What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Slow Lap Top [Closed]

67 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #31
All processes killed ========== SERVICES/DRIVERS ========== ========== OTL ========== Prefs.js: "http://search.sweetim.com/search.asp?src=2&q=" removed from keyword.URL Prefs.js: "iLivid Web Search" removed from sweetim.toolbar.previous.browser.search.defaultenginename Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaulturl Prefs.js: "Google" removed from sweetim.toolbar.previous.browser.search.selectedEngine Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Search the Web\ deleted successfully. ========== FILES ========== File\Folder C:\Program Files\SweetIM not found. ========== COMMANDS ========== [EMPTYTEMP] User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: All Users User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: Kevin ->Temp folder emptied: 17505122 bytes ->Temporary Internet Files folder emptied: 3012939 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 58958853 bytes ->Flash cache emptied: 1533 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 53391 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 37591393 bytes Total Files Cleaned = 112.00 mb OTL by OldTimer - Version 3.2.31.0 log created on 01152012_173415 Files\Folders moved on Reboot… Registry entries deleted on Reboot…
Post #34
OTL logfile created on: 17/01/2012 9:13:07 AM - Run 5
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Kevin\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

502.42 Mb Total Physical Memory | 168.41 Mb Available Physical Memory | 33.52% Memory free
1.20 Gb Paging File | 0.63 Gb Available in Paging File | 53.03% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 16.88 Gb Total Space | 0.68 Gb Free Space | 4.02% Space Free | Partition Type: FAT32
Drive D: | 17.24 Gb Total Space | 11.32 Gb Free Space | 65.69% Space Free | Partition Type: FAT32

Computer Name: LAPTOP | User Name: Kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Kevin\My Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\ouc.exe ()
PRC - C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Secunia\PSI\psia.exe (Secunia)
PRC - C:\Program Files\Secunia\PSI\sua.exe (Secunia)
PRC - C:\Program Files\Secunia\PSI\psi_tray.exe (Secunia)
PRC - C:\Documents and Settings\All Users\Application Data\DatacardService\HWDeviceService.exe ()
PRC - C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\LogMeIn\x86\LMIGuardian.exe (LogMeIn, Inc.)
PRC - C:\Program Files\LogMeIn\x86\ramaint.exe (LogMeIn, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Acer\eManager\anbmServ.exe (OSA Technologies Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\QtNetwork4.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\QtXml4.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\QueryStrategy.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\QtCore4.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\libgcc_s_dw2-1.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\mingwm10.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\ouc.exe ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\DatacardService\HWDeviceService.exe ()


========== Win32 Services (SafeList) ==========

SRV - (HWDeviceService.exe) – File not found
SRV - (AVGIDSAgent) – File not found
SRV - (avgfws9) – File not found
SRV - (AppMgmt) – File not found
SRV - (Optus Mobile Broadband. RunOuc) – C:\Program Files\Optus Mobile Broadband\UpdateDog\ouc.exe ()
SRV - (Secunia PSI Agent) – C:\Program Files\Secunia\PSI\PSIA.exe (Secunia)
SRV - (Secunia Update Agent) – C:\Program Files\Secunia\PSI\sua.exe (Secunia)
SRV - (avg9emc) – C:\Program Files\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9wd) – C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (LMIMaint) – C:\Program Files\LogMeIn\x86\RaMaint.exe (LogMeIn, Inc.)
SRV - (LogMeIn) – C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
SRV - (anbmService) – C:\Acer\eManager\anbmServ.exe (OSA Technologies Inc.)


========== Driver Services (SafeList) ==========

DRV - (MBAMSwissArmy) – C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (ewusbnet) – C:\WINDOWS\system32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) – C:\WINDOWS\system32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (ew_hwusbdev) – C:\WINDOWS\system32\drivers\ew_hwusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (huawei_enumerator) – C:\WINDOWS\system32\drivers\ew_jubusenum.sys (Huawei Technologies Co., Ltd.)
DRV - (ew_usbenumfilter) – C:\WINDOWS\system32\drivers\ew_usbenumfilter.sys (Huawei Technologies Co., Ltd.)
DRV - (AvgMfx86) – C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX) – C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (PSI) – C:\WINDOWS\system32\drivers\psi_mf.sys (Secunia)
DRV - (AvgLdx86) – C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (mvusbews) – C:\WINDOWS\system32\drivers\mvusbews.sys (Marvell Semiconductor, Inc.)
DRV - (Avgfwfd) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) – C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (LMIRfsClientNP) – C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (LMIRfsDriver) – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (LMIInfo) – C:\Program Files\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (EpmShd) – C:\WINDOWS\system32\drivers\epm-shd.sys (Acer Value Labs, USA)
DRV - (osaio) – C:\WINDOWS\system32\drivers\osaio.sys (Avocent/OSA Technologies Inc.)
DRV - (osanbm) – C:\WINDOWS\system32\drivers\osanbm.sys (Windows ® 2000 DDK provider)
DRV - (int15.sys) – C:\Acer\Empowering Technology\eRecovery\int15.sys ()
DRV - (AR5211) – C:\WINDOWS\system32\drivers\ar5211.sys (Atheros Communications, Inc.)
DRV - (BCM43XX) – C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (HSFHWICH) – C:\WINDOWS\system32\drivers\HSFHWICH.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:\WINDOWS\system32\drivers\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (RTL8023xp) – C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation )
DRV - (EpmPsd) – C:\WINDOWS\system32\drivers\epm-psd.sys (Acer Value Labs, USA)
DRV - (pfc) – C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (Hotkey) – C:\WINDOWS\System32\drivers\HOTKEY.sys ()
DRV - (POWERKEY) – C:\Program Files\Launch Manager\POWERKEY.SYS ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=685749"
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.useDBForOrder: ""
FF - prefs.js..browser.startup.homepage: "http://www.google.com.au/"
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {F8A55C97-3DB6-4961-A81D-0DE0080E53CB}:0.9.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: "http://www.google.com.au/"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/12/13 21:45:30 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/12/13 21:45:30 | 000,000,000 | —D | M]

[2009/12/13 21:46:12 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Kevin\Application Data\Mozilla\Extensions
[2010/04/26 17:40:40 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Kevin\Application Data\Mozilla\Extensions\[removed]
[2009/12/13 21:46:12 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Kevin\Application Data\Mozilla\Firefox\Profiles\29zuod7q.default\extensions
[2010/10/05 23:06:16 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Kevin\Application Data\Mozilla\Firefox\Profiles\29zuod7q.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/01/15 17:32:54 | 000,000,000 | —D | M] (Page Speed) – C:\Documents and Settings\Kevin\Application Data\Mozilla\Firefox\Profiles\29zuod7q.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
[2011/08/28 20:43:54 | 000,000,000 | —D | M] (Download Manager Tweak) – C:\Documents and Settings\Kevin\Application Data\Mozilla\Firefox\Profiles\29zuod7q.default\extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}
[2011/10/15 19:30:02 | 000,002,520 | —- | M] () – C:\Documents and Settings\Kevin\Application Data\Mozilla\Firefox\Profiles\29zuod7q.default\searchplugins\SearchResults.xml
[2012/01/11 14:48:40 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/12/17 15:39:02 | 000,121,816 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/11/10 05:54:14 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/10/15 19:30:02 | 000,002,520 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml
[2011/10/20 20:34:56 | 000,002,046 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
[2011/12/17 12:08:42 | 000,001,538 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2011/12/17 11:55:54 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/12/17 12:08:42 | 000,000,947 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2011/12/17 12:08:42 | 000,001,180 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2011/12/17 12:08:42 | 000,001,135 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2012/01/06 08:44:44 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Secunia PSI Tray.lnk = C:\Program Files\Secunia\PSI\psi_tray.exe (Secunia)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/…b?1260643248484 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B7DE4E6D-E903-4AEA-BA38-28D666E31B3D}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\itss.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - (avgrsstx.dll) - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxsrvc.dll) - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Kevin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kevin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/01/11 10:16:41 | 000,040,776 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012/01/11 10:11:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Kevin\Application Data\Malwarebytes
[2012/01/11 10:10:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/01/11 10:10:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2012/01/11 10:10:16 | 000,020,464 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2012/01/11 10:10:14 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/01/11 10:09:48 | 000,000,000 | -HSD | C] – C:\Recycled
[2012/01/09 15:44:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Piolet
[2012/01/09 15:14:15 | 000,000,000 | —D | C] – C:\Documents and Settings\Kevin\Application Data\SuperMP3Download
[2012/01/09 15:14:15 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SuperMP3Download
[2012/01/09 14:48:14 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2012/01/09 14:46:03 | 000,073,728 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2012/01/09 14:45:54 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2012/01/09 14:45:53 | 000,149,280 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2012/01/09 14:45:53 | 000,149,280 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2012/01/06 08:34:34 | 000,000,000 | RHSD | C] – C:\cmdcons
[2012/01/06 08:31:48 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2012/01/06 08:31:48 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2012/01/06 08:31:48 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2012/01/06 08:31:48 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2012/01/06 08:31:39 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2012/01/06 08:31:32 | 000,000,000 | —D | C] – C:\Qoobox
[2012/01/06 08:31:23 | 000,000,000 | R–D | C] – C:\Documents and Settings\Kevin\Start Menu\Programs\Administrative Tools
[2012/01/06 08:13:28 | 000,000,000 | —D | C] – C:\_OTL
[2012/01/05 15:39:56 | 000,000,000 | —D | C] – C:\WINDOWS\Minidump
[2012/01/03 11:58:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Kevin\Start Menu\Programs\HiJackThis
[2012/01/03 11:58:25 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro
[2011/12/18 19:36:59 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2011/12/18 19:33:21 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2011/12/18 17:36:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Google Earth

========== Files - Modified Within 30 Days ==========

[2012/01/17 09:19:06 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/01/17 09:19:04 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/01/17 08:07:18 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/01/17 08:07:12 | 526,897,152 | -HS- | M] () – C:\hiberfil.sys
[2012/01/16 09:30:40 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/01/16 08:58:36 | 000,001,412 | —- | M] () – C:\Documents and Settings\Kevin\Application Data\Microsoft\Internet Explorer\Quick Launch\Calculator.lnk
[2012/01/16 08:51:18 | 000,437,592 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/01/16 08:51:18 | 000,069,652 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/01/15 17:32:34 | 000,000,537 | —- | M] () – C:\Documents and Settings\Kevin\Desktop\Shortcut to OTL.exe.lnk
[2012/01/15 17:22:00 | 000,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/01/11 14:49:00 | 000,000,650 | —- | M] () – C:\Documents and Settings\Kevin\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/01/11 14:26:36 | 000,000,549 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
[2012/01/11 12:33:22 | 000,000,593 | —- | M] () – C:\Documents and Settings\Kevin\Desktop\Shortcut to SecurityCheck.exe.lnk
[2012/01/11 12:30:50 | 000,040,776 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012/01/11 10:10:50 | 000,000,692 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/01/11 10:06:32 | 000,000,310 | RHS- | M] () – C:\BOOT.INI
[2012/01/11 09:53:00 | 000,000,451 | —- | M] () – C:\WINDOWS\System32\eRLog.ini
[2012/01/11 09:50:02 | 000,000,098 | —- | M] () – C:\WINDOWS\ComponentList.xml
[2012/01/09 16:02:42 | 000,002,453 | —- | M] () – C:\Documents and Settings\All Users\Documents\Global.sw2
[2012/01/09 15:44:42 | 000,000,562 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Piolet.lnk
[2012/01/09 15:24:20 | 000,002,539 | —- | M] () – C:\Documents and Settings\Kevin\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook 2007.lnk
[2012/01/09 14:53:32 | 000,074,952 | -H– | M] () – C:\WINDOWS\System32\mlfcache.dat
[2012/01/05 17:33:50 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/01/04 07:39:58 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/01/03 12:02:38 | 000,002,447 | —- | M] () – C:\Documents and Settings\Kevin\Desktop\HiJackThis.lnk
[2011/12/25 10:17:48 | 000,333,072 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/12/25 09:49:02 | 000,001,637 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/12/18 19:37:08 | 000,001,450 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/12/18 17:36:52 | 000,001,823 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk

========== Files Created - No Company Name ==========

[2012/01/15 17:32:29 | 000,000,537 | —- | C] () – C:\Documents and Settings\Kevin\Desktop\Shortcut to OTL.exe.lnk
[2012/01/11 14:26:35 | 000,000,549 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
[2012/01/11 12:33:21 | 000,000,593 | —- | C] () – C:\Documents and Settings\Kevin\Desktop\Shortcut to SecurityCheck.exe.lnk
[2012/01/11 10:10:48 | 000,000,692 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/01/09 15:44:40 | 000,000,562 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Piolet.lnk
[2012/01/09 14:53:31 | 000,074,952 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2012/01/06 08:34:38 | 000,000,194 | —- | C] () – C:\Boot.bak
[2012/01/06 08:34:35 | 000,260,272 | RHS- | C] () – C:\cmldr
[2012/01/06 08:31:48 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2012/01/06 08:31:48 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2012/01/06 08:31:48 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2012/01/06 08:31:48 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2012/01/06 08:31:48 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2012/01/03 11:58:26 | 000,002,447 | —- | C] () – C:\Documents and Settings\Kevin\Desktop\HiJackThis.lnk
[2011/12/18 19:37:07 | 000,001,450 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/12/18 19:20:00 | 000,000,638 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/12/18 17:36:50 | 000,001,823 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2011/07/10 10:34:14 | 001,511,424 | —- | C] () – C:\WINDOWS\System32\HP1100SM.EXE
[2011/07/10 10:34:14 | 000,147,456 | —- | C] () – C:\WINDOWS\System32\HP1100LM.DLL
[2011/07/10 10:20:27 | 000,081,920 | —- | C] () – C:\WINDOWS\System32\mvusbews.dll
[2011/07/10 10:19:45 | 000,047,104 | —- | C] () – C:\WINDOWS\System32\HP1100SMs.dll
[2011/07/10 10:18:27 | 000,284,160 | —- | C] () – C:\WINDOWS\System32\mvhlewsi.DLL
[2011/06/28 09:55:26 | 000,111,932 | —- | C] () – C:\WINDOWS\System32\EPPICPrinterDB.dat
[2011/06/28 09:55:26 | 000,031,053 | —- | C] () – C:\WINDOWS\System32\EPPICPattern131.dat
[2011/06/28 09:55:26 | 000,027,417 | —- | C] () – C:\WINDOWS\System32\EPPICPattern121.dat
[2011/06/28 09:55:26 | 000,026,154 | —- | C] () – C:\WINDOWS\System32\EPPICPattern1.dat
[2011/06/28 09:55:26 | 000,024,903 | —- | C] () – C:\WINDOWS\System32\EPPICPattern3.dat
[2011/06/28 09:55:26 | 000,021,390 | —- | C] () – C:\WINDOWS\System32\EPPICPattern5.dat
[2011/06/28 09:55:26 | 000,020,148 | —- | C] () – C:\WINDOWS\System32\EPPICPattern2.dat
[2011/06/28 09:55:26 | 000,011,811 | —- | C] () – C:\WINDOWS\System32\EPPICPattern4.dat
[2011/06/28 09:55:26 | 000,004,943 | —- | C] () – C:\WINDOWS\System32\EPPICPattern6.dat
[2011/06/28 09:55:26 | 000,001,146 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2011/06/28 09:55:26 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2011/06/28 09:55:26 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2011/06/28 09:55:26 | 000,001,136 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2011/06/28 09:55:26 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2011/06/28 09:55:26 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2011/06/28 09:55:26 | 000,001,120 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2011/06/28 09:55:26 | 000,001,107 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2011/06/28 09:55:26 | 000,001,104 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2011/06/28 09:55:26 | 000,000,097 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2011/06/28 09:37:43 | 000,000,027 | —- | C] () – C:\WINDOWS\CDE RX650EC.ini
[2010/09/06 10:21:27 | 000,000,022 | -HS- | C] () – C:\Documents and Settings\Kevin\Application Data\Sys6925.Config Collection.sys
[2010/09/06 10:21:26 | 000,000,022 | -HS- | C] () – C:\WINDOWS\Sys3390 SettingsCollection.bin
[2010/03/30 16:30:46 | 000,077,349 | —- | C] () – C:\WINDOWS\hpqins05.dat
[2010/01/16 17:46:13 | 000,000,000 | —- | C] () – C:\Documents and Settings\Kevin\Local Settings\Application Data\prvlcl.dat
[2009/12/13 21:45:57 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/12/13 05:13:08 | 000,000,451 | —- | C] () – C:\WINDOWS\System32\eRLog.ini
[2009/12/13 05:11:30 | 000,009,867 | —- | C] () – C:\WINDOWS\System32\drivers\HOTKEY.sys
[2005/06/24 10:54:22 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2005/06/24 10:52:52 | 000,437,592 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2005/06/24 10:52:52 | 000,069,652 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2005/06/20 02:42:14 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2005/06/20 02:38:18 | 000,333,072 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2005/06/20 02:17:32 | 000,001,024 | RH– | C] () – C:\WINDOWS\System32\NTIBUN4.dll
[2005/06/20 02:16:32 | 000,001,024 | RH– | C] () – C:\WINDOWS\System32\NTIMPEG2.dll
[2005/06/20 02:16:32 | 000,001,024 | RH– | C] () – C:\WINDOWS\System32\NTIMP3.dll
[2005/06/20 02:16:32 | 000,001,024 | RH– | C] () – C:\WINDOWS\System32\NTIFCD3.dll
[2005/06/20 02:16:32 | 000,001,024 | RH– | C] () – C:\WINDOWS\System32\NTICDMK7.dll
[2005/06/15 16:25:54 | 000,001,048 | —- | C] () – C:\WINDOWS\System32\drivers\alcxinit.dat
[2005/06/02 11:27:08 | 000,000,215 | —- | C] () – C:\WINDOWS\FlashSaver.dat
[2005/01/21 11:48:08 | 000,225,280 | —- | C] () – C:\WINDOWS\Capsule.dll
[2004/12/17 17:14:44 | 000,013,952 | —- | C] () – C:\WINDOWS\System32\drivers\UBHelper.sys
[2004/10/27 15:47:00 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\ChCfg.exe
[2004/09/14 13:04:50 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2004/09/14 13:02:54 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2004/09/07 14:23:16 | 000,156,672 | —- | C] () – C:\WINDOWS\System32\RtlCPAPI.dll
[2004/08/04 05:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/04 05:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/04 05:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/04 05:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/04 05:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/04 05:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/04 05:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\Dcache.bin
[2004/08/04 05:00:00 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/04 05:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2004/05/14 13:04:36 | 000,049,152 | —- | C] () – C:\WINDOWS\XMLaunch.exe
[2003/11/24 15:55:48 | 000,743,424 | —- | C] () – C:\WINDOWS\libxml2.dll
[2003/11/24 15:55:32 | 000,872,448 | —- | C] () – C:\WINDOWS\iconv.dll
[2003/07/21 16:52:40 | 000,001,150 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2002/09/12 22:41:26 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2002/09/12 22:41:26 | 000,004,524 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2001/12/26 16:12:30 | 000,065,536 | R— | C] () – C:\WINDOWS\System32\multiplex_vcd.dll
[2001/09/03 23:46:38 | 000,110,592 | R— | C] () – C:\WINDOWS\System32\Hmpg12.dll
[2001/07/30 16:33:56 | 000,118,784 | R— | C] () – C:\WINDOWS\System32\HMPV2_ENC.dll
[2001/07/23 22:04:36 | 000,118,784 | R— | C] () – C:\WINDOWS\System32\HMPV2_ENC_MMX.dll

< End of report >
Post #35
ComboFix 12-01-16.05 - Kevin 17/01/2012 11:51:47.2.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.43 [GMT 10.5:30]
Running from: c:\documents and settings\[removed]\My Documents\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\WindowsUpdate.log
.
.
((((((((((((((((((((((((( Files Created from 2011-12-17 to 2012-01-17 )))))))))))))))))))))))))))))))
.
.
2012-01-10 23:46 . 2012-01-11 02:00 40776 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-01-10 23:41 . 2012-01-10 23:41 ——– d—–w- c:\documents and settings\Kevin\Application Data\Malwarebytes
2012-01-10 23:40 . 2012-01-10 23:40 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2012-01-10 23:40 . 2011-12-10 04:54 20464 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-01-10 23:40 . 2012-01-10 23:40 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2012-01-09 04:44 . 2012-01-09 04:44 ——– d—–w- c:\documents and settings\Kevin\Application Data\SuperMP3Download
2012-01-09 04:44 . 2012-01-09 04:44 ——– d—–w- c:\documents and settings\All Users\Application Data\SuperMP3Download
2012-01-09 04:18 . 2012-01-09 04:18 ——– d—–w- c:\program files\Common Files\Java
2012-01-09 04:16 . 2011-11-09 16:57 73728 —-a-w- c:\windows\system32\javacpl.cpl
2012-01-05 21:43 . 2012-01-05 21:43 ——– d—–w- C:\_OTL
2012-01-03 01:28 . 2012-01-03 01:28 388096 —-a-r- c:\documents and settings\Kevin\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-01-03 01:28 . 2012-01-03 01:28 ——– d—–w- c:\program files\Trend Micro
2011-12-18 09:03 . 2011-12-18 09:03 ——– d—–w- c:\program files\iPod
2011-12-18 08:49 . 2011-12-17 05:09 121816 —-a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll
2011-12-18 08:49 . 2011-12-17 01:19 2106216 —-a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-12-18 08:49 . 2011-12-17 01:19 1998168 —-a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-12-18 08:49 . 2011-12-17 05:09 97240 —-a-w- c:\program files\Mozilla Firefox\libEGL.dll
2011-12-18 08:49 . 2011-12-17 05:09 486360 —-a-w- c:\program files\Mozilla Firefox\libGLESv2.dll
2011-12-18 08:49 . 2011-12-17 05:09 15832 —-a-w- c:\program files\Mozilla Firefox\mozalloc.dll
2011-12-18 08:49 . 2011-12-17 05:09 2124760 —-a-w- c:\program files\Mozilla Firefox\mozjs.dll
2011-12-18 08:49 . 2011-12-17 05:09 814040 —-a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-03 21:09 . 2011-10-16 00:20 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-25 21:57 . 2004-08-03 18:30 293376 —-a-w- c:\windows\system32\winsrv.dll
2011-11-23 13:25 . 2004-08-03 18:30 1859584 —-a-w- c:\windows\system32\win32k.sys
2011-11-18 12:35 . 2004-08-03 18:30 60416 —-a-w- c:\windows\system32\packager.exe
2011-11-09 19:24 . 2010-04-26 07:21 472808 —-a-w- c:\windows\system32\deployJava1.dll
2011-11-07 10:13 . 2011-11-07 10:16 1112288 —-a-w- c:\windows\system32\drivers\WdfCoInstaller01007.dll
2011-11-07 10:13 . 2011-11-07 10:15 90368 —-a-w- c:\windows\system32\drivers\ew_jucdcacm.sys
2011-11-07 10:13 . 2011-11-07 10:15 73216 —-a-w- c:\windows\system32\drivers\ew_jubusenum.sys
2011-11-07 10:13 . 2011-11-07 10:15 64384 —-a-w- c:\windows\system32\drivers\ew_jucdcecm.sys
2011-11-07 10:13 . 2011-11-07 10:15 26624 —-a-w- c:\windows\system32\drivers\ew_juextctrl.sys
2011-11-07 10:13 . 2011-11-07 10:15 861696 —-a-w- c:\windows\system32\drivers\mod7700.sys
2011-11-07 10:13 . 2011-11-07 10:15 28672 —-a-w- c:\windows\system32\drivers\usbccid.sys
2011-11-07 10:13 . 2011-11-07 10:15 25856 —-a-w- c:\windows\system32\drivers\ewdcsc.sys
2011-11-07 10:13 . 2011-11-07 10:15 235392 —-a-w- c:\windows\system32\drivers\ewusbnet.sys
2011-11-07 10:13 . 2011-11-07 10:15 19200 —-a-w- c:\windows\system32\drivers\ew_hwupgrade.sys
2011-11-07 10:13 . 2011-11-07 10:15 194816 —-a-w- c:\windows\system32\drivers\ewusbmdm.sys
2011-11-07 10:13 . 2011-11-07 10:15 11136 —-a-w- c:\windows\system32\drivers\ew_usbenumfilter.sys
2011-11-07 10:13 . 2011-11-07 10:15 102784 —-a-w- c:\windows\system32\drivers\ew_hwusbdev.sys
2011-11-07 10:13 . 2011-07-09 23:50 1112288 —-a-w- c:\windows\system32\wdfcoinstaller01007.dll
2011-11-04 19:20 . 2004-08-03 18:30 916992 —-a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2004-08-03 18:30 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-11-04 11:24 . 2004-08-03 18:30 385024 —-a-w- c:\windows\system32\html.iec
2011-11-03 15:28 . 2004-08-03 18:30 386048 —-a-w- c:\windows\system32\qdvd.dll
2011-11-03 15:28 . 2004-08-03 18:30 1292288 —-a-w- c:\windows\system32\quartz.dll
2011-11-01 16:07 . 2004-08-03 18:30 1288704 —-a-w- c:\windows\system32\ole32.dll
2011-10-28 05:31 . 2004-08-03 18:30 33280 —-a-w- c:\windows\system32\csrsrv.dll
2011-10-25 13:33 . 2004-08-03 18:30 2192768 —-a-w- c:\windows\system32\ntoskrnl.exe
2011-10-25 12:52 . 2004-08-03 18:30 2069376 —-a-w- c:\windows\system32\ntkrnlpa.exe
2011-12-17 05:09 . 2011-12-18 08:49 121816 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-05_22.14.54 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-17 01:31 . 2012-01-17 01:31 16384 c:\windows\Temp\Perflib_Perfdata_490.dat
- 2005-06-24 00:22 . 2011-10-15 08:13 69652 c:\windows\system32\perfc009.dat
+ 2005-06-24 00:22 . 2012-01-15 22:21 69652 c:\windows\system32\perfc009.dat
+ 2012-01-09 04:23 . 2012-01-09 04:23 74952 c:\windows\system32\mlfcache.dat
+ 2004-08-03 18:30 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
- 2004-08-03 18:30 . 2008-04-14 00:11 23040 c:\windows\system32\mciseq.dll
+ 2011-11-18 12:35 . 2011-11-18 12:35 60416 c:\windows\system32\dllcache\packager.exe
+ 2011-10-14 14:47 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
+ 2011-12-24 17:19 . 2011-12-24 17:19 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 35088 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\oisicon.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 35088 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\oisicon.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 18704 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\mspicons.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 18704 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\mspicons.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 20240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 20240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\cagicon.exe
- 2011-10-15 23:55 . 2011-10-15 23:55 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll
+ 2012-01-15 22:56 . 2012-01-15 22:56 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll
- 2011-10-16 00:13 . 2011-10-16 00:13 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6c334564da041df8fb75415f2d503224\System.Windows.Presentation.ni.dll
+ 2012-01-15 23:08 . 2012-01-15 23:08 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6c334564da041df8fb75415f2d503224\System.Windows.Presentation.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\750de53f30e516eb2c62de9bab7954e9\System.Web.DynamicData.Design.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 94720 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\805945adb33c6fa7eae84f9d01a195ba\System.ComponentModel.DataAnnotations.ni.dll
- 2011-10-16 00:12 . 2011-10-16 00:12 94720 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\805945adb33c6fa7eae84f9d01a195ba\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-01-15 23:03 . 2012-01-15 23:03 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll
- 2011-10-16 00:09 . 2011-10-16 00:09 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll
- 2011-10-15 23:52 . 2011-10-15 23:52 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2\PresentationFontCache.ni.exe
+ 2012-01-15 22:26 . 2012-01-15 22:26 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2\PresentationFontCache.ni.exe
+ 2012-01-15 22:24 . 2012-01-15 22:24 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f\PresentationCFFRasterizer.ni.dll
- 2011-10-15 23:50 . 2011-10-15 23:50 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f\PresentationCFFRasterizer.ni.dll
+ 2012-01-15 23:01 . 2012-01-15 23:01 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll
- 2011-10-16 00:08 . 2011-10-16 00:08 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-15 08:12 . 2011-10-15 08:12 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2004-08-03 18:30 . 2008-04-14 00:12 176128 c:\windows\system32\winmm.dll
+ 2004-08-03 18:30 . 2011-10-14 14:47 176128 c:\windows\system32\winmm.dll
+ 2005-06-24 00:22 . 2012-01-15 22:21 437592 c:\windows\system32\perfh009.dat
- 2005-06-24 00:22 . 2011-10-15 08:13 437592 c:\windows\system32\perfh009.dat
+ 2012-01-09 04:15 . 2011-11-09 19:24 157472 c:\windows\system32\javaws.exe
- 2011-10-16 01:04 . 2011-10-16 01:04 157472 c:\windows\system32\javaws.exe
+ 2012-01-09 04:15 . 2011-11-09 19:24 149280 c:\windows\system32\javaw.exe
+ 2012-01-09 04:15 . 2011-11-09 19:24 149280 c:\windows\system32\java.exe
+ 2010-06-18 16:45 . 2011-11-25 21:57 293376 c:\windows\system32\dllcache\winsrv.dll
- 2010-06-18 16:45 . 2011-06-20 16:44 293376 c:\windows\system32\dllcache\winsrv.dll
+ 2011-10-14 14:47 . 2011-10-14 14:47 176128 c:\windows\system32\dllcache\winmm.dll
+ 2011-11-03 15:28 . 2011-11-03 15:28 386048 c:\windows\system32\dllcache\qdvd.dll
+ 2011-12-24 17:19 . 2011-12-24 17:19 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2012-01-09 04:18 . 2012-01-09 04:18 203776 c:\windows\Installer\d54df.msi
+ 2011-12-24 19:10 . 2011-12-24 19:10 819200 c:\windows\Installer\502d7.msp
- 2010-01-19 10:38 . 2011-12-24 23:11 888080 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 888080 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 272648 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pubs.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 272648 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pubs.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 922384 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pptico.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 922384 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\pptico.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 845584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\outicon.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 845584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 217864 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\misc.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 217864 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\misc.exe
- 2011-10-15 23:55 . 2011-10-15 23:55 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571\WindowsFormsIntegration.ni.dll
+ 2012-01-15 22:57 . 2012-01-15 22:57 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571\WindowsFormsIntegration.ni.dll
+ 2012-01-15 22:56 . 2012-01-15 22:56 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll
- 2011-10-15 23:55 . 2011-10-15 23:55 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll
+ 2012-01-15 22:56 . 2012-01-15 22:56 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e\UIAutomationClient.ni.dll
- 2011-10-15 23:55 . 2011-10-15 23:55 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e\UIAutomationClient.ni.dll
+ 2012-01-15 23:08 . 2012-01-15 23:08 420864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\df623b1abbd114e6586bf3b148c7d5e9\System.Xml.Linq.ni.dll
- 2011-10-16 00:13 . 2011-10-16 00:13 420864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\df623b1abbd114e6586bf3b148c7d5e9\System.Xml.Linq.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 130560 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\2ac0f8cfe37717f883a186d5203be9c0\System.Web.Routing.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6e29f9faa74a48b83a13a3413b826295\System.Web.Extensions.Design.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 329216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\04f6caf6766ed17c0dcfe0117749a6d2\System.Web.Entity.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\1ebd71823b0c6d5d04323d86c0f31011\System.Web.Entity.Design.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 551936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\33f6bdf96ecccbfed0321d326a251d21\System.Web.DynamicData.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\5efb726d424b9712632eff749411fa89\System.Web.Abstractions.ni.dll
- 2011-10-16 00:11 . 2011-10-16 00:11 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\b2a84980f206431821d85d5155d5916f\System.Net.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\b2a84980f206431821d85d5155d5916f\System.Net.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 331264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\f8fc4de67cafbfd9d50b3076a48f5d1e\System.Management.Instrumentation.ni.dll
- 2011-10-16 00:11 . 2011-10-16 00:11 331264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\f8fc4de67cafbfd9d50b3076a48f5d1e\System.Management.Instrumentation.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System.IO.Log.ni.dll
- 2011-10-16 00:11 . 2011-10-16 00:11 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System.IO.Log.ni.dll
- 2011-10-16 00:11 . 2011-10-16 00:11 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956\System.IdentityModel.Selectors.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956\System.IdentityModel.Selectors.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c\System.DirectoryServices.AccountManagement.ni.dll
- 2011-10-16 00:11 . 2011-10-16 00:11 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c\System.DirectoryServices.AccountManagement.ni.dll
- 2011-10-16 00:10 . 2011-10-16 00:10 944128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e39d40e3cd00eccde799fa198664877b\System.Data.Services.Client.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 944128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e39d40e3cd00eccde799fa198664877b\System.Data.Services.Client.ni.dll
- 2011-10-16 00:10 . 2011-10-16 00:10 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\62dec0ef9bffd4cf0b2c6275b814df0f\System.Data.Services.Design.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\62dec0ef9bffd4cf0b2c6275b814df0f\System.Data.Services.Design.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 759296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\2701a5ad26b88d4d96c61e00317e72d5\System.Data.Entity.Design.ni.dll
- 2011-10-16 00:09 . 2011-10-16 00:09 136704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\584cabc278f53ec8976235121a187663\System.Data.DataSetExtensions.ni.dll
+ 2012-01-15 23:03 . 2012-01-15 23:03 136704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\584cabc278f53ec8976235121a187663\System.Data.DataSetExtensions.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc\System.AddIn.ni.dll
- 2011-10-16 00:13 . 2011-10-16 00:13 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc\System.AddIn.ni.dll
+ 2012-01-15 23:01 . 2012-01-15 23:01 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost.ni.exe
- 2011-10-16 00:08 . 2011-10-16 00:08 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost.ni.exe
- 2011-10-16 00:09 . 2011-10-16 00:09 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiagnostics.ni.dll
+ 2012-01-15 23:02 . 2012-01-15 23:02 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiagnostics.ni.dll
+ 2012-01-15 23:01 . 2012-01-15 23:01 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\439732479756e0f6df88d29e50a402bf\ServiceModelReg.ni.exe
+ 2012-01-15 22:33 . 2012-01-15 22:33 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f\PresentationFramework.Luna.ni.dll
- 2011-10-15 23:53 . 2011-10-15 23:53 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f\PresentationFramework.Luna.ni.dll
+ 2012-01-15 22:33 . 2012-01-15 22:33 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5\PresentationFramework.Aero.ni.dll
- 2011-10-15 23:53 . 2011-10-15 23:53 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5\PresentationFramework.Aero.ni.dll
+ 2012-01-15 22:33 . 2012-01-15 22:33 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1\PresentationFramework.Classic.ni.dll
- 2011-10-15 23:53 . 2011-10-15 23:53 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1\PresentationFramework.Classic.ni.dll
+ 2012-01-15 22:33 . 2012-01-15 22:33 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0\PresentationFramework.Royale.ni.dll
- 2011-10-15 23:53 . 2011-10-15 23:53 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0\PresentationFramework.Royale.ni.dll
+ 2012-01-15 23:01 . 2012-01-15 23:01 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.exe
- 2011-10-16 00:08 . 2011-10-16 00:08 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.exe
- 2011-10-16 00:08 . 2011-10-16 00:09 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-01-15 23:02 . 2012-01-15 23:02 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
- 2011-10-16 00:08 . 2011-10-16 00:08 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-01-15 23:02 . 2012-01-15 23:02 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc\Microsoft.Build.Utilities.v3.5.ni.dll
- 2011-10-16 00:08 . 2011-10-16 00:08 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-01-15 23:01 . 2012-01-15 23:01 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14\Microsoft.Build.Conversion.v3.5.ni.dll
- 2011-10-16 00:08 . 2011-10-16 00:08 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcConfig.ni.exe
+ 2012-01-15 23:00 . 2012-01-15 23:00 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcConfig.ni.exe
+ 2012-01-15 23:00 . 2012-01-15 23:00 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\bfcea15c95909860c4f4ac19bd7a2d6c\AspNetMMCExt.ni.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-01-15 22:18 . 2012-01-15 22:19 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-01-15 22:19 . 2012-01-15 22:20 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2009-06-03 19:09 . 2011-11-03 15:28 1292288 c:\windows\system32\dllcache\quartz.dll
+ 2011-12-24 17:20 . 2011-12-24 17:20 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2011-12-08 08:54 . 2011-12-08 08:54 4989952 c:\windows\Installer\a16692d.msp
+ 2011-12-25 23:29 . 2011-12-25 23:29 4368896 c:\windows\Installer\502cf.msp
- 2010-01-19 10:38 . 2011-12-24 23:11 1172240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 1172240 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-01-19 10:38 . 2012-01-13 03:22 1165584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\accicons.exe
- 2010-01-19 10:38 . 2011-12-24 23:11 1165584 c:\windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\accicons.exe
- 2011-10-15 23:55 . 2011-10-15 23:55 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsBase.ni.dll
+ 2012-01-15 22:57 . 2012-01-15 22:57 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsBase.ni.dll
- 2011-10-15 23:55 . 2011-10-15 23:55 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c\UIAutomationClientsideProviders.ni.dll
+ 2012-01-15 22:56 . 2012-01-15 22:56 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c\UIAutomationClientsideProviders.ni.dll
+ 2012-01-15 23:08 . 2012-01-15 23:08 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\05c29118462056cf810df0b6aa660d05\System.WorkflowServices.ni.dll
+ 2012-01-15 23:08 . 2012-01-15 23:08 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\26b3258c559dc0ab6bdce481ffd458b3\System.Workflow.Runtime.ni.dll
+ 2012-01-15 23:08 . 2012-01-15 23:08 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1642d1b72cd84caf24cbe7c5e8fd8368\System.Workflow.ComponentModel.ni.dll
+ 2012-01-15 23:08 . 2012-01-15 23:08 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\32ce12c3c2049f2df94c44c94b052e16\System.Workflow.Activities.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f63ae1310e004777e880f28377bcddd2\System.Web.Services.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\c99b02434e71ca9898bebbc08d63e885\System.Web.Mobile.ni.dll
+ 2012-01-15 23:07 . 2012-01-15 23:07 2409984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\840bab8052ded6b3dd72594a112ec28f\System.Web.Extensions.ni.dll
- 2011-10-15 23:55 . 2011-10-15 23:55 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f\System.Speech.ni.dll
+ 2012-01-15 22:55 . 2012-01-15 22:55 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f\System.Speech.ni.dll
+ 2012-01-15 23:06 . 2012-01-15 23:06 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ae749b024162e9ac79110c633b5ce6be\System.ServiceModel.Web.ni.dll
+ 2012-01-15 23:06 . 2012-01-15 23:06 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll
- 2011-10-16 00:11 . 2011-10-16 00:11 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll
+ 2012-01-15 22:53 . 2012-01-15 22:53 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\System.Printing.ni.dll
- 2011-10-15 23:54 . 2011-10-15 23:54 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\System.Printing.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\23eb4618c9d171be9fb551a13a475a32\System.IdentityModel.ni.dll
+ 2012-01-15 23:05 . 2012-01-15 23:05 1330176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\531a99c5fe3ca3e13f6cbcb36379ab9e\System.Data.Services.ni.dll
- 2011-10-15 23:54 . 2011-10-15 23:54 2526720 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\a4d9528595a7ed58d4e6308c791dbb43\System.Data.Linq.ni.dll
+ 2012-01-15 22:44 . 2012-01-15 22:44 2526720 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\a4d9528595a7ed58d4e6308c791dbb43\System.Data.Linq.ni.dll
- 2011-10-16 00:10 . 2011-10-16 00:10 9926656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\b3837a6dc6eaf514e8826f8aacb94150\System.Data.Entity.ni.dll
+ 2012-01-15 23:04 . 2012-01-15 23:05 9926656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\b3837a6dc6eaf514e8826f8aacb94150\System.Data.Entity.ni.dll
+ 2012-01-15 23:08 . 2012-01-15 23:08 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485\System.Core.ni.dll
- 2011-10-16 00:13 . 2011-10-16 00:13 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485\System.Core.ni.dll
+ 2012-01-15 22:39 . 2012-01-15 22:39 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a\ReachFramework.ni.dll
- 2011-10-15 23:53 . 2011-10-15 23:54 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a\ReachFramework.ni.dll
+ 2012-01-15 22:36 . 2012-01-15 22:36 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990\PresentationUI.ni.dll
- 2011-10-15 23:53 . 2011-10-15 23:53 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990\PresentationUI.ni.dll
+ 2012-01-15 22:24 . 2012-01-15 22:24 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b42ad515bb20ec1f1250c040371c6730\PresentationBuildTasks.ni.dll
- 2011-10-15 23:50 . 2011-10-15 23:50 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b42ad515bb20ec1f1250c040371c6730\PresentationBuildTasks.ni.dll
+ 2012-01-15 23:02 . 2012-01-15 23:02 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a86c12788293105a0d9fda1bc90c90bc\Microsoft.VisualBasic.ni.dll
- 2011-10-16 00:08 . 2011-10-16 00:08 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449\Microsoft.Transactions.Bridge.ni.dll
+ 2012-01-15 23:02 . 2012-01-15 23:02 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449\Microsoft.Transactions.Bridge.ni.dll
- 2011-10-16 00:08 . 2011-10-16 00:08 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-01-15 23:02 . 2012-01-15 23:02 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-01-15 23:01 . 2012-01-15 23:01 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0\Microsoft.Build.Engine.ni.dll
- 2011-10-16 00:08 . 2011-10-16 00:08 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0\Microsoft.Build.Engine.ni.dll
+ 2012-01-15 22:20 . 2012-01-15 22:20 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2011-10-15 08:12 . 2011-10-15 08:13 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2011-10-15 08:12 . 2011-10-15 08:13 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-10-08 04:37 . 2010-10-08 04:37 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-01-15 22:24 . 2012-01-15 22:24 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-01-15 22:18 . 2012-01-15 22:18 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-01-15 22:19 . 2012-01-15 22:19 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-15 08:12 . 2011-10-15 08:12 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2009-12-12 22:23 . 2012-01-15 22:27 52128560 c:\windows\system32\MRT.exe
+ 2012-01-15 23:06 . 2012-01-15 23:06 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\62e34cfb5a8b233667c7c5a47a32ad93\System.Web.ni.dll
+ 2012-01-15 23:06 . 2012-01-15 23:06 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\2dac4fc006596760cd4988d0bfd52ff0\System.ServiceModel.ni.dll
+ 2012-01-15 22:48 . 2012-01-15 22:49 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\9e15d80ffb037e9171fa4bd2e0233497\System.Design.ni.dll
- 2011-10-15 23:53 . 2011-10-15 23:53 14880256 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1e53d4a631d97b6963430f8dca10b684\PresentationFramework.ni.dll
+ 2012-01-15 22:31 . 2012-01-15 22:31 14880256 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1e53d4a631d97b6963430f8dca10b684\PresentationFramework.ni.dll
+ 2012-01-15 22:28 . 2012-01-15 22:28 12594688 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\60510050c4255a52657fe4b1bbc0c997\PresentationCore.ni.dll
- 2011-10-15 23:52 . 2011-10-15 23:52 12594688 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\60510050c4255a52657fe4b1bbc0c997\PresentationCore.ni.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2011-10-29 2078048]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files\Secunia\PSI\psi_tray.exe [2011-7-29 291896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-07-18 01:44 12536 —-a-w- c:\windows\system32\avgrsstx.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2009-09-28 09:04 87352 —-a-w- c:\windows\system32\LMIinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-03-30 04:59 937920 —-a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-09-07 22:58 37296 —-a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-11-01 12:55 59240 —-a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 00:12 15360 —-a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CtrlVol]
2003-09-16 03:58 20480 —-a-w- c:\program files\Launch Manager\CtrlVol.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\epm-dm]
2005-10-26 05:48 212992 —-a-w- c:\acer\ePM\epm-dm.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePowerManagement]
2005-10-26 05:41 2889728 —-a-w- c:\acer\ePM\ePM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService]
2005-10-31 08:35 385024 —-a-w- c:\acer\Empowering Technology\eRecovery\Monitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2005-01-23 00:01 126976 —-a-w- c:\windows\system32\hkcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2005-01-23 00:06 155648 —-a-w- c:\windows\system32\igfxtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
2004-08-03 18:30 208952 —-a-w- c:\windows\ime\imjp8_1\imjpmig.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-12-07 15:06 421736 —-a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchAp]
2005-07-25 03:06 32768 —-a-w- c:\program files\Launch Manager\LaunchAp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
2005-06-06 01:22 69632 —-a-w- c:\program files\Launch Manager\HotkeyApp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LMgrOSD]
2005-07-25 00:15 241664 —-a-w- c:\program files\Launch Manager\OSDCtrl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI]
2008-08-11 02:11 63048 —-a-w- c:\program files\LogMeIn\x86\LogMeInSystray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
2004-08-03 18:30 59392 —-a-w- c:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
2005-03-09 08:29 49152 ——w- c:\program files\Arcade\PCMService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
2004-08-03 18:30 455168 —-a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
2004-08-03 18:30 455168 —-a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerKey]
2002-08-30 04:32 94208 —-a-w- c:\program files\Launch Manager\Powerkey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\preload]
2005-05-19 06:39 32768 —-a-w- c:\windows\RUNXMLPL.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 08:06 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-04-15 00:31 77824 —-a-w- c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-06-09 02:36 254696 —-a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2005-02-04 00:41 708698 —-a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPLpr]
2005-02-04 00:42 102490 —-a-w- c:\program files\Synaptics\SynTP\SynTPLpr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wbutton]
2005-07-25 03:04 81920 —-a-w- c:\program files\Launch Manager\WButton.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Piolet\\Piolet.exe"=
.
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [13/12/2009 7:27 AM 216400]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [13/12/2009 7:27 AM 243152]
R2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [18/07/2010 12:13 PM 921952]
R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [18/07/2010 12:14 PM 308136]
R2 HWDeviceService.exe;HWDeviceService.exe;c:\documents and settings\All Users\Application Data\DatacardService\HWDeviceService.exe [15/03/2011 1:57 AM 271712]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [11/08/2008 12:41 PM 12856]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\Secunia\PSI\psia.exe [29/07/2011 8:00 PM 994360]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\Secunia\PSI\sua.exe [29/07/2011 8:00 PM 399416]
R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys [7/11/2011 8:45 PM 73216]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [1/09/2010 7:00 PM 15544]
S0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\system32\Drivers\AVGIDSxx.sys –> c:\windows\system32\Drivers\AVGIDSxx.sys [?]
S0 AvgRkx86;avgrkx86.sys;c:\windows\system32\Drivers\avgrkx86.sys –> c:\windows\system32\Drivers\avgrkx86.sys [?]
S1 mailKmd;mailKmd; [x]
S2 avgfws9;AVG Firewall;"c:\program files\AVG\AVG9\avgfws9.exe" –> c:\program files\AVG\AVG9\avgfws9.exe [?]
S2 AVGIDSAgent;AVG9IDSAgent;"c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe" AVGIDSAgent –> c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [?]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [18/04/2010 8:24 PM 136176]
S2 Optus Mobile Broadband. RunOuc;Optus Mobile Broadband. OUC;c:\program files\Optus Mobile Broadband\UpdateDog\ouc.exe [7/11/2011 8:44 PM 246112]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [13/12/2009 7:25 AM 30104]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [13/12/2009 7:25 AM 30104]
S3 AVGIDSDriverxpx;AVG9IDSDriver;\??\c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys –> c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [?]
S3 AVGIDSFilterxpx;AVG9IDSFilter;\??\c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys –> c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [?]
S3 AVGIDSShimxpx;AVG9IDSShim;\??\c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys –> c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [?]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys [7/11/2011 8:45 PM 102784]
S3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\drivers\ew_usbenumfilter.sys [7/11/2011 8:45 PM 11136]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [7/11/2011 8:45 PM 235392]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [18/04/2010 8:24 PM 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [11/01/2012 10:16 AM 40776]
S3 mvusbews;USB EWS Device;c:\windows\system32\drivers\mvusbews.sys [10/07/2011 10:20 AM 17408]
S3 POWERKEY;POWERKEY;c:\program files\Launch Manager\POWERKEY.SYS [13/12/2009 5:11 AM 2343]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Contents of the 'Scheduled Tasks' folder
.
2012-01-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-18 09:54]
.
2012-01-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-18 09:54]
.
2012-01-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 07:27]
.
.
——- Supplementary Scan ——-
.
uStart Page =
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\documents and settings\Kevin\Application Data\Mozilla\Firefox\Profiles\29zuod7q.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.au/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-17 12:03
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(628)
c:\windows\system32\LMIinit.dll
c:\windows\system32\LMIRfsClientNP.dll
.
- - - - - - - > 'explorer.exe'(3596)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\LMIRfsClientNP.dll
.
———————— Other Running Processes ————————
.
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\acer\eManager\anbmServ.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\LogMeIn\x86\LMIGuardian.exe
c:\documents and settings\All Users\Application Data\Optus Mobile Broadband\OnlineUpdate\ouc.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\LogMeIn\x86\LMIGuardian.exe
c:\program files\LogMeIn\x86\LMIGuardian.exe
c:\program files\LogMeIn\x86\LMIGuardian.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\LogMeIn\x86\LMIGuardian.exe
.
**************************************************************************
.
Completion time: 2012-01-17 12:08:10 - machine was rebooted
ComboFix-quarantined-files.txt 2012-01-17 01:38
ComboFix2.txt 2012-01-05 22:22
.
Pre-Run: 637,124,608 bytes free
Post-Run: 638,418,944 bytes free
.
- - End Of File - - CE1DBF5D1370DDB69B9741FC5C7C424A
Post #36
Thanks for the logs

Run OTL
  • Double click on the icon to run it.
  • Copy/paste ALL the following text written inside the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :Services

:OTL
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "":Reg

:Files
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[Reboot]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL log (don't check the boxes beside LOP Check or Purity this time)
===========================================

Can you tell me if you ever had jv16 PowerTools installed and let me know how your computer is running.

Thanks

Satchfan
Post #37
Hello TTGSC It has been several days since I posted instructions to help with your computer problem. Please let me know if you are having problems and still need help. Thanks Satchfan
Post #38
I think i have had JV tools on this computer

All processes killed
========== SERVICES/DRIVERS ==========
========== OTL ==========
Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaultenginename
Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaulturl
Prefs.js: "":Reg removed from sweetim.toolbar.previous.browser.search.selectedEngine
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Kevin\My Documents\Downloads\cmd.bat deleted successfully.
C:\Documents and Settings\Kevin\My Documents\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: Kevin
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2377239 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 41672318 bytes
->Flash cache emptied: 757 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16622 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 22940 bytes

Total Files Cleaned = 42.00 mb


OTL by OldTimer - Version 3.2.31.0 log created on 01222012_112910

Files\Folders moved on Reboot…

Registry entries deleted on Reboot…
Post #39
Run OTL
  • open OTL again and click the Quick Scan button (don't check the boxes beside LOP Check or Purity this time)
  • post the OTL.txt log it produces in your next reply.
Please post back with the log and let me know if there are any remaining problems.

Thanks

Satchfan
Post #40
It has been several days since I last posted a reply to help with your computer problems. Please let me know if you still require help Satchfan

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI