help my laptop has herpies

OTL logfile created on: 4/21/2012 7:50:44 AM - Run 1
OTL by OldTimer - Version 3.2.40.0 Folder = C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.98 Mb Total Physical Memory | 180.23 Mb Available Physical Memory | 35.27% Memory free
1.22 Gb Paging File | 0.82 Gb Available in Paging File | 67.34% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 58.20 Gb Free Space | 78.10% Space Free | Partition Type: NTFS

Computer Name: PUNK | User Name: Home | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\Home\My Documents\Downloads\ProcessExplorer\procexp.exe (Sysinternals - www.sysinternals.com)
PRC - C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
PRC - C:\WINDOWS\PixArt\Pac7302\Monitor.exe (PixArt Imaging Incorporation)


========== Modules (No Company Name) ==========

MOD - C:\WINDOWS\system32\msjetoledb40.dll ()
MOD - C:\WINDOWS\system32\tsd32.dll ()


========== Win32 Services (SafeList) ==========

SRV - (AppMgmt) – %SystemRoot%\System32\appmgmts.dll File not found
SRV - (AdobeFlashPlayerUpdateSvc) – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (FsUsbExService) – C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)


========== Driver Services (SafeList) ==========

DRV - (WDICA) – File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (Changer) – File not found
DRV - (FsUsbExDisk) – C:\WINDOWS\system32\FsUsbExDisk.Sys ()
DRV - (sscdmdm) – C:\WINDOWS\system32\drivers\sscdmdm.sys (MCCI Corporation)
DRV - (sscdserd) SAMSUNG Mobile Modem Diagnostic Serial Port (WDM) – C:\WINDOWS\system32\drivers\sscdserd.sys (MCCI Corporation)
DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) – C:\WINDOWS\system32\drivers\sscdbus.sys (MCCI Corporation)
DRV - (sscdmdfl) – C:\WINDOWS\system32\drivers\sscdmdfl.sys (MCCI Corporation)
DRV - (Tcpip6) – C:\WINDOWS\system32\drivers\tcpip6.sys (Microsoft Corporation)
DRV - (BCM43XX) – C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (NwlnkIpx) – C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)
DRV - (nm) – C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (PAC7302) – C:\WINDOWS\system32\drivers\PAC7302.SYS (PixArt Imaging Inc.)
DRV - (smserial) – C:\WINDOWS\system32\drivers\smserial.sys (Motorola Inc.)
DRV - (nvnforce) Service for NVIDIA® nForce™ – C:\WINDOWS\system32\drivers\nvapu.sys (NVIDIA Corporation)
DRV - (nvax) Service for NVIDIA® nForce™ – C:\WINDOWS\system32\drivers\nvax.sys (NVIDIA Corporation)
DRV - (nv_agp) – C:\WINDOWS\system32\drivers\nv_agp.SYS (NVIDIA Corporation)
DRV - (NwlnkNb) – C:\WINDOWS\system32\drivers\nwlnknb.sys (Microsoft Corporation)
DRV - (NwlnkSpx) – C:\WINDOWS\system32\drivers\nwlnkspx.sys (Microsoft Corporation)
DRV - (rtl8139) Realtek RTL8139(A/B/C) – C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (tiumfwl) – C:\WINDOWS\system32\drivers\tiumfwl.sys (Texas Instruments Inc.)
DRV - (DevUpper) – C:\WINDOWS\system32\drivers\tiumflt.sys (Texas Instruments Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?ilc=16
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = DE 8A 50 E1 94 E3 CC 01 [binary data]
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\..\SearchScopes\{190D7610-5E23-46BE-9C7D-8CD0AF67A06E}: "URL" = http://search.yahoo.com/search?p={searchte…0206,6901,0,8,0
IE - HKU\S-1-5-21-507921405-1500820517-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo.com/search?fr=mkg030&p;="
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/?ilc=8"
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=mkg030&p;="
FF - prefs.js..network.proxy.type: 4


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_233.dll ()
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\[removed]/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/03/21 12:15:06 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/04/13 13:28:45 | 000,000,000 | —D | M]

[2012/01/20 21:39:38 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Home\Application Data\Mozilla\Extensions
[2012/04/21 03:30:28 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Home\Application Data\Mozilla\Firefox\Profiles\summpiu9.default\extensions
[2012/02/11 13:31:02 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Documents and Settings\Home\Application Data\Mozilla\Firefox\Profiles\summpiu9.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012/01/13 10:12:58 | 000,000,000 | —D | M] (SweetIM Toolbar for Firefox) – C:\Documents and Settings\Home\Application Data\Mozilla\Firefox\Profiles\summpiu9.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012/01/20 21:45:56 | 000,000,000 | —D | M] (Microsoft Choice Guard) – C:\Documents and Settings\Home\Application Data\Mozilla\Firefox\Profiles\summpiu9.default\extensions\ChoiceGuard@Microsoft
[2012/01/05 06:17:18 | 000,003,915 | —- | M] () – C:\Documents and Settings\Home\Application Data\Mozilla\Firefox\Profiles\summpiu9.default\searchplugins\sweetim.xml
[2011/12/26 03:39:58 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2012/01/13 10:12:57 | 000,000,000 | —D | M] (QuestBasic) – C:\Program Files\Mozilla Firefox\extensions\{1CE72EFA-E2D1-48FA-A5EC-D7111C2C5BB6}
[2012/01/13 10:26:00 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
() (No name found) – C:\DOCUMENTS AND SETTINGS\HOME\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\SUMMPIU9.DEFAULT\EXTENSIONS\[removed]
[2012/03/21 12:15:04 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2007/03/09 19:16:44 | 000,189,496 | —- | M] (Yahoo! Inc.) – C:\Program Files\mozilla firefox\plugins\npyaxmpb.dll
[2012/03/04 17:58:18 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/03/04 17:58:18 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2012/04/21 07:52:46 | 000,000,737 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-507921405-1500820517-682003330-1004\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-507921405-1500820517-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D2B4A2D0-04E5-4060-A62D-A427F6A1195A}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Home\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Home\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/12/17 03:08:18 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - C:\WINDOWS\System32\iprip.dll (Microsoft Corporation)
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: wave - C:\WINDOWS\System32\serwvdrv.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 180 Days ==========

[2012/04/14 08:46:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Help
[2012/04/14 08:46:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Help
[2012/04/14 07:34:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRM
[2012/04/14 06:54:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\m
[2012/04/14 02:33:42 | 000,000,000 | —D | C] – C:\WINDOWS\Symbols
[2012/04/11 05:58:29 | 000,000,000 | R-SD | C] – C:\Documents and Settings\Home\My Documents\My Stationery
[2012/04/11 05:05:34 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\PC Optimizer Pro
[2012/04/11 04:35:01 | 000,000,000 | —D | C] – C:\8541570cf358c25064d253ab09ff
[2012/04/10 11:07:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\New Folder
[2012/04/02 01:13:56 | 000,418,464 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/03/29 03:40:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\FreeFileViewer
[2012/03/29 02:30:29 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\FreeFileViewer
[2012/03/28 09:18:01 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts
[2012/03/20 09:52:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\My Art
[2012/03/20 02:50:33 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Facebook
[2012/03/20 02:35:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\enchant
[2012/03/20 02:35:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\.purple
[2012/03/20 02:33:51 | 000,000,000 | —D | C] – C:\Program Files\Pidgin
[2012/03/19 12:35:06 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Samsung New PC Studio
[2012/03/19 12:33:17 | 000,110,280 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdserd.sys
[2012/03/19 12:33:15 | 000,012,616 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdcmnt.sys
[2012/03/19 12:33:15 | 000,012,616 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdcm.sys
[2012/03/19 12:33:14 | 000,132,424 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdmdm.sys
[2012/03/19 12:33:14 | 000,014,920 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdmdfl.sys
[2012/03/19 12:33:13 | 000,104,648 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdbus.sys
[2012/03/19 12:33:13 | 000,012,488 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdwhnt.sys
[2012/03/19 12:33:13 | 000,012,488 | —- | C] (MCCI Corporation) – C:\WINDOWS\System32\drivers\sscdwh.sys
[2012/03/19 12:32:31 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Samsung
[2012/03/19 12:31:38 | 000,238,952 | —- | C] (Teruten) – C:\WINDOWS\System32\FsUsbExService.Exe
[2012/03/19 12:30:56 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Samsung
[2012/03/19 12:30:27 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\Samsung
[2012/03/19 12:28:38 | 000,000,000 | —D | C] – C:\Program Files\MarkAny
[2012/03/19 12:24:50 | 000,000,000 | —D | C] – C:\Program Files\Samsung
[2012/03/19 12:02:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Downloaded Installations
[2012/03/15 05:04:03 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2012/03/15 05:03:49 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2012/03/15 05:03:42 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2012/03/15 05:03:40 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ipsink.ax
[2012/03/15 05:03:40 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2012/03/15 05:03:30 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2012/03/15 05:03:20 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2012/03/15 05:03:09 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2012/03/15 05:03:02 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2012/03/15 05:01:48 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kswdmcap.ax
[2012/03/15 05:01:48 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2012/03/15 05:01:46 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kstvtune.ax
[2012/03/15 05:01:46 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2012/03/15 05:01:44 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vfwwdm32.dll
[2012/03/15 05:01:44 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2012/03/15 05:01:43 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksxbar.ax
[2012/03/15 05:01:43 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2012/03/15 04:55:55 | 000,458,496 | —- | C] (PixArt Imaging Inc.) – C:\WINDOWS\System32\drivers\PAC7302.SYS
[2012/03/15 04:55:55 | 000,006,656 | —- | C] (PixArt Imaging Inc.) – C:\WINDOWS\System32\CoInst_071029.dll
[2012/03/15 04:55:49 | 000,141,312 | —- | C] (PixArt Imaging Incorporation) – C:\WINDOWS\System32\SP7302.AX
[2012/03/15 04:55:47 | 000,000,000 | —D | C] – C:\WINDOWS\PixArt
[2012/03/15 04:55:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\JC-AM100
[2012/03/15 04:55:46 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\JC-AM100
[2012/03/15 04:55:31 | 000,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2012/03/15 04:20:30 | 000,060,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbaudio.sys
[2012/03/13 23:42:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\resumes
[2012/03/13 22:54:03 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Home\Recent
[2012/03/09 09:04:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\My Widgets
[2012/03/06 06:10:42 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2012/03/03 03:04:20 | 000,000,000 | —D | C] – C:\e
[2012/03/03 03:03:56 | 000,000,000 | —D | C] – C:\Data
[2012/02/29 10:10:16 | 000,148,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imagehlp.dll
[2012/02/21 06:50:24 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2012/02/21 06:16:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\FileTypeAssistant
[2012/02/17 06:06:47 | 000,000,000 | —D | C] – C:\NBRT
[2012/02/17 04:11:15 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2012/02/17 02:53:27 | 000,000,000 | —D | C] – C:\fc87736a1b3b696bf0090912da
[2012/02/11 13:27:10 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Yahoo! Messenger
[2012/02/11 10:54:04 | 000,000,000 | -H-D | C] – C:\WINDOWS\PIF
[2012/02/08 09:48:24 | 000,000,000 | —D | C] – C:\Program Files\File Type Assistant
[2012/02/08 09:46:58 | 000,000,000 | —D | C] – C:\Program Files\FreeFileViewer
[2012/02/08 09:46:40 | 000,000,000 | —D | C] – C:\Program Files\W3i
[2012/02/08 09:46:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\W3i
[2012/02/08 09:46:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\InstallIQ Updater
[2012/02/08 09:45:25 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2012/02/08 09:44:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2012/02/08 09:44:53 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Yahoo!
[2012/02/08 09:44:42 | 000,000,000 | —D | C] – C:\Program Files\Yahoo!
[2012/02/08 08:31:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\ie8updates
[2012/01/27 21:42:00 | 000,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2012/01/27 21:41:55 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbprint.sys
[2012/01/27 21:41:49 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2012/01/27 21:38:24 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\HP
[2012/01/27 19:18:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\MFAData
[2012/01/27 19:09:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\AVG
[2012/01/27 19:08:25 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\TEMP
[2012/01/25 19:56:00 | 000,000,000 | —D | C] – C:\Program Files\MSXML 4.0
[2012/01/21 07:41:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\Verizon Media Manager
[2012/01/21 07:41:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Verizon
[2012/01/21 07:40:27 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Verizon
[2012/01/20 23:47:19 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2012/01/20 23:47:18 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2012/01/20 23:47:17 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2012/01/20 23:47:16 | 000,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2012/01/20 23:47:15 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2012/01/20 23:47:15 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2012/01/20 23:47:12 | 000,000,000 | —D | C] – C:\ac600ec7d82678fe571aebdb00
[2012/01/20 22:32:30 | 000,000,000 | —D | C] – C:\Program Files\Verizon
[2012/01/20 22:10:30 | 000,000,000 | —D | C] – C:\Program Files\Book Search Pro
[2012/01/20 22:10:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Book Search Pro
[2012/01/20 21:44:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
[2012/01/20 21:42:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office Live Add-in
[2012/01/20 21:42:08 | 000,000,000 | —D | C] – C:\Program Files\Windows Live SkyDrive
[2012/01/20 21:42:07 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Live
[2012/01/20 21:41:20 | 000,000,000 | —D | C] – C:\WINDOWS\System32\LogFiles
[2012/01/20 21:40:33 | 000,000,000 | —D | C] – C:\Program Files\EazyPlanet
[2012/01/20 21:40:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\EazyPlanet
[2012/01/20 21:39:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\Start Menu\Programs\Administrative Tools
[2012/01/20 21:36:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Powertoys for Windows XP
[2012/01/20 21:36:20 | 000,000,000 | —D | C] – C:\WINDOWS\Downloaded Installations
[2012/01/20 20:32:47 | 000,000,000 | —D | C] – C:\Program Files\QuestBasic
[2012/01/19 04:20:49 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2012/01/16 12:48:28 | 000,000,000 | —D | C] – C:\WINDOWS\System32\LogFiles(2)
[2012/01/14 01:32:37 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Google
[2012/01/14 01:30:58 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Google
[2012/01/14 01:30:43 | 000,000,000 | —D | C] – C:\Program Files\Google
[2012/01/14 01:30:43 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google
[2012/01/13 04:03:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\My Documents\My Videos
[2012/01/13 04:03:53 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2012/01/11 21:26:13 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\PCHealth
[2012/01/10 04:19:35 | 000,000,000 | —D | C] – C:\Program Files\Microsoft.NET
[2012/01/09 02:29:45 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2012/01/09 01:03:56 | 000,924,632 | —- | C] (Mozilla Corporation) – C:\WINDOWS\System32\drivers\etc\lmhosts
[2012/01/09 00:38:49 | 000,000,000 | —D | C] – C:\WINDOWS\System32\NtmsData
[2012/01/05 06:16:37 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SweetIM
[2012/01/03 15:51:52 | 000,000,000 | —D | C] – C:\511897de387e09a21e88
[2012/01/03 13:16:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2012/01/03 13:16:13 | 000,000,000 | —D | C] – C:\Program Files\MSBuild
[2012/01/03 13:15:46 | 000,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2012/01/03 12:54:14 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\school
[2012/01/01 05:13:34 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Identities
[2012/01/01 01:10:09 | 000,000,000 | —D | C] – C:\117fe48c61825de90f2d
[2011/12/31 00:30:20 | 000,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2011/12/31 00:25:03 | 000,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2011/12/30 23:46:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\My Received Files
[2011/12/30 03:54:03 | 000,000,000 | —D | C] – C:\Program Files\Skype
[2011/12/30 03:53:49 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Skype
[2011/12/27 22:32:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Tracing
[2011/12/27 06:32:03 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2011/12/27 06:26:37 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Sync Framework
[2011/12/27 06:11:51 | 003,426,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\d3dx9_32.dll
[2011/12/27 06:09:01 | 000,000,000 | —D | C] – C:\Program Files\Microsoft SQL Server Compact Edition
[2011/12/27 05:47:49 | 000,000,000 | —D | C] – C:\Program Files\Microsoft
[2011/12/27 05:46:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\microsoft
[2011/12/27 05:43:16 | 000,000,000 | —D | C] – C:\Program Files\Windows Live
[2011/12/27 05:34:28 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Windows Live
[2011/12/27 05:20:22 | 000,017,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2011/12/27 05:17:21 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Connect 2
[2011/12/27 05:04:55 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\UMDF
[2011/12/27 03:39:18 | 000,164,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\COMCT232.OCX
[2011/12/27 03:38:57 | 000,608,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\COMCTL32.OCX
[2011/12/26 04:15:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\My Documents\Downloads
[2011/12/26 03:40:34 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Mozilla
[2011/12/26 03:40:34 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Mozilla
[2011/12/26 03:39:48 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2011/12/23 22:56:12 | 038,808,920 | —- | C] (Microsoft Corporation) – C:\Documents and Settings\Home\My Documents\FileFormatConverters.exe
[2011/12/19 13:28:00 | 000,274,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2011/12/19 13:28:00 | 000,016,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2011/12/19 13:18:21 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\MedImage LE
[2011/12/18 03:13:06 | 000,237,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2011/12/17 21:53:31 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidserv.dll
[2011/12/17 20:59:42 | 000,000,000 | —D | C] – C:\Program Files\MSECache
[2011/12/17 20:35:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Temp
[2011/12/17 19:37:50 | 000,028,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mdimon.dll
[2011/12/17 19:36:59 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office
[2011/12/17 19:36:39 | 000,000,000 | —D | C] – C:\Program Files\Common Files\L&H;
[2011/12/17 19:36:23 | 000,000,000 | —D | C] – C:\Program Files\Microsoft ActiveSync
[2011/12/17 19:36:12 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DESIGNER
[2011/12/17 19:36:06 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2011/12/17 19:35:57 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio
[2011/12/17 19:35:28 | 000,000,000 | —D | C] – C:\WINDOWS\SHELLNEW
[2011/12/17 19:34:22 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2011/12/17 19:31:59 | 000,000,000 | RH-D | C] – C:\MSOCache
[2011/12/17 18:46:51 | 000,012,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mouhid.sys
[2011/12/17 18:46:46 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidserv.dll
[2011/12/17 18:46:40 | 000,010,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidusb.sys
[2011/12/17 05:09:46 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe AIR
[2011/12/17 05:09:42 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Adobe
[2011/12/17 05:08:02 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2011/12/17 05:08:02 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2011/12/17 05:06:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Adobe
[2011/12/17 05:03:42 | 000,070,304 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/12/17 05:02:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Macromedia
[2011/12/17 04:59:00 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2011/12/17 04:53:12 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Home\IECompatCache
[2011/12/17 04:52:58 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Home\PrivacIE
[2011/12/17 04:49:53 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Home\IETldCache
[2011/12/17 04:33:57 | 000,602,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2011/12/17 04:33:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2011/12/17 04:33:56 | 002,000,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2011/12/17 04:33:55 | 011,082,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2011/12/17 04:33:55 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2011/12/17 04:32:15 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2011/12/17 04:22:36 | 000,456,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2011/12/17 04:22:33 | 000,139,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwd.sys
[2011/12/17 04:22:30 | 000,010,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndistapi.sys
[2011/12/17 04:21:56 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mup.sys
[2011/12/17 04:19:37 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2011/12/17 04:19:25 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2011/12/17 04:19:12 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2011/12/17 04:19:00 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2011/12/17 04:19:00 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2011/12/17 04:18:24 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2011/12/17 04:17:43 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/12/17 04:17:26 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2011/12/17 04:15:01 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2011/12/17 04:15:01 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2011/12/17 04:14:06 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2011/12/17 04:10:38 | 000,730,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2011/12/17 04:10:37 | 002,148,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2011/12/17 04:10:36 | 002,192,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2011/12/17 04:10:36 | 002,027,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2011/12/17 04:09:55 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2011/12/17 04:09:33 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2011/12/17 04:09:29 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2011/12/17 04:08:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011/12/17 04:07:25 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2011/12/17 04:07:12 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atl.dll
[2011/12/17 04:07:10 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2011/12/17 04:07:08 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2011/12/17 04:05:10 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Home\UserData
[2011/12/17 04:05:02 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2011/12/17 03:55:14 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2011/12/17 03:55:14 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2011/12/17 03:55:13 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2011/12/17 03:55:07 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2011/12/17 03:55:07 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2011/12/17 03:55:06 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2011/12/17 03:54:52 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2011/12/17 03:54:52 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2011/12/17 03:54:52 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2011/12/17 03:54:52 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2011/12/17 03:54:52 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2011/12/17 03:54:52 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2011/12/17 03:54:52 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aaclient.dll
[2011/12/17 03:54:52 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2011/12/17 03:54:52 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2011/12/17 03:54:52 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2011/12/17 03:54:52 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2011/12/17 03:54:51 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2011/12/17 03:54:51 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2011/12/17 03:54:51 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2011/12/17 03:54:51 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2011/12/17 03:54:50 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2011/12/17 03:54:50 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2011/12/17 03:54:50 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2011/12/17 03:54:50 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2011/12/17 03:54:50 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2011/12/17 03:54:50 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2011/12/17 03:54:50 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2011/12/17 03:54:50 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2011/12/17 03:54:49 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2011/12/17 03:54:48 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2011/12/17 03:54:48 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2011/12/17 03:54:48 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2011/12/17 03:54:48 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2011/12/17 03:54:47 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2011/12/17 03:54:47 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2011/12/17 03:54:47 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2011/12/17 03:54:47 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2011/12/17 03:54:47 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2011/12/17 03:54:47 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2011/12/17 03:54:47 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2011/12/17 03:54:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2011/12/17 03:54:46 | 003,405,130 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2011/12/17 03:54:46 | 003,405,130 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv4_disp.dll
[2011/12/17 03:54:46 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2011/12/17 03:54:46 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2011/12/17 03:54:46 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2011/12/17 03:54:46 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2011/12/17 03:54:45 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2011/12/17 03:54:45 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2011/12/17 03:54:45 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2011/12/17 03:54:45 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2011/12/17 03:54:45 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2011/12/17 03:54:44 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2011/12/17 03:54:44 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2011/12/17 03:54:44 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2011/12/17 03:54:44 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2011/12/17 03:54:44 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2011/12/17 03:54:44 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2011/12/17 03:54:44 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2011/12/17 03:54:44 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2011/12/17 03:54:44 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2011/12/17 03:54:43 | 000,347,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2011/12/17 03:54:43 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2011/12/17 03:54:43 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2011/12/17 03:54:41 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\dllcache\slrundll.exe
[2011/12/17 03:54:41 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2011/12/17 03:54:40 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2011/12/17 03:54:40 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2011/12/17 03:54:40 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2011/12/17 03:54:39 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2011/12/17 03:54:38 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2011/12/17 03:54:15 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd(2).exe
[2011/12/17 03:54:15 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\evntcmd.exe
[2011/12/17 03:54:15 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\evntcmd.exe
[2011/12/17 03:54:12 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscomex.dll
[2011/12/17 03:54:12 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscomex.dll
[2011/12/17 03:54:12 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscomex(2).dll
[2011/12/17 03:54:12 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscomex(2).dll
[2011/12/17 03:54:11 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsmon.dll
[2011/12/17 03:54:11 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsmon.dll
[2011/12/17 03:54:11 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsmon(2).dll
[2011/12/17 03:54:11 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsmon(2).dll
[2011/12/17 03:54:07 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smi2smir.exe
[2011/12/17 03:54:01 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\evntwin.exe
[2011/12/17 03:54:01 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\evntwin.exe
[2011/12/17 03:54:00 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssvc.exe
[2011/12/17 03:54:00 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxssvc(2).exe
[2011/12/17 03:54:00 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssvc(2).exe
[2011/12/17 03:53:51 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\snmpmib.dll
[2011/12/17 03:53:51 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpmib.dll
[2011/12/17 03:53:49 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsxp32.dll
[2011/12/17 03:53:49 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2011/12/17 03:53:49 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsxp32(2).dll
[2011/12/17 03:53:49 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsxp32(2).dll
[2011/12/17 03:53:42 | 000,188,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpsmir.dll
[2011/12/17 03:53:42 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\hostmib.dll
[2011/12/17 03:53:42 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hostmib.dll
[2011/12/17 03:53:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsres.dll
[2011/12/17 03:53:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsres.dll
[2011/12/17 03:53:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsres(2).dll
[2011/12/17 03:53:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsres(2).dll
[2011/12/17 03:53:25 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxst30.dll
[2011/12/17 03:53:25 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxst30.dll
[2011/12/17 03:53:25 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxst30(2).dll
[2011/12/17 03:53:25 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxst30(2).dll
[2011/12/17 03:53:24 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsext32.dll
[2011/12/17 03:53:24 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsext32.dll
[2011/12/17 03:53:24 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsext32(2).dll
[2011/12/17 03:53:24 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsext32(2).dll
[2011/12/17 03:53:18 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsapi.dll
[2011/12/17 03:53:18 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsapi.dll
[2011/12/17 03:53:18 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsapi(3).dll
[2011/12/17 03:53:18 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsapi(2).dll
[2011/12/17 03:53:18 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpcl.dll
[2011/12/17 03:53:17 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsst.dll
[2011/12/17 03:53:17 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsst.dll
[2011/12/17 03:53:17 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsst(3).dll
[2011/12/17 03:53:17 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsst(2).dll
[2011/12/17 03:53:15 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxswzrd.dll
[2011/12/17 03:53:15 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2011/12/17 03:53:15 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxswzrd(2).dll
[2011/12/17 03:53:15 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxswzrd(2).dll
[2011/12/17 03:53:13 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscover.exe
[2011/12/17 03:53:13 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscover.exe
[2011/12/17 03:53:13 | 000,229,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscover(2).exe
[2011/12/17 03:53:01 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmp.exe
[2011/12/17 03:52:59 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmptrap.exe
[2011/12/17 03:52:55 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxstiff.dll
[2011/12/17 03:52:55 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxstiff.dll
[2011/12/17 03:52:55 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxstiff(2).dll
[2011/12/17 03:52:55 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxstiff(2).dll
[2011/12/17 03:52:50 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpincl.dll
[2011/12/17 03:52:49 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscom.dll
[2011/12/17 03:52:49 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscom.dll
[2011/12/17 03:52:49 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscom(2).dll
[2011/12/17 03:52:49 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscom(2).dll
[2011/12/17 03:52:45 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsperf.dll
[2011/12/17 03:52:45 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsperf.dll
[2011/12/17 03:52:45 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsperf(2).dll
[2011/12/17 03:52:45 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsperf(2).dll
[2011/12/17 03:52:39 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsui.dll
[2011/12/17 03:52:39 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsui.dll
[2011/12/17 03:52:39 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsui(2).dll
[2011/12/17 03:52:39 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsui(2).dll
[2011/12/17 03:52:32 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsevent.dll
[2011/12/17 03:52:32 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsevent.dll
[2011/12/17 03:52:32 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsevent(2).dll
[2011/12/17 03:52:32 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsevent(2).dll
[2011/12/17 03:52:20 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsdrv.dll
[2011/12/17 03:52:20 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2011/12/17 03:52:20 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsdrv(2).dll
[2011/12/17 03:52:20 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsdrv(2).dll
[2011/12/17 03:52:09 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\iprip.dll
[2011/12/17 03:52:09 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iprip.dll
[2011/12/17 03:52:05 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclnt.exe
[2011/12/17 03:52:05 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2011/12/17 03:52:05 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclnt(2).exe
[2011/12/17 03:52:05 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclnt(2).exe
[2011/12/17 03:51:58 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\lmmib2.dll
[2011/12/17 03:51:58 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lmmib2.dll
[2011/12/17 03:51:47 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\evntagnt.dll
[2011/12/17 03:51:47 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\evntagnt.dll
[2011/12/17 03:51:47 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpthrd.dll
[2011/12/17 03:51:44 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2011/12/17 03:51:24 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlimport.exe
[2011/12/17 03:48:43 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2011/12/17 03:48:43 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2011/12/17 03:48:43 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2011/12/17 03:48:43 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2011/12/17 03:48:43 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2011/12/17 03:48:43 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2011/12/17 03:48:42 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2011/12/17 03:48:42 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2011/12/17 03:48:42 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2011/12/17 03:48:42 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2011/12/17 03:48:42 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2011/12/17 03:48:42 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2011/12/17 03:48:42 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2011/12/17 03:48:42 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2011/12/17 03:48:42 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2011/12/17 03:48:42 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2011/12/17 03:48:42 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2011/12/17 03:48:42 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2011/12/17 03:48:42 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2011/12/17 03:48:41 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2011/12/17 03:48:41 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2011/12/17 03:48:41 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2011/12/17 03:48:41 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2011/12/17 03:48:41 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2011/12/17 03:48:41 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2011/12/17 03:48:41 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2011/12/17 03:48:41 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2011/12/17 03:48:41 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2011/12/17 03:48:41 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2011/12/17 03:48:41 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2011/12/17 03:48:41 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2011/12/17 03:48:41 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2011/12/17 03:48:41 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2011/12/17 03:48:41 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2011/12/17 03:48:41 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2011/12/17 03:48:40 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2011/12/17 03:48:40 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2011/12/17 03:48:39 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2011/12/17 03:48:38 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2011/12/17 03:48:37 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2011/12/17 03:48:37 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2011/12/17 03:48:37 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2011/12/17 03:48:36 | 001,390,218 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv4_mini.sys
[2011/12/17 03:48:35 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2011/12/17 03:48:35 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2011/12/17 03:48:35 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2011/12/17 03:48:34 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2011/12/17 03:48:34 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2011/12/17 03:48:33 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2011/12/17 03:48:33 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2011/12/17 03:48:33 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2011/12/17 03:48:33 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2011/12/17 03:48:33 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2011/12/17 03:48:32 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2011/12/17 03:48:32 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2011/12/17 03:48:32 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2011/12/17 03:48:32 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2011/12/17 03:48:32 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2011/12/17 03:48:32 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2011/12/17 03:45:52 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2011/12/17 03:42:48 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2011/12/17 03:42:44 | 000,000,000 | —D | C] – C:\WINDOWS\EHome
[2011/12/17 03:36:39 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2011/12/17 03:34:26 | 000,087,280 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\bcmwlcoi.dll
[2011/12/17 03:33:52 | 001,391,104 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\drivers\BCMWL5.SYS
[2011/12/17 03:30:45 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2011/12/17 03:30:44 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2011/12/17 03:30:34 | 000,937,984 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nvmcp.sys
[2011/12/17 03:30:34 | 000,414,464 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nvapu.sys
[2011/12/17 03:30:34 | 000,066,688 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nvarm.sys
[2011/12/17 03:30:34 | 000,054,272 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvopenal.dll
[2011/12/17 03:30:34 | 000,053,376 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nvax.sys
[2011/12/17 03:30:34 | 000,032,256 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\NVCOAD.DLL
[2011/12/17 03:30:34 | 000,030,208 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvasio.dll
[2011/12/17 03:30:34 | 000,021,504 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\OpenAL32.dll
[2011/12/17 03:30:34 | 000,007,680 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvack.dll
[2011/12/17 03:30:34 | 000,005,120 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\ALut.dll
[2011/12/17 03:29:26 | 000,000,000 | —D | C] – C:\Program Files\Motorola
[2011/12/17 03:29:04 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2011/12/17 03:29:04 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2011/12/17 03:29:04 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2011/12/17 03:28:40 | 000,196,608 | —- | C] (Motorola Inc.) – C:\WINDOWS\System32\sm56co6a.dll
[2011/12/17 03:28:18 | 000,984,832 | —- | C] (Motorola Inc.) – C:\WINDOWS\System32\drivers\smserial.sys
[2011/12/17 03:28:18 | 000,073,728 | —- | C] (Motorola Inc.) – C:\WINDOWS\System32\sm56co.dll
[2011/12/17 03:27:24 | 000,052,080 | —- | C] (Texas Instruments Inc.) – C:\WINDOWS\System32\drivers\tiumfwl.sys
[2011/12/17 03:27:23 | 000,007,552 | —- | C] (Texas Instruments Inc.) – C:\WINDOWS\System32\drivers\tiumflt.sys
[2011/12/17 03:27:04 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2011/12/17 03:26:56 | 000,032,256 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\NVCOG.DLL
[2011/12/17 03:26:56 | 000,021,760 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv_agp.SYS
[2011/12/17 03:26:55 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2011/12/17 03:21:14 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Application Data\Identities
[2011/12/17 03:21:12 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2011/12/17 03:21:08 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\My Documents\My Music
[2011/12/17 03:21:07 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\My Documents\My Pictures
[2011/12/17 03:21:02 | 000,000,000 | –SD | C] – C:\Documents and Settings\Home\Application Data\Microsoft
[2011/12/17 03:21:02 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Home\SendTo
[2011/12/17 03:21:02 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Home\Application Data
[2011/12/17 03:21:02 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\Start Menu\Programs\Startup
[2011/12/17 03:21:02 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\Start Menu
[2011/12/17 03:21:02 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\My Documents
[2011/12/17 03:21:02 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\Favorites
[2011/12/17 03:21:02 | 000,000,000 | R–D | C] – C:\Documents and Settings\Home\Start Menu\Programs\Accessories
[2011/12/17 03:21:02 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Home\Cookies
[2011/12/17 03:21:02 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Home\Templates
[2011/12/17 03:21:02 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Home\PrintHood
[2011/12/17 03:21:02 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Home\NetHood
[2011/12/17 03:21:02 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Home\Local Settings
[2011/12/17 03:21:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Local Settings\Application Data\Microsoft
[2011/12/17 03:21:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Home\Desktop
[2011/12/17 03:16:23 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2011/12/17 03:16:20 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2011/12/17 03:16:19 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2011/12/17 03:16:19 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2011/12/17 03:16:01 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2011/12/17 03:16:00 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2011/12/17 03:11:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2011/12/17 03:11:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2011/12/17 03:11:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2011/12/17 03:11:18 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2011/12/17 03:11:18 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2011/12/17 03:11:17 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2011/12/17 03:11:16 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2011/12/17 03:11:16 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2011/12/17 03:11:14 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2011/12/17 03:11:14 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2011/12/17 03:11:13 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2011/12/17 03:11:11 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2011/12/17 03:11:11 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2011/12/17 03:11:10 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2011/12/17 03:11:08 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2011/12/17 03:11:08 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2011/12/17 03:11:08 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2011/12/17 03:11:08 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2011/12/17 03:11:07 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2011/12/17 03:11:07 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2011/12/17 03:11:07 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2011/12/17 03:11:06 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2011/12/17 03:11:04 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2011/12/17 03:11:02 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2011/12/17 03:11:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2011/12/17 03:11:00 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2011/12/17 03:10:58 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2011/12/17 03:10:58 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2011/12/17 03:10:58 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2011/12/17 03:10:58 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2011/12/17 03:10:57 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2011/12/17 03:10:57 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2011/12/17 03:10:57 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2011/12/17 03:10:57 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2011/12/17 03:10:57 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2011/12/17 03:10:57 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2011/12/17 03:10:56 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2011/12/17 03:10:56 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2011/12/17 03:10:56 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2011/12/17 03:10:56 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2011/12/17 03:10:56 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2011/12/17 03:10:56 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2011/12/17 03:10:56 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2011/12/17 03:10:55 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2011/12/17 03:10:51 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2011/12/17 03:10:51 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2011/12/17 03:10:49 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2011/12/17 03:10:49 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2011/12/17 03:10:48 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2011/12/17 03:10:47 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2011/12/17 03:10:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2011/12/17 03:10:44 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2011/12/17 03:10:44 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2011/12/17 03:10:44 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2011/12/17 03:10:41 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2011/12/17 03:10:41 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2011/12/17 03:10:41 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2011/12/17 03:10:40 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2011/12/17 03:10:40 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2011/12/17 03:10:40 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2011/12/17 03:10:40 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2011/12/17 03:10:39 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2011/12/17 03:10:38 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2011/12/17 03:10:38 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2011/12/17 03:10:38 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2011/12/17 03:10:38 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2011/12/17 03:10:35 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2011/12/17 03:10:31 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2011/12/17 03:10:25 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2011/12/17 03:10:25 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2011/12/17 03:10:16 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2011/12/17 03:10:16 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2011/12/17 03:10:15 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2011/12/17 03:10:12 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2011/12/17 03:10:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2011/12/17 03:10:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2011/12/17 03:10:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2011/12/17 03:10:10 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2011/12/17 03:10:10 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2011/12/17 03:10:10 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2011/12/17 03:10:10 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2011/12/17 03:10:10 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2011/12/17 03:10:10 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2011/12/17 03:10:10 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2011/12/17 03:10:09 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2011/12/17 03:10:09 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2011/12/17 03:10:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2011/12/17 03:10:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2011/12/17 03:10:08 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2011/12/17 03:10:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2011/12/17 03:10:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2011/12/17 03:10:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2011/12/17 03:10:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2011/12/17 03:10:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2011/12/17 03:10:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2011/12/17 03:10:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2011/12/17 03:10:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2011/12/17 03:10:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2011/12/17 03:10:07 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2011/12/17 03:10:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2011/12/17 03:10:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2011/12/17 03:10:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2011/12/17 03:10:06 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2011/12/17 03:10:06 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2011/12/17 03:10:05 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2011/12/17 03:10:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2011/12/17 03:10:03 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2011/12/17 03:10:02 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2011/12/17 03:10:02 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2011/12/17 03:10:02 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2011/12/17 03:10:02 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2011/12/17 03:10:01 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2011/12/17 03:10:01 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2011/12/17 03:10:01 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2011/12/17 03:10:01 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2011/12/17 03:10:01 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2011/12/17 03:10:00 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2011/12/17 03:10:00 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2011/12/17 03:10:00 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2011/12/17 03:10:00 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2011/12/17 03:10:00 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2011/12/17 03:09:59 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2011/12/17 03:09:59 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2011/12/17 03:09:59 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2011/12/17 03:09:59 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2011/12/17 03:09:59 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2011/12/17 03:09:58 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2011/12/17 03:09:58 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2011/12/17 03:09:58 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2011/12/17 03:09:52 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2011/12/17 03:09:43 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2011/12/17 03:09:41 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2011/12/17 03:09:38 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/12/17 03:09:38 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/12/17 03:09:37 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/12/17 03:09:36 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/12/17 03:09:36 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2011/12/17 03:09:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2011/12/17 03:09:33 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2011/12/17 03:09:31 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2011/12/17 03:09:31 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2011/12/17 03:09:31 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2011/12/17 03:09:31 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2011/12/17 03:09:30 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2011/12/17 03:09:23 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2011/12/17 03:09:21 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2011/12/17 03:09:21 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2011/12/17 03:09:18 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2011/12/17 03:09:18 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2011/12/17 03:09:18 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2011/12/17 03:09:17 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2011/12/17 03:09:17 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2011/12/17 03:09:17 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2011/12/17 03:09:16 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2011/12/17 03:09:16 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2011/12/17 03:09:16 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2011/12/17 03:09:15 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2011/12/17 03:09:15 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2011/12/17 03:09:15 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2011/12/17 03:09:14 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2011/12/17 03:09:13 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2011/12/17 03:09:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2011/12/17 03:09:00 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2011/12/17 03:08:58 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2011/12/17 03:08:33 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2011/12/17 03:08:33 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2011/12/17 03:08:32 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2011/12/17 03:07:50 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2011/12/17 03:06:42 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2011/12/17 03:06:24 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2011/12/17 03:06:24 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2011/12/17 03:06:04 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2011/12/17 03:05:34 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2011/12/17 03:05:16 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2011/12/17 03:05:16 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2011/12/17 03:05:16 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2011/12/17 03:05:15 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2011/12/17 03:05:15 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2011/12/17 03:05:15 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2011/12/17 03:05:09 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2011/12/17 03:05:08 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2011/12/17 03:05:08 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2011/12/17 03:05:07 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2011/12/17 03:05:07 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2011/12/17 03:05:07 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2011/12/17 03:05:07 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2011/12/17 03:05:07 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2011/12/17 03:05:06 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2011/12/17 03:05:04 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2011/12/17 03:05:04 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2011/12/17 03:05:04 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2011/12/17 03:05:04 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2011/12/17 03:05:04 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2011/12/17 03:05:04 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2011/12/17 03:05:04 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2011/12/17 03:05:04 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2011/12/17 03:05:04 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2011/12/17 03:05:04 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2011/12/17 03:05:03 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2011/12/17 03:05:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2011/12/17 03:05:00 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2011/12/17 03:04:59 | 001,669,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2011/12/17 03:04:59 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2011/12/17 03:04:59 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2011/12/17 03:04:58 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2011/12/17 03:04:58 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2011/12/17 03:04:58 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2011/12/17 03:04:58 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2011/12/17 03:04:58 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2011/12/17 03:04:58 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2011/12/17 03:04:58 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2011/12/17 03:04:58 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2011/12/17 03:04:57 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2011/12/17 03:04:57 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2011/12/17 03:04:57 | 000,209,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2011/12/17 03:04:57 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2011/12/17 03:04:57 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2011/12/17 03:04:56 | 001,929,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2011/12/17 03:04:56 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2011/12/17 03:04:56 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2011/12/17 03:04:56 | 000,217,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2011/12/17 03:04:56 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2011/12/17 03:04:56 | 000,053,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2011/12/17 03:04:56 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2011/12/17 03:04:56 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2011/12/17 03:04:56 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2011/12/17 03:04:56 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2011/12/17 03:04:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2011/12/17 03:04:52 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2011/12/17 03:04:49 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2011/12/17 03:04:49 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2011/12/17 03:04:49 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2011/12/17 03:04:49 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2011/12/17 03:04:46 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2011/12/17 03:04:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2011/12/17 03:04:45 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2011/12/17 03:04:45 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2011/12/17 03:04:45 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2011/12/17 03:04:45 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2011/12/17 03:04:44 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2011/12/17 03:04:44 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2011/12/17 03:04:42 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2011/12/17 03:04:42 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2011/12/17 03:04:42 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2011/12/17 03:04:41 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2011/12/17 03:04:39 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2011/12/17 03:04:39 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2011/12/17 03:04:39 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2011/12/17 03:04:39 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2011/12/17 03:04:38 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2011/12/17 03:04:38 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2011/12/17 03:04:33 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2011/12/17 03:04:30 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2011/12/17 03:04:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2011/12/17 03:04:13 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2011/12/17 03:04:02 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2011/12/17 03:04:02 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2011/12/17 03:03:15 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2011/12/17 03:03:14 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2011/12/17 03:03:14 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2011/12/17 03:03:14 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2011/12/17 03:03:07 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2011/12/17 03:03:07 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2011/12/17 03:03:06 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2011/12/17 03:03:06 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2011/12/17 03:03:06 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2011/12/17 03:03:06 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2011/12/17 03:03:06 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2011/12/17 03:03:06 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2011/12/17 03:03:06 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2011/12/17 03:03:06 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2011/12/17 03:03:06 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2011/12/17 03:03:05 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2011/12/17 03:03:05 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2011/12/17 03:03:05 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2011/12/17 03:03:05 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2011/12/17 03:03:05 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2011/12/17 03:03:05 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2011/12/17 03:03:05 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2011/12/17 03:03:05 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2011/12/17 03:03:05 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2011/12/17 03:03:05 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2011/12/17 03:03:04 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2011/12/17 03:03:04 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2011/12/17 03:03:04 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2011/12/17 03:03:04 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2011/12/17 03:03:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2011/12/17 03:03:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2011/12/17 03:03:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write(2).exe
[2011/12/17 03:03:04 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2011/12/17 03:02:55 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2011/12/17 03:02:55 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2011/12/17 03:02:55 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2011/12/17 03:02:55 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2011/12/17 03:02:54 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2011/12/17 03:02:54 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2011/12/17 03:02:54 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2011/12/17 03:02:54 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2011/12/17 03:02:54 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2011/12/17 03:02:54 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2011/12/17 03:02:54 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2011/12/17 03:02:54 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2011/12/17 03:02:48 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2011/12/17 03:02:48 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2011/12/17 03:02:48 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname(2).dll
[2011/12/17 03:02:48 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2011/12/17 03:02:48 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc(2).exe
[2011/12/17 03:02:48 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2011/12/17 03:02:48 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2011/12/17 03:02:48 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap(2).exe
[2011/12/17 03:02:47 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2011/12/17 03:02:47 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2011/12/17 03:02:47 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2011/12/17 03:02:47 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2011/12/17 03:02:47 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2011/12/17 03:02:47 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2011/12/17 03:02:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2011/12/17 03:02:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2011/12/17 03:02:47 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2011/12/17 03:02:47 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2011/12/17 03:02:46 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2011/12/17 03:02:46 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2011/12/17 03:02:46 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2011/12/17 03:02:46 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2011/12/17 03:02:46 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2011/12/17 03:02:46 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2011/12/17 03:02:46 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2011/12/17 03:02:46 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2011/12/17 03:02:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2011/12/17 03:02:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2011/12/17 03:02:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2011/12/17 03:02:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2011/12/17 03:02:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2011/12/17 03:02:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2011/12/17 03:02:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2011/12/17 03:02:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2011/12/17 03:02:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2011/12/17 03:02:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2011/12/17 03:02:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2011/12/17 03:02:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2011/12/17 03:02:46 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2011/12/17 03:02:46 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2011/12/17 03:02:45 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2011/12/17 03:02:45 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2011/12/17 03:02:45 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2011/12/17 03:02:45 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2011/12/17 03:02:45 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2011/12/17 03:02:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2011/12/17 03:02:45 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2011/12/17 03:02:44 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2011/12/17 03:02:44 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2011/12/17 03:02:44 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2011/12/17 03:02:41 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2011/12/17 03:02:41 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2011/12/17 03:02:41 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2011/12/17 03:02:41 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2011/12/17 03:02:41 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2011/12/17 03:02:41 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2011/12/17 03:02:41 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2011/12/17 03:02:41 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2011/12/17 03:02:41 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2011/12/17 03:02:41 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2011/12/17 03:02:41 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2011/12/17 03:02:41 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2011/12/17 03:02:40 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2011/12/17 03:02:40 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2011/12/17 03:02:40 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2011/12/17 03:02:40 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2011/12/17 03:02:30 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2011/12/17 03:02:29 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2011/12/17 03:02:29 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2011/12/17 03:02:29 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2011/12/17 03:02:29 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2011/12/17 03:02:29 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2011/12/17 03:02:29 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2011/12/17 03:02:28 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2011/12/17 03:02:28 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspaint.exe
[2011/12/17 03:02:28 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint(2).exe
[2011/12/17 03:02:28 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\clipbrd.exe
[2011/12/17 03:02:28 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2011/12/17 03:02:28 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2011/12/17 03:02:27 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2011/12/17 03:02:27 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2011/12/17 03:02:27 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2011/12/17 03:02:27 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2011/12/17 03:02:27 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2011/12/17 03:02:27 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2011/12/17 03:02:26 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2011/12/17 03:02:26 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2011/12/17 03:02:26 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2011/12/17 03:02:26 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2011/12/17 03:02:26 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2011/12/17 03:02:26 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2011/12/17 03:02:26 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2011/12/17 03:02:26 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2011/12/17 03:02:26 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2011/12/17 03:02:25 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2011/12/17 03:02:25 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2011/12/17 03:02:25 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2011/12/17 03:02:25 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2011/12/17 03:02:24 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2011/12/17 03:02:24 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2011/12/17 03:02:24 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2011/12/17 03:02:23 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2011/12/17 03:02:18 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2011/12/17 03:02:18 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2011/12/17 03:02:17 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2011/12/17 03:02:17 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2011/12/17 03:01:29 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2011/12/16 19:23:29 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\drivers\RTL8139.sys
[2011/12/16 19:23:17 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\battc.sys
[2011/12/16 19:22:53 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2011/12/16 19:21:17 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2011/12/16 19:21:16 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2011/12/16 19:21:14 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2011/12/16 19:21:14 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2011/12/16 19:21:13 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2011/12/16 19:21:12 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2011/12/16 19:21:12 | 000,000,000 | R–D | C] – C:\Program Files
[2011/12/16 19:21:12 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2011/12/16 19:21:12 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2011/12/16 19:21:12 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2011/12/16 19:21:09 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2011/12/16 19:21:09 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2011/12/16 19:21:09 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2011/12/16 19:21:09 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2011/12/16 19:21:09 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2011/12/16 19:21:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2011/12/16 19:21:07 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2011/12/16 19:21:07 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2011/12/16 19:21:05 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2011/12/16 19:21:05 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2011/12/16 19:21:05 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2011/12/16 19:21:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2011/12/16 19:21:05 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2011/12/16 19:21:05 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2011/12/16 19:21:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2011/12/16 19:21:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2011/12/16 19:21:05 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2011/12/16 19:21:05 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2011/12/16 19:21:05 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2011/12/16 19:21:05 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2011/12/16 19:21:05 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2011/12/16 19:21:05 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2011/12/16 19:21:04 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2011/12/16 19:21:04 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2011/12/16 19:21:04 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2011/12/16 19:21:04 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2011/12/16 19:21:04 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2011/12/16 19:21:04 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2011/12/16 19:21:04 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2011/12/16 19:21:04 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2011/12/16 19:21:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2011/12/16 19:21:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2011/12/16 19:21:02 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2011/12/16 19:21:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2011/12/16 19:21:02 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2011/12/16 19:21:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2011/12/16 19:21:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2011/12/16 19:21:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2011/12/16 19:21:02 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2011/12/16 19:21:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2011/12/16 19:21:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2011/12/16 19:21:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2011/12/16 19:20:59 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2011/12/16 19:20:59 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2011/12/16 19:20:59 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2011/12/16 19:20:59 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2011/12/16 19:20:59 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2011/12/16 19:20:59 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2011/12/16 19:20:58 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2011/12/16 19:20:58 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2011/12/16 19:20:58 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2011/12/16 19:20:58 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2011/12/16 19:20:58 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2011/12/16 19:20:58 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2011/12/16 19:20:58 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2011/12/16 19:20:58 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2011/12/16 19:20:58 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2011/12/16 19:20:58 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2011/12/16 19:20:58 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2011/12/16 19:20:58 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2011/12/16 19:20:57 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2011/12/16 19:20:57 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2011/12/16 19:20:57 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2011/12/16 19:20:57 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2011/12/16 19:20:57 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2011/12/16 19:20:57 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2011/12/16 19:20:57 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2011/12/16 19:20:57 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2011/12/16 19:20:57 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2011/12/16 19:20:57 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2011/12/16 19:20:57 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2011/12/16 19:20:56 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2011/12/16 19:20:56 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2011/12/16 19:20:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2011/12/16 19:20:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2011/12/16 19:20:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2011/12/16 19:20:55 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2011/12/16 19:20:55 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notepad.exe
[2011/12/16 19:20:55 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2011/12/16 19:20:53 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2011/12/16 19:20:41 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2011/12/16 19:20:41 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2011/12/16 19:20:41 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2011/12/16 19:20:41 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2011/12/16 19:20:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2011/12/16 19:20:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2011/12/16 19:20:24 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2011/12/16 19:20:24 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2011/12/16 19:20:18 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2011/12/16 19:20:18 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2011/12/16 19:19:56 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2011/12/16 19:19:56 | 000,000,000 | —D | C] – C:\Documents and Settings
[2011/12/16 19:10:42 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2011/12/16 19:10:42 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2011/12/16 19:10:42 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2011/12/16 19:10:42 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2011/12/16 19:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[2011/11/23 09:25:32 | 001,860,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\win32k.sys
[2011/11/18 08:35:08 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\packager.exe
[2011/11/04 06:13:36 | 001,070,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MSCOMCTL.OCX
[2011/11/01 16:35:20 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ieencode.dll
[2011/11/01 16:35:20 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieencode.dll
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 180 Days ==========

[2012/04/21 07:52:46 | 000,000,737 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2012/04/21 07:39:00 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/04/21 06:36:52 | 000,000,994 | —- | M] () – C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1500820517-682003330-1004UA.job
[2012/04/21 04:48:03 | 000,000,211 | -HS- | M] () – C:\boot.ini
[2012/04/21 03:13:14 | 000,000,258 | —- | M] () – C:\WINDOWS\tasks\Disk Cleanup.job
[2012/04/21 03:07:09 | 000,000,972 | —- | M] () – C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1500820517-682003330-1004Core.job
[2012/04/21 03:07:09 | 000,000,376 | —- | M] () – C:\WINDOWS\tasks\FreeFileViewerUpdateChecker.job
[2012/04/21 00:21:38 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/04/21 00:20:38 | 000,000,408 | —- | M] () – C:\WINDOWS\tasks\PC Optimizer Pro startups.job
[2012/04/21 00:20:29 | 000,000,404 | —- | M] () – C:\WINDOWS\tasks\PC Optimizer Pro Scan.job
[2012/04/21 00:20:29 | 000,000,256 | —- | M] () – C:\WINDOWS\tasks\Windows Update.job
[2012/04/21 00:20:26 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/04/21 00:20:24 | 535,875,584 | -HS- | M] () – C:\hiberfil.sys
[2012/04/17 10:37:34 | 000,013,830 | —- | M] () – C:\Documents and Settings\Home\My Documents\Attachments_2012_03_13.zip
[2012/04/17 01:05:31 | 000,646,404 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/04/17 01:05:31 | 000,118,496 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/04/17 00:56:58 | 000,004,566 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/04/17 00:40:02 | 000,000,260 | —- | M] () – C:\WINDOWS\System32\cmdVBS.vbs
[2012/04/17 00:40:02 | 000,000,256 | —- | M] () – C:\WINDOWS\System32\MSIevent.bat
[2012/04/14 08:48:00 | 000,000,123 | —- | M] () – C:\WINDOWS\Winchat.ini
[2012/04/14 08:14:52 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aaclient.dll
[2012/04/14 08:14:52 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2012/04/14 04:11:16 | 000,000,112 | —- | M] () – C:\Documents and Settings\Home\My Documents\All Files.fnd
[2012/04/14 03:49:53 | 001,326,080 | —- | M] () – C:\WINDOWS\System32\webfldrs.msi
[2012/04/14 02:40:16 | 000,418,464 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/04/14 02:40:10 | 000,070,304 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/04/14 01:58:20 | 000,001,945 | —- | M] () – C:\WINDOWS\epplauncher.mif
[2012/04/11 05:24:01 | 000,000,792 | —- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk
[2012/03/29 02:30:31 | 000,000,772 | —- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\FreeFileViewer.lnk
[2012/03/29 02:30:31 | 000,000,754 | —- | M] () – C:\Documents and Settings\Home\Desktop\FreeFileViewer.lnk
[2012/03/19 12:35:06 | 000,001,801 | —- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Samsung New PC Studio.lnk
[2012/03/19 12:35:06 | 000,001,783 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Samsung New PC Studio.lnk
[2012/03/19 12:31:22 | 000,002,528 | —- | M] () – C:\Documents and Settings\Home\Application Data\$_hpcst$.hpc
[2012/03/15 04:55:47 | 000,000,527 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Amcap.lnk
[2012/03/13 23:19:49 | 000,140,440 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/03/03 03:04:52 | 000,000,274 | —- | M] () – C:\trav_1.gif
[2012/03/03 03:04:52 | 000,000,240 | —- | M] () – C:\srch_site_1.gif
[2012/03/03 03:04:51 | 000,000,284 | —- | M] () – C:\srch_map_1.gif
[2012/03/03 03:04:51 | 000,000,277 | —- | M] () – C:\mov_1.gif
[2012/03/03 03:04:51 | 000,000,273 | —- | M] () – C:\srch_stk_1.gif
[2012/03/03 03:04:51 | 000,000,138 | —- | M] () – C:\flk2.gif
[2012/03/03 03:04:50 | 000,000,380 | —- | M] () – C:\edu.bmp
[2012/03/03 03:04:50 | 000,000,268 | —- | M] () – C:\ab_1.gif
[2012/03/03 03:04:50 | 000,000,121 | —- | M] () – C:\srch_nws_1.gif
[2012/03/03 03:04:50 | 000,000,103 | —- | M] () – C:\del_1.gif
[2012/03/03 03:04:49 | 000,000,304 | —- | M] () – C:\dir.bmp
[2012/03/03 03:04:49 | 000,000,279 | —- | M] () – C:\hj_1.gif
[2012/03/03 03:04:49 | 000,000,265 | —- | M] () – C:\srch_ans_1.gif
[2012/03/03 03:04:49 | 000,000,113 | —- | M] () – C:\srch_aud_1.gif
[2012/03/03 03:04:48 | 000,000,131 | —- | M] () – C:\srch_loc_1.gif
[2012/03/03 03:04:48 | 000,000,123 | —- | M] () – C:\srch_sh_1.gif
[2012/03/03 03:04:47 | 000,000,112 | —- | M] () – C:\srch_vid_1.gif
[2012/03/03 03:04:46 | 000,000,235 | —- | M] () – C:\srch_1.gif
[2012/03/03 03:04:46 | 000,000,112 | —- | M] () – C:\srch_img_1.gif
[2012/03/02 06:01:32 | 011,082,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/03/01 07:01:32 | 005,978,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2012/03/01 07:01:32 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2012/03/01 07:01:32 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2012/03/01 07:01:32 | 001,212,416 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2012/03/01 07:01:32 | 000,916,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2012/03/01 07:01:32 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2012/03/01 07:01:32 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2012/03/01 07:01:32 | 000,602,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2012/03/01 07:01:32 | 000,602,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/03/01 07:01:32 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2012/03/01 07:01:32 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\url.dll
[2012/03/01 07:01:32 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\url.dll
[2012/03/01 07:01:32 | 000,066,560 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2012/03/01 07:01:32 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2012/03/01 07:01:32 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/03/01 07:01:32 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\licmgr10.dll
[2012/03/01 07:01:32 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licmgr10.dll
[2012/03/01 07:01:32 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2012/03/01 07:01:32 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2012/03/01 07:01:31 | 002,000,384 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/03/01 07:01:31 | 000,743,424 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/03/01 07:01:31 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2012/03/01 07:01:31 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2012/03/01 07:01:31 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2012/03/01 07:01:31 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2012/02/29 10:10:16 | 000,177,664 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wintrust.dll
[2012/02/29 10:10:16 | 000,148,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imagehlp.dll
[2012/02/29 08:17:40 | 000,385,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec
[2012/02/29 08:17:40 | 000,174,080 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2012/02/29 08:17:40 | 000,174,080 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2012/02/24 04:21:14 | 000,000,552 | —- | M] () – C:\WINDOWS\System32\d3d8caps.dat
[2012/02/21 05:45:48 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2012/02/17 06:06:46 | 605,028,352 | -HS- | M] () – C:\NBRTPage.sys
[2012/02/17 05:22:23 | 000,000,000 | -H– | M] () – C:\Documents and Settings\Home\My Documents\Default.rdp
[2012/02/08 08:13:10 | 000,032,866 | —- | M] (Smart Link) – C:\WINDOWS\System32\dllcache\slrundll.exe
[2012/02/08 08:13:10 | 000,032,866 | —- | M] (Smart Link) – C:\WINDOWS\slrundll.exe
[2012/02/08 07:55:30 | 000,471,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2012/02/08 05:40:36 | 000,317,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unregmp2.exe
[2012/02/03 05:22:18 | 001,860,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\win32k.sys
[2012/02/03 05:22:18 | 001,860,096 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\win32k.sys
[2012/01/31 08:44:05 | 000,237,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2012/01/27 18:15:53 | 000,004,608 | —- | M] () – C:\Documents and Settings\Home\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/01/27 13:56:49 | 000,223,125 | —- | M] () – C:\Documents and Settings\Home\My Documents\2011TaxReturn.PDF
[2012/01/20 19:57:54 | 000,000,441 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts.ics
[2012/01/19 03:59:52 | 000,030,249 | —- | M] () – C:\Documents and Settings\Home\My Documents\TS030007824.dotx
[2012/01/13 06:12:10 | 000,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2012/01/13 04:01:21 | 000,000,800 | —- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2012/01/11 15:06:47 | 000,003,072 | —- | M] () – C:\WINDOWS\System32\iacenc.dll
[2012/01/11 15:06:47 | 000,003,072 | —- | M] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/01/09 12:20:25 | 000,139,784 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwd.sys
[2012/01/05 06:14:34 | 000,000,000 | —- | M] () – C:\Documents and Settings\All Users\Application Data\e3269f2b636738d345eaa5727bea2b71_c
[2011/12/27 05:32:01 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2011/12/27 05:32:01 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2011/12/27 05:10:53 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2011/12/27 05:05:40 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2011/12/27 03:39:18 | 000,164,144 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\COMCT232.OCX
[2011/12/27 03:38:58 | 000,608,448 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\COMCTL32.OCX
[2011/12/26 03:40:03 | 000,000,724 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/12/23 22:56:16 | 038,808,920 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\Home\My Documents\FileFormatConverters.exe
[2011/12/21 03:24:51 | 000,924,632 | —- | M] (Mozilla Corporation) – C:\WINDOWS\System32\drivers\etc\lmhosts
[2011/12/17 21:54:05 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2011/12/17 05:04:42 | 000,000,104 | —- | M] () – C:\Documents and Settings\Home\Desktop\Internet.lnk
[2011/12/17 04:50:08 | 000,000,815 | —- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/17 03:48:09 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/12/17 03:36:50 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2011/12/17 03:21:25 | 000,000,079 | —- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/12/17 03:16:05 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2011/12/17 03:11:42 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2011/12/17 03:08:18 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2011/12/17 03:08:18 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/12/17 03:08:18 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/12/17 03:08:18 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/12/17 03:08:18 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/12/17 03:07:50 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2011/12/17 03:04:27 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/12/03 19:28:42 | 000,002,946 | —- | M] () – C:\Documents and Settings\Home\My Documents\Document.rtf
[2011/11/25 17:57:19 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\winsrv.dll
[2011/11/25 17:57:19 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsrv.dll
[2011/11/25 17:57:19 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\winsrv(2)(2).dll
[2011/11/18 08:35:08 | 000,060,416 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\packager.exe
[2011/11/18 08:35:08 | 000,060,416 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\packager.exe
[2011/11/16 10:21:44 | 000,354,816 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winhttp.dll
[2011/11/16 10:21:44 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\schannel.dll
[2011/11/04 06:13:36 | 001,070,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MSCOMCTL.OCX
[2011/11/03 11:28:36 | 001,292,288 | —- | M] () – C:\WINDOWS\System32\dllcache\quartz(3).dll
[2011/11/03 11:28:36 | 000,386,048 | —- | M] () – C:\WINDOWS\System32\dllcache\qdvd.dll
[2011/11/01 16:35:20 | 001,510,400 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shdocvw.dll
[2011/11/01 16:35:20 | 001,025,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browseui.dll
[2011/11/01 16:35:20 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieencode.dll
[2011/11/01 16:35:20 | 000,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieencode.dll
[2011/11/01 12:07:10 | 001,288,704 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ole32.dll
[2011/10/28 01:31:48 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csrsrv.dll
[2011/10/28 01:31:48 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\csrsrv.dll
[2011/10/25 09:37:08 | 002,148,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2011/10/25 09:33:08 | 002,192,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntoskrnl.exe
[2011/10/25 09:33:08 | 002,192,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2011/10/25 08:52:03 | 002,069,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ntkrnlpa.exe
[2011/10/25 08:52:03 | 002,069,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2011/10/25 08:52:02 | 002,027,008 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/04/14 08:48:00 | 000,000,123 | —- | C] () – C:\WINDOWS\Winchat.ini
[2012/04/14 04:11:15 | 000,000,112 | —- | C] () – C:\Documents and Settings\Home\My Documents\All Files.fnd
[2012/04/11 05:12:41 | 000,000,404 | —- | C] () – C:\WINDOWS\tasks\PC Optimizer Pro Scan.job
[2012/04/11 05:05:36 | 000,000,408 | —- | C] () – C:\WINDOWS\tasks\PC Optimizer Pro startups.job
[2012/04/02 01:14:05 | 000,000,830 | —- | C] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/03/29 02:30:46 | 000,000,376 | —- | C] () – C:\WINDOWS\tasks\FreeFileViewerUpdateChecker.job
[2012/03/29 02:30:31 | 000,000,772 | —- | C] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\FreeFileViewer.lnk
[2012/03/29 02:30:31 | 000,000,754 | —- | C] () – C:\Documents and Settings\Home\Desktop\FreeFileViewer.lnk
[2012/03/20 02:50:49 | 000,000,994 | —- | C] () – C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1500820517-682003330-1004UA.job
[2012/03/20 02:50:44 | 000,000,972 | —- | C] () – C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1500820517-682003330-1004Core.job
[2012/03/19 12:35:06 | 000,001,783 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Samsung New PC Studio.lnk
[2012/03/19 12:35:05 | 000,001,801 | —- | C] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Samsung New PC Studio.lnk
[2012/03/19 12:31:38 | 000,110,592 | —- | C] () – C:\WINDOWS\System32\FsUsbExDevice.Dll
[2012/03/19 12:31:38 | 000,036,608 | —- | C] () – C:\WINDOWS\System32\FsUsbExDisk.Sys
[2012/03/19 12:31:22 | 000,002,528 | —- | C] () – C:\Documents and Settings\Home\Application Data\$_hpcst$.hpc
[2012/03/15 04:55:49 | 000,000,883 | —- | C] () – C:\WINDOWS\System32\SP7302.INI
[2012/03/15 04:55:47 | 000,000,527 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Amcap.lnk
[2012/03/13 23:39:38 | 000,013,830 | —- | C] () – C:\Documents and Settings\Home\My Documents\Attachments_2012_03_13.zip
[2012/03/13 23:11:37 | 080,150,528 | —- | C] () – C:\Documents and Settings\Home\My Documents\.HPIMAGE.VFS
[2012/03/09 10:22:02 | 000,000,792 | —- | C] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk
[2012/03/03 03:04:52 | 000,000,274 | —- | C] () – C:\trav_1.gif
[2012/03/03 03:04:52 | 000,000,240 | —- | C] () – C:\srch_site_1.gif
[2012/03/03 03:04:51 | 000,000,284 | —- | C] () – C:\srch_map_1.gif
[2012/03/03 03:04:51 | 000,000,277 | —- | C] () – C:\mov_1.gif
[2012/03/03 03:04:51 | 000,000,273 | —- | C] () – C:\srch_stk_1.gif
[2012/03/03 03:04:51 | 000,000,138 | —- | C] () – C:\flk2.gif
[2012/03/03 03:04:50 | 000,000,380 | —- | C] () – C:\edu.bmp
[2012/03/03 03:04:50 | 000,000,268 | —- | C] () – C:\ab_1.gif
[2012/03/03 03:04:50 | 000,000,121 | —- | C] () – C:\srch_nws_1.gif
[2012/03/03 03:04:50 | 000,000,103 | —- | C] () – C:\del_1.gif
[2012/03/03 03:04:49 | 000,000,304 | —- | C] () – C:\dir.bmp
[2012/03/03 03:04:49 | 000,000,279 | —- | C] () – C:\hj_1.gif
[2012/03/03 03:04:49 | 000,000,113 | —- | C] () – C:\srch_aud_1.gif
[2012/03/03 03:04:48 | 000,000,265 | —- | C] () – C:\srch_ans_1.gif
[2012/03/03 03:04:48 | 000,000,131 | —- | C] () – C:\srch_loc_1.gif
[2012/03/03 03:04:48 | 000,000,123 | —- | C] () – C:\srch_sh_1.gif
[2012/03/03 03:04:47 | 000,000,112 | —- | C] () – C:\srch_vid_1.gif
[2012/03/03 03:04:46 | 000,000,235 | —- | C] () – C:\srch_1.gif
[2012/03/03 03:04:46 | 000,000,112 | —- | C] () – C:\srch_img_1.gif
[2012/02/24 04:21:14 | 000,000,552 | —- | C] () – C:\WINDOWS\System32\d3d8caps.dat
[2012/02/21 04:09:50 | 000,000,256 | —- | C] () – C:\WINDOWS\tasks\Windows Update.job
[2012/02/21 04:07:45 | 000,000,258 | —- | C] () – C:\WINDOWS\tasks\Disk Cleanup.job
[2012/02/17 06:06:46 | 605,028,352 | -HS- | C] () – C:\NBRTPage.sys
[2012/02/17 05:22:23 | 000,000,000 | -H– | C] () – C:\Documents and Settings\Home\My Documents\Default.rdp
[2012/02/17 02:08:14 | 535,875,584 | -HS- | C] () – C:\hiberfil.sys
[2012/02/17 01:51:32 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2012/02/17 01:51:32 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/01/27 13:56:47 | 000,223,125 | —- | C] () – C:\Documents and Settings\Home\My Documents\2011TaxReturn.PDF
[2012/01/21 07:43:12 | 000,004,608 | —- | C] () – C:\Documents and Settings\Home\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/01/21 02:02:49 | 000,000,260 | —- | C] () – C:\WINDOWS\System32\cmdVBS.vbs
[2012/01/21 02:02:49 | 000,000,256 | —- | C] () – C:\WINDOWS\System32\MSIevent.bat
[2012/01/20 19:57:30 | 000,000,441 | —- | C] () – C:\WINDOWS\System32\drivers\etc\hosts.ics
[2012/01/05 06:14:34 | 000,000,000 | —- | C] () – C:\Documents and Settings\All Users\Application Data\e3269f2b636738d345eaa5727bea2b71_c
[2011/12/27 05:05:40 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2011/12/27 03:28:19 | 000,000,800 | —- | C] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/12/26 03:40:03 | 000,000,730 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/12/26 03:40:03 | 000,000,724 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/12/23 23:11:55 | 000,030,249 | —- | C] () – C:\Documents and Settings\Home\My Documents\TS030007824.dotx
[2011/12/18 03:10:10 | 000,001,945 | —- | C] () – C:\WINDOWS\epplauncher.mif
[2011/12/17 21:54:08 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2011/12/17 21:54:05 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2011/12/17 21:00:47 | 000,002,577 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk
[2011/12/17 19:37:55 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2011/12/17 05:08:56 | 000,002,347 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader X.lnk
[2011/12/17 05:04:42 | 000,000,104 | —- | C] () – C:\Documents and Settings\Home\Desktop\Internet.lnk
[2011/12/17 03:55:11 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2011/12/17 03:55:11 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2011/12/17 03:55:11 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2011/12/17 03:55:10 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2011/12/17 03:55:09 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2011/12/17 03:55:09 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2011/12/17 03:55:09 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2011/12/17 03:55:09 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2011/12/17 03:55:09 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2011/12/17 03:55:09 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2011/12/17 03:55:09 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2011/12/17 03:55:09 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2011/12/17 03:55:09 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2011/12/17 03:55:09 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2011/12/17 03:55:09 | 000,069,612 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2011/12/17 03:55:09 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2011/12/17 03:55:09 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2011/12/17 03:55:08 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2011/12/17 03:55:08 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2011/12/17 03:55:08 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2011/12/17 03:55:08 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2011/12/17 03:55:08 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2011/12/17 03:55:08 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2011/12/17 03:55:08 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2011/12/17 03:55:08 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2011/12/17 03:55:08 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2011/12/17 03:55:08 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2011/12/17 03:55:08 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2011/12/17 03:55:08 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2011/12/17 03:55:08 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2011/12/17 03:55:08 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2011/12/17 03:55:08 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2011/12/17 03:55:08 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2011/12/17 03:55:08 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2011/12/17 03:55:08 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2011/12/17 03:55:08 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2011/12/17 03:55:08 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2011/12/17 03:55:08 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2011/12/17 03:55:08 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2011/12/17 03:55:08 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2011/12/17 03:55:08 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2011/12/17 03:55:08 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2011/12/17 03:55:07 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2011/12/17 03:55:07 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2011/12/17 03:55:07 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2011/12/17 03:55:07 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2011/12/17 03:55:07 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2011/12/17 03:55:07 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2011/12/17 03:55:07 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2011/12/17 03:55:07 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2011/12/17 03:55:07 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2011/12/17 03:55:07 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2011/12/17 03:55:07 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2011/12/17 03:55:07 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2011/12/17 03:55:07 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2011/12/17 03:55:07 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2011/12/17 03:55:07 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2011/12/17 03:55:07 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2011/12/17 03:55:07 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2011/12/17 03:55:07 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2011/12/17 03:55:07 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2011/12/17 03:55:07 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2011/12/17 03:55:07 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2011/12/17 03:55:07 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2011/12/17 03:55:06 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2011/12/17 03:55:06 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2011/12/17 03:55:06 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2011/12/17 03:55:06 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2011/12/17 03:55:06 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2011/12/17 03:55:05 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2011/12/17 03:55:05 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2011/12/17 03:55:05 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2011/12/17 03:55:05 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2011/12/17 03:55:05 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2011/12/17 03:55:05 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2011/12/17 03:55:05 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2011/12/17 03:55:05 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2011/12/17 03:55:05 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2011/12/17 03:55:05 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2011/12/17 03:55:05 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2011/12/17 03:48:41 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2011/12/17 03:48:40 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2011/12/17 03:48:37 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2011/12/17 03:36:51 | 000,013,646 | —- | C] () – C:\WINDOWS\System32\wpa.bak
[2011/12/17 03:35:03 | 000,873,374 | —- | C] () – C:\WINDOWS\System32\oem14.inf
[2011/12/17 03:27:24 | 000,017,604 | —- | C] () – C:\WINDOWS\System32\drivers\tiumfw.bin
[2011/12/17 03:21:25 | 000,000,079 | —- | C] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/12/17 03:21:12 | 000,000,815 | —- | C] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/17 03:21:12 | 000,000,803 | —- | C] () – C:\Documents and Settings\Home\Start Menu\Programs\Internet Explorer.lnk
[2011/12/17 03:21:03 | 000,000,788 | —- | C] () – C:\Documents and Settings\Home\Start Menu\Programs\Windows Media Player.lnk
[2011/12/17 03:16:05 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2011/12/17 03:11:42 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/12/17 03:10:39 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2011/12/17 03:10:12 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2011/12/17 03:10:02 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2011/12/17 03:10:01 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2011/12/17 03:09:58 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2011/12/17 03:09:47 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2011/12/17 03:09:41 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2011/12/17 03:09:17 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2011/12/17 03:08:18 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2011/12/17 03:08:18 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2011/12/17 03:08:18 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2011/12/17 03:08:18 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2011/12/17 03:08:18 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2011/12/17 03:08:07 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2011/12/17 03:08:07 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2011/12/17 03:08:04 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2011/12/17 03:06:02 | 000,000,786 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
[2011/12/17 03:05:42 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2011/12/17 03:05:14 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2011/12/17 03:05:14 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2011/12/17 03:05:08 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2011/12/17 03:04:27 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/12/17 03:03:15 | 000,000,609 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
[2011/12/17 03:02:50 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2011/12/17 03:02:49 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2011/12/17 03:02:49 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2011/12/17 03:02:49 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2011/12/17 03:02:49 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2011/12/17 03:02:49 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2011/12/17 03:02:49 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2011/12/17 03:02:49 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2011/12/17 03:02:49 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2011/12/17 03:02:49 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2011/12/17 03:02:47 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2011/12/17 03:02:46 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2011/12/17 03:02:45 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2011/12/17 03:02:40 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2011/12/16 19:21:20 | 000,004,566 | —- | C] () – C:\WINDOWS\imsins.BAK
[2011/12/16 19:21:16 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/12/16 19:21:13 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2011/12/16 19:21:13 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2011/12/16 19:21:13 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2011/12/16 19:21:12 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2011/12/16 19:20:56 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2011/12/16 19:20:40 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2011/12/16 19:20:40 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2011/12/16 19:20:40 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2011/12/16 19:20:40 | 000,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2011/12/16 19:20:40 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2011/12/16 19:20:39 | 001,042,903 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2011/12/16 19:20:39 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2011/12/16 19:20:39 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2011/12/16 19:19:55 | 000,140,440 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/12/16 19:19:08 | 000,000,211 | -HS- | C] () – C:\boot.ini
[2011/12/16 19:19:02 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2011/12/03 19:28:40 | 000,002,946 | —- | C] () – C:\Documents and Settings\Home\My Documents\Document.rtf

========== LOP Check ==========

[2012/01/20 21:40:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EazyPlanet
[2012/01/27 19:20:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MFAData
[2012/04/11 05:24:30 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Optimizer Pro
[2012/03/19 12:32:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Samsung
[2012/01/20 22:01:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SweetIM
[2012/02/13 13:28:33 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2012/02/08 09:46:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\W3i
[2012/03/23 23:14:24 | 000,000,000 | —D | M] – C:\Documents and Settings\Home\Application Data\.purple
[2012/01/27 19:13:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Home\Application Data\AVG
[2012/03/20 02:35:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Home\Application Data\enchant
[2012/04/02 01:15:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Home\Application Data\FreeFileViewer
[2011/12/19 13:18:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Home\Application Data\MedImage LE
[2012/03/19 12:30:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Home\Application Data\Samsung
[2012/04/21 03:13:14 | 000,000,258 | —- | M] () – C:\WINDOWS\Tasks\Disk Cleanup.job
[2012/04/21 03:07:09 | 000,000,972 | —- | M] () – C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1500820517-682003330-1004Core.job
[2012/04/21 06:36:52 | 000,000,994 | —- | M] () – C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-507921405-1500820517-682003330-1004UA.job
[2012/04/21 03:07:09 | 000,000,376 | —- | M] () – C:\WINDOWS\Tasks\FreeFileViewerUpdateChecker.job
[2012/04/21 00:20:29 | 000,000,404 | —- | M] () – C:\WINDOWS\Tasks\PC Optimizer Pro Scan.job
[2012/04/21 00:20:38 | 000,000,408 | —- | M] () – C:\WINDOWS\Tasks\PC Optimizer Pro startups.job
[2012/04/21 00:20:29 | 000,000,256 | —- | M] () – C:\WINDOWS\Tasks\Windows Update.job

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2012/03/03 03:04:50 | 000,000,268 | —- | M] () – C:\ab_1.gif
[2011/12/17 03:08:18 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2012/04/21 04:48:03 | 000,000,211 | -HS- | M] () – C:\boot.ini
[2011/12/17 03:08:18 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2012/03/03 03:04:50 | 000,000,103 | —- | M] () – C:\del_1.gif
[2012/03/03 03:04:49 | 000,000,304 | —- | M] () – C:\dir.bmp
[2012/03/03 03:04:50 | 000,000,380 | —- | M] () – C:\edu.bmp
[2012/03/03 03:04:51 | 000,000,138 | —- | M] () – C:\flk2.gif
[2012/04/21 00:20:24 | 535,875,584 | -HS- | M] () – C:\hiberfil.sys
[2012/03/03 03:04:49 | 000,000,279 | —- | M] () – C:\hj_1.gif
[2011/12/17 03:08:18 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/03/03 03:04:51 | 000,000,277 | —- | M] () – C:\mov_1.gif
[2011/12/17 03:08:18 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/02/17 06:06:46 | 605,028,352 | -HS- | M] () – C:\NBRTPage.sys
[2004/08/04 08:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2011/12/17 03:48:09 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/04/21 00:20:22 | 805,306,368 | -HS- | M] () – C:\pagefile.sys
[2012/03/03 03:04:46 | 000,000,235 | —- | M] () – C:\srch_1.gif
[2012/03/03 03:04:49 | 000,000,265 | —- | M] () – C:\srch_ans_1.gif
[2012/03/03 03:04:49 | 000,000,113 | —- | M] () – C:\srch_aud_1.gif
[2012/03/03 03:04:46 | 000,000,112 | —- | M] () – C:\srch_img_1.gif
[2012/03/03 03:04:48 | 000,000,131 | —- | M] () – C:\srch_loc_1.gif
[2012/03/03 03:04:51 | 000,000,284 | —- | M] () – C:\srch_map_1.gif
[2012/03/03 03:04:50 | 000,000,121 | —- | M] () – C:\srch_nws_1.gif
[2012/03/03 03:04:48 | 000,000,123 | —- | M] () – C:\srch_sh_1.gif
[2012/03/03 03:04:52 | 000,000,240 | —- | M] () – C:\srch_site_1.gif
[2012/03/03 03:04:51 | 000,000,273 | —- | M] () – C:\srch_stk_1.gif
[2012/03/03 03:04:47 | 000,000,112 | —- | M] () – C:\srch_vid_1.gif
[2012/03/03 03:04:52 | 000,000,274 | —- | M] () – C:\trav_1.gif

< %systemroot%\Fonts\*.com >
[2006/04/18 16:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 15:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 16:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 15:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2011/12/17 03:07:31 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/04/09 14:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 06:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/04/17 01:04:40 | 000,306,032 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2012/01/09 05:03:22 | 000,001,650 | -H– | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2011/12/16 19:19:07 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2011/12/16 19:19:07 | 000,634,880 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2011/12/16 19:19:07 | 000,884,736 | —- | M] () – C:\WINDOWS\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011/12/17 03:55:48 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >
[2012/04/17 02:48:01 | 000,006,656 | -HS- | M] () – C:\WINDOWS\system32\Thumbs.db
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/12/17 04:04:33 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2011/12/17 03:21:25 | 000,000,079 | —- | M] () – C:\Documents and Settings\Home\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-04-12 14:29:23

< >

< >

========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\WudfHost.exe:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\WISPTIS.EXE:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\aaclient.dll:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\slrundll.exe:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Home\My Documents\TS030007824.dotx:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Home\My Documents\~$Doc1.doc:SummaryInformation
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4

< End of report >

________________________________________________________________________________
_________________________________________________

OTL Extras logfile created on: 4/21/2012 7:50:44 AM - Run 1
OTL by OldTimer - Version 3.2.40.0 Folder = C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.98 Mb Total Physical Memory | 180.23 Mb Available Physical Memory | 35.27% Memory free
1.22 Gb Paging File | 0.82 Gb Available in Paging File | 67.34% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 58.20 Gb Free Space | 78.10% Space Free | Partition Type: NTFS

Computer Name: PUNK | User Name: Home | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_USERS\S-1-5-21-507921405-1500820517-682003330-1004\SOFTWARE\Classes\]
.html [@ = htmlfile] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – "C:\Program Files\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Disabled:@xpsp2res.dll,-22009

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Verizon\Verizon Media Manager\Release\Verizon Media Manager.exe" = C:\Program Files\Verizon\Verizon Media Manager\Release\Verizon Media Manager.exe:*:Enabled:Verizon Media Manager
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:LocalSubNet:Enabled:Yahoo! Messenger – (Yahoo! Inc.)
"C:\Program Files\Microsoft Security Client\msseces.exe" = C:\Program Files\Microsoft Security Client\msseces.exe:*:Disabled:Microsoft Security Essentials
"C:\Program Files\Samsung\Samsung New PC Studio\NPSGuide.exe" = C:\Program Files\Samsung\Samsung New PC Studio\NPSGuide.exe:*:Enabled:Samsung New PC Studio – (Samsung Electronics Co., Ltd.)
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:LocalSubNet:Enabled:KTF MUSIC VoD Server – (PeeringPortal)
"C:\Program Files\Microsoft Silverlight\4.0.60831.0\Silverlight.Configuration.exe" = C:\Program Files\Microsoft Silverlight\4.0.60831.0\Silverlight.Configuration.exe:LocalSubNet:Enabled:Microsoft Silverlight
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:LocalSubNet:Enabled:Mozilla Firefox – (Mozilla Corporation)
"C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe" = C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe:*:Enabled:FreeFileViewerUpdateChecker – (Bitberry Software)
"C:\WINDOWS\system32\mmc.exe" = C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console – (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3192A00C-7336-48C6-8BD7-54B9CFA6F7C1}" = Windows Rights Management Client
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8E1CB0F1-67BF-4052-AA23-FA22E94804C1}" = InstallIQ Updater
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
"{B8909A6F-E372-4ABE-8882-91F8D13D81F1}" = JC-AM100
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{EC905264-BCFE-423B-9C42-C3A106266790}" = Windows Rights Management Client Backwards Compatibility
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"FreeFileViewer_is1" = Free File Viewer 2011
"ie8" = Windows Internet Explorer 8
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 11.0 (x86 en-US)" = Mozilla Firefox 11.0 (x86 en-US)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA" = NVIDIA Windows 2000/XP Display Drivers
"SMSERIAL" = Motorola SM56 Speakerphone Modem
"Trusted Software Assistant_is1" = File Type Assistant
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
"YInstHelper" = Yahoo! Install Manager

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2/21/2012 3:04:32 AM | Computer Name = HOME-E347875D19 | Source = MPSampleSubmission | ID = 5000
Description =

Error - 2/21/2012 4:14:31 AM | Computer Name = HOME-E347875D19 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.

Error - 2/24/2012 4:11:24 AM | Computer Name = HOME-E347875D19 | Source = MPSampleSubmission | ID = 5000
Description =

Error - 3/1/2012 1:25:08 PM | Computer Name = HOME-E347875D19 | Source = Application Hang | ID = 1002
Description = Hanging application YahooMessenger.exe, version 11.5.0.155, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 3/1/2012 10:30:24 PM | Computer Name = HOME-E347875D19 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 3/2/2012 12:23:04 AM | Computer Name = HOME-E347875D19 | Source = Application Hang | ID = 1002
Description = Hanging application hpwebreg.exe, version 22.50.231.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 3/2/2012 8:00:55 AM | Computer Name = HOME-E347875D19 | Source = Ci | ID = 4126
Description = Cleaning up corrupt content index metadata on c:\system volume information\catalog.wci.
Index will be automatically restored by refiltering all documents.

Error - 3/3/2012 3:01:01 AM | Computer Name = HOME-E347875D19 | Source = MPSampleSubmission | ID = 5000
Description =

Error - 3/3/2012 3:05:06 AM | Computer Name = HOME-E347875D19 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 3/4/2012 5:56:06 PM | Computer Name = HOME-E347875D19 | Source = Application Hang | ID = 1002
Description = Hanging application WINWORD.EXE, version 11.0.8328.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 4/17/2012 12:42:03 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:03 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:03 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:03 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:03 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:03 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:04 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:04 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:04 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 4/17/2012 12:42:04 AM | Computer Name = PUNK | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126


< End of report >


.
DDS (Ver_11-03-05.01) - NTFSx86
Run by [removed] at 8:16:21.89 on Sat 04/21/2012
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.75 [GMT -4:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Home\My Documents\Downloads\ProcessExplorer\procexp.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts\OTL.exe
C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts\HiJackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\notepad.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\Home\Local Settings\Temporary Internet Files\Content.IE5\5AUR6S9N\dds[2].scr
C:\WINDOWS\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yahoo.com/?ilc=16
uURLSearchHooks: YTNavAssistPlugin Class: {81017ea9-9aa8-4a6a-9734-7af40e7d593f} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: &Yahoo;! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\msconfig.exe /auto
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\docume~1\home\applic~1\mozilla\firefox\profiles\summpiu9.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=mkg030&p;=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/?ilc=8
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mkg030&p;=
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\documents and settings\home\local settings\application data\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\browser\nppdf32(3).dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npyaxmpb.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_2_202_233.dll
.
—- FIREFOX POLICIES —-
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
============= SERVICES / DRIVERS ===============
.
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2012-3-19 36608]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-2 253088]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2012-3-19 238952]
.
=============== Created Last 30 ================
.
2012-04-14 12:46:10 ——– d—–w- c:\docume~1\home\locals~1\applic~1\Help
2012-04-14 11:34:48 ——– d—–w- c:\windows\system32\DRM
2012-04-11 09:05:34 ——– d—–w- c:\docume~1\alluse~1\applic~1\PC Optimizer Pro
2012-04-11 08:35:01 ——– dc—-w- C:\8541570cf358c25064d253ab09ff
2012-04-04 05:53:56 182160 —-a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
2012-04-04 05:53:56 182160 —-a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2012-04-02 05:13:56 418464 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-03-29 07:40:19 ——– d—–w- c:\docume~1\home\applic~1\FreeFileViewer
.
==================== Find3M ====================
.
2012-04-17 04:40:02 260 —-a-w- c:\windows\system32\cmdVBS.vbs
2012-04-17 04:40:02 256 —-a-w- c:\windows\system32\MSIevent.bat
2012-04-14 12:55:17 146432 —-a-w- c:\windows\system32\WudfHost.exe
2012-04-14 12:49:29 189952 —-a-w- c:\windows\system32\WISPTIS.EXE
2012-04-14 12:14:52 136192 —-a-w- c:\windows\system32\aaclient.dll
2012-04-14 07:49:53 1326080 —-a-w- c:\windows\system32\webfldrs.msi
2012-04-14 06:40:10 70304 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-01 11:01:32 916992 —-a-w- c:\windows\system32\wininet.dll
2012-03-01 11:01:32 43520 ——w- c:\windows\system32\licmgr10.dll
2012-03-01 11:01:32 1469440 ——w- c:\windows\system32\inetcpl.cpl
2012-02-29 14:10:16 177664 —-a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10:16 148480 —-a-w- c:\windows\system32\imagehlp.dll
2012-02-29 12:17:40 385024 ——w- c:\windows\system32\html.iec
2012-02-17 10:06:46 605028352 -csha-w- C:\NBRTPage.sys
2012-02-08 12:13:10 32866 —-a-w- c:\windows\slrundll.exe
2012-02-08 11:55:30 471552 —-a-w- c:\windows\apppatch\aclayers.dll
2012-02-03 09:22:18 1860096 —-a-w- c:\windows\system32\win32k.sys
2012-01-31 12:44:05 237072 ——w- c:\windows\system32\MpSigStub.exe
.
============= FINISH: 8:17:12.78 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 12/17/2011 2:11:31 AM
System Uptime: 4/21/2012 1:50:23 AM (7 hours ago)
.
Motherboard: Compal | | 08A0
Processor: AMD Athlon™ XP Processor 3000+ | Socket A | 798/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 75 GiB total, 58.177 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek RTL8139 Family PCI Fast Ethernet NIC
Device ID: PCI\VEN_10EC&DEV;_8139&SUBSYS;_813910EC&REV;_10\4&2FF3801D&0&0850
Manufacturer: Realtek
Name: Realtek RTL8139 Family PCI Fast Ethernet NIC
PNP Device ID: PCI\VEN_10EC&DEV;_8139&SUBSYS;_813910EC&REV;_10\4&2FF3801D&0&0850
Service: rtl8139
.
==== System Restore Points ===================
.
RP71: 1/21/2012 3:13:35 AM - Software Distribution Service 3.0
RP72: 1/25/2012 4:56:55 PM - Software Distribution Service 3.0
RP73: 1/25/2012 6:01:04 PM - System Checkpoint
RP74: 1/25/2012 6:08:38 PM - Installed Windows XP KB961118.
RP75: 1/25/2012 6:37:17 PM - Software Distribution Service 3.0
RP76: 1/25/2012 6:55:43 PM - Software Distribution Service 3.0
RP77: 1/26/2012 3:42:30 PM - Installed Compatibility Pack for the 2007 Office system
RP78: 1/27/2012 1:50:42 PM - Software Distribution Service 3.0
RP79: 1/27/2012 2:42:42 PM - Software Distribution Service 3.0
RP80: 1/27/2012 6:37:34 PM - Installed AVG 2012
RP81: 1/28/2012 3:43:09 PM - Software Distribution Service 3.0
RP82: 1/28/2012 7:44:19 PM - Software Distribution Service 3.0
RP83: 1/28/2012 8:02:17 PM - Software Distribution Service 3.0
RP84: 1/31/2012 4:29:45 PM - Software Distribution Service 3.0
RP85: 2/2/2012 6:04:23 PM - Software Distribution Service 3.0
RP86: 2/4/2012 12:39:52 PM - Software Distribution Service 3.0
RP87: 2/5/2012 6:55:50 PM - Software Distribution Service 3.0
RP88: 2/8/2012 3:22:41 AM - Software Distribution Service 3.0
RP89: 2/8/2012 3:39:31 AM - Software Distribution Service 3.0
RP90: 2/11/2012 6:54:30 AM - Software Distribution Service 3.0
RP91: 2/11/2012 1:23:07 PM - Software Distribution Service 3.0
RP92: 2/13/2012 12:23:57 AM - Software Distribution Service 3.0
RP93: 2/14/2012 1:22:33 PM - System Checkpoint
RP94: 2/14/2012 1:26:40 PM - Software Distribution Service 3.0
RP95: 2/17/2012 2:33:15 AM - Software Distribution Service 3.0
RP96: 2/17/2012 3:01:45 AM - Software Distribution Service 3.0
RP97: 2/18/2012 3:58:22 AM - Software Distribution Service 3.0
RP98: 2/21/2012 2:31:37 AM - Software Distribution Service 3.0
RP99: 2/21/2012 5:43:41 AM - Software Distribution Service 3.0
RP100: 2/22/2012 3:44:57 AM - Software Distribution Service 3.0
RP101: 2/22/2012 1:24:53 PM - Software Distribution Service 3.0
RP102: 2/23/2012 2:22:05 AM - Software Distribution Service 3.0
RP103: 2/23/2012 1:25:13 PM - Software Distribution Service 3.0
RP104: 2/24/2012 1:21:06 PM - Software Distribution Service 3.0
RP105: 2/25/2012 2:21:56 AM - Software Distribution Service 3.0
RP106: 2/25/2012 1:22:43 PM - Software Distribution Service 3.0
RP107: 2/26/2012 2:29:18 AM - Software Distribution Service 3.0
RP108: 2/26/2012 1:25:30 PM - Software Distribution Service 3.0
RP109: 3/1/2012 9:44:58 PM - Software Distribution Service 3.0
RP110: 3/2/2012 5:50:24 AM - Software Distribution Service 3.0
RP111: 3/2/2012 1:22:49 PM - Software Distribution Service 3.0
RP112: 3/3/2012 1:14:35 PM - Software Distribution Service 3.0
RP113: 3/4/2012 7:01:30 AM - Software Distribution Service 3.0
RP114: 3/4/2012 1:14:40 PM - Software Distribution Service 3.0
RP115: 3/5/2012 1:13:33 PM - Software Distribution Service 3.0
RP116: 3/6/2012 7:03:53 AM - Software Distribution Service 3.0
RP117: 3/7/2012 7:28:42 AM - System Checkpoint
RP118: 3/7/2012 1:15:51 PM - Software Distribution Service 3.0
RP119: 3/8/2012 7:03:34 AM - Software Distribution Service 3.0
RP120: 3/10/2012 6:26:30 AM - Software Distribution Service 3.0
RP121: 3/13/2012 10:11:42 PM - Software Distribution Service 3.0
RP122: 3/13/2012 10:41:35 PM - Software Distribution Service 3.0
RP123: 3/13/2012 10:52:02 PM - Software Distribution Service 3.0
RP124: 3/13/2012 11:01:11 PM - Removed Bing Bar
RP125: 3/15/2012 3:52:54 AM - Software Distribution Service 3.0
RP126: 3/15/2012 3:12:38 PM - Software Distribution Service 3.0
RP127: 3/16/2012 12:46:16 PM - Software Distribution Service 3.0
RP128: 3/17/2012 12:46:26 PM - Software Distribution Service 3.0
RP129: 3/17/2012 10:54:23 PM - Software Distribution Service 3.0
RP130: 3/19/2012 3:29:49 AM - System Checkpoint
RP131: 3/19/2012 3:44:45 AM - Software Distribution Service 3.0
RP132: 3/19/2012 12:13:31 PM - Installed Samsung New PC Studio
RP133: 3/20/2012 12:55:36 PM - Software Distribution Service 3.0
RP134: 3/21/2012 12:38:34 PM - Software Distribution Service 3.0
RP135: 3/23/2012 3:30:08 AM - System Checkpoint
RP136: 3/23/2012 3:39:39 AM - Software Distribution Service 3.0
RP137: 3/28/2012 9:40:08 AM - Software Distribution Service 3.0
RP138: 3/30/2012 3:33:51 AM - Software Distribution Service 3.0
RP139: 3/30/2012 1:03:23 PM - Software Distribution Service 3.0
RP140: 4/2/2012 12:45:25 AM - Software Distribution Service 3.0
RP141: 4/3/2012 3:32:56 AM - Software Distribution Service 3.0
RP142: 4/10/2012 5:42:01 AM - Software Distribution Service 3.0
RP143: 4/10/2012 1:04:43 PM - Software Distribution Service 3.0
RP144: 4/11/2012 3:01:23 AM - Software Distribution Service 3.0
RP145: 4/11/2012 5:12:02 AM - PC Optimizer Pro Checkpoint
RP146: 4/11/2012 5:15:25 AM - Removed Social Mini Toolbar.
RP147: 4/11/2012 4:52:57 PM - Software Distribution Service 3.0
RP148: 4/11/2012 8:55:56 PM - Software Distribution Service 3.0
RP149: 4/12/2012 10:20:33 AM - Software Distribution Service 3.0
RP150: 4/14/2012 1:35:00 AM - Removed NetAssistant
RP151: 4/14/2012 1:40:33 AM - Removed HP Deskjet 1000 J110 series Basic Device Software
RP152: 4/14/2012 1:49:19 AM - Removed HP Deskjet 1000 J110 series Help
RP153: 4/14/2012 1:51:15 AM - Software Distribution Service 3.0
RP154: 4/14/2012 2:15:25 AM - Removed Redist.
RP155: 4/14/2012 7:34:43 AM - Installed Windows Rights Management Client
RP156: 4/14/2012 7:36:21 AM - Installed Windows Rights Management Client Backwards Compatibility
RP157: 4/15/2012 8:14:41 AM - System Checkpoint
RP158: 4/17/2012 12:25:25 AM - Removed Vz In Home Agent.
RP159: 4/17/2012 12:26:35 AM - Removed Vz In Home Agent
RP160: 4/17/2012 12:41:44 AM - Removed IHA_MessageCenter
RP161: 4/17/2012 12:48:42 AM - Removed HP Deskjet 1000 J110 series Help
RP162: 4/21/2012 3:30:05 AM - Removed Facebook Video Calling 1.2.0.159
RP163: 4/21/2012 7:54:13 AM - OTL Restore Point - 4/21/2012 7:54:03 AM
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.3)
Compatibility Pack for the 2007 Office system
File Type Assistant
Free File Viewer 2011
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Image Resizer Powertoy for Windows XP
InstallIQ Updater
JC-AM100
Junk Mail filter update
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Office File Validation Add-In
Microsoft Office Live Add-in 1.3
Microsoft Office Standard Edition 2003
Microsoft Office Word Viewer 2003
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Motorola SM56 Speakerphone Modem
Mozilla Firefox 11.0 (x86 en-US)
MSVCRT
MSXML 4.0 SP3 Parser (KB973685)
NVIDIA Windows 2000/XP Display Drivers
Samsung New PC Studio
SAMSUNG USB Driver for Mobile Phones
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2647516)
Security Update for Windows Internet Explorer 8 (KB2675157)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows XP (KB2621440)
Security Update for Windows XP (KB2641653)
Security Update for Windows XP (KB2647518)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2660465)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB923789)
Segoe UI
Update for Windows Internet Explorer 8 (KB2598845)
WebFldrs XP
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows Rights Management Client
Windows Rights Management Client Backwards Compatibility
Windows XP Service Pack 3
Yahoo! Install Manager
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
.
==== Event Viewer Messages From Past Week ========
.
4/21/2012 8:06:41 AM, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/21/2012 6:49:29 AM, error: Service Control Manager [7034] - The FsUsbExService service terminated unexpectedly. It has done this 1 time(s).
4/21/2012 12:20:40 AM, error: Service Control Manager [7001] - The Alerter service depends on the Workstation service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
4/17/2012 4:37:32 AM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 60 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
4/17/2012 4:07:31 AM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 30 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
4/17/2012 3:26:40 AM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
4/17/2012 12:55:51 AM, error: Service Control Manager [7001] - The Computer Browser service depends on the Workstation service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
4/17/2012 12:53:26 AM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.
.
==== End Of File ===========================


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:54:44 AM, on 4/21/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Home\My Documents\Downloads\ProcessExplorer\procexp.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts\OTL.exe
C:\Documents and Settings\Home\Desktop\Unused Desktop Shortcuts\HiJackThis.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?ilc=16
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo;! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe /auto
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

–
End of file - 5161 bytes