Spyware / Malware / Virus Removal

New Hard Drive and Windows XP Installed [Solved]

14 min read

Looking for the outcome? Ask AI

Lewg

Post #16September 21, 2012, 11:38 AM UTC last edited September 21, 2012, 11:44 AM UTC

Will be leaving in a hour and will not be back to this PC until Tuesday. Let's resume our session when I get back…. Thanks! . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.7.2 Run by [removed] at 7:33:59 on 2012-09-21 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.958.379 [GMT -4:00] . AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095} . ============== Running Processes =============== . C:\WINDOWS\system32\svchost.exe -k DcomLaunch svchost.exe c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\LSI SoftModem\agrsmsvc.exe C:\Program Files\Microsoft\BingBar\7.1.361.0\BBSvc.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe C:\Program Files\Java\jre7\bin\jqs.exe C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Real\RealPlayer\update\realsched.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\HP\KBD\KBD.EXE C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\NDSPCShowServer.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Outlook Express\msimn.exe C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\wscntfy.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://msn.com/ uInternet Connection Wizard,ShellNext = iexplore BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Bing Bar Helper: {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - c:\program files\microsoft\bingbar\7.1.361.0\BingExt.dll BHO: {2EECD738-5844-4a99-B4B6-146BF802613B} - No File BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre7\bin\ssv.dll BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre7\bin\jp2ssv.dll TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll TB: {98889811-442D-49dd-99D7-DC866BE87DBC} - No File TB: Bing Bar: {eec0f710-38b5-4aba-99bf-ec87564a4e13} - "c:\program files\microsoft\bingbar\7.1.361.0\BingExt.dll" uRun: [PCShowServer] "c:\documents and settings\lew\local settings\application data\directv player\PCShowServerPMWrapper.exe" uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [RTHDCPL] RTHDCPL.EXE mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey mRun: [KBD] c:\hp\kbd\KBD.EXE mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1347465718176 DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1347978180406 DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab TCP: DhcpNameServer = 192.168.2.1 TCP: Interfaces\{2E5072BA-3DCD-43F1-A347-7B3E0450AF88} : DhcpNameServer = 192.168.2.1 Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll . ============= SERVICES / DRIVERS =============== . R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2012-3-20 171064] R2 BBSvc;BingBar Service;c:\program files\microsoft\bingbar\7.1.361.0\BBSvc.EXE [2012-2-10 193816] R2 Browser Manager;Browser Manager;c:\documents and settings\all users\application data\browser manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [2012-9-14 1701400] R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-14 399432] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-9-14 676936] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-9-14 22856] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-9-12 250568] S3 BBUpdate;BBUpdate;c:\program files\microsoft\bingbar\7.1.361.0\SeaPort.EXE [2012-2-10 240408] . =============== Created Last 30 ================ . 2012-09-20 20:02:11 5632 —-a-w- c:\windows\system32\ptpusb.dll 2012-09-20 20:02:10 159232 —-a-w- c:\windows\system32\ptpusd.dll 2012-09-20 19:59:35 6980552 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3a1a5aa3-2a0b-420c-add8-b4449cd320f8}\mpengine.dll 2012-09-20 16:47:27 7022536 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll 2012-09-20 02:51:07 ——– d—–w- c:\program files\ESET 2012-09-20 01:59:33 ——– d-sha-r- C:\cmdcons 2012-09-20 01:56:15 98816 —-a-w- c:\windows\sed.exe 2012-09-20 01:56:15 518144 —-a-w- c:\windows\SWREG.exe 2012-09-20 01:56:15 256000 —-a-w- c:\windows\PEV.exe 2012-09-20 01:56:15 208896 —-a-w- c:\windows\MBR.exe 2012-09-19 14:05:47 ——– d—–w- C:\_OTL 2012-09-18 19:43:51 6784 -c–a-w- c:\windows\system32\dllcache\serscan.sys 2012-09-18 19:43:51 6784 —-a-w- c:\windows\system32\drivers\serscan.sys 2012-09-18 19:24:59 25856 -c–a-w- c:\windows\system32\dllcache\usbprint.sys 2012-09-18 19:24:59 25856 —-a-w- c:\windows\system32\drivers\usbprint.sys 2012-09-18 19:24:53 15104 -c–a-w- c:\windows\system32\dllcache\usbscan.sys 2012-09-18 19:24:53 15104 —-a-w- c:\windows\system32\drivers\usbscan.sys 2012-09-18 19:24:49 32128 -c–a-w- c:\windows\system32\dllcache\usbccgp.sys 2012-09-18 19:24:49 32128 —-a-w- c:\windows\system32\drivers\usbccgp.sys 2012-09-18 19:22:54 ——– d—–w- c:\program files\Microsoft 2012-09-18 19:21:58 ——– d—–w- c:\program files\HP Photo Creations 2012-09-18 19:21:58 ——– d—–w- c:\documents and settings\all users\application data\HP Photo Creations 2012-09-18 19:21:54 ——– d—–w- c:\program files\Coupons 2012-09-18 19:21:44 ——– d—–w- c:\documents and settings\lew\application data\HpUpdate 2012-09-18 19:21:27 527208 ——w- c:\windows\system32\HPDiscoPM9311.dll 2012-09-18 19:21:25 1792872 —-a-w- c:\windows\system32\HPScanMiniDrv_DJ3050_J610.dll 2012-09-18 19:21:24 267112 —-a-w- c:\windows\system32\hpinksts9311LM.dll 2012-09-18 19:21:24 232296 —-a-w- c:\windows\system32\hpinksts9311.dll 2012-09-18 19:21:24 213864 —-a-w- c:\windows\system32\hpinkcoi9311.dll 2012-09-18 19:20:33 ——– d—–w- c:\program files\HP 2012-09-18 19:19:06 ——– d—–w- c:\documents and settings\lew\local settings\application data\HP 2012-09-18 17:25:03 19072 —-a-w- c:\windows\system32\drivers\PS2.sys 2012-09-18 17:25:01 ——– d—–w- C:\HP 2012-09-18 17:24:59 ——– d—–w- C:\temp 2012-09-18 16:47:38 ——– d—–w- c:\documents and settings\all users\application data\Ask 2012-09-18 14:50:00 ——– d—–w- c:\documents and settings\lew\local settings\application data\Coupon Companion 2012-09-18 14:49:58 ——– d—–w- c:\program files\Coupon Companion 2012-09-16 13:27:51 ——– d—–w- c:\documents and settings\lew\application data\DTV 2012-09-16 13:27:46 63120 —-a-r- c:\documents and settings\lew\application data\microsoft\installer\{c199dea2-657e-46c2-9fdb-7c1c068b6b35}\ARPPRODUCTICON.exe 2012-09-16 13:27:11 ——– d—–w- c:\documents and settings\lew\local settings\application data\DIRECTV Player 2012-09-14 22:58:38 ——– d—–w- c:\documents and settings\lew\application data\Malwarebytes 2012-09-14 22:58:30 ——– d—–w- c:\documents and settings\all users\application data\Malwarebytes 2012-09-14 22:58:28 22856 —-a-w- c:\windows\system32\drivers\mbam.sys 2012-09-14 22:58:28 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware 2012-09-14 21:49:59 50246 —-a-w- c:\program files\common files\microsoft shared\proof\Uninstal.exe 2012-09-14 21:48:27 ——– d—–w- c:\windows\system32\searchplugins 2012-09-14 21:48:27 ——– d—–w- c:\windows\system32\Extensions 2012-09-14 21:48:19 ——– d—–w- c:\documents and settings\all users\application data\Browser Manager 2012-09-14 21:47:23 ——– d—–w- c:\documents and settings\lew\application data\Babylon 2012-09-14 21:47:23 ——– d—–w- c:\documents and settings\all users\application data\Babylon 2012-09-14 20:46:22 ——– d—–w- c:\windows\pss 2012-09-14 19:47:16 ——– d—–w- c:\program files\WOT 2012-09-14 18:20:57 ——– d—–w- c:\documents and settings\lew\local settings\application data\Help 2012-09-14 15:57:59 ——– d—–w- C:\Quicken6 2012-09-14 14:11:00 275696 —-a-w- c:\windows\system32\mucltui.dll 2012-09-14 14:11:00 222448 —-a-w- c:\windows\system32\muweb.dll 2012-09-14 14:11:00 17136 —-a-w- c:\windows\system32\mucltui.dll.mui 2012-09-14 13:03:16 65605 —-a-w- c:\program files\common files\microsoft shared\proof\Csapi3t1.dll 2012-09-14 13:03:16 ——– d—–w- C:\desktop 2012-09-14 12:24:53 ——– d—–w- c:\documents and settings\all users\application data\Tarma Installer 2012-09-13 22:56:28 ——– d—–w- c:\documents and settings\lew\local settings\application data\Western Digital 2012-09-13 19:30:20 ——– d—–w- c:\documents and settings\lew\local settings\application data\Temp 2012-09-13 19:30:20 ——– d—–w- c:\documents and settings\lew\local settings\application data\Adobe 2012-09-13 19:26:15 237072 ——w- c:\windows\system32\MpSigStub.exe 2012-09-13 19:19:14 ——– d—–w- c:\program files\Microsoft Security Client 2012-09-13 19:13:02 ——– d—–w- c:\documents and settings\lew\local settings\application data\Identities 2012-09-12 22:39:38 ——– d—–w- c:\program files\LSI SoftModem 2012-09-12 22:39:06 176128 —-a-w- c:\windows\system32\nvunrm.exe 2012-09-12 22:39:06 101888 —-a-w- c:\windows\system32\drivers\nvtcp.sys 2012-09-12 19:25:21 ——– d—–w- c:\documents and settings\lew\local settings\application data\Sun 2012-09-12 19:09:57 ——– d—a-w- C:\swsetup 2012-09-12 19:09:56 ——– d—–w- C:\SYSTEM.SAV 2012-09-12 19:09:45 ——– d—–w- c:\documents and settings\lew\application data\WinBatch 2012-09-12 18:56:42 ——– d—–w- c:\program files\common files\xing shared 2012-09-12 18:56:34 499712 —-a-w- c:\windows\system32\msvcp71.dll 2012-09-12 18:56:34 348160 —-a-w- c:\windows\system32\msvcr71.dll 2012-09-12 18:51:00 ——– d—–w- c:\documents and settings\lew\local settings\application data\Google 2012-09-12 18:50:28 73416 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-09-12 18:50:28 696520 —-a-w- c:\windows\system32\FlashPlayerApp.exe 2012-09-12 18:23:59 821736 —-a-w- c:\windows\system32\npDeployJava1.dll 2012-09-12 18:23:59 746984 —-a-w- c:\windows\system32\deployJava1.dll 2012-09-12 18:23:59 143872 —-a-w- c:\windows\system32\javacpl.cpl 2012-09-12 18:23:55 93672 —-a-w- c:\windows\system32\WindowsAccessBridge.dll 2012-09-12 17:50:00 ——– d-sh–w- c:\documents and settings\lew\IECompatCache 2012-09-12 17:48:31 ——– d-sh–w- c:\documents and settings\lew\PrivacIE 2012-09-12 16:35:32 ——– d—–w- c:\windows\system32\Lang 2012-09-12 16:35:16 ——– d-sh–w- c:\documents and settings\lew\IETldCache 2012-09-12 16:24:13 521728 -c—-w- c:\windows\system32\dllcache\jsdbgui.dll 2012-09-12 16:23:54 6144 -c—-w- c:\windows\system32\dllcache\iecompat.dll 2012-09-12 16:23:42 ——– d—–w- c:\windows\ie8updates 2012-09-12 16:23:39 12800 -c—-w- c:\windows\system32\dllcache\xpshims.dll 2012-09-12 16:23:38 743424 -c—-w- c:\windows\system32\dllcache\iedvtool.dll 2012-09-12 16:23:38 629760 -c—-w- c:\windows\system32\dllcache\msfeeds.dll 2012-09-12 16:23:38 55296 -c—-w- c:\windows\system32\dllcache\msfeedsbs.dll 2012-09-12 16:23:38 247808 -c—-w- c:\windows\system32\dllcache\ieproxy.dll 2012-09-12 16:23:38 2000384 -c—-w- c:\windows\system32\dllcache\iertutil.dll 2012-09-12 16:23:38 11111424 -c—-w- c:\windows\system32\dllcache\ieframe.dll 2012-09-12 16:22:50 ——– dc-h–w- c:\windows\ie8 2012-09-12 16:11:32 272128 -c—-w- c:\windows\system32\dllcache\bthport.sys 2012-09-12 16:10:37 978944 -c—-w- c:\windows\system32\dllcache\mfc42.dll 2012-09-12 16:10:37 953856 -c—-w- c:\windows\system32\dllcache\mfc40u.dll 2012-09-12 16:10:29 456320 -c—-w- c:\windows\system32\dllcache\mrxsmb.sys 2012-09-12 16:09:47 617472 -c—-w- c:\windows\system32\dllcache\comctl32.dll 2012-09-12 16:09:26 471552 -c—-w- c:\windows\system32\dllcache\aclayers.dll 2012-09-12 16:09:13 744448 -c—-w- c:\windows\system32\dllcache\helpsvc.exe 2012-09-12 16:09:09 40960 -c—-w- c:\windows\system32\dllcache\ndproxy.sys 2012-09-12 16:08:48 81920 -c—-w- c:\windows\system32\dllcache\fontsub.dll 2012-09-12 16:08:48 119808 -c—-w- c:\windows\system32\dllcache\t2embed.dll 2012-09-12 16:08:00 153088 -c—-w- c:\windows\system32\dllcache\triedit.dll 2012-09-12 16:06:58 105472 -c—-w- c:\windows\system32\dllcache\mup.sys 2012-09-12 16:06:06 758784 -c–a-w- c:\windows\system32\dllcache\vgx.dll 2012-09-12 16:05:51 3558912 -c—-w- c:\windows\system32\dllcache\moviemk.exe 2012-09-12 16:03:23 5120 —-a-w- c:\windows\system32\xpsp4res.dll 2012-09-12 16:03:22 218112 -c—-w- c:\windows\system32\dllcache\wordpad.exe 2012-09-12 16:02:44 10496 -c—-w- c:\windows\system32\dllcache\ndistapi.sys 2012-09-12 16:02:40 3072 -c—-w- c:\windows\system32\dllcache\iacenc.dll 2012-09-12 16:02:40 3072 ——w- c:\windows\system32\iacenc.dll 2012-09-12 16:01:54 ——– d-sh–w- c:\documents and settings\lew\UserData 2012-09-12 16:01:53 45568 -c—-w- c:\windows\system32\dllcache\wab.exe 2012-09-12 16:01:52 590848 -c—-w- c:\windows\system32\dllcache\rpcrt4.dll 2012-09-12 16:01:33 ——– d—–w- c:\windows\system32\PreInstall 2012-09-12 15:56:02 6272 -c–a-w- c:\windows\system32\dllcache\splitter.sys 2012-09-12 15:56:02 6272 —-a-w- c:\windows\system32\drivers\splitter.sys 2012-09-12 15:56:01 83072 -c–a-w- c:\windows\system32\dllcache\wdmaud.sys 2012-09-12 15:56:01 83072 —-a-w- c:\windows\system32\drivers\wdmaud.sys 2012-09-12 15:51:57 ——– d—–w- c:\windows\system32\SoftwareDistribution 2012-09-12 15:51:35 ——– d—–w- c:\program files\D-Link 2012-09-12 11:57:39 294912 ——w- c:\program files\windows media player\dlimport.exe 2012-09-12 11:56:22 ——– d—–w- c:\windows\network diagnostic 2012-09-12 11:56:20 144384 ——w- c:\windows\system32\drivers\hdaudbus.sys 2012-09-12 11:56:20 10240 ——w- c:\windows\system32\drivers\sffp_mmc.sys 2012-09-12 11:55:23 ——– d—–w- c:\windows\system32\ReinstallBackups 2012-09-12 11:46:58 26624 -c–a-w- c:\windows\system32\dllcache\fxsdrv.dll 2012-09-12 11:46:58 26624 —-a-w- c:\windows\system32\fxsdrv.dll 2012-09-12 11:46:53 142848 -c–a-w- c:\windows\system32\dllcache\fxsclnt.exe 2012-09-12 11:46:53 142848 —-a-w- c:\windows\system32\fxsclnt.exe 2012-09-12 11:46:46 ——– d—–w- c:\windows\ServicePackFiles 2012-09-12 11:46:28 26144 —-a-w- c:\windows\system32\spupdsvc.exe 2012-09-12 11:46:26 ——– d—–w- c:\windows\EHome 2012-09-12 01:08:24 ——– d—–w- C:\softpaq 2012-09-12 00:49:07 176128 —-a-w- c:\windows\system32\nvudisp.exe 2012-09-12 00:49:07 ——– d—–w- c:\windows\nview 2012-09-12 00:49:04 69715 —-a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll 2012-09-12 00:49:04 32768 —-a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll 2012-09-12 00:49:04 266240 —-a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll 2012-09-12 00:49:04 192512 —-a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll 2012-09-12 00:49:04 176128 —-a-w- c:\windows\system32\NVUNINST.EXE 2012-09-12 00:49:03 729088 —-a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll 2012-09-12 00:49:03 5632 —-a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe 2012-09-12 00:49:03 311428 —-a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll 2012-09-12 00:49:03 188548 —-a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll . ==================== Find3M ==================== . 2012-09-14 15:59:56 26 —-a-w- c:\windows\WINSTART.BAT 2012-09-14 15:59:56 123 —-a-w- c:\windows\TMPCPYIS.BAT 2012-09-14 15:59:56 122 —-a-w- c:\windows\TMPDELIS.BAT 2012-07-06 13:58:51 78336 —-a-w- c:\windows\system32\browser.dll 2012-07-04 14:05:18 139784 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2012-07-03 13:40:15 1866112 —-a-w- c:\windows\system32\win32k.sys 2012-07-02 17:49:33 916992 —-a-w- c:\windows\system32\wininet.dll 2012-07-02 17:49:32 43520 ——w- c:\windows\system32\licmgr10.dll 2012-07-02 17:49:32 1469440 ——w- c:\windows\system32\inetcpl.cpl 2012-07-02 12:05:43 385024 ——w- c:\windows\system32\html.iec 2012-06-28 21:33:04 81920 ——w- c:\windows\system32\ieencode.dll . ============= FINISH: 7:35:27.79 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Home Edition Boot Device: \Device\HarddiskVolume1 Install Date: 9/11/2012 6:15:23 PM System Uptime: 9/21/2012 7:24:40 AM (0 hours ago) . Motherboard: ASUSTek Computer INC. | | NAGAMI2 Processor: AMD Athlon™ 64 Processor 3800+ | Socket 939 | 2405/199mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 466 GiB total, 454.361 GiB free. D: is CDROM (CDFS) . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Device ID: ACPI\AWY0001\2&DABA3FF&0 Manufacturer: Name: PNP Device ID: ACPI\AWY0001\2&DABA3FF&0 Service: . Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: NVIDIA nForce Networking Controller Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0269\4&180DF4C5&0&01 Manufacturer: NVIDIA Name: NVIDIA nForce Networking Controller PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0269\4&180DF4C5&0&01 Service: NVENETFD . ==== System Restore Points =================== . RP1: 9/11/2012 6:19:08 PM - System Checkpoint RP2: 9/12/2012 7:46:35 AM - Installed Windows XP Service Pack 2. RP3: 9/12/2012 7:55:31 AM - Installed Windows XP Service Pack 3. RP4: 9/12/2012 11:51:33 AM - Installed D-Link DFE-530TX+ RP5: 9/12/2012 11:53:45 AM - Configured D-Link DFE-530TX+ RP6: 9/12/2012 1:42:24 PM - Software Distribution Service 3.0 RP7: 9/12/2012 2:08:30 PM - Software Distribution Service 3.0 RP8: 9/12/2012 2:23:45 PM - Installed Java 7 Update 7 RP9: 9/12/2012 6:41:29 PM - 09122012 After Restore RP10: 9/13/2012 3:26:14 PM - Software Distribution Service 3.0 RP11: 9/14/2012 3:47:16 PM - Installed WOT for Internet Explorer RP12: 9/14/2012 4:26:38 PM - Installed Microsoft Works RP13: 9/14/2012 4:46:41 PM - Software Distribution Service 3.0 RP14: 9/15/2012 8:10:44 AM - Software Distribution Service 3.0 RP15: 9/15/2012 9:49:28 AM - Good Restore Point RP16: 9/15/2012 11:24:42 AM - Removed BabylonObjectInstaller RP17: 9/16/2012 1:54:59 AM - Software Distribution Service 3.0 RP18: 9/16/2012 8:23:36 AM - Software Distribution Service 3.0 RP19: 9/16/2012 9:26:59 AM - Installed DIRECTV Player. RP20: 9/17/2012 3:00:14 AM - Software Distribution Service 3.0 RP21: 9/17/2012 12:21:14 PM - Software Distribution Service 3.0 RP22: 9/18/2012 12:48:43 PM - Installed Driver Detective. RP23: 9/18/2012 1:19:42 PM - Software Distribution Service 3.0 RP24: 9/18/2012 2:55:21 PM - Removed Driver Detective. RP25: 9/19/2012 3:00:13 AM - Software Distribution Service 3.0 RP26: 9/19/2012 10:42:38 AM - Software Distribution Service 3.0 RP27: 9/19/2012 10:53:12 AM - Printer Driver Microsoft XPS Document Writer Installed RP28: 9/19/2012 2:26:05 PM - Software Distribution Service 3.0 RP29: 9/19/2012 3:01:44 PM - Software Distribution Service 3.0 RP30: 9/20/2012 3:58:43 PM - Software Distribution Service 3.0 . ==== Installed Programs ====================== . Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Reader X (10.1.4) Bing Bar Bing Rewards Client Installer Browser Manager Compatibility Pack for the 2007 Office system Coupon Companion Coupon Printer for Windows D-Link DFE-530TX+ D-Link PCI Fast Ethernet Adapter DIRECTV Player Enhanced Multimedia Keyboard Solution ESET Online Scanner v3 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows XP (KB2633952) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) HP Deskjet 3050 J610 series Basic Device Software HP Deskjet 3050 J610 series Help HP Deskjet 3050 J610 series Product Improvement Study HP Photo Creations HP Update Java 7 Update 7 Java Auto Updater Malwarebytes Anti-Malware version 1.65.0.1400 Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Application Error Reporting Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Security Client Microsoft Security Essentials Microsoft Silverlight Microsoft Works NVIDIA Drivers RealNetworks - Microsoft Visual C++ 2008 Runtime RealPlayer Realtek High Definition Audio Driver RealUpgrade 1.1 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft Windows (KB2564958) Security Update for Windows Internet Explorer 8 (KB2510531) Security Update for Windows Internet Explorer 8 (KB2544521) Security Update for Windows Internet Explorer 8 (KB2618444) Security Update for Windows Internet Explorer 8 (KB2722913) Security Update for Windows Internet Explorer 8 (KB982381) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476490) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2481109) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2491683) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2507938) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2510581) Security Update for Windows XP (KB2535512) Security Update for Windows XP (KB2536276-v2) Security Update for Windows XP (KB2544521) Security Update for Windows XP (KB2544893-v2) Security Update for Windows XP (KB2566454) Security Update for Windows XP (KB2570947) Security Update for Windows XP (KB2584146) Security Update for Windows XP (KB2585542) Security Update for Windows XP (KB2592799) Security Update for Windows XP (KB2598479) Security Update for Windows XP (KB2603381) Security Update for Windows XP (KB2618451) Security Update for Windows XP (KB2619339) Security Update for Windows XP (KB2620712) Security Update for Windows XP (KB2624667) Security Update for Windows XP (KB2631813) Security Update for Windows XP (KB2646524) Security Update for Windows XP (KB2653956) Security Update for Windows XP (KB2655992) Security Update for Windows XP (KB2659262) Security Update for Windows XP (KB2661637) Security Update for Windows XP (KB2676562) Security Update for Windows XP (KB2686509) Security Update for Windows XP (KB2691442) Security Update for Windows XP (KB2698365) Security Update for Windows XP (KB2705219) Security Update for Windows XP (KB2707511) Security Update for Windows XP (KB2712808) Security Update for Windows XP (KB2719985) Security Update for Windows XP (KB2722913) Security Update for Windows XP (KB2723135) Security Update for Windows XP (KB2731847) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982665) Spell Checker For OE 2.1 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Windows Internet Explorer 8 (KB2598845) Update for Windows XP (KB2345886) Update for Windows XP (KB2467659) Update for Windows XP (KB2718704) Update for Windows XP (KB2736233) Update for Windows XP (KB898461) Update for Windows XP (KB951978) Update for Windows XP (KB955759) Update for Windows XP (KB968389) Update for Windows XP (KB971029) Update for Windows XP (KB973815) WebFldrs XP Windows Genuine Advantage Validation Tool (KB892130) Windows Internet Explorer 8 Windows XP Service Pack 3 WOT for Internet Explorer . ==== Event Viewer Messages From Past Week ======== . 9/20/2012 12:05:40 AM, error: Service Control Manager [7034] - The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s). 9/19/2012 9:55:58 PM, error: Service Control Manager [7031] - The Browser Manager service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. 9/19/2012 7:30:49 PM, error: Service Control Manager [7034] - The BBUpdate service terminated unexpectedly. It has done this 1 time(s). 9/19/2012 7:30:48 PM, error: Service Control Manager [7034] - The MBAMScheduler service terminated unexpectedly. It has done this 1 time(s). 9/19/2012 7:30:48 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s). 9/19/2012 7:30:48 PM, error: Service Control Manager [7034] - The Agere Modem Call Progress Audio service terminated unexpectedly. It has done this 1 time(s). 9/19/2012 7:30:48 PM, error: Service Control Manager [7031] - The Microsoft Antimalware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service. 9/19/2012 12:47:41 PM, error: atapi [9] - The device, \Device\Ide\IdePort0, did not respond within the timeout period. 9/19/2012 10:44:32 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the NVSvc service. . ==== End Of File ===========================

Lewg

Post #17September 24, 2012, 3:39 PM UTC

I am back and ready to restart our session. Thanks!

Tomk

Post #18September 24, 2012, 7:38 PM UTC

Welcome back. I've been stalling… trying to see a problem. Can you please describe for me… as specifically as you can… what issues you are having?

Lewg

Post #19September 24, 2012, 8:28 PM UTC

I cannot click on any icon on my desktop and get to the net……I have rebooted both my PC Wireless and DSL modem several times……I have been trying for the last 20 minutes to get my browser to come up so I could paste in the url I get when you reply. When I try and click on the What the Tech url in my email I am sent, it don't work……..I can open up Outlook Express and it's runs fast getting and sending my email…..Other than that nothing else works……In the past using WTT and being asked to run Eset, It never found any threats until now.. You say all the threats are OK….. The PC freezes up all the time now….. .

Lewg

Post #20September 24, 2012, 10:21 PM UTC

I am not sure what was going on, but I removed MBAM. When I recently d/loaded last week, it placed a icon in the taskbar. A window kept popping up saying MBAM will end in 4 days. I decided to remove it and now my shortcut buttons on my keyboard work….and all the icons on my desktop now work…..However I would like to continue with our session and make sure the log of your choice looks OK…..Which one would you like…HJT or OTL log, or both?

Tomk

Post #21September 24, 2012, 11:24 PM UTC

Let's take a peek at your services just to make sure they're all OK.

Please download Farbar Service Scanner and run it on the computer with the issue.

Make sure all options remain checked.
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

Lewg

Post #22September 25, 2012, 12:34 AM UTC

Farbar Service Scanner Version: 19-09-2012 Ran by [removed] (administrator) on 24-09-2012 at 20:33:02 Running from "C:\Documents and Settings\Lew\Desktop" Microsoft Windows XP Home Edition Service Pack 3 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo IP is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Security Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ File Check: ======== C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit C:\WINDOWS\system32\netman.dll => MD5 is legit C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit C:\WINDOWS\system32\srsvc.dll => MD5 is legit C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit C:\WINDOWS\system32\wscsvc.dll => MD5 is legit C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit C:\WINDOWS\system32\wuauserv.dll => MD5 is legit C:\WINDOWS\system32\qmgr.dll => MD5 is legit C:\WINDOWS\system32\es.dll => MD5 is legit C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit C:\WINDOWS\system32\svchost.exe => MD5 is legit C:\WINDOWS\system32\rpcss.dll => MD5 is legit C:\WINDOWS\system32\services.exe => MD5 is legit Extra List: ======= Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4) 0x0700000005000000010000000200000003000000040000000600000007000000 IpSec Tag value is correct. **** End of log ****

Tomk

Post #23September 25, 2012, 1:27 AM UTC

That looks perfect. Ok… please run me an OTL log for a final look at things.

Lewg

Post #24September 25, 2012, 3:01 AM UTC last edited September 25, 2012, 3:35 AM UTC

OTL logfile created on: 9/24/2012 11:31:21 PM - Run 7
OTL by OldTimer - Version 3.2.64.0 Folder = C:\Documents and Settings\Lew\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

958.48 Mb Total Physical Memory | 533.45 Mb Available Physical Memory | 55.66% Memory free
2.26 Gb Paging File | 1.91 Gb Available in Paging File | 84.51% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 454.86 Gb Free Space | 97.66% Space Free | Partition Type: NTFS
Drive D: | 202.83 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: LEW-0CCC0E88CE3 | User Name: Lew | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/09/19 13:57:49 | 000,600,064 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Lew\My Documents\Downloads\OTL.exe
PRC - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
PRC - [2012/09/12 14:56:35 | 000,296,096 | —- | M] (RealNetworks, Inc.) – C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2012/09/12 14:23:49 | 000,161,768 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012/08/16 14:35:48 | 000,524,976 | —- | M] (NDS Technologies) – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe
PRC - [2012/08/16 14:35:44 | 006,485,160 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\NDSPCShowServer.exe
PRC - [2012/06/11 16:22:16 | 000,240,208 | —- | M] (Microsoft Corporation.) – C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.EXE
PRC - [2012/03/26 17:08:12 | 000,931,200 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2012/03/26 17:03:40 | 000,011,552 | —- | M] (Microsoft Corporation) – c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2009/03/27 22:10:56 | 000,014,336 | —- | M] (LSI Corporation) – C:\Program Files\LSI SoftModem\agrsmsvc.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2012/09/14 17:48:20 | 002,098,200 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
MOD - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
MOD - [2012/08/16 14:36:44 | 000,091,272 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\z.dll
MOD - [2012/08/16 14:36:40 | 000,273,568 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\ndsLogStore.dll
MOD - [2012/08/16 14:36:38 | 001,402,520 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\libxml2-2.dll
MOD - [2012/08/16 14:36:24 | 000,688,296 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\libgstreamer-0.10.dll
MOD - [2012/08/16 14:35:54 | 007,117,984 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\gsttspplugin.dll
MOD - [2012/08/16 14:35:44 | 006,485,160 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\NDSPCShowServer.exe
MOD - [2012/08/16 14:35:40 | 002,087,072 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\DrmSingleton.dll
MOD - [2006/05/09 15:50:00 | 001,466,368 | —- | M] () – C:\WINDOWS\system32\nview.dll
MOD - [2006/05/09 15:50:00 | 000,466,944 | —- | M] () – C:\WINDOWS\system32\nvshell.dll

========== Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] – %SystemRoot%\System32\hidserv.dll – (HidServ)
SRV - File not found [On_Demand | Stopped] – %SystemRoot%\System32\appmgmts.dll – (AppMgmt)
SRV - [2012/09/16 09:25:33 | 000,250,568 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () [Auto | Running] – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe – (Browser Manager)
SRV - [2012/09/12 14:23:49 | 000,161,768 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2012/06/11 16:22:16 | 000,240,208 | —- | M] (Microsoft Corporation.) [On_Demand | Running] – C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.EXE – (BBUpdate)
SRV - [2012/06/11 16:22:16 | 000,193,616 | —- | M] (Microsoft Corporation.) [Auto | Stopped] – C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.EXE – (BBSvc)
SRV - [2012/03/26 17:03:40 | 000,011,552 | —- | M] (Microsoft Corporation) [Auto | Running] – c:\Program Files\Microsoft Security Client\MsMpEng.exe – (MsMpSvc)
SRV - [2009/03/27 22:10:56 | 000,014,336 | —- | M] (LSI Corporation) [Auto | Running] – C:\Program Files\LSI SoftModem\agrsmsvc.exe – (AgereModemAudio)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Lew\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2009/08/13 15:07:12 | 001,163,328 | —- | M] (LSI Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\AGRSM.sys – (AgereSoftModem)
DRV - [2009/02/11 12:40:40 | 005,028,352 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2007/07/13 10:44:22 | 000,043,008 | —- | M] (D-Link ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\dlkfet5b.sys – (FETNDISB)
DRV - [2006/03/03 14:31:04 | 000,013,056 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nvnetbus.sys – (nvnetbus)
DRV - [2006/03/03 14:31:02 | 000,034,176 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\NVENETFD.sys – (NVENETFD)
DRV - [2005/12/12 17:27:00 | 000,019,072 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\PS2.sys – (Ps2)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://%20msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
IE - HKCU\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}…000fc7516e3409b
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@nds.com/PCShowPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPCShowPlugin.dll File not found
FF - HKCU\Software\MozillaPlugins\@nds.com/PlayerPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPlayerPlugin.dll (NDS)
FF - HKCU\Software\MozillaPlugins\NDS.com/PlayerPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPlayerPlugin.dll (NDS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/09/12 14:56:42 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012/09/14 17:48:22 | 000,000,000 | —D | M]

[2012/09/14 17:47:46 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2012/09/20 10:30:46 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Bing Bar Helper) - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found.
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O3 - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [PCShowServer] C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe (NDS Technologies)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd…b?1347465718176 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1347978180406 (MUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E5072BA-3DCD-43F1-A347-7B3E0450AF88}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/09/11 18:13:41 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012/09/24 20:31:38 | 000,693,265 | —- | C] (Farbar) – C:\Documents and Settings\Lew\Desktop\FSS.exe
[2012/09/21 07:31:10 | 000,607,260 | R— | C] (Swearware) – C:\Documents and Settings\Lew\Desktop\dds.scr
[2012/09/20 16:02:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusb.dll
[2012/09/20 16:02:10 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusd.dll
[2012/09/20 13:17:27 | 000,000,000 | —D | C] – C:\WINDOWS\Sun
[2012/09/20 10:58:15 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2012/09/19 22:51:07 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2012/09/19 21:59:33 | 000,000,000 | RHSD | C] – C:\cmdcons
[2012/09/19 21:56:15 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2012/09/19 21:56:15 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2012/09/19 21:56:15 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2012/09/19 21:56:15 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2012/09/19 21:56:06 | 000,000,000 | —D | C] – C:\Qoobox
[2012/09/19 21:56:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2012/09/19 21:56:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Administrative Tools
[2012/09/19 21:55:54 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2012/09/19 21:51:06 | 004,752,754 | R— | C] (Swearware) – C:\Documents and Settings\Lew\Desktop\ComboFix.exe
[2012/09/19 10:46:41 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2012/09/19 10:46:37 | 000,000,000 | —D | C] – C:\Program Files\MSBuild
[2012/09/19 10:46:30 | 000,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2012/09/19 10:46:01 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2012/09/19 10:46:01 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2012/09/19 10:46:01 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2012/09/19 10:46:01 | 000,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2012/09/19 10:46:01 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2012/09/19 10:46:01 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2012/09/19 10:46:00 | 000,000,000 | —D | C] – C:\c57b15f097730dbd27a55ca19911
[2012/09/19 10:05:47 | 000,000,000 | —D | C] – C:\_OTL
[2012/09/18 15:43:51 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2012/09/18 15:24:59 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbprint.sys
[2012/09/18 15:24:53 | 000,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2012/09/18 15:24:49 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2012/09/18 15:22:54 | 000,000,000 | —D | C] – C:\Program Files\Microsoft
[2012/09/18 15:22:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
[2012/09/18 15:22:19 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2012/09/18 15:22:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Mozilla
[2012/09/18 15:21:58 | 000,000,000 | —D | C] – C:\Program Files\HP Photo Creations
[2012/09/18 15:21:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HP Photo Creations
[2012/09/18 15:21:55 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Coupons
[2012/09/18 15:21:54 | 000,000,000 | —D | C] – C:\Program Files\Coupons
[2012/09/18 15:21:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\HpUpdate
[2012/09/18 15:21:27 | 000,527,208 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\HPDiscoPM9311.dll
[2012/09/18 15:21:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\HP
[2012/09/18 15:21:25 | 001,792,872 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\HPScanMiniDrv_DJ3050_J610.dll
[2012/09/18 15:21:24 | 000,267,112 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinksts9311LM.dll
[2012/09/18 15:21:24 | 000,232,296 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinksts9311.dll
[2012/09/18 15:21:24 | 000,213,864 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinkcoi9311.dll
[2012/09/18 15:21:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2012/09/18 15:20:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HP
[2012/09/18 15:20:33 | 000,000,000 | —D | C] – C:\Program Files\HP
[2012/09/18 15:19:06 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\HP
[2012/09/18 14:39:47 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Sites Login informatin
[2012/09/18 13:25:03 | 000,019,072 | —- | C] (Hewlett-Packard Company) – C:\WINDOWS\System32\drivers\PS2.sys
[2012/09/18 13:25:01 | 000,000,000 | —D | C] – C:\HP
[2012/09/18 13:24:59 | 000,000,000 | —D | C] – C:\temp
[2012/09/18 12:50:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Downloads
[2012/09/18 12:47:38 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Ask
[2012/09/18 12:43:50 | 000,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2012/09/18 12:43:22 | 000,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2012/09/18 10:50:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Launch Manager 1.00.1e
[2012/09/18 10:50:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Coupon Companion
[2012/09/18 10:49:58 | 000,000,000 | —D | C] – C:\Program Files\Coupon Companion
[2012/09/16 09:27:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\DTV
[2012/09/16 09:27:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player
[2012/09/14 18:58:38 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Malwarebytes
[2012/09/14 18:58:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2012/09/14 18:43:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\backups
[2012/09/14 17:50:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Spell Checker For OE 2.1
[2012/09/14 17:48:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\searchplugins
[2012/09/14 17:48:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Extensions
[2012/09/14 17:48:25 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Browser Manager
[2012/09/14 17:48:19 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Browser Manager
[2012/09/14 17:47:46 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2012/09/14 17:47:23 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Babylon
[2012/09/14 17:47:23 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Babylon
[2012/09/14 17:42:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Template
[2012/09/14 16:46:22 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2012/09/14 16:29:21 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2012/09/14 16:28:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works
[2012/09/14 16:26:40 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2012/09/14 15:47:16 | 000,000,000 | —D | C] – C:\Program Files\WOT
[2012/09/14 14:31:21 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\Lew\My Documents\HiJackThis.exe
[2012/09/14 14:20:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Help
[2012/09/14 11:59:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Quicken
[2012/09/14 11:59:48 | 000,308,800 | —- | C] (Intuit) – C:\WINDOWS\System\Q_AFUI16.DLL
[2012/09/14 11:59:48 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2.DLL
[2012/09/14 11:59:48 | 000,260,704 | —- | C] (Intuit) – C:\WINDOWS\System\QFNIC16.DLL
[2012/09/14 11:59:48 | 000,177,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TYPELIB.DLL
[2012/09/14 11:59:48 | 000,164,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2DISP.DLL
[2012/09/14 11:59:48 | 000,155,408 | —- | C] (Intuit) – C:\WINDOWS\System\QCONNECT.DLL
[2012/09/14 11:59:48 | 000,150,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2NLS.DLL
[2012/09/14 11:59:48 | 000,146,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MFCOLEUI.DLL
[2012/09/14 11:59:48 | 000,136,544 | —- | C] (Intuit) – C:\WINDOWS\System\QFNAW16.DLL
[2012/09/14 11:59:48 | 000,126,240 | —- | C] (Intuit) – C:\WINDOWS\System\QFNUT16.DLL
[2012/09/14 11:59:48 | 000,110,640 | —- | C] (Inverse Network Technology Inc.) – C:\WINDOWS\System\QFNOA16.DLL
[2012/09/14 11:59:48 | 000,108,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMPOBJ.DLL
[2012/09/14 11:59:48 | 000,091,936 | —- | C] (Intuit) – C:\WINDOWS\System\Q_LINK16.DLL
[2012/09/14 11:59:48 | 000,088,316 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLRMI16.DLL
[2012/09/14 11:59:48 | 000,084,224 | —- | C] (Intuit) – C:\WINDOWS\System\QCON1632.EXE
[2012/09/14 11:59:48 | 000,082,384 | —- | C] (Intuit, Inc.) – C:\WINDOWS\System\ONLCFG16.DLL
[2012/09/14 11:59:48 | 000,081,088 | —- | C] (Intuit) – C:\WINDOWS\System\Q_ENLB16.DLL
[2012/09/14 11:59:48 | 000,066,160 | —- | C] (Intuit) – C:\WINDOWS\System\QFNBC16.DLL
[2012/09/14 11:59:48 | 000,057,728 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLC16.DLL
[2012/09/14 11:59:48 | 000,057,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2CONV.DLL
[2012/09/14 11:59:48 | 000,053,360 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLASYN16.DLL
[2012/09/14 11:59:48 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2PROX.DLL
[2012/09/14 11:59:48 | 000,043,248 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TSSPRV16.DLL
[2012/09/14 11:59:48 | 000,035,568 | —- | C] (Inverse Network Technology, Inc.) – C:\WINDOWS\System\QFNSW16.DLL
[2012/09/14 11:59:48 | 000,030,096 | —- | C] (Intuit) – C:\WINDOWS\System\Q_COMM16.DLL
[2012/09/14 11:59:48 | 000,020,208 | —- | C] (Intuit) – C:\WINDOWS\System\INTUPROF.DLL
[2012/09/14 11:59:48 | 000,018,336 | —- | C] (Intuit) – C:\WINDOWS\System\QFNSET16.DLL
[2012/09/14 11:59:48 | 000,014,192 | —- | C] (Intuit) – C:\WINDOWS\System\QFNGLU16.DLL
[2012/09/14 11:59:48 | 000,010,128 | —- | C] (Intuit, Inc.) – C:\WINDOWS\System\QFNTHUNK.DLL
[2012/09/14 11:59:48 | 000,007,136 | —- | C] (Intuit) – C:\WINDOWS\System\Q_ENUT16.DLL
[2012/09/14 11:59:45 | 000,151,552 | —- | C] (Blue Sky Software Corp.) – C:\WINDOWS\System\HYPERTOP.DLL
[2012/09/14 11:59:45 | 000,081,408 | —- | C] (Blue Sky Software Corp.) – C:\WINDOWS\System\CNT31.DLL
[2012/09/14 11:59:45 | 000,021,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\CTL3DV2.DLL
[2012/09/14 11:59:45 | 000,000,000 | —D | C] – C:\QUICKENW
[2012/09/14 11:59:45 | 000,000,000 | —D | C] – C:\WINDOWS\QFNONL
[2012/09/14 11:59:24 | 000,249,072 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\UNINST16.EXE
[2012/09/14 11:59:24 | 000,026,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\CTL3D.DLL
[2012/09/14 11:57:59 | 000,000,000 | —D | C] – C:\Quicken6
[2012/09/14 10:11:00 | 000,275,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2012/09/14 10:11:00 | 000,017,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2012/09/14 09:03:16 | 000,000,000 | —D | C] – C:\desktop
[2012/09/14 08:24:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2012/09/14 08:18:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2012/09/13 18:56:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Western Digital
[2012/09/13 15:30:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Temp
[2012/09/13 15:30:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Adobe
[2012/09/13 15:26:15 | 000,237,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2012/09/13 15:19:14 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Security Client
[2012/09/13 15:13:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Identities
[2012/09/12 18:39:38 | 000,000,000 | —D | C] – C:\Program Files\LSI SoftModem
[2012/09/12 18:39:06 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvunrm.exe
[2012/09/12 18:39:06 | 000,101,888 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nvtcp.sys
[2012/09/12 15:25:21 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Sun
[2012/09/12 15:09:57 | 000,000,000 | —D | C] – C:\swsetup
[2012/09/12 15:09:56 | 000,000,000 | —D | C] – C:\SYSTEM.SAV
[2012/09/12 15:09:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\WinBatch
[2012/09/12 14:58:28 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Videos
[2012/09/12 14:56:42 | 000,000,000 | —D | C] – C:\Program Files\Common Files\xing shared
[2012/09/12 14:56:39 | 000,198,864 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2012/09/12 14:56:35 | 000,272,896 | —- | C] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2012/09/12 14:56:35 | 000,006,656 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2012/09/12 14:56:35 | 000,005,632 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2012/09/12 14:56:35 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\RealNetworks
[2012/09/12 14:56:32 | 000,000,000 | —D | C] – C:\Program Files\Real
[2012/09/12 14:56:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Real
[2012/09/12 14:53:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Real
[2012/09/12 14:53:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Macromedia
[2012/09/12 14:53:18 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Adobe
[2012/09/12 14:51:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Google
[2012/09/12 14:50:52 | 000,000,000 | —D | C] – C:\Program Files\Google
[2012/09/12 14:50:28 | 000,696,520 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/12 14:50:28 | 000,073,416 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/12 14:26:23 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2012/09/12 14:26:23 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2012/09/12 14:24:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2012/09/12 14:24:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2012/09/12 14:24:05 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2012/09/12 14:23:59 | 000,821,736 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\npDeployJava1.dll
[2012/09/12 14:23:59 | 000,746,984 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2012/09/12 14:23:59 | 000,246,760 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/12 14:23:59 | 000,143,872 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2012/09/12 14:23:55 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/12 14:23:55 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2012/09/12 14:23:55 | 000,093,672 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/12 14:23:47 | 000,000,000 | —D | C] – C:\Program Files\Java
[2012/09/12 14:15:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\McAfee
[2012/09/12 14:14:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Sun
[2012/09/12 13:50:00 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\IECompatCache
[2012/09/12 13:48:31 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\PrivacIE
[2012/09/12 12:35:32 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Lang
[2012/09/12 12:35:16 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\IETldCache
[2012/09/12 12:24:13 | 000,521,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012/09/12 12:23:42 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2012/09/12 12:23:38 | 011,111,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/09/12 12:23:38 | 002,000,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/09/12 12:23:38 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/09/12 12:23:38 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/09/12 12:23:38 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/09/12 12:23:32 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2012/09/12 12:22:50 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2012/09/12 12:11:32 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2012/09/12 12:11:25 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2012/09/12 12:10:37 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2012/09/12 12:10:37 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2012/09/12 12:10:29 | 000,456,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2012/09/12 12:09:47 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2012/09/12 12:09:26 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2012/09/12 12:09:13 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2012/09/12 12:09:09 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2012/09/12 12:08:48 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2012/09/12 12:08:48 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2012/09/12 12:07:46 | 000,730,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2012/09/12 12:07:45 | 002,192,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2012/09/12 12:07:45 | 002,148,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2012/09/12 12:07:45 | 002,026,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2012/09/12 12:07:05 | 000,139,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwd.sys
[2012/09/12 12:07:04 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2012/09/12 12:07:03 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2012/09/12 12:06:58 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mup.sys
[2012/09/12 12:06:06 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vgx.dll
[2012/09/12 12:05:51 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2012/09/12 12:02:44 | 000,010,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndistapi.sys
[2012/09/12 12:01:54 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\UserData
[2012/09/12 12:01:53 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2012/09/12 12:01:52 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2012/09/12 12:01:33 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2012/09/12 11:56:02 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\splitter.sys
[2012/09/12 11:56:01 | 000,083,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdmaud.sys
[2012/09/12 11:55:59 | 000,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dmusic.sys
[2012/09/12 11:55:58 | 000,056,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swmidi.sys
[2012/09/12 11:55:56 | 000,142,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aec.sys
[2012/09/12 11:55:55 | 000,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kmixer.sys
[2012/09/12 11:55:54 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmkaud.sys
[2012/09/12 11:55:53 | 000,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sysaudio.sys
[2012/09/12 11:55:51 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mskssrv.sys
[2012/09/12 11:55:50 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspqm.sys
[2012/09/12 11:55:48 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspclock.sys
[2012/09/12 11:55:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\RTCOM
[2012/09/12 11:55:01 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2012/09/12 11:55:01 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\portcls.sys
[2012/09/12 11:55:01 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2012/09/12 11:55:01 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmk.sys
[2012/09/12 11:55:01 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2012/09/12 11:55:01 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksuser.dll
[2012/09/12 11:55:00 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2012/09/12 11:55:00 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksproxy.ax
[2012/09/12 11:51:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2012/09/12 11:51:41 | 000,000,000 | —D | C] – C:\Program Files\InstallShield Installation Information
[2012/09/12 11:51:35 | 000,000,000 | —D | C] – C:\Program Files\D-Link
[2012/09/12 08:07:42 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2012/09/12 07:59:26 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2012/09/12 07:59:26 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2012/09/12 07:59:26 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2012/09/12 07:59:23 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2012/09/12 07:59:22 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2012/09/12 07:59:22 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2012/09/12 07:59:18 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2012/09/12 07:59:18 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2012/09/12 07:59:18 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2012/09/12 07:59:17 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2012/09/12 07:59:17 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2012/09/12 07:59:17 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2012/09/12 07:59:17 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2012/09/12 07:59:17 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2012/09/12 07:59:17 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2012/09/12 07:59:17 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2012/09/12 07:59:17 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2012/09/12 07:59:17 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2012/09/12 07:59:17 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2012/09/12 07:59:16 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2012/09/12 07:59:16 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2012/09/12 07:59:16 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2012/09/12 07:59:16 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2012/09/12 07:59:16 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2012/09/12 07:59:16 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2012/09/12 07:59:16 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2012/09/12 07:59:15 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2012/09/12 07:59:15 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2012/09/12 07:59:15 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2012/09/12 07:59:15 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2012/09/12 07:59:15 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2012/09/12 07:59:15 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2012/09/12 07:59:15 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2012/09/12 07:59:15 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2012/09/12 07:59:15 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2012/09/12 07:59:15 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2012/09/12 07:59:14 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2012/09/12 07:59:14 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2012/09/12 07:59:14 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2012/09/12 07:59:12 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2012/09/12 07:59:12 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2012/09/12 07:56:22 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2012/09/12 07:55:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2012/09/12 07:53:45 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2012/09/12 07:47:51 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2012/09/12 07:47:51 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2012/09/12 07:47:51 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2012/09/12 07:47:51 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2012/09/12 07:47:51 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2012/09/12 07:47:51 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2012/09/12 07:47:50 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2012/09/12 07:47:50 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2012/09/12 07:47:50 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2012/09/12 07:47:50 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2012/09/12 07:47:50 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2012/09/12 07:47:50 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2012/09/12 07:47:50 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2012/09/12 07:47:50 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2012/09/12 07:47:50 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2012/09/12 07:47:50 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2012/09/12 07:47:50 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2012/09/12 07:47:50 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2012/09/12 07:47:50 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2012/09/12 07:47:50 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2012/09/12 07:47:50 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2012/09/12 07:47:50 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2012/09/12 07:47:50 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2012/09/12 07:47:50 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2012/09/12 07:47:50 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2012/09/12 07:47:50 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2012/09/12 07:47:50 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2012/09/12 07:47:50 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2012/09/12 07:47:50 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2012/09/12 07:47:50 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2012/09/12 07:47:50 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2012/09/12 07:47:50 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2012/09/12 07:47:50 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2012/09/12 07:47:50 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2012/09/12 07:47:50 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2012/09/12 07:47:50 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2012/09/12 07:47:50 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2012/09/12 07:47:50 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2012/09/12 07:47:50 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2012/09/12 07:47:50 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2012/09/12 07:47:50 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2012/09/12 07:47:50 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2012/09/12 07:47:50 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2012/09/12 07:47:50 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2012/09/12 07:47:50 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2012/09/12 07:47:50 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2012/09/12 07:47:50 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2012/09/12 07:47:50 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2012/09/12 07:47:50 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2012/09/12 07:47:50 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2012/09/12 07:47:50 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2012/09/12 07:47:50 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2012/09/12 07:47:50 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2012/09/12 07:47:50 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2012/09/12 07:47:50 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2012/09/12 07:47:50 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2012/09/12 07:47:50 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2012/09/12 07:47:50 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2012/09/12 07:47:50 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2012/09/12 07:47:50 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2012/09/12 07:47:50 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2012/09/12 07:47:49 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2012/09/12 07:47:49 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2012/09/12 07:47:49 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2012/09/12 07:47:49 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2012/09/12 07:47:49 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2012/09/12 07:47:49 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2012/09/12 07:47:49 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2012/09/12 07:47:49 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2012/09/12 07:47:49 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2012/09/12 07:47:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2012/09/12 07:47:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2012/09/12 07:47:49 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2012/09/12 07:47:49 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2012/09/12 07:47:49 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2012/09/12 07:47:49 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2012/09/12 07:47:49 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2012/09/12 07:47:41 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscomex.dll
[2012/09/12 07:47:41 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscomex.dll
[2012/09/12 07:47:40 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsmon.dll
[2012/09/12 07:47:40 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsmon.dll
[2012/09/12 07:47:37 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssvc.exe
[2012/09/12 07:47:33 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsxp32.dll
[2012/09/12 07:47:33 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2012/09/12 07:47:24 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsres.dll
[2012/09/12 07:47:24 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsres.dll
[2012/09/12 07:47:23 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxst30.dll
[2012/09/12 07:47:23 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxst30.dll
[2012/09/12 07:47:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsext32.dll
[2012/09/12 07:47:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsext32.dll
[2012/09/12 07:47:20 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsapi.dll
[2012/09/12 07:47:20 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsapi.dll
[2012/09/12 07:47:19 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsst.dll
[2012/09/12 07:47:19 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsst.dll
[2012/09/12 07:47:19 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxswzrd.dll
[2012/09/12 07:47:19 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2012/09/12 07:47:18 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscover.exe
[2012/09/12 07:47:18 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscover.exe
[2012/09/12 07:47:11 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxstiff.dll
[2012/09/12 07:47:11 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxstiff.dll
[2012/09/12 07:47:09 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscom.dll
[2012/09/12 07:47:09 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscom.dll
[2012/09/12 07:47:07 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsperf.dll
[2012/09/12 07:47:07 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsperf.dll
[2012/09/12 07:47:05 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsui.dll
[2012/09/12 07:47:05 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsui.dll
[2012/09/12 07:47:02 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsevent.dll
[2012/09/12 07:47:02 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsevent.dll
[2012/09/12 07:46:58 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsdrv.dll
[2012/09/12 07:46:58 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2012/09/12 07:46:53 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclnt.exe
[2012/09/12 07:46:53 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2012/09/12 07:46:46 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2012/09/12 07:46:28 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2012/09/12 07:46:26 | 000,000,000 | —D | C] – C:\WINDOWS\EHome
[2012/09/11 21:08:24 | 000,000,000 | —D | C] – C:\softpaq
[2012/09/11 20:49:07 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvudisp.exe
[2012/09/11 20:49:07 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2012/09/11 20:49:04 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\NVUNINST.EXE
[2012/09/11 20:49:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2012/09/11 18:19:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Identities
[2012/09/11 18:18:59 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2012/09/11 18:18:56 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Pictures
[2012/09/11 18:18:56 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Music
[2012/09/11 18:18:54 | 000,000,000 | –SD | C] – C:\Documents and Settings\Lew\Application Data\Microsoft
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\SendTo
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\Recent
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\Application Data
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Startup
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Favorites
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Accessories
[2012/09/11 18:18:54 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\Cookies
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\Templates
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\PrintHood
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\NetHood
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\Local Settings
[2012/09/11 18:18:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Microsoft
[2012/09/11 18:18:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Desktop
[2012/09/11 18:18:11 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2012/09/11 18:18:10 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2012/09/11 18:18:09 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2012/09/11 18:18:09 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2012/09/11 18:16:10 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2012/09/11 18:16:10 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2012/09/11 18:15:19 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2012/09/11 18:15:18 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2012/09/11 18:15:18 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2012/09/11 18:15:18 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2012/09/11 18:15:18 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2012/09/11 18:15:17 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2012/09/11 18:15:16 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2012/09/11 18:15:16 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2012/09/11 18:15:15 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2012/09/11 18:15:15 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2012/09/11 18:15:15 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2012/09/11 18:15:14 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2012/09/11 18:15:14 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2012/09/11 18:15:14 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2012/09/11 18:15:14 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2012/09/11 18:15:13 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2012/09/11 18:15:13 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2012/09/11 18:15:13 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2012/09/11 18:15:13 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2012/09/11 18:15:12 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2012/09/11 18:15:11 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2012/09/11 18:15:10 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2012/09/11 18:15:10 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2012/09/11 18:15:09 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2012/09/11 18:15:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2012/09/11 18:15:08 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2012/09/11 18:15:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2012/09/11 18:15:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2012/09/11 18:15:08 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2012/09/11 18:15:08 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2012/09/11 18:15:08 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2012/09/11 18:15:08 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2012/09/11 18:15:08 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2012/09/11 18:15:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2012/09/11 18:15:07 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2012/09/11 18:15:07 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2012/09/11 18:15:07 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2012/09/11 18:15:05 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2012/09/11 18:15:05 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2012/09/11 18:15:04 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2012/09/11 18:15:04 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2012/09/11 18:15:04 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2012/09/11 18:15:03 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2012/09/11 18:15:03 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2012/09/11 18:15:02 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2012/09/11 18:15:02 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2012/09/11 18:15:02 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2012/09/11 18:15:01 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2012/09/11 18:15:01 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2012/09/11 18:15:00 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2012/09/11 18:15:00 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2012/09/11 18:15:00 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2012/09/11 18:15:00 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2012/09/11 18:15:00 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2012/09/11 18:14:59 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2012/09/11 18:14:59 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2012/09/11 18:14:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2012/09/11 18:14:59 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2012/09/11 18:14:59 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2012/09/11 18:14:58 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2012/09/11 18:14:56 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2012/09/11 18:14:53 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2012/09/11 18:14:53 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2012/09/11 18:14:50 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2012/09/11 18:14:50 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2012/09/11 18:14:49 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2012/09/11 18:14:47 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2012/09/11 18:14:47 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2012/09/11 18:14:47 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2012/09/11 18:14:46 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2012/09/11 18:14:46 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2012/09/11 18:14:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2012/09/11 18:14:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2012/09/11 18:14:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2012/09/11 18:14:44 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2012/09/11 18:14:43 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2012/09/11 18:14:43 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2012/09/11 18:14:43 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2012/09/11 18:14:43 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2012/09/11 18:14:43 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2012/09/11 18:14:43 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2012/09/11 18:14:42 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2012/09/11 18:14:42 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2012/09/11 18:14:42 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2012/09/11 18:14:42 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2012/09/11 18:14:42 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2012/09/11 18:14:42 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2012/09/11 18:14:42 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2012/09/11 18:14:42 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2012/09/11 18:14:41 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2012/09/11 18:14:41 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2012/09/11 18:14:41 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2012/09/11 18:14:41 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2012/09/11 18:14:41 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2012/09/11 18:14:41 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2012/09/11 18:14:40 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2012/09/11 18:14:40 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2012/09/11 18:14:40 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2012/09/11 18:14:36 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2012/09/11 18:14:26 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2012/09/11 18:14:26 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2012/09/11 18:14:24 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2012/09/11 18:14:24 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2012/09/11 18:14:24 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2012/09/11 18:14:23 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2012/09/11 18:14:23 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2012/09/11 18:14:22 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2012/09/11 18:14:22 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2012/09/11 18:14:21 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2012/09/11 18:14:21 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2012/09/11 18:14:21 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2012/09/11 18:14:21 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2012/09/11 18:14:20 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2012/09/11 18:14:18 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2012/09/11 18:14:17 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2012/09/11 18:14:17 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2012/09/11 18:14:16 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2012/09/11 18:14:16 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2012/09/11 18:14:16 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2012/09/11 18:14:16 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2012/09/11 18:14:16 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2012/09/11 18:14:15 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2012/09/11 18:14:14 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2012/09/11 18:14:14 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2012/09/11 18:14:14 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2012/09/11 18:14:14 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2012/09/11 18:14:14 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2012/09/11 18:14:14 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2012/09/11 18:14:13 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2012/09/11 18:14:13 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2012/09/11 18:14:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2012/09/11 18:14:07 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2012/09/11 18:14:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2012/09/11 18:13:54 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2012/09/11 18:13:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2012/09/11 18:13:26 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2012/09/11 18:12:58 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2012/09/11 18:12:52 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2012/09/11 18:12:51 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2012/09/11 18:12:44 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2012/09/11 18:12:25 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2012/09/11 18:12:02 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2012/09/11 18:12:02 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2012/09/11 18:12:02 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2012/09/11 18:12:02 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2012/09/11 18:12:02 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2012/09/11 18:12:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2012/09/11 18:11:52 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2012/09/11 18:11:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2012/09/11 18:11:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2012/09/11 18:11:50 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2012/09/11 18:11:50 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2012/09/11 18:11:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2012/09/11 18:11:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2012/09/11 18:11:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2012/09/11 18:11:47 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2012/09/11 18:11:46 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2012/09/11 18:11:46 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2012/09/11 18:11:46 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2012/09/11 18:11:46 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2012/09/11 18:11:46 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2012/09/11 18:11:46 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2012/09/11 18:11:46 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2012/09/11 18:11:45 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2012/09/11 18:11:45 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2012/09/11 18:11:40 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2012/09/11 18:11:39 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2012/09/11 18:11:38 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2012/09/11 18:11:38 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2012/09/11 18:11:38 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2012/09/11 18:11:37 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2012/09/11 18:11:37 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2012/09/11 18:11:37 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2012/09/11 18:11:37 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2012/09/11 18:11:37 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2012/09/11 18:11:36 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2012/09/11 18:11:36 | 000,329,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2012/09/11 18:11:36 | 000,329,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2012/09/11 18:11:36 | 000,210,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2012/09/11 18:11:36 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2012/09/11 18:11:36 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2012/09/11 18:11:35 | 001,933,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2012/09/11 18:11:35 | 000,577,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2012/09/11 18:11:35 | 000,577,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2012/09/11 18:11:35 | 000,219,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2012/09/11 18:11:35 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2012/09/11 18:11:35 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2012/09/11 18:11:35 | 000,053,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2012/09/11 18:11:35 | 000,035,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2012/09/11 18:11:35 | 000,035,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2012/09/11 18:11:34 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2012/09/11 18:11:34 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2012/09/11 18:11:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2012/09/11 18:11:29 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2012/09/11 18:11:25 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2012/09/11 18:11:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2012/09/11 18:11:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2012/09/11 18:11:25 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2012/09/11 18:11:20 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2012/09/11 18:11:20 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2012/09/11 18:11:20 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2012/09/11 18:11:19 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2012/09/11 18:11:18 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2012/09/11 18:11:18 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2012/09/11 18:11:18 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2012/09/11 18:11:18 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2012/09/11 18:11:15 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2012/09/11 18:11:15 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2012/09/11 18:11:14 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2012/09/11 18:11:13 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2012/09/11 18:11:10 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2012/09/11 18:11:10 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2012/09/11 18:11:09 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2012/09/11 18:11:09 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2012/09/11 18:11:09 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2012/09/11 18:11:09 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2012/09/11 18:11:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2012/09/11 18:11:02 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2012/09/11 18:11:01 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2012/09/11 18:10:51 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2012/09/11 18:10:46 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2012/09/11 18:10:46 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2012/09/11 18:10:26 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2012/09/11 18:10:25 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2012/09/11 18:10:25 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2012/09/11 18:10:25 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2012/09/11 18:10:21 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2012/09/11 18:10:20 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2012/09/11 18:10:20 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2012/09/11 18:10:19 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2012/09/11 18:10:19 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2012/09/11 18:10:19 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2012/09/11 18:10:19 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2012/09/11 18:10:19 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2012/09/11 18:10:19 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2012/09/11 18:10:19 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2012/09/11 18:10:19 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2012/09/11 18:10:19 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2012/09/11 18:10:19 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2012/09/11 18:10:18 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2012/09/11 18:10:18 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2012/09/11 18:10:18 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2012/09/11 18:10:18 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2012/09/11 18:10:18 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2012/09/11 18:10:18 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2012/09/11 18:10:18 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2012/09/11 18:10:17 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2012/09/11 18:10:17 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2012/09/11 18:10:17 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2012/09/11 18:10:17 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2012/09/11 18:10:17 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2012/09/11 18:10:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2012/09/11 18:10:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2012/09/11 18:10:17 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2012/09/11 18:10:08 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2012/09/11 18:10:08 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2012/09/11 18:10:07 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2012/09/11 18:10:07 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2012/09/11 18:10:07 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2012/09/11 18:10:07 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2012/09/11 18:10:07 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2012/09/11 18:10:07 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2012/09/11 18:10:07 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2012/09/11 18:10:07 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2012/09/11 18:10:06 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2012/09/11 18:10:06 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2012/09/11 18:09:59 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2012/09/11 18:09:59 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2012/09/11 18:09:59 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2012/09/11 18:09:59 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2012/09/11 18:09:59 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2012/09/11 18:09:59 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2012/09/11 18:09:58 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2012/09/11 18:09:58 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2012/09/11 18:09:58 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2012/09/11 18:09:58 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2012/09/11 18:09:58 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2012/09/11 18:09:58 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2012/09/11 18:09:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2012/09/11 18:09:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2012/09/11 18:09:57 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2012/09/11 18:09:57 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2012/09/11 18:09:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2012/09/11 18:09:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2012/09/11 18:09:57 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2012/09/11 18:09:57 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2012/09/11 18:09:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2012/09/11 18:09:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2012/09/11 18:09:56 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2012/09/11 18:09:56 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2012/09/11 18:09:56 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2012/09/11 18:09:56 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2012/09/11 18:09:56 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2012/09/11 18:09:56 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2012/09/11 18:09:56 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2012/09/11 18:09:56 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2012/09/11 18:09:56 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2012/09/11 18:09:56 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2012/09/11 18:09:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2012/09/11 18:09:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2012/09/11 18:09:56 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2012/09/11 18:09:56 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2012/09/11 18:09:55 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2012/09/11 18:09:55 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2012/09/11 18:09:55 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2012/09/11 18:09:55 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2012/09/11 18:09:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2012/09/11 18:09:55 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2012/09/11 18:09:54 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2012/09/11 18:09:54 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2012/09/11 18:09:54 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2012/09/11 18:09:54 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2012/09/11 18:09:51 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2012/09/11 18:09:51 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2012/09/11 18:09:51 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2012/09/11 18:09:51 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2012/09/11 18:09:51 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2012/09/11 18:09:51 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2012/09/11 18:09:51 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2012/09/11 18:09:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2012/09/11 18:09:50 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2012/09/11 18:09:50 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2012/09/11 18:09:50 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2012/09/11 18:09:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2012/09/11 18:09:50 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2012/09/11 18:09:50 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2012/09/11 18:09:50 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2012/09/11 18:09:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2012/09/11 18:09:32 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2012/09/11 18:09:31 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2012/09/11 18:09:31 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2012/09/11 18:09:31 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2012/09/11 18:09:31 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2012/09/11 18:09:31 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2012/09/11 18:09:30 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2012/09/11 18:09:30 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2012/09/11 18:09:30 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2012/09/11 18:09:29 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2012/09/11 18:09:29 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2012/09/11 18:09:28 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2012/09/11 18:09:28 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2012/09/11 18:09:28 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2012/09/11 18:09:28 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2012/09/11 18:09:28 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2012/09/11 18:09:27 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2012/09/11 18:09:27 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2012/09/11 18:09:27 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2012/09/11 18:09:27 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2012/09/11 18:09:27 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2012/09/11 18:09:27 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2012/09/11 18:09:27 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2012/09/11 18:09:26 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2012/09/11 18:09:26 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2012/09/11 18:09:26 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2012/09/11 18:09:26 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2012/09/11 18:09:25 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2012/09/11 18:09:25 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2012/09/11 18:09:25 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2012/09/11 18:09:24 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2012/09/11 18:09:24 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2012/09/11 18:09:23 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2012/09/11 18:09:22 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2012/09/11 18:09:16 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2012/09/11 18:09:16 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2012/09/11 18:09:16 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2012/09/11 18:09:15 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2012/09/11 18:07:41 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2012/09/11 11:34:13 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2012/09/11 11:33:51 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2012/09/11 11:32:51 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2012/09/11 11:32:51 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2012/09/11 11:32:50 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2012/09/11 11:32:50 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2012/09/11 11:32:49 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2012/09/11 11:32:47 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2012/09/11 11:32:47 | 000,000,000 | R–D | C] – C:\Program Files
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2012/09/11 11:32:44 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2012/09/11 11:32:44 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2012/09/11 11:32:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2012/09/11 11:32:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2012/09/11 11:32:44 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2012/09/11 11:32:44 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2012/09/11 11:32:40 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2012/09/11 11:32:40 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2012/09/11 11:32:40 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2012/09/11 11:32:40 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2012/09/11 11:32:40 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2012/09/11 11:32:40 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2012/09/11 11:32:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2012/09/11 11:32:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2012/09/11 11:32:40 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2012/09/11 11:32:40 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2012/09/11 11:32:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2012/09/11 11:32:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2012/09/11 11:32:39 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2012/09/11 11:32:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2012/09/11 11:32:38 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2012/09/11 11:32:38 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2012/09/11 11:32:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2012/09/11 11:32:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2012/09/11 11:32:36 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2012/09/11 11:32:36 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2012/09/11 11:32:36 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2012/09/11 11:32:36 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2012/09/11 11:32:36 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2012/09/11 11:32:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2012/09/11 11:32:35 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2012/09/11 11:32:35 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2012/09/11 11:32:35 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2012/09/11 11:32:35 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2012/09/11 11:32:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2012/09/11 11:32:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2012/09/11 11:32:33 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2012/09/11 11:32:33 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2012/09/11 11:32:33 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2012/09/11 11:32:33 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2012/09/11 11:32:33 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2012/09/11 11:32:33 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2012/09/11 11:32:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2012/09/11 11:32:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2012/09/11 11:32:32 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2012/09/11 11:32:32 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2012/09/11 11:32:32 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2012/09/11 11:32:32 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2012/09/11 11:32:32 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2012/09/11 11:32:32 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2012/09/11 11:32:32 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2012/09/11 11:32:32 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2012/09/11 11:32:32 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2012/09/11 11:32:32 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2012/09/11 11:32:32 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2012/09/11 11:32:32 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2012/09/11 11:32:31 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2012/09/11 11:32:31 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2012/09/11 11:32:31 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2012/09/11 11:32:31 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2012/09/11 11:32:31 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2012/09/11 11:32:31 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2012/09/11 11:32:31 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2012/09/11 11:32:31 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2012/09/11 11:32:31 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2012/09/11 11:32:30 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2012/09/11 11:32:30 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2012/09/11 11:32:30 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2012/09/11 11:32:30 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2012/09/11 11:32:30 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2012/09/11 11:32:29 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2012/09/11 11:32:29 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2012/09/11 11:32:28 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2012/09/11 11:32:22 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2012/09/11 11:32:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2012/09/11 11:32:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2012/09/11 11:32:10 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2012/09/11 11:32:10 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2012/09/11 11:32:04 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2012/09/11 11:32:04 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2012/09/11 11:31:40 | 000,000,000 | —D | C] – C:\Documents and Settings
[2012/09/11 11:31:39 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2012/09/11 11:25:47 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2012/09/11 11:25:47 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2012/09/11 11:25:47 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2012/09/11 11:25:47 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025

========== Files - Modified Within 30 Days ==========

[2012/09/24 22:52:49 | 000,043,531 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2012/09/24 22:52:49 | 000,000,274 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/24 22:52:48 | 000,000,282 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/24 22:52:47 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/09/24 22:52:35 | 000,000,366 | -H– | M] () – C:\WINDOWS\tasks\MpIdleTask.job
[2012/09/24 22:40:00 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/24 20:40:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At2.job
[2012/09/24 20:32:02 | 000,693,265 | —- | M] (Farbar) – C:\Documents and Settings\Lew\Desktop\FSS.exe
[2012/09/24 19:27:42 | 000,000,384 | -H– | M] () – C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012/09/24 19:17:33 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/09/24 17:35:43 | 000,001,090 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Cyber Tech Help Support Forums.url
[2012/09/24 17:25:54 | 000,000,208 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Yahoo Mail Login.url
[2012/09/24 16:41:50 | 000,002,016 | —- | M] () – C:\Documents and Settings\Lew\Desktop\snopes.com FOX News Documentary on Barack Obama.url
[2012/09/24 16:32:24 | 000,000,211 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Google.url
[2012/09/24 15:21:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At3.job
[2012/09/24 14:00:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At4.job
[2012/09/24 13:36:38 | 000,001,222 | —- | M] () – C:\WINDOWS\QUICKEN.INI
[2012/09/24 13:07:36 | 000,004,566 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/09/24 13:07:28 | 000,432,356 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/09/24 13:07:28 | 000,067,312 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/09/24 11:41:56 | 000,000,235 | —- | M] () – C:\Documents and Settings\Lew\Desktop\The Brunswick News - Home Page.url
[2012/09/24 10:10:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At1.job
[2012/09/21 07:31:26 | 000,607,260 | R— | M] (Swearware) – C:\Documents and Settings\Lew\Desktop\dds.scr
[2012/09/20 16:50:07 | 000,003,584 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/20 10:30:46 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2012/09/19 21:59:37 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2012/09/19 21:51:19 | 004,752,754 | R— | M] (Swearware) – C:\Documents and Settings\Lew\Desktop\ComboFix.exe
[2012/09/19 10:52:04 | 000,165,912 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/09/18 16:42:06 | 000,141,811 | —- | M] () – C:\Documents and Settings\Lew\My Documents\Certificate of Whaler Registeration.jpg
[2012/09/18 16:32:02 | 000,007,051 | —- | M] () – C:\Documents and Settings\Lew\My Documents\user 192.168.2.1 backup.conf
[2012/09/18 15:21:59 | 000,000,772 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HP Photo Creations.lnk
[2012/09/18 15:21:26 | 000,001,981 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,939 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Shop for Supplies - HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,934 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series Scan.lnk
[2012/09/18 14:29:31 | 000,001,471 | —- | M] () – C:\WINDOWS\QfnOnl.ini
[2012/09/18 14:28:55 | 000,000,028 | —- | M] () – C:\WINDOWS\QFNOA.INI
[2012/09/18 14:28:50 | 000,000,030 | —- | M] () – C:\WINDOWS\INTURS.DAT
[2012/09/16 09:59:11 | 000,000,292 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Watch TV Online - Stream New Movies & TV Shows - DIRECTV.url
[2012/09/16 09:25:33 | 000,696,520 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/16 09:25:33 | 000,073,416 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/14 17:47:13 | 000,609,436 | —- | M] () – C:\Documents and Settings\Lew\My Documents\spelloe_setup.exe
[2012/09/14 17:42:01 | 000,000,000 | —- | M] () – C:\Documents and Settings\Lew\Application Data\wklnhst.dat
[2012/09/14 14:31:24 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Lew\My Documents\HiJackThis.exe
[2012/09/14 12:18:32 | 000,000,070 | —- | M] () – C:\WINDOWS\QHI.INI
[2012/09/14 12:08:38 | 000,000,643 | —- | M] () – C:\WINDOWS\INTU_ONL.INI
[2012/09/14 12:07:48 | 000,000,663 | —- | M] () – C:\WINDOWS\intuprof.ini
[2012/09/14 11:59:56 | 000,000,297 | —- | M] () – C:\WINDOWS\WININIT.INI
[2012/09/14 11:59:56 | 000,000,123 | —- | M] () – C:\WINDOWS\TMPCPYIS.BAT
[2012/09/14 11:59:56 | 000,000,122 | —- | M] () – C:\WINDOWS\TMPDELIS.BAT
[2012/09/14 11:59:56 | 000,000,026 | —- | M] () – C:\WINDOWS\WINSTART.BAT
[2012/09/14 11:59:53 | 000,000,362 | —- | M] () – C:\WINDOWS\QDQICK.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | M] () – C:\WINDOWS\QFP.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | M] () – C:\WINDOWS\MFF.INI
[2012/09/14 11:57:36 | 014,982,770 | —- | M] () – C:\Documents and Settings\Lew\Desktop\qw6.exe
[2012/09/14 08:25:34 | 000,000,000 | —- | M] () – C:\WINDOWS\NT.INI
[2012/09/13 20:17:55 | 000,001,595 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Yahoo for Bellsouth login.url
[2012/09/13 15:19:47 | 000,001,945 | —- | M] () – C:\WINDOWS\epplauncher.mif
[2012/09/12 14:56:39 | 000,198,864 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2012/09/12 14:56:35 | 000,272,896 | —- | M] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2012/09/12 14:56:35 | 000,006,656 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2012/09/12 14:56:35 | 000,005,632 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2012/09/12 14:26:41 | 000,001,734 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2012/09/12 14:23:50 | 000,093,672 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/12 14:23:49 | 000,821,736 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\npDeployJava1.dll
[2012/09/12 14:23:49 | 000,746,984 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2012/09/12 14:23:49 | 000,246,760 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/12 14:23:49 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/12 14:23:49 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2012/09/12 14:23:49 | 000,143,872 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2012/09/12 12:35:19 | 000,000,815 | —- | M] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/12 12:10:41 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2012/09/12 08:08:20 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2012/09/12 07:56:09 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/09/12 07:48:02 | 000,000,211 | —- | M] () – C:\Boot.bak
[2012/09/11 18:19:04 | 000,000,079 | —- | M] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2012/09/11 18:16:12 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2012/09/11 18:15:28 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2012/09/11 18:13:41 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2012/09/11 18:13:41 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/09/11 18:13:41 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2012/09/11 18:13:34 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2012/09/11 18:13:34 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2012/09/11 18:13:26 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2012/09/11 18:10:59 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2012/08/28 20:44:54 | 011,111,424 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/08/28 11:14:53 | 006,008,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2012/08/28 11:14:53 | 001,212,416 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2012/08/28 11:14:53 | 000,916,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2012/08/28 11:14:53 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2012/08/28 11:14:53 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/08/28 11:14:53 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2012/08/28 11:14:53 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2012/08/28 11:14:53 | 000,521,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012/08/28 11:14:53 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2012/08/28 11:14:53 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\url.dll
[2012/08/28 11:14:53 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\url.dll
[2012/08/28 11:14:53 | 000,067,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2012/08/28 11:14:53 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2012/08/28 11:14:53 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/08/28 11:14:53 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\licmgr10.dll
[2012/08/28 11:14:53 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licmgr10.dll
[2012/08/28 11:14:53 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2012/08/28 11:14:53 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2012/08/28 11:14:52 | 002,000,384 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/08/28 11:14:52 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2012/08/28 11:14:52 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2012/08/28 11:14:52 | 000,743,424 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/08/28 11:14:52 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2012/08/28 11:14:52 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2012/08/28 11:14:52 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2012/08/28 11:14:52 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2012/08/28 08:07:34 | 000,174,080 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2012/08/28 08:07:34 | 000,174,080 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2012/08/28 08:07:15 | 000,385,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec

========== Files Created - No Company Name ==========

[2012/09/24 16:41:50 | 000,002,016 | —- | C] () – C:\Documents and Settings\Lew\Desktop\snopes.com FOX News Documentary on Barack Obama.url
[2012/09/24 16:32:24 | 000,000,211 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Google.url
[2012/09/24 13:14:41 | 000,001,090 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Cyber Tech Help Support Forums.url
[2012/09/24 11:40:27 | 000,000,235 | —- | C] () – C:\Documents and Settings\Lew\Desktop\The Brunswick News - Home Page.url
[2012/09/20 16:50:07 | 000,003,584 | —- | C] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/19 21:59:36 | 000,000,211 | —- | C] () – C:\Boot.bak
[2012/09/19 21:59:34 | 000,260,272 | RHS- | C] () – C:\cmldr
[2012/09/19 21:56:15 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2012/09/19 21:56:15 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2012/09/19 21:56:15 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2012/09/19 21:56:15 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2012/09/19 21:56:15 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2012/09/18 16:42:00 | 000,141,811 | —- | C] () – C:\Documents and Settings\Lew\My Documents\Certificate of Whaler Registeration.jpg
[2012/09/18 16:32:01 | 000,007,051 | —- | C] () – C:\Documents and Settings\Lew\My Documents\user 192.168.2.1 backup.conf
[2012/09/18 15:21:59 | 000,000,772 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HP Photo Creations.lnk
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At4.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At3.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At2.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At1.job
[2012/09/18 15:21:26 | 000,001,981 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,939 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Shop for Supplies - HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,934 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series Scan.lnk
[2012/09/18 14:28:55 | 000,000,028 | —- | C] () – C:\WINDOWS\QFNOA.INI
[2012/09/18 14:28:50 | 000,000,030 | —- | C] () – C:\WINDOWS\INTURS.DAT
[2012/09/16 10:32:04 | 000,000,208 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Yahoo Mail Login.url
[2012/09/16 09:59:11 | 000,000,292 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Watch TV Online - Stream New Movies & TV Shows - DIRECTV.url
[2012/09/14 17:47:22 | 000,609,436 | —- | C] () – C:\Documents and Settings\Lew\My Documents\spelloe_setup.exe
[2012/09/14 17:42:01 | 000,000,000 | —- | C] () – C:\Documents and Settings\Lew\Application Data\wklnhst.dat
[2012/09/14 16:29:30 | 000,001,924 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
[2012/09/14 16:28:54 | 000,000,888 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works Task Launcher.lnk
[2012/09/14 12:18:32 | 000,000,070 | —- | C] () – C:\WINDOWS\QHI.INI
[2012/09/14 12:07:48 | 000,000,643 | —- | C] () – C:\WINDOWS\INTU_ONL.INI
[2012/09/14 11:59:56 | 000,000,297 | —- | C] () – C:\WINDOWS\WININIT.INI
[2012/09/14 11:59:56 | 000,000,123 | —- | C] () – C:\WINDOWS\TMPCPYIS.BAT
[2012/09/14 11:59:56 | 000,000,122 | —- | C] () – C:\WINDOWS\TMPDELIS.BAT
[2012/09/14 11:59:56 | 000,000,026 | —- | C] () – C:\WINDOWS\WINSTART.BAT
[2012/09/14 11:59:52 | 000,001,471 | —- | C] () – C:\WINDOWS\QfnOnl.ini
[2012/09/14 11:59:52 | 000,001,222 | —- | C] () – C:\WINDOWS\QUICKEN.INI
[2012/09/14 11:59:52 | 000,000,663 | —- | C] () – C:\WINDOWS\intuprof.ini
[2012/09/14 11:59:50 | 000,000,252 | —- | C] () – C:\WINDOWS\ADDRBOOK.INI
[2012/09/14 11:59:48 | 000,185,136 | —- | C] () – C:\WINDOWS\System\RDM330.DLL
[2012/09/14 11:59:48 | 000,157,696 | —- | C] () – C:\WINDOWS\System\STORAGE.DLL
[2012/09/14 11:59:48 | 000,027,026 | —- | C] () – C:\WINDOWS\System\OLE2.REG
[2012/09/14 11:59:48 | 000,008,256 | —- | C] () – C:\WINDOWS\QFNOADB.DAT
[2012/09/14 11:59:48 | 000,000,362 | —- | C] () – C:\WINDOWS\QDQICK.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | C] () – C:\WINDOWS\QFP.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | C] () – C:\WINDOWS\MFF.INI
[2012/09/14 11:57:35 | 014,982,770 | —- | C] () – C:\Documents and Settings\Lew\Desktop\qw6.exe
[2012/09/14 08:25:34 | 000,000,000 | —- | C] () – C:\WINDOWS\NT.INI
[2012/09/13 20:17:55 | 000,001,595 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Yahoo for Bellsouth login.url
[2012/09/13 15:29:27 | 000,000,384 | -H– | C] () – C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012/09/13 15:29:27 | 000,000,366 | -H– | C] () – C:\WINDOWS\tasks\MpIdleTask.job
[2012/09/13 15:19:47 | 000,001,945 | —- | C] () – C:\WINDOWS\epplauncher.mif
[2012/09/13 15:19:28 | 000,001,698 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012/09/12 18:39:06 | 000,003,903 | —- | C] () – C:\WINDOWS\System32\nvnrm.nvu
[2012/09/12 14:58:32 | 000,000,274 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/12 14:58:31 | 000,000,282 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/12 14:50:29 | 000,000,830 | —- | C] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/12 14:26:41 | 000,001,804 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader X.lnk
[2012/09/12 14:26:41 | 000,001,734 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2012/09/12 12:10:42 | 000,013,646 | —- | C] () – C:\WINDOWS\System32\wpa.bak
[2012/09/12 12:02:40 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2012/09/12 12:02:40 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/09/12 07:59:24 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2012/09/12 07:59:24 | 000,067,374 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2012/09/12 07:59:24 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2012/09/12 07:59:24 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2012/09/12 07:59:24 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2012/09/12 07:59:24 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2012/09/12 07:59:24 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2012/09/12 07:59:23 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2012/09/12 07:59:23 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2012/09/12 07:59:23 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2012/09/12 07:59:23 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2012/09/12 07:59:23 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2012/09/12 07:59:23 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2012/09/12 07:59:23 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2012/09/12 07:59:23 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2012/09/12 07:59:23 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2012/09/12 07:59:23 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2012/09/12 07:59:23 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2012/09/12 07:59:23 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2012/09/12 07:59:23 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2012/09/12 07:59:23 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2012/09/12 07:59:23 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2012/09/12 07:59:23 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2012/09/12 07:59:23 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2012/09/12 07:59:23 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2012/09/12 07:59:23 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2012/09/12 07:59:23 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2012/09/12 07:59:23 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2012/09/12 07:59:23 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2012/09/12 07:59:23 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2012/09/12 07:59:23 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2012/09/12 07:59:23 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2012/09/12 07:59:23 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2012/09/12 07:59:23 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2012/09/12 07:59:23 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2012/09/12 07:59:23 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2012/09/12 07:59:23 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2012/09/12 07:59:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2012/09/12 07:59:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2012/09/12 07:59:23 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2012/09/12 07:59:23 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2012/09/12 07:59:23 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2012/09/12 07:59:23 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2012/09/12 07:59:23 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2012/09/12 07:59:23 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2012/09/12 07:59:23 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2012/09/12 07:59:23 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2012/09/12 07:59:23 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2012/09/12 07:59:23 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2012/09/12 07:59:23 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2012/09/12 07:59:23 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2012/09/12 07:59:23 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2012/09/12 07:59:23 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2012/09/12 07:59:23 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2012/09/12 07:59:23 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2012/09/12 07:59:23 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2012/09/12 07:59:23 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2012/09/12 07:59:23 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2012/09/12 07:59:22 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2012/09/12 07:59:22 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2012/09/12 07:59:22 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2012/09/12 07:59:22 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2012/09/12 07:59:22 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2012/09/12 07:59:22 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2012/09/12 07:59:22 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2012/09/12 07:59:22 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2012/09/12 07:59:22 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2012/09/12 07:59:22 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2012/09/12 07:59:22 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2012/09/12 07:59:22 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2012/09/12 07:59:22 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2012/09/12 07:59:22 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2012/09/12 07:59:22 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2012/09/12 07:59:22 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2012/09/12 07:59:22 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2012/09/12 07:59:22 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2012/09/12 07:59:22 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2012/09/12 07:47:50 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2012/09/12 07:47:50 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2012/09/12 07:47:50 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2012/09/11 20:49:09 | 000,043,531 | —- | C] () – C:\WINDOWS\System32\nvapps.xml
[2012/09/11 20:49:07 | 000,016,356 | —- | C] () – C:\WINDOWS\System32\nvdisp.nvu
[2012/09/11 18:19:04 | 000,000,079 | —- | C] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2012/09/11 18:19:00 | 000,000,738 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Outlook Express.lnk
[2012/09/11 18:18:59 | 000,000,815 | —- | C] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/11 18:18:59 | 000,000,803 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Internet Explorer.lnk
[2012/09/11 18:18:54 | 000,001,599 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Remote Assistance.lnk
[2012/09/11 18:18:54 | 000,000,792 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Windows Media Player.lnk
[2012/09/11 18:16:12 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2012/09/11 18:15:28 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2012/09/11 18:15:00 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2012/09/11 18:14:47 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2012/09/11 18:14:43 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2012/09/11 18:14:42 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2012/09/11 18:14:40 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2012/09/11 18:14:31 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2012/09/11 18:14:26 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2012/09/11 18:14:16 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2012/09/11 18:13:41 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2012/09/11 18:13:41 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2012/09/11 18:13:41 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2012/09/11 18:13:34 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2012/09/11 18:13:34 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2012/09/11 18:13:33 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2012/09/11 18:12:43 | 000,000,786 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
[2012/09/11 18:12:32 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2012/09/11 18:11:59 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2012/09/11 18:11:59 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2012/09/11 18:11:52 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2012/09/11 18:10:59 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2012/09/11 18:10:26 | 000,000,609 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
[2012/09/11 18:10:25 | 000,001,986 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk
[2012/09/11 18:10:01 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2012/09/11 18:10:01 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2012/09/11 18:10:01 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2012/09/11 18:10:01 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2012/09/11 18:10:01 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2012/09/11 18:10:01 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2012/09/11 18:10:01 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2012/09/11 18:10:00 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2012/09/11 18:10:00 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2012/09/11 18:10:00 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2012/09/11 18:10:00 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2012/09/11 18:09:57 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2012/09/11 18:09:57 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2012/09/11 18:09:56 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2012/09/11 18:09:49 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2012/09/11 11:32:53 | 000,004,566 | —- | C] () – C:\WINDOWS\imsins.BAK
[2012/09/11 11:32:51 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2012/09/11 11:32:49 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2012/09/11 11:32:49 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2012/09/11 11:32:48 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2012/09/11 11:32:48 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2012/09/11 11:32:30 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2012/09/11 11:32:21 | 001,042,903 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2012/09/11 11:32:21 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2012/09/11 11:32:21 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2012/09/11 11:32:21 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2012/09/11 11:32:21 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2012/09/11 11:32:21 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2012/09/11 11:32:21 | 000,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2012/09/11 11:32:21 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2012/09/11 11:31:39 | 000,165,912 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/09/11 11:30:45 | 000,000,327 | RHS- | C] () – C:\boot.ini
[2012/09/11 11:30:42 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf

========== ZeroAccess Check ==========

[2012/09/18 12:43:50 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

< End of report >

Tomk

Post #25September 25, 2012, 5:28 AM UTC

Double click on OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Processes

:OTL
IE - HKCU\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}…000fc7516e3409b
O3 - HKLM\..\Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - No CLSID value found.
[2012/09/14 17:47:23 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Babylon
[2012/09/14 17:47:23 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Babylon


:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.
Reboot your computer

Please post the OTL log.

Lewg

Post #26September 25, 2012, 1:55 PM UTC

All processes killed ========== PROCESSES ========== ========== OTL ========== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D0F4A166-B8D4-48b8-9D63-80849FE137CB} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D0F4A166-B8D4-48b8-9D63-80849FE137CB}\ not found. C:\Documents and Settings\Lew\Application Data\Babylon folder moved successfully. C:\Documents and Settings\All Users\Application Data\Babylon folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Lew ->Temp folder emptied: 3621358 bytes ->Temporary Internet Files folder emptied: 17681527 bytes ->Flash cache emptied: 2363 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 5226 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 13754 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 2058 bytes Total Files Cleaned = 20.00 mb OTL by OldTimer - Version 3.2.64.0 log created on 09252012_095113 Files\Folders moved on Reboot… File\Folder C:\Documents and Settings\Lew\Local Settings\Temp\~DF6F91.tmp not found! File\Folder C:\Documents and Settings\Lew\Local Settings\Temp\~DF6FA5.tmp not found! File\Folder C:\Documents and Settings\Lew\Local Settings\Temp\~DF7000.tmp not found! File\Folder C:\Documents and Settings\Lew\Local Settings\Temp\~DF700C.tmp not found! File\Folder C:\Documents and Settings\Lew\Local Settings\Temp\~DF703D.tmp not found! File\Folder C:\Documents and Settings\Lew\Local Settings\Temp\~DF7049.tmp not found! C:\Documents and Settings\Lew\Local Settings\Temporary Internet Files\Content.IE5\NKJN219W\iframe[1].htm moved successfully. C:\Documents and Settings\Lew\Local Settings\Temporary Internet Files\Content.IE5\DQFQUSNE\index[1].htm moved successfully. C:\Documents and Settings\Lew\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. PendingFileRenameOperations files… Registry entries deleted on Reboot…

Tomk

Post #27September 26, 2012, 2:25 AM UTC

Great. Now please run my the OTL log one more time.

Lewg

Post #28September 26, 2012, 4:58 AM UTC

Since the hard drive failure, I lost Malwarbytes….Steer me to a d/load…. PC doing really well as of now……killing the unwanted processes has made things much better…….

OTL logfile created on: 9/26/2012 12:45:35 AM - Run 8
OTL by OldTimer - Version 3.2.64.0 Folder = C:\Documents and Settings\Lew\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

958.48 Mb Total Physical Memory | 467.27 Mb Available Physical Memory | 48.75% Memory free
2.26 Gb Paging File | 1.83 Gb Available in Paging File | 80.94% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 454.81 Gb Free Space | 97.65% Space Free | Partition Type: NTFS
Drive D: | 202.83 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: LEW-0CCC0E88CE3 | User Name: Lew | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/09/19 13:57:49 | 000,600,064 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Lew\My Documents\Downloads\OTL.exe
PRC - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
PRC - [2012/09/12 14:56:35 | 000,296,096 | —- | M] (RealNetworks, Inc.) – C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2012/09/12 14:23:49 | 000,161,768 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012/08/16 14:35:48 | 000,524,976 | —- | M] (NDS Technologies) – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe
PRC - [2012/08/16 14:35:44 | 006,485,160 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\NDSPCShowServer.exe
PRC - [2012/07/27 16:51:36 | 000,035,768 | —- | M] (Adobe Systems Incorporated) – C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe
PRC - [2012/06/11 16:22:16 | 000,240,208 | —- | M] (Microsoft Corporation.) – C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.EXE
PRC - [2012/03/26 17:08:12 | 000,931,200 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2012/03/26 17:03:40 | 000,011,552 | —- | M] (Microsoft Corporation) – c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2009/03/27 22:10:56 | 000,014,336 | —- | M] (LSI Corporation) – C:\Program Files\LSI SoftModem\agrsmsvc.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2012/09/14 17:48:20 | 002,098,200 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
MOD - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
MOD - [2012/08/16 14:36:44 | 000,091,272 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\z.dll
MOD - [2012/08/16 14:36:40 | 000,273,568 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\ndsLogStore.dll
MOD - [2012/08/16 14:36:38 | 001,402,520 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\libxml2-2.dll
MOD - [2012/08/16 14:36:24 | 000,688,296 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\libgstreamer-0.10.dll
MOD - [2012/08/16 14:35:54 | 007,117,984 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\gsttspplugin.dll
MOD - [2012/08/16 14:35:44 | 006,485,160 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\NDSPCShowServer.exe
MOD - [2012/08/16 14:35:40 | 002,087,072 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\DrmSingleton.dll
MOD - [2012/08/02 18:13:18 | 001,335,872 | —- | M] () – C:\Program Files\WOT\WOT.dll
MOD - [2006/05/09 15:50:00 | 001,466,368 | —- | M] () – C:\WINDOWS\system32\nview.dll
MOD - [2006/05/09 15:50:00 | 000,466,944 | —- | M] () – C:\WINDOWS\system32\nvshell.dll

========== Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] – %SystemRoot%\System32\hidserv.dll – (HidServ)
SRV - File not found [On_Demand | Stopped] – %SystemRoot%\System32\appmgmts.dll – (AppMgmt)
SRV - [2012/09/16 09:25:33 | 000,250,568 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () [Auto | Running] – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe – (Browser Manager)
SRV - [2012/09/12 14:23:49 | 000,161,768 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2012/06/11 16:22:16 | 000,240,208 | —- | M] (Microsoft Corporation.) [On_Demand | Running] – C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.EXE – (BBUpdate)
SRV - [2012/06/11 16:22:16 | 000,193,616 | —- | M] (Microsoft Corporation.) [Auto | Stopped] – C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.EXE – (BBSvc)
SRV - [2012/03/26 17:03:40 | 000,011,552 | —- | M] (Microsoft Corporation) [Auto | Running] – c:\Program Files\Microsoft Security Client\MsMpEng.exe – (MsMpSvc)
SRV - [2009/03/27 22:10:56 | 000,014,336 | —- | M] (LSI Corporation) [Auto | Running] – C:\Program Files\LSI SoftModem\agrsmsvc.exe – (AgereModemAudio)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Lew\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2009/08/13 15:07:12 | 001,163,328 | —- | M] (LSI Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\AGRSM.sys – (AgereSoftModem)
DRV - [2009/02/11 12:40:40 | 005,028,352 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2007/07/13 10:44:22 | 000,043,008 | —- | M] (D-Link ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\dlkfet5b.sys – (FETNDISB)
DRV - [2006/03/03 14:31:04 | 000,013,056 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nvnetbus.sys – (nvnetbus)
DRV - [2006/03/03 14:31:02 | 000,034,176 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\NVENETFD.sys – (NVENETFD)
DRV - [2005/12/12 17:27:00 | 000,019,072 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\PS2.sys – (Ps2)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://%20msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
IE - HKCU\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@nds.com/PCShowPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPCShowPlugin.dll File not found
FF - HKCU\Software\MozillaPlugins\@nds.com/PlayerPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPlayerPlugin.dll (NDS)
FF - HKCU\Software\MozillaPlugins\NDS.com/PlayerPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPlayerPlugin.dll (NDS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/09/12 14:56:42 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012/09/14 17:48:22 | 000,000,000 | —D | M]

[2012/09/14 17:47:46 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2012/09/20 10:30:46 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Bing Bar Helper) - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found.
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O3 - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [PCShowServer] C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe (NDS Technologies)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKCU\..Trusted Domains: coastalbankofga.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: coastalbankofga.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: ebay.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: extendhealth.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: extendhealth.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: fisherbuggies.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: hulu.com ([www] http in Local intranet)
O15 - HKCU\..Trusted Domains: msn.com ([www] http in Local intranet)
O15 - HKCU\..Trusted Domains: shoptalkforums.com ([www] http in Local intranet)
O15 - HKCU\..Trusted Domains: thebrunswicknews.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: usps.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: usps.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: whatthetech.com ([forums] http in Local intranet)
O15 - HKCU\..Trusted Domains: yahoo.com ([www] http in Local intranet)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd…b?1347465718176 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1347978180406 (MUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E5072BA-3DCD-43F1-A347-7B3E0450AF88}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/09/11 18:13:41 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012/09/25 15:21:07 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\HiJackThis
[2012/09/24 20:31:38 | 000,693,265 | —- | C] (Farbar) – C:\Documents and Settings\Lew\Desktop\FSS.exe
[2012/09/21 07:31:10 | 000,607,260 | R— | C] (Swearware) – C:\Documents and Settings\Lew\Desktop\dds.scr
[2012/09/20 16:02:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusb.dll
[2012/09/20 16:02:10 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusd.dll
[2012/09/20 13:17:27 | 000,000,000 | —D | C] – C:\WINDOWS\Sun
[2012/09/20 10:58:15 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2012/09/19 22:51:07 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2012/09/19 21:59:33 | 000,000,000 | RHSD | C] – C:\cmdcons
[2012/09/19 21:56:15 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2012/09/19 21:56:15 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2012/09/19 21:56:15 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2012/09/19 21:56:15 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2012/09/19 21:56:06 | 000,000,000 | —D | C] – C:\Qoobox
[2012/09/19 21:56:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2012/09/19 21:56:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Administrative Tools
[2012/09/19 21:55:54 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2012/09/19 21:51:06 | 004,752,754 | R— | C] (Swearware) – C:\Documents and Settings\Lew\Desktop\ComboFix.exe
[2012/09/19 10:46:41 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2012/09/19 10:46:37 | 000,000,000 | —D | C] – C:\Program Files\MSBuild
[2012/09/19 10:46:30 | 000,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2012/09/19 10:46:01 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2012/09/19 10:46:01 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2012/09/19 10:46:01 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2012/09/19 10:46:01 | 000,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2012/09/19 10:46:01 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2012/09/19 10:46:01 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2012/09/19 10:46:00 | 000,000,000 | —D | C] – C:\c57b15f097730dbd27a55ca19911
[2012/09/19 10:05:47 | 000,000,000 | —D | C] – C:\_OTL
[2012/09/18 15:43:51 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2012/09/18 15:24:59 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbprint.sys
[2012/09/18 15:24:53 | 000,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2012/09/18 15:24:49 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2012/09/18 15:22:54 | 000,000,000 | —D | C] – C:\Program Files\Microsoft
[2012/09/18 15:22:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
[2012/09/18 15:22:19 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2012/09/18 15:22:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Mozilla
[2012/09/18 15:21:58 | 000,000,000 | —D | C] – C:\Program Files\HP Photo Creations
[2012/09/18 15:21:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HP Photo Creations
[2012/09/18 15:21:55 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Coupons
[2012/09/18 15:21:54 | 000,000,000 | —D | C] – C:\Program Files\Coupons
[2012/09/18 15:21:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\HpUpdate
[2012/09/18 15:21:27 | 000,527,208 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\HPDiscoPM9311.dll
[2012/09/18 15:21:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\HP
[2012/09/18 15:21:25 | 001,792,872 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\HPScanMiniDrv_DJ3050_J610.dll
[2012/09/18 15:21:24 | 000,267,112 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinksts9311LM.dll
[2012/09/18 15:21:24 | 000,232,296 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinksts9311.dll
[2012/09/18 15:21:24 | 000,213,864 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinkcoi9311.dll
[2012/09/18 15:21:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2012/09/18 15:20:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HP
[2012/09/18 15:20:33 | 000,000,000 | —D | C] – C:\Program Files\HP
[2012/09/18 15:19:06 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\HP
[2012/09/18 14:39:47 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Sites Login informatin
[2012/09/18 13:25:03 | 000,019,072 | —- | C] (Hewlett-Packard Company) – C:\WINDOWS\System32\drivers\PS2.sys
[2012/09/18 13:25:01 | 000,000,000 | —D | C] – C:\HP
[2012/09/18 13:24:59 | 000,000,000 | —D | C] – C:\temp
[2012/09/18 12:50:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Downloads
[2012/09/18 12:47:38 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Ask
[2012/09/18 12:43:50 | 000,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2012/09/18 12:43:22 | 000,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2012/09/18 10:50:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Launch Manager 1.00.1e
[2012/09/18 10:50:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Coupon Companion
[2012/09/18 10:49:58 | 000,000,000 | —D | C] – C:\Program Files\Coupon Companion
[2012/09/16 09:27:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\DTV
[2012/09/16 09:27:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player
[2012/09/14 18:58:38 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Malwarebytes
[2012/09/14 18:58:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2012/09/14 18:43:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\backups
[2012/09/14 17:50:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Spell Checker For OE 2.1
[2012/09/14 17:48:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\searchplugins
[2012/09/14 17:48:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Extensions
[2012/09/14 17:48:25 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Browser Manager
[2012/09/14 17:48:19 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Browser Manager
[2012/09/14 17:47:46 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2012/09/14 17:42:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Template
[2012/09/14 16:46:22 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2012/09/14 16:29:21 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2012/09/14 16:28:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works
[2012/09/14 16:26:40 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2012/09/14 15:47:16 | 000,000,000 | —D | C] – C:\Program Files\WOT
[2012/09/14 14:20:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Help
[2012/09/14 11:59:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Quicken
[2012/09/14 11:59:48 | 000,308,800 | —- | C] (Intuit) – C:\WINDOWS\System\Q_AFUI16.DLL
[2012/09/14 11:59:48 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2.DLL
[2012/09/14 11:59:48 | 000,260,704 | —- | C] (Intuit) – C:\WINDOWS\System\QFNIC16.DLL
[2012/09/14 11:59:48 | 000,177,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TYPELIB.DLL
[2012/09/14 11:59:48 | 000,164,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2DISP.DLL
[2012/09/14 11:59:48 | 000,155,408 | —- | C] (Intuit) – C:\WINDOWS\System\QCONNECT.DLL
[2012/09/14 11:59:48 | 000,150,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2NLS.DLL
[2012/09/14 11:59:48 | 000,146,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MFCOLEUI.DLL
[2012/09/14 11:59:48 | 000,136,544 | —- | C] (Intuit) – C:\WINDOWS\System\QFNAW16.DLL
[2012/09/14 11:59:48 | 000,126,240 | —- | C] (Intuit) – C:\WINDOWS\System\QFNUT16.DLL
[2012/09/14 11:59:48 | 000,110,640 | —- | C] (Inverse Network Technology Inc.) – C:\WINDOWS\System\QFNOA16.DLL
[2012/09/14 11:59:48 | 000,108,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMPOBJ.DLL
[2012/09/14 11:59:48 | 000,091,936 | —- | C] (Intuit) – C:\WINDOWS\System\Q_LINK16.DLL
[2012/09/14 11:59:48 | 000,088,316 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLRMI16.DLL
[2012/09/14 11:59:48 | 000,084,224 | —- | C] (Intuit) – C:\WINDOWS\System\QCON1632.EXE
[2012/09/14 11:59:48 | 000,082,384 | —- | C] (Intuit, Inc.) – C:\WINDOWS\System\ONLCFG16.DLL
[2012/09/14 11:59:48 | 000,081,088 | —- | C] (Intuit) – C:\WINDOWS\System\Q_ENLB16.DLL
[2012/09/14 11:59:48 | 000,066,160 | —- | C] (Intuit) – C:\WINDOWS\System\QFNBC16.DLL
[2012/09/14 11:59:48 | 000,057,728 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLC16.DLL
[2012/09/14 11:59:48 | 000,057,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2CONV.DLL
[2012/09/14 11:59:48 | 000,053,360 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLASYN16.DLL
[2012/09/14 11:59:48 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2PROX.DLL
[2012/09/14 11:59:48 | 000,043,248 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TSSPRV16.DLL
[2012/09/14 11:59:48 | 000,035,568 | —- | C] (Inverse Network Technology, Inc.) – C:\WINDOWS\System\QFNSW16.DLL
[2012/09/14 11:59:48 | 000,030,096 | —- | C] (Intuit) – C:\WINDOWS\System\Q_COMM16.DLL
[2012/09/14 11:59:48 | 000,020,208 | —- | C] (Intuit) – C:\WINDOWS\System\INTUPROF.DLL
[2012/09/14 11:59:48 | 000,018,336 | —- | C] (Intuit) – C:\WINDOWS\System\QFNSET16.DLL
[2012/09/14 11:59:48 | 000,014,192 | —- | C] (Intuit) – C:\WINDOWS\System\QFNGLU16.DLL
[2012/09/14 11:59:48 | 000,010,128 | —- | C] (Intuit, Inc.) – C:\WINDOWS\System\QFNTHUNK.DLL
[2012/09/14 11:59:48 | 000,007,136 | —- | C] (Intuit) – C:\WINDOWS\System\Q_ENUT16.DLL
[2012/09/14 11:59:45 | 000,151,552 | —- | C] (Blue Sky Software Corp.) – C:\WINDOWS\System\HYPERTOP.DLL
[2012/09/14 11:59:45 | 000,081,408 | —- | C] (Blue Sky Software Corp.) – C:\WINDOWS\System\CNT31.DLL
[2012/09/14 11:59:45 | 000,021,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\CTL3DV2.DLL
[2012/09/14 11:59:45 | 000,000,000 | —D | C] – C:\QUICKENW
[2012/09/14 11:59:45 | 000,000,000 | —D | C] – C:\WINDOWS\QFNONL
[2012/09/14 11:59:24 | 000,249,072 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\UNINST16.EXE
[2012/09/14 11:59:24 | 000,026,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\CTL3D.DLL
[2012/09/14 11:57:59 | 000,000,000 | —D | C] – C:\Quicken6
[2012/09/14 10:11:00 | 000,275,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2012/09/14 10:11:00 | 000,017,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2012/09/14 09:03:16 | 000,000,000 | —D | C] – C:\desktop
[2012/09/14 08:24:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2012/09/14 08:18:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2012/09/13 18:56:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Western Digital
[2012/09/13 15:30:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Temp
[2012/09/13 15:30:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Adobe
[2012/09/13 15:26:15 | 000,237,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2012/09/13 15:19:14 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Security Client
[2012/09/13 15:13:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Identities
[2012/09/12 18:39:38 | 000,000,000 | —D | C] – C:\Program Files\LSI SoftModem
[2012/09/12 18:39:06 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvunrm.exe
[2012/09/12 18:39:06 | 000,101,888 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nvtcp.sys
[2012/09/12 15:25:21 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Sun
[2012/09/12 15:09:57 | 000,000,000 | —D | C] – C:\swsetup
[2012/09/12 15:09:56 | 000,000,000 | —D | C] – C:\SYSTEM.SAV
[2012/09/12 15:09:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\WinBatch
[2012/09/12 14:58:28 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Videos
[2012/09/12 14:56:42 | 000,000,000 | —D | C] – C:\Program Files\Common Files\xing shared
[2012/09/12 14:56:39 | 000,198,864 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2012/09/12 14:56:35 | 000,272,896 | —- | C] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2012/09/12 14:56:35 | 000,006,656 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2012/09/12 14:56:35 | 000,005,632 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2012/09/12 14:56:35 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\RealNetworks
[2012/09/12 14:56:32 | 000,000,000 | —D | C] – C:\Program Files\Real
[2012/09/12 14:56:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Real
[2012/09/12 14:53:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Real
[2012/09/12 14:53:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Macromedia
[2012/09/12 14:53:18 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Adobe
[2012/09/12 14:51:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Google
[2012/09/12 14:50:52 | 000,000,000 | —D | C] – C:\Program Files\Google
[2012/09/12 14:50:28 | 000,696,520 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/12 14:50:28 | 000,073,416 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/12 14:26:23 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2012/09/12 14:26:23 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2012/09/12 14:24:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2012/09/12 14:24:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2012/09/12 14:24:05 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2012/09/12 14:23:59 | 000,821,736 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\npDeployJava1.dll
[2012/09/12 14:23:59 | 000,746,984 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2012/09/12 14:23:59 | 000,246,760 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/12 14:23:59 | 000,143,872 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2012/09/12 14:23:55 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/12 14:23:55 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2012/09/12 14:23:55 | 000,093,672 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/12 14:23:47 | 000,000,000 | —D | C] – C:\Program Files\Java
[2012/09/12 14:15:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\McAfee
[2012/09/12 14:14:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Sun
[2012/09/12 13:50:00 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\IECompatCache
[2012/09/12 13:48:31 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\PrivacIE
[2012/09/12 12:35:32 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Lang
[2012/09/12 12:35:16 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\IETldCache
[2012/09/12 12:24:13 | 000,521,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012/09/12 12:23:42 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2012/09/12 12:23:38 | 011,111,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/09/12 12:23:38 | 002,000,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/09/12 12:23:38 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/09/12 12:23:38 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/09/12 12:23:38 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/09/12 12:23:32 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2012/09/12 12:22:50 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2012/09/12 12:11:32 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2012/09/12 12:11:25 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2012/09/12 12:10:37 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2012/09/12 12:10:37 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2012/09/12 12:10:29 | 000,456,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2012/09/12 12:09:47 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2012/09/12 12:09:26 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2012/09/12 12:09:13 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2012/09/12 12:09:09 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2012/09/12 12:08:48 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2012/09/12 12:08:48 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2012/09/12 12:07:46 | 000,730,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2012/09/12 12:07:45 | 002,192,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2012/09/12 12:07:45 | 002,148,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2012/09/12 12:07:45 | 002,026,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2012/09/12 12:07:05 | 000,139,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwd.sys
[2012/09/12 12:07:04 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2012/09/12 12:07:03 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2012/09/12 12:06:58 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mup.sys
[2012/09/12 12:06:06 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vgx.dll
[2012/09/12 12:05:51 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2012/09/12 12:02:44 | 000,010,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndistapi.sys
[2012/09/12 12:01:54 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\UserData
[2012/09/12 12:01:53 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2012/09/12 12:01:52 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2012/09/12 12:01:33 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2012/09/12 11:56:02 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\splitter.sys
[2012/09/12 11:56:01 | 000,083,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdmaud.sys
[2012/09/12 11:55:59 | 000,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dmusic.sys
[2012/09/12 11:55:58 | 000,056,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swmidi.sys
[2012/09/12 11:55:56 | 000,142,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aec.sys
[2012/09/12 11:55:55 | 000,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kmixer.sys
[2012/09/12 11:55:54 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmkaud.sys
[2012/09/12 11:55:53 | 000,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sysaudio.sys
[2012/09/12 11:55:51 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mskssrv.sys
[2012/09/12 11:55:50 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspqm.sys
[2012/09/12 11:55:48 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspclock.sys
[2012/09/12 11:55:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\RTCOM
[2012/09/12 11:55:01 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2012/09/12 11:55:01 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\portcls.sys
[2012/09/12 11:55:01 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2012/09/12 11:55:01 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmk.sys
[2012/09/12 11:55:01 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2012/09/12 11:55:01 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksuser.dll
[2012/09/12 11:55:00 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2012/09/12 11:55:00 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksproxy.ax
[2012/09/12 11:51:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2012/09/12 11:51:41 | 000,000,000 | —D | C] – C:\Program Files\InstallShield Installation Information
[2012/09/12 11:51:35 | 000,000,000 | —D | C] – C:\Program Files\D-Link
[2012/09/12 08:07:42 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2012/09/12 07:59:26 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2012/09/12 07:59:26 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2012/09/12 07:59:26 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2012/09/12 07:59:23 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2012/09/12 07:59:22 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2012/09/12 07:59:22 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2012/09/12 07:59:18 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2012/09/12 07:59:18 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2012/09/12 07:59:18 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2012/09/12 07:59:17 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2012/09/12 07:59:17 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2012/09/12 07:59:17 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2012/09/12 07:59:17 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2012/09/12 07:59:17 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2012/09/12 07:59:17 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2012/09/12 07:59:17 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2012/09/12 07:59:17 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2012/09/12 07:59:17 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2012/09/12 07:59:17 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2012/09/12 07:59:16 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2012/09/12 07:59:16 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2012/09/12 07:59:16 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2012/09/12 07:59:16 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2012/09/12 07:59:16 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2012/09/12 07:59:16 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2012/09/12 07:59:16 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2012/09/12 07:59:15 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2012/09/12 07:59:15 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2012/09/12 07:59:15 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2012/09/12 07:59:15 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2012/09/12 07:59:15 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2012/09/12 07:59:15 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2012/09/12 07:59:15 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2012/09/12 07:59:15 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2012/09/12 07:59:15 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2012/09/12 07:59:15 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2012/09/12 07:59:14 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2012/09/12 07:59:14 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2012/09/12 07:59:14 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2012/09/12 07:59:12 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2012/09/12 07:59:12 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2012/09/12 07:56:22 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2012/09/12 07:55:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2012/09/12 07:53:45 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2012/09/12 07:47:51 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2012/09/12 07:47:51 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2012/09/12 07:47:51 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2012/09/12 07:47:51 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2012/09/12 07:47:51 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2012/09/12 07:47:51 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2012/09/12 07:47:50 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2012/09/12 07:47:50 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2012/09/12 07:47:50 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2012/09/12 07:47:50 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2012/09/12 07:47:50 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2012/09/12 07:47:50 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2012/09/12 07:47:50 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2012/09/12 07:47:50 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2012/09/12 07:47:50 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2012/09/12 07:47:50 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2012/09/12 07:47:50 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2012/09/12 07:47:50 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2012/09/12 07:47:50 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2012/09/12 07:47:50 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2012/09/12 07:47:50 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2012/09/12 07:47:50 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2012/09/12 07:47:50 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2012/09/12 07:47:50 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2012/09/12 07:47:50 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2012/09/12 07:47:50 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2012/09/12 07:47:50 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2012/09/12 07:47:50 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2012/09/12 07:47:50 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2012/09/12 07:47:50 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2012/09/12 07:47:50 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2012/09/12 07:47:50 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2012/09/12 07:47:50 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2012/09/12 07:47:50 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2012/09/12 07:47:50 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2012/09/12 07:47:50 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2012/09/12 07:47:50 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2012/09/12 07:47:50 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2012/09/12 07:47:50 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2012/09/12 07:47:50 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2012/09/12 07:47:50 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2012/09/12 07:47:50 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2012/09/12 07:47:50 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2012/09/12 07:47:50 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2012/09/12 07:47:50 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2012/09/12 07:47:50 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2012/09/12 07:47:50 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2012/09/12 07:47:50 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2012/09/12 07:47:50 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2012/09/12 07:47:50 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2012/09/12 07:47:50 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2012/09/12 07:47:50 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2012/09/12 07:47:50 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2012/09/12 07:47:50 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2012/09/12 07:47:50 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2012/09/12 07:47:50 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2012/09/12 07:47:50 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2012/09/12 07:47:50 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2012/09/12 07:47:50 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2012/09/12 07:47:50 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2012/09/12 07:47:50 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2012/09/12 07:47:49 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2012/09/12 07:47:49 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2012/09/12 07:47:49 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2012/09/12 07:47:49 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2012/09/12 07:47:49 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2012/09/12 07:47:49 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2012/09/12 07:47:49 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2012/09/12 07:47:49 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2012/09/12 07:47:49 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2012/09/12 07:47:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2012/09/12 07:47:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2012/09/12 07:47:49 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2012/09/12 07:47:49 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2012/09/12 07:47:49 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2012/09/12 07:47:49 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2012/09/12 07:47:49 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2012/09/12 07:47:41 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscomex.dll
[2012/09/12 07:47:41 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscomex.dll
[2012/09/12 07:47:40 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsmon.dll
[2012/09/12 07:47:40 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsmon.dll
[2012/09/12 07:47:37 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssvc.exe
[2012/09/12 07:47:33 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsxp32.dll
[2012/09/12 07:47:33 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2012/09/12 07:47:24 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsres.dll
[2012/09/12 07:47:24 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsres.dll
[2012/09/12 07:47:23 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxst30.dll
[2012/09/12 07:47:23 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxst30.dll
[2012/09/12 07:47:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsext32.dll
[2012/09/12 07:47:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsext32.dll
[2012/09/12 07:47:20 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsapi.dll
[2012/09/12 07:47:20 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsapi.dll
[2012/09/12 07:47:19 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsst.dll
[2012/09/12 07:47:19 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsst.dll
[2012/09/12 07:47:19 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxswzrd.dll
[2012/09/12 07:47:19 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2012/09/12 07:47:18 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscover.exe
[2012/09/12 07:47:18 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscover.exe
[2012/09/12 07:47:11 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxstiff.dll
[2012/09/12 07:47:11 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxstiff.dll
[2012/09/12 07:47:09 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscom.dll
[2012/09/12 07:47:09 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscom.dll
[2012/09/12 07:47:07 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsperf.dll
[2012/09/12 07:47:07 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsperf.dll
[2012/09/12 07:47:05 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsui.dll
[2012/09/12 07:47:05 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsui.dll
[2012/09/12 07:47:02 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsevent.dll
[2012/09/12 07:47:02 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsevent.dll
[2012/09/12 07:46:58 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsdrv.dll
[2012/09/12 07:46:58 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2012/09/12 07:46:53 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclnt.exe
[2012/09/12 07:46:53 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2012/09/12 07:46:46 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2012/09/12 07:46:28 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2012/09/12 07:46:26 | 000,000,000 | —D | C] – C:\WINDOWS\EHome
[2012/09/11 21:08:24 | 000,000,000 | —D | C] – C:\softpaq
[2012/09/11 20:49:07 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvudisp.exe
[2012/09/11 20:49:07 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2012/09/11 20:49:04 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\NVUNINST.EXE
[2012/09/11 20:49:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2012/09/11 18:19:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Identities
[2012/09/11 18:18:59 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2012/09/11 18:18:56 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Pictures
[2012/09/11 18:18:56 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Music
[2012/09/11 18:18:54 | 000,000,000 | –SD | C] – C:\Documents and Settings\Lew\Application Data\Microsoft
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\SendTo
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\Recent
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\Application Data
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Startup
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Favorites
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Accessories
[2012/09/11 18:18:54 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\Cookies
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\Templates
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\PrintHood
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\NetHood
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\Local Settings
[2012/09/11 18:18:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Microsoft
[2012/09/11 18:18:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Desktop
[2012/09/11 18:18:11 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2012/09/11 18:18:10 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2012/09/11 18:18:09 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2012/09/11 18:18:09 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2012/09/11 18:16:10 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2012/09/11 18:16:10 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2012/09/11 18:15:19 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2012/09/11 18:15:18 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2012/09/11 18:15:18 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2012/09/11 18:15:18 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2012/09/11 18:15:18 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2012/09/11 18:15:17 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2012/09/11 18:15:16 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2012/09/11 18:15:16 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2012/09/11 18:15:15 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2012/09/11 18:15:15 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2012/09/11 18:15:15 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2012/09/11 18:15:14 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2012/09/11 18:15:14 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2012/09/11 18:15:14 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2012/09/11 18:15:14 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2012/09/11 18:15:13 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2012/09/11 18:15:13 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2012/09/11 18:15:13 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2012/09/11 18:15:13 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2012/09/11 18:15:12 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2012/09/11 18:15:11 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2012/09/11 18:15:10 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2012/09/11 18:15:10 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2012/09/11 18:15:09 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2012/09/11 18:15:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2012/09/11 18:15:08 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2012/09/11 18:15:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2012/09/11 18:15:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2012/09/11 18:15:08 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2012/09/11 18:15:08 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2012/09/11 18:15:08 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2012/09/11 18:15:08 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2012/09/11 18:15:08 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2012/09/11 18:15:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2012/09/11 18:15:07 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2012/09/11 18:15:07 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2012/09/11 18:15:07 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2012/09/11 18:15:05 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2012/09/11 18:15:05 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2012/09/11 18:15:04 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2012/09/11 18:15:04 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2012/09/11 18:15:04 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2012/09/11 18:15:03 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2012/09/11 18:15:03 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2012/09/11 18:15:02 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2012/09/11 18:15:02 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2012/09/11 18:15:02 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2012/09/11 18:15:01 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2012/09/11 18:15:01 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2012/09/11 18:15:00 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2012/09/11 18:15:00 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2012/09/11 18:15:00 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2012/09/11 18:15:00 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2012/09/11 18:15:00 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2012/09/11 18:14:59 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2012/09/11 18:14:59 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2012/09/11 18:14:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2012/09/11 18:14:59 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2012/09/11 18:14:59 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2012/09/11 18:14:58 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2012/09/11 18:14:56 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2012/09/11 18:14:53 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2012/09/11 18:14:53 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2012/09/11 18:14:50 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2012/09/11 18:14:50 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2012/09/11 18:14:49 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2012/09/11 18:14:47 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2012/09/11 18:14:47 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2012/09/11 18:14:47 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2012/09/11 18:14:46 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2012/09/11 18:14:46 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2012/09/11 18:14:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2012/09/11 18:14:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2012/09/11 18:14:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2012/09/11 18:14:44 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2012/09/11 18:14:43 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2012/09/11 18:14:43 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2012/09/11 18:14:43 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2012/09/11 18:14:43 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2012/09/11 18:14:43 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2012/09/11 18:14:43 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2012/09/11 18:14:42 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2012/09/11 18:14:42 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2012/09/11 18:14:42 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2012/09/11 18:14:42 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2012/09/11 18:14:42 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2012/09/11 18:14:42 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2012/09/11 18:14:42 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2012/09/11 18:14:42 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2012/09/11 18:14:41 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2012/09/11 18:14:41 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2012/09/11 18:14:41 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2012/09/11 18:14:41 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2012/09/11 18:14:41 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2012/09/11 18:14:41 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2012/09/11 18:14:40 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2012/09/11 18:14:40 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2012/09/11 18:14:40 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2012/09/11 18:14:36 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2012/09/11 18:14:26 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2012/09/11 18:14:26 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2012/09/11 18:14:24 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2012/09/11 18:14:24 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2012/09/11 18:14:24 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2012/09/11 18:14:23 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2012/09/11 18:14:23 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2012/09/11 18:14:22 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2012/09/11 18:14:22 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2012/09/11 18:14:21 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2012/09/11 18:14:21 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2012/09/11 18:14:21 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2012/09/11 18:14:21 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2012/09/11 18:14:20 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2012/09/11 18:14:18 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2012/09/11 18:14:17 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2012/09/11 18:14:17 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2012/09/11 18:14:16 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2012/09/11 18:14:16 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2012/09/11 18:14:16 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2012/09/11 18:14:16 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2012/09/11 18:14:16 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2012/09/11 18:14:15 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2012/09/11 18:14:14 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2012/09/11 18:14:14 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2012/09/11 18:14:14 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2012/09/11 18:14:14 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2012/09/11 18:14:14 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2012/09/11 18:14:14 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2012/09/11 18:14:13 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2012/09/11 18:14:13 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2012/09/11 18:14:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2012/09/11 18:14:07 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2012/09/11 18:14:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2012/09/11 18:13:54 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2012/09/11 18:13:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2012/09/11 18:13:26 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2012/09/11 18:12:58 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2012/09/11 18:12:52 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2012/09/11 18:12:51 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2012/09/11 18:12:44 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2012/09/11 18:12:25 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2012/09/11 18:12:02 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2012/09/11 18:12:02 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2012/09/11 18:12:02 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2012/09/11 18:12:02 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2012/09/11 18:12:02 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2012/09/11 18:12:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2012/09/11 18:11:52 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2012/09/11 18:11:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2012/09/11 18:11:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2012/09/11 18:11:50 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2012/09/11 18:11:50 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2012/09/11 18:11:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2012/09/11 18:11:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2012/09/11 18:11:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2012/09/11 18:11:47 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2012/09/11 18:11:46 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2012/09/11 18:11:46 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2012/09/11 18:11:46 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2012/09/11 18:11:46 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2012/09/11 18:11:46 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2012/09/11 18:11:46 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2012/09/11 18:11:46 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2012/09/11 18:11:45 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2012/09/11 18:11:45 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2012/09/11 18:11:40 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2012/09/11 18:11:39 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2012/09/11 18:11:38 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2012/09/11 18:11:38 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2012/09/11 18:11:38 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2012/09/11 18:11:37 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2012/09/11 18:11:37 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2012/09/11 18:11:37 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2012/09/11 18:11:37 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2012/09/11 18:11:37 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2012/09/11 18:11:36 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2012/09/11 18:11:36 | 000,329,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2012/09/11 18:11:36 | 000,329,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2012/09/11 18:11:36 | 000,210,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2012/09/11 18:11:36 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2012/09/11 18:11:36 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2012/09/11 18:11:35 | 001,933,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2012/09/11 18:11:35 | 000,577,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2012/09/11 18:11:35 | 000,577,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2012/09/11 18:11:35 | 000,219,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2012/09/11 18:11:35 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2012/09/11 18:11:35 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2012/09/11 18:11:35 | 000,053,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2012/09/11 18:11:35 | 000,035,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2012/09/11 18:11:35 | 000,035,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2012/09/11 18:11:34 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2012/09/11 18:11:34 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2012/09/11 18:11:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2012/09/11 18:11:29 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2012/09/11 18:11:25 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2012/09/11 18:11:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2012/09/11 18:11:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2012/09/11 18:11:25 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2012/09/11 18:11:20 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2012/09/11 18:11:20 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2012/09/11 18:11:20 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2012/09/11 18:11:19 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2012/09/11 18:11:18 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2012/09/11 18:11:18 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2012/09/11 18:11:18 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2012/09/11 18:11:18 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2012/09/11 18:11:15 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2012/09/11 18:11:15 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2012/09/11 18:11:14 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2012/09/11 18:11:13 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2012/09/11 18:11:10 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2012/09/11 18:11:10 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2012/09/11 18:11:09 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2012/09/11 18:11:09 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2012/09/11 18:11:09 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2012/09/11 18:11:09 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2012/09/11 18:11:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2012/09/11 18:11:02 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2012/09/11 18:11:01 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2012/09/11 18:10:51 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2012/09/11 18:10:46 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2012/09/11 18:10:46 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2012/09/11 18:10:26 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2012/09/11 18:10:25 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2012/09/11 18:10:25 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2012/09/11 18:10:25 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2012/09/11 18:10:21 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2012/09/11 18:10:20 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2012/09/11 18:10:20 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2012/09/11 18:10:19 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2012/09/11 18:10:19 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2012/09/11 18:10:19 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2012/09/11 18:10:19 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2012/09/11 18:10:19 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2012/09/11 18:10:19 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2012/09/11 18:10:19 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2012/09/11 18:10:19 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2012/09/11 18:10:19 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2012/09/11 18:10:19 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2012/09/11 18:10:18 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2012/09/11 18:10:18 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2012/09/11 18:10:18 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2012/09/11 18:10:18 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2012/09/11 18:10:18 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2012/09/11 18:10:18 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2012/09/11 18:10:18 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2012/09/11 18:10:17 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2012/09/11 18:10:17 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2012/09/11 18:10:17 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2012/09/11 18:10:17 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2012/09/11 18:10:17 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2012/09/11 18:10:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2012/09/11 18:10:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2012/09/11 18:10:17 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2012/09/11 18:10:08 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2012/09/11 18:10:08 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2012/09/11 18:10:07 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2012/09/11 18:10:07 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2012/09/11 18:10:07 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2012/09/11 18:10:07 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2012/09/11 18:10:07 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2012/09/11 18:10:07 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2012/09/11 18:10:07 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2012/09/11 18:10:07 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2012/09/11 18:10:06 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2012/09/11 18:10:06 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2012/09/11 18:09:59 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2012/09/11 18:09:59 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2012/09/11 18:09:59 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2012/09/11 18:09:59 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2012/09/11 18:09:59 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2012/09/11 18:09:59 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2012/09/11 18:09:58 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2012/09/11 18:09:58 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2012/09/11 18:09:58 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2012/09/11 18:09:58 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2012/09/11 18:09:58 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2012/09/11 18:09:58 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2012/09/11 18:09:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2012/09/11 18:09:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2012/09/11 18:09:57 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2012/09/11 18:09:57 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2012/09/11 18:09:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2012/09/11 18:09:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2012/09/11 18:09:57 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2012/09/11 18:09:57 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2012/09/11 18:09:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2012/09/11 18:09:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2012/09/11 18:09:56 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2012/09/11 18:09:56 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2012/09/11 18:09:56 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2012/09/11 18:09:56 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2012/09/11 18:09:56 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2012/09/11 18:09:56 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2012/09/11 18:09:56 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2012/09/11 18:09:56 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2012/09/11 18:09:56 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2012/09/11 18:09:56 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2012/09/11 18:09:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2012/09/11 18:09:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2012/09/11 18:09:56 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2012/09/11 18:09:56 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2012/09/11 18:09:55 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2012/09/11 18:09:55 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2012/09/11 18:09:55 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2012/09/11 18:09:55 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2012/09/11 18:09:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2012/09/11 18:09:55 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2012/09/11 18:09:54 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2012/09/11 18:09:54 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2012/09/11 18:09:54 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2012/09/11 18:09:54 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2012/09/11 18:09:51 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2012/09/11 18:09:51 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2012/09/11 18:09:51 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2012/09/11 18:09:51 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2012/09/11 18:09:51 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2012/09/11 18:09:51 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2012/09/11 18:09:51 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2012/09/11 18:09:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2012/09/11 18:09:50 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2012/09/11 18:09:50 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2012/09/11 18:09:50 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2012/09/11 18:09:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2012/09/11 18:09:50 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2012/09/11 18:09:50 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2012/09/11 18:09:50 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2012/09/11 18:09:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2012/09/11 18:09:32 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2012/09/11 18:09:31 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2012/09/11 18:09:31 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2012/09/11 18:09:31 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2012/09/11 18:09:31 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2012/09/11 18:09:31 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2012/09/11 18:09:30 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2012/09/11 18:09:30 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2012/09/11 18:09:30 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2012/09/11 18:09:29 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2012/09/11 18:09:29 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2012/09/11 18:09:28 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2012/09/11 18:09:28 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2012/09/11 18:09:28 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2012/09/11 18:09:28 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2012/09/11 18:09:28 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2012/09/11 18:09:27 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2012/09/11 18:09:27 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2012/09/11 18:09:27 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2012/09/11 18:09:27 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2012/09/11 18:09:27 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2012/09/11 18:09:27 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2012/09/11 18:09:27 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2012/09/11 18:09:26 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2012/09/11 18:09:26 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2012/09/11 18:09:26 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2012/09/11 18:09:26 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2012/09/11 18:09:25 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2012/09/11 18:09:25 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2012/09/11 18:09:25 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2012/09/11 18:09:24 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2012/09/11 18:09:24 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2012/09/11 18:09:23 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2012/09/11 18:09:22 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2012/09/11 18:09:16 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2012/09/11 18:09:16 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2012/09/11 18:09:16 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2012/09/11 18:09:15 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2012/09/11 18:07:41 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2012/09/11 11:34:13 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2012/09/11 11:33:51 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2012/09/11 11:32:51 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2012/09/11 11:32:51 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2012/09/11 11:32:50 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2012/09/11 11:32:50 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2012/09/11 11:32:49 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2012/09/11 11:32:47 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2012/09/11 11:32:47 | 000,000,000 | R–D | C] – C:\Program Files
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2012/09/11 11:32:44 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2012/09/11 11:32:44 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2012/09/11 11:32:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2012/09/11 11:32:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2012/09/11 11:32:44 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2012/09/11 11:32:44 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2012/09/11 11:32:40 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2012/09/11 11:32:40 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2012/09/11 11:32:40 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2012/09/11 11:32:40 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2012/09/11 11:32:40 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2012/09/11 11:32:40 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2012/09/11 11:32:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2012/09/11 11:32:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2012/09/11 11:32:40 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2012/09/11 11:32:40 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2012/09/11 11:32:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2012/09/11 11:32:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2012/09/11 11:32:39 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2012/09/11 11:32:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2012/09/11 11:32:38 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2012/09/11 11:32:38 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2012/09/11 11:32:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2012/09/11 11:32:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2012/09/11 11:32:36 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2012/09/11 11:32:36 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2012/09/11 11:32:36 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2012/09/11 11:32:36 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2012/09/11 11:32:36 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2012/09/11 11:32:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2012/09/11 11:32:35 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2012/09/11 11:32:35 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2012/09/11 11:32:35 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2012/09/11 11:32:35 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2012/09/11 11:32:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2012/09/11 11:32:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2012/09/11 11:32:33 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2012/09/11 11:32:33 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2012/09/11 11:32:33 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2012/09/11 11:32:33 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2012/09/11 11:32:33 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2012/09/11 11:32:33 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2012/09/11 11:32:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2012/09/11 11:32:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2012/09/11 11:32:32 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2012/09/11 11:32:32 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2012/09/11 11:32:32 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2012/09/11 11:32:32 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2012/09/11 11:32:32 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2012/09/11 11:32:32 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2012/09/11 11:32:32 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2012/09/11 11:32:32 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2012/09/11 11:32:32 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2012/09/11 11:32:32 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2012/09/11 11:32:32 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2012/09/11 11:32:32 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2012/09/11 11:32:31 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2012/09/11 11:32:31 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2012/09/11 11:32:31 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2012/09/11 11:32:31 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2012/09/11 11:32:31 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2012/09/11 11:32:31 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2012/09/11 11:32:31 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2012/09/11 11:32:31 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2012/09/11 11:32:31 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2012/09/11 11:32:30 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2012/09/11 11:32:30 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2012/09/11 11:32:30 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2012/09/11 11:32:30 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2012/09/11 11:32:30 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2012/09/11 11:32:29 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2012/09/11 11:32:29 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2012/09/11 11:32:28 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2012/09/11 11:32:22 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2012/09/11 11:32:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2012/09/11 11:32:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2012/09/11 11:32:10 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2012/09/11 11:32:10 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2012/09/11 11:32:04 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2012/09/11 11:32:04 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2012/09/11 11:31:40 | 000,000,000 | —D | C] – C:\Documents and Settings
[2012/09/11 11:31:39 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2012/09/11 11:25:47 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2012/09/11 11:25:47 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2012/09/11 11:25:47 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2012/09/11 11:25:47 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025

========== Files - Modified Within 30 Days ==========

[2012/09/26 00:44:36 | 000,043,531 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2012/09/26 00:44:35 | 000,000,282 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/26 00:44:35 | 000,000,274 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/26 00:44:34 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/09/26 00:44:15 | 000,000,366 | -H– | M] () – C:\WINDOWS\tasks\MpIdleTask.job
[2012/09/26 00:40:00 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/25 20:40:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At2.job
[2012/09/25 18:15:49 | 000,001,222 | —- | M] () – C:\WINDOWS\QUICKEN.INI
[2012/09/25 17:14:49 | 000,000,646 | —- | M] () – C:\WINDOWS\INTU_ONL.INI
[2012/09/25 17:14:35 | 000,001,225 | —- | M] () – C:\WINDOWS\intuprof.ini
[2012/09/25 17:13:28 | 000,001,545 | —- | M] () – C:\WINDOWS\QfnOnl.ini
[2012/09/25 16:58:53 | 000,002,016 | —- | M] () – C:\Documents and Settings\Lew\Desktop\snopes.com FOX News Documentary on Barack Obama.url
[2012/09/25 15:28:48 | 000,000,384 | -H– | M] () – C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012/09/25 15:21:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At3.job
[2012/09/25 15:18:44 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/09/25 14:00:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At4.job
[2012/09/25 11:01:44 | 000,000,208 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Yahoo Mail Login.url
[2012/09/25 10:10:01 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At1.job
[2012/09/24 20:32:02 | 000,693,265 | —- | M] (Farbar) – C:\Documents and Settings\Lew\Desktop\FSS.exe
[2012/09/24 17:35:43 | 000,001,090 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Cyber Tech Help Support Forums.url
[2012/09/24 16:32:24 | 000,000,211 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Google.url
[2012/09/24 13:07:36 | 000,004,566 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/09/24 13:07:28 | 000,432,356 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/09/24 13:07:28 | 000,067,312 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/09/24 11:41:56 | 000,000,235 | —- | M] () – C:\Documents and Settings\Lew\Desktop\The Brunswick News - Home Page.url
[2012/09/21 07:31:26 | 000,607,260 | R— | M] (Swearware) – C:\Documents and Settings\Lew\Desktop\dds.scr
[2012/09/20 16:50:07 | 000,003,584 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/20 10:30:46 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2012/09/19 21:59:37 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2012/09/19 21:51:19 | 004,752,754 | R— | M] (Swearware) – C:\Documents and Settings\Lew\Desktop\ComboFix.exe
[2012/09/19 10:52:04 | 000,165,912 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/09/18 16:42:06 | 000,141,811 | —- | M] () – C:\Documents and Settings\Lew\My Documents\Certificate of Whaler Registeration.jpg
[2012/09/18 16:32:02 | 000,007,051 | —- | M] () – C:\Documents and Settings\Lew\My Documents\user 192.168.2.1 backup.conf
[2012/09/18 15:21:59 | 000,000,772 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HP Photo Creations.lnk
[2012/09/18 15:21:26 | 000,001,981 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,939 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Shop for Supplies - HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,934 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series Scan.lnk
[2012/09/18 14:28:55 | 000,000,028 | —- | M] () – C:\WINDOWS\QFNOA.INI
[2012/09/18 14:28:50 | 000,000,030 | —- | M] () – C:\WINDOWS\INTURS.DAT
[2012/09/16 09:59:11 | 000,000,292 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Watch TV Online - Stream New Movies & TV Shows - DIRECTV.url
[2012/09/16 09:25:33 | 000,696,520 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/16 09:25:33 | 000,073,416 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/14 17:47:13 | 000,609,436 | —- | M] () – C:\Documents and Settings\Lew\My Documents\spelloe_setup.exe
[2012/09/14 17:42:01 | 000,000,000 | —- | M] () – C:\Documents and Settings\Lew\Application Data\wklnhst.dat
[2012/09/14 12:18:32 | 000,000,070 | —- | M] () – C:\WINDOWS\QHI.INI
[2012/09/14 11:59:56 | 000,000,297 | —- | M] () – C:\WINDOWS\WININIT.INI
[2012/09/14 11:59:56 | 000,000,123 | —- | M] () – C:\WINDOWS\TMPCPYIS.BAT
[2012/09/14 11:59:56 | 000,000,122 | —- | M] () – C:\WINDOWS\TMPDELIS.BAT
[2012/09/14 11:59:56 | 000,000,026 | —- | M] () – C:\WINDOWS\WINSTART.BAT
[2012/09/14 11:59:53 | 000,000,362 | —- | M] () – C:\WINDOWS\QDQICK.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | M] () – C:\WINDOWS\QFP.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | M] () – C:\WINDOWS\MFF.INI
[2012/09/14 11:57:36 | 014,982,770 | —- | M] () – C:\Documents and Settings\Lew\Desktop\qw6.exe
[2012/09/14 08:25:34 | 000,000,000 | —- | M] () – C:\WINDOWS\NT.INI
[2012/09/13 20:17:55 | 000,001,595 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Yahoo for Bellsouth login.url
[2012/09/13 15:19:47 | 000,001,945 | —- | M] () – C:\WINDOWS\epplauncher.mif
[2012/09/12 14:56:39 | 000,198,864 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2012/09/12 14:56:35 | 000,272,896 | —- | M] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2012/09/12 14:56:35 | 000,006,656 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2012/09/12 14:56:35 | 000,005,632 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2012/09/12 14:26:41 | 000,001,734 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2012/09/12 14:23:50 | 000,093,672 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/12 14:23:49 | 000,821,736 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\npDeployJava1.dll
[2012/09/12 14:23:49 | 000,746,984 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2012/09/12 14:23:49 | 000,246,760 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/12 14:23:49 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/12 14:23:49 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2012/09/12 14:23:49 | 000,143,872 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2012/09/12 12:35:19 | 000,000,815 | —- | M] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/12 12:10:41 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2012/09/12 08:08:20 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2012/09/12 07:56:09 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/09/12 07:48:02 | 000,000,211 | —- | M] () – C:\Boot.bak
[2012/09/11 18:19:04 | 000,000,079 | —- | M] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2012/09/11 18:16:12 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2012/09/11 18:15:28 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2012/09/11 18:13:41 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2012/09/11 18:13:41 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/09/11 18:13:41 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2012/09/11 18:13:34 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2012/09/11 18:13:34 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2012/09/11 18:13:26 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2012/09/11 18:10:59 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2012/08/28 20:44:54 | 011,111,424 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/08/28 11:14:53 | 006,008,832 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2012/08/28 11:14:53 | 001,212,416 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2012/08/28 11:14:53 | 000,916,992 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2012/08/28 11:14:53 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2012/08/28 11:14:53 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/08/28 11:14:53 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2012/08/28 11:14:53 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2012/08/28 11:14:53 | 000,521,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012/08/28 11:14:53 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2012/08/28 11:14:53 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\url.dll
[2012/08/28 11:14:53 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\url.dll
[2012/08/28 11:14:53 | 000,067,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2012/08/28 11:14:53 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2012/08/28 11:14:53 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/08/28 11:14:53 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\licmgr10.dll
[2012/08/28 11:14:53 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licmgr10.dll
[2012/08/28 11:14:53 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2012/08/28 11:14:53 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2012/08/28 11:14:52 | 002,000,384 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/08/28 11:14:52 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2012/08/28 11:14:52 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2012/08/28 11:14:52 | 000,743,424 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/08/28 11:14:52 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2012/08/28 11:14:52 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2012/08/28 11:14:52 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2012/08/28 11:14:52 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2012/08/28 08:07:34 | 000,174,080 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2012/08/28 08:07:34 | 000,174,080 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2012/08/28 08:07:15 | 000,385,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec

========== Files Created - No Company Name ==========

[2012/09/24 16:41:50 | 000,002,016 | —- | C] () – C:\Documents and Settings\Lew\Desktop\snopes.com FOX News Documentary on Barack Obama.url
[2012/09/24 16:32:24 | 000,000,211 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Google.url
[2012/09/24 13:14:41 | 000,001,090 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Cyber Tech Help Support Forums.url
[2012/09/24 11:40:27 | 000,000,235 | —- | C] () – C:\Documents and Settings\Lew\Desktop\The Brunswick News - Home Page.url
[2012/09/20 16:50:07 | 000,003,584 | —- | C] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/19 21:59:36 | 000,000,211 | —- | C] () – C:\Boot.bak
[2012/09/19 21:59:34 | 000,260,272 | RHS- | C] () – C:\cmldr
[2012/09/19 21:56:15 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2012/09/19 21:56:15 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2012/09/19 21:56:15 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2012/09/19 21:56:15 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2012/09/19 21:56:15 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2012/09/18 16:42:00 | 000,141,811 | —- | C] () – C:\Documents and Settings\Lew\My Documents\Certificate of Whaler Registeration.jpg
[2012/09/18 16:32:01 | 000,007,051 | —- | C] () – C:\Documents and Settings\Lew\My Documents\user 192.168.2.1 backup.conf
[2012/09/18 15:21:59 | 000,000,772 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HP Photo Creations.lnk
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At4.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At3.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At2.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At1.job
[2012/09/18 15:21:26 | 000,001,981 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,939 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Shop for Supplies - HP Deskjet 3050 J610 series.lnk
[2012/09/18 15:21:26 | 000,000,934 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series Scan.lnk
[2012/09/18 14:28:55 | 000,000,028 | —- | C] () – C:\WINDOWS\QFNOA.INI
[2012/09/18 14:28:50 | 000,000,030 | —- | C] () – C:\WINDOWS\INTURS.DAT
[2012/09/16 10:32:04 | 000,000,208 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Yahoo Mail Login.url
[2012/09/16 09:59:11 | 000,000,292 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Watch TV Online - Stream New Movies & TV Shows - DIRECTV.url
[2012/09/14 17:47:22 | 000,609,436 | —- | C] () – C:\Documents and Settings\Lew\My Documents\spelloe_setup.exe
[2012/09/14 17:42:01 | 000,000,000 | —- | C] () – C:\Documents and Settings\Lew\Application Data\wklnhst.dat
[2012/09/14 16:29:30 | 000,001,924 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
[2012/09/14 16:28:54 | 000,000,888 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works Task Launcher.lnk
[2012/09/14 12:18:32 | 000,000,070 | —- | C] () – C:\WINDOWS\QHI.INI
[2012/09/14 12:07:48 | 000,000,646 | —- | C] () – C:\WINDOWS\INTU_ONL.INI
[2012/09/14 11:59:56 | 000,000,297 | —- | C] () – C:\WINDOWS\WININIT.INI
[2012/09/14 11:59:56 | 000,000,123 | —- | C] () – C:\WINDOWS\TMPCPYIS.BAT
[2012/09/14 11:59:56 | 000,000,122 | —- | C] () – C:\WINDOWS\TMPDELIS.BAT
[2012/09/14 11:59:56 | 000,000,026 | —- | C] () – C:\WINDOWS\WINSTART.BAT
[2012/09/14 11:59:52 | 000,001,545 | —- | C] () – C:\WINDOWS\QfnOnl.ini
[2012/09/14 11:59:52 | 000,001,225 | —- | C] () – C:\WINDOWS\intuprof.ini
[2012/09/14 11:59:52 | 000,001,222 | —- | C] () – C:\WINDOWS\QUICKEN.INI
[2012/09/14 11:59:50 | 000,000,252 | —- | C] () – C:\WINDOWS\ADDRBOOK.INI
[2012/09/14 11:59:48 | 000,185,136 | —- | C] () – C:\WINDOWS\System\RDM330.DLL
[2012/09/14 11:59:48 | 000,157,696 | —- | C] () – C:\WINDOWS\System\STORAGE.DLL
[2012/09/14 11:59:48 | 000,027,026 | —- | C] () – C:\WINDOWS\System\OLE2.REG
[2012/09/14 11:59:48 | 000,008,256 | —- | C] () – C:\WINDOWS\QFNOADB.DAT
[2012/09/14 11:59:48 | 000,000,362 | —- | C] () – C:\WINDOWS\QDQICK.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | C] () – C:\WINDOWS\QFP.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | C] () – C:\WINDOWS\MFF.INI
[2012/09/14 11:57:35 | 014,982,770 | —- | C] () – C:\Documents and Settings\Lew\Desktop\qw6.exe
[2012/09/14 08:25:34 | 000,000,000 | —- | C] () – C:\WINDOWS\NT.INI
[2012/09/13 20:17:55 | 000,001,595 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Yahoo for Bellsouth login.url
[2012/09/13 15:29:27 | 000,000,384 | -H– | C] () – C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012/09/13 15:29:27 | 000,000,366 | -H– | C] () – C:\WINDOWS\tasks\MpIdleTask.job
[2012/09/13 15:19:47 | 000,001,945 | —- | C] () – C:\WINDOWS\epplauncher.mif
[2012/09/13 15:19:28 | 000,001,698 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012/09/12 18:39:06 | 000,003,903 | —- | C] () – C:\WINDOWS\System32\nvnrm.nvu
[2012/09/12 14:58:32 | 000,000,274 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/12 14:58:31 | 000,000,282 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/12 14:50:29 | 000,000,830 | —- | C] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/12 14:26:41 | 000,001,804 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader X.lnk
[2012/09/12 14:26:41 | 000,001,734 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2012/09/12 12:10:42 | 000,013,646 | —- | C] () – C:\WINDOWS\System32\wpa.bak
[2012/09/12 12:02:40 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2012/09/12 12:02:40 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/09/12 07:59:24 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2012/09/12 07:59:24 | 000,067,374 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2012/09/12 07:59:24 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2012/09/12 07:59:24 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2012/09/12 07:59:24 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2012/09/12 07:59:24 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2012/09/12 07:59:24 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2012/09/12 07:59:23 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2012/09/12 07:59:23 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2012/09/12 07:59:23 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2012/09/12 07:59:23 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2012/09/12 07:59:23 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2012/09/12 07:59:23 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2012/09/12 07:59:23 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2012/09/12 07:59:23 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2012/09/12 07:59:23 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2012/09/12 07:59:23 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2012/09/12 07:59:23 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2012/09/12 07:59:23 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2012/09/12 07:59:23 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2012/09/12 07:59:23 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2012/09/12 07:59:23 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2012/09/12 07:59:23 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2012/09/12 07:59:23 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2012/09/12 07:59:23 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2012/09/12 07:59:23 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2012/09/12 07:59:23 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2012/09/12 07:59:23 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2012/09/12 07:59:23 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2012/09/12 07:59:23 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2012/09/12 07:59:23 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2012/09/12 07:59:23 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2012/09/12 07:59:23 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2012/09/12 07:59:23 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2012/09/12 07:59:23 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2012/09/12 07:59:23 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2012/09/12 07:59:23 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2012/09/12 07:59:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2012/09/12 07:59:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2012/09/12 07:59:23 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2012/09/12 07:59:23 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2012/09/12 07:59:23 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2012/09/12 07:59:23 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2012/09/12 07:59:23 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2012/09/12 07:59:23 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2012/09/12 07:59:23 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2012/09/12 07:59:23 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2012/09/12 07:59:23 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2012/09/12 07:59:23 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2012/09/12 07:59:23 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2012/09/12 07:59:23 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2012/09/12 07:59:23 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2012/09/12 07:59:23 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2012/09/12 07:59:23 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2012/09/12 07:59:23 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2012/09/12 07:59:23 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2012/09/12 07:59:23 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2012/09/12 07:59:23 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2012/09/12 07:59:22 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2012/09/12 07:59:22 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2012/09/12 07:59:22 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2012/09/12 07:59:22 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2012/09/12 07:59:22 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2012/09/12 07:59:22 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2012/09/12 07:59:22 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2012/09/12 07:59:22 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2012/09/12 07:59:22 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2012/09/12 07:59:22 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2012/09/12 07:59:22 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2012/09/12 07:59:22 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2012/09/12 07:59:22 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2012/09/12 07:59:22 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2012/09/12 07:59:22 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2012/09/12 07:59:22 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2012/09/12 07:59:22 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2012/09/12 07:59:22 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2012/09/12 07:59:22 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2012/09/12 07:47:50 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2012/09/12 07:47:50 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2012/09/12 07:47:50 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2012/09/11 20:49:09 | 000,043,531 | —- | C] () – C:\WINDOWS\System32\nvapps.xml
[2012/09/11 20:49:07 | 000,016,356 | —- | C] () – C:\WINDOWS\System32\nvdisp.nvu
[2012/09/11 18:19:04 | 000,000,079 | —- | C] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2012/09/11 18:19:00 | 000,000,738 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Outlook Express.lnk
[2012/09/11 18:18:59 | 000,000,815 | —- | C] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/11 18:18:59 | 000,000,803 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Internet Explorer.lnk
[2012/09/11 18:18:54 | 000,001,599 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Remote Assistance.lnk
[2012/09/11 18:18:54 | 000,000,792 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Windows Media Player.lnk
[2012/09/11 18:16:12 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2012/09/11 18:15:28 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2012/09/11 18:15:00 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2012/09/11 18:14:47 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2012/09/11 18:14:43 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2012/09/11 18:14:42 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2012/09/11 18:14:40 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2012/09/11 18:14:31 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2012/09/11 18:14:26 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2012/09/11 18:14:16 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2012/09/11 18:13:41 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2012/09/11 18:13:41 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2012/09/11 18:13:41 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2012/09/11 18:13:34 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2012/09/11 18:13:34 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2012/09/11 18:13:33 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2012/09/11 18:12:43 | 000,000,786 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
[2012/09/11 18:12:32 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2012/09/11 18:11:59 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2012/09/11 18:11:59 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2012/09/11 18:11:52 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2012/09/11 18:10:59 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2012/09/11 18:10:26 | 000,000,609 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
[2012/09/11 18:10:25 | 000,001,986 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk
[2012/09/11 18:10:01 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2012/09/11 18:10:01 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2012/09/11 18:10:01 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2012/09/11 18:10:01 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2012/09/11 18:10:01 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2012/09/11 18:10:01 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2012/09/11 18:10:01 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2012/09/11 18:10:00 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2012/09/11 18:10:00 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2012/09/11 18:10:00 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2012/09/11 18:10:00 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2012/09/11 18:09:57 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2012/09/11 18:09:57 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2012/09/11 18:09:56 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2012/09/11 18:09:49 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2012/09/11 11:32:53 | 000,004,566 | —- | C] () – C:\WINDOWS\imsins.BAK
[2012/09/11 11:32:51 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2012/09/11 11:32:49 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2012/09/11 11:32:49 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2012/09/11 11:32:48 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2012/09/11 11:32:48 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2012/09/11 11:32:30 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2012/09/11 11:32:21 | 001,042,903 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2012/09/11 11:32:21 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2012/09/11 11:32:21 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2012/09/11 11:32:21 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2012/09/11 11:32:21 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2012/09/11 11:32:21 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2012/09/11 11:32:21 | 000,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2012/09/11 11:32:21 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2012/09/11 11:31:39 | 000,165,912 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/09/11 11:30:45 | 000,000,327 | RHS- | C] () – C:\boot.ini
[2012/09/11 11:30:42 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf

========== ZeroAccess Check ==========

[2012/09/18 12:43:50 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

< End of report >

Tomk

Post #29September 26, 2012, 2:55 PM UTC

Alright… that is all I see. Let's do a little housekeeping and let you get on with your life.

Click START then RUN
Now type ComboFix /Uninstall in the runbox and click OK.
Note the space between the X and the U, it needs to be there.
[external image: Posted Image]

The above procedure will:

Implement some cleanup procedures.
Reset System Restore.

Double click on OTL to run it.
Click on CleanUp!
When done, you will be prompted to restart your computer. Please restart your computer.

Please re-enable any security that was disabled.

Malwarebytes' can be found here: http://www.download.com/Malwarebytes-Anti-…&tag=button

The following is my standard advice for the future. Use what you can and pat yourself on the back for what you're already doing.

Please take time to read Preventing Malware - Tools and Practices for Safe Computing. Very important information for your consideration is contained therein.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein

Also: "How to prevent malware"
by miekiemoes

Please respond back that you understand the above and let me know if you have any questions. Otherwise, this thread will be closed Resolved.

Lewg

Post #30September 26, 2012, 3:40 PM UTC

PC running great! Question, the Babylon toolbar helper is showing up in my HJT log…..Should it be there? I though we dumped Babylon.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

New Hard Drive and Windows XP Installed [Solved]

✨ Ask AI

Ask AI