$INSTDIR\FlvDetector.exe" = D:\Program Files\FlashGet Network\FlashGet 3\FlvDetector.exe:*:Enabled:FGFlvDetector
"D:\Program Files\JCMATTHEW WLAN\RtWLan.exe" = D:\Program Files\JCMATTHEW WLAN\RtWLan.exe:*:Enabled:RtWlan – (JCMATTHEW)
"D:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = D:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4 – (Adobe Systems Incorporated)
"D:\Program Files\Codemasters\OF Dragon Rising\OFDR.exe" = D:\Program Files\Codemasters\OF Dragon Rising\OFDR.exe:*:Enabled:OF Dragon Rising – (Codemasters Software Company Limited)
"D:\Program Files\QvodPlayer\QvodTerminal.exe" = D:\Program Files\QvodPlayer\QvodTerminal.exe:*:Enabled:QVOD – (Shenzhen QVOD Technology Co.,Ltd)
"D:\Documents and Settings\my pc\Application Data\Dropbox\bin\Dropbox.exe" = D:\Documents and Settings\my pc\Application Data\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox – (Dropbox, Inc.)
"D:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" = D:\Program Files\Malwarebytes' Anti-Malware\mbam.exe:*:Enabled:Malwarebytes' Anti-Malware – (Malwarebytes Corporation)
"D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.0.1962_1\Program\XLDoctorUI.exe" = D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.0.1962_1\Program\XLDoctorUI.exe:*:Enabled:XLDoctorUI7.1.0.1962
"C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe" = C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2009 32-bit – (Autodesk, Inc.)
"C:\Program Files\StarCraft II\StarCraft II.exe" = C:\Program Files\StarCraft II\StarCraft II.exe:*:Enabled:Blizzard Launcher – (Blizzard Entertainment)
"C:\Program Files\StarCraft II\Versions\Base15405\SC2.exe" = C:\Program Files\StarCraft II\Versions\Base15405\SC2.exe:*:Enabled:StarCraft II – (Blizzard Entertainment, Inc.)
"D:\Program Files\Thunder Network\Xmp\xmp.exe" = D:\Program Files\Thunder Network\Xmp\xmp.exe:*:Enabled:迅雷看看播放器
"D:\Program Files\Thunder Network\Xmp\ThunderLiveUD.exe" = D:\Program Files\Thunder Network\Xmp\ThunderLiveUD.exe:*:Enabled:ThunderLiveUD
"D:\Program Files\PPStream\PPStream.exe" = D:\Program Files\PPStream\PPStream.exe:*:Enabled:PPS网络电视 – (PPStream Inc.)
"D:\Program Files\PPStream\PPSAP.exe" = D:\Program Files\PPStream\PPSAP.exe:*:Enabled:PPS 网络加速器 – (PPStream Inc)
"D:\Program Files\PPSGame\PPSGame.exe" = D:\Program Files\PPSGame\PPSGame.exe:*:Enabled:游戏大厅客户端 – (传聚网络科技有限公司)
"D:\Program Files\王者在线电影\QvodTerminal.exe" = D:\Program Files\王者在线电影\QvodTerminal.exe:*:Enabled:QVOD
"D:\Program Files\easyMule\emule.exe" = D:\Program Files\easyMule\emule.exe:*:Enabled:easyMule1.0 – (http://www.verycd.com)
"D:\Program Files\Thunder Network\Thunder\Program\BindKw49.exe" = D:\Program Files\Thunder Network\Thunder\Program\BindKw49.exe:*:Enabled:KuwoInstaller7.1.6.2194
"D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.6.2194_1\Program\XLDoctorUI.exe" = D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.6.2194_1\Program\XLDoctorUI.exe:*:Enabled:XLDoctorUI7.1.6.2194
"D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.7.2244_2\Program\XLDoctorUI.exe" = D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.7.2244_2\Program\XLDoctorUI.exe:*:Enabled:XLDoctorUI7.1.7.2244 – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Documents and Settings\my pc\My Documents\My Videos\RealPlayer Downloads\TorrentEasy-ashley-tisdale-exposed-in-home-sex-tape.exe" = D:\Documents and Settings\my pc\My Documents\My Videos\RealPlayer Downloads\TorrentEasy-ashley-tisdale-exposed-in-home-sex-tape.exe:*:Disabled:TorrentEasy-ashley-tisdale-exposed-in-home-sex-tape
"D:\WINDOWS\explorer.exe" = D:\WINDOWS\explorer.exe:*:Enabled:Windows Explorer – (Microsoft Corporation)
"D:\Program Files\VideoLAN\VLC\vlc.exe" = D:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player – ()
"D:\WINDOWS\system32\muzapp.exe" = D:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player – (Musiccity Co.Ltd.)
"D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.8.2302_3\Program\XLDoctorUI.exe" = D:\Program Files\Thunder Network\Thunder\XLDoctor\7.1.8.2302_3\Program\XLDoctorUI.exe:*:Enabled:XLDoctorUI7.1.8.2302 – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Program Files\Thunder Network\Thunder\Program\Thunder.exe" = D:\Program Files\Thunder Network\Thunder\Program\Thunder.exe:*:Enabled:Thunder7.1.8.2302 – (深圳市迅雷网络技术有限公司)
"D:\Program Files\Thunder Network\Thunder\Program\ThunderLiveUD.exe" = D:\Program Files\Thunder Network\Thunder\Program\ThunderLiveUD.exe:*:Enabled:Thunder LiveUpdate7.1.8.2302 – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Program Files\Common Files\Thunder Network\TP\Ver1\1.1.2.67_1111\ThunderPlatform.exe" = D:\Program Files\Common Files\Thunder Network\TP\Ver1\1.1.2.67_1111\ThunderPlatform.exe:*:Enabled:ThunderPlatform1.1.2.67 – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Program Files\Common Files\Thunder Network\TP\Ver1\1.1.2.67_1111\ThunderLiveUD.exe" = D:\Program Files\Common Files\Thunder Network\TP\Ver1\1.1.2.67_1111\ThunderLiveUD.exe:*:Enabled:ThunderLiveUD1.1.2.67 – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Program Files\Common Files\Thunder Network\TP\Ver1\1.1.2.67_1111\XLBugReport.exe" = D:\Program Files\Common Files\Thunder Network\TP\Ver1\1.1.2.67_1111\XLBugReport.exe:*:Enabled:XLBugReport1.1.2.67 – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Program Files\Thunder Network\Xmp4\Program\Xmp.exe" = D:\Program Files\Thunder Network\Xmp4\Program\Xmp.exe:*:Enabled:迅雷看看播放器 – (深圳市迅雷网络技术有限公司)
"D:\Program Files\Thunder Network\Xmp4\Program\XLBugReport.exe" = D:\Program Files\Thunder Network\Xmp4\Program\XLBugReport.exe:*:Enabled:XLBugReport – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Program Files\Thunder Network\Xmp4\Program\ThunderLiveUD.exe" = D:\Program Files\Thunder Network\Xmp4\Program\ThunderLiveUD.exe:*:Enabled:ThunderLiveUD – (ShenZhen Xunlei Networking Technologies,LTD)
"D:\Program Files\Common Files\Thunder Network\KanKan\ThunderServiceLite.exe" = D:\Program Files\Common Files\Thunder Network\KanKan\ThunderServiceLite.exe:*:Enabled:看看下载服务 – (ShenZhen Thunder Networking Technologies,Ltd.)
"D:\Program Files\Common Files\Thunder Network\KanKan\xmp.exe" = D:\Program Files\Common Files\Thunder Network\KanKan\xmp.exe:*:Enabled:迅雷看看播放器 – (深圳市迅雷网络技术有限公司)
"D:\Documents and Settings\my pc\My Documents\Downloads\[PC] Battlefield Vietnam [dopeman]\Battlefield Vietnam\BfVietnam.exe" = D:\Documents and Settings\my pc\My Documents\Downloads\[PC] Battlefield Vietnam [dopeman]\Battlefield Vietnam\BfVietnam.exe:*:Disabled:BfVietnam – ()
"D:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe" = D:\Program Files\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company? 2 – (EA Digital Illusions CE AB)
"D:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.56\ThunderService.exe" = D:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.56\ThunderService.exe:*:Enabled:ThunderService1.0.2.56
"D:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.56\ThunderLiveUD.exe" = D:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.56\ThunderLiveUD.exe:*:Enabled:ThunderLiveUD1.0.2.56
"D:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.56\XLBugReport.exe" = D:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.56\XLBugReport.exe:*:Enabled:XLBugReport1.0.2.56
"D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe" = D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe – (NVIDIA Corporation)
"D:\Documents and Settings\my pc\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" = D:\Documents and Settings\my pc\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe:*:Enabled:Main program for Octoshape client – (Octoshape ApS)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{14AFE241-FC6E-4FDB-BCA0-7AD6F4974171}" = Adobe Setup
"{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{19A74538-277B-419F-8BC5-C3994EC2BF53}" = RPC Plug-in for Max 2008
"{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}" = OF Dragon Rising
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.7.1
"{1B343C8C-F170-4829-8481-E163317C5830}" = iTunes
"{1BD07DF4-FB06-41BA-B896-B2DA59000C96}" = Windows Live Toolbar
"{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4
"{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{20DEB77C-21D6-4D22-BB47-233E47613D57}" = Microsoft Games for Windows - LIVE Redistributable
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java™ 6 Update 15
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman)
"{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer
"{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Roxio Drag-to-Disc
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Sonic Activation Module
"{36C10A75-06AE-4522-BC27-371C3C599D0F}" = JCMATTHEW Wireless LAN
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A08B59E-A9F0-4F4D-B7E5-6875D7F13327}" = Brother MFL-Pro Suite DCP-145C
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Backburner
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{4F3E17F8-F1C8-4A4B-9EB8-1EE2D190CDA9}" = Adobe Setup
"{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}" = SpyHunter
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5783F2D7-8001-0409-0002-0060B0CE6BBA}" = AutoCAD 2010 - English
"{5783F2D7-8001-0409-1002-0060B0CE6BBA}" = AutoCAD 2010 Language Pack - English
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler
"{66EBD70F-A42C-475F-AEDF-277378151033}" = Nero 7 Essentials
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.2.3
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{69C1F0AC-2017-46B2-9DC9-ED880CDF4E40}" = Administrative Templates for Windows XP
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7397EDED-F38A-4654-B669-BF61065803D0}" = PC Connectivity Solution
"{73FB1FB8-568E-4ACF-AC69-B643A8781D19}" = ArchVision Content Manager
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7A8FF745-BBC5-482B-88E4-18D3178249A9}" = ScanSoft PaperPort 11
"{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}" = 3dsmax ancillary install
"{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{917E0D11-D3E6-468F-96AE-C5133BDEF7A5}" = Administative Templates for Internet Explorer 7 for Windows XP SP2 and Windows Server 2003 SP1
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A346205-EA92-4406-B1AB-50379DA3F057}" = Autodesk DWF Viewer 7
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9F6CFB0-806D-11E0-8EA1-B8AC6F97B88E}" = Google Earth Plug-in
"{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}" = Windows 7 Upgrade Advisor
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3
"{AC76BA86-7AD7-2447-0000-800000000003}" = Chinese Simplified Fonts Support For Adobe Reader 8
"{AC76BA86-7AD7-5760-0000-800000000003}" = Japanese Fonts Support For Adobe Reader 8
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.85
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.3.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C251E4E6-89BA-0409-9B42-1B3D01D34783}" = Autodesk 3ds Max 2009 32-bit Architectural Materials Library
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C2F1F96A-057E-5819-B52E-FEA1D1D2933B}" = Acronis True Image Home
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator DE
"{CA1CA5F8-7500-45C5-9D4C-47D13FBC92D2}" = Adobe Setup
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D92FF8EB-BD77-40AE-B68B-A6BFC6F8661D}" = Windows Live Family Safety
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E91E8912-769D-42F0-8408-0E329443BABC}" = 802.11b/g Wireless LAN USB 2.0 Adapter
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{F08E8D2E-F132-4742-9C87-D5FF223A016A}" = Adobe Illustrator CS3
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F681200C-0446-0409-ABE4-EA9105E40EE4}" = Autodesk 3ds Max 2009 32-bit Additional Maps and Material Libraries
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FDD8070F-E3B9-0409-822C-CCFE5E82C14D}" = Autodesk 3ds Max 2009 32-bit
"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows Driver Package - Nokia Modem (02/15/2007 3.1)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"7-Zip" = 7-Zip 9.20
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe_1710d324011afc3e7658e969025f4ba" = Adobe InDesign CS4
"Adobe_a04a925a57548091300ada368235fc6" = Adobe Illustrator CS3
"Adobe_acce07fd2c8fe7f9e3f26243e626578" = Adobe Dreamweaver CS4
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Advanced SystemCare 3_is1" = Advanced SystemCare 3
"AutoCAD 2010 - English" = AutoCAD 2010 - English
"AVI DivX to DVD SVCD VCD Converter_is1" = AVI DivX to DVD SVCD VCD Converter 2.2.2
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"BitTorrent" = BitTorrent
"CleanUp!" = CleanUp!
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Cucusoft MPEG/MOV/RM/DivX/AVI to DVD/VCD/SVCD Creator Pro_is1" = Cucusoft MPEG/MOV/RM/DivX/AVI to DVD/VCD/SVCD Creator Pro 7.07
"DivX Setup.divx.com" = DivX Setup
"Easy FLV Player_is1" = Easy FLV Player 2.0
"EasyBCD" = EasyBCD 2.0
"easyMule" = easyMule
"ESET Online Scanner" = ESET Online Scanner v3
"FBX Plugin 2006.08 for Max 9.0" = FBX Plugin 2006.08 for Max 9.0
"FBX Plugin 2009.0 for Max 2009" = FBX Plugin 2009.0 for Max 2009
"FileHippo.com" = FileHippo.com Update Checker
"Free FLV Converter_is1" = Free FLV Converter V 6.6.4
"Glary Undelete_is1" = Glary Undelete 1.1
"GoToAssist" = GoToAssist 8.0.0.480
"Home Media Server [removed]" = Home Media Server [removed]
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 3.5.7
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.1.1800
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MigrateEasy" = Acronis Migrate Easy
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MyFreeCodec" = MyFreeCodec
"NirSoft ShellExView" = NirSoft ShellExView
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"PowerShell" = Windows PowerShell™ 1.0
"PPSGame" = PPS游戏 V1.0.1.298
"PPStream" = PPS影音 V2.7.0.1210 正式版
"PSP Video Converter 3" = PSP Video Converter 3
"QuickTime 3.0" = QuickTime 3.0
"Qvod Player 3.5_is1" = Qvod Player 3.5
"Qvod Player3.5" = Qvod Player3.5 [removed]
"RealPlayer 12.0" = RealPlayer
"Smart Defrag_is1" = Smart Defrag
"SpywareBlaster_is1" = SpywareBlaster 4.4
"StarCraft II" = StarCraft II
"StumbleUponIEToolbar" = StumbleUpon IE Toolbar
"thunder_is1" = 迅雷7
"TVAnts 1.0" = TVAnts 1.0
"TVUPlayer" = TVUPlayer [removed]
"UltraISO_is1" = UltraISO Premium V9.3
"VLC media player" = VLC media player 1.1.8
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WIC" = Windows Imaging Component
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01007" = Microsoft User-Mode Driver Framework Feature Pack 1.7
"XP Codec Pack" = XP Codec Pack
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Software Update" = Yahoo! Software Update
"迅雷看看播放器" = 迅雷看看播放器
"迅雷看看高清播放组件" = 迅雷看看高清播放组件

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BitTorrent" = BitTorrent
"BitTorrent DNA" = BitTorrent DNA
"Dropbox" = Dropbox
"MyFreeCodec" = MyFreeCodec
"Octoshape Streaming Services" = Octoshape Streaming Services
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 8/13/2011 2:23:41 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\APROPOSFIX\BACKUPS> in the hash map cannot be updated. Context: Application,
SystemIndex Catalog Details: A device attached to the system is not functioning.
(0x8007001f)

Error - 8/13/2011 2:23:41 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\APROPOSFIX\BACKUPS> in the hash map cannot be updated. Context: Application,
SystemIndex Catalog Details: A device attached to the system is not functioning.
(0x8007001f)

Error - 8/13/2011 2:23:41 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\APROPOSFIX\LOG.TXT> in the hash map cannot be updated. Context: Application,
SystemIndex Catalog Details: A device attached to the system is not functioning.
(0x8007001f)

Error - 8/13/2011 2:23:41 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\APROPOSFIX\LOG.TXT> in the hash map cannot be updated. Context: Application,
SystemIndex Catalog Details: A device attached to the system is not functioning.
(0x8007001f)

Error - 8/13/2011 2:23:42 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\APROPOSFIX\BACKUPS\FIX.REG> in the hash map cannot be updated. Context:
Application, SystemIndex Catalog Details: A device attached to the system is not
functioning. (0x8007001f)

Error - 8/13/2011 2:23:42 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\APROPOSFIX\BACKUPS\FIX.REG> in the hash map cannot be updated. Context:
Application, SystemIndex Catalog Details: A device attached to the system is not
functioning. (0x8007001f)

Error - 8/13/2011 2:51:10 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\3 APROPOSFIX\BACKUPS> in the hash map cannot be updated. Context:
Application, SystemIndex Catalog Details: A device attached to the system is not
functioning. (0x8007001f)

Error - 8/13/2011 2:51:10 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\3 APROPOSFIX\BACKUPS> in the hash map cannot be updated. Context:
Application, SystemIndex Catalog Details: A device attached to the system is not
functioning. (0x8007001f)

Error - 8/13/2011 2:51:10 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\3 APROPOSFIX\LOG.TXT> in the hash map cannot be updated. Context:
Application, SystemIndex Catalog Details: A device attached to the system is not
functioning. (0x8007001f)

Error - 8/13/2011 2:51:10 AM | Computer Name = WAYNE | Source = Windows Search Service | ID = 3013
Description = The entry INSTALLATIONS\3 APROPOSFIX\BACKUPS\FIX.REG> in the hash map cannot be updated. Context:
Application, SystemIndex Catalog Details: A device attached to the system is not
functioning. (0x8007001f)

[ System Events ]
Error - 8/16/2011 11:00:02 AM | Computer Name = WAYNE | Source = atapi | ID = 262153
Description = The device, \Device\Ide\IdePort2, did not respond within the timeout
period.

Error - 8/16/2011 11:00:05 AM | Computer Name = WAYNE | Source = atapi | ID = 262153
Description = The device, \Device\Ide\IdePort2, did not respond within the timeout
period.

Error - 8/16/2011 11:10:00 AM | Computer Name = WAYNE | Source = atapi | ID = 262153
Description = The device, \Device\Ide\IdePort2, did not respond within the timeout
period.

Error - 8/16/2011 11:21:06 AM | Computer Name = WAYNE | Source = Service Control Manager | ID = 7031
Description = The Windows Search service terminated unexpectedly. It has done this
1 time(s). The following corrective action will be taken in 30000 milliseconds:
Restart the service.

Error - 8/16/2011 11:21:11 AM | Computer Name = WAYNE | Source = Service Control Manager | ID = 7034
Description = The NVIDIA Update Service Daemon service terminated unexpectedly.
It has done this 1 time(s).

Error - 8/16/2011 6:11:44 PM | Computer Name = WAYNE | Source = Service Control Manager | ID = 7023
Description = The HID Input Service service terminated with the following error:
%%126

Error - 8/17/2011 8:41:09 AM | Computer Name = WAYNE | Source = Service Control Manager | ID = 7023
Description = The HID Input Service service terminated with the following error:
%%126

Error - 8/17/2011 8:59:44 AM | Computer Name = WAYNE | Source = Service Control Manager | ID = 7034
Description = The NVIDIA Update Service Daemon service terminated unexpectedly.
It has done this 1 time(s).

Error - 8/17/2011 8:59:48 AM | Computer Name = WAYNE | Source = Service Control Manager | ID = 7031
Description = The Windows Search service terminated unexpectedly. It has done this
1 time(s). The following corrective action will be taken in 30000 milliseconds:
Restart the service.

Error - 8/17/2011 9:19:25 AM | Computer Name = WAYNE | Source = Service Control Manager | ID = 7031
Description = The Windows Search service terminated unexpectedly. It has done this
2 time(s). The following corrective action will be taken in 30000 milliseconds:
Restart the service.


< End of report >

hi Tom,

This is the log (sorry some parts are in chinese) :-

ComboFix 11-08-23.03 - my pc 4/2011 Wed 20:28:13.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.936.86.1033.18.2047.1265 [GMT 8:00]
执行位置: d:\documents and settings\my pc\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((((( 被删除的档案 )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
d:\documents and settings\All Users\Application Data\TorrentEasy\fdmbtsupp.dll
d:\documents and settings\my pc\Application Data\360SE
d:\documents and settings\my pc\Application Data\360SE\360se.ini
d:\documents and settings\my pc\Application Data\360SE\apps\1000\1000.png
d:\documents and settings\my pc\Application Data\360SE\apps\1000\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1000\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\1018.png
d:\documents and settings\my pc\Application Data\360SE\apps\1018\ab.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\bc.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\boc.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\caipiao.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\ccb.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\ceb.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\chongzhi.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\cib.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\citic.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\cmb.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\cmbc.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\dianka.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\fanli.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\gdb.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\hxb.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\icbc.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\psbc.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\sdb.ico
d:\documents and settings\my pc\Application Data\360SE\apps\1018\spdb.ico
d:\documents and settings\my pc\Application Data\360SE\apps\appsi.dll
d:\documents and settings\my pc\Application Data\360SE\apps\Appslocal.ini
d:\documents and settings\my pc\Application Data\360SE\apps\BankMode\BankHelper.exe
d:\documents and settings\my pc\Application Data\360SE\apps\BankMode\BankMode.dll
d:\documents and settings\my pc\Application Data\360SE\apps\default.ini
d:\documents and settings\my pc\Application Data\360SE\apps\ExtFeedWeibo\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtFeedWeibo\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtFeedWeibo\ExtFeedWeibo.png
d:\documents and settings\my pc\Application Data\360SE\apps\ExtShare\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtShare\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtShare\ExtShare.png
d:\documents and settings\my pc\Application Data\360SE\apps\ExtTuan\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtTuan\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtTuan\ExtTuan.png
d:\documents and settings\my pc\Application Data\360SE\apps\ExtWebmail\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtWebmail\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtWebmail\ExtWebMail.png
d:\documents and settings\my pc\Application Data\360SE\apps\ExtYouxi\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtYouxi\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\ExtYouxi\ExtYouxi.png
d:\documents and settings\my pc\Application Data\360SE\apps\NotifyDown.dll
d:\documents and settings\my pc\Application Data\360SE\apps\SEWebAppPlat.exe
d:\documents and settings\my pc\Application Data\360SE\apps\SnapPlugin\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\SnapPlugin\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\SnapPlugin\SnapPlugin.png
d:\documents and settings\my pc\Application Data\360SE\apps\TranslatorPlugin\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\TranslatorPlugin\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\TranslatorPlugin\TranslatorPlugin.png
d:\documents and settings\my pc\Application Data\360SE\apps\Youxi\app.ico
d:\documents and settings\my pc\Application Data\360SE\apps\Youxi\app24.ico
d:\documents and settings\my pc\Application Data\360SE\apps\Youxi\Youxi.png
d:\documents and settings\my pc\Application Data\360SE\data\360sefav.db
d:\documents and settings\my pc\Application Data\360SE\data\gameurls.dat
d:\documents and settings\my pc\Application Data\360SE\data\history.dat
d:\documents and settings\my pc\Application Data\360SE\data\ico\avc.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\cn.bing.com.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\cz.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\ddt.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\dgcs.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\dh.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\farm.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\hao.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\hero.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\mcsd.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\me.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\plsm.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\poker.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\se.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\search8.taobao.com.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\www.baidu.com.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\www.bing.com.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\www.google.com.hk.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\www.qihoo.com.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\www.sogou.com.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\www.youdao.com.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\wxfy.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\yahoo.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\ico\zqjl.wan.360.cn.ico
d:\documents and settings\my pc\Application Data\360SE\data\newskin.dat
d:\documents and settings\my pc\Application Data\360SE\data\switch.ini
d:\documents and settings\my pc\Application Data\360SE\extensions\ExtDoctor\doctor.dll
d:\documents and settings\my pc\Application Data\360SE\extensions\ExtDoctor\ExtDoctor.ini
d:\documents and settings\my pc\Application Data\360SE\extensions\ExtDownload\livep.dat
d:\documents and settings\my pc\Application Data\360SE\extensions\Favorites\titleopt.dll
d:\documents and settings\my pc\Application Data\360SE\extensions\SafeCentral\esimple.ini
d:\documents and settings\my pc\Application Data\360SE\extensions\SafeCentral\SafeProtect.dat
d:\documents and settings\my pc\Application Data\360SE\seup.ini
d:\documents and settings\my pc\Local Settings\Application Data\beep.sys
d:\documents and settings\my pc\Local Settings\Application Data\Process.exe
d:\documents and settings\my pc\Local Settings\Application Data\scan.exe
d:\documents and settings\my pc\Local Settings\Application Data\tskill.exe
d:\documents and settings\my pc\WINDOWS
d:\windows\system32\1212442141.dll
d:\windows\system32\12203659341.dll
d:\windows\system32\muzapp.exe
d:\windows\system32\tmp.reg
.
.
((((((((((((((((((((((((( 2011-07-24 至 2011-08-24 的新的档案 )))))))))))))))))))))))))))))))
.
.
2011-08-24 06:03 . 2011-08-24 06:03 ——– d—a-w- D:\.Trash-999
2011-08-23 15:11 . 2011-07-29 05:54 19840 —-a-w- d:\windows\system32\EuEpmGdi.dll
2011-08-23 15:11 . 2011-08-02 12:48 2469248 —-a-w- d:\windows\system32\BootMan.exe
2011-08-23 15:11 . 2011-07-29 05:54 86408 —-a-w- d:\windows\system32\setupempdrv03.exe
2011-08-23 15:11 . 2011-07-29 05:54 8456 —-a-w- d:\windows\system32\EuGdiDrv.sys
2011-08-23 15:11 . 2011-07-29 05:54 13192 —-a-w- d:\windows\system32\epmntdrv.sys
2011-08-23 15:10 . 2011-08-23 15:10 ——– d—–w- d:\program files\EASEUS
2011-08-23 11:50 . 2010-11-03 18:08 237568 —-a-w- d:\windows\system32\yv12vfw.dll
2011-08-23 11:50 . 2011-06-24 14:44 243200 —-a-w- d:\windows\system32\xvidvfw.dll
2011-08-23 11:50 . 2011-06-24 14:28 650752 —-a-w- d:\windows\system32\xvidcore.dll
2011-08-23 11:50 . 2011-08-08 08:00 74752 —-a-w- d:\windows\system32\ff_vfw.dll
2011-08-20 08:06 . 2011-08-20 08:06 896 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\databasepath.reg
2011-08-20 08:06 . 2011-08-20 08:06 3008 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\bgregfix.reg
2011-08-20 08:06 . 2011-08-20 08:06 2600 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\exefix.reg
2011-08-20 08:06 . 2011-08-20 08:06 951291 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\remregfix.reg
2011-08-20 08:06 . 2011-08-20 08:06 890 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\Remove-itRestorePoint.vbs
2011-08-20 08:06 . 2011-08-20 08:06 5228 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\nfig.reg
2011-08-20 08:06 . 2011-08-20 08:06 4994 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\s.reg
2011-08-20 08:06 . 2011-08-20 08:06 4512 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\hpregfix.reg
2011-08-20 08:06 . 2011-08-20 08:06 18308 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\IEDef.reg
2011-08-20 08:06 . 2011-08-20 08:06 1754 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\regf.reg
2011-08-20 07:06 . 2008-05-02 13:25 465920 -c—-w- d:\windows\system32\dllcache\imapi2fs.dll
2011-08-20 07:06 . 2008-05-02 13:25 465920 ——w- d:\windows\system32\imapi2fs.dll
2011-08-20 07:06 . 2008-05-02 13:25 317952 -c—-w- d:\windows\system32\dllcache\imapi2.dll
2011-08-20 07:06 . 2008-05-02 13:25 317952 ——w- d:\windows\system32\imapi2.dll
2011-08-20 06:55 . 2011-08-20 07:11 ——– d—–w- d:\documents and settings\LocalService\Application Data\360safe
2011-08-20 04:09 . 2011-08-20 04:09 ——– d—–w- d:\program files\Chaos Group
2011-08-20 03:34 . 2009-07-21 12:24 14080 —-a-w- d:\windows\system32\drivers\36040.tmp
2011-08-20 03:34 . 2009-06-03 14:26 27400 —-a-w- d:\windows\system32\drivers\3603F.tmp
2011-08-20 03:33 . 2011-08-20 08:54 ——– d—–w- d:\documents and settings\All Users\Application Data\360safe
2011-08-20 03:27 . 2011-08-20 03:27 ——– d—–w- d:\documents and settings\All Users\Application Data\360SD
2011-08-20 03:27 . 2011-08-20 08:35 ——– d—–w- d:\program files\360
2011-08-19 12:51 . 2011-08-19 13:36 ——– d—–w- d:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2011-08-19 12:51 . 2011-08-19 12:59 ——– d—–w- d:\program files\Spybot - Search & Destroy
2011-08-16 15:50 . 2011-08-18 11:49 ——– d—–w- d:\program files\SpywareBlaster
2011-08-16 15:47 . 2011-08-16 15:47 ——– d—–w- d:\program files\ESET
2011-08-16 15:29 . 2009-06-30 02:37 28552 —-a-w- d:\windows\system32\drivers\pavboot.sys
2011-08-16 15:29 . 2011-08-16 15:29 ——– d—–w- d:\program files\Panda Security
2011-08-16 14:20 . 2010-05-25 07:59 96488 —-a-w- d:\windows\system32\drivers\ssadbus.sys
2011-08-16 14:20 . 2010-05-25 07:59 30312 —-a-w- d:\windows\system32\drivers\ssadadb.sys
2011-08-16 14:20 . 2010-05-25 07:59 1416680 —-a-w- d:\windows\system32\WdfCoInstaller01005.dll
2011-08-16 14:20 . 2010-05-25 07:59 12776 —-a-w- d:\windows\system32\drivers\ssadmdfl.sys
2011-08-16 14:20 . 2010-05-25 07:59 121576 —-a-w- d:\windows\system32\drivers\ssadmdm.sys
2011-08-16 14:20 . 2010-05-25 07:59 10344 —-a-w- d:\windows\system32\drivers\ssadcmnt.sys
2011-08-16 14:20 . 2010-05-25 07:59 10216 —-a-w- d:\windows\system32\drivers\ssadwhnt.sys
2011-08-13 05:16 . 2011-08-13 05:16 ——– d—–w- d:\program files\FileHippo.com
2011-08-13 04:46 . 2011-08-13 04:46 ——– d—–w- d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com
2011-08-13 04:46 . 2011-08-23 13:24 ——– d—–w- d:\program files\SUPERAntiSpyware
2011-08-13 04:46 . 2011-08-13 04:46 ——– d—–w- d:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2011-08-13 03:40 . 2011-08-13 03:40 110080 —-a-r- d:\documents and settings\my pc\Application Data\Microsoft\Installer\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}\IconF7A21AF7.exe
2011-08-13 03:40 . 2011-08-13 03:40 110080 —-a-r- d:\documents and settings\my pc\Application Data\Microsoft\Installer\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}\IconD7F16134.exe
2011-08-13 03:40 . 2011-08-18 13:31 ——– d—–w- D:\sh4ldr
2011-08-13 03:40 . 2011-08-13 03:40 ——– d—–w- d:\program files\Enigma Software Group
2011-08-13 03:39 . 2011-08-13 03:40 ——– d—–w- d:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2011-08-13 03:39 . 2011-08-13 03:39 ——– d—–w- d:\program files\Common Files\Wise Installation Wizard
2011-08-12 14:16 . 2008-04-13 21:41 81920 ——w- d:\windows\system32\ieencode.dll
2011-08-12 14:15 . 2006-12-28 16:31 19569 —-a-w- d:\windows\000001_.tmp
2011-08-11 15:03 . 2001-08-17 14:36 53760 -c–a-w- d:\windows\system32\dllcache\wiamsmud.dll
2011-08-11 15:02 . 2001-08-17 05:28 687999 -c–a-w- d:\windows\system32\dllcache\usrwdxjs.sys
2011-08-11 15:01 . 2001-08-17 14:36 216064 -c–a-w- d:\windows\system32\dllcache\um34scan.dll
2011-08-11 15:00 . 2001-08-17 04:14 123995 -c–a-w- d:\windows\system32\dllcache\tjisdn.sys
2011-08-11 14:59 . 2001-08-17 14:36 10240 -c–a-w- d:\windows\system32\dllcache\swpidflt.dll
2011-08-11 14:58 . 2001-08-17 05:53 9600 -c–a-w- d:\windows\system32\dllcache\sonymc.sys
2011-08-11 14:57 . 2001-08-17 04:50 50432 -c–a-w- d:\windows\system32\dllcache\sisv.sys
2011-08-11 14:56 . 2001-08-17 05:51 16640 -c–a-w- d:\windows\system32\dllcache\scmstcs.sys
2011-08-11 14:55 . 2001-08-17 04:12 19017 -c–a-w- d:\windows\system32\dllcache\rtl8029.sys
2011-08-11 14:54 . 2001-08-17 05:28 112574 -c–a-w- d:\windows\system32\dllcache\ptserlp.sys
2011-08-11 14:53 . 2001-08-17 04:11 35328 -c–a-w- d:\windows\system32\dllcache\pcntpci5.sys
2011-08-11 14:52 . 2001-08-17 04:50 198144 -c–a-w- d:\windows\system32\dllcache\nv3.sys
2011-08-11 14:51 . 2001-08-17 04:11 128000 -c–a-w- d:\windows\system32\dllcache\n100325.sys
2011-08-11 14:50 . 2001-08-17 05:57 16128 -c–a-w- d:\windows\system32\dllcache\modemcsa.sys
2011-08-11 14:49 . 2001-08-17 04:12 20573 -c–a-w- d:\windows\system32\dllcache\lne100.sys
2011-08-11 14:48 . 2001-08-17 14:36 372824 -c–a-w- d:\windows\system32\dllcache\iconf32.dll
2011-08-11 14:47 . 2001-08-17 05:28 44863 -c–a-w- d:\windows\system32\dllcache\hsf_soar.sys
2011-08-11 14:46 . 2001-08-17 06:02 2688 -c–a-w- d:\windows\system32\dllcache\hidswvd.sys
2011-08-11 14:45 . 2001-08-17 04:11 12362 -c–a-w- d:\windows\system32\dllcache\f3ab18xi.sys
2011-08-11 14:44 . 2001-08-17 04:11 69194 -c–a-w- d:\windows\system32\dllcache\el656cd5.sys
2011-08-11 14:43 . 2001-08-17 14:36 24064 -c–a-w- d:\windows\system32\dllcache\devldr32.exe
2011-08-11 14:42 . 2001-08-17 04:13 27164 -c–a-w- d:\windows\system32\dllcache\ce3n5.sys
2011-08-10 13:34 . 2008-04-13 16:06 14208 -c–a-w- d:\windows\system32\dllcache\battc.sys
2011-08-09 10:36 . 2011-08-09 10:36 ——– d—–w- d:\documents and settings\my pc\Local Settings\Application Data\Octoshape
2011-08-09 10:36 . 2011-08-09 10:36 ——– d—–w- d:\documents and settings\my pc\Application Data\Octoshape
2011-08-09 03:12 . 2011-08-09 03:13 ——– d—–w- d:\documents and settings\LocalService\Local Settings\Application Data\Adobe
2011-08-09 03:12 . 2011-08-09 03:12 ——– d—–w- d:\documents and settings\my pc\Application Data\Windows Search
2011-08-09 03:11 . 2011-08-09 03:11 ——– d—–w- d:\windows\system32\winrm
2011-08-09 03:11 . 2011-08-09 03:11 ——– dc-h–w- d:\windows\$968930Uinstall_KB968930$
2011-08-09 03:11 . 2011-08-09 03:11 ——– d—–w- d:\documents and settings\my pc\Application Data\Windows Desktop Search
2011-08-09 03:10 . 2011-08-11 15:10 ——– d—–w- d:\program files\Windows Desktop Search
2011-08-09 03:10 . 2011-08-09 03:10 ——– d—–w- d:\windows\system32\GroupPolicy
2011-08-09 00:52 . 2011-08-09 00:52 ——– d—–w- d:\program files\Microsoft.NET
2011-08-07 02:15 . 2011-08-07 02:15 ——– d—–w- d:\documents and settings\All Users\Application Data\NVIDIA Corporation
2011-08-07 02:14 . 2011-08-09 05:09 ——– d—–w- d:\documents and settings\UpdatusUser
2011-08-07 02:14 . 2011-08-07 02:14 ——– d—–w- d:\documents and settings\All Users\Application Data\NVIDIA
2011-08-07 02:13 . 2011-05-25 06:09 543336 —-a-w- d:\windows\system32\easyupdatusapiu.dll
2011-08-07 02:13 . 2011-08-18 12:55 273344 —-a-w- d:\windows\system32\nvdrsdb1.bin
2011-08-07 02:13 . 2011-08-18 12:55 1 —-a-w- d:\windows\system32\nvdrssel.bin
2011-08-07 02:13 . 2011-08-18 12:55 273344 —-a-w- d:\windows\system32\nvdrsdb0.bin
2011-08-07 02:12 . 2011-05-25 06:09 61440 —-a-w- d:\windows\system32\OpenCL.dll
2011-08-07 02:12 . 2011-05-25 06:09 865896 —-a-w- d:\windows\system32\nvgenco322090.dll
2011-08-07 02:12 . 2011-05-25 06:09 899688 —-a-w- d:\windows\system32\nvdispco3220150.dll
2011-08-07 02:12 . 2011-05-25 06:09 2808936 —-a-w- d:\windows\system32\nvcuvid.dll
2011-08-07 02:12 . 2011-05-25 06:09 2082408 —-a-w- d:\windows\system32\nvcuvenc.dll
2011-08-07 02:12 . 2011-05-25 06:09 5332992 —-a-w- d:\windows\system32\nvcuda.dll
2011-08-07 02:12 . 2011-05-25 06:09 13004800 —-a-w- d:\windows\system32\nvcompiler.dll
2011-08-07 02:12 . 2011-08-18 12:52 ——– d—–w- d:\program files\NVIDIA Corporation
2011-07-29 14:09 . 2011-07-29 14:09 ——– d—–w- D:\656008adc7c9fc63a82d60b0e996
2011-07-29 13:47 . 2010-02-27 01:08 101376 —-a-w- d:\windows\system32\rld.dll
2011-07-29 13:47 . 2010-02-27 01:08 101376 —-a-w- d:\windows\system\rld.dll
2011-07-29 12:56 . 2011-07-29 12:56 ——– d—–w- d:\program files\Electronic Arts
.
.
.
(((((((((((((((((((((((((((((((((((((((( 在三个月内被修改的档案 ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-20 08:06 . 2006-02-28 12:00 4224 —-a-w- d:\windows\system32\drivers\beep.sys
2011-08-20 07:53 . 2011-06-25 00:10 404640 —-a-w- d:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 13:29 . 2008-10-09 22:35 456320 —-a-w- d:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-10-09 22:35 10496 —-a-w- d:\windows\system32\drivers\ndistapi.sys
2011-07-06 11:52 . 2010-10-16 00:47 41272 —-a-w- d:\windows\system32\drivers\mbamswissarmy.sys
2011-07-06 11:52 . 2010-10-16 00:47 22712 —-a-w- d:\windows\system32\drivers\mbam.sys
2011-06-28 13:09 . 2010-10-23 04:52 138192 —-a-w- d:\windows\system32\drivers\avipbb.sys
2011-06-28 13:09 . 2010-10-23 04:52 66616 —-a-w- d:\windows\system32\drivers\avgntflt.sys
2011-06-24 14:10 . 2008-10-09 22:35 139656 —-a-w- d:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:36 . 2006-02-28 12:00 916480 —-a-w- d:\windows\system32\wininet.dll
2011-06-23 18:36 . 2006-02-28 12:00 43520 —-a-w- d:\windows\system32\licmgr10.dll
2011-06-23 18:36 . 2006-02-28 12:00 1469440 ——w- d:\windows\system32\inetcpl.cpl
2011-06-23 12:05 . 2006-02-28 12:00 385024 —-a-w- d:\windows\system32\html.iec
2011-06-20 17:44 . 2006-02-28 12:00 293376 —-a-w- d:\windows\system32\winsrv.dll
2011-06-07 03:13 . 2011-06-16 13:43 4659712 —-a-w- d:\windows\system32\Redemption.dll
2011-06-07 03:13 . 2011-06-07 03:13 974848 —-a-w- d:\windows\system32\cis-2.4.dll
2011-06-07 03:13 . 2011-06-07 03:13 90112 —-a-w- d:\windows\MAMCityDownload.ocx
2011-06-07 03:13 . 2011-06-07 03:13 81920 —-a-w- d:\windows\system32\issacapi_bs-2.3.dll
2011-06-07 03:13 . 2011-06-07 03:13 65536 —-a-w- d:\windows\system32\issacapi_pe-2.3.dll
2011-06-07 03:13 . 2011-06-07 03:13 57344 —-a-w- d:\windows\system32\MTXSYNCICON.dll
2011-06-07 03:13 . 2011-06-07 03:13 57344 —-a-w- d:\windows\system32\issacapi_se-2.3.dll
2011-06-07 03:13 . 2011-06-07 03:13 569344 —-a-w- d:\windows\system32\muzdecode.ax
2011-06-07 03:13 . 2011-06-07 03:13 491520 —-a-w- d:\windows\system32\muzapp.dll
2011-06-07 03:13 . 2011-06-07 03:13 49152 —-a-w- d:\windows\system32\MaJGUILib.dll
2011-06-07 03:13 . 2011-06-07 03:13 45056 —-a-w- d:\windows\system32\MaXMLProto.dll
2011-06-07 03:13 . 2011-06-07 03:13 40960 —-a-w- d:\windows\system32\MTTELECHIP.dll
2011-06-07 03:13 . 2011-06-07 03:13 352256 —-a-w- d:\windows\system32\MSLUR71.dll
2011-06-07 03:13 . 2011-06-07 03:13 325552 —-a-w- d:\windows\MASetupCaller.dll
2011-06-07 03:13 . 2011-06-07 03:13 30568 —-a-w- d:\windows\MusiccityDownload.exe
2011-06-07 03:13 . 2011-06-07 03:13 24576 —-a-w- d:\windows\system32\MASetupCleaner.exe
2011-06-07 03:13 . 2011-06-07 03:13 200704 —-a-w- d:\windows\system32\muzwmts.dll
2011-06-07 03:13 . 2011-06-07 03:13 155648 —-a-w- d:\windows\system32\MSFLib.dll
2011-06-07 03:13 . 2011-06-07 03:13 143360 —-a-w- d:\windows\system32\3DAudio.ax
2011-06-07 03:13 . 2011-06-07 03:13 14336 —-a-w- d:\windows\system32\avrt.dll
2011-06-07 03:13 . 2011-06-07 03:13 135168 —-a-w- d:\windows\system32\muzaf1.dll
2011-06-07 03:13 . 2011-06-07 03:13 131072 —-a-w- d:\windows\system32\muzmpgsp.ax
2011-06-07 03:13 . 2011-06-07 03:13 122880 —-a-w- d:\windows\system32\muzeffect.ax
2011-06-07 03:13 . 2011-06-07 03:13 118784 —-a-w- d:\windows\system32\MaDRM.dll
2011-06-07 03:13 . 2011-06-07 03:13 110592 —-a-w- d:\windows\system32\muzmp4sp.ax
2011-06-07 03:13 . 2011-06-16 13:43 821824 —-a-w- d:\windows\system32\dgderapi.dll
2011-06-07 03:13 . 2011-06-16 13:43 319456 —-a-w- d:\windows\system32\DIFxAPI.dll
2011-06-07 03:13 . 2011-06-16 13:43 20032 —-a-w- d:\windows\system32\drivers\dgderdrv.sys
2011-06-07 03:13 . 2011-06-07 03:13 57344 —-a-w- d:\windows\system32\MK_Lyric.dll
2011-06-07 03:13 . 2011-06-07 03:13 45056 —-a-w- d:\windows\system32\MACXMLProto.dll
2011-06-07 03:13 . 2011-06-07 03:13 40960 —-a-w- d:\windows\system32\MAMACExtract.dll
2011-06-07 03:13 . 2011-06-07 03:13 258048 —-a-w- d:\windows\system32\muzoggsp.ax
2011-06-07 03:13 . 2011-06-07 03:13 245760 —-a-w- d:\windows\system32\MSCLib.dll
2011-06-02 14:02 . 2008-10-09 22:35 1858944 —-a-w- d:\windows\system32\win32k.sys
2011-04-24 04:10 . 2011-04-24 04:10 197632 —-a-w- d:\program files\Common Files\OnlineFilesManager.dll
2011-08-12 05:57 . 2011-08-19 23:55 134104 —-a-w- d:\program files\mozilla firefox\components\browsercomps.dll
2006-05-03 09:06 163328 –sha-r- d:\windows\system32\flvDX.dll
2007-02-21 10:47 31232 –sha-r- d:\windows\system32\msfDX.dll
.
.
((((((((((((((((((((((((((((((((((((( 重要登入点 ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*注意* 空白与合法缺省登录将不会被显示
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Online Files]
@="{B82655E9-B81D-4A97-8154-0D84A4C048E4}"
[HKEY_CLASSES_ROOT\CLSID\{B82655E9-B81D-4A97-8154-0D84A4C048E4}]
2011-04-24 04:10 197632 —-a-w- d:\program files\Common Files\OnlineFilesManager.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="d:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="d:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-03 281768]
"nwiz"="d:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-05-04 1632360]
"NvCplDaemon"="d:\windows\system32\NvCpl.dll" [2011-05-25 13895272]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="d:\windows\system32\ctfmon.exe" [2008-04-13 15360]
.
d:\documents and settings\my pc\Start Menu\Programs\Startup\
BitTorrent (2).lnk - c:\program files\BitTorrent\bittorrent.exe [N/A]
Dropbox.lnk - d:\documents and settings\my pc\Application Data\Dropbox\bin\Dropbox.exe [2011-5-26 24176560]
.
d:\documents and settings\All Users\Start Menu\Programs\Startup\
Wireless Utility.lnk - d:\program files\Wireless\Common\Utility.exe [2010-12-29 602112]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "d:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "d:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 —-a-w- d:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-10-10 13:51 10792 —-a-w- d:\program files\Citrix\GoToAssist\480\g2awinlogon.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=d:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=d:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^JCMATTHEW WLAN.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\JCMATTHEW WLAN.lnk
backup=d:\windows\pss\JCMATTHEW WLAN.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Nokia Nseries PC Suite.lnk]
backup=d:\windows\pss\Nokia Nseries PC Suite.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk
backup=d:\windows\pss\Windows Search.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^Adobe Gamma.lnk]
backup=d:\windows\pss\Adobe Gamma.lnkStartup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^Dropbox.lnk]
path=d:\documents and settings\my pc\Start Menu\Programs\Startup\Dropbox.lnk
backup=d:\windows\pss\Dropbox.lnkStartup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^MagicDisc.lnk]
backup=d:\windows\pss\MagicDisc.lnkStartup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^启动迅雷5.lnk]
path=d:\documents and settings\my pc\Start Menu\Programs\Startup\启动迅雷5.lnk
backup=d:\windows\pss\启动迅雷5.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
d:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2009-09-12 08:31 357384 —-a-w- d:\program files\Common Files\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-14 17:04 39792 —-a-w- d:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2010-05-10 13:53 611712 —-a-w- d:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeUpdater]
2008-11-20 13:30 2356088 —-a-w- d:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2010-08-10 07:10 2349776 —-a-w- d:\program files\IObit\Advanced SystemCare 3\AWC.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2005-05-03 10:43 69632 ——r- d:\windows\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-01 02:21 153136 —-a-w- d:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrMfcWnd]
2008-02-19 00:22 1089536 —-a-r- d:\program files\Brother\Brmfcmon\BrMfcWnd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter3]
2007-12-21 09:57 86016 —-a-w- d:\program files\Brother\ControlCenter3\BrCtrCen.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-13 21:42 15360 —-a-w- d:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-03-21 18:56 1230704 —-a-w- d:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart]
2011-01-26 12:03 7508440 —-a-w- d:\program files\easyMule\emule.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileHippo.com]
2010-08-09 12:47 248832 —-a-w- d:\program files\FileHippo.com\UpdateChecker.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
2006-02-28 12:00 208952 —-a-w- d:\windows\ime\imjp8_1\imjpmig.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2007-10-11 11:01 46368 —-a-w- d:\program files\ScanSoft\PaperPort\IndexSearch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2004-07-27 08:50 221184 —-a-w- d:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2005-02-16 08:15 81920 —-a-w- d:\program files\Common Files\InstallShield\UpdateService\issch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-03-01 13:45 421160 —-a-w- d:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
2011-06-09 10:52 940944 —-a-w- d:\program files\Samsung\Kies\KiesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
2011-06-09 10:52 20880 —-a-w- d:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2011-06-09 10:52 3373968 —-a-w- d:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2011-07-06 11:52 449584 —-a-w- d:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-13 21:42 1695232 —-a-w- d:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2010-04-16 14:12 3872080 —-a-w- d:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
2006-02-28 12:00 59392 —-a-w- d:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 07:57 153136 —-a-w- d:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2011-05-25 06:09 13895272 —-a-w- d:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2011-05-25 06:09 111208 —-a-w- d:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2011-05-04 16:02 1632360 —-a-w- d:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Octoshape Streaming Services]
2009-01-08 13:44 70936 —-a-w- d:\documents and settings\my pc\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2007-10-11 11:03 29984 —-a-w- d:\program files\ScanSoft\PaperPort\pptd40nt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
2006-02-28 12:00 455168 —-a-w- d:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2006-02-28 12:00 455168 —-a-w- d:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PPS Accelerator]
2010-02-24 03:25 214408 —-a-w- d:\progra~1\PPStream\PPSAP.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 09:38 421888 —-a-w- d:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
2006-08-17 01:00 1116920 —-a-w- c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2007-06-13 06:49 16377344 ——r- d:\windows\RTHDCPL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sclauncher]
2007-10-11 11:12 94208 —-a-w- d:\program files\SimpleCenter\bin\win\sclauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyHunter Security Suite]
2010-06-28 10:05 3021720 —-a-w- d:\program files\Enigma Software Group\SpyHunter\SpyHunter4.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
2006-10-25 01:03 210472 —-a-w- d:\program files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2011-08-12 21:37 4603264 —-a-w- d:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Thunder]
2011-05-27 10:14 1002672 —-a-w- d:\program files\Thunder Network\Thunder\Program\Thunder.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-13 06:42 273544 —-a-w- d:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2009-09-12 08:30 5048488 —-a-w- d:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"mi-raysat_3dsmax9_32"=2 (0x2)
"mi-raysat_3dsMax2008_32"=2 (0x2)
"Bonjour Service"=2 (0x2)
"LiveUpdate Notice Ex"=2 (0x2)
"aawservice"=2 (0x2)
"Automatic LiveUpdate Scheduler"=2 (0x2)
"Autodesk Licensing Service"=2 (0x2)
"Adobe LM Service"=3 (0x3)
"stllssvr"=3 (0x3)
"ServiceLayer"=3 (0x3)
"SeaPort"=2 (0x2)
"ose"=3 (0x3)
"NMIndexingService"=3 (0x3)
"mi-raysat_3dsMax2009_32"=2 (0x2)
"LiveUpdate Notice Service"=2 (0x2)
"LiveUpdate"=3 (0x3)
"idsvc"=3 (0x3)
"IDriverT"=3 (0x3)
"GoToAssist"=3 (0x3)
"fsssvc"=3 (0x3)
"FLEXnet Licensing Service"=3 (0x3)
"afcdpsrv"=2 (0x2)
"SpyHunter 4 Service"=2 (0x2)
"YahooAUService"=2 (0x2)
"iPod Service"=3 (0x3)
"AcrSch2Svc"=2 (0x2)
"!SASCORE"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"d:\\WINDOWS\\system32\\sessmgr.exe"=
"d:\\Program Files\\ArchVision\\ArchVision Content Manager\\rpcACMapp.exe"=
"d:\\Program Files\\ArchVision\\ArchVision Content Manager\\rpcACMftp.exe"=
"d:\\Program Files\\TVAnts\\Tvants.exe"=
"d:\\Program Files\\SimpleCenter\\Home Media Server.exe"=
"%windir%\\system32\\sessmgr.exe"=
"$INSTDIR\\FlvDetector.exe"= d:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"d:\\Program Files\\JCMATTHEW WLAN\\RtWLan.exe"=
"d:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"d:\\Program Files\\Codemasters\\OF Dragon Rising\\OFDR.exe"=
"d:\\Program Files\\QvodPlayer\\QvodTerminal.exe"=
"d:\\Documents and Settings\\my pc\\Application Data\\Dropbox\\bin\\Dropbox.exe"=
"d:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\StarCraft II\\StarCraft II.exe"=
"c:\\Program Files\\StarCraft II\\Versions\\Base15405\\SC2.exe"=
"d:\\Program Files\\PPStream\\PPStream.exe"=
"d:\\Program Files\\PPStream\\PPSAP.exe"=
"d:\\Program Files\\PPSGame\\PPSGame.exe"=
"d:\\Program Files\\王者在线电影\\QvodTerminal.exe"=
"d:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Program Files\\iTunes\\iTunes.exe"=
"d:\\Program Files\\easyMule\\emule.exe"=
"d:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"d:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\XLDoctor\\7.1.7.2244_2\\Program\\XLDoctorUI.exe"=
"d:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\XLDoctor\\7.1.8.2302_3\\Program\\XLDoctorUI.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\Program\\Thunder.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\Program\\ThunderLiveUD.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\TP\\Ver1\\1.1.2.67_1111\\ThunderPlatform.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\TP\\Ver1\\1.1.2.67_1111\\ThunderLiveUD.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\TP\\Ver1\\1.1.2.67_1111\\XLBugReport.exe"=
"d:\\Program Files\\Thunder Network\\Xmp4\\Program\\Xmp.exe"=
"d:\\Program Files\\Thunder Network\\Xmp4\\Program\\XLBugReport.exe"=
"d:\\Program Files\\Thunder Network\\Xmp4\\Program\\ThunderLiveUD.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\KanKan\\ThunderServiceLite.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\KanKan\\xmp.exe"=
"d:\\Program Files\\Electronic Arts\\Battlefield Bad Company 2\\BFBC2Updater.exe"=
"d:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"d:\\Documents and Settings\\my pc\\Application Data\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1542:TCP"= 1542:TCP:Realtek WPS TCP Prot
"1542:UDP"= 1542:UDP:Realtek WPS UDP Prot
"53:UDP"= 53:UDP:Realtek AP UDP Prot
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"33674:UDP"= 33674:UDP:ThunderLAN(UDP)
"33673:TCP"= 33673:TCP:ThunderLAN(TCP)
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
.
R0 pavboot;pavboot;d:\windows\system32\drivers\pavboot.sys [8/16/2011 11:29 PM 28552]
R0 tdrpman251;Acronis Try&Decide; and Restore Points filter (build 251);d:\windows\system32\drivers\tdrpm251.sys [12/5/2010 7:58 AM 902432]
R1 SASDIFSV;SASDIFSV;d:\program files\SUPERAntiSpyware\sasdifsv.sys [7/23/2011 12:27 AM 12880]
R1 SASKUTIL;SASKUTIL;d:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/13/2011 5:55 AM 67664]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;d:\program files\Avira\AntiVir Desktop\sched.exe [10/23/2010 12:52 PM 136360]
R2 BBUpdate;BBUpdate;d:\program files\Microsoft\BingBar\SeaPort.EXE [6/15/2011 5:33 PM 249648]
R2 nvUpdatusService;NVIDIA Update Service Daemon;d:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [8/7/2011 10:14 AM 2214504]
R2 XLDoctor Service;XLDoctor Service;d:\windows\system32\svchost -k DoctorService –> d:\windows\system32\svchost -k DoctorService [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;d:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [11/8/2010 7:13 PM 136176]
S3 afcdp;afcdp;d:\windows\system32\drivers\afcdp.sys [12/5/2010 7:59 AM 159168]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;d:\windows\system32\drivers\ssadadb.sys [8/16/2011 10:20 PM 30312]
S3 BBSvc;Bing Bar Update Service;d:\program files\Microsoft\BingBar\BBSvc.EXE [7/7/2011 7:31 PM 195336]
S3 dgderdrv;dgderdrv;d:\windows\system32\drivers\dgderdrv.sys [6/16/2011 9:43 PM 20032]
S3 epmntdrv;epmntdrv;d:\windows\system32\epmntdrv.sys [8/23/2011 11:11 PM 13192]
S3 esgiguard;esgiguard;d:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [1/27/2010 6:10 PM 5248]
S3 EuGdiDrv;EuGdiDrv;d:\windows\system32\EuGdiDrv.sys [8/23/2011 11:11 PM 8456]
S3 FsUsbExDisk;FsUsbExDisk;d:\windows\system32\FsUsbExDisk.Sys [7/12/2010 9:57 PM 36640]
S3 gupdatem;Google Update Service (gupdatem);d:\program files\Google\Update\GoogleUpdate.exe [11/8/2010 7:13 PM 136176]
S3 MBAMProtector;MBAMProtector;d:\windows\system32\drivers\mbam.sys [10/16/2010 8:47 AM 22712]
S3 Revoflt;Revoflt;d:\windows\system32\drivers\revoflt.sys [8/14/2010 9:33 AM 27064]
S3 S6U12BScanner;MUSTEK 1200 UB Still Image Device Service;d:\windows\system32\drivers\usbscan.sys [10/10/2008 6:35 AM 15104]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);d:\windows\system32\drivers\ssadbus.sys [8/16/2011 10:20 PM 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);d:\windows\system32\drivers\ssadmdfl.sys [8/16/2011 10:20 PM 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;d:\windows\system32\drivers\ssadmdm.sys [8/16/2011 10:20 PM 121576]
S3 StumbleUponUpdateService;StumbleUponUpdateService;d:\program files\StumbleUpon\StumbleUponUpdateService.exe [4/14/2011 6:10 AM 103336]
S3 WinRM;Windows Remote Management (WS-Management);d:\windows\system32\svchost.exe -k WINRM [2/28/2006 8:00 PM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;d:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S4 !SASCORE;SAS Core Service;d:\program files\SUPERAntiSpyware\SASCore.exe [8/12/2011 7:38 AM 116608]
S4 afcdpsrv;Acronis Nonstop Backup service;d:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [12/5/2010 7:59 AM 2326920]
S4 MBAMService;MBAMService;"c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe" –> c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [?]
S4 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [3/10/2008 12:04 AM 65536]
S4 sptd;sptd;d:\windows\system32\drivers\sptd.sys [12/27/2007 6:59 PM 685816]
S4 SpyHunter 4 Service;SpyHunter 4 Service;d:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [5/18/2010 5:06 PM 327064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
DoctorService REG_MULTI_SZ XLDoctor Service
WINRM REG_MULTI_SZ WINRM
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
2009-03-07 20:32 128512 —-a-w- d:\windows\system32\advpack.dll
.
‘计划任务’ 文件夹 里的内容
.
2011-08-24 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2010-11-08 11:13]
.
2011-08-24 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2010-11-08 11:13]
.
2011-08-24 d:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-299502267-1788223648-725345543-1004.job
- d:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 02:47]
.
2011-08-15 d:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-299502267-1788223648-725345543-1004.job
- d:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 02:47]
.
2011-08-07 d:\windows\Tasks\SmartDefrag.job
- d:\program files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe [2010-11-26 10:08]
.
2011-08-24 d:\windows\Tasks\User_Feed_Synchronization-{BC65CFD2-BBB2-4EA9-8129-77D470F20F96}.job
- d:\windows\system32\msfeedssync.exe [2007-08-13 20:31]
.
.
——- 而外的扫描 ——-
.
uStart Page = hxxp://sg.yahoo.com/?fr=fp-yie8/
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.254
DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} - hxxp://cafeimg.daum-img.net/cab9_1/dmcc2.cab?Version=1,0,0,10
FF - ProfilePath - d:\documents and settings\my pc\Application Data\Mozilla\Firefox\Profiles\emub2jur.default\
FF - prefs.js: browser.startup.homepage - hxxp://sg.yahoo.com/?fr=fp-yie8/
FF - prefs.js: network.proxy.type - 0
.
.
——- 文件类型 ——-
.
.scr=AutoCADScriptFile
.txt=
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
MSConfigStartUp-BitTorrent DNA - d:\program files\BitTorrent_DNA\dna.exe
MSConfigStartUp-NortonUpdateAgent - d:\documents and settings\All Users\Application Data\Norton\NUA.exe
MSConfigStartUp-osCheck - d:\program files\Norton Internet Security\osCheck.exe
MSConfigStartUp-SunJavaUpdateSched - d:\program files\Java\jre6\bin\jusched.exe
MSConfigStartUp-t58 - d:\program files\T58KTV\t58.exe
MSConfigStartUp-THGuard - c:\program files\TrojanHunter 5.3\THGuard.exe
AddRemove-MigrateEasy - c:\program files\Acronis\MigrateEasy\MediaBuilder.exe
AddRemove-V-Ray for 3dsmax 2009 for x86 - d:\program files\Chaos Group\V-Ray\3dsmax 2009 for x86\uninstall\wininstaller.exe-uninstall=d:\program files\Chaos Group\V-Ray\3dsmax 2009 for x86\uninstall\install.log
AddRemove-05_Sloan - d:\program files\SAMSUNG\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - d:\program files\SAMSUNG\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-08_EMPChipset - d:\program files\SAMSUNG\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-17_EMP_Chipset2 - d:\program files\SAMSUNG\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - d:\program files\SAMSUNG\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - d:\program files\SAMSUNG\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - d:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - d:\program files\SAMSUNG\USB Drivers\21_Searsburg\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-24 20:43
Windows 5.1.2600 Service Pack 3 NTFS
.
扫描被隐藏的进程 。。。
.
扫描被隐藏的启动组 。。。
.
扫描被隐藏的文件 。。。
.
扫描完成
被隐藏的档案: 0
.
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\NoExplorer]
@DACL=(02 0000)
@=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Uninstall\SUPER *]
"DisplayName"="SUPER ?Version 2007.bld.23 (July 4, 2007)"
"UninstallString"="d:\\PROGRA~1\\ERIGHT~1\\SUPER\\Setup.exe /remove /q0"
"InstallDate"="2008-06-15 17:06"
"InstallLocation"="d:\\Program Files\\eRightSoft\\SUPER"
"InstallSource"="f:\\exe"
"DisplayIcon"="d:\\Program Files\\eRightSoft\\SUPER\\SUPER.exe"
"DisplayVersion"="Version 2007.bld.23 (July 4, 2007)"
"VersionMajor"=dword:00000000
"VersionMinor"=dword:00000000
"Publisher"="eRightSoft"
"HelpLink"="http://www.eRightSoft.com"
"URLInfoAbout"="http://www.eRightSoft.com"
"URLUpdateInfo"="http://www.eRightSoft.com"
"Contact"="[removed]"
.
——————— 运行进程下的动态链接库 ———————
.
- - - - - - - > 'winlogon.exe'(728)
d:\program files\SUPERAntiSpyware\SASWINLO.DLL
d:\windows\system32\WININET.dll
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
d:\program files\Citrix\GoToAssist\480\G2AWinLogon.dll
.
- - - - - - - > 'lsass.exe'(784)
d:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
.
完成时间: 2011-08-24 20:49:01
ComboFix-quarantined-files.txt 2011-08-24 12:48
.
Pre-Run: 187,637,223,424 bytes free
Post-Run: 191,266,271,232 bytes free
.
Current=1 Default=1 Failed=0 LastKnownGood=6 Sets=1,2,3,4,5,6
- - End Of File - - C1CF5B5920E65E331CF553B54749D75E


sinweiy

Tom,

Okay attached below. BTW there's a Windows Security Alert prompting me whether should i need to block or unblock Windows Explorer. i clicked Ask Me later.

ComboFix 11-08-23.03 - my pc 4/2011 Wed 22:43:16.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.936.86.1033.18.2047.1256 [GMT 8:00]
执行位置: d:\documents and settings\my pc\Desktop\ComboFix.exe
Command switches used :: d:\documents and settings\my pc\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((((( 被删除的档案 )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
d:\windows\system32\12511812541.dll
.
.
((((((((((((((((((((((((( 2011-07-24 至 2011-08-24 的新的档案 )))))))))))))))))))))))))))))))
.
.
2011-08-24 06:03 . 2011-08-24 06:03 ——– d—a-w- D:\.Trash-999
2011-08-23 15:11 . 2011-07-29 05:54 19840 —-a-w- d:\windows\system32\EuEpmGdi.dll
2011-08-23 15:11 . 2011-08-02 12:48 2469248 —-a-w- d:\windows\system32\BootMan.exe
2011-08-23 15:11 . 2011-07-29 05:54 86408 —-a-w- d:\windows\system32\setupempdrv03.exe
2011-08-23 15:11 . 2011-07-29 05:54 8456 —-a-w- d:\windows\system32\EuGdiDrv.sys
2011-08-23 15:11 . 2011-07-29 05:54 13192 —-a-w- d:\windows\system32\epmntdrv.sys
2011-08-23 15:10 . 2011-08-23 15:10 ——– d—–w- d:\program files\EASEUS
2011-08-23 11:50 . 2010-11-03 18:08 237568 —-a-w- d:\windows\system32\yv12vfw.dll
2011-08-23 11:50 . 2011-06-24 14:44 243200 —-a-w- d:\windows\system32\xvidvfw.dll
2011-08-23 11:50 . 2011-06-24 14:28 650752 —-a-w- d:\windows\system32\xvidcore.dll
2011-08-23 11:50 . 2011-08-08 08:00 74752 —-a-w- d:\windows\system32\ff_vfw.dll
2011-08-20 08:06 . 2011-08-20 08:06 896 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\databasepath.reg
2011-08-20 08:06 . 2011-08-20 08:06 3008 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\bgregfix.reg
2011-08-20 08:06 . 2011-08-20 08:06 2600 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\exefix.reg
2011-08-20 08:06 . 2011-08-20 08:06 951291 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\remregfix.reg
2011-08-20 08:06 . 2011-08-20 08:06 890 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\Remove-itRestorePoint.vbs
2011-08-20 08:06 . 2011-08-20 08:06 5228 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\nfig.reg
2011-08-20 08:06 . 2011-08-20 08:06 4994 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\s.reg
2011-08-20 08:06 . 2011-08-20 08:06 4512 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\hpregfix.reg
2011-08-20 08:06 . 2011-08-20 08:06 18308 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\IEDef.reg
2011-08-20 08:06 . 2011-08-20 08:06 1754 —-a-w- d:\documents and settings\my pc\Local Settings\Application Data\regf.reg
2011-08-20 07:06 . 2008-05-02 13:25 465920 -c—-w- d:\windows\system32\dllcache\imapi2fs.dll
2011-08-20 07:06 . 2008-05-02 13:25 465920 ——w- d:\windows\system32\imapi2fs.dll
2011-08-20 07:06 . 2008-05-02 13:25 317952 -c—-w- d:\windows\system32\dllcache\imapi2.dll
2011-08-20 07:06 . 2008-05-02 13:25 317952 ——w- d:\windows\system32\imapi2.dll
2011-08-20 06:55 . 2011-08-20 07:11 ——– d—–w- d:\documents and settings\LocalService\Application Data\360safe
2011-08-20 04:09 . 2011-08-20 04:09 ——– d—–w- d:\program files\Chaos Group
2011-08-20 03:34 . 2009-07-21 12:24 14080 —-a-w- d:\windows\system32\drivers\36040.tmp
2011-08-20 03:34 . 2009-06-03 14:26 27400 —-a-w- d:\windows\system32\drivers\3603F.tmp
2011-08-20 03:33 . 2011-08-20 08:54 ——– d—–w- d:\documents and settings\All Users\Application Data\360safe
2011-08-20 03:27 . 2011-08-20 03:27 ——– d—–w- d:\documents and settings\All Users\Application Data\360SD
2011-08-20 03:27 . 2011-08-20 08:35 ——– d—–w- d:\program files\360
2011-08-19 12:51 . 2011-08-19 13:36 ——– d—–w- d:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2011-08-19 12:51 . 2011-08-19 12:59 ——– d—–w- d:\program files\Spybot - Search & Destroy
2011-08-16 15:50 . 2011-08-18 11:49 ——– d—–w- d:\program files\SpywareBlaster
2011-08-16 15:47 . 2011-08-16 15:47 ——– d—–w- d:\program files\ESET
2011-08-16 15:29 . 2009-06-30 02:37 28552 —-a-w- d:\windows\system32\drivers\pavboot.sys
2011-08-16 15:29 . 2011-08-16 15:29 ——– d—–w- d:\program files\Panda Security
2011-08-16 14:20 . 2010-05-25 07:59 96488 —-a-w- d:\windows\system32\drivers\ssadbus.sys
2011-08-16 14:20 . 2010-05-25 07:59 30312 —-a-w- d:\windows\system32\drivers\ssadadb.sys
2011-08-16 14:20 . 2010-05-25 07:59 1416680 —-a-w- d:\windows\system32\WdfCoInstaller01005.dll
2011-08-16 14:20 . 2010-05-25 07:59 12776 —-a-w- d:\windows\system32\drivers\ssadmdfl.sys
2011-08-16 14:20 . 2010-05-25 07:59 121576 —-a-w- d:\windows\system32\drivers\ssadmdm.sys
2011-08-16 14:20 . 2010-05-25 07:59 10344 —-a-w- d:\windows\system32\drivers\ssadcmnt.sys
2011-08-16 14:20 . 2010-05-25 07:59 10216 —-a-w- d:\windows\system32\drivers\ssadwhnt.sys
2011-08-13 05:16 . 2011-08-13 05:16 ——– d—–w- d:\program files\FileHippo.com
2011-08-13 04:46 . 2011-08-13 04:46 ——– d—–w- d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com
2011-08-13 04:46 . 2011-08-23 13:24 ——– d—–w- d:\program files\SUPERAntiSpyware
2011-08-13 04:46 . 2011-08-13 04:46 ——– d—–w- d:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2011-08-13 03:40 . 2011-08-13 03:40 110080 —-a-r- d:\documents and settings\my pc\Application Data\Microsoft\Installer\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}\IconF7A21AF7.exe
2011-08-13 03:40 . 2011-08-13 03:40 110080 —-a-r- d:\documents and settings\my pc\Application Data\Microsoft\Installer\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}\IconD7F16134.exe
2011-08-13 03:40 . 2011-08-18 13:31 ——– d—–w- D:\sh4ldr
2011-08-13 03:40 . 2011-08-13 03:40 ——– d—–w- d:\program files\Enigma Software Group
2011-08-13 03:39 . 2011-08-13 03:40 ——– d—–w- d:\windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2011-08-13 03:39 . 2011-08-13 03:39 ——– d—–w- d:\program files\Common Files\Wise Installation Wizard
2011-08-12 14:16 . 2008-04-13 21:41 81920 ——w- d:\windows\system32\ieencode.dll
2011-08-12 14:15 . 2006-12-28 16:31 19569 —-a-w- d:\windows\000001_.tmp
2011-08-11 15:03 . 2001-08-17 14:36 53760 -c–a-w- d:\windows\system32\dllcache\wiamsmud.dll
2011-08-11 15:02 . 2001-08-17 05:28 687999 -c–a-w- d:\windows\system32\dllcache\usrwdxjs.sys
2011-08-11 15:01 . 2001-08-17 14:36 216064 -c–a-w- d:\windows\system32\dllcache\um34scan.dll
2011-08-11 15:00 . 2001-08-17 04:14 123995 -c–a-w- d:\windows\system32\dllcache\tjisdn.sys
2011-08-11 14:59 . 2001-08-17 14:36 10240 -c–a-w- d:\windows\system32\dllcache\swpidflt.dll
2011-08-11 14:58 . 2001-08-17 05:53 9600 -c–a-w- d:\windows\system32\dllcache\sonymc.sys
2011-08-11 14:57 . 2001-08-17 04:50 50432 -c–a-w- d:\windows\system32\dllcache\sisv.sys
2011-08-11 14:56 . 2001-08-17 05:51 16640 -c–a-w- d:\windows\system32\dllcache\scmstcs.sys
2011-08-11 14:55 . 2001-08-17 04:12 19017 -c–a-w- d:\windows\system32\dllcache\rtl8029.sys
2011-08-11 14:54 . 2001-08-17 05:28 112574 -c–a-w- d:\windows\system32\dllcache\ptserlp.sys
2011-08-11 14:53 . 2001-08-17 04:11 35328 -c–a-w- d:\windows\system32\dllcache\pcntpci5.sys
2011-08-11 14:52 . 2001-08-17 04:50 198144 -c–a-w- d:\windows\system32\dllcache\nv3.sys
2011-08-11 14:51 . 2001-08-17 04:11 128000 -c–a-w- d:\windows\system32\dllcache\n100325.sys
2011-08-11 14:50 . 2001-08-17 05:57 16128 -c–a-w- d:\windows\system32\dllcache\modemcsa.sys
2011-08-11 14:49 . 2001-08-17 04:12 20573 -c–a-w- d:\windows\system32\dllcache\lne100.sys
2011-08-11 14:48 . 2001-08-17 14:36 372824 -c–a-w- d:\windows\system32\dllcache\iconf32.dll
2011-08-11 14:47 . 2001-08-17 05:28 44863 -c–a-w- d:\windows\system32\dllcache\hsf_soar.sys
2011-08-11 14:46 . 2001-08-17 06:02 2688 -c–a-w- d:\windows\system32\dllcache\hidswvd.sys
2011-08-11 14:45 . 2001-08-17 04:11 12362 -c–a-w- d:\windows\system32\dllcache\f3ab18xi.sys
2011-08-11 14:44 . 2001-08-17 04:11 69194 -c–a-w- d:\windows\system32\dllcache\el656cd5.sys
2011-08-11 14:43 . 2001-08-17 14:36 24064 -c–a-w- d:\windows\system32\dllcache\devldr32.exe
2011-08-11 14:42 . 2001-08-17 04:13 27164 -c–a-w- d:\windows\system32\dllcache\ce3n5.sys
2011-08-10 13:34 . 2008-04-13 16:06 14208 -c–a-w- d:\windows\system32\dllcache\battc.sys
2011-08-09 10:36 . 2011-08-09 10:36 ——– d—–w- d:\documents and settings\my pc\Local Settings\Application Data\Octoshape
2011-08-09 10:36 . 2011-08-09 10:36 ——– d—–w- d:\documents and settings\my pc\Application Data\Octoshape
2011-08-09 03:12 . 2011-08-09 03:13 ——– d—–w- d:\documents and settings\LocalService\Local Settings\Application Data\Adobe
2011-08-09 03:12 . 2011-08-09 03:12 ——– d—–w- d:\documents and settings\my pc\Application Data\Windows Search
2011-08-09 03:11 . 2011-08-09 03:11 ——– d—–w- d:\windows\system32\winrm
2011-08-09 03:11 . 2011-08-09 03:11 ——– dc-h–w- d:\windows\$968930Uinstall_KB968930$
2011-08-09 03:11 . 2011-08-09 03:11 ——– d—–w- d:\documents and settings\my pc\Application Data\Windows Desktop Search
2011-08-09 03:10 . 2011-08-11 15:10 ——– d—–w- d:\program files\Windows Desktop Search
2011-08-09 03:10 . 2011-08-09 03:10 ——– d—–w- d:\windows\system32\GroupPolicy
2011-08-09 00:52 . 2011-08-09 00:52 ——– d—–w- d:\program files\Microsoft.NET
2011-08-07 02:15 . 2011-08-07 02:15 ——– d—–w- d:\documents and settings\All Users\Application Data\NVIDIA Corporation
2011-08-07 02:14 . 2011-08-09 05:09 ——– d—–w- d:\documents and settings\UpdatusUser
2011-08-07 02:14 . 2011-08-07 02:14 ——– d—–w- d:\documents and settings\All Users\Application Data\NVIDIA
2011-08-07 02:13 . 2011-05-25 06:09 543336 —-a-w- d:\windows\system32\easyupdatusapiu.dll
2011-08-07 02:13 . 2011-08-18 12:55 273344 —-a-w- d:\windows\system32\nvdrsdb1.bin
2011-08-07 02:13 . 2011-08-18 12:55 1 —-a-w- d:\windows\system32\nvdrssel.bin
2011-08-07 02:13 . 2011-08-18 12:55 273344 —-a-w- d:\windows\system32\nvdrsdb0.bin
2011-08-07 02:12 . 2011-05-25 06:09 61440 —-a-w- d:\windows\system32\OpenCL.dll
2011-08-07 02:12 . 2011-05-25 06:09 865896 —-a-w- d:\windows\system32\nvgenco322090.dll
2011-08-07 02:12 . 2011-05-25 06:09 899688 —-a-w- d:\windows\system32\nvdispco3220150.dll
2011-08-07 02:12 . 2011-05-25 06:09 2808936 —-a-w- d:\windows\system32\nvcuvid.dll
2011-08-07 02:12 . 2011-05-25 06:09 2082408 —-a-w- d:\windows\system32\nvcuvenc.dll
2011-08-07 02:12 . 2011-05-25 06:09 5332992 —-a-w- d:\windows\system32\nvcuda.dll
2011-08-07 02:12 . 2011-05-25 06:09 13004800 —-a-w- d:\windows\system32\nvcompiler.dll
2011-08-07 02:12 . 2011-08-18 12:52 ——– d—–w- d:\program files\NVIDIA Corporation
2011-07-29 14:09 . 2011-07-29 14:09 ——– d—–w- D:\656008adc7c9fc63a82d60b0e996
2011-07-29 13:47 . 2010-02-27 01:08 101376 —-a-w- d:\windows\system32\rld.dll
2011-07-29 13:47 . 2010-02-27 01:08 101376 —-a-w- d:\windows\system\rld.dll
2011-07-29 12:56 . 2011-07-29 12:56 ——– d—–w- d:\program files\Electronic Arts
.
.
.
(((((((((((((((((((((((((((((((((((((((( 在三个月内被修改的档案 ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-20 08:06 . 2006-02-28 12:00 4224 —-a-w- d:\windows\system32\drivers\beep.sys
2011-08-20 07:53 . 2011-06-25 00:10 404640 —-a-w- d:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 13:29 . 2008-10-09 22:35 456320 —-a-w- d:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-10-09 22:35 10496 —-a-w- d:\windows\system32\drivers\ndistapi.sys
2011-07-06 11:52 . 2010-10-16 00:47 41272 —-a-w- d:\windows\system32\drivers\mbamswissarmy.sys
2011-07-06 11:52 . 2010-10-16 00:47 22712 —-a-w- d:\windows\system32\drivers\mbam.sys
2011-06-28 13:09 . 2010-10-23 04:52 138192 —-a-w- d:\windows\system32\drivers\avipbb.sys
2011-06-28 13:09 . 2010-10-23 04:52 66616 —-a-w- d:\windows\system32\drivers\avgntflt.sys
2011-06-24 14:10 . 2008-10-09 22:35 139656 —-a-w- d:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:36 . 2006-02-28 12:00 916480 —-a-w- d:\windows\system32\wininet.dll
2011-06-23 18:36 . 2006-02-28 12:00 43520 —-a-w- d:\windows\system32\licmgr10.dll
2011-06-23 18:36 . 2006-02-28 12:00 1469440 ——w- d:\windows\system32\inetcpl.cpl
2011-06-23 12:05 . 2006-02-28 12:00 385024 —-a-w- d:\windows\system32\html.iec
2011-06-20 17:44 . 2006-02-28 12:00 293376 —-a-w- d:\windows\system32\winsrv.dll
2011-06-07 03:13 . 2011-06-16 13:43 4659712 —-a-w- d:\windows\system32\Redemption.dll
2011-06-07 03:13 . 2011-06-07 03:13 974848 —-a-w- d:\windows\system32\cis-2.4.dll
2011-06-07 03:13 . 2011-06-07 03:13 90112 —-a-w- d:\windows\MAMCityDownload.ocx
2011-06-07 03:13 . 2011-06-07 03:13 81920 —-a-w- d:\windows\system32\issacapi_bs-2.3.dll
2011-06-07 03:13 . 2011-06-07 03:13 65536 —-a-w- d:\windows\system32\issacapi_pe-2.3.dll
2011-06-07 03:13 . 2011-06-07 03:13 57344 —-a-w- d:\windows\system32\MTXSYNCICON.dll
2011-06-07 03:13 . 2011-06-07 03:13 57344 —-a-w- d:\windows\system32\issacapi_se-2.3.dll
2011-06-07 03:13 . 2011-06-07 03:13 569344 —-a-w- d:\windows\system32\muzdecode.ax
2011-06-07 03:13 . 2011-06-07 03:13 491520 —-a-w- d:\windows\system32\muzapp.dll
2011-06-07 03:13 . 2011-06-07 03:13 49152 —-a-w- d:\windows\system32\MaJGUILib.dll
2011-06-07 03:13 . 2011-06-07 03:13 45056 —-a-w- d:\windows\system32\MaXMLProto.dll
2011-06-07 03:13 . 2011-06-07 03:13 40960 —-a-w- d:\windows\system32\MTTELECHIP.dll
2011-06-07 03:13 . 2011-06-07 03:13 352256 —-a-w- d:\windows\system32\MSLUR71.dll
2011-06-07 03:13 . 2011-06-07 03:13 325552 —-a-w- d:\windows\MASetupCaller.dll
2011-06-07 03:13 . 2011-06-07 03:13 30568 —-a-w- d:\windows\MusiccityDownload.exe
2011-06-07 03:13 . 2011-06-07 03:13 24576 —-a-w- d:\windows\system32\MASetupCleaner.exe
2011-06-07 03:13 . 2011-06-07 03:13 200704 —-a-w- d:\windows\system32\muzwmts.dll
2011-06-07 03:13 . 2011-06-07 03:13 155648 —-a-w- d:\windows\system32\MSFLib.dll
2011-06-07 03:13 . 2011-06-07 03:13 143360 —-a-w- d:\windows\system32\3DAudio.ax
2011-06-07 03:13 . 2011-06-07 03:13 14336 —-a-w- d:\windows\system32\avrt.dll
2011-06-07 03:13 . 2011-06-07 03:13 135168 —-a-w- d:\windows\system32\muzaf1.dll
2011-06-07 03:13 . 2011-06-07 03:13 131072 —-a-w- d:\windows\system32\muzmpgsp.ax
2011-06-07 03:13 . 2011-06-07 03:13 122880 —-a-w- d:\windows\system32\muzeffect.ax
2011-06-07 03:13 . 2011-06-07 03:13 118784 —-a-w- d:\windows\system32\MaDRM.dll
2011-06-07 03:13 . 2011-06-07 03:13 110592 —-a-w- d:\windows\system32\muzmp4sp.ax
2011-06-07 03:13 . 2011-06-16 13:43 821824 —-a-w- d:\windows\system32\dgderapi.dll
2011-06-07 03:13 . 2011-06-16 13:43 319456 —-a-w- d:\windows\system32\DIFxAPI.dll
2011-06-07 03:13 . 2011-06-16 13:43 20032 —-a-w- d:\windows\system32\drivers\dgderdrv.sys
2011-06-07 03:13 . 2011-06-07 03:13 57344 —-a-w- d:\windows\system32\MK_Lyric.dll
2011-06-07 03:13 . 2011-06-07 03:13 45056 —-a-w- d:\windows\system32\MACXMLProto.dll
2011-06-07 03:13 . 2011-06-07 03:13 40960 —-a-w- d:\windows\system32\MAMACExtract.dll
2011-06-07 03:13 . 2011-06-07 03:13 258048 —-a-w- d:\windows\system32\muzoggsp.ax
2011-06-07 03:13 . 2011-06-07 03:13 245760 —-a-w- d:\windows\system32\MSCLib.dll
2011-06-02 14:02 . 2008-10-09 22:35 1858944 —-a-w- d:\windows\system32\win32k.sys
2011-04-24 04:10 . 2011-04-24 04:10 197632 —-a-w- d:\program files\Common Files\OnlineFilesManager.dll
2011-08-12 05:57 . 2011-08-19 23:55 134104 —-a-w- d:\program files\mozilla firefox\components\browsercomps.dll
2006-05-03 09:06 163328 –sha-r- d:\windows\system32\flvDX.dll
2007-02-21 10:47 31232 –sha-r- d:\windows\system32\msfDX.dll
.
.
((((((((((((((((((((((((((((((((((((( 重要登入点 ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*注意* 空白与合法缺省登录将不会被显示
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 —-a-w- d:\documents and settings\my pc\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Online Files]
@="{B82655E9-B81D-4A97-8154-0D84A4C048E4}"
[HKEY_CLASSES_ROOT\CLSID\{B82655E9-B81D-4A97-8154-0D84A4C048E4}]
2011-04-24 04:10 197632 —-a-w- d:\program files\Common Files\OnlineFilesManager.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="d:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="d:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-03 281768]
"nwiz"="d:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-05-04 1632360]
"NvCplDaemon"="d:\windows\system32\NvCpl.dll" [2011-05-25 13895272]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="d:\windows\system32\ctfmon.exe" [2008-04-13 15360]
.
d:\documents and settings\my pc\Start Menu\Programs\Startup\
BitTorrent (2).lnk - c:\program files\BitTorrent\bittorrent.exe [N/A]
Dropbox.lnk - d:\documents and settings\my pc\Application Data\Dropbox\bin\Dropbox.exe [2011-5-26 24176560]
.
d:\documents and settings\All Users\Start Menu\Programs\Startup\
Wireless Utility.lnk - d:\program files\Wireless\Common\Utility.exe [2010-12-29 602112]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "d:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "d:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 —-a-w- d:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-10-10 13:51 10792 —-a-w- d:\program files\Citrix\GoToAssist\480\g2awinlogon.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=d:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=d:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^JCMATTHEW WLAN.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\JCMATTHEW WLAN.lnk
backup=d:\windows\pss\JCMATTHEW WLAN.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Nokia Nseries PC Suite.lnk]
backup=d:\windows\pss\Nokia Nseries PC Suite.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk]
path=d:\documents and settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk
backup=d:\windows\pss\Windows Search.lnkCommon Startup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^Adobe Gamma.lnk]
backup=d:\windows\pss\Adobe Gamma.lnkStartup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^Dropbox.lnk]
path=d:\documents and settings\my pc\Start Menu\Programs\Startup\Dropbox.lnk
backup=d:\windows\pss\Dropbox.lnkStartup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^MagicDisc.lnk]
backup=d:\windows\pss\MagicDisc.lnkStartup
.
[HKLM\~\startupfolder\D:^Documents and Settings^my pc^Start Menu^Programs^Startup^启动迅雷5.lnk]
path=d:\documents and settings\my pc\Start Menu\Programs\Startup\启动迅雷5.lnk
backup=d:\windows\pss\启动迅雷5.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
d:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2009-09-12 08:31 357384 —-a-w- d:\program files\Common Files\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-14 17:04 39792 —-a-w- d:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2010-05-10 13:53 611712 —-a-w- d:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeUpdater]
2008-11-20 13:30 2356088 —-a-w- d:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 3]
2010-08-10 07:10 2349776 —-a-w- d:\program files\IObit\Advanced SystemCare 3\AWC.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2005-05-03 10:43 69632 ——r- d:\windows\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-01 02:21 153136 —-a-w- d:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrMfcWnd]
2008-02-19 00:22 1089536 —-a-r- d:\program files\Brother\Brmfcmon\BrMfcWnd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter3]
2007-12-21 09:57 86016 —-a-w- d:\program files\Brother\ControlCenter3\BrCtrCen.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-13 21:42 15360 —-a-w- d:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-03-21 18:56 1230704 —-a-w- d:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart]
2011-01-26 12:03 7508440 —-a-w- d:\program files\easyMule\emule.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileHippo.com]
2010-08-09 12:47 248832 —-a-w- d:\program files\FileHippo.com\UpdateChecker.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
2006-02-28 12:00 208952 —-a-w- d:\windows\ime\imjp8_1\imjpmig.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2007-10-11 11:01 46368 —-a-w- d:\program files\ScanSoft\PaperPort\IndexSearch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2004-07-27 08:50 221184 —-a-w- d:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2005-02-16 08:15 81920 —-a-w- d:\program files\Common Files\InstallShield\UpdateService\issch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-03-01 13:45 421160 —-a-w- d:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
2011-06-09 10:52 940944 —-a-w- d:\program files\Samsung\Kies\KiesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
2011-06-09 10:52 20880 —-a-w- d:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2011-06-09 10:52 3373968 —-a-w- d:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2011-07-06 11:52 449584 —-a-w- d:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-13 21:42 1695232 —-a-w- d:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2010-04-16 14:12 3872080 —-a-w- d:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
2006-02-28 12:00 59392 —-a-w- d:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 07:57 153136 —-a-w- d:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2011-05-25 06:09 13895272 —-a-w- d:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2011-05-25 06:09 111208 —-a-w- d:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2011-05-04 16:02 1632360 —-a-w- d:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Octoshape Streaming Services]
2009-01-08 13:44 70936 —-a-w- d:\documents and settings\my pc\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2007-10-11 11:03 29984 —-a-w- d:\program files\ScanSoft\PaperPort\pptd40nt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
2006-02-28 12:00 455168 —-a-w- d:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2006-02-28 12:00 455168 —-a-w- d:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PPS Accelerator]
2010-02-24 03:25 214408 —-a-w- d:\progra~1\PPStream\PPSAP.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 09:38 421888 —-a-w- d:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
2006-08-17 01:00 1116920 —-a-w- c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2007-06-13 06:49 16377344 ——r- d:\windows\RTHDCPL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sclauncher]
2007-10-11 11:12 94208 —-a-w- d:\program files\SimpleCenter\bin\win\sclauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyHunter Security Suite]
2010-06-28 10:05 3021720 —-a-w- d:\program files\Enigma Software Group\SpyHunter\SpyHunter4.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
2006-10-25 01:03 210472 —-a-w- d:\program files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2011-08-12 21:37 4603264 —-a-w- d:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Thunder]
2011-05-27 10:14 1002672 —-a-w- d:\program files\Thunder Network\Thunder\Program\Thunder.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-13 06:42 273544 —-a-w- d:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2009-09-12 08:30 5048488 —-a-w- d:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"mi-raysat_3dsmax9_32"=2 (0x2)
"mi-raysat_3dsMax2008_32"=2 (0x2)
"Bonjour Service"=2 (0x2)
"LiveUpdate Notice Ex"=2 (0x2)
"aawservice"=2 (0x2)
"Automatic LiveUpdate Scheduler"=2 (0x2)
"Autodesk Licensing Service"=2 (0x2)
"Adobe LM Service"=3 (0x3)
"stllssvr"=3 (0x3)
"ServiceLayer"=3 (0x3)
"SeaPort"=2 (0x2)
"ose"=3 (0x3)
"NMIndexingService"=3 (0x3)
"mi-raysat_3dsMax2009_32"=2 (0x2)
"LiveUpdate Notice Service"=2 (0x2)
"LiveUpdate"=3 (0x3)
"idsvc"=3 (0x3)
"IDriverT"=3 (0x3)
"GoToAssist"=3 (0x3)
"fsssvc"=3 (0x3)
"FLEXnet Licensing Service"=3 (0x3)
"afcdpsrv"=2 (0x2)
"SpyHunter 4 Service"=2 (0x2)
"YahooAUService"=2 (0x2)
"iPod Service"=3 (0x3)
"AcrSch2Svc"=2 (0x2)
"!SASCORE"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"d:\\WINDOWS\\system32\\sessmgr.exe"=
"d:\\Program Files\\ArchVision\\ArchVision Content Manager\\rpcACMapp.exe"=
"d:\\Program Files\\ArchVision\\ArchVision Content Manager\\rpcACMftp.exe"=
"d:\\Program Files\\TVAnts\\Tvants.exe"=
"d:\\Program Files\\SimpleCenter\\Home Media Server.exe"=
"%windir%\\system32\\sessmgr.exe"=
"$INSTDIR\\FlvDetector.exe"= d:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"d:\\Program Files\\JCMATTHEW WLAN\\RtWLan.exe"=
"d:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"d:\\Program Files\\Codemasters\\OF Dragon Rising\\OFDR.exe"=
"d:\\Program Files\\QvodPlayer\\QvodTerminal.exe"=
"d:\\Documents and Settings\\my pc\\Application Data\\Dropbox\\bin\\Dropbox.exe"=
"d:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\StarCraft II\\StarCraft II.exe"=
"c:\\Program Files\\StarCraft II\\Versions\\Base15405\\SC2.exe"=
"d:\\Program Files\\PPStream\\PPStream.exe"=
"d:\\Program Files\\PPStream\\PPSAP.exe"=
"d:\\Program Files\\PPSGame\\PPSGame.exe"=
"d:\\Program Files\\王者在线电影\\QvodTerminal.exe"=
"d:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Program Files\\iTunes\\iTunes.exe"=
"d:\\Program Files\\easyMule\\emule.exe"=
"d:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"d:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\XLDoctor\\7.1.7.2244_2\\Program\\XLDoctorUI.exe"=
"d:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\XLDoctor\\7.1.8.2302_3\\Program\\XLDoctorUI.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\Program\\Thunder.exe"=
"d:\\Program Files\\Thunder Network\\Thunder\\Program\\ThunderLiveUD.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\TP\\Ver1\\1.1.2.67_1111\\ThunderPlatform.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\TP\\Ver1\\1.1.2.67_1111\\ThunderLiveUD.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\TP\\Ver1\\1.1.2.67_1111\\XLBugReport.exe"=
"d:\\Program Files\\Thunder Network\\Xmp4\\Program\\Xmp.exe"=
"d:\\Program Files\\Thunder Network\\Xmp4\\Program\\XLBugReport.exe"=
"d:\\Program Files\\Thunder Network\\Xmp4\\Program\\ThunderLiveUD.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\KanKan\\ThunderServiceLite.exe"=
"d:\\Program Files\\Common Files\\Thunder Network\\KanKan\\xmp.exe"=
"d:\\Program Files\\Electronic Arts\\Battlefield Bad Company 2\\BFBC2Updater.exe"=
"d:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"d:\\Documents and Settings\\my pc\\Application Data\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1542:TCP"= 1542:TCP:Realtek WPS TCP Prot
"1542:UDP"= 1542:UDP:Realtek WPS UDP Prot
"53:UDP"= 53:UDP:Realtek AP UDP Prot
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"33674:UDP"= 33674:UDP:ThunderLAN(UDP)
"33673:TCP"= 33673:TCP:ThunderLAN(TCP)
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
.
R0 pavboot;pavboot;d:\windows\system32\drivers\pavboot.sys [8/16/2011 11:29 PM 28552]
R0 tdrpman251;Acronis Try&Decide; and Restore Points filter (build 251);d:\windows\system32\drivers\tdrpm251.sys [12/5/2010 7:58 AM 902432]
R1 SASDIFSV;SASDIFSV;d:\program files\SUPERAntiSpyware\sasdifsv.sys [7/23/2011 12:27 AM 12880]
R1 SASKUTIL;SASKUTIL;d:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/13/2011 5:55 AM 67664]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;d:\program files\Avira\AntiVir Desktop\sched.exe [10/23/2010 12:52 PM 136360]
R2 BBUpdate;BBUpdate;d:\program files\Microsoft\BingBar\SeaPort.EXE [6/15/2011 5:33 PM 249648]
R2 nvUpdatusService;NVIDIA Update Service Daemon;d:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [8/7/2011 10:14 AM 2214504]
R2 XLDoctor Service;XLDoctor Service;d:\windows\system32\svchost -k DoctorService –> d:\windows\system32\svchost -k DoctorService [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;d:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [11/8/2010 7:13 PM 136176]
S3 afcdp;afcdp;d:\windows\system32\drivers\afcdp.sys [12/5/2010 7:59 AM 159168]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;d:\windows\system32\drivers\ssadadb.sys [8/16/2011 10:20 PM 30312]
S3 BBSvc;Bing Bar Update Service;d:\program files\Microsoft\BingBar\BBSvc.EXE [7/7/2011 7:31 PM 195336]
S3 dgderdrv;dgderdrv;d:\windows\system32\drivers\dgderdrv.sys [6/16/2011 9:43 PM 20032]
S3 epmntdrv;epmntdrv;d:\windows\system32\epmntdrv.sys [8/23/2011 11:11 PM 13192]
S3 esgiguard;esgiguard;d:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [1/27/2010 6:10 PM 5248]
S3 EuGdiDrv;EuGdiDrv;d:\windows\system32\EuGdiDrv.sys [8/23/2011 11:11 PM 8456]
S3 FsUsbExDisk;FsUsbExDisk;d:\windows\system32\FsUsbExDisk.Sys [7/12/2010 9:57 PM 36640]
S3 gupdatem;Google Update Service (gupdatem);d:\program files\Google\Update\GoogleUpdate.exe [11/8/2010 7:13 PM 136176]
S3 MBAMProtector;MBAMProtector;d:\windows\system32\drivers\mbam.sys [10/16/2010 8:47 AM 22712]
S3 Revoflt;Revoflt;d:\windows\system32\drivers\revoflt.sys [8/14/2010 9:33 AM 27064]
S3 S6U12BScanner;MUSTEK 1200 UB Still Image Device Service;d:\windows\system32\drivers\usbscan.sys [10/10/2008 6:35 AM 15104]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);d:\windows\system32\drivers\ssadbus.sys [8/16/2011 10:20 PM 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);d:\windows\system32\drivers\ssadmdfl.sys [8/16/2011 10:20 PM 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;d:\windows\system32\drivers\ssadmdm.sys [8/16/2011 10:20 PM 121576]
S3 StumbleUponUpdateService;StumbleUponUpdateService;d:\program files\StumbleUpon\StumbleUponUpdateService.exe [4/14/2011 6:10 AM 103336]
S3 WinRM;Windows Remote Management (WS-Management);d:\windows\system32\svchost.exe -k WINRM [2/28/2006 8:00 PM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;d:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S4 !SASCORE;SAS Core Service;d:\program files\SUPERAntiSpyware\SASCore.exe [8/12/2011 7:38 AM 116608]
S4 afcdpsrv;Acronis Nonstop Backup service;d:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [12/5/2010 7:59 AM 2326920]
S4 MBAMService;MBAMService;"c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe" –> c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [?]
S4 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\program files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [3/10/2008 12:04 AM 65536]
S4 sptd;sptd;d:\windows\system32\drivers\sptd.sys [12/27/2007 6:59 PM 685816]
S4 SpyHunter 4 Service;SpyHunter 4 Service;d:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [5/18/2010 5:06 PM 327064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
DoctorService REG_MULTI_SZ XLDoctor Service
WINRM REG_MULTI_SZ WINRM
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
2009-03-07 20:32 128512 —-a-w- d:\windows\system32\advpack.dll
.
‘计划任务’ 文件夹 里的内容
.
2011-08-24 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2010-11-08 11:13]
.
2011-08-24 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2010-11-08 11:13]
.
2011-08-24 d:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-299502267-1788223648-725345543-1004.job
- d:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 02:47]
.
2011-08-15 d:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-299502267-1788223648-725345543-1004.job
- d:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 02:47]
.
2011-08-24 d:\windows\Tasks\User_Feed_Synchronization-{BC65CFD2-BBB2-4EA9-8129-77D470F20F96}.job
- d:\windows\system32\msfeedssync.exe [2007-08-13 20:31]
.
.
——- 而外的扫描 ——-
.
uStart Page = hxxp://sg.yahoo.com/?fr=fp-yie8/
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.254
DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} - hxxp://cafeimg.daum-img.net/cab9_1/dmcc2.cab?Version=1,0,0,10
FF - ProfilePath - d:\documents and settings\my pc\Application Data\Mozilla\Firefox\Profiles\emub2jur.default\
FF - prefs.js: browser.startup.homepage - hxxp://sg.yahoo.com/?fr=fp-yie8/
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-24 22:54
Windows 5.1.2600 Service Pack 3 NTFS
.
扫描被隐藏的进程 。。。
.
扫描被隐藏的启动组 。。。
.
扫描被隐藏的文件 。。。
.
扫描完成
被隐藏的档案: 0
.
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Uninstall\SUPER *]
"DisplayName"="SUPER ?Version 2007.bld.23 (July 4, 2007)"
"UninstallString"="d:\\PROGRA~1\\ERIGHT~1\\SUPER\\Setup.exe /remove /q0"
"InstallDate"="2008-06-15 17:06"
"InstallLocation"="d:\\Program Files\\eRightSoft\\SUPER"
"InstallSource"="f:\\exe"
"DisplayIcon"="d:\\Program Files\\eRightSoft\\SUPER\\SUPER.exe"
"DisplayVersion"="Version 2007.bld.23 (July 4, 2007)"
"VersionMajor"=dword:00000000
"VersionMinor"=dword:00000000
"Publisher"="eRightSoft"
"HelpLink"="http://www.eRightSoft.com"
"URLInfoAbout"="http://www.eRightSoft.com"
"URLUpdateInfo"="http://www.eRightSoft.com"
"Contact"="[removed]"
.
——————— 运行进程下的动态链接库 ———————
.
- - - - - - - > 'winlogon.exe'(728)
d:\program files\SUPERAntiSpyware\SASWINLO.DLL
d:\windows\system32\WININET.dll
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
d:\documents and settings\my pc\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
d:\program files\Citrix\GoToAssist\480\G2AWinLogon.dll
.
- - - - - - - > 'lsass.exe'(784)
d:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
.
完成时间: 2011-08-24 22:58:17
ComboFix-quarantined-files.txt 2011-08-24 14:58
ComboFix2.txt 2011-08-24 12:49
.
Pre-Run: 191,897,841,664 bytes free
Post-Run: 191,913,332,736 bytes free
.
Current=1 Default=1 Failed=0 LastKnownGood=6 Sets=1,2,3,4,5,6
- - End Of File - - 5130AD32AA4F6BD0E41E14F4CBB33D87