Possible Trojan? [Solved]

Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

• I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  
• Please subscribe to this topic, if you haven't already.
  
• The fixes are specific to your problem and should only be used for the issues on this machine.
  
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  
• It's often worth reading through these instructions and printing them for ease of reference.
  
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  
• Please reply to this thread. Do not start a new topic.

IMPORTANT NOTE : Please do not delete anything unless instructed to.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.
Doing so could make your system inoperable and could require a full reinstall of your OS losing all your programs and data.

Vista and Windows 7 users:
These tools MUST be run from the executable (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

First we need to make all files and folders VISIBLE:

• Go to Start>Control Panel>Folder Options>View
• Choose to "Show hidden files and folders,"
• Uncheck the "hide protected operating system files" and the "hide extensions for know file types" boxes.
• Close the window with OK

———-

Please download DDS from one of the following links and save it to your desktop.

• • DDS.scr
  • DDS.pif
• Disable any script blocking protection (How to Disable your Security Programs)
• Double click DDS icon to run the tool (may take up to 3 minutes to run)
• When done, DDS.txt will open.
• After a few moments, attach.txt will open in a second window.
• Save both reports to your desktop.

—————————————————

• Post the contents of the DDS.txt report in your next reply
• Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.

———-

Please download aswMBR to your desktop.

• Double click the aswMBR icon to run it.
  Vista and Windows 7 users right click the icon and choose "Run as administrator".
• Click the Scan button to start scan.
• When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.

[external image: Posted Image]
Click the image to enlarge it
———-

In your next reply please post both of the logs created by DDS and the log created by aswMBR.exe.

Hi Foxtrot,

Good job getting those logs.
———-

Please read through these instructions to familarize yourself with what to expect when this tool runs

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs
  
• Double click on ComboFix.exe & follow the prompts.
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
———-

Hmm, ComboFix says that my Avast! is running, when I see a huge red "X" over its system tray icon. I decided to right-click on it, and disabled my Avast! permanently… (or so it says). Can I continue with ComboFix?

Yes go ahead. It shouldn't cause a problem.

Hi foxtrot,

• Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
  

  ClearJavaCache::
  
  DDS::
  BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
  TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
  TB: {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No File
  TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
  dRun: [KB984221.exe] "c:\documents and settings\networkservice\application data\KB984221.exe"
  Trusted Zone: area00.com
  Trusted Zone: clonewarsadventures.com
  Trusted Zone: dbs.com\dbsd2pay
  Trusted Zone: enets.sg\www
  Trusted Zone: freerealms.com
  Trusted Zone: soe.com
  Trusted Zone: sony.com
  
  Folder::
  C:\FOUND.007
  C:\FOUND.006
  C:\FOUND.005
  C:\FOUND.004
  C:\FOUND.003
  C:\FOUND.002
  C:\FOUND.001
  C:\FOUND.000
  C:\FOUND.219
  C:\FOUND.218
  
  Registry::
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
  "58241:TCP"=-
  "58241:UDP"=-

• Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.
  
  [external image: Posted Image]
  
• Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
• Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
• ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
• When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
———-

Hi foxtrot,

I see that you have Malwarebytes on your system. Please open Malwarebytes, update it and then run a Quick Scan. Please save the log that is created for your next reply.
———-

ESET Online Scanner
I'd like us to scan your machine with ESET Online Scan

Note: It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs.

• Hold down Control and click on the following link to open ESET OnlineScan in a new window.
  ESET OnlineScan
• Click the [external image: Posted Image] button.
• For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the [external image: Posted Image] icon on your desktop.
• Check [external image: Posted Image]
• Click the Start button.
• Accept any security warnings from your browser.
• Check [external image: Posted Image]
• Make sure that the option "Remove found threats" is Unchecked
• Push the Start button.
• ESET will then download updates for itself, install itself, and begin
  scanning your computer. Please be patient as this can take some time.
• When the scan completes, push [external image: Posted Image]
• Push [external image: Posted Image], and save the file to your desktop using a unique name, such as
  ESETScan. Include the contents of this report in your next reply.
• Push the Back button.
• Push Finish

http://www.eset.com/onlinescan/
———-

In your next reply please post the logs created by Malwarebytes and ESET online scan.

Hey jeffce, I seem to have run into a tiny problem: ESET Online Scanner is unable to update itself - it asks me if my proxy is configured. I don't remember changing any connection settings or anything.

Hi foxtrot, Do you get the same problems using both Firefox and Internet Explorer? If you have not tried both browsers yet please do so.

Yes, I face the same problem using both Firefox and IE. What do I do next (MBAM scan ran with no issues)?

Hi,

Glad to hear that Malwarebytes came back clean. Let's try a different online scan.
————-

Do an online scan with BitDefender QuickScan.
Please be patient as scanning may take some time. If you have problem running the scan, you might want to disable any real time protection that you have.

• Click here to go to BitDefender QuickScan page.
• For Firefox users:
  • Click on Free Scan Now. You will be prompted to install a plug-in. Please Allow. In case you get stuck, please refresh the page to try again.
  • A Software Installation window will appear. Click Install Now and the plugin will be installed as an Add-on.
  • Restart Firefox when done. Go back to the BitDefender QuickScan page again and click on Free Scan Now and proceed accordingly.
• For Internet Explorer users:
  • Click on Free Scan Now. You will be prompted to install an ActiveX control. Please install.
  • The page will refresh. Click on Free Scan Now again and proceed accordingly.
• When scan has completed, click on View report and a Notepad log shall open.
• If there are any infections found, you will get a warning and the link to the report will be displayed as the number of infections. Click on it.
• Post back the contents of this report. It can also be found at C:\Documents and Settings\\Application Data\QuickScan, is the Windows log-in name.

Alright, here are the logs from MBAM and QuickScan: Malwarebytes Anti-Malware 1.60.0.1800 www.malwarebytes.org Database version: v2012.01.28.04 Windows XP Service Pack 3 x86 FAT32 Internet Explorer 8.0.6001.18702 user :: USER-EE7ECB5E1A [administrator] 1/28/2012 11:49:14 PM mbam-log-2012-01-28 (23-49-14).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 170416 Time elapsed: 3 minute(s), 8 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) ********** QuickScan 32-bit v0.9.9.105 ————————— Scan date: Sun Jan 29 21:34:22 2012 Machine ID: 3B5611DD No infection found. ——————- Processes ——— hpwuSchd Application 1904 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe avast! Antivirus 1928 C:\Program Files\AVAST Software\Avast\AvastUI.exe Belkin Wireless Client Utility 152 C:\Program Files\Belkin\F5D8053\Belkinwcui.exe CrypKey Software Licensing System 788 C:\WINDOWS\System32\Crypserv.exe DAEMON Tools Lite 1988 C:\Program Files\DAEMON Tools Lite\DTLite.exe hp digital imaging - hp all-in-one seri 132 C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe HP Smart Web Printing 3028 C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe Java™ Platform SE 6 U29 1588 C:\Program Files\Java\jre6\bin\jqs.exe Java™ Platform SE Auto Updater 2 0 1960 C:\Program Files\Common Files\Java\Java Update\jusched.exe Microsoft IntelliPoint 2028 C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe Microsoft IntelliType Pro 1872 C:\Program Files\Microsoft IntelliType Pro\itype.exe Microsoft® Windows® Operating System 600 C:\WINDOWS\System32\spoolsv.exe NVIDIA Driver Helper Service, Version 2 1136 C:\WINDOWS\System32\nvsvc32.exe Realtek HD Audio Sound Effect Manager 1856 C:\WINDOWS\RTHDCPL.EXE (verified) Microsoft® Windows® Operating System 1672 C:\WINDOWS\Explorer.EXE (verified) Microsoft® Windows® Operating System 2748 C:\WINDOWS\System32\alg.exe (verified) Microsoft® Windows® Operating System 904 C:\WINDOWS\System32\csrss.exe (verified) Microsoft® Windows® Operating System 2004 C:\WINDOWS\System32\ctfmon.exe (verified) Microsoft® Windows® Operating System 984 C:\WINDOWS\System32\lsass.exe (verified) Microsoft® Windows® Operating System 1912 C:\WINDOWS\System32\RUNDLL32.EXE (verified) Microsoft® Windows® Operating System 972 C:\WINDOWS\System32\services.exe (verified) Microsoft® Windows® Operating System 688 C:\WINDOWS\System32\smss.exe (verified) Microsoft® Windows® Operating System 1644 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1852 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 752 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 876 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1180 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1188 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1212 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1256 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1296 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1340 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1388 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1420 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1472 C:\WINDOWS\System32\svchost.exe (verified) Microsoft® Windows® Operating System 928 C:\WINDOWS\System32\winlogon.exe (verified) Windows® Internet Explorer 1576 C:\Program Files\Internet Explorer\IEXPLORE.EXE (verified) Windows® Internet Explorer 828 C:\Program Files\Internet Explorer\IEXPLORE.EXE (verified) Windows® Internet Explorer 3692 C:\Program Files\Internet Explorer\IEXPLORE.EXE Network activity —————- Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> 91.199.104.31 Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process IEXPLORE.EXE (3692) connected on port 443 (HTTP over SSL) –> [removed] Process IEXPLORE.EXE (3692) connected on port 80 (HTTP) –> [removed] Process svchost.exe (1256) listens on ports: 135 (RPC) Process svchost.exe (1472) listens on ports: 2869 (SSDP event notification, UPNP) Autoruns and critical files ————————— hpwuSchd Application C:\Program Files\HP\HP Software Update\hpwuSchd2.exe Adobe Reader and Acrobat Manager C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastUI.exe Belkin Wireless Client Utility C:\Program Files\Belkin\F5D8053\Belkinwcui.exe DAEMON Tools Lite C:\Program Files\DAEMON Tools Lite\DTLite.exe hp digital imaging - hp all-in-one seri C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe Java™ Platform SE Auto Updater 2 0 C:\Program Files\Common Files\Java\Java Update\jusched.exe Logitech SetPoint C:\WINDOWS\KHALMNPR.EXE Microsoft IntelliType Pro C:\Program Files\Microsoft IntelliType Pro\itype.exe Microsoft Pinyin IME 2007 C:\PROGRA~1\COMMON~1\MICROS~1\IME12L~1\imesc\IMSCMig.exe Microsoft® Windows® Operating System C:\WINDOWS\system32\CRYPT32.dll Microsoft® Windows® Operating System C:\WINDOWS\system32\cryptnet.dll Microsoft® Windows® Operating System C:\WINDOWS\System32\CSCDLL.dll Microsoft® Windows® Operating System C:\WINDOWS\System32\dimsntfy.dll Microsoft® Windows® Operating System C:\WINDOWS\system32\SHELL32.dll Microsoft® Windows® Operating System c:\windows\system32\userinit.exe Microsoft® Windows® Operating System C:\WINDOWS\system32\WlNotify.dll NVIDIA Compatible Windows 2000 Display C:\WINDOWS\system32\NvCpl.dll NVIDIA Media Center Library C:\WINDOWS\system32\NvMcTray.dll Realtek HD Audio Sound Effect Manager C:\WINDOWS\RTHDCPL.EXE 新注音 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE (verified) Ahead Software Gmbh NeroCheck C:\WINDOWS\system32\NeroCheck.exe (verified) Google Update C:\Program Files\Google\Update\GoogleUpdate.exe (verified) GoogleToolbarNotifier C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (verified) Microsoft IME 2002 C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\BROWSEUI.dll (verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\cmd.exe (verified) Microsoft® Windows® Operating System C:\WINDOWS\System32\ctfmon.exe (verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\logonui.exe (verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\sclgntfy.dll (verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\stobject.dll (verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\WPDShServiceObj.dll (verified) Windows® Internet Explorer C:\WINDOWS\system32\webcheck.dll Browser plugins ————— AcroIEHelperShim Library C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll Adobe Acrobat C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll Adobe Acrobat C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll avast! WebRep C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll BitDefender QuickScan C:\WINDOWS\Downloaded Program Files\qsax.dll DivX Player Netscape Plugin C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll DivX Web Player C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll Facebook Photo Uploader 5 C:\WINDOWS\Downloaded Program Files\ImageUploader5.ocx Facebook Photo Uploader 5 C:\WINDOWS\Downloaded Program Files\PhotoUploader5.ocx Facebook Photo Uploader 5 C:\WINDOWS\Downloaded Program Files\PhotoUploader55.ocx Google Toolbar for Internet Explorer C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll Google Update C:\Program Files\Google\Update\1.3.21.93\npGoogleUpdate3.dll GoogleToolbarNotifier C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll HP Smart Web Printing C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll HP Smart Web Printing C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll IEAWSDC.DLL C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL Java Deployment Toolkit 6.0.290.11 C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll Java™ Platform SE 6 U29 C:\Program Files\Java\jre6\bin\jp2ssv.dll Java™ Platform SE 6 U29 C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll Java™ Platform SE 6 U29 C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll Messenger C:\Program Files\Messenger\msmsgs.exe Microsoft® Windows® Operating System C:\WINDOWS\System32\mswsock.dll Microsoft® Windows® Operating System C:\WINDOWS\system32\rsvpsp.dll Microsoft® Windows® Operating System C:\WINDOWS\System32\winrnr.dll Nexon Game Controller C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll npsoe.dll C:\WINDOWS\Downloaded Program Files\npsoe.dll NPSWF32.dll C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll RealJukebox NS Plugin C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll RealJukebox NS Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll RealPlayer™ G2 LiveConnect-Enabled P C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll RealPlayer™ G2 LiveConnect-Enabled P C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll SDHelper.dll C:\Program Files\Spybot - Search & Destroy\SDHelper.dll Shockwave for Director C:\WINDOWS\system32\Adobe\Director\np32dsw.dll System Requirements Lab C:\WINDOWS\Downloaded Program Files\sysreqlab_nvd.dll TVU Web Player for FireFox C:\WINDOWS\system32\TVUAx\npTVUAx.dll Unity Player C:\Documents and Settings\user\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll Windows Presentation Foundation C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll Windows® Internet Explorer C:\WINDOWS\system32\IEFRAME.dll Yahoo! Toolbar c:\program files\yahoo!\companion\installs\cpn\yt.dll (verified) Microsoft® Windows Live Login Helper C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (verified) Microsoft® Windows® Operating System C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (verified) QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (verified) QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (verified) QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (verified) QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (verified) QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (verified) QuickTime Plug-in 7.6.6 C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (verified) RealPlayer Version Plugin C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll (verified) RealPlayer Version Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll Missing files ————- File not found: m‘|\ü –> HKLM\Software\Microsoft\Windows\CurrentVersion\Run\"GEST" Scan —- MD5: f4dcc3149ef542af4e55b4e9def96736 C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll MD5: abe43645a327bd9e8942d2034a054b06 C:\Documents and Settings\user\Application Data\Dropbox\bin\DropboxExt.13.dll MD5: a63259925adb2a1181c712513ebfb8ed C:\Documents and Settings\user\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll MD5: 8082f66dc9c8167ff1aa548736f58457 C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll MD5: ffaa62e671f4604f729063640befd039 C:\Program Files\AVAST Software\Avast\1033\Base.dll MD5: cd76996b881fb8e96b4ec2210e6934b8 C:\Program Files\AVAST Software\Avast\1033\UILangRes.dll MD5: 9e9898d12608f8fbbd3ab3b9cde010c6 C:\Program Files\AVAST Software\Avast\Aavm4h.dll MD5: b0e0b1b2f651e3c3917d4bec88be57f4 C:\Program Files\AVAST Software\Avast\AavmRpch.dll MD5: ca4ddb5cb61b905a4407c5fb76527437 C:\Program Files\AVAST Software\Avast\ashBase.dll MD5: 7a4a6056b53f36db50bcb8a334bad2b6 C:\Program Files\AVAST Software\Avast\ashShell.dll MD5: b821ced9f11f12f5dff8e983fc32aea2 C:\Program Files\AVAST Software\Avast\ashTask.dll MD5: bef4f20a11c0fe612d2d521a502cca52 C:\Program Files\AVAST Software\Avast\ashTaskEx.dll MD5: 1d352baff5a4b2e5e163bb6e652daf49 C:\Program Files\AVAST Software\Avast\aswAux.dll MD5: 5a996ce86bda5ff1b628b21b9871287a C:\Program Files\AVAST Software\Avast\aswCmnBS.dll MD5: 85e7f7d95de30a2008c75726cfc3ad61 C:\Program Files\AVAST Software\Avast\aswCmnIS.dll MD5: 928f0fc896d10b099588a1d5aa46b1bf C:\Program Files\AVAST Software\Avast\aswCmnOS.dll MD5: bdf5080dc5de21a5f662e45d57926233 C:\Program Files\AVAST Software\Avast\aswData.dll MD5: 09cb9ae8bbc2512d9818987e721abe32 C:\Program Files\AVAST Software\Avast\aswEngLdr.dll MD5: 4f91c0b574919537defdb406ffd94430 C:\Program Files\AVAST Software\Avast\aswLog.dll MD5: aee62a34b70cbea34ebe384d529312cb C:\Program Files\AVAST Software\Avast\aswProperty.dll MD5: 388d8dd599c04577edff52e79c451bd7 C:\Program Files\AVAST Software\Avast\aswSqLt.dll MD5: 99d5d540f154f29896c2f570938c6ceb C:\Program Files\AVAST Software\Avast\aswUtil.dll MD5: 328bc79bc53ba7a284c818dde88945d7 C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll MD5: 996e6d052438e8d8dfd501f31560b2e0 C:\Program Files\AVAST Software\Avast\AvastSvc.exe MD5: f7226aa410954185160067d5fa82f3f2 C:\Program Files\AVAST Software\Avast\AvastUI.exe MD5: c4b742a1bac5f35d9223619f94acb45f C:\Program Files\AVAST Software\Avast\CommonRes.dll MD5: 707e5bf1e3f53ea4c17cd44f9b602a1a C:\Program Files\AVAST Software\Avast\defs\12012500\uiExt.dll MD5: 4ab33334ecbce65b1097c47f5f3da330 C:\Program Files\Belkin\F5D8053\BelkinHWStatus.dll MD5: 26b5e3509912e2518f3a0490bd0f12a7 C:\Program Files\Belkin\F5D8053\Belkinwcui.exe MD5: b0767ff3887e2dcd580645d7bf662168 C:\Program Files\Belkin\F5D8053\BelkinwcuiDLL.dll MD5: bd8f2b808ceed4f04575aa885fef302b C:\Program Files\Belkin\F5D8053\blkwcarc.DLL MD5: 78b3dd4e17883cfe0185d3c948f55f0c C:\Program Files\Belkin\F5D8053\W32N55.dll MD5: bea99c8ce8583bd99d0e73ab018f204e C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll MD5: 8a3ba48b5be893e1d81bfac17a3c1b1f C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll MD5: b8e421c0890356cd4a793d8a346d9096 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe MD5: 6e3245df783e58375b3465f03274743e C:\Program Files\Common Files\Java\Java Update\jusched.exe MD5: 7cfc00b4501a14cf369f869ab8e79e68 C:\Program Files\Common Files\Microsoft Shared\Windows Live\msidcrl40.dll MD5: 36b7dddfb2bb90c88ebbb7cb1db306bf C:\Program Files\DAEMON Tools Lite\DTCommonRes.dll MD5: a07e8935cc8dce6db787dc99129ca17c C:\Program Files\DAEMON Tools Lite\DTLite.exe MD5: 5d7e779b3323659d70228446598b3505 C:\Program Files\DAEMON Tools Lite\Engine.dll MD5: 047d41187e1278e5bb8de12b56967917 C:\Program Files\DAEMON Tools Lite\ImgEngine.dll MD5: f841f32ad816dbf130f10d86fab99b1a C:\Program Files\DAEMON Tools Lite\mfc100u.dll MD5: 03e9314004f504a14a61c3d364b62f66 C:\Program Files\DAEMON Tools Lite\MSVCP100.dll MD5: 67ec459e42d3081dd8fd34356f7cafc1 C:\Program Files\DAEMON Tools Lite\MSVCR100.dll MD5: 6827ca29d7ad3595660271f3f05c79b5 C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll MD5: 64c1481b867cc7b45e10a74cc9eb46e4 C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_32_248D3CEB7C787E4E.dll MD5: 3a913a99c665a6c3610241c09439f281 C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_F5A70B61FC3A2BB0.dll MD5: 61980095ae5d02b1e9d2ed604a90c1bf C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll MD5: ab3668c159e1cfea184f72650bd66807 C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll MD5: b92f91fb6cfc4bdfe3af7ffff5356d1f C:\Program Files\Google\Update\1.3.21.93\npGoogleUpdate3.dll MD5: 22f34306124c4d40142b60d6a28c40da C:\Program Files\Google\Update\1.3.21.93\psmachine.dll MD5: 9be4d06394e0861a61399a4becafb9dd C:\Program Files\HP\Digital Imaging\bin\hpotra08.dll MD5: 3814a567bac346d8d210edffeb8cf2ec C:\Program Files\HP\Digital Imaging\bin\hpotra08.rsc MD5: e1f37a47dcb2434b519448115a12b084 C:\Program Files\HP\Digital Imaging\bin\hpotradd.dll MD5: 0a3c6aa4a9fc38c20ba4eac2c3351c05 c:\program files\hp\digital imaging\bin\hpqcxs08.dll MD5: 159fac880722b49645e056a558b03e26 C:\Program Files\HP\Digital Imaging\bin\hpqddcmn.dll MD5: 7da3211ac63edd90b8eca1ca1abfd43b c:\program files\hp\digital imaging\bin\hpqddsvc.dll MD5: d03398b8d124ddff53a6ec542175bab5 C:\Program Files\HP\Digital Imaging\bin\hpqddusr.dll MD5: ba3663e73391164d4ced47fb4405a758 C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll MD5: 3c69ce161c7007e9ad53a325492d446a C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll MD5: bc0281d8fee466527b3b9123b5243a1d C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll MD5: 22a6446883efb70f82ad96e510ad5a1c C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe MD5: b380b5a981d2bfd688fbd97e6f6b39cc C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc MD5: f58f770cab0d8ab4141f95528b7a7a5a C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll MD5: 94152fa61600cd39ece51f620b82342f C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll MD5: 14229263aa19c704e0d6d2e7404a8455 c:\program files\hp\digital imaging\bin\hpslpsvc32.dll MD5: d389c7bd09a403857465509d20aa6e3c C:\Program Files\HP\Digital Imaging\Smart Web Printing\ClipBookDBComponent.dll MD5: c285b5064f4fccc95e0354345681d906 C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll MD5: a24bb1432cd4f6e202dbb5428ea97a0d C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe MD5: 9b4c1dd94be0d6bd64025f39a8f1cd65 C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll MD5: b33ffec7dc55d0445897433c82ceef29 C:\Program Files\HP\Digital Imaging\Smart Web Printing\NeoLoggingLib.dll MD5: b8e4d2756905157f0d034e1355c42d10 C:\Program Files\HP\Digital Imaging\Smart Web Printing\RsrcLoaderLib.dll MD5: 6614a034bb3286ffbcf964267c14e93c C:\Program Files\HP\Digital Imaging\Smart Web Printing\SatelliteENU.dll MD5: 6589c90ffc8eb543586a3099d09261f4 C:\Program Files\HP\Digital Imaging\Smart Web Printing\UtilityLib.dll MD5: 21293443961a4e2597453ee7a9347f22 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe MD5: 69a3f07fad1fed82fb70b561593bbf54 C:\Program Files\Internet Explorer\ieproxy.dll MD5: 53fe2d34b143efdb80685281e751b91c C:\Program Files\Internet Explorer\plugins\nppdf32.dll MD5: 89b42ab664ddd9d69f1a7cb94f0d5985 C:\Program Files\Internet Explorer\xpshims.dll MD5: dc365b6e595683f67bc21a203432e336 C:\Program Files\Java\jre6\bin\jp2ssv.dll MD5: 381b25dc8e958d905b33130d500bbf29 C:\Program Files\Java\jre6\bin\jqs.exe MD5: 1e96525ae85d402f9f8047f8caef5f06 C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll MD5: e3a7850421a4ab8b15fc174eb587bc6b C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll MD5: 3e930c641079443d4de036167a69caa2 C:\Program Files\Messenger\msmsgs.exe MD5: 28a2c0798a72c944d2b2459f28221377 C:\Program Files\Microsoft IntelliType Pro\Components\Commands\dpghnt\dpghnt.dll MD5: 3b027f7898de90e6231eb8fd0922e805 C:\Program Files\Microsoft IntelliType Pro\dpgcmd.dll MD5: 927811921bf32c9a2dfce1134243288e C:\Program Files\Microsoft IntelliType Pro\dpgmkb.dll MD5: 47bf93aa6a6cf1ff6762fb99a2f57eff C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe MD5: 25c3ec3380b80a697660871529c8d28a C:\Program Files\Microsoft IntelliType Pro\itype.exe MD5: d1a573a0c14f57da106e798a525fe0fe C:\Program Files\Microsoft IntelliType Pro\srres.dll MD5: 47aff25b68ce4885fec6cfdef8febb5c C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll MD5: ad2e6fb5da47fb720f39186282dbe4fd C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll MD5: 53fe2d34b143efdb80685281e751b91c C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll MD5: 29b060079a9129553e3fa75edb8243bb C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll MD5: 4c23e74ef7f99d8b07c9aa7dc087e200 C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll MD5: 58d5bfdf3adf49fe9cabd78cc61d92f6 C:\Program Files\PC Connectivity Solution\ServiceLayer.exe MD5: 29b060079a9129553e3fa75edb8243bb C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll MD5: 4c23e74ef7f99d8b07c9aa7dc087e200 C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll MD5: 5a9e77c71d6d7030bc170dd7cf04cf5d c:\program files\yahoo!\companion\installs\cpn\yt.dll MD5: 5d7b1592036c80535872d6a20931ca7a C:\PROGRA~1\COMMON~1\MICROS~1\IME12L~1\imesc\IMSCMig.exe MD5: 310c15fd8358b2c4cd7a5b98a112883f C:\WINDOWS\AppPatch\AcGenral.DLL MD5: bcd0a5c3c1715c363cb3f321abe31514 C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL MD5: c34d0189e37cde86947b889fbeb81c7a C:\WINDOWS\Downloaded Program Files\ImageUploader5.ocx MD5: 26faa936a2e366bc0873c7b32fd37fb5 C:\WINDOWS\Downloaded Program Files\npsoe.dll MD5: bb7fcdcd4de287340b5c1bb1949ad3c6 C:\WINDOWS\Downloaded Program Files\qsax.dll MD5: 5c230948dd6652228f88ca7ae6cb276c C:\WINDOWS\gdrv.sys MD5: f6d01b49cefe36286a1fd8bae8f2d6a3 C:\WINDOWS\KHALMNPR.EXE MD5: ab87eeffd18f2baafc274e7075ea6c67 C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll MD5: a6543bd31e3b48f70da57fb01f13d934 C:\WINDOWS\RTHDCPL.EXE MD5: f475daa3cf6d19da49be7bac0a966db3 C:\WINDOWS\system32\Adobe\Director\np32dsw.dll MD5: 21918247c1fc32f3a1cb1d0e90e3e4f5 C:\WINDOWS\system32\AegisE5.dll MD5: 1ede3c09fba9e11cc215fa8f4fb5999d C:\WINDOWS\system32\ckldrv.sys MD5: 93afb83fbc1f9443cac722fca63d73bf C:\WINDOWS\system32\COMCTL32.dll MD5: ed0c0df222209e43ad9afbf3fe87dde0 C:\WINDOWS\system32\comsvcs.dll MD5: 8fcf03e4d7be9b5587ccf11719959006 C:\WINDOWS\system32\corpol.dll MD5: 133f82b6391f3390becfa429c23fb2be C:\WINDOWS\System32\Crypserv.exe MD5: 51dc06501a0b661f29d11dea6aaa5c54 C:\WINDOWS\system32\CRYPT32.dll MD5: c14350fc0d47d806699c4f907fc6785b C:\WINDOWS\system32\cryptnet.dll MD5: 515a7fae2070c2b0242b2353443e2f11 C:\WINDOWS\System32\CSCDLL.dll MD5: dd40363abad230a84c5e2178b11efa88 C:\WINDOWS\system32\CSRSRV.dll MD5: 0607cbc6fa20114cb491efe4b2f9efad C:\WINDOWS\system32\d3d9.dll MD5: 56adb11f7d4d0816c0be1e701c1b5e52 C:\WINDOWS\system32\D3DIM700.DLL MD5: e2092f0a1d7abc243f9c2362483d150d C:\WINDOWS\System32\dimsntfy.dll MD5: 389496118b3b03c2328024af320132ac C:\WINDOWS\system32\DNSAPI.dll MD5: 5f7e24fa9eab896051ffb87f840730d2 c:\windows\system32\dnsrslvr.dll MD5: 15e655baa989444f56787ef558823643 C:\WINDOWS\system32\DRIVERS\AegisP.sys MD5: 1e44bc1e83d8fd2305f8d452db109cf9 C:\WINDOWS\System32\drivers\afd.sys MD5: 8e6f9123631db9b4a7b1cd99f7ee694f C:\WINDOWS\system32\DRIVERS\AmeAtmPc.sys MD5: ae76348a2605fb197fa8ff1d6f547836 C:\WINDOWS\system32\DRIVERS\atmlane.sys MD5: e7ef69b38d17ba01f914ae8f66216a38 C:\WINDOWS\system32\DRIVERS\atmuni.sys MD5: 1fb582b783650ad538560e0c279c3078 C:\WINDOWS\System32\Drivers\AWISp50.sys MD5: 4a8a2aa0706b659175169decf198e9d7 C:\WINDOWS\system32\drivers\ccdcmb.sys MD5: fd3e61831095ac62e6840d986b5a2016 C:\WINDOWS\system32\drivers\ccdcmbo.sys MD5: 555e54ac2f601a8821cef58961653991 C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys MD5: fd9fc82f134b1c91004ffc76a5ae494b C:\WINDOWS\system32\DRIVERS\ENTECH.sys MD5: 9671f1c61fc014f6232eb6ea246be3c3 C:\WINDOWS\System32\DRIVERS\epflt15.SYS MD5: ce6ec335286da93338e43acff2c5c120 C:\WINDOWS\System32\DRIVERS\esflt15.SYS MD5: d03d10f7ded688fecf50f8fbf1ea9b8a C:\WINDOWS\system32\DRIVERS\HPZid412.sys MD5: 89f41658929393487b6b7d13c8528ce3 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys MD5: 3fa98339e8d9e007726be62f231e2015 C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys MD5: f259f758e04d8fb8d48c6cdbe45223e8 C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys MD5: ca26e46ec8891058c9e10363df4e4650 C:\WINDOWS\System32\Drivers\LUsbFilt.Sys MD5: 7d304a5eb4344ebeeab53a2fe3ffb9f0 C:\WINDOWS\system32\DRIVERS\mrxsmb.sys MD5: fbbb1a51eb6e43b40144a05932766d6c C:\WINDOWS\System32\DRIVERS\MS1000.sys MD5: 0109c4f3850dfbab279542515386ae22 C:\WINDOWS\system32\DRIVERS\ndistapi.sys MD5: 02e96113511171ba7559386d10d3daea C:\WINDOWS\system32\drivers\nmwcdnsu.sys MD5: fb09150cfc7a499a53c308d04841a3bd C:\WINDOWS\system32\drivers\nmwcdnsuc.sys MD5: 18c9b152da7bea76b2f9e4b6412e0aaf C:\WINDOWS\system32\DRIVERS\nv4_mini.sys MD5: fd2041e9ba03db7764b2248f02475079 C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys MD5: 01524cd237223b18adbb48f70083f101 C:\WINDOWS\system32\DRIVERS\rawwan.sys MD5: c2a6f7f35e617744a65dbfb0c0a64adc C:\WINDOWS\system32\DRIVERS\rt2870.sys MD5: 89619ef503f949fae09252a8b883ee11 C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys MD5: 08baf30f6de95814f58af9ce7bbc5614 C:\WINDOWS\system32\drivers\RtkHDAud.sys MD5: 71e276f6d189413266ea22171806597b C:\WINDOWS\System32\Drivers\sptd.sys MD5: 47ddfc2f003f7f9f0592c6874962a2e7 C:\WINDOWS\system32\DRIVERS\srv.sys MD5: 587e643a4e2ffd9a00f114b057ceb773 C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys MD5: fca6a196d47cb972a0e4adc0db9cd17c C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys MD5: 6ff66513d372d479ef1810223c8d20ce C:\WINDOWS\system32\DRIVERS\WudfPf.sys MD5: 2b1d4e15d5143757c494ba05832fb4a6 C:\WINDOWS\system32\EBPMON24.DLL MD5: f5b754cdea20bbb3a31e16a776ede6d6 C:\WINDOWS\system32\ESENT.dll MD5: 0a0c8331e26f1ec7741cce6a91e9167d C:\WINDOWS\system32\hpf3l082.dll MD5: 986f5143b56b8e4889cac91ea81583dd C:\WINDOWS\system32\hpwwiax5.dll MD5: 2969d26eee289be7422aa46fc55f4e38 c:\windows\system32\hpzinw12.dll MD5: bafc9706bdf425a02b66468ab2605c59 c:\windows\system32\hpzipm12.dll MD5: 0b8fb29cda02015448c9f5260a013f19 C:\WINDOWS\system32\IEFRAME.dll MD5: 515aaa9c87d5c475b06dfeba3706d74f C:\WINDOWS\system32\iepeers.dll MD5: 1ab894fa897e26b23ca53beed72f61f4 C:\WINDOWS\system32\iertutil.dll MD5: 024dc0f68df5fd6ae9dd82dfbaf479d6 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE MD5: 0689622e6484934eb6e5f4d3a96311f9 C:\WINDOWS\system32\jscript.dll MD5: 9722c23fded742913fd13ed1504d6d86 C:\WINDOWS\system32\jsproxy.dll MD5: a525c96c51d55111fdf3bea9ffffc7ae C:\WINDOWS\system32\kerberos.dll MD5: bd31dc6dbe9333c4fbd4bdf0899f2160 C:\WINDOWS\system32\LSASRV.dll MD5: e9f427ef46965d33e878a507a2f5ccb6 C:\WINDOWS\system32\Macromed\Flash\Flash11e.ocx MD5: de3745a51b7ac7fedc356a83f76c8023 C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MD5: 3f790874a85819e94574f3e7af9c5806 C:\WINDOWS\system32\msctfime.ime MD5: 561b3e96164c918e0564cab3d21ce871 C:\WINDOWS\system32\msfeeds.dll MD5: dd8d655e1881b70a5259a23a6018a6c2 C:\WINDOWS\system32\mshtml.dll MD5: 8c22083ed515dc94d575438662f0be6a C:\WINDOWS\system32\msi.dll MD5: 943337d786a56729263071623bbb9de5 C:\WINDOWS\System32\mswsock.dll MD5: 062f837c1fbdb6a0a75f82efc2ee8e74 C:\WINDOWS\system32\netshell.dll MD5: f8f0d25ca553e39dde485d8fc7fcce89 C:\WINDOWS\system32\ntdll.dll MD5: 3da3f03e76a6d9630c148efe0fc74230 C:\WINDOWS\system32\nvapi.dll MD5: 229ef72a47f7ef9233f3a52fa519e01b C:\WINDOWS\system32\NvCpl.dll MD5: 0e2752b270f5a68d459f7927a81b5afa C:\WINDOWS\system32\NvMcTray.dll MD5: a8c1e6ff53fb0628a302843ea5fa5ab6 C:\WINDOWS\System32\nvsvc32.exe MD5: 40b0f98bad16ad5def894e88c3ef8014 C:\WINDOWS\system32\ODBC32.dll MD5: 6bad1bed9872e62049e487fb91ae2f3a C:\WINDOWS\system32\ole32.dll MD5: 20200ee3cfe10e9f0c028d8653be11c6 C:\WINDOWS\system32\OLEACC.dll MD5: 1b2be5777f69a71778f52ffee1c798d6 C:\WINDOWS\system32\OLEAUT32.dll MD5: d4502f124289a31976130cccb014c9aa C:\WINDOWS\system32\RPCRT4.dll MD5: 72451fd61ddbb0a1fb071b7c3cde5594 C:\WINDOWS\system32\rsvpsp.dll MD5: a645a78fcdabad67067324d7e6cd9f79 C:\WINDOWS\system32\schannel.dll MD5: 26cb10fa893f940ab09713ff46dcdade C:\WINDOWS\system32\SHDOCVW.dll MD5: e86423aa9aa8c382af02b94a058dc2aa C:\WINDOWS\system32\SHELL32.dll MD5: 99bc0b50f511924348be19c7c7313bbf C:\WINDOWS\system32\SHSVCS.dll MD5: 73347eca7a6d327ba43c40cb56bca659 C:\WINDOWS\System32\spool\PRTPROCS\W32X86\hpfpp082.dll MD5: 60784f891563fb1b767f70117fc2428f C:\WINDOWS\System32\spoolsv.exe MD5: 3a7c3cbe5d96b8ae96ce81f0b22fb527 c:\windows\system32\srvsvc.dll MD5: 3caeae7608f1bd7ba873a3b02895b106 C:\WINDOWS\system32\sti.dll MD5: 496ce99bbbb7680323921df30b405c36 C:\WINDOWS\system32\urlmon.dll MD5: a93aee1928a9d7ce3e16d24ec7380f89 c:\windows\system32\userinit.exe MD5: 9e03dc5ab51cfd0190541ce2038d819d C:\WINDOWS\system32\USP10.dll MD5: 2c1d59933077ba0d8a64cb1fb9ef8638 C:\WINDOWS\system32\wdfmgr.exe MD5: 684559a03cbc1d05ba120a18b0d8ba5d c:\windows\system32\WINHTTP.dll MD5: 552263502ea8c24d301a0c43ff90b3ed C:\WINDOWS\system32\WININET.dll MD5: 4a953f13942867ba8fb41f141ec1b80c C:\WINDOWS\system32\WINMM.dll MD5: d72b9ec3337b247a666f098f3d6b43de C:\WINDOWS\System32\winrnr.dll MD5: 8c7dca4b158bf16894120786a7a5f366 C:\WINDOWS\system32\winsrv.dll MD5: 3df48b4e91f361ed22abeb3dde366e30 C:\WINDOWS\system32\WINTRUST.dll MD5: 2cc34e8bb667eef78899546e12649196 C:\WINDOWS\system32\WlNotify.dll MD5: eed1b6c2b6dd5c2fc1f6709102dc3191 c:\windows\system32\WUDFPlatform.dll MD5: 16403217ab6fc5c30c14c6b12098ad4b C:\WINDOWS\system32\xpsp2res.dll MD5: d5e459bed3db9cf7fc6cc1455f177d2d C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.DLL MD5: 0b3595a4ff0b36d68e5fc67fd7d70fdc C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\MSVCP80.dll MD5: c9564cf4976e7e96b4052737aa2492b4 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\MSVCR80.dll MD5: 4c39358ebdd2ffcd9132a30e1ec31e16 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\MSVCP90.dll MD5: cdbe9690cf2b8409facad94fac9479c9 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\MSVCR90.dll MD5: ca6ade4f7761bb15b3325356dc3b82bb C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll MD5: fbfca1a574d47ee575448b719cbbf2e4 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\MFC90ENU.DLL MD5: 736b12b725aeb2b07f0241a9f680cb10 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MD5: 33d9b7bb7ba323bafe489df033dac824 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\gdiplus.dll The following file(s) must be uploaded for server-side scanning: C:\WINDOWS\system32\ckldrv.sys Upload started - 1 file(s) ckldrv.sys (21638) Upload speed - 5 KB/s Upload finished - 1 uploaded, 0 failed The uploaded file(s) were found clean. Scan finished - communication took 6 sec Total traffic - 0.03 MB sent, 0.84 KB recvd Scanned 630 files and modules - 40 seconds ============================================================================== Just to let you know my Avast antivirus is still in a disabled state (I haven't dared to try and re-enable anything).