New Hard Drive and Windows XP Installed [Solved]

I seem to be getting a lot of pop up ads now, especially on WTT……


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:16:25 PM, on 9/26/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Real\RealPlayer\update\realsched.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\rundll32.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe
C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\NDSPCShowServer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Lew\My Documents\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://aol.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll
O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file)
O3 - Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - "C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [PCShowServer] "C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1347465718176
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/microsoftu…b?1347978180406
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Browser Manager - Unknown owner - C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

–
End of file - 6767 bytes

It appears one of the three you had me check was removed, I followed your instructions to the T…..Still after trying two times the others were not removed…….I am wondering since I have the Babylon add on that appeared one day disabled, that might be the reason HJT won't remove it when I use the "Fix it" option……Just a thought!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:11:11 PM, on 9/26/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Real\RealPlayer\update\realsched.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe
C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\NDSPCShowServer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\Documents and Settings\Lew\Desktop\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://aol.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll
O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [PCShowServer] "C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\PCShowServerPMWrapper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1347465718176
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1347978180406
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Browser Manager - Unknown owner - C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

–
End of file - 6417 bytes

ComboFix 12-10-02.02 - Lew 10/02/2012 7:13.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.958.555 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Lew\My Documents\ShopToWin
c:\documents and settings\Lew\WINDOWS
.
.
((((((((((((((((((((((((( Files Created from 2012-09-02 to 2012-10-02 )))))))))))))))))))))))))))))))
.
.
2012-10-01 23:54 . 2012-10-01 23:54 ——– d—–w- C:\2b9008bbd725595c0034b392
2012-10-01 13:30 . 2012-10-01 13:30 ——– d—–w- C:\extensions
2012-09-19 14:46 . 2012-09-19 14:46 ——– d—–w- C:\c57b15f097730dbd27a55ca19911
2012-09-18 17:25 . 2012-09-18 17:25 ——– d—–w- C:\HP
2012-09-18 17:24 . 2012-09-18 17:24 ——– d—–w- C:\temp
2012-09-14 13:03 . 2012-09-14 21:19 ——– d—–w- C:\desktop
2012-09-12 19:09 . 2012-09-12 19:09 ——– d—a-w- C:\swsetup
2012-09-12 19:09 . 2012-09-12 19:09 ——– d—–w- C:\SYSTEM.SAV
2012-09-12 01:08 . 2012-09-12 01:10 ——– d—–w- C:\softpaq
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-31 02:03 . 2012-03-21 00:44 193552 —-a-w- c:\windows\system32\drivers\MpFilter.sys
2012-08-28 15:14 . 2006-02-28 12:00 916992 —-a-w- c:\windows\system32\wininet.dll
2012-08-28 15:14 . 2006-02-28 12:00 43520 ——w- c:\windows\system32\licmgr10.dll
2012-08-28 15:14 . 2006-02-28 12:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2006-02-28 12:00 385024 ——w- c:\windows\system32\html.iec
2012-07-06 13:58 . 2006-02-28 12:00 78336 —-a-w- c:\windows\system32\browser.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-05-09 7311360]
"nwiz"="nwiz.exe" [2006-05-09 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-05-09 86016]
"RTHDCPL"="RTHDCPL.EXE" [2009-02-03 18085888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"TkBellExe"="c:\program files\Real\RealPlayer\update\realsched.exe" [2012-09-12 296096]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 947176]
"KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-10 49208]
.
c:\documents and settings\Lew\Start Menu\Programs\Startup\
wkcalrem.LNK - c:\program files\Microsoft Works\WkCalRem.exe [2007-6-20 46432]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
.
R2 Browser Manager;Browser Manager;c:\documents and settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [9/14/2012 5:48 PM 1701400]
R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [10/1/2012 10:11 AM 399432]
R3 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\7.1.391.0\SeaPort.EXE [6/11/2012 4:22 PM 240208]
S2 BBSvc;BingBar Service;c:\program files\Microsoft\BingBar\7.1.391.0\BBSvc.EXE [6/11/2012 4:22 PM 193616]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [10/1/2012 10:11 AM 676936]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [9/12/2012 2:50 PM 250568]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [10/1/2012 10:11 AM 22856]
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - MPFILTER
.
Contents of the 'Scheduled Tasks' folder
.
2012-10-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-12 13:25]
.
2012-10-01 c:\windows\Tasks\At1.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-11-17 01:12]
.
2012-10-02 c:\windows\Tasks\At2.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-11-17 01:12]
.
2012-10-01 c:\windows\Tasks\At3.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-11-17 01:12]
.
2012-10-01 c:\windows\Tasks\At4.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-11-17 01:12]
.
2012-10-02 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-09-12 21:25]
.
2012-10-02 c:\windows\Tasks\MpIdleTask.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-09-12 21:25]
.
2012-10-02 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-861567501-725345543-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2012-07-27 18:27]
.
2012-10-02 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-861567501-725345543-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2012-07-27 18:27]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://us.yhs4.search.yahoo.com/web/partner?&hspart=w3i&hsimp=yhs-syctransfer&type=W3i_SP,204,0_0,StartPage,20121040,16898,0,8,0
uInternet Connection Wizard,ShellNext = iexplore
Trusted Zone: coastalbankofga.com
Trusted Zone: extendhealth.com
Trusted Zone: usps.com
TCP: DhcpNameServer = 192.168.2.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-02 07:16
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-2052111302-861567501-725345543-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'explorer.exe'(2364)
c:\windows\system32\WININET.dll
c:\windows\system32\nview.dll
c:\documents and settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
c:\windows\system32\nvwddi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
Completion time: 2012-10-02 07:17:51
ComboFix-quarantined-files.txt 2012-10-02 11:17
.
Pre-Run: 490,992,365,568 bytes free
Post-Run: 491,049,680,896 bytes free
.
- - End Of File - - 6FE04FA13F6FDD7BEDE164534F2BD43D

OK here is the new OTL log,

I continue seeing my PC lock up after I d/loaded Malwarebytes again…..I have the Malwarebytes Icon in the taskbar…..When I turn on my PC a ballon pops up from the Icon saying your trial version has expired……I close it, but my Outlook Express mail program locks up and I have to close the process…..I stll see the Babylon toolbar helper in the HJT log….When I try to open another tab it reads Babylon search…..I have not run ESET in a while, but I imagine there are the same threats that were reported before…..You say they are not a problem, ghosts, etc. Would you advise on running ESET and removing all ESET list after the running. Nothing is being done until you advise…..Thanks!




OTL logfile created on: 10/2/2012 1:03:57 PM - Run 3
OTL by OldTimer - Version 3.2.33.2 Folder = C:\Documents and Settings\Lew\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

958.48 Mb Total Physical Memory | 494.51 Mb Available Physical Memory | 51.59% Memory free
2.26 Gb Paging File | 1.85 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 457.28 Gb Free Space | 98.18% Space Free | Partition Type: NTFS
Drive D: | 202.83 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: LEW-0CCC0E88CE3 | User Name: Lew | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
PRC - [2012/09/12 17:25:22 | 000,020,472 | —- | M] (Microsoft Corporation) – c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2012/09/12 17:19:44 | 000,947,176 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2012/09/12 14:56:35 | 000,296,096 | —- | M] (RealNetworks, Inc.) – C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2012/09/12 14:23:49 | 000,161,768 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012/09/07 17:04:46 | 000,676,936 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/09/07 17:04:46 | 000,399,432 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012/09/07 17:04:44 | 000,766,536 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/06/11 16:22:16 | 000,193,616 | —- | M] (Microsoft Corporation.) – C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.EXE
PRC - [2012/02/23 22:31:40 | 000,583,680 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Lew\Desktop\OTL.exe
PRC - [2009/03/27 22:10:56 | 000,014,336 | —- | M] (LSI Corporation) – C:\Program Files\LSI SoftModem\agrsmsvc.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2007/06/20 17:04:51 | 000,046,432 | —- | M] (Microsoft® Corporation) – C:\Program Files\Microsoft Works\WkCalRem.exe


========== Modules (No Company Name) ==========

MOD - [2012/09/14 17:48:20 | 002,098,200 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
MOD - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
MOD - [2006/05/09 15:50:00 | 001,466,368 | —- | M] () – C:\WINDOWS\system32\nview.dll
MOD - [2006/05/09 15:50:00 | 000,466,944 | —- | M] () – C:\WINDOWS\system32\nvshell.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] – – (HidServ)
SRV - File not found [On_Demand | Stopped] – – (AppMgmt)
SRV - [2012/09/16 09:25:33 | 000,250,568 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2012/09/14 17:48:20 | 001,701,400 | —- | M] () [Auto | Running] – C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe – (Browser Manager)
SRV - [2012/09/12 17:25:22 | 000,020,472 | —- | M] (Microsoft Corporation) [Auto | Running] – c:\Program Files\Microsoft Security Client\MsMpEng.exe – (MsMpSvc)
SRV - [2012/09/12 14:23:49 | 000,161,768 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2012/09/07 17:04:46 | 000,676,936 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2012/09/07 17:04:46 | 000,399,432 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe – (MBAMScheduler)
SRV - [2012/06/11 16:22:16 | 000,240,208 | —- | M] (Microsoft Corporation.) [On_Demand | Stopped] – C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.EXE – (BBUpdate)
SRV - [2012/06/11 16:22:16 | 000,193,616 | —- | M] (Microsoft Corporation.) [Auto | Running] – C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.EXE – (BBSvc)
SRV - [2009/03/27 22:10:56 | 000,014,336 | —- | M] (LSI Corporation) [Auto | Running] – C:\Program Files\LSI SoftModem\agrsmsvc.exe – (AgereModemAudio)


========== Driver Services (SafeList) ==========

DRV - [2012/09/07 17:04:46 | 000,022,856 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2009/08/13 15:07:12 | 001,163,328 | —- | M] (LSI Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\AGRSM.sys – (AgereSoftModem)
DRV - [2009/02/11 12:40:40 | 005,028,352 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/07/13 10:44:22 | 000,043,008 | —- | M] (D-Link ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\dlkfet5b.sys – (FETNDISB)
DRV - [2006/03/03 14:31:04 | 000,013,056 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nvnetbus.sys – (nvnetbus)
DRV - [2006/03/03 14:31:02 | 000,034,176 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\NVENETFD.sys – (NVENETFD)
DRV - [2005/12/12 17:27:00 | 000,019,072 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\PS2.sys – (Ps2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://%20msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://aol.com/
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@nds.com/PCShowPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPCShowPlugin.dll File not found
FF - HKCU\Software\MozillaPlugins\@nds.com/PlayerPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPlayerPlugin.dll (NDS)
FF - HKCU\Software\MozillaPlugins\NDS.com/PlayerPlugin: C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player\npPlayerPlugin.dll (NDS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/09/12 14:56:42 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\Documents and Settings\All Users\Application Data\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012/09/14 17:48:22 | 000,000,000 | —D | M]

[2012/09/14 17:47:46 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2012/09/20 10:30:46 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found.
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - Startup: C:\Documents and Settings\Lew\Start Menu\Programs\Startup\wkcalrem.LNK = C:\Program Files\Microsoft Works\WkCalRem.exe (Microsoft® Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKCU\..Trusted Domains: coastalbankofga.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: ebay.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: extendhealth.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: extendhealth.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: fisherbuggies.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: hulu.com ([www] http in Local intranet)
O15 - HKCU\..Trusted Domains: msn.com ([www] http in Local intranet)
O15 - HKCU\..Trusted Domains: shoptalkforums.com ([www] http in Local intranet)
O15 - HKCU\..Trusted Domains: thebrunswicknews.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: usps.com ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: usps.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: whatthetech.com ([forums] http in Local intranet)
O15 - HKCU\..Trusted Domains: yahoo.com ([www] http in Local intranet)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd…b?1347465718176 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1347978180406 (MUWebControl Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E5072BA-3DCD-43F1-A347-7B3E0450AF88}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/09/11 18:13:41 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/10/02 12:41:59 | 000,583,680 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Lew\Desktop\OTL.exe
[2012/10/02 09:31:07 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Scotts Lawn Program
[2012/10/02 07:52:27 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2012/10/02 07:12:33 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2012/10/02 07:12:33 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2012/10/02 07:12:33 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2012/10/02 07:12:33 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2012/10/02 07:12:27 | 000,000,000 | —D | C] – C:\Qoobox
[2012/10/02 07:10:06 | 004,759,935 | R— | C] (Swearware) – C:\Documents and Settings\Lew\Desktop\ComboFix.exe
[2012/10/01 19:54:25 | 000,000,000 | —D | C] – C:\2b9008bbd725595c0034b392
[2012/10/01 10:11:36 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/10/01 10:11:28 | 000,022,856 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2012/10/01 10:11:28 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/10/01 10:10:20 | 010,524,080 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\Lew\Desktop\mbam-setup-1.65.0.1400.exe
[2012/10/01 09:45:48 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\Recent
[2012/10/01 09:30:20 | 000,000,000 | —D | C] – C:\extensions
[2012/10/01 09:30:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Qwiklinx
[2012/10/01 09:30:15 | 000,000,000 | —D | C] – C:\Program Files\Qwiklinx
[2012/10/01 09:30:09 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\FCTB000100567
[2012/10/01 09:28:47 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2012/10/01 09:27:50 | 000,000,000 | —D | C] – C:\Program Files\STW Installer
[2012/10/01 09:27:22 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Yahoo!
[2012/10/01 09:27:16 | 000,000,000 | —D | C] – C:\Program Files\Yahoo!
[2012/09/30 10:35:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner
[2012/09/30 10:35:16 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2012/09/28 03:00:14 | 000,000,000 | —D | C] – C:\Program Files\MSXML 4.0
[2012/09/27 17:52:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Quicken
[2012/09/27 17:30:46 | 000,000,000 | —D | C] – C:\Program Files\Common Files\AnswerWorks 5.0
[2012/09/27 17:30:40 | 004,200,024 | —- | C] (Amyuni Technologies
http://www.amyuni.com) – C:\WINDOWS\System32\cdintf400.dll
[2012/09/27 17:30:36 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Quicken 2012
[2012/09/27 17:30:14 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Intuit
[2012/09/27 17:30:03 | 000,000,000 | —D | C] – C:\Program Files\Quicken
[2012/09/27 17:30:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Intuit
[2012/09/27 17:28:47 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Intuit
[2012/09/25 15:21:07 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\HiJackThis
[2012/09/20 16:02:11 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusb.dll
[2012/09/20 16:02:10 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusd.dll
[2012/09/20 13:17:27 | 000,000,000 | —D | C] – C:\WINDOWS\Sun
[2012/09/19 22:51:07 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2012/09/19 21:59:33 | 000,000,000 | RHSD | C] – C:\cmdcons
[2012/09/19 21:56:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2012/09/19 21:56:03 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Administrative Tools
[2012/09/19 21:55:54 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2012/09/19 10:46:41 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2012/09/19 10:46:37 | 000,000,000 | —D | C] – C:\Program Files\MSBuild
[2012/09/19 10:46:30 | 000,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2012/09/19 10:46:01 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2012/09/19 10:46:01 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2012/09/19 10:46:01 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2012/09/19 10:46:01 | 000,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2012/09/19 10:46:01 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2012/09/19 10:46:01 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2012/09/19 10:46:00 | 000,000,000 | —D | C] – C:\c57b15f097730dbd27a55ca19911
[2012/09/18 15:43:51 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2012/09/18 15:24:59 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbprint.sys
[2012/09/18 15:24:53 | 000,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2012/09/18 15:24:49 | 000,032,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2012/09/18 15:22:54 | 000,000,000 | —D | C] – C:\Program Files\Microsoft
[2012/09/18 15:22:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
[2012/09/18 15:22:19 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2012/09/18 15:22:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Mozilla
[2012/09/18 15:21:58 | 000,000,000 | —D | C] – C:\Program Files\HP Photo Creations
[2012/09/18 15:21:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HP Photo Creations
[2012/09/18 15:21:55 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Coupons
[2012/09/18 15:21:54 | 000,000,000 | —D | C] – C:\Program Files\Coupons
[2012/09/18 15:21:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\HpUpdate
[2012/09/18 15:21:27 | 000,527,208 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\HPDiscoPM9311.dll
[2012/09/18 15:21:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\HP
[2012/09/18 15:21:25 | 001,792,872 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\HPScanMiniDrv_DJ3050_J610.dll
[2012/09/18 15:21:24 | 000,267,112 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinksts9311LM.dll
[2012/09/18 15:21:24 | 000,232,296 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinksts9311.dll
[2012/09/18 15:21:24 | 000,213,864 | —- | C] (Hewlett-Packard Co.) – C:\WINDOWS\System32\hpinkcoi9311.dll
[2012/09/18 15:21:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2012/09/18 15:20:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HP
[2012/09/18 15:20:33 | 000,000,000 | —D | C] – C:\Program Files\HP
[2012/09/18 15:19:06 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\HP
[2012/09/18 14:39:47 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Sites Login informatin
[2012/09/18 13:25:03 | 000,019,072 | —- | C] (Hewlett-Packard Company) – C:\WINDOWS\System32\drivers\PS2.sys
[2012/09/18 13:25:01 | 000,000,000 | —D | C] – C:\HP
[2012/09/18 13:24:59 | 000,000,000 | —D | C] – C:\temp
[2012/09/18 12:50:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Downloads
[2012/09/18 12:47:38 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Ask
[2012/09/18 12:43:50 | 000,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2012/09/18 12:43:22 | 000,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2012/09/18 10:50:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\Launch Manager 1.00.1e
[2012/09/18 10:50:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Coupon Companion
[2012/09/18 10:49:58 | 000,000,000 | —D | C] – C:\Program Files\Coupon Companion
[2012/09/16 09:27:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\DTV
[2012/09/16 09:27:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\DIRECTV Player
[2012/09/14 18:58:38 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Malwarebytes
[2012/09/14 18:58:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2012/09/14 18:43:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\My Documents\backups
[2012/09/14 17:50:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Spell Checker For OE 2.1
[2012/09/14 17:48:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\searchplugins
[2012/09/14 17:48:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Extensions
[2012/09/14 17:48:25 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Browser Manager
[2012/09/14 17:48:19 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Browser Manager
[2012/09/14 17:47:46 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2012/09/14 17:42:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Template
[2012/09/14 16:46:22 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2012/09/14 16:29:21 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2012/09/14 16:28:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works
[2012/09/14 16:26:40 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2012/09/14 15:47:16 | 000,000,000 | —D | C] – C:\Program Files\WOT
[2012/09/14 14:20:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Help
[2012/09/14 11:59:48 | 000,308,800 | —- | C] (Intuit) – C:\WINDOWS\System\Q_AFUI16.DLL
[2012/09/14 11:59:48 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2.DLL
[2012/09/14 11:59:48 | 000,260,704 | —- | C] (Intuit) – C:\WINDOWS\System\QFNIC16.DLL
[2012/09/14 11:59:48 | 000,177,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TYPELIB.DLL
[2012/09/14 11:59:48 | 000,164,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2DISP.DLL
[2012/09/14 11:59:48 | 000,155,408 | —- | C] (Intuit) – C:\WINDOWS\System\QCONNECT.DLL
[2012/09/14 11:59:48 | 000,150,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2NLS.DLL
[2012/09/14 11:59:48 | 000,146,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MFCOLEUI.DLL
[2012/09/14 11:59:48 | 000,136,544 | —- | C] (Intuit) – C:\WINDOWS\System\QFNAW16.DLL
[2012/09/14 11:59:48 | 000,126,240 | —- | C] (Intuit) – C:\WINDOWS\System\QFNUT16.DLL
[2012/09/14 11:59:48 | 000,110,640 | —- | C] (Inverse Network Technology Inc.) – C:\WINDOWS\System\QFNOA16.DLL
[2012/09/14 11:59:48 | 000,108,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMPOBJ.DLL
[2012/09/14 11:59:48 | 000,091,936 | —- | C] (Intuit) – C:\WINDOWS\System\Q_LINK16.DLL
[2012/09/14 11:59:48 | 000,088,316 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLRMI16.DLL
[2012/09/14 11:59:48 | 000,084,224 | —- | C] (Intuit) – C:\WINDOWS\System\QCON1632.EXE
[2012/09/14 11:59:48 | 000,082,384 | —- | C] (Intuit, Inc.) – C:\WINDOWS\System\ONLCFG16.DLL
[2012/09/14 11:59:48 | 000,081,088 | —- | C] (Intuit) – C:\WINDOWS\System\Q_ENLB16.DLL
[2012/09/14 11:59:48 | 000,066,160 | —- | C] (Intuit) – C:\WINDOWS\System\QFNBC16.DLL
[2012/09/14 11:59:48 | 000,057,728 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLC16.DLL
[2012/09/14 11:59:48 | 000,057,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2CONV.DLL
[2012/09/14 11:59:48 | 000,053,360 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TLASYN16.DLL
[2012/09/14 11:59:48 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLE2PROX.DLL
[2012/09/14 11:59:48 | 000,043,248 | —- | C] (TIBCO Inc.) – C:\WINDOWS\System\TSSPRV16.DLL
[2012/09/14 11:59:48 | 000,035,568 | —- | C] (Inverse Network Technology, Inc.) – C:\WINDOWS\System\QFNSW16.DLL
[2012/09/14 11:59:48 | 000,030,096 | —- | C] (Intuit) – C:\WINDOWS\System\Q_COMM16.DLL
[2012/09/14 11:59:48 | 000,020,208 | —- | C] (Intuit) – C:\WINDOWS\System\INTUPROF.DLL
[2012/09/14 11:59:48 | 000,018,336 | —- | C] (Intuit) – C:\WINDOWS\System\QFNSET16.DLL
[2012/09/14 11:59:48 | 000,014,192 | —- | C] (Intuit) – C:\WINDOWS\System\QFNGLU16.DLL
[2012/09/14 11:59:48 | 000,010,128 | —- | C] (Intuit, Inc.) – C:\WINDOWS\System\QFNTHUNK.DLL
[2012/09/14 11:59:48 | 000,007,136 | —- | C] (Intuit) – C:\WINDOWS\System\Q_ENUT16.DLL
[2012/09/14 11:59:45 | 000,151,552 | —- | C] (Blue Sky Software Corp.) – C:\WINDOWS\System\HYPERTOP.DLL
[2012/09/14 11:59:45 | 000,081,408 | —- | C] (Blue Sky Software Corp.) – C:\WINDOWS\System\CNT31.DLL
[2012/09/14 11:59:45 | 000,021,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\CTL3DV2.DLL
[2012/09/14 11:59:45 | 000,000,000 | —D | C] – C:\WINDOWS\QFNONL
[2012/09/14 11:59:24 | 000,249,072 | —- | C] (InstallShield Corporation, Inc.) – C:\WINDOWS\UNINST16.EXE
[2012/09/14 11:59:24 | 000,026,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\CTL3D.DLL
[2012/09/14 10:11:00 | 000,275,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll
[2012/09/14 10:11:00 | 000,017,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mucltui.dll.mui
[2012/09/14 09:03:16 | 000,000,000 | —D | C] – C:\desktop
[2012/09/14 08:24:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2012/09/14 08:18:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2012/09/13 18:56:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Western Digital
[2012/09/13 15:30:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Temp
[2012/09/13 15:30:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Adobe
[2012/09/13 15:26:15 | 000,237,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[2012/09/13 15:19:14 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Security Client
[2012/09/13 15:13:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Identities
[2012/09/12 18:39:38 | 000,000,000 | —D | C] – C:\Program Files\LSI SoftModem
[2012/09/12 18:39:06 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvunrm.exe
[2012/09/12 18:39:06 | 000,101,888 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nvtcp.sys
[2012/09/12 15:25:21 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Sun
[2012/09/12 15:09:57 | 000,000,000 | —D | C] – C:\swsetup
[2012/09/12 15:09:56 | 000,000,000 | —D | C] – C:\SYSTEM.SAV
[2012/09/12 15:09:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\WinBatch
[2012/09/12 14:58:28 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Videos
[2012/09/12 14:56:42 | 000,000,000 | —D | C] – C:\Program Files\Common Files\xing shared
[2012/09/12 14:56:39 | 000,198,864 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2012/09/12 14:56:35 | 000,272,896 | —- | C] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2012/09/12 14:56:35 | 000,006,656 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2012/09/12 14:56:35 | 000,005,632 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2012/09/12 14:56:35 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\RealNetworks
[2012/09/12 14:56:32 | 000,000,000 | —D | C] – C:\Program Files\Real
[2012/09/12 14:56:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Real
[2012/09/12 14:53:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Real
[2012/09/12 14:53:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Macromedia
[2012/09/12 14:53:18 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Adobe
[2012/09/12 14:51:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Google
[2012/09/12 14:50:52 | 000,000,000 | —D | C] – C:\Program Files\Google
[2012/09/12 14:50:28 | 000,696,520 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/12 14:50:28 | 000,073,416 | —- | C] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/12 14:26:23 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2012/09/12 14:26:23 | 000,000,000 | —D | C] – C:\Program Files\Adobe
[2012/09/12 14:24:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Adobe
[2012/09/12 14:24:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2012/09/12 14:24:05 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2012/09/12 14:23:59 | 000,821,736 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\npDeployJava1.dll
[2012/09/12 14:23:59 | 000,746,984 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2012/09/12 14:23:59 | 000,246,760 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/12 14:23:59 | 000,143,872 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2012/09/12 14:23:55 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/12 14:23:55 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2012/09/12 14:23:55 | 000,093,672 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/12 14:23:47 | 000,000,000 | —D | C] – C:\Program Files\Java
[2012/09/12 14:15:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\McAfee
[2012/09/12 14:14:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Sun
[2012/09/12 13:50:00 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\IECompatCache
[2012/09/12 13:48:31 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\PrivacIE
[2012/09/12 12:35:32 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Lang
[2012/09/12 12:35:16 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\IETldCache
[2012/09/12 12:24:13 | 000,521,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012/09/12 12:23:42 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2012/09/12 12:23:38 | 011,111,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/09/12 12:23:38 | 002,000,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/09/12 12:23:38 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/09/12 12:23:38 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/09/12 12:23:38 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/09/12 12:23:32 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2012/09/12 12:22:50 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2012/09/12 12:11:32 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2012/09/12 12:11:25 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2012/09/12 12:10:37 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2012/09/12 12:10:37 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2012/09/12 12:10:29 | 000,456,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2012/09/12 12:09:47 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2012/09/12 12:09:26 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2012/09/12 12:09:13 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2012/09/12 12:09:09 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2012/09/12 12:08:48 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2012/09/12 12:08:48 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2012/09/12 12:07:46 | 000,730,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2012/09/12 12:07:45 | 002,192,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2012/09/12 12:07:45 | 002,148,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2012/09/12 12:07:45 | 002,026,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2012/09/12 12:07:05 | 000,139,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwd.sys
[2012/09/12 12:07:04 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2012/09/12 12:07:03 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2012/09/12 12:06:58 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mup.sys
[2012/09/12 12:06:06 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vgx.dll
[2012/09/12 12:05:51 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2012/09/12 12:02:44 | 000,010,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndistapi.sys
[2012/09/12 12:01:54 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\UserData
[2012/09/12 12:01:53 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2012/09/12 12:01:52 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2012/09/12 12:01:33 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2012/09/12 11:56:02 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\splitter.sys
[2012/09/12 11:56:01 | 000,083,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdmaud.sys
[2012/09/12 11:55:59 | 000,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dmusic.sys
[2012/09/12 11:55:58 | 000,056,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swmidi.sys
[2012/09/12 11:55:56 | 000,142,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aec.sys
[2012/09/12 11:55:55 | 000,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kmixer.sys
[2012/09/12 11:55:54 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmkaud.sys
[2012/09/12 11:55:53 | 000,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sysaudio.sys
[2012/09/12 11:55:51 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mskssrv.sys
[2012/09/12 11:55:50 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspqm.sys
[2012/09/12 11:55:48 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspclock.sys
[2012/09/12 11:55:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\RTCOM
[2012/09/12 11:55:01 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2012/09/12 11:55:01 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\portcls.sys
[2012/09/12 11:55:01 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2012/09/12 11:55:01 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmk.sys
[2012/09/12 11:55:01 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2012/09/12 11:55:01 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksuser.dll
[2012/09/12 11:55:00 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2012/09/12 11:55:00 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksproxy.ax
[2012/09/12 11:51:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2012/09/12 11:51:41 | 000,000,000 | —D | C] – C:\Program Files\InstallShield Installation Information
[2012/09/12 11:51:35 | 000,000,000 | —D | C] – C:\Program Files\D-Link
[2012/09/12 08:07:42 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2012/09/12 07:59:26 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2012/09/12 07:59:26 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2012/09/12 07:59:26 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2012/09/12 07:59:23 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2012/09/12 07:59:22 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2012/09/12 07:59:22 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2012/09/12 07:59:18 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2012/09/12 07:59:18 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2012/09/12 07:59:18 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2012/09/12 07:59:17 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2012/09/12 07:59:17 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2012/09/12 07:59:17 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2012/09/12 07:59:17 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2012/09/12 07:59:17 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2012/09/12 07:59:17 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2012/09/12 07:59:17 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2012/09/12 07:59:17 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2012/09/12 07:59:17 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2012/09/12 07:59:17 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2012/09/12 07:59:16 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2012/09/12 07:59:16 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2012/09/12 07:59:16 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2012/09/12 07:59:16 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2012/09/12 07:59:16 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2012/09/12 07:59:16 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2012/09/12 07:59:16 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2012/09/12 07:59:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2012/09/12 07:59:15 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2012/09/12 07:59:15 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2012/09/12 07:59:15 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2012/09/12 07:59:15 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2012/09/12 07:59:15 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2012/09/12 07:59:15 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2012/09/12 07:59:15 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2012/09/12 07:59:15 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2012/09/12 07:59:15 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2012/09/12 07:59:15 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2012/09/12 07:59:14 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2012/09/12 07:59:14 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2012/09/12 07:59:14 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2012/09/12 07:59:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-us
[2012/09/12 07:59:12 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2012/09/12 07:59:12 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2012/09/12 07:56:22 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2012/09/12 07:55:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2012/09/12 07:53:45 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2012/09/12 07:47:51 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2012/09/12 07:47:51 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2012/09/12 07:47:51 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2012/09/12 07:47:51 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2012/09/12 07:47:51 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2012/09/12 07:47:51 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2012/09/12 07:47:50 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2012/09/12 07:47:50 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2012/09/12 07:47:50 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2012/09/12 07:47:50 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2012/09/12 07:47:50 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2012/09/12 07:47:50 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2012/09/12 07:47:50 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2012/09/12 07:47:50 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2012/09/12 07:47:50 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2012/09/12 07:47:50 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2012/09/12 07:47:50 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2012/09/12 07:47:50 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2012/09/12 07:47:50 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2012/09/12 07:47:50 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2012/09/12 07:47:50 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2012/09/12 07:47:50 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2012/09/12 07:47:50 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2012/09/12 07:47:50 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2012/09/12 07:47:50 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2012/09/12 07:47:50 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2012/09/12 07:47:50 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2012/09/12 07:47:50 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2012/09/12 07:47:50 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2012/09/12 07:47:50 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2012/09/12 07:47:50 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2012/09/12 07:47:50 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2012/09/12 07:47:50 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2012/09/12 07:47:50 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2012/09/12 07:47:50 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2012/09/12 07:47:50 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2012/09/12 07:47:50 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2012/09/12 07:47:50 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2012/09/12 07:47:50 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2012/09/12 07:47:50 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2012/09/12 07:47:50 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2012/09/12 07:47:50 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2012/09/12 07:47:50 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2012/09/12 07:47:50 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2012/09/12 07:47:50 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2012/09/12 07:47:50 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2012/09/12 07:47:50 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2012/09/12 07:47:50 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2012/09/12 07:47:50 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2012/09/12 07:47:50 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2012/09/12 07:47:50 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2012/09/12 07:47:50 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2012/09/12 07:47:50 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2012/09/12 07:47:50 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2012/09/12 07:47:50 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2012/09/12 07:47:50 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2012/09/12 07:47:50 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2012/09/12 07:47:50 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2012/09/12 07:47:50 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2012/09/12 07:47:50 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2012/09/12 07:47:50 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2012/09/12 07:47:49 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2012/09/12 07:47:49 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2012/09/12 07:47:49 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2012/09/12 07:47:49 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2012/09/12 07:47:49 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2012/09/12 07:47:49 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2012/09/12 07:47:49 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2012/09/12 07:47:49 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2012/09/12 07:47:49 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2012/09/12 07:47:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2012/09/12 07:47:49 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2012/09/12 07:47:49 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2012/09/12 07:47:49 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2012/09/12 07:47:49 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2012/09/12 07:47:49 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2012/09/12 07:47:49 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2012/09/12 07:47:41 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscomex.dll
[2012/09/12 07:47:41 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscomex.dll
[2012/09/12 07:47:40 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsmon.dll
[2012/09/12 07:47:40 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsmon.dll
[2012/09/12 07:47:37 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssvc.exe
[2012/09/12 07:47:33 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsxp32.dll
[2012/09/12 07:47:33 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2012/09/12 07:47:24 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsres.dll
[2012/09/12 07:47:24 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsres.dll
[2012/09/12 07:47:23 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxst30.dll
[2012/09/12 07:47:23 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxst30.dll
[2012/09/12 07:47:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsext32.dll
[2012/09/12 07:47:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsext32.dll
[2012/09/12 07:47:20 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsapi.dll
[2012/09/12 07:47:20 | 000,451,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsapi.dll
[2012/09/12 07:47:19 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsst.dll
[2012/09/12 07:47:19 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsst.dll
[2012/09/12 07:47:19 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxswzrd.dll
[2012/09/12 07:47:19 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2012/09/12 07:47:18 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscover.exe
[2012/09/12 07:47:18 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscover.exe
[2012/09/12 07:47:11 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxstiff.dll
[2012/09/12 07:47:11 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxstiff.dll
[2012/09/12 07:47:09 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscom.dll
[2012/09/12 07:47:09 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscom.dll
[2012/09/12 07:47:07 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsperf.dll
[2012/09/12 07:47:07 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsperf.dll
[2012/09/12 07:47:05 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsui.dll
[2012/09/12 07:47:05 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsui.dll
[2012/09/12 07:47:02 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsevent.dll
[2012/09/12 07:47:02 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsevent.dll
[2012/09/12 07:46:58 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsdrv.dll
[2012/09/12 07:46:58 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2012/09/12 07:46:53 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclnt.exe
[2012/09/12 07:46:53 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2012/09/12 07:46:46 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2012/09/12 07:46:28 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2012/09/12 07:46:26 | 000,000,000 | —D | C] – C:\WINDOWS\EHome
[2012/09/11 21:08:24 | 000,000,000 | —D | C] – C:\softpaq
[2012/09/11 20:49:07 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nvudisp.exe
[2012/09/11 20:49:07 | 000,000,000 | —D | C] – C:\WINDOWS\nview
[2012/09/11 20:49:04 | 000,176,128 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\NVUNINST.EXE
[2012/09/11 20:49:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2012/09/11 18:19:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Application Data\Identities
[2012/09/11 18:18:59 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2012/09/11 18:18:56 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Pictures
[2012/09/11 18:18:56 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents\My Music
[2012/09/11 18:18:54 | 000,000,000 | –SD | C] – C:\Documents and Settings\Lew\Application Data\Microsoft
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\SendTo
[2012/09/11 18:18:54 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Lew\Application Data
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Startup
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\My Documents
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Favorites
[2012/09/11 18:18:54 | 000,000,000 | R–D | C] – C:\Documents and Settings\Lew\Start Menu\Programs\Accessories
[2012/09/11 18:18:54 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Lew\Cookies
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\Templates
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\PrintHood
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\NetHood
[2012/09/11 18:18:54 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Lew\Local Settings
[2012/09/11 18:18:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Local Settings\Application Data\Microsoft
[2012/09/11 18:18:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Lew\Desktop
[2012/09/11 18:18:11 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2012/09/11 18:18:10 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2012/09/11 18:18:09 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2012/09/11 18:18:09 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2012/09/11 18:16:10 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2012/09/11 18:16:10 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2012/09/11 18:15:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2012/09/11 18:15:19 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2012/09/11 18:15:18 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2012/09/11 18:15:18 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2012/09/11 18:15:18 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2012/09/11 18:15:18 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2012/09/11 18:15:17 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2012/09/11 18:15:16 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2012/09/11 18:15:16 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2012/09/11 18:15:15 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2012/09/11 18:15:15 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2012/09/11 18:15:15 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2012/09/11 18:15:14 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2012/09/11 18:15:14 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2012/09/11 18:15:14 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2012/09/11 18:15:14 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2012/09/11 18:15:13 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2012/09/11 18:15:13 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2012/09/11 18:15:13 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2012/09/11 18:15:13 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2012/09/11 18:15:12 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2012/09/11 18:15:11 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2012/09/11 18:15:10 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2012/09/11 18:15:10 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2012/09/11 18:15:09 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2012/09/11 18:15:09 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2012/09/11 18:15:08 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2012/09/11 18:15:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2012/09/11 18:15:08 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2012/09/11 18:15:08 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2012/09/11 18:15:08 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2012/09/11 18:15:08 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2012/09/11 18:15:08 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2012/09/11 18:15:08 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2012/09/11 18:15:08 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2012/09/11 18:15:08 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2012/09/11 18:15:07 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2012/09/11 18:15:07 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2012/09/11 18:15:07 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2012/09/11 18:15:05 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2012/09/11 18:15:05 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2012/09/11 18:15:04 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2012/09/11 18:15:04 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2012/09/11 18:15:04 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2012/09/11 18:15:03 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2012/09/11 18:15:03 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2012/09/11 18:15:02 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2012/09/11 18:15:02 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2012/09/11 18:15:02 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2012/09/11 18:15:01 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2012/09/11 18:15:01 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2012/09/11 18:15:00 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2012/09/11 18:15:00 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2012/09/11 18:15:00 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2012/09/11 18:15:00 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2012/09/11 18:15:00 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2012/09/11 18:14:59 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2012/09/11 18:14:59 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2012/09/11 18:14:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2012/09/11 18:14:59 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2012/09/11 18:14:59 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2012/09/11 18:14:58 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2012/09/11 18:14:56 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2012/09/11 18:14:53 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2012/09/11 18:14:53 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2012/09/11 18:14:50 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2012/09/11 18:14:50 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2012/09/11 18:14:49 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2012/09/11 18:14:47 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2012/09/11 18:14:47 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2012/09/11 18:14:47 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2012/09/11 18:14:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2012/09/11 18:14:46 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2012/09/11 18:14:46 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2012/09/11 18:14:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2012/09/11 18:14:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2012/09/11 18:14:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2012/09/11 18:14:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2012/09/11 18:14:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2012/09/11 18:14:45 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2012/09/11 18:14:44 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2012/09/11 18:14:43 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2012/09/11 18:14:43 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2012/09/11 18:14:43 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2012/09/11 18:14:43 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2012/09/11 18:14:43 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2012/09/11 18:14:43 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2012/09/11 18:14:42 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2012/09/11 18:14:42 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2012/09/11 18:14:42 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2012/09/11 18:14:42 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2012/09/11 18:14:42 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2012/09/11 18:14:42 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2012/09/11 18:14:42 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2012/09/11 18:14:42 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2012/09/11 18:14:41 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2012/09/11 18:14:41 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2012/09/11 18:14:41 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2012/09/11 18:14:41 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2012/09/11 18:14:41 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2012/09/11 18:14:41 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2012/09/11 18:14:40 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2012/09/11 18:14:40 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2012/09/11 18:14:40 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2012/09/11 18:14:36 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2012/09/11 18:14:26 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2012/09/11 18:14:26 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2012/09/11 18:14:24 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2012/09/11 18:14:24 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2012/09/11 18:14:24 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2012/09/11 18:14:23 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2012/09/11 18:14:23 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2012/09/11 18:14:22 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2012/09/11 18:14:22 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2012/09/11 18:14:21 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2012/09/11 18:14:21 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2012/09/11 18:14:21 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2012/09/11 18:14:21 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2012/09/11 18:14:20 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2012/09/11 18:14:18 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2012/09/11 18:14:17 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2012/09/11 18:14:17 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2012/09/11 18:14:16 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2012/09/11 18:14:16 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2012/09/11 18:14:16 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2012/09/11 18:14:16 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2012/09/11 18:14:16 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2012/09/11 18:14:15 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2012/09/11 18:14:14 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2012/09/11 18:14:14 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2012/09/11 18:14:14 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2012/09/11 18:14:14 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2012/09/11 18:14:14 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2012/09/11 18:14:14 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2012/09/11 18:14:13 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2012/09/11 18:14:13 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2012/09/11 18:14:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2012/09/11 18:14:07 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2012/09/11 18:14:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2012/09/11 18:13:56 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2012/09/11 18:13:54 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2012/09/11 18:13:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2012/09/11 18:13:26 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2012/09/11 18:12:58 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2012/09/11 18:12:52 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2012/09/11 18:12:51 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2012/09/11 18:12:44 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2012/09/11 18:12:25 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2012/09/11 18:12:02 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2012/09/11 18:12:02 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2012/09/11 18:12:02 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2012/09/11 18:12:02 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2012/09/11 18:12:02 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2012/09/11 18:12:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2012/09/11 18:11:52 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2012/09/11 18:11:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2012/09/11 18:11:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2012/09/11 18:11:50 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2012/09/11 18:11:50 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2012/09/11 18:11:50 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2012/09/11 18:11:49 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2012/09/11 18:11:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2012/09/11 18:11:47 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2012/09/11 18:11:47 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2012/09/11 18:11:46 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2012/09/11 18:11:46 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2012/09/11 18:11:46 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2012/09/11 18:11:46 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2012/09/11 18:11:46 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2012/09/11 18:11:46 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2012/09/11 18:11:46 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2012/09/11 18:11:45 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2012/09/11 18:11:45 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2012/09/11 18:11:40 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2012/09/11 18:11:39 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2012/09/11 18:11:38 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2012/09/11 18:11:38 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2012/09/11 18:11:38 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2012/09/11 18:11:37 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2012/09/11 18:11:37 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2012/09/11 18:11:37 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2012/09/11 18:11:37 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2012/09/11 18:11:37 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2012/09/11 18:11:36 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2012/09/11 18:11:36 | 000,329,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2012/09/11 18:11:36 | 000,329,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2012/09/11 18:11:36 | 000,210,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2012/09/11 18:11:36 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2012/09/11 18:11:36 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2012/09/11 18:11:35 | 001,933,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2012/09/11 18:11:35 | 000,577,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2012/09/11 18:11:35 | 000,577,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2012/09/11 18:11:35 | 000,219,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2012/09/11 18:11:35 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2012/09/11 18:11:35 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2012/09/11 18:11:35 | 000,053,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2012/09/11 18:11:35 | 000,035,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2012/09/11 18:11:35 | 000,035,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2012/09/11 18:11:34 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2012/09/11 18:11:34 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2012/09/11 18:11:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2012/09/11 18:11:29 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2012/09/11 18:11:25 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2012/09/11 18:11:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2012/09/11 18:11:25 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2012/09/11 18:11:25 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2012/09/11 18:11:20 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2012/09/11 18:11:20 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2012/09/11 18:11:20 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2012/09/11 18:11:19 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2012/09/11 18:11:18 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2012/09/11 18:11:18 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2012/09/11 18:11:18 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2012/09/11 18:11:18 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2012/09/11 18:11:15 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2012/09/11 18:11:15 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2012/09/11 18:11:14 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2012/09/11 18:11:13 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2012/09/11 18:11:10 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2012/09/11 18:11:10 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2012/09/11 18:11:09 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2012/09/11 18:11:09 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2012/09/11 18:11:09 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2012/09/11 18:11:09 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2012/09/11 18:11:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2012/09/11 18:11:02 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2012/09/11 18:11:01 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2012/09/11 18:10:51 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2012/09/11 18:10:46 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2012/09/11 18:10:46 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2012/09/11 18:10:26 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2012/09/11 18:10:25 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2012/09/11 18:10:25 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2012/09/11 18:10:25 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2012/09/11 18:10:21 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2012/09/11 18:10:20 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2012/09/11 18:10:20 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2012/09/11 18:10:19 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2012/09/11 18:10:19 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2012/09/11 18:10:19 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2012/09/11 18:10:19 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2012/09/11 18:10:19 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2012/09/11 18:10:19 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2012/09/11 18:10:19 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2012/09/11 18:10:19 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2012/09/11 18:10:19 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2012/09/11 18:10:19 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2012/09/11 18:10:18 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2012/09/11 18:10:18 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2012/09/11 18:10:18 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2012/09/11 18:10:18 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2012/09/11 18:10:18 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2012/09/11 18:10:18 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2012/09/11 18:10:18 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2012/09/11 18:10:17 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2012/09/11 18:10:17 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2012/09/11 18:10:17 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2012/09/11 18:10:17 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2012/09/11 18:10:17 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2012/09/11 18:10:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2012/09/11 18:10:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2012/09/11 18:10:17 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2012/09/11 18:10:08 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2012/09/11 18:10:08 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2012/09/11 18:10:07 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2012/09/11 18:10:07 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2012/09/11 18:10:07 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2012/09/11 18:10:07 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2012/09/11 18:10:07 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2012/09/11 18:10:07 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2012/09/11 18:10:07 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2012/09/11 18:10:07 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2012/09/11 18:10:06 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2012/09/11 18:10:06 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2012/09/11 18:09:59 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2012/09/11 18:09:59 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2012/09/11 18:09:59 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2012/09/11 18:09:59 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2012/09/11 18:09:59 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2012/09/11 18:09:59 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2012/09/11 18:09:58 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2012/09/11 18:09:58 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2012/09/11 18:09:58 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2012/09/11 18:09:58 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2012/09/11 18:09:58 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2012/09/11 18:09:58 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2012/09/11 18:09:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2012/09/11 18:09:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2012/09/11 18:09:57 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2012/09/11 18:09:57 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2012/09/11 18:09:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2012/09/11 18:09:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2012/09/11 18:09:57 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2012/09/11 18:09:57 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2012/09/11 18:09:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2012/09/11 18:09:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2012/09/11 18:09:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2012/09/11 18:09:56 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2012/09/11 18:09:56 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2012/09/11 18:09:56 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2012/09/11 18:09:56 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2012/09/11 18:09:56 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2012/09/11 18:09:56 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2012/09/11 18:09:56 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2012/09/11 18:09:56 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2012/09/11 18:09:56 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2012/09/11 18:09:56 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2012/09/11 18:09:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2012/09/11 18:09:56 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2012/09/11 18:09:56 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2012/09/11 18:09:56 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2012/09/11 18:09:55 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2012/09/11 18:09:55 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2012/09/11 18:09:55 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2012/09/11 18:09:55 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2012/09/11 18:09:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2012/09/11 18:09:55 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2012/09/11 18:09:54 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2012/09/11 18:09:54 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2012/09/11 18:09:54 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2012/09/11 18:09:54 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2012/09/11 18:09:51 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2012/09/11 18:09:51 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2012/09/11 18:09:51 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2012/09/11 18:09:51 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2012/09/11 18:09:51 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2012/09/11 18:09:51 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2012/09/11 18:09:51 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2012/09/11 18:09:51 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2012/09/11 18:09:50 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2012/09/11 18:09:50 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2012/09/11 18:09:50 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2012/09/11 18:09:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2012/09/11 18:09:50 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2012/09/11 18:09:50 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2012/09/11 18:09:50 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2012/09/11 18:09:50 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2012/09/11 18:09:32 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2012/09/11 18:09:31 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2012/09/11 18:09:31 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2012/09/11 18:09:31 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2012/09/11 18:09:31 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2012/09/11 18:09:31 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2012/09/11 18:09:30 | 000,347,136 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2012/09/11 18:09:30 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2012/09/11 18:09:30 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2012/09/11 18:09:29 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2012/09/11 18:09:29 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2012/09/11 18:09:28 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2012/09/11 18:09:28 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2012/09/11 18:09:28 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2012/09/11 18:09:28 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2012/09/11 18:09:28 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2012/09/11 18:09:27 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2012/09/11 18:09:27 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2012/09/11 18:09:27 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2012/09/11 18:09:27 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2012/09/11 18:09:27 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2012/09/11 18:09:27 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2012/09/11 18:09:27 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2012/09/11 18:09:26 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2012/09/11 18:09:26 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2012/09/11 18:09:26 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2012/09/11 18:09:26 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2012/09/11 18:09:25 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2012/09/11 18:09:25 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2012/09/11 18:09:25 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2012/09/11 18:09:24 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2012/09/11 18:09:24 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2012/09/11 18:09:23 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2012/09/11 18:09:22 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2012/09/11 18:09:16 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2012/09/11 18:09:16 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2012/09/11 18:09:16 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2012/09/11 18:09:15 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2012/09/11 18:07:41 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[2012/09/11 11:34:13 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2012/09/11 11:33:51 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2012/09/11 11:32:51 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2012/09/11 11:32:51 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2012/09/11 11:32:50 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2012/09/11 11:32:50 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2012/09/11 11:32:49 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2012/09/11 11:32:47 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2012/09/11 11:32:47 | 000,000,000 | R–D | C] – C:\Program Files
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2012/09/11 11:32:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2012/09/11 11:32:44 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2012/09/11 11:32:44 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2012/09/11 11:32:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2012/09/11 11:32:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2012/09/11 11:32:44 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2012/09/11 11:32:44 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2012/09/11 11:32:42 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2012/09/11 11:32:42 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2012/09/11 11:32:40 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2012/09/11 11:32:40 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2012/09/11 11:32:40 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2012/09/11 11:32:40 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2012/09/11 11:32:40 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2012/09/11 11:32:40 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2012/09/11 11:32:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2012/09/11 11:32:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2012/09/11 11:32:40 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2012/09/11 11:32:40 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2012/09/11 11:32:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2012/09/11 11:32:40 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2012/09/11 11:32:39 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2012/09/11 11:32:39 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2012/09/11 11:32:38 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2012/09/11 11:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2012/09/11 11:32:38 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2012/09/11 11:32:38 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2012/09/11 11:32:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2012/09/11 11:32:38 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2012/09/11 11:32:36 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2012/09/11 11:32:36 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2012/09/11 11:32:36 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2012/09/11 11:32:36 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2012/09/11 11:32:36 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2012/09/11 11:32:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2012/09/11 11:32:35 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2012/09/11 11:32:35 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2012/09/11 11:32:35 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2012/09/11 11:32:35 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2012/09/11 11:32:35 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2012/09/11 11:32:35 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2012/09/11 11:32:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2012/09/11 11:32:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2012/09/11 11:32:33 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2012/09/11 11:32:33 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2012/09/11 11:32:33 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2012/09/11 11:32:33 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2012/09/11 11:32:33 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2012/09/11 11:32:33 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2012/09/11 11:32:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2012/09/11 11:32:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2012/09/11 11:32:32 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2012/09/11 11:32:32 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2012/09/11 11:32:32 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2012/09/11 11:32:32 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2012/09/11 11:32:32 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2012/09/11 11:32:32 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2012/09/11 11:32:32 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2012/09/11 11:32:32 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2012/09/11 11:32:32 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2012/09/11 11:32:32 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2012/09/11 11:32:32 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2012/09/11 11:32:32 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2012/09/11 11:32:31 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2012/09/11 11:32:31 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2012/09/11 11:32:31 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2012/09/11 11:32:31 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2012/09/11 11:32:31 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2012/09/11 11:32:31 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2012/09/11 11:32:31 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2012/09/11 11:32:31 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2012/09/11 11:32:31 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2012/09/11 11:32:30 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2012/09/11 11:32:30 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2012/09/11 11:32:30 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2012/09/11 11:32:30 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2012/09/11 11:32:30 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2012/09/11 11:32:29 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2012/09/11 11:32:29 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2012/09/11 11:32:28 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2012/09/11 11:32:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2012/09/11 11:32:22 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2012/09/11 11:32:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2012/09/11 11:32:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2012/09/11 11:32:10 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2012/09/11 11:32:10 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2012/09/11 11:32:04 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2012/09/11 11:32:04 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2012/09/11 11:31:40 | 000,000,000 | —D | C] – C:\Documents and Settings
[2012/09/11 11:31:39 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2012/09/11 11:25:47 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2012/09/11 11:25:47 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2012/09/11 11:25:47 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2012/09/11 11:25:47 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2012/09/11 11:25:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025

========== Files - Modified Within 30 Days ==========

[2012/10/02 13:08:47 | 000,000,384 | -H– | M] () – C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012/10/02 13:08:47 | 000,000,366 | -H– | M] () – C:\WINDOWS\tasks\MpIdleTask.job
[2012/10/02 12:59:26 | 000,000,274 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/10/02 12:59:23 | 000,000,282 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/10/02 12:58:52 | 000,043,531 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2012/10/02 12:58:44 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/10/02 12:58:38 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/10/02 12:40:00 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/10/02 10:10:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At1.job
[2012/10/02 08:28:38 | 000,000,208 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Yahoo Mail Login.url
[2012/10/02 08:24:14 | 000,000,211 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Google.url
[2012/10/02 08:15:06 | 000,000,681 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Annual Lawn Care Program - Lawn Care Plan - Scotts Miracle-Gro.url
[2012/10/02 08:08:17 | 000,539,870 | —- | M] () – C:\Documents and Settings\Lew\My Documents\Dorcy Information.pdf
[2012/10/02 07:53:01 | 000,000,251 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Brunswick Talk Radio Forum 1440 WGIG.url
[2012/10/02 07:10:20 | 004,759,935 | R— | M] (Swearware) – C:\Documents and Settings\Lew\Desktop\ComboFix.exe
[2012/10/02 03:00:43 | 000,001,945 | —- | M] () – C:\WINDOWS\epplauncher.mif
[2012/10/01 20:40:21 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At2.job
[2012/10/01 15:21:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At3.job
[2012/10/01 14:00:00 | 000,000,464 | —- | M] () – C:\WINDOWS\tasks\At4.job
[2012/10/01 10:11:36 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/01 10:10:26 | 010,524,080 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Lew\Desktop\mbam-setup-1.65.0.1400.exe
[2012/10/01 09:45:33 | 000,005,864 | —- | M] () – C:\Documents and Settings\Lew\My Documents\cc_20121001_094530.reg
[2012/10/01 09:38:44 | 000,056,202 | —- | M] () – C:\Documents and Settings\Lew\My Documents\cc_20121001_093837.reg
[2012/09/30 10:37:11 | 000,000,208 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Kenz.url
[2012/09/30 09:26:50 | 000,000,335 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Help Center - Scotts Miracle-Gro.url
[2012/09/29 08:36:03 | 000,000,703 | —- | M] () – C:\Documents and Settings\Lew\Start Menu\Programs\Startup\wkcalrem.LNK
[2012/09/28 09:37:48 | 000,000,403 | —- | M] () – C:\Documents and Settings\Lew\Desktop\(3) 1440 WGIG.url
[2012/09/27 18:49:40 | 000,000,240 | —- | M] () – C:\Documents and Settings\Lew\Desktop\CBG.url
[2012/09/27 17:30:40 | 000,001,569 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Quicken Deluxe 2012.lnk
[2012/09/27 17:30:40 | 000,000,236 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Free Credit Report and Score.url
[2012/09/27 17:30:37 | 000,000,120 | —- | M] () – C:\WINDOWS\QUICKEN.INI
[2012/09/27 17:18:17 | 000,000,326 | —- | M] () – C:\WINDOWS\QDQICK.INI
[2012/09/27 16:59:43 | 000,000,107 | —- | M] () – C:\WINDOWS\QHI.INI
[2012/09/27 16:58:05 | 000,001,545 | —- | M] () – C:\WINDOWS\QfnOnl.ini
[2012/09/27 16:46:58 | 000,000,054 | —- | M] () – C:\WINDOWS\QFP.INI
[2012/09/27 16:46:58 | 000,000,054 | —- | M] () – C:\WINDOWS\MFF.INI
[2012/09/27 09:06:48 | 000,000,198 | —- | M] () – C:\Documents and Settings\Lew\Desktop\www.agri-fab.com - Buy Online.url
[2012/09/27 09:06:38 | 000,000,411 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Search Results for agri-fab at The Home Depot.url
[2012/09/26 13:30:38 | 000,000,330 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Sign In - Malwarebytes Forum.url
[2012/09/26 13:26:49 | 000,000,258 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Malwarebytes Forum.url
[2012/09/26 11:21:49 | 000,165,912 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/09/25 17:14:49 | 000,000,646 | —- | M] () – C:\WINDOWS\INTU_ONL.INI
[2012/09/24 17:35:43 | 000,001,090 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Cyber Tech Help Support Forums.url
[2012/09/24 13:07:28 | 000,432,356 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/09/24 13:07:28 | 000,067,312 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/09/24 11:41:56 | 000,000,235 | —- | M] () – C:\Documents and Settings\Lew\Desktop\The Brunswick News - Home Page.url
[2012/09/20 16:50:07 | 000,003,584 | —- | M] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/20 10:30:46 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2012/09/19 21:59:37 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2012/09/18 16:42:06 | 000,141,811 | —- | M] () – C:\Documents and Settings\Lew\My Documents\Certificate of Whaler Registeration.jpg
[2012/09/18 16:32:02 | 000,007,051 | —- | M] () – C:\Documents and Settings\Lew\My Documents\user 192.168.2.1 backup.conf
[2012/09/18 14:28:55 | 000,000,028 | —- | M] () – C:\WINDOWS\QFNOA.INI
[2012/09/18 14:28:50 | 000,000,030 | —- | M] () – C:\WINDOWS\INTURS.DAT
[2012/09/16 09:59:11 | 000,000,292 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Watch TV Online - Stream New Movies & TV Shows - DIRECTV.url
[2012/09/16 09:25:33 | 000,696,520 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/16 09:25:33 | 000,073,416 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/14 17:47:13 | 000,609,436 | —- | M] () – C:\Documents and Settings\Lew\My Documents\spelloe_setup.exe
[2012/09/14 17:42:01 | 000,000,000 | —- | M] () – C:\Documents and Settings\Lew\Application Data\wklnhst.dat
[2012/09/14 11:59:56 | 000,000,297 | —- | M] () – C:\WINDOWS\WININIT.INI
[2012/09/14 11:59:56 | 000,000,123 | —- | M] () – C:\WINDOWS\TMPCPYIS.BAT
[2012/09/14 11:59:56 | 000,000,122 | —- | M] () – C:\WINDOWS\TMPDELIS.BAT
[2012/09/14 11:59:56 | 000,000,026 | —- | M] () – C:\WINDOWS\WINSTART.BAT
[2012/09/14 08:25:34 | 000,000,000 | —- | M] () – C:\WINDOWS\NT.INI
[2012/09/13 20:17:55 | 000,001,595 | —- | M] () – C:\Documents and Settings\Lew\Desktop\Yahoo for Bellsouth login.url
[2012/09/12 14:56:39 | 000,198,864 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2012/09/12 14:56:35 | 000,272,896 | —- | M] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2012/09/12 14:56:35 | 000,006,656 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2012/09/12 14:56:35 | 000,005,632 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2012/09/12 14:26:41 | 000,001,734 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2012/09/12 14:23:50 | 000,093,672 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/12 14:23:49 | 000,821,736 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\npDeployJava1.dll
[2012/09/12 14:23:49 | 000,746,984 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2012/09/12 14:23:49 | 000,246,760 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/12 14:23:49 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/12 14:23:49 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2012/09/12 14:23:49 | 000,143,872 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2012/09/12 12:35:19 | 000,000,815 | —- | M] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/12 12:10:41 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2012/09/12 08:08:20 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2012/09/12 07:56:09 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/09/12 07:48:02 | 000,000,211 | —- | M] () – C:\Boot.bak
[2012/09/11 18:19:04 | 000,000,079 | —- | M] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2012/09/11 18:15:28 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2012/09/11 18:13:41 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2012/09/11 18:13:41 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/09/11 18:13:41 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2012/09/11 18:13:34 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2012/09/11 18:13:34 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2012/09/11 18:13:26 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2012/09/11 18:10:59 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2012/09/07 17:04:46 | 000,022,856 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys

========== Files Created - No Company Name ==========

[2012/10/02 08:08:16 | 000,539,870 | —- | C] () – C:\Documents and Settings\Lew\My Documents\Dorcy Information.pdf
[2012/10/02 07:12:33 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2012/10/02 07:12:33 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2012/10/02 07:12:33 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2012/10/02 07:12:33 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2012/10/02 07:12:33 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2012/10/02 03:10:39 | 000,000,384 | -H– | C] () – C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012/10/02 03:10:36 | 000,000,366 | -H– | C] () – C:\WINDOWS\tasks\MpIdleTask.job
[2012/10/01 10:11:36 | 000,000,784 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/01 09:45:31 | 000,005,864 | —- | C] () – C:\Documents and Settings\Lew\My Documents\cc_20121001_094530.reg
[2012/10/01 09:38:41 | 000,056,202 | —- | C] () – C:\Documents and Settings\Lew\My Documents\cc_20121001_093837.reg
[2012/09/30 10:37:11 | 000,000,208 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Kenz.url
[2012/09/30 09:26:50 | 000,000,335 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Help Center - Scotts Miracle-Gro.url
[2012/09/29 08:36:03 | 000,000,703 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Startup\wkcalrem.LNK
[2012/09/28 09:37:48 | 000,000,403 | —- | C] () – C:\Documents and Settings\Lew\Desktop\(3) 1440 WGIG.url
[2012/09/27 18:46:57 | 000,000,240 | —- | C] () – C:\Documents and Settings\Lew\Desktop\CBG.url
[2012/09/27 17:30:40 | 000,001,569 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Quicken Deluxe 2012.lnk
[2012/09/27 17:30:40 | 000,000,236 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Free Credit Report and Score.url
[2012/09/27 09:06:48 | 000,000,198 | —- | C] () – C:\Documents and Settings\Lew\Desktop\www.agri-fab.com - Buy Online.url
[2012/09/27 09:06:38 | 000,000,411 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Search Results for agri-fab at The Home Depot.url
[2012/09/27 08:50:08 | 000,000,251 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Brunswick Talk Radio Forum 1440 WGIG.url
[2012/09/26 13:30:38 | 000,000,330 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Sign In - Malwarebytes Forum.url
[2012/09/26 13:26:49 | 000,000,258 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Malwarebytes Forum.url
[2012/09/26 09:56:30 | 000,000,681 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Annual Lawn Care Program - Lawn Care Plan - Scotts Miracle-Gro.url
[2012/09/24 16:32:24 | 000,000,211 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Google.url
[2012/09/24 13:14:41 | 000,001,090 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Cyber Tech Help Support Forums.url
[2012/09/24 11:40:27 | 000,000,235 | —- | C] () – C:\Documents and Settings\Lew\Desktop\The Brunswick News - Home Page.url
[2012/09/20 16:50:07 | 000,003,584 | —- | C] () – C:\Documents and Settings\Lew\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/19 21:59:36 | 000,000,211 | —- | C] () – C:\Boot.bak
[2012/09/19 21:59:34 | 000,260,272 | RHS- | C] () – C:\cmldr
[2012/09/18 16:42:00 | 000,141,811 | —- | C] () – C:\Documents and Settings\Lew\My Documents\Certificate of Whaler Registeration.jpg
[2012/09/18 16:32:01 | 000,007,051 | —- | C] () – C:\Documents and Settings\Lew\My Documents\user 192.168.2.1 backup.conf
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At4.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At3.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At2.job
[2012/09/18 15:21:42 | 000,000,464 | —- | C] () – C:\WINDOWS\tasks\At1.job
[2012/09/18 14:28:55 | 000,000,028 | —- | C] () – C:\WINDOWS\QFNOA.INI
[2012/09/18 14:28:50 | 000,000,030 | —- | C] () – C:\WINDOWS\INTURS.DAT
[2012/09/16 10:32:04 | 000,000,208 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Yahoo Mail Login.url
[2012/09/16 09:59:11 | 000,000,292 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Watch TV Online - Stream New Movies & TV Shows - DIRECTV.url
[2012/09/14 17:47:22 | 000,609,436 | —- | C] () – C:\Documents and Settings\Lew\My Documents\spelloe_setup.exe
[2012/09/14 17:42:01 | 000,000,000 | —- | C] () – C:\Documents and Settings\Lew\Application Data\wklnhst.dat
[2012/09/14 16:29:30 | 000,001,924 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
[2012/09/14 16:28:54 | 000,000,888 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works Task Launcher.lnk
[2012/09/14 12:18:32 | 000,000,107 | —- | C] () – C:\WINDOWS\QHI.INI
[2012/09/14 12:07:48 | 000,000,646 | —- | C] () – C:\WINDOWS\INTU_ONL.INI
[2012/09/14 11:59:56 | 000,000,297 | —- | C] () – C:\WINDOWS\WININIT.INI
[2012/09/14 11:59:56 | 000,000,123 | —- | C] () – C:\WINDOWS\TMPCPYIS.BAT
[2012/09/14 11:59:56 | 000,000,122 | —- | C] () – C:\WINDOWS\TMPDELIS.BAT
[2012/09/14 11:59:56 | 000,000,026 | —- | C] () – C:\WINDOWS\WINSTART.BAT
[2012/09/14 11:59:52 | 000,001,545 | —- | C] () – C:\WINDOWS\QfnOnl.ini
[2012/09/14 11:59:52 | 000,000,120 | —- | C] () – C:\WINDOWS\QUICKEN.INI
[2012/09/14 11:59:50 | 000,000,252 | —- | C] () – C:\WINDOWS\ADDRBOOK.INI
[2012/09/14 11:59:48 | 000,185,136 | —- | C] () – C:\WINDOWS\System\RDM330.DLL
[2012/09/14 11:59:48 | 000,157,696 | —- | C] () – C:\WINDOWS\System\STORAGE.DLL
[2012/09/14 11:59:48 | 000,027,026 | —- | C] () – C:\WINDOWS\System\OLE2.REG
[2012/09/14 11:59:48 | 000,008,256 | —- | C] () – C:\WINDOWS\QFNOADB.DAT
[2012/09/14 11:59:48 | 000,000,326 | —- | C] () – C:\WINDOWS\QDQICK.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | C] () – C:\WINDOWS\QFP.INI
[2012/09/14 11:59:45 | 000,000,054 | —- | C] () – C:\WINDOWS\MFF.INI
[2012/09/14 08:25:34 | 000,000,000 | —- | C] () – C:\WINDOWS\NT.INI
[2012/09/13 20:17:55 | 000,001,595 | —- | C] () – C:\Documents and Settings\Lew\Desktop\Yahoo for Bellsouth login.url
[2012/09/13 15:19:47 | 000,001,945 | —- | C] () – C:\WINDOWS\epplauncher.mif
[2012/09/13 15:19:28 | 000,001,698 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012/09/12 18:39:06 | 000,003,903 | —- | C] () – C:\WINDOWS\System32\nvnrm.nvu
[2012/09/12 14:58:32 | 000,000,274 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/12 14:58:31 | 000,000,282 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-861567501-725345543-1004.job
[2012/09/12 14:50:29 | 000,000,830 | —- | C] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/12 14:26:41 | 000,001,804 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader X.lnk
[2012/09/12 14:26:41 | 000,001,734 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2012/09/12 12:10:42 | 000,013,646 | —- | C] () – C:\WINDOWS\System32\wpa.bak
[2012/09/12 12:02:40 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2012/09/12 12:02:40 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/09/12 07:59:24 | 000,613,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2012/09/12 07:59:24 | 000,067,374 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2012/09/12 07:59:24 | 000,023,195 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2012/09/12 07:59:24 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2012/09/12 07:59:24 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2012/09/12 07:59:24 | 000,000,855 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2012/09/12 07:59:24 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2012/09/12 07:59:23 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2012/09/12 07:59:23 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2012/09/12 07:59:23 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2012/09/12 07:59:23 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2012/09/12 07:59:23 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2012/09/12 07:59:23 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2012/09/12 07:59:23 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2012/09/12 07:59:23 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2012/09/12 07:59:23 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2012/09/12 07:59:23 | 000,077,307 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2012/09/12 07:59:23 | 000,066,725 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2012/09/12 07:59:23 | 000,029,070 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2012/09/12 07:59:23 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2012/09/12 07:59:23 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2012/09/12 07:59:23 | 000,017,272 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2012/09/12 07:59:23 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2012/09/12 07:59:23 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2012/09/12 07:59:23 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2012/09/12 07:59:23 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2012/09/12 07:59:23 | 000,006,769 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2012/09/12 07:59:23 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2012/09/12 07:59:23 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2012/09/12 07:59:23 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2012/09/12 07:59:23 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2012/09/12 07:59:23 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2012/09/12 07:59:23 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2012/09/12 07:59:23 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2012/09/12 07:59:23 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2012/09/12 07:59:23 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2012/09/12 07:59:23 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2012/09/12 07:59:23 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2012/09/12 07:59:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2012/09/12 07:59:23 | 000,001,477 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2012/09/12 07:59:23 | 000,001,474 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2012/09/12 07:59:23 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2012/09/12 07:59:23 | 000,001,448 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2012/09/12 07:59:23 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2012/09/12 07:59:23 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2012/09/12 07:59:23 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2012/09/12 07:59:23 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2012/09/12 07:59:23 | 000,001,250 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2012/09/12 07:59:23 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2012/09/12 07:59:23 | 000,001,049 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2012/09/12 07:59:23 | 000,001,046 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2012/09/12 07:59:23 | 000,001,036 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2012/09/12 07:59:23 | 000,000,908 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2012/09/12 07:59:23 | 000,000,789 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2012/09/12 07:59:23 | 000,000,787 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2012/09/12 07:59:23 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2012/09/12 07:59:23 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2012/09/12 07:59:23 | 000,000,775 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2012/09/12 07:59:23 | 000,000,733 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2012/09/12 07:59:22 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2012/09/12 07:59:22 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2012/09/12 07:59:22 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2012/09/12 07:59:22 | 000,184,959 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2012/09/12 07:59:22 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2012/09/12 07:59:22 | 000,018,286 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2012/09/12 07:59:22 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2012/09/12 07:59:22 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2012/09/12 07:59:22 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2012/09/12 07:59:22 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2012/09/12 07:59:22 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2012/09/12 07:59:22 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2012/09/12 07:59:22 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2012/09/12 07:59:22 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2012/09/12 07:59:22 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2012/09/12 07:59:22 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2012/09/12 07:59:22 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2012/09/12 07:59:22 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2012/09/12 07:59:22 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2012/09/12 07:47:50 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2012/09/12 07:47:50 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2012/09/12 07:47:50 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2012/09/11 20:49:09 | 000,043,531 | —- | C] () – C:\WINDOWS\System32\nvapps.xml
[2012/09/11 20:49:07 | 000,016,356 | —- | C] () – C:\WINDOWS\System32\nvdisp.nvu
[2012/09/11 18:19:04 | 000,000,079 | —- | C] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2012/09/11 18:19:00 | 000,000,738 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Outlook Express.lnk
[2012/09/11 18:18:59 | 000,000,815 | —- | C] () – C:\Documents and Settings\Lew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/11 18:18:59 | 000,000,803 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Internet Explorer.lnk
[2012/09/11 18:18:54 | 000,001,599 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Remote Assistance.lnk
[2012/09/11 18:18:54 | 000,000,792 | —- | C] () – C:\Documents and Settings\Lew\Start Menu\Programs\Windows Media Player.lnk
[2012/09/11 18:15:28 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2012/09/11 18:15:00 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2012/09/11 18:14:47 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2012/09/11 18:14:43 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2012/09/11 18:14:42 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2012/09/11 18:14:40 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2012/09/11 18:14:31 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2012/09/11 18:14:26 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2012/09/11 18:14:16 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2012/09/11 18:13:41 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2012/09/11 18:13:41 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2012/09/11 18:13:41 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2012/09/11 18:13:41 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2012/09/11 18:13:34 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2012/09/11 18:13:34 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2012/09/11 18:13:33 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2012/09/11 18:12:43 | 000,000,786 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
[2012/09/11 18:12:32 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2012/09/11 18:11:59 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2012/09/11 18:11:59 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2012/09/11 18:11:52 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2012/09/11 18:10:59 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2012/09/11 18:10:26 | 000,000,609 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
[2012/09/11 18:10:25 | 000,001,986 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk
[2012/09/11 18:10:01 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2012/09/11 18:10:01 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2012/09/11 18:10:01 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2012/09/11 18:10:01 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2012/09/11 18:10:01 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2012/09/11 18:10:01 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2012/09/11 18:10:01 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2012/09/11 18:10:00 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2012/09/11 18:10:00 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2012/09/11 18:10:00 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2012/09/11 18:10:00 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2012/09/11 18:09:57 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2012/09/11 18:09:57 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2012/09/11 18:09:56 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2012/09/11 18:09:49 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2012/09/11 11:32:51 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2012/09/11 11:32:49 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2012/09/11 11:32:49 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2012/09/11 11:32:48 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2012/09/11 11:32:48 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2012/09/11 11:32:30 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2012/09/11 11:32:21 | 001,042,903 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2012/09/11 11:32:21 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2012/09/11 11:32:21 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2012/09/11 11:32:21 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2012/09/11 11:32:21 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2012/09/11 11:32:21 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2012/09/11 11:32:21 | 000,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2012/09/11 11:32:21 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2012/09/11 11:31:39 | 000,165,912 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/09/11 11:30:45 | 000,000,327 | RHS- | C] () – C:\boot.ini
[2012/09/11 11:30:42 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf

< End of report >

That program deleted a number or things. I'll save that program! What about somethings that were restored and replaced under Internet Browsers, like Search.babylon.com? # AdwCleaner v2.003 - Logfile created 10/02/2012 at 19:52:56 # Updated 23/09/2012 by Xplode # Operating system : Microsoft Windows XP Service Pack 3 (32 bits) # User : Lew - LEW-0CCC0E88CE3 # Boot Mode : Normal # Running from : C:\Documents and Settings\Lew\Desktop\adwcleaner.exe # Option [Delete] ***** [Services] ***** Stopped & Deleted : Browser Manager ***** [Files / Folders] ***** Deleted on reboot : C:\Documents and Settings\All Users\Application Data\Browser Manager Folder Deleted : C:\Documents and Settings\All Users\Application Data\Ask Folder Deleted : C:\Documents and Settings\All Users\Application Data\Tarma Installer Folder Deleted : C:\Documents and Settings\Lew\Application Data\Qwiklinx Folder Deleted : C:\Documents and Settings\Lew\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo Folder Deleted : C:\Documents and Settings\Lew\Start Menu\Programs\Browser Manager Folder Deleted : C:\Program Files\Qwiklinx ***** [Registry] ***** Key Deleted : HKCU\Software\BrowserMngr Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKCU\Software\Qwiklinx Key Deleted : HKLM\Software\BrowserMngr Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.BHO Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.FBApi Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.FBApi.1 Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox.1 Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100567.FCTB000100567Pos Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100567.FCTB000100567Pos.1 Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100567.IEToolbar Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100567.IEToolbar.1 Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100567.JSOptionsImpl Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100567.JSOptionsImpl.1 Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E2C1A522-B8E1-45D1-B316-F5625004A28C} Key Deleted : HKLM\Software\Freeze.com Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2E497885-E60B-420A-832D-0148B392E058}_is1 Key Deleted : HKU\S-1-5-21-2052111302-861567501-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}] ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.6001.18702 Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=110790&tt=120912_cpc_3712_7&babsrc=NT_ss&mntrId=7cb4cc67000000000000fc7516e3409b –> hxxp://www.google.com ************************* AdwCleaner[S1].txt - [4149 octets] - [02/10/2012 19:52:56] ########## EOF - C:\AdwCleaner[S1].txt - [4209 octets] ##########