Spyware / Malware / Virus Removal

Infected? [Solved]

91 min read

Looking for the outcome? Ask AI

sinnead

Post #46May 15, 2013, 1:03 PM UTC

Sorry about that! I let this one run all night long, but it still said in the morning that it was preparing it's log: ComboFix 13-05-14.01 - Sherry 14/05/2013 23:25:09.3.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1470.763 [GMT -6:00] Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe AV: Bitdefender Antivirus Free Edition *Disabled/Updated* {9488E0FA-F058-4673-850E-E755F112BABC} FW: *Enabled* {9488E0FA-F058-4673-850E-E755F112BABC} FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66} * Created a new restore point ((((((((((((((((((((((((( Files Created from 2013-04-15 to 2013-05-15 ))))))))))))))))))))))))))))))) 2013-05-14 23:08:05 . 2013-05-14 23:08:06 242504 —-a-w- C:\WINDOWS\system32\drivers\avchv.sys 2013-05-14 23:07:28 . 2013-05-14 23:07:28 633344 —-a-w- C:\WINDOWS\system32\drivers\avc3.sys 2013-05-14 23:07:26 . 2013-05-14 23:07:26 486536 —-a-w- C:\WINDOWS\system32\drivers\avckf.sys 2013-05-14 23:07:24 . 2013-05-14 23:07:24 164952 —-a-w- C:\WINDOWS\system32\drivers\gzflt.sys 2013-05-10 07:57:26 . 2013-05-10 07:57:26 187456 —-a-w- C:\Program Files\Internet Explorer\Plugins\nppdf32.dll 2013-05-08 15:02:13 . 2013-05-08 15:03:21 ——– d—–w- C:\Program Files\Safari 2013-05-05 21:13:18 . 2008-04-14 00:12:12 116224 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwiadr.dll 2013-05-05 21:13:13 . 2001-08-18 04:36:36 23040 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwbtmp.dll 2013-05-05 21:13:12 . 2008-04-14 00:12:12 18944 -c–a-w- C:\WINDOWS\system32\dllcache\xrxscnui.dll 2013-05-05 21:13:06 . 2001-08-18 04:37:02 27648 -c–a-w- C:\WINDOWS\system32\dllcache\xrxftplt.exe 2013-05-05 21:13:01 . 2001-08-18 04:37:02 4608 -c–a-w- C:\WINDOWS\system32\dllcache\xrxflnch.exe 2013-05-05 21:12:40 . 2001-08-18 04:37:02 99865 -c–a-w- C:\WINDOWS\system32\dllcache\xlog.exe 2013-05-05 21:12:34 . 2001-08-17 18:11:14 16970 -c–a-w- C:\WINDOWS\system32\dllcache\xem336n5.sys 2013-05-05 21:12:32 . 2004-08-04 04:29:50 19455 -c–a-w- C:\WINDOWS\system32\dllcache\wvchntxx.sys 2013-05-05 21:12:27 . 2008-04-13 18:46:24 19200 -c–a-w- C:\WINDOWS\system32\dllcache\wstcodec.sys 2013-05-05 21:12:25 . 2004-08-04 04:29:48 12063 -c–a-w- C:\WINDOWS\system32\dllcache\wsiintxx.sys 2013-05-05 21:12:23 . 2008-04-14 00:12:10 8192 -c–a-w- C:\WINDOWS\system32\dllcache\wshirda.dll 2013-05-05 21:12:04 . 2008-04-13 18:36:38 8832 -c–a-w- C:\WINDOWS\system32\dllcache\wmiacpi.sys 2013-05-05 21:12:01 . 2004-08-04 04:31:28 154624 -c–a-w- C:\WINDOWS\system32\dllcache\wlluc48.sys 2013-05-05 21:11:56 . 2001-08-17 18:12:38 34890 -c–a-w- C:\WINDOWS\system32\dllcache\wlandrv2.sys 2013-05-05 21:11:41 . 2001-08-17 19:28:14 771581 -c–a-w- C:\WINDOWS\system32\dllcache\winacisa.sys 2013-05-05 21:11:34 . 2001-08-18 04:36:34 53760 -c–a-w- C:\WINDOWS\system32\dllcache\wiamsmud.dll 2013-05-05 21:11:28 . 2001-08-18 04:36:34 87040 -c–a-w- C:\WINDOWS\system32\dllcache\wiafbdrv.dll 2013-05-05 21:11:16 . 2001-08-17 19:28:02 701386 -c–a-w- C:\WINDOWS\system32\dllcache\wdhaalba.sys 2013-05-05 21:11:14 . 2004-08-04 04:29:46 23615 -c–a-w- C:\WINDOWS\system32\dllcache\wch7xxnt.sys 2013-05-05 21:11:13 . 2008-04-13 18:45:38 31744 -c–a-w- C:\WINDOWS\system32\dllcache\wceusbsh.sys 2013-05-05 21:11:08 . 2001-08-17 18:10:30 35871 -c–a-w- C:\WINDOWS\system32\dllcache\wbfirdma.sys 2013-05-05 21:11:03 . 2004-08-04 04:29:44 33599 -c–a-w- C:\WINDOWS\system32\dllcache\watv04nt.sys 2013-05-05 21:11:01 . 2004-08-04 04:29:44 19551 -c–a-w- C:\WINDOWS\system32\dllcache\watv02nt.sys 2013-05-05 21:11:00 . 2004-08-04 04:29:42 29311 -c–a-w- C:\WINDOWS\system32\dllcache\watv01nt.sys 2013-05-05 21:10:57 . 2004-08-04 04:29:38 11775 -c–a-w- C:\WINDOWS\system32\dllcache\wadv05nt.sys 2013-05-05 21:10:55 . 2004-08-04 04:29:38 12127 -c–a-w- C:\WINDOWS\system32\dllcache\wadv02nt.sys 2013-05-05 21:10:54 . 2004-08-04 04:29:38 12415 -c–a-w- C:\WINDOWS\system32\dllcache\wadv01nt.sys 2013-05-05 21:10:48 . 2001-08-17 18:13:12 16925 -c–a-w- C:\WINDOWS\system32\dllcache\w940nd.sys 2013-05-05 21:10:43 . 2001-08-17 18:13:08 19016 -c–a-w- C:\WINDOWS\system32\dllcache\w926nd.sys 2013-05-05 21:10:37 . 2001-08-17 18:13:08 19528 -c–a-w- C:\WINDOWS\system32\dllcache\w840nd.sys 2013-05-05 21:10:25 . 2001-08-17 19:28:16 64605 -c–a-w- C:\WINDOWS\system32\dllcache\vvoice.sys 2013-05-05 21:10:19 . 2001-08-17 19:28:16 397502 -c–a-w- C:\WINDOWS\system32\dllcache\vpctcom.sys 2013-05-05 21:10:13 . 2001-08-17 19:28:14 604253 -c–a-w- C:\WINDOWS\system32\dllcache\vmodem.sys 2013-05-05 21:10:07 . 2001-08-17 18:14:12 249402 -c–a-w- C:\WINDOWS\system32\dllcache\vinwm.sys 2013-05-05 21:10:02 . 2001-08-17 19:49:04 24576 -c–a-w- C:\WINDOWS\system32\dllcache\viairda.sys 2013-05-05 21:10:01 . 2008-04-13 18:40:32 5376 -c–a-w- C:\WINDOWS\system32\dllcache\viaide.sys 2013-05-05 21:09:58 . 2008-04-14 00:12:08 53760 -c–a-w- C:\WINDOWS\system32\dllcache\vfwwdm32.dll 2013-05-05 21:09:51 . 2001-08-17 19:28:26 687999 -c–a-w- C:\WINDOWS\system32\dllcache\usrwdxjs.sys 2013-05-05 21:09:45 . 2001-08-17 19:28:14 765884 -c–a-w- C:\WINDOWS\system32\dllcache\usrti.sys 2013-05-05 21:09:40 . 2001-08-17 19:28:26 113762 -c–a-w- C:\WINDOWS\system32\dllcache\usrpda.sys 2013-05-05 21:09:35 . 2001-08-17 19:28:24 7556 -c–a-w- C:\WINDOWS\system32\dllcache\usroslba.sys 2013-05-05 21:09:29 . 2001-08-17 19:28:24 224802 -c–a-w- C:\WINDOWS\system32\dllcache\usr1807a.sys 2013-05-05 21:09:24 . 2001-08-17 19:28:18 794399 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806v.sys 2013-05-05 21:09:19 . 2001-08-17 19:28:16 793598 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806.sys 2013-05-05 21:09:14 . 2001-08-17 19:28:16 794654 -c–a-w- C:\WINDOWS\system32\dllcache\usr1801.sys 2013-05-05 21:09:11 . 2008-04-13 18:45:36 20608 -c–a-w- C:\WINDOWS\system32\dllcache\usbuhci.sys 2013-05-05 21:09:09 . 2008-04-13 18:45:36 26112 -c–a-w- C:\WINDOWS\system32\dllcache\usbser.sys 2013-05-05 21:09:05 . 2004-08-04 04:31:26 32384 -c–a-w- C:\WINDOWS\system32\dllcache\usb101et.sys 2013-05-05 21:08:56 . 2001-08-18 04:36:34 94720 -c–a-w- C:\WINDOWS\system32\dllcache\umaxud32.dll 2013-05-05 21:08:51 . 2001-08-18 04:36:34 28160 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu40.dll 2013-05-05 21:08:46 . 2001-08-18 04:36:34 26624 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu22.dll 2013-05-05 21:08:41 . 2001-08-18 04:36:34 69632 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu12.dll 2013-05-05 21:08:36 . 2001-08-18 04:36:34 50688 -c–a-w- C:\WINDOWS\system32\dllcache\umaxscan.dll 2013-05-05 21:08:31 . 2001-08-17 19:58:12 22912 -c–a-w- C:\WINDOWS\system32\dllcache\umaxpcls.sys 2013-05-05 21:08:27 . 2001-08-18 04:36:34 50176 -c–a-w- C:\WINDOWS\system32\dllcache\umaxp60.dll 2013-05-05 21:08:22 . 2001-08-18 04:36:34 47616 -c–a-w- C:\WINDOWS\system32\dllcache\umaxcam.dll 2013-05-05 21:08:17 . 2001-08-18 04:36:34 211968 -c–a-w- C:\WINDOWS\system32\dllcache\um54scan.dll 2013-05-05 21:08:11 . 2001-08-18 04:36:34 216064 -c–a-w- C:\WINDOWS\system32\dllcache\um34scan.dll 2013-05-05 21:08:06 . 2001-08-17 19:52:22 36736 -c–a-w- C:\WINDOWS\system32\dllcache\ultra.sys 2013-05-05 21:08:00 . 2001-08-17 19:48:14 11520 -c–a-w- C:\WINDOWS\system32\dllcache\twotrack.sys 2013-05-05 21:07:46 . 2001-08-17 18:51:22 166784 -c–a-w- C:\WINDOWS\system32\dllcache\tridxpm.sys 2013-05-05 21:07:41 . 2001-08-18 04:36:32 525568 -c–a-w- C:\WINDOWS\system32\dllcache\tridxp.dll 2013-05-05 21:07:36 . 2001-08-17 18:51:16 159232 -c–a-w- C:\WINDOWS\system32\dllcache\tridkbm.sys 2013-05-05 21:07:31 . 2001-08-17 20:56:06 440576 -c–a-w- C:\WINDOWS\system32\dllcache\tridkb.dll 2013-05-05 21:07:26 . 2001-08-17 18:51:16 222336 -c–a-w- C:\WINDOWS\system32\dllcache\trid3dm.sys 2013-05-05 21:07:21 . 2001-08-17 20:56:06 315520 -c–a-w- C:\WINDOWS\system32\dllcache\trid3d.dll 2013-05-05 21:07:16 . 2001-08-17 18:12:12 34375 -c–a-w- C:\WINDOWS\system32\dllcache\tpro4.sys 2013-05-05 21:07:11 . 2001-08-18 04:35:42 42496 -c–a-w- C:\WINDOWS\system32\dllcache\tp4res.dll 2013-05-05 21:07:09 . 2008-04-14 00:12:38 82944 -c–a-w- C:\WINDOWS\system32\dllcache\tp4mon.exe 2013-05-05 21:07:04 . 2001-08-18 04:36:32 31744 -c–a-w- C:\WINDOWS\system32\dllcache\tp4.dll 2013-05-05 21:06:54 . 2001-08-17 19:51:56 4992 -c–a-w- C:\WINDOWS\system32\dllcache\toside.sys 2013-05-05 21:06:49 . 2001-08-17 20:02:00 230912 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd03.sys 2013-05-05 21:06:44 . 2001-08-17 20:01:52 241664 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd02.sys 2013-05-05 21:06:39 . 2001-08-17 18:10:26 28232 -c–a-w- C:\WINDOWS\system32\dllcache\tos4mo.sys 2013-05-05 21:06:32 . 2001-08-17 18:14:26 123995 -c–a-w- C:\WINDOWS\system32\dllcache\tjisdn.sys 2013-05-05 21:06:25 . 2001-08-17 18:51:10 138528 -c–a-w- C:\WINDOWS\system32\dllcache\tgiulnt5.sys 2013-05-05 21:06:20 . 2001-08-17 20:56:04 81408 -c–a-w- C:\WINDOWS\system32\dllcache\tgiul50.dll 2013-05-05 21:06:18 . 2008-04-13 18:40:50 149376 -c–a-w- C:\WINDOWS\system32\dllcache\tffsport.sys 2013-05-05 21:06:10 . 2001-08-17 18:13:00 17129 -c–a-w- C:\WINDOWS\system32\dllcache\tdkcd31.sys 2013-05-05 21:06:06 . 2001-08-17 18:13:00 37961 -c–a-w- C:\WINDOWS\system32\dllcache\tdk100b.sys 2013-05-05 21:05:55 . 2001-08-17 19:49:46 30464 -c–a-w- C:\WINDOWS\system32\dllcache\tbatm155.sys 2013-05-05 21:05:49 . 2001-08-17 19:52:54 7040 -c–a-w- C:\WINDOWS\system32\dllcache\tandqic.sys 2013-05-05 21:05:44 . 2001-08-17 18:50:12 36640 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4mini.sys 2013-05-05 21:05:39 . 2001-08-17 20:56:04 172768 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4disp.dll 2013-05-05 21:05:30 . 2001-08-17 20:07:36 32640 -c–a-w- C:\WINDOWS\system32\dllcache\symc8xx.sys 2013-05-05 21:05:26 . 2001-08-17 20:07:34 16256 -c–a-w- C:\WINDOWS\system32\dllcache\symc810.sys 2013-05-05 21:05:22 . 2001-08-17 20:07:42 30688 -c–a-w- C:\WINDOWS\system32\dllcache\sym_u3.sys 2013-05-05 21:05:17 . 2001-08-17 20:07:40 28384 -c–a-w- C:\WINDOWS\system32\dllcache\sym_hi.sys 2013-05-05 21:05:12 . 2001-08-18 04:36:32 94293 -c–a-w- C:\WINDOWS\system32\dllcache\sxports.dll 2013-05-05 21:05:08 . 2001-08-17 19:50:58 103936 -c–a-w- C:\WINDOWS\system32\dllcache\sx.sys 2013-05-05 21:05:03 . 2001-08-17 20:02:56 3968 -c–a-w- C:\WINDOWS\system32\dllcache\swusbflt.sys 2013-05-05 21:04:59 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpidflt.dll 2013-05-05 21:04:54 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpdflt2.dll 2013-05-05 21:04:50 . 2001-08-18 04:36:32 53760 -c–a-w- C:\WINDOWS\system32\dllcache\sw_wheel.dll 2013-05-05 21:04:45 . 2001-08-18 04:36:32 41472 -c–a-w- C:\WINDOWS\system32\dllcache\sw_effct.dll 2013-05-05 21:04:42 . 2008-04-13 18:46:22 15232 -c–a-w- C:\WINDOWS\system32\dllcache\streamip.sys 2013-05-05 21:04:37 . 2001-08-18 04:36:32 155648 -c–a-w- C:\WINDOWS\system32\dllcache\stlnprop.dll 2013-05-05 21:04:33 . 2001-08-18 04:36:32 53248 -c–a-w- C:\WINDOWS\system32\dllcache\stlncoin.dll 2013-05-05 21:04:29 . 2001-08-17 18:18:18 285760 -c–a-w- C:\WINDOWS\system32\dllcache\stlnata.sys 2013-05-05 21:04:23 . 2001-08-17 19:51:20 16896 -c–a-w- C:\WINDOWS\system32\dllcache\stcusb.sys 2013-05-05 21:04:14 . 2001-08-17 18:11:08 48736 -c–a-w- C:\WINDOWS\system32\dllcache\srwlnd5.sys 2013-05-05 21:04:06 . 2001-08-18 04:36:32 99328 -c–a-w- C:\WINDOWS\system32\dllcache\srusd.dll 2013-05-05 21:03:58 . 2001-08-18 04:36:32 24660 -c–a-w- C:\WINDOWS\system32\dllcache\spxupchk.dll 2013-05-05 21:03:50 . 2001-08-17 19:51:00 61824 -c–a-w- C:\WINDOWS\system32\dllcache\speed.sys 2013-05-05 21:03:46 . 2001-08-18 04:36:32 106584 -c–a-w- C:\WINDOWS\system32\dllcache\spdports.dll 2013-05-05 21:03:41 . 2001-08-17 20:07:44 19072 -c–a-w- C:\WINDOWS\system32\dllcache\sparrow.sys 2013-05-05 21:03:36 . 2001-08-17 19:56:16 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonypvu1.sys 2013-05-05 21:03:32 . 2001-08-17 18:51:22 37040 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.sys 2013-05-05 21:03:27 . 2001-08-18 04:36:32 114688 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.dll 2013-05-05 21:03:23 . 2001-08-17 18:51:20 20752 -c–a-w- C:\WINDOWS\system32\dllcache\sonync.sys 2013-05-05 21:03:18 . 2001-08-17 19:53:04 9600 -c–a-w- C:\WINDOWS\system32\dllcache\sonymc.sys 2013-05-05 21:03:17 . 2008-04-13 18:40:52 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonyait.sys 2013-05-05 21:03:11 . 2001-08-17 19:53:14 7040 -c–a-w- C:\WINDOWS\system32\dllcache\snyaitmc.sys 2013-05-05 21:02:52 . 2001-08-17 18:51:00 58368 -c–a-w- C:\WINDOWS\system32\dllcache\smiminib.sys 2013-05-05 21:02:45 . 2001-08-17 20:56:04 147200 -c–a-w- C:\WINDOWS\system32\dllcache\smidispb.dll 2013-05-05 21:02:39 . 2001-08-17 18:12:48 25034 -c–a-w- C:\WINDOWS\system32\dllcache\smcpwr2n.sys 2013-05-05 21:02:34 . 2001-08-17 18:10:28 35913 -c–a-w- C:\WINDOWS\system32\dllcache\smcirda.sys 2013-05-05 21:02:30 . 2001-08-17 18:12:46 24576 -c–a-w- C:\WINDOWS\system32\dllcache\smc8000n.sys 2013-05-05 21:02:25 . 2001-08-17 19:57:56 6784 -c–a-w- C:\WINDOWS\system32\dllcache\smbhc.sys (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2013-05-08 23:12:20 . 2012-04-08 14:12:52 691592 —-a-w- C:\WINDOWS\system32\FlashPlayerApp.exe 2013-05-08 23:12:20 . 2011-06-13 00:36:04 71048 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-04-27 15:35:23 . 2013-03-28 22:17:50 13024 —-a-w- C:\WINDOWS\system32\drivers\SWDUMon.sys 2013-04-06 22:32:14 . 2013-04-06 22:32:14 445016 —-a-w- C:\WINDOWS\system32\wrap_oal.dll 2013-04-06 22:32:14 . 2013-04-06 22:32:14 109144 —-a-w- C:\WINDOWS\system32\OpenAL32.dll 2013-04-05 16:01:27 . 2013-04-04 14:39:11 33112 —-a-w- C:\WINDOWS\system32\drivers\avgtpx86.sys 2013-04-04 20:50:32 . 2010-10-27 11:21:04 22856 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys 2013-03-28 22:23:37 . 2013-03-28 22:23:37 0 —-a-w- C:\WINDOWS\system32\TempWmicBatchFile.bat 2013-03-26 13:13:07 . 2013-03-26 13:13:29 94112 —-a-w- C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-03-26 13:13:02 . 2012-03-24 20:23:39 143872 —-a-w- C:\WINDOWS\system32\javacpl.cpl 2013-03-26 13:13:01 . 2012-07-15 13:39:56 861088 —-a-w- C:\WINDOWS\system32\npDeployJava1.dll 2013-03-26 13:13:01 . 2010-11-05 03:22:53 782240 —-a-w- C:\WINDOWS\system32\deployJava1.dll 2013-03-08 08:36:22 . 2006-03-15 12:00:00 293376 —-a-w- C:\WINDOWS\system32\winsrv.dll 2013-03-07 01:28:24 . 2006-03-15 12:00:00 2193408 —-a-w- C:\WINDOWS\system32\ntoskrnl.exe 2013-03-07 00:50:28 . 2004-08-03 22:59:00 2070016 —-a-w- C:\WINDOWS\system32\ntkrnlpa.exe 2013-03-02 02:06:31 . 2006-03-15 12:00:00 916480 —-a-w- C:\WINDOWS\system32\wininet.dll 2013-03-02 02:06:30 . 2006-03-15 12:00:00 43520 —-a-w- C:\WINDOWS\system32\licmgr10.dll 2013-03-02 02:06:30 . 2006-03-15 12:00:00 1469440 ——w- C:\WINDOWS\system32\inetcpl.cpl 2013-03-02 01:25:02 . 2006-03-15 12:00:00 1867264 —-a-w- C:\WINDOWS\system32\win32k.sys 2013-03-02 01:08:47 . 2006-03-15 12:00:00 385024 —-a-w- C:\WINDOWS\system32\html.iec 2013-02-27 07:56:51 . 2010-10-26 22:23:11 2067456 —-a-w- C:\WINDOWS\system32\mstscax.dll

Satchfan

Post #47May 15, 2013, 10:09 PM UTC

That was still not a complete ComboFix log.

I don’t know why safe mode is having a problem. I’d like another scan to check some system files.

Run TDSSKiller

Please download TDSSKiller.zip

extract it to your desktop
double click TDSSKiller.exe
press Start Scan
only if Malicious objects are found then ensure Cure is selected. Do not change it to Delete or Quarantine as it may delete infected files that are required for Windows to operate properly.
click Continue > Reboot now
copy and paste the log in your next reply
a copy of the log will be saved automatically to the root of the drive (typically C:\) called TDSSKiller_*** (*** denotes version & date)

Can you tell me if the symptoms your computer had initially are still the same.

Thanks

Satchfan

sinnead

Post #48May 16, 2013, 5:23 AM UTC

It didn't give the option of continue—>reboot. But I"m assuming that's only if something malicious is found? Either/or, here is the report. And no, computer is behaving rather well now, other than not being able to get into safe mode. 23:24:33.0765 4008 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 23:24:34.0750 4008 ============================================================ 23:24:34.0750 4008 Current date / time: 2013/05/15 23:24:34.0750 23:24:34.0750 4008 SystemInfo: 23:24:34.0750 4008 23:24:34.0750 4008 OS Version: 5.1.2600 ServicePack: 3.0 23:24:34.0750 4008 Product type: Workstation 23:24:34.0750 4008 ComputerName: DA658A6C7 23:24:34.0765 4008 UserName: Sherry 23:24:34.0765 4008 Windows directory: C:\WINDOWS 23:24:34.0765 4008 System windows directory: C:\WINDOWS 23:24:34.0765 4008 Processor architecture: Intel x86 23:24:34.0765 4008 Number of processors: 1 23:24:34.0765 4008 Page size: 0x1000 23:24:34.0765 4008 Boot type: Normal boot 23:24:34.0765 4008 ============================================================ 23:24:36.0203 4008 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054 23:24:36.0203 4008 ============================================================ 23:24:36.0203 4008 \Device\Harddisk0\DR0: 23:24:36.0203 4008 MBR partitions: 23:24:36.0203 4008 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C0681 23:24:36.0203 4008 ============================================================ 23:24:36.0250 4008 C: <-> \Device\Harddisk0\DR0\Partition1 23:24:36.0250 4008 ============================================================ 23:24:36.0250 4008 Initialize success 23:24:36.0250 4008 ============================================================ 23:24:37.0921 1008 ============================================================ 23:24:37.0921 1008 Scan started 23:24:37.0921 1008 Mode: Manual; 23:24:37.0921 1008 ============================================================ 23:24:38.0703 1008 ================ Scan system memory ======================== 23:24:38.0718 1008 System memory - ok 23:24:38.0718 1008 ================ Scan services ============================= 23:24:38.0906 1008 Abiosdsk - ok 23:24:38.0921 1008 abp480n5 - ok 23:24:39.0125 1008 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe 23:24:39.0125 1008 ACDaemon - ok 23:24:39.0203 1008 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys 23:24:39.0203 1008 ACPI - ok 23:24:39.0281 1008 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys 23:24:39.0281 1008 ACPIEC - ok 23:24:39.0406 1008 [ 479901C99FA62D1C3261B7ACB1228DAD ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe 23:24:39.0406 1008 AdobeFlashPlayerUpdateSvc - ok 23:24:39.0421 1008 adpu160m - ok 23:24:39.0453 1008 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys 23:24:39.0453 1008 aec - ok 23:24:39.0515 1008 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys 23:24:39.0515 1008 AFD - ok 23:24:39.0531 1008 Aha154x - ok 23:24:39.0578 1008 aic78u2 - ok 23:24:39.0578 1008 aic78xx - ok 23:24:39.0625 1008 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll 23:24:39.0625 1008 Alerter - ok 23:24:39.0656 1008 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe 23:24:39.0656 1008 ALG - ok 23:24:39.0671 1008 AliIde - ok 23:24:39.0765 1008 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys 23:24:39.0781 1008 Ambfilt - ok 23:24:39.0796 1008 amsint - ok 23:24:39.0921 1008 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 23:24:39.0921 1008 Apple Mobile Device - ok 23:24:39.0984 1008 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll 23:24:39.0984 1008 AppMgmt - ok 23:24:40.0000 1008 asc - ok 23:24:40.0015 1008 asc3350p - ok 23:24:40.0031 1008 asc3550 - ok 23:24:40.0203 1008 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe 23:24:40.0203 1008 aspnet_state - ok 23:24:40.0234 1008 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys 23:24:40.0234 1008 AsyncMac - ok 23:24:40.0250 1008 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys 23:24:40.0250 1008 atapi - ok 23:24:40.0265 1008 Atdisk - ok 23:24:40.0312 1008 [ 956DC0B34BC040E191D4016E6A9A7364 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe 23:24:40.0328 1008 Ati HotKey Poller - ok 23:24:40.0437 1008 [ 400299684F30D5C29B79EAAF3B5FF6C6 ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 23:24:40.0453 1008 ati2mtag - ok 23:24:40.0484 1008 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys 23:24:40.0500 1008 Atmarpc - ok 23:24:40.0546 1008 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll 23:24:40.0546 1008 AudioSrv - ok 23:24:40.0609 1008 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys 23:24:40.0609 1008 audstub - ok 23:24:40.0812 1008 [ B5B8FC2C4D520F1F1EED52A980ED5091 ] avc3 C:\WINDOWS\system32\DRIVERS\avc3.sys 23:24:40.0812 1008 avc3 - ok 23:24:41.0265 1008 [ 818E7E029DB594DCB8D6218A7D6FA575 ] avckf C:\WINDOWS\system32\DRIVERS\avckf.sys 23:24:41.0265 1008 avckf - ok 23:24:41.0312 1008 [ CAE7B6E4D7EB17829C526153D19B9C95 ] avgtp C:\WINDOWS\system32\drivers\avgtpx86.sys 23:24:41.0328 1008 avgtp - ok 23:24:41.0546 1008 [ 560E3C3D50F8FAA6227EBE97600D3220 ] bdftdif C:\Program Files\Bitdefender\Antivirus Free Edition\bdftdif.sys 23:24:41.0546 1008 bdftdif - ok 23:24:41.0609 1008 [ A7478F77584F8DB6AD74B2BBE1144886 ] bdselfpr C:\Program Files\Bitdefender\Antivirus Free Edition\bdselfpr.sys 23:24:41.0609 1008 bdselfpr - ok 23:24:41.0671 1008 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys 23:24:41.0671 1008 Beep - ok 23:24:41.0750 1008 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll 23:24:41.0750 1008 BITS - ok 23:24:41.0843 1008 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 23:24:41.0843 1008 Bonjour Service - ok 23:24:41.0921 1008 [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser C:\WINDOWS\System32\browser.dll 23:24:41.0921 1008 Browser - ok 23:24:42.0078 1008 catchme - ok 23:24:42.0140 1008 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys 23:24:42.0140 1008 cbidf2k - ok 23:24:42.0156 1008 cd20xrnt - ok 23:24:42.0203 1008 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys 23:24:42.0218 1008 Cdaudio - ok 23:24:42.0281 1008 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys 23:24:42.0281 1008 Cdfs - ok 23:24:42.0296 1008 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys 23:24:42.0312 1008 Cdrom - ok 23:24:42.0328 1008 Changer - ok 23:24:42.0390 1008 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe 23:24:42.0390 1008 CiSvc - ok 23:24:42.0453 1008 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe 23:24:42.0453 1008 ClipSrv - ok 23:24:42.0531 1008 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 23:24:42.0531 1008 clr_optimization_v2.0.50727_32 - ok 23:24:42.0578 1008 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 23:24:42.0578 1008 clr_optimization_v4.0.30319_32 - ok 23:24:42.0593 1008 CmdIde - ok 23:24:42.0609 1008 COMSysApp - ok 23:24:42.0640 1008 Cpqarray - ok 23:24:42.0703 1008 [ C0EAD9F8AB83D41FF07303C75589C2B8 ] Creative Audio Engine Licensing Service C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe 23:24:42.0703 1008 Creative Audio Engine Licensing Service - ok 23:24:42.0765 1008 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll 23:24:42.0765 1008 CryptSvc - ok 23:24:42.0921 1008 [ 5CE3D0E1D1B3832EE052CFC442EEE0FA ] CTAudSvcService C:\Program Files\Creative\Shared Files\CTAudSvc.exe 23:24:42.0937 1008 CTAudSvcService - ok 23:24:42.0953 1008 dac2w2k - ok 23:24:42.0968 1008 dac960nt - ok 23:24:43.0015 1008 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 23:24:43.0031 1008 DcomLaunch - ok 23:24:43.0093 1008 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll 23:24:43.0109 1008 Dhcp - ok 23:24:43.0156 1008 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys 23:24:43.0156 1008 Disk - ok 23:24:43.0171 1008 dmadmin - ok 23:24:43.0218 1008 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys 23:24:43.0218 1008 dmboot - ok 23:24:43.0281 1008 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys 23:24:43.0281 1008 dmio - ok 23:24:43.0328 1008 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys 23:24:43.0328 1008 dmload - ok 23:24:43.0375 1008 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll 23:24:43.0375 1008 dmserver - ok 23:24:43.0406 1008 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys 23:24:43.0406 1008 DMusic - ok 23:24:43.0484 1008 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 23:24:43.0484 1008 Dnscache - ok 23:24:43.0531 1008 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll 23:24:43.0531 1008 Dot3svc - ok 23:24:43.0546 1008 dpti2o - ok 23:24:43.0578 1008 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys 23:24:43.0578 1008 drmkaud - ok 23:24:43.0640 1008 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll 23:24:43.0640 1008 EapHost - ok 23:24:43.0734 1008 [ 27434C42A13C11F92CA45840B720D671 ] ehRecvr C:\WINDOWS\eHome\ehRecvr.exe 23:24:43.0750 1008 ehRecvr - ok 23:24:43.0781 1008 [ 16910F8B482919BB6035ED053B691692 ] ehSched C:\WINDOWS\eHome\ehSched.exe 23:24:43.0781 1008 ehSched - ok 23:24:43.0812 1008 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll 23:24:43.0812 1008 ERSvc - ok 23:24:43.0875 1008 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe 23:24:43.0890 1008 Eventlog - ok 23:24:43.0953 1008 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll 23:24:43.0953 1008 EventSystem - ok 23:24:44.0015 1008 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys 23:24:44.0015 1008 Fastfat - ok 23:24:44.0078 1008 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll 23:24:44.0078 1008 FastUserSwitchingCompatibility - ok 23:24:44.0093 1008 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys 23:24:44.0093 1008 Fdc - ok 23:24:44.0125 1008 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys 23:24:44.0125 1008 Fips - ok 23:24:44.0156 1008 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys 23:24:44.0156 1008 Flpydisk - ok 23:24:44.0187 1008 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 23:24:44.0187 1008 FltMgr - ok 23:24:44.0281 1008 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 23:24:44.0281 1008 FontCache3.0.0.0 - ok 23:24:44.0296 1008 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 23:24:44.0296 1008 Fs_Rec - ok 23:24:44.0312 1008 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys 23:24:44.0312 1008 Ftdisk - ok 23:24:44.0375 1008 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 23:24:44.0375 1008 GEARAspiWDM - ok 23:24:44.0406 1008 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys 23:24:44.0406 1008 Gpc - ok 23:24:44.0531 1008 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe 23:24:44.0546 1008 gupdate - ok 23:24:44.0578 1008 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 23:24:44.0578 1008 gupdatem - ok 23:24:44.0640 1008 [ 408DDD80EEDE47175F6844817B90213E ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 23:24:44.0640 1008 gusvc - ok 23:24:44.0750 1008 [ 46524E4F27A44A86F28772D80BC3CE02 ] gzflt C:\WINDOWS\system32\DRIVERS\gzflt.sys 23:24:44.0750 1008 gzflt - ok 23:24:44.0812 1008 [ 8D73FDA2902A5879380FB0FA2D98AF72 ] gzserv C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe 23:24:44.0812 1008 gzserv - ok 23:24:44.0843 1008 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 23:24:44.0843 1008 HDAudBus - ok 23:24:44.0953 1008 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll 23:24:44.0953 1008 helpsvc - ok 23:24:45.0000 1008 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll 23:24:45.0000 1008 HidServ - ok 23:24:45.0046 1008 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys 23:24:45.0046 1008 hidusb - ok 23:24:45.0093 1008 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll 23:24:45.0093 1008 hkmsvc - ok 23:24:45.0109 1008 hpn - ok 23:24:45.0250 1008 [ 38D6B51F04DEF7FB248FA56E4C47407E ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll 23:24:45.0250 1008 hpqcxs08 - ok 23:24:45.0281 1008 [ 3EE4A63539EC04EE2D4BD293985087AB ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll 23:24:45.0281 1008 hpqddsvc - ok 23:24:45.0343 1008 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys 23:24:45.0343 1008 HPZid412 - ok 23:24:45.0390 1008 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 23:24:45.0390 1008 HPZipr12 - ok 23:24:45.0437 1008 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys 23:24:45.0437 1008 HPZius12 - ok 23:24:45.0500 1008 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys 23:24:45.0500 1008 HTTP - ok 23:24:45.0562 1008 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll 23:24:45.0562 1008 HTTPFilter - ok 23:24:45.0562 1008 i2omgmt - ok 23:24:45.0578 1008 i2omp - ok 23:24:45.0640 1008 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys 23:24:45.0640 1008 i8042prt - ok 23:24:45.0734 1008 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 23:24:45.0734 1008 IDriverT - ok 23:24:45.0812 1008 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 23:24:45.0828 1008 idsvc - ok 23:24:45.0875 1008 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys 23:24:45.0875 1008 Imapi - ok 23:24:45.0953 1008 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe 23:24:45.0953 1008 ImapiService - ok 23:24:45.0968 1008 ini910u - ok 23:24:46.0234 1008 [ 251BE5418A9B2F9240079146AE96C4CF ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys 23:24:46.0281 1008 IntcAzAudAddService - ok 23:24:46.0312 1008 IntelIde - ok 23:24:46.0359 1008 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys 23:24:46.0359 1008 intelppm - ok 23:24:46.0390 1008 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys 23:24:46.0390 1008 Ip6Fw - ok 23:24:46.0437 1008 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 23:24:46.0437 1008 IpFilterDriver - ok 23:24:46.0453 1008 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys 23:24:46.0453 1008 IpInIp - ok 23:24:46.0500 1008 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys 23:24:46.0500 1008 IpNat - ok 23:24:46.0593 1008 [ E46B17060D3962A384AE484094614788 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 23:24:46.0593 1008 iPod Service - ok 23:24:46.0656 1008 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys 23:24:46.0656 1008 IPSec - ok 23:24:46.0687 1008 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys 23:24:46.0687 1008 IRENUM - ok 23:24:46.0734 1008 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys 23:24:46.0734 1008 isapnp - ok 23:24:46.0921 1008 [ 999DB5F88C8E145CCA9D471E33227143 ] JavaQuickStarterService C:\Program Files\Java\jre7\bin\jqs.exe 23:24:46.0921 1008 JavaQuickStarterService - ok 23:24:46.0953 1008 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys 23:24:46.0953 1008 Kbdclass - ok 23:24:47.0000 1008 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys 23:24:47.0000 1008 kbdhid - ok 23:24:47.0062 1008 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys 23:24:47.0062 1008 kmixer - ok 23:24:47.0187 1008 [ A0A0949DE0EB045440016565AD028B9C ] ksaud C:\WINDOWS\system32\drivers\ksaud.sys 23:24:47.0187 1008 ksaud - ok 23:24:47.0296 1008 [ 9D59A5666CC2603E0E524A8F7133D494 ] ksaudfl C:\WINDOWS\system32\drivers\ksaudfl.sys 23:24:47.0312 1008 ksaudfl - ok 23:24:47.0359 1008 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys 23:24:47.0359 1008 KSecDD - ok 23:24:47.0406 1008 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll 23:24:47.0406 1008 lanmanserver - ok 23:24:47.0468 1008 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll 23:24:47.0468 1008 lanmanworkstation - ok 23:24:47.0484 1008 lbrtfdc - ok 23:24:47.0531 1008 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll 23:24:47.0531 1008 LmHosts - ok 23:24:47.0609 1008 [ DDF15A42E27E8EFE27B18FD403151A86 ] MatSvc C:\Program Files\Microsoft Fix it Center\Matsvc.exe 23:24:47.0609 1008 MatSvc - ok 23:24:47.0656 1008 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys 23:24:47.0656 1008 MBAMProtector - ok 23:24:47.0703 1008 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe 23:24:47.0718 1008 MBAMScheduler - ok 23:24:47.0750 1008 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe 23:24:47.0765 1008 MBAMService - ok 23:24:47.0828 1008 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll 23:24:47.0828 1008 Messenger - ok 23:24:47.0875 1008 [ B7521F69C0A9B29D356157229376FB21 ] MHN C:\WINDOWS\System32\mhn.dll 23:24:47.0875 1008 MHN - ok 23:24:47.0890 1008 [ 7F2F1D2815A6449D346FCCCBC569FBD6 ] MHNDRV C:\WINDOWS\system32\DRIVERS\mhndrv.sys 23:24:47.0890 1008 MHNDRV - ok 23:24:47.0937 1008 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe 23:24:47.0953 1008 Microsoft Office Groove Audit Service - ok 23:24:48.0031 1008 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys 23:24:48.0031 1008 mnmdd - ok 23:24:48.0093 1008 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe 23:24:48.0093 1008 mnmsrvc - ok 23:24:48.0156 1008 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys 23:24:48.0156 1008 Modem - ok 23:24:48.0250 1008 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys 23:24:48.0265 1008 Monfilt - ok 23:24:48.0281 1008 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys 23:24:48.0281 1008 Mouclass - ok 23:24:48.0328 1008 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys 23:24:48.0328 1008 mouhid - ok 23:24:48.0343 1008 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys 23:24:48.0343 1008 MountMgr - ok 23:24:48.0359 1008 mraid35x - ok 23:24:48.0390 1008 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys 23:24:48.0390 1008 MRxDAV - ok 23:24:48.0453 1008 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 23:24:48.0468 1008 MRxSmb - ok 23:24:48.0500 1008 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe 23:24:48.0500 1008 MSDTC - ok 23:24:48.0531 1008 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 23:24:48.0531 1008 Msfs - ok 23:24:48.0546 1008 MSIServer - ok 23:24:48.0578 1008 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys 23:24:48.0578 1008 MSKSSRV - ok 23:24:48.0609 1008 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys 23:24:48.0609 1008 MSPCLOCK - ok 23:24:48.0625 1008 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys 23:24:48.0625 1008 MSPQM - ok 23:24:48.0671 1008 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys 23:24:48.0671 1008 mssmbios - ok 23:24:48.0718 1008 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys 23:24:48.0718 1008 Mup - ok 23:24:48.0750 1008 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll 23:24:48.0765 1008 napagent - ok 23:24:48.0781 1008 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys 23:24:48.0781 1008 NDIS - ok 23:24:48.0828 1008 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 23:24:48.0828 1008 NdisTapi - ok 23:24:48.0875 1008 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys 23:24:48.0875 1008 Ndisuio - ok 23:24:48.0875 1008 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys 23:24:48.0890 1008 NdisWan - ok 23:24:48.0921 1008 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys 23:24:48.0921 1008 NDProxy - ok 23:24:48.0953 1008 [ A081CB6FB9A12668F233EB5414BE3A0E ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll 23:24:48.0968 1008 Net Driver HPZ12 - ok 23:24:48.0984 1008 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys 23:24:48.0984 1008 NetBIOS - ok 23:24:49.0000 1008 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 23:24:49.0015 1008 NetBT - ok 23:24:49.0062 1008 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe 23:24:49.0062 1008 NetDDE - ok 23:24:49.0078 1008 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe 23:24:49.0078 1008 NetDDEdsdm - ok 23:24:49.0125 1008 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe 23:24:49.0125 1008 Netlogon - ok 23:24:49.0187 1008 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll 23:24:49.0187 1008 Netman - ok 23:24:49.0250 1008 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 23:24:49.0250 1008 NetTcpPortSharing - ok 23:24:49.0296 1008 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll 23:24:49.0296 1008 Nla - ok 23:24:49.0312 1008 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 23:24:49.0312 1008 Npfs - ok 23:24:49.0343 1008 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys 23:24:49.0359 1008 Ntfs - ok 23:24:49.0375 1008 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe 23:24:49.0375 1008 NtLmSsp - ok 23:24:49.0437 1008 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll 23:24:49.0437 1008 NtmsSvc - ok 23:24:49.0468 1008 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys 23:24:49.0468 1008 Null - ok 23:24:49.0531 1008 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 23:24:49.0531 1008 NwlnkFlt - ok 23:24:49.0546 1008 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 23:24:49.0546 1008 NwlnkFwd - ok 23:24:49.0703 1008 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 23:24:49.0703 1008 odserv - ok 23:24:49.0750 1008 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 23:24:49.0750 1008 ose - ok 23:24:49.0828 1008 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys 23:24:49.0843 1008 Parport - ok 23:24:49.0859 1008 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys 23:24:49.0859 1008 PartMgr - ok 23:24:49.0906 1008 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys 23:24:49.0906 1008 ParVdm - ok 23:24:49.0921 1008 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys 23:24:49.0937 1008 PCI - ok 23:24:49.0953 1008 PCIDump - ok 23:24:49.0968 1008 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys 23:24:49.0968 1008 PCIIde - ok 23:24:50.0031 1008 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys 23:24:50.0031 1008 Pcmcia - ok 23:24:50.0046 1008 PDCOMP - ok 23:24:50.0062 1008 PDFRAME - ok 23:24:50.0078 1008 PDRELI - ok 23:24:50.0093 1008 PDRFRAME - ok 23:24:50.0109 1008 perc2 - ok 23:24:50.0125 1008 perc2hib - ok 23:24:50.0187 1008 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe 23:24:50.0187 1008 PlugPlay - ok 23:24:50.0203 1008 [ 65BC271F337637731D3C71455AE1F476 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll 23:24:50.0218 1008 Pml Driver HPZ12 - ok 23:24:50.0234 1008 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe 23:24:50.0234 1008 PolicyAgent - ok 23:24:50.0296 1008 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys 23:24:50.0296 1008 PptpMiniport - ok 23:24:50.0312 1008 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe 23:24:50.0312 1008 ProtectedStorage - ok 23:24:50.0343 1008 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys 23:24:50.0343 1008 PSched - ok 23:24:50.0359 1008 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys 23:24:50.0359 1008 Ptilink - ok 23:24:50.0406 1008 [ 40FEDD328F98245AD201CF5F9F311724 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys 23:24:50.0406 1008 PxHelp20 - ok 23:24:50.0421 1008 ql1080 - ok 23:24:50.0437 1008 Ql10wnt - ok 23:24:50.0453 1008 ql12160 - ok 23:24:50.0468 1008 ql1240 - ok 23:24:50.0484 1008 ql1280 - ok 23:24:50.0531 1008 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 23:24:50.0531 1008 RasAcd - ok 23:24:50.0578 1008 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll 23:24:50.0578 1008 RasAuto - ok 23:24:50.0593 1008 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 23:24:50.0593 1008 Rasl2tp - ok 23:24:50.0656 1008 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll 23:24:50.0656 1008 RasMan - ok 23:24:50.0703 1008 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 23:24:50.0703 1008 RasPppoe - ok 23:24:50.0718 1008 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys 23:24:50.0718 1008 Raspti - ok 23:24:50.0781 1008 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 23:24:50.0781 1008 Rdbss - ok 23:24:50.0796 1008 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 23:24:50.0812 1008 RDPCDD - ok 23:24:50.0859 1008 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys 23:24:50.0859 1008 rdpdr - ok 23:24:50.0937 1008 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys 23:24:50.0937 1008 RDPWD - ok 23:24:51.0000 1008 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe 23:24:51.0000 1008 RDSessMgr - ok 23:24:51.0046 1008 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys 23:24:51.0046 1008 redbook - ok 23:24:51.0093 1008 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 23:24:51.0093 1008 RemoteAccess - ok 23:24:51.0125 1008 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll 23:24:51.0140 1008 RemoteRegistry - ok 23:24:51.0171 1008 [ D8B0B4ADE32574B2D9C5CC34DC0DBBE7 ] ROOTMODEM C:\WINDOWS\system32\Drivers\RootMdm.sys 23:24:51.0171 1008 ROOTMODEM - ok 23:24:51.0203 1008 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe 23:24:51.0203 1008 RpcLocator - ok 23:24:51.0250 1008 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\System32\rpcss.dll 23:24:51.0265 1008 RpcSs - ok 23:24:51.0281 1008 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe 23:24:51.0281 1008 RSVP - ok 23:24:51.0328 1008 [ D507C1400284176573224903819FFDA3 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS 23:24:51.0328 1008 rtl8139 - ok 23:24:51.0343 1008 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe 23:24:51.0359 1008 SamSs - ok 23:24:51.0390 1008 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe 23:24:51.0390 1008 SCardSvr - ok 23:24:51.0437 1008 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll 23:24:51.0437 1008 Schedule - ok 23:24:51.0500 1008 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys 23:24:51.0500 1008 Secdrv - ok 23:24:51.0531 1008 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll 23:24:51.0531 1008 seclogon - ok 23:24:51.0578 1008 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll 23:24:51.0578 1008 SENS - ok 23:24:51.0640 1008 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys 23:24:51.0640 1008 serenum - ok 23:24:51.0656 1008 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys 23:24:51.0656 1008 Serial - ok 23:24:51.0734 1008 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys 23:24:51.0734 1008 Sfloppy - ok 23:24:51.0765 1008 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 23:24:51.0765 1008 SharedAccess - ok 23:24:51.0796 1008 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 23:24:51.0812 1008 ShellHWDetection - ok 23:24:51.0828 1008 Simbad - ok 23:24:51.0890 1008 [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe 23:24:51.0906 1008 SkypeUpdate - ok 23:24:51.0921 1008 Sparrow - ok 23:24:51.0984 1008 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys 23:24:52.0000 1008 splitter - ok 23:24:52.0031 1008 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe 23:24:52.0031 1008 Spooler - ok 23:24:52.0078 1008 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys 23:24:52.0078 1008 sr - ok 23:24:52.0156 1008 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll 23:24:52.0156 1008 srservice - ok 23:24:52.0234 1008 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys 23:24:52.0250 1008 Srv - ok 23:24:52.0312 1008 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 23:24:52.0312 1008 SSDPSRV - ok 23:24:52.0390 1008 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll 23:24:52.0390 1008 stisvc - ok 23:24:52.0437 1008 [ C86A229BB5CB5DC47498B2C530A9458E ] SWDUMon C:\WINDOWS\system32\DRIVERS\SWDUMon.sys 23:24:52.0437 1008 SWDUMon - ok 23:24:52.0500 1008 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys 23:24:52.0500 1008 swenum - ok 23:24:52.0531 1008 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys 23:24:52.0531 1008 swmidi - ok 23:24:52.0546 1008 SwPrv - ok 23:24:52.0578 1008 symc810 - ok 23:24:52.0593 1008 symc8xx - ok 23:24:52.0609 1008 sym_hi - ok 23:24:52.0625 1008 sym_u3 - ok 23:24:52.0640 1008 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys 23:24:52.0640 1008 sysaudio - ok 23:24:52.0671 1008 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe 23:24:52.0671 1008 SysmonLog - ok 23:24:52.0718 1008 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 23:24:52.0750 1008 TapiSrv - ok 23:24:52.0828 1008 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys 23:24:52.0828 1008 Tcpip - ok 23:24:52.0890 1008 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys 23:24:52.0890 1008 TDPIPE - ok 23:24:52.0937 1008 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys 23:24:52.0937 1008 TDTCP - ok 23:24:52.0984 1008 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys 23:24:52.0984 1008 TermDD - ok 23:24:53.0031 1008 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll 23:24:53.0031 1008 TermService - ok 23:24:53.0062 1008 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll 23:24:53.0062 1008 Themes - ok 23:24:53.0125 1008 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe 23:24:53.0125 1008 TlntSvr - ok 23:24:53.0140 1008 TosIde - ok 23:24:53.0156 1008 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll 23:24:53.0156 1008 TrkWks - ok 23:24:53.0187 1008 [ F2AEE22231046CAD8D2F94D2C0F9BEFB ] trufos C:\WINDOWS\system32\DRIVERS\trufos.sys 23:24:53.0203 1008 trufos - ok 23:24:53.0234 1008 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys 23:24:53.0250 1008 Udfs - ok 23:24:53.0265 1008 ultra - ok 23:24:53.0296 1008 [ 1977313E362C8732C1AF4D1BCB9C06B7 ] UMWdf C:\WINDOWS\system32\wdfmgr.exe 23:24:53.0296 1008 UMWdf - ok 23:24:53.0343 1008 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys 23:24:53.0359 1008 Update - ok 23:24:53.0406 1008 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll 23:24:53.0406 1008 upnphost - ok 23:24:53.0421 1008 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe 23:24:53.0421 1008 UPS - ok 23:24:53.0484 1008 [ 6E421CCC57059B0186C6259CA3B6DFC9 ] USBAAPL C:\WINDOWS\system32\Drivers\usbaapl.sys 23:24:53.0484 1008 USBAAPL - ok 23:24:53.0546 1008 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys 23:24:53.0546 1008 usbaudio - ok 23:24:53.0578 1008 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys 23:24:53.0578 1008 usbccgp - ok 23:24:53.0593 1008 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys 23:24:53.0593 1008 usbehci - ok 23:24:53.0609 1008 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys 23:24:53.0609 1008 usbhub - ok 23:24:53.0640 1008 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys 23:24:53.0640 1008 usbohci - ok 23:24:53.0703 1008 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys 23:24:53.0703 1008 usbprint - ok 23:24:53.0781 1008 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys 23:24:53.0781 1008 usbscan - ok 23:24:53.0843 1008 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 23:24:53.0843 1008 USBSTOR - ok 23:24:53.0890 1008 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys 23:24:53.0890 1008 VgaSave - ok 23:24:53.0906 1008 ViaIde - ok 23:24:53.0937 1008 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys 23:24:53.0937 1008 VolSnap - ok 23:24:54.0015 1008 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe 23:24:54.0031 1008 VSS - ok 23:24:54.0156 1008 [ 3AD1E72748978D8B0B3B674741E4C3E2 ] vToolbarUpdater14.2.0 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe 23:24:54.0171 1008 vToolbarUpdater14.2.0 - ok 23:24:54.0203 1008 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\system32\w32time.dll 23:24:54.0203 1008 W32Time - ok 23:24:54.0234 1008 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 23:24:54.0234 1008 Wanarp - ok 23:24:54.0250 1008 WDICA - ok 23:24:54.0328 1008 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys 23:24:54.0328 1008 wdmaud - ok 23:24:54.0390 1008 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll 23:24:54.0390 1008 WebClient - ok 23:24:54.0531 1008 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 23:24:54.0531 1008 winmgmt - ok 23:24:54.0609 1008 [ 6EAA72FD9EF993EC1FA9A06DE65105DA ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll 23:24:54.0609 1008 WmdmPmSN - ok 23:24:54.0671 1008 [ E76F8807070ED04E7408A86D6D3A6137 ] Wmi C:\WINDOWS\System32\advapi32.dll 23:24:54.0671 1008 Wmi - ok 23:24:54.0703 1008 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe 23:24:54.0703 1008 WmiApSrv - ok 23:24:54.0843 1008 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe 23:24:54.0859 1008 WPFFontCache_v0400 - ok 23:24:54.0921 1008 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys 23:24:54.0921 1008 WS2IFSL - ok 23:24:55.0000 1008 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll 23:24:55.0000 1008 wscsvc - ok 23:24:55.0062 1008 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll 23:24:55.0062 1008 wuauserv - ok 23:24:55.0156 1008 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll 23:24:55.0156 1008 WZCSVC - ok 23:24:55.0218 1008 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll 23:24:55.0218 1008 xmlprov - ok 23:24:55.0250 1008 ================ Scan global =============================== 23:24:55.0281 1008 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll 23:24:55.0359 1008 [ 69AE2B2E6968C316536E5B10B9702E63 ] C:\WINDOWS\system32\winsrv.dll 23:24:55.0375 1008 [ 69AE2B2E6968C316536E5B10B9702E63 ] C:\WINDOWS\system32\winsrv.dll 23:24:55.0406 1008 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe 23:24:55.0406 1008 [Global] - ok 23:24:55.0406 1008 ================ Scan MBR ================================== 23:24:55.0437 1008 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0 23:24:55.0671 1008 \Device\Harddisk0\DR0 - ok 23:24:55.0671 1008 ================ Scan VBR ================================== 23:24:55.0687 1008 [ A1D7E98F84DA4C1CF06CBD9D886AA93D ] \Device\Harddisk0\DR0\Partition1 23:24:55.0687 1008 \Device\Harddisk0\DR0\Partition1 - ok 23:24:55.0687 1008 ============================================================ 23:24:55.0687 1008 Scan finished 23:24:55.0687 1008 ============================================================ 23:24:55.0718 3484 Detected object count: 0 23:24:55.0718 3484 Actual detected object count: 0 23:25:01.0421 3776 Deinitialize success

Satchfan

Post #49May 16, 2013, 8:34 AM UTC

There is no indication of malware but this safe mode issue is strange.

Let’s try another check:

click on Start in the lower left of your screen and select Run
type cmd in the box and click OK
type chkdsk c: /f, (don't forget the spaces: there are two, chkdsk^c/:^/f) and hit Enter
type Y to agree to run at restart
type Exit and hit enter.

Now reboot your computer and let Chkdsk run.

====================================================

Run OTL

open OTL again, click on Extra Registry -> Use Safelist
then click Run Scan

Post back with the 2 logfiles

Satchfan

sinnead

Post #50May 18, 2013, 2:47 PM UTC

Sorry- got insanely busy again! Here are the logs:

OTL logfile created on: 18/05/2013 8:34:54 AM - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.79 Gb Available Physical Memory | 55.04% Memory free
3.29 Gb Paging File | 2.70 Gb Available in Paging File | 81.99% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 145.07 Gb Free Space | 62.30% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
PRC - [2013/05/14 17:06:20 | 000,235,728 | —- | M] (Bitdefender) – C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
PRC - [2013/05/14 17:06:14 | 000,027,136 | —- | M] (Bitdefender) – C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
PRC - [2013/05/11 21:08:20 | 000,216,968 | —- | M] (Google Inc.) – C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Fix it Center\Matsvc.exe
PRC - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) – C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2013/05/14 17:06:17 | 000,093,040 | —- | M] () – C:\Program Files\Bitdefender\Antivirus Free Edition\bdmetrics.dll
MOD - [2013/05/14 17:06:14 | 000,508,136 | —- | M] () – C:\Program Files\Bitdefender\Antivirus Free Edition\sqlite3.dll
MOD - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
MOD - [2013/01/02 00:49:10 | 001,292,288 | —- | M] () – C:\WINDOWS\system32\quartz.dll
MOD - [2012/09/07 17:09:26 | 000,394,408 | —- | M] () – \\?\C:\Program Files\Bitdefender\Antivirus Free Edition\ThreatScanner\trufos.dll
MOD - [2012/02/16 04:59:28 | 001,781,760 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\4e7e9b07db31551c887d5c80552e3885\System.Xaml.ni.dll
MOD - [2012/02/16 04:13:10 | 013,137,920 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\ae33325d95b86d18adfe3b2b76deb55e\System.Windows.Forms.ni.dll
MOD - [2012/02/16 04:12:28 | 001,652,736 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\2f6d092e53fd5fe14e5a2e6ba7055cef\System.Drawing.ni.dll
MOD - [2012/02/16 04:11:52 | 000,450,560 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\72202ed003d4162846b9120ff75c1dae\PresentationFramework.Aero.ni.dll
MOD - [2012/02/16 04:11:28 | 017,671,168 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\8a2a9287a39972a655346abcb1453fc9\PresentationFramework.ni.dll
MOD - [2012/02/16 04:10:11 | 011,106,816 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\980130114bd7169de0d4f68bbc6d8559\PresentationCore.ni.dll
MOD - [2012/02/16 04:09:39 | 003,798,016 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\d99143e827c2bc46871c85a04a0a3313\WindowsBase.ni.dll
MOD - [2012/02/16 04:09:24 | 005,618,176 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\fd4bcc08668bb561ba59e57a30de6bcf\System.Xml.ni.dll
MOD - [2012/02/16 04:09:09 | 000,284,160 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\45fcd44e26075d44224fbc9a3ce4038c\PresentationFramework.Classic.ni.dll
MOD - [2012/02/16 04:09:05 | 009,090,560 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\2f52fc9cf3baf5181d1897788d9678f4\System.ni.dll
MOD - [2011/10/14 03:08:10 | 014,408,704 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\f3b6f64941ee3b90d6abb16e415ceb3b\mscorlib.ni.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/04/13 18:11:59 | 000,014,336 | —- | M] () – C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 18:11:51 | 000,059,904 | —- | M] () – C:\WINDOWS\system32\devenum.dll
MOD - [2006/03/15 06:00:00 | 000,268,288 | —- | M] () – C:\WINDOWS\system32\sbe.dll

========== Services (SafeList) ==========

SRV - [2013/05/16 05:06:22 | 000,256,904 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/14 17:06:14 | 000,027,136 | —- | M] (Bitdefender) [Auto | Running] – C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe – (gzserv)
SRV - [2013/04/06 16:32:02 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () [Auto | Running] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe – (vToolbarUpdater14.2.0)
SRV - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe – (MBAMScheduler)
SRV - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files\Microsoft Fix it Center\Matsvc.exe – (MatSvc)
SRV - [2010/03/18 11:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Sherry\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2013/05/14 17:07:41 | 000,148,600 | —- | M] (Bitdefender SRL) [Kernel | System | Running] – C:\Program Files\Bitdefender\Antivirus Free Edition\bdftdif.sys – (bdftdif)
DRV - [2013/05/14 17:07:28 | 000,633,344 | —- | M] (BitDefender) [File_System | Boot | Running] – C:\WINDOWS\system32\drivers\avc3.sys – (avc3)
DRV - [2013/05/14 17:07:26 | 000,486,536 | —- | M] (BitDefender) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\avckf.sys – (avckf)
DRV - [2013/05/14 17:07:24 | 000,164,952 | —- | M] (BitDefender LLC) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\gzflt.sys – (gzflt)
DRV - [2013/04/27 09:35:23 | 000,013,024 | —- | M] () [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\SWDUMon.sys – (SWDUMon)
DRV - [2013/04/05 10:01:27 | 000,033,112 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtpx86.sys – (avgtp)
DRV - [2013/04/04 14:50:32 | 000,022,856 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2012/10/31 12:13:10 | 000,343,456 | —- | M] (BitDefender S.R.L.) [File_System | Boot | Running] – C:\WINDOWS\system32\drivers\trufos.sys – (trufos)
DRV - [2012/10/02 11:31:18 | 000,134,136 | —- | M] (BitDefender LLC) [Kernel | System | Running] – C:\Program Files\Bitdefender\Antivirus Free Edition\bdselfpr.sys – (bdselfpr)
DRV - [2011/07/07 17:39:06 | 006,367,848 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2010/08/05 02:34:34 | 001,210,624 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaud.sys – (ksaud)
DRV - [2010/07/24 00:54:26 | 002,016,640 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaudfl.sys – (ksaudfl)
DRV - [2009/11/18 07:17:00 | 001,395,800 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Monfilt.sys – (Monfilt)
DRV - [2009/11/18 07:16:00 | 001,691,480 | —- | M] (Creative) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Ambfilt.sys – (Ambfilt)
DRV - [2006/06/16 22:09:48 | 001,611,776 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2004/08/03 16:31:34 | 000,020,992 | —- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RTL8139.sys – (rtl8139)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B0 15 FE 87 F9 2B CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5: C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2011/04/17 16:43:48 | 000,000,000 | —D | M]

[2011/05/12 15:40:06 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/11/04 21:22:58 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/02 21:21:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/12/04 21:43:54 | 000,151,552 | —- | M] (PopCap Games) – C:\Program Files\mozilla firefox\plugins\nppopcaploader.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{g
oogle:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{
google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: RocketLife Secure Plug-In Layer (Enabled) = C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.8.109_0\
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.8.109_0\

O1 HOSTS File: ([2013/05/04 09:54:12 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos-beta/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareup…13/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave.com/content/bejeweled…ploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareup…015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareup…30321/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22C0B27B-0C75-4F33-8875-CAC5AA0C595B}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/26 19:25:31 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/05/18 08:34:18 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/15 23:21:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Desktop\tdsskiller
[2013/05/14 23:20:27 | 000,000,000 | —D | C] – C:\ComboFix
[2013/05/14 17:08:05 | 000,242,504 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\avchv.sys
[2013/05/14 17:07:28 | 000,633,344 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\avc3.sys
[2013/05/14 17:07:26 | 000,486,536 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\avckf.sys
[2013/05/14 17:07:24 | 000,164,952 | —- | C] (BitDefender LLC) – C:\WINDOWS\System32\drivers\gzflt.sys
[2013/05/13 07:13:55 | 005,066,131 | R— | C] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:02:13 | 000,000,000 | —D | C] – C:\Program Files\Safari
[2013/05/05 15:13:18 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2013/05/05 15:13:13 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2013/05/05 15:13:01 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2013/05/05 15:12:40 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2013/05/05 15:12:34 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2013/05/05 15:12:32 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2013/05/05 15:12:27 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2013/05/05 15:12:25 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2013/05/05 15:12:23 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2013/05/05 15:12:04 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2013/05/05 15:12:01 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2013/05/05 15:11:56 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2013/05/05 15:11:41 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2013/05/05 15:11:34 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2013/05/05 15:11:28 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2013/05/05 15:11:16 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2013/05/05 15:11:14 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2013/05/05 15:11:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2013/05/05 15:11:08 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2013/05/05 15:11:03 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2013/05/05 15:11:01 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2013/05/05 15:11:00 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2013/05/05 15:10:57 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2013/05/05 15:10:55 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2013/05/05 15:10:54 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2013/05/05 15:10:48 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2013/05/05 15:10:43 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2013/05/05 15:10:37 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2013/05/05 15:10:25 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2013/05/05 15:10:19 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2013/05/05 15:10:13 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2013/05/05 15:10:07 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2013/05/05 15:10:02 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2013/05/05 15:10:01 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2013/05/05 15:09:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2013/05/05 15:09:51 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2013/05/05 15:09:45 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2013/05/05 15:09:40 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2013/05/05 15:09:35 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2013/05/05 15:09:29 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2013/05/05 15:09:24 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2013/05/05 15:09:19 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2013/05/05 15:09:14 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2013/05/05 15:09:11 | 000,020,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbuhci.sys
[2013/05/05 15:09:09 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2013/05/05 15:09:05 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2013/05/05 15:08:56 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2013/05/05 15:08:51 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2013/05/05 15:08:46 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2013/05/05 15:08:41 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2013/05/05 15:08:36 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2013/05/05 15:08:31 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2013/05/05 15:08:27 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2013/05/05 15:08:22 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2013/05/05 15:08:17 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2013/05/05 15:08:11 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2013/05/05 15:08:06 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2013/05/05 15:08:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2013/05/05 15:07:46 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2013/05/05 15:07:41 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2013/05/05 15:07:36 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2013/05/05 15:07:31 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2013/05/05 15:07:26 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2013/05/05 15:07:21 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2013/05/05 15:07:16 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2013/05/05 15:07:11 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2013/05/05 15:07:09 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2013/05/05 15:07:04 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2013/05/05 15:06:54 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2013/05/05 15:06:49 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2013/05/05 15:06:44 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2013/05/05 15:06:39 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2013/05/05 15:06:32 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2013/05/05 15:06:25 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2013/05/05 15:06:20 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2013/05/05 15:06:18 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2013/05/05 15:06:10 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2013/05/05 15:06:06 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2013/05/05 15:05:55 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2013/05/05 15:05:49 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2013/05/05 15:05:44 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2013/05/05 15:05:39 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2013/05/05 15:05:30 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2013/05/05 15:05:26 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2013/05/05 15:05:22 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2013/05/05 15:05:17 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2013/05/05 15:05:12 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2013/05/05 15:05:08 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2013/05/05 15:05:03 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2013/05/05 15:04:59 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2013/05/05 15:04:54 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2013/05/05 15:04:50 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2013/05/05 15:04:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2013/05/05 15:04:42 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2013/05/05 15:04:37 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2013/05/05 15:04:33 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2013/05/05 15:04:29 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2013/05/05 15:04:23 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2013/05/05 15:04:14 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2013/05/05 15:04:06 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2013/05/05 15:03:58 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2013/05/05 15:03:50 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2013/05/05 15:03:46 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2013/05/05 15:03:41 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2013/05/05 15:03:36 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2013/05/05 15:03:32 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2013/05/05 15:03:27 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2013/05/05 15:03:23 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2013/05/05 15:03:18 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2013/05/05 15:03:17 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2013/05/05 15:03:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2013/05/05 15:02:52 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2013/05/05 15:02:45 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2013/05/05 15:02:39 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2013/05/05 15:02:34 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2013/05/05 15:02:30 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2013/05/05 15:02:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2013/05/05 15:02:24 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2013/05/05 15:02:22 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2013/05/05 15:02:17 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2013/05/05 15:02:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2013/05/05 15:02:07 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2013/05/05 15:02:01 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2013/05/05 15:01:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2013/05/05 15:01:51 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2013/05/05 15:01:47 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2013/05/05 15:01:42 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2013/05/05 15:01:38 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2013/05/05 15:01:34 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2013/05/05 15:01:32 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2013/05/05 15:01:28 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2013/05/05 15:01:24 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2013/05/05 15:01:19 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2013/05/05 15:01:15 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2013/05/05 15:01:10 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2013/05/05 15:01:05 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2013/05/05 15:00:51 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2013/05/05 15:00:47 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2013/05/05 15:00:42 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2013/05/05 15:00:38 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2013/05/05 15:00:34 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2013/05/05 15:00:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2013/05/05 15:00:21 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2013/05/05 15:00:12 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2013/05/05 15:00:10 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2013/05/05 15:00:06 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2013/05/05 14:59:57 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2013/05/05 14:59:52 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2013/05/05 14:59:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2013/05/05 14:59:42 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2013/05/05 14:59:39 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2013/05/05 14:59:35 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2013/05/05 14:59:27 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2013/05/05 14:59:23 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2013/05/05 14:59:19 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2013/05/05 14:59:14 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2013/05/05 14:59:10 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2013/05/05 14:59:06 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2013/05/05 14:59:02 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2013/05/05 14:58:57 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2013/05/05 14:58:53 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2013/05/05 14:58:49 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2013/05/05 14:58:45 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2013/05/05 14:58:40 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2013/05/05 14:58:34 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2013/05/05 14:58:30 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2013/05/05 14:58:28 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2013/05/05 14:58:27 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2013/05/05 14:58:19 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2013/05/05 14:58:14 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2013/05/05 14:58:05 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2013/05/05 14:57:59 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2013/05/05 14:57:55 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2013/05/05 14:57:49 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2013/05/05 14:57:43 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2013/05/05 14:57:27 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2013/05/05 14:57:21 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2013/05/05 14:57:17 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2013/05/05 14:57:12 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2013/05/05 14:57:07 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2013/05/05 14:56:55 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2013/05/05 14:56:51 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2013/05/05 14:56:47 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2013/05/05 14:56:43 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2013/05/05 14:56:39 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2013/05/05 14:56:37 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2013/05/05 14:56:31 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2013/05/05 14:56:27 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2013/05/05 14:56:23 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2013/05/05 14:56:21 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2013/05/05 14:56:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2013/05/05 14:56:11 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2013/05/05 14:56:05 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2013/05/05 14:55:59 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2013/05/05 14:55:54 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2013/05/05 14:55:53 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2013/05/05 14:55:48 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2013/05/05 14:55:37 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2013/05/05 14:55:33 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2013/05/05 14:55:29 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2013/05/05 14:55:25 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2013/05/05 14:55:20 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2013/05/05 14:55:16 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2013/05/05 14:55:12 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2013/05/05 14:55:10 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2013/05/05 14:55:09 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2013/05/05 14:55:07 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2013/05/05 14:55:06 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2013/05/05 14:55:01 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2013/05/05 14:54:57 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2013/05/05 14:54:55 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2013/05/05 14:54:51 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2013/05/05 14:54:46 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2013/05/05 14:54:42 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2013/05/05 14:54:38 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2013/05/05 14:54:34 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2013/05/05 14:54:32 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2013/05/05 14:54:28 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2013/05/05 14:54:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2013/05/05 14:54:11 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2013/05/05 14:54:06 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2013/05/05 14:54:02 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2013/05/05 14:53:58 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2013/05/05 14:53:54 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2013/05/05 14:53:50 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2013/05/05 14:53:46 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2013/05/05 14:53:42 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2013/05/05 14:53:38 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2013/05/05 14:53:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2013/05/05 14:53:29 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2013/05/05 14:53:25 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2013/05/05 14:53:21 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2013/05/05 14:53:16 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2013/05/05 14:53:12 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2013/05/05 14:53:02 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2013/05/05 14:52:58 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2013/05/05 14:52:48 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2013/05/05 14:52:42 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2013/05/05 14:52:38 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2013/05/05 14:52:37 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2013/05/05 14:52:29 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2013/05/05 14:52:25 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2013/05/05 14:52:19 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2013/05/05 14:52:14 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2013/05/05 14:52:07 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2013/05/05 14:52:01 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2013/05/05 14:51:57 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2013/05/05 14:51:53 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2013/05/05 14:51:52 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2013/05/05 14:51:48 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2013/05/05 14:51:44 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2013/05/05 14:51:40 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2013/05/05 14:51:37 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2013/05/05 14:51:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2013/05/05 14:51:29 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2013/05/05 14:51:25 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2013/05/05 14:51:21 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2013/05/05 14:51:17 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2013/05/05 14:51:13 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2013/05/05 14:51:09 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2013/05/05 14:51:05 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2013/05/05 14:51:01 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2013/05/05 14:50:57 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2013/05/05 14:50:52 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2013/05/05 14:50:41 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2013/05/05 14:50:40 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2013/05/05 14:50:33 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2013/05/05 14:50:22 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2013/05/05 14:50:20 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2013/05/05 14:50:03 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2013/05/05 14:49:59 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2013/05/05 14:49:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2013/05/05 14:49:46 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2013/05/05 14:49:27 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2013/05/05 14:49:20 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2013/05/05 14:49:11 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2013/05/05 14:49:05 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2013/05/05 14:49:01 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2013/05/05 14:48:57 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2013/05/05 14:48:53 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2013/05/05 14:48:49 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2013/05/05 14:48:44 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2013/05/05 14:48:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2013/05/05 14:48:32 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2013/05/05 14:48:28 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2013/05/05 14:48:25 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2013/05/05 14:48:20 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2013/05/05 14:48:20 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2013/05/05 14:48:16 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2013/05/05 14:48:12 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2013/05/05 14:48:11 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2013/05/05 14:48:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2013/05/05 14:48:07 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2013/05/05 14:48:06 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2013/05/05 14:48:03 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2013/05/05 14:47:56 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2013/05/05 14:47:47 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2013/05/05 14:47:44 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2013/05/05 14:47:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2013/05/05 14:47:36 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2013/05/05 14:47:35 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2013/05/05 14:47:31 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2013/05/05 14:47:26 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2013/05/05 14:47:26 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2013/05/05 14:47:25 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2013/05/05 14:47:24 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2013/05/05 14:47:19 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2013/05/05 14:47:15 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2013/05/05 14:47:15 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2013/05/05 14:46:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2013/05/05 14:46:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2013/05/05 14:46:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2013/05/05 14:46:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2013/05/05 14:46:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2013/05/05 14:46:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2013/05/05 14:46:20 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2013/05/05 14:46:17 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2013/05/05 14:46:16 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2013/05/05 14:46:13 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2013/05/05 14:46:12 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2013/05/05 14:46:11 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2013/05/05 14:46:09 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2013/05/05 14:46:02 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2013/05/05 14:45:58 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2013/05/05 14:45:55 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2013/05/05 14:45:54 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2013/05/05 14:45:50 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2013/05/05 14:45:47 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2013/05/05 14:45:07 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2013/05/05 14:45:04 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2013/05/05 14:45:00 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2013/05/05 14:44:57 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2013/05/05 14:44:53 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2013/05/05 14:44:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2013/05/05 14:44:46 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2013/05/05 14:44:43 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2013/05/05 14:44:40 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2013/05/05 14:44:36 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2013/05/05 14:44:33 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2013/05/05 14:44:30 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2013/05/05 14:44:26 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2013/05/05 14:44:23 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2013/05/05 14:44:20 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2013/05/05 14:44:19 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2013/05/05 14:44:16 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2013/05/05 14:44:12 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2013/05/05 14:44:12 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2013/05/05 14:44:11 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2013/05/05 14:43:45 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2013/05/05 14:43:41 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2013/05/05 14:43:38 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2013/05/05 14:43:35 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2013/05/05 14:43:31 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2013/05/05 14:43:28 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2013/05/05 14:43:25 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2013/05/05 14:43:21 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2013/05/05 14:43:18 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2013/05/05 14:43:15 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2013/05/05 14:43:11 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2013/05/05 14:43:08 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2013/05/05 14:43:04 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2013/05/05 14:43:00 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2013/05/05 14:42:56 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2013/05/05 14:42:53 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2013/05/05 14:42:49 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2013/05/05 14:42:46 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2013/05/05 14:42:43 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2013/05/05 14:42:40 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2013/05/05 14:42:34 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2013/05/05 14:42:27 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2013/05/05 14:42:21 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2013/05/05 14:42:15 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2013/05/05 14:42:09 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2013/05/05 14:42:04 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2013/05/05 14:42:00 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2013/05/05 14:42:00 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2013/05/05 14:41:54 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2013/05/05 14:41:51 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2013/05/05 14:41:48 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2013/05/05 14:41:44 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2013/05/05 14:41:41 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2013/05/05 14:41:40 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2013/05/05 14:41:36 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2013/05/05 14:41:33 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2013/05/05 14:41:31 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2013/05/05 14:41:28 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2013/05/05 14:41:25 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2013/05/05 14:41:13 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2013/05/05 14:41:10 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2013/05/05 14:41:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2013/05/05 14:41:01 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2013/05/05 14:40:58 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2013/05/05 14:40:55 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2013/05/05 14:40:53 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2013/05/05 14:40:50 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2013/05/05 14:40:44 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2013/05/05 14:40:36 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2013/05/05 14:40:31 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2013/05/05 14:40:29 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2013/05/05 14:40:26 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2013/05/05 14:40:24 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2013/05/05 14:40:19 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2013/05/05 14:40:16 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2013/05/05 14:40:09 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2013/05/05 14:40:07 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2013/05/05 14:40:04 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2013/05/05 14:39:58 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2013/05/05 14:39:58 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2013/05/05 14:39:55 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2013/05/05 14:39:51 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2013/05/05 14:39:49 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2013/05/05 14:39:46 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2013/05/05 14:39:44 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2013/05/05 14:39:41 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2013/05/05 14:39:39 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2013/05/05 14:39:36 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2013/05/05 14:39:34 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2013/05/05 14:39:31 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2013/05/05 14:39:28 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2013/05/05 14:39:26 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2013/05/05 14:39:23 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2013/05/05 14:39:21 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2013/05/05 14:39:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2013/05/05 14:39:17 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2013/05/05 14:39:15 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2013/05/05 14:39:09 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2013/05/05 14:39:07 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2013/05/05 14:39:05 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2013/05/05 14:39:04 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2013/05/05 14:39:02 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2013/05/05 14:39:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2013/05/05 14:38:58 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2013/05/05 14:38:56 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2013/05/05 14:38:55 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2013/05/05 14:38:53 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2013/05/05 14:38:51 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2013/05/05 14:38:49 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2013/05/05 14:38:47 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2013/05/05 14:38:46 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2013/05/05 14:38:43 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2013/05/05 14:38:41 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2013/05/05 14:38:40 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2013/05/05 14:38:33 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2013/05/05 14:38:31 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2013/05/05 14:38:29 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2013/05/05 14:38:23 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2013/05/05 14:38:21 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2013/05/05 14:38:17 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2013/05/05 14:38:13 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2013/05/05 14:38:11 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2013/05/05 14:38:10 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2013/05/05 14:38:08 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2013/05/05 14:38:07 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2013/05/05 14:37:59 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2013/05/05 14:37:59 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2013/05/05 14:37:57 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2013/05/05 14:37:55 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2013/05/05 14:37:49 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2013/05/05 14:37:47 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2013/05/05 14:37:45 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2013/05/05 14:37:44 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2013/05/05 14:37:40 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2013/05/05 14:37:39 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2013/05/05 14:37:37 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2013/05/05 14:37:36 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2013/05/05 14:37:34 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2013/05/05 14:37:33 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2013/05/05 14:37:31 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2013/05/05 14:37:29 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2013/05/05 14:37:28 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2013/05/05 14:37:26 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2013/05/05 14:37:25 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2013/05/05 14:37:23 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2013/05/05 14:37:21 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2013/05/05 14:37:20 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2013/05/05 14:37:16 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2013/05/05 14:37:14 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2013/05/05 14:37:12 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2013/05/05 14:37:10 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2013/05/05 14:37:09 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2013/05/05 14:37:07 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2013/05/05 14:37:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2013/05/05 14:37:03 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2013/05/05 14:37:00 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2013/05/05 14:36:59 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2013/05/05 14:36:57 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2013/05/05 14:36:55 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2013/05/05 14:36:54 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2013/05/05 14:36:50 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2013/05/05 14:36:48 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2013/05/05 14:36:44 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2013/05/05 14:36:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2013/05/05 14:36:41 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2013/05/05 14:36:40 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2013/05/05 14:36:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2013/05/05 14:36:37 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2013/05/05 14:36:35 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2013/05/05 14:36:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2013/05/05 14:36:32 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2013/05/05 14:36:32 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2013/05/05 14:36:30 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2013/05/05 14:36:29 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2013/05/05 14:36:27 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2013/05/05 14:36:26 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2013/05/05 14:36:24 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2013/05/05 14:36:23 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2013/05/05 14:36:21 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2013/05/05 14:36:20 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2013/05/05 14:36:19 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2013/05/05 14:36:17 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2013/05/05 14:36:16 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2013/05/05 14:36:12 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2013/05/05 14:36:11 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2013/05/05 14:36:09 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2013/05/05 14:36:07 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2013/05/05 14:36:06 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2013/05/05 14:36:04 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2013/05/05 14:35:57 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2013/05/05 14:35:54 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2013/05/05 14:35:53 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2013/05/05 14:35:49 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2013/05/05 14:35:48 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2013/05/05 14:35:47 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2013/05/05 14:35:45 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2013/05/05 14:35:44 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2013/05/05 14:35:43 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2013/05/05 14:35:41 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2013/05/05 14:35:40 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2013/05/05 14:35:37 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2013/05/05 14:35:36 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2013/05/05 14:35:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2013/05/05 14:35:25 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2013/05/05 14:35:24 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2013/05/05 14:35:23 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2013/05/05 14:35:22 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2013/05/05 14:35:21 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2013/05/05 14:35:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2013/05/05 14:35:18 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2013/05/05 14:35:17 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2013/05/05 14:35:16 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2013/05/05 14:35:15 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2013/05/05 14:35:13 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2013/05/05 14:35:10 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2013/05/05 14:35:09 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2013/05/05 14:35:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2013/05/05 14:35:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2013/05/05 14:35:05 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2013/05/05 14:35:04 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2013/05/05 14:35:03 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2013/05/05 14:35:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2013/05/05 14:35:01 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2013/05/05 14:35:00 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2013/05/05 14:34:59 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2013/05/05 14:34:22 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2013/05/05 14:34:20 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2013/05/05 14:34:19 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2013/05/05 14:34:18 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2013/05/05 14:34:17 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2013/05/05 14:34:16 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2013/05/05 14:34:15 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2013/05/05 14:34:14 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2013/05/05 14:34:13 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2013/05/05 14:34:11 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2013/05/05 14:34:10 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2013/05/05 14:34:09 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2013/05/05 14:34:09 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2013/05/05 14:34:08 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2013/05/05 14:34:07 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2013/05/05 14:34:06 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2013/05/05 14:34:05 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2013/05/05 14:34:04 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2013/05/05 14:34:04 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2013/05/05 14:34:03 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2013/05/05 14:33:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2013/05/05 14:33:54 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2013/05/05 14:33:53 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2013/05/05 14:33:53 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2013/05/05 14:33:52 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2013/05/05 14:33:51 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2013/05/05 14:33:50 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2013/05/05 14:33:48 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2013/05/05 14:33:47 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2013/05/05 14:33:47 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2013/05/05 14:33:46 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2013/05/05 14:33:45 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2013/05/05 14:33:45 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2013/05/05 14:33:43 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2013/05/05 14:33:43 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2013/05/05 14:33:42 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2013/05/05 14:33:40 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2013/05/05 14:33:39 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2013/05/05 14:33:38 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2013/05/05 14:33:26 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2013/05/05 14:33:25 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2013/05/05 14:33:22 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2013/05/05 14:33:22 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2013/05/05 14:33:21 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2013/05/05 14:33:20 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2013/05/05 14:33:20 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2013/05/05 14:33:19 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2013/05/05 14:33:18 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2013/05/05 14:33:13 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2013/05/05 14:33:12 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2013/05/05 14:33:06 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2013/05/05 14:33:05 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2013/05/05 14:33:04 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2013/05/05 14:33:03 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2013/05/05 14:33:00 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2013/05/05 14:32:59 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2013/05/05 14:32:58 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2013/05/05 14:32:57 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2013/05/05 14:32:56 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2013/05/05 14:32:56 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2013/05/05 14:32:55 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2013/05/05 14:32:54 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2013/05/05 14:32:53 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2013/05/05 14:32:53 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2013/05/05 14:32:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2013/05/05 14:32:42 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2013/05/05 14:32:42 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2013/05/05 14:32:40 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2013/05/05 14:32:39 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2013/05/05 14:32:38 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2013/05/05 14:32:38 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2013/05/05 14:32:37 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2013/05/05 14:32:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2013/05/05 14:32:34 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2013/05/05 14:32:33 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2013/05/05 14:32:33 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2013/05/05 14:32:32 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2013/05/05 14:32:31 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2013/05/05 14:32:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2013/05/05 14:32:30 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2013/05/05 14:32:30 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2013/05/05 14:32:29 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2013/05/05 14:32:28 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2013/05/05 14:32:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2013/05/05 14:32:27 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2013/05/05 14:32:26 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2013/05/05 14:32:26 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2013/05/05 14:32:25 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2013/05/05 14:32:25 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2013/05/05 14:31:50 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2013/05/04 09:39:18 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/05/04 09:34:38 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/05/04 09:34:38 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/05/04 09:34:38 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/05/04 09:34:38 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/05/04 09:34:09 | 000,000,000 | —D | C] – C:\Qoobox
[2013/05/04 09:33:39 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2013/04/27 10:34:46 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Application Data\QuickScan
[2013/04/27 10:28:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus Free Edition
[2013/04/27 10:25:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Application Data\QuickScan
[2013/04/27 10:25:07 | 000,000,000 | —D | C] – C:\Program Files\Bitdefender
[2013/04/27 10:25:04 | 000,343,456 | —- | C] (BitDefender S.R.L.) – C:\WINDOWS\System32\drivers\trufos.sys
[2013/04/27 09:11:47 | 000,000,000 | —D | C] – C:\WINDOWS\CSC
[2013/04/23 18:53:10 | 000,000,000 | —D | C] – C:\_OTL

========== Files - Modified Within 30 Days ==========

[2013/05/18 08:45:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004UA.job
[2013/05/18 08:43:10 | 000,000,492 | —- | M] () – C:\WINDOWS\tasks\HP Photo Creations Communicator.job
[2013/05/18 08:42:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1E190112-6B6B-4844-9261-1AEE0E9744AB}.job
[2013/05/18 08:40:00 | 000,000,982 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003UA.job
[2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/18 08:27:07 | 000,000,616 | -H– | M] () – C:\WINDOWS\tasks\ConfigExec.job
[2013/05/18 08:26:16 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/18 08:26:09 | 000,000,280 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/18 08:26:09 | 000,000,278 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/18 08:25:38 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/05/18 08:25:26 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/05/18 08:05:00 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/05/18 07:38:01 | 000,000,580 | -H– | M] () – C:\WINDOWS\tasks\DataUpload.job
[2013/05/18 07:13:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/18 02:00:19 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1C1E1B38-3B03-4225-B51C-915EED3A727E}.job
[2013/05/17 20:11:22 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2013/05/17 11:58:00 | 000,000,820 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2013/05/17 10:45:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004Core.job
[2013/05/17 10:40:00 | 000,000,930 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003Core.job
[2013/05/17 07:47:00 | 000,000,286 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/16 05:06:22 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/05/16 05:06:22 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/05/16 03:30:11 | 000,894,256 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/16 03:10:50 | 000,505,196 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/05/16 03:10:50 | 000,088,458 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/05/16 03:07:23 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2013/05/15 23:21:21 | 002,218,636 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\tdsskiller.zip
[2013/05/14 23:19:14 | 005,066,131 | R— | M] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/14 17:08:06 | 000,242,504 | —- | M] (BitDefender) – C:\WINDOWS\System32\drivers\avchv.sys
[2013/05/14 17:07:28 | 000,633,344 | —- | M] (BitDefender) – C:\WINDOWS\System32\drivers\avc3.sys
[2013/05/14 17:07:26 | 000,486,536 | —- | M] (BitDefender) – C:\WINDOWS\System32\drivers\avckf.sys
[2013/05/14 17:07:24 | 000,164,952 | —- | M] (BitDefender LLC) – C:\WINDOWS\System32\drivers\gzflt.sys
[2013/05/11 18:08:00 | 000,000,288 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/10 09:42:34 | 000,002,187 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/08 09:03:22 | 000,001,854 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/06 22:27:31 | 006,015,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/05/06 15:30:02 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/05/05 15:40:47 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/04 09:54:12 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/05/04 09:39:25 | 000,000,325 | RHS- | M] () – C:\boot.ini
[2013/04/29 07:40:25 | 000,000,209 | —- | M] () – C:\Boot.bak
[2013/04/29 07:38:43 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013/04/27 09:35:23 | 000,013,024 | —- | M] () – C:\WINDOWS\System32\drivers\SWDUMon.sys

========== Files Created - No Company Name ==========

[2013/05/15 23:21:20 | 002,218,636 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\tdsskiller.zip
[2013/05/08 09:03:22 | 000,002,187 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/08 09:03:22 | 000,001,854 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/08 09:03:21 | 000,001,854 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk
[2013/05/05 15:40:27 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/05 15:13:12 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2013/05/05 15:13:06 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2013/05/05 14:56:15 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2013/05/05 14:56:10 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2013/05/05 14:49:58 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2013/05/05 14:42:37 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2013/05/05 14:42:30 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2013/05/05 14:42:24 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2013/05/05 14:42:18 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2013/05/05 14:42:12 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2013/05/05 14:37:53 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2013/05/05 14:37:52 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2013/05/05 14:37:50 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2013/05/05 14:33:32 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2013/05/05 14:33:31 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2013/05/05 14:33:30 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2013/05/05 14:33:29 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2013/05/05 14:33:29 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2013/05/05 14:33:28 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2013/05/05 14:33:27 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2013/05/05 14:33:26 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2013/05/05 14:33:24 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2013/05/05 14:33:18 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2013/05/04 09:39:25 | 000,000,209 | —- | C] () – C:\Boot.bak
[2013/05/04 09:39:21 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/05/04 09:34:38 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/05/04 09:34:38 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/05/04 09:34:38 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/05/04 09:34:38 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/05/04 09:34:38 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/05/01 07:25:54 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1004-0.dat
[2013/05/01 07:25:51 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1003-0.dat
[2013/04/30 17:45:34 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/04/06 16:35:58 | 000,034,637 | R— | C] () – C:\WINDOWS\System32\ksaud.ini
[2013/04/06 16:34:03 | 000,044,795 | R— | C] () – C:\WINDOWS\System32\kschimp.ini
[2013/04/06 16:34:02 | 000,271,360 | R— | C] () – C:\WINDOWS\System32\KSXPPI32.dll
[2013/03/28 16:17:50 | 000,013,024 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/09/02 15:54:21 | 000,027,520 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\dt.dat
[2012/02/15 20:35:29 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/12/04 14:05:47 | 000,000,013 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2011/11/26 14:30:05 | 000,000,064 | —- | C] () – C:\WINDOWS\GPlrLanc.dat
[2011/11/23 14:14:27 | 000,002,216 | —- | C] () – C:\Documents and Settings\Sherry\.recently-used.xbel
[2011/08/31 13:57:47 | 000,000,272 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\.backup.dm
[2011/08/09 22:19:09 | 000,163,118 | —- | C] () – C:\WINDOWS\hpoins28.dat
[2011/08/09 22:19:09 | 000,000,796 | —- | C] () – C:\WINDOWS\hpomdl28.dat
[2011/07/17 20:36:28 | 000,000,129 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences2.dat
[2011/07/17 20:34:48 | 000,000,035 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences.dat
[2011/05/29 17:58:48 | 000,145,412 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Analog Swirl
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\Sherry\Application Data\Ambience
[2010/11/04 20:14:36 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/03 16:09:31 | 000,059,904 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2010/10/26 19:19:20 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2008/04/13 18:12:05 | 001,499,136 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 06:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/13 18:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

OTL Extras logfile created on: 18/05/2013 8:34:54 AM - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.79 Gb Available Physical Memory | 55.04% Memory free
3.29 Gb Paging File | 2.70 Gb Available in Paging File | 81.99% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 145.07 Gb Free Space | 62.30% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Reg Error: Value error.] – Reg Error: Key error. File not found
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
https [open] – Reg Error: Key error.
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh – (iMesh, Inc)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote – (Microsoft Corporation)
"C:\Program Files\Messenger\msmsgs.exe" = C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger – (Microsoft Corporation)
"C:\Program Files\Google\Google Earth\client\googleearth.exe" = C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth – (Google)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service – (Apple Inc.)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh – (iMesh, Inc)
"C:\Program Files\AVG\AVG2012\avgmfapx.exe" = C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:AVG Installer
"C:\Documents and Settings\Sherry\Application Data\Dropbox\bin\Dropbox.exe" = C:\Documents and Settings\Sherry\Application Data\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox – (Dropbox, Inc.)
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup – (Microsoft Corporation)
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe" = C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit – (Apple Inc.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype – (Skype Technologies S.A.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{1D2AB963-7FF4-4446-BF22-822101AA550F}" = The Print Shop 22
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22466889-7642-488d-AA0E-F619704CF7AB}" = DeviceDiscovery
"{268278CF-FB69-4D98-B70E-BFEC1CDCA225}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40963A3A-734C-48A6-9DF6-230A5E8B56ED}" = RoE Power Tools
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Apple Application Support
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{587B7A6F-CA1F-4639-9083-16F9BB2363B4}" = Sound Blaster X-Fi Go! Pro
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}" = iMesh
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{355EFB0F-D42B-4E8F-9BC8-42513EC417D9}" =
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}" = MobileMe Control Panel
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BC6AB96-3613-4676-ABE8-4B7F55D7D8E7}" = DriverUpdate
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B2C61EBB-F47C-48ba-B375-27A40F8F48F7}" = HP Deskjet All-In-One Software 9.0
"{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min
"{B7588D45-AFDC-4C93-9E2E-A100F3554B64}" = Microsoft Fix it Center
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BE8A9C2C-8E41-445B-A746-BEB0B1F992F8}" = DJ_AIO_03_F4200_Software_Min
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3B6AEB1-390C-4792-8677-CD87F8B2C959}" = HP Deskjet F4200 All-In-One Driver 11.0 03
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C89B5E3A-690F-4CEE-909A-BF869E198B0A}" = Scan
"{C8B44566-839A-459C-A73D-49764CE216CC}" = ArcSoft Video Downloader
"{C8E95BF5-C07F-4D98-BB42-F58FC98BC03E}" = Google Apps
"{CA50045C-5119-48e7-9BA7-6B317379857A}" = DJ_AIO_Software
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E96B0085-6659-486b-A221-5042A042728D}" = Toolbox
"{E9757890-7EC5-46C8-99AB-B00F07B6525C}" = Nikon Transfer
"{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}" = Styler
"{ECB9C58E-C565-4683-9599-B72290BD3B25}" = QuickTax 2009
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{FA8A44D7-3E8A-4034-9C4F-088FA6B72BC4}" = HP Deskjet All-In-One Software 9.0
"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Alchemy" = Alchemy
"ATI Display Driver" = ATI Display Driver
"BitDefender Gonzales" = Bitdefender Antivirus Free Edition
"Bubble Town" = Bubble Town
"Chuzzle Deluxe" = Chuzzle Deluxe
"Coupon Printer for Windows5.0.0.1" = Coupon Printer for Windows
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Google Updater" = Google Updater
"Hardwood Euchre v2" = Hardwood Euchre
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Photo Creations" = HP Photo Creations
"HP Photosmart Essential" = HP Photosmart Essential 2.01
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPExtendedCapabilities" = HP Customer Participation Program 9.0
"iMesh" = iMesh
"ImgBurn" = ImgBurn
"IrfanView" = IrfanView (remove only)
"MahJong Suite_is1" = MahJong Suite 2012 v9.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"MSNINST" = MSN
"PopCap Browser Plugin" = PopCap Browser Plugin
"Pretty Good Solitaire_is1" = Pretty Good Solitaire version 12.4.0
"SysInfo" = Creative System Information
"WebPost" = Microsoft Web Publishing Wizard 1.52
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.11

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 18/05/2013 9:38:09 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 18/05/2013 9:38:09 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

Error - 18/05/2013 9:43:01 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 18/05/2013 9:43:01 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

Error - 18/05/2013 10:27:07 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262152
Description = The MATS service encountered a failure when loading SAP. hr=0x80040154

SAP folder: C:\Program Files\Microsoft Fix it Center\SAPFolder\Scheduled\DDA435FA-6E05-4DBF-80FE-C4EBE882E798.32

Error - 18/05/2013 10:27:07 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262159
Description = The scheduled MATS task encountered a failure when collecting configuration
data. hr=0x80040154 .

Error - 18/05/2013 10:27:08 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 18/05/2013 10:27:08 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

Error - 18/05/2013 10:32:03 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 18/05/2013 10:32:03 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

[ OSession Events ]
Error - 13/04/2011 3:43:35 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 38
seconds with 0 seconds of active time. This session ended with a crash.

Error - 19/04/2011 8:03:30 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 327
seconds with 240 seconds of active time. This session ended with a crash.

Error - 20/04/2011 9:42:34 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 276
seconds with 60 seconds of active time. This session ended with a crash.

Error - 22/04/2011 6:49:00 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 939
seconds with 480 seconds of active time. This session ended with a crash.

Error - 28/12/2011 2:09:58 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 56
seconds with 0 seconds of active time. This session ended with a crash.

Error - 06/04/2012 10:33:51 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 46
seconds with 0 seconds of active time. This session ended with a crash.

Error - 13/04/2012 1:41:57 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 84
seconds with 60 seconds of active time. This session ended with a crash.

Error - 07/05/2012 2:53:34 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 58
seconds with 0 seconds of active time. This session ended with a crash.

Error - 25/05/2012 2:52:39 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 81
seconds with 60 seconds of active time. This session ended with a crash.

Error - 16/05/2013 9:03:50 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 25
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 02/05/2013 7:44:19 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Java Quick Starter service terminated unexpectedly. It has done
this 1 time(s).

Error - 03/05/2013 7:16:04 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Ati HotKey Poller service terminated unexpectedly. It has done
this 1 time(s).

Error - 03/05/2013 7:16:04 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Creative Audio Service service terminated unexpectedly. It has
done this 1 time(s).

Error - 03/05/2013 7:16:05 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7031
Description = The Apple Mobile Device service terminated unexpectedly. It has done
this 1 time(s). The following corrective action will be taken in 60000 milliseconds:
Restart the service.

Error - 03/05/2013 7:16:05 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Bonjour Service service terminated unexpectedly. It has done
this 1 time(s).

Error - 03/05/2013 7:16:05 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The MBAMScheduler service terminated unexpectedly. It has done this
1 time(s).

Error - 03/05/2013 7:16:06 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The MBAMService service terminated unexpectedly. It has done this
1 time(s).

Error - 03/05/2013 7:16:11 PM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Java Quick Starter service terminated unexpectedly. It has done
this 1 time(s).

Error - 14/05/2013 9:14:53 PM | Computer Name = DA658A6C7 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.100 for the Network Card with network
address 00167617ABCA has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).

Error - 16/05/2013 5:32:33 AM | Computer Name = DA658A6C7 | Source = DCOM | ID = 10010
Description = The server {7F6316B4-4D69-4765-B0A3-B2598F2FA80A} did not register
with DCOM within the required timeout.

< End of report >

sinnead

Post #51May 18, 2013, 2:49 PM UTC

Quick question. Obviously I have no idea what the above scans mean, but I see Firefox listed in there? I'd removed that as a browser a long time ago because it kept corrupting on me. I liked it, but having to uninstall and reinstall 3 times in 3 months was too much.

Satchfan

Post #52May 18, 2013, 7:33 PM UTC

I see Firefox listed in there? I'd removed that as a browser a long time ago

That's not a problem and is something we can deal with.

You didn't tell me what happened when you ran chkdsk c: /f

Satchfan

Post #53May 19, 2013, 11:34 AM UTC

Note: If you have MalwareBytes Anti-Malware 1.6 or higher installed and are using the Pro version or trial version, please temporarily disable it for the duration of this fix as it may interfere with the successfully execution of the script below.

Run OTL

double click on the icon to run it.

copy/paste ALL the following text written inside the code box into the Custom Scans/Fixes box located at the bottom of OTL

:Services :OTL O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos-beta/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.) :Reg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AVG\AVG2012\avgmfapx.exe" =- "C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe" =- :Files C:\Program Files\AVG C:\Program Files\SweetIM ipconfig /release /c ipconfig /renew /c ipconfig /flushdns /c :Commands [purity] [emptytemp] [Reboot]

click the Run Fix button at the top
let the program run unhindered, reboot when it is done
please post the OTL fix log and new OTL log.

===================================================

Using Windows Explorer, (Windows key+E), please locate and open this file:

C:\Documents and Settings\Sherry\sfcdetails.tx

When you have located it, right-click on it and choose Open with > Notepad

Please post the contents in your reply with the OTL logs

Logs to include in the next post:

OTL fix log
New OTL log
sfcdetails.tx

Can you also tell me what happened with Chkdsk

Thanks

Satchfan

sinnead

Post #54May 20, 2013, 1:47 PM UTC

Meant to post yesterday, sorry. Chkdsk went well. Did it's thing on reboot, ran, and back to the blue intel screen. Tried running OTLfix and froze again. Exactly what happens is I copy/paste what you've given me in the appropriate space, click OTLfix. In the bottom of OTL it will say "killing processes-do not interrupt". All the icons on my desktop fade out, leaving just the background picture. That's where it stays. Sooner or later, when the moniter goes into sleep mode my desktop background will still be there, but nothing else. It's completely and totally frozen and has to be shut down with the switch at the back of the computer. How long, on average, does OTLfix take to run? Is 45m-1hr not long enough? Should I try running it and leaving it to run overnight?

Satchfan

Post #55May 20, 2013, 4:36 PM UTC

How long, on average, does OTLfix take to run?

It shouldn't take very long and if it's more than 15/20 minutes then it's not going to happen.

I asked you to include sfcdetails.tx found at C:\Documents and Settings\Sherry\sfcdetails.tx.

Please post that.

sinnead

Post #56May 20, 2013, 9:54 PM UTC

Missed that, sorry. I tried opening it but just got "Windows cannot open this file". Any idea how to get around it?

Satchfan

Post #57May 20, 2013, 10:25 PM UTC

OK, let's try to get a complete log from ComboFix.

Please download DeFogger to your desktop.

Double click DeFogger to run the tool.

The application window will appear
Click the Disable button to disable your CD Emulation drivers
Click Yes to continue
A 'Finished!' message will appear
Click OK
DeFogger will now ask to reboot the machine - click OK

IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.

Do not re-enable these drivers until otherwise instructed.

When you’ve done that, please run ComboFix again. If it still doesn't produce a log, try running it this way:

Click the Windows “Start” button, select Run, then copy/paste the following bolded text into the run box and then click OK

combofix /nombr

Satchfan

sinnead

Post #58May 21, 2013, 12:21 AM UTC

Ran defogger, it did everything it was supposed to until it came to the option to reboot. That never came up. So rebooted on my own.
Combofix did the same thing, hanging at the "producing log". However, log was in the computer.
I don't know if this is any help, but here is a video of what happens when I try to enter safe mode, so you know what I'm talking about: http://www.youtube.com/watch?v=P_725zUNZNg…xA&index=13

ComboFix 13-05-14.01 - Sherry 20/05/2013 17:58:59.4.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1470.811 [GMT -6:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
AV: Bitdefender Antivirus Free Edition *Disabled/Updated* {9488E0FA-F058-4673-850E-E755F112BABC}
FW: *Enabled* {9488E0FA-F058-4673-850E-E755F112BABC}
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}

((((((((((((((((((((((((( Files Created from 2013-04-21 to 2013-05-21 )))))))))))))))))))))))))))))))

2013-05-14 23:08:05 . 2013-05-14 23:08:06 242504 —-a-w- C:\WINDOWS\system32\drivers\avchv.sys
2013-05-14 23:07:28 . 2013-05-14 23:07:28 633344 —-a-w- C:\WINDOWS\system32\drivers\avc3.sys
2013-05-14 23:07:26 . 2013-05-14 23:07:26 486536 —-a-w- C:\WINDOWS\system32\drivers\avckf.sys
2013-05-14 23:07:24 . 2013-05-14 23:07:24 164952 —-a-w- C:\WINDOWS\system32\drivers\gzflt.sys
2013-05-10 07:57:26 . 2013-05-10 07:57:26 187456 —-a-w- C:\Program Files\Internet Explorer\Plugins\nppdf32.dll
2013-05-08 15:02:13 . 2013-05-08 15:03:21 ——– d—–w- C:\Program Files\Safari
2013-05-05 21:13:18 . 2008-04-14 00:12:12 116224 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwiadr.dll
2013-05-05 21:13:13 . 2001-08-18 04:36:36 23040 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
2013-05-05 21:13:12 . 2008-04-14 00:12:12 18944 -c–a-w- C:\WINDOWS\system32\dllcache\xrxscnui.dll
2013-05-05 21:13:06 . 2001-08-18 04:37:02 27648 -c–a-w- C:\WINDOWS\system32\dllcache\xrxftplt.exe
2013-05-05 21:13:01 . 2001-08-18 04:37:02 4608 -c–a-w- C:\WINDOWS\system32\dllcache\xrxflnch.exe
2013-05-05 21:12:40 . 2001-08-18 04:37:02 99865 -c–a-w- C:\WINDOWS\system32\dllcache\xlog.exe
2013-05-05 21:12:34 . 2001-08-17 18:11:14 16970 -c–a-w- C:\WINDOWS\system32\dllcache\xem336n5.sys
2013-05-05 21:12:32 . 2004-08-04 04:29:50 19455 -c–a-w- C:\WINDOWS\system32\dllcache\wvchntxx.sys
2013-05-05 21:12:27 . 2008-04-13 18:46:24 19200 -c–a-w- C:\WINDOWS\system32\dllcache\wstcodec.sys
2013-05-05 21:12:25 . 2004-08-04 04:29:48 12063 -c–a-w- C:\WINDOWS\system32\dllcache\wsiintxx.sys
2013-05-05 21:12:23 . 2008-04-14 00:12:10 8192 -c–a-w- C:\WINDOWS\system32\dllcache\wshirda.dll
2013-05-05 21:12:04 . 2008-04-13 18:36:38 8832 -c–a-w- C:\WINDOWS\system32\dllcache\wmiacpi.sys
2013-05-05 21:12:01 . 2004-08-04 04:31:28 154624 -c–a-w- C:\WINDOWS\system32\dllcache\wlluc48.sys
2013-05-05 21:11:56 . 2001-08-17 18:12:38 34890 -c–a-w- C:\WINDOWS\system32\dllcache\wlandrv2.sys
2013-05-05 21:11:41 . 2001-08-17 19:28:14 771581 -c–a-w- C:\WINDOWS\system32\dllcache\winacisa.sys
2013-05-05 21:11:34 . 2001-08-18 04:36:34 53760 -c–a-w- C:\WINDOWS\system32\dllcache\wiamsmud.dll
2013-05-05 21:11:28 . 2001-08-18 04:36:34 87040 -c–a-w- C:\WINDOWS\system32\dllcache\wiafbdrv.dll
2013-05-05 21:11:16 . 2001-08-17 19:28:02 701386 -c–a-w- C:\WINDOWS\system32\dllcache\wdhaalba.sys
2013-05-05 21:11:14 . 2004-08-04 04:29:46 23615 -c–a-w- C:\WINDOWS\system32\dllcache\wch7xxnt.sys
2013-05-05 21:11:13 . 2008-04-13 18:45:38 31744 -c–a-w- C:\WINDOWS\system32\dllcache\wceusbsh.sys
2013-05-05 21:11:08 . 2001-08-17 18:10:30 35871 -c–a-w- C:\WINDOWS\system32\dllcache\wbfirdma.sys
2013-05-05 21:11:03 . 2004-08-04 04:29:44 33599 -c–a-w- C:\WINDOWS\system32\dllcache\watv04nt.sys
2013-05-05 21:11:01 . 2004-08-04 04:29:44 19551 -c–a-w- C:\WINDOWS\system32\dllcache\watv02nt.sys
2013-05-05 21:11:00 . 2004-08-04 04:29:42 29311 -c–a-w- C:\WINDOWS\system32\dllcache\watv01nt.sys
2013-05-05 21:10:57 . 2004-08-04 04:29:38 11775 -c–a-w- C:\WINDOWS\system32\dllcache\wadv05nt.sys
2013-05-05 21:10:55 . 2004-08-04 04:29:38 12127 -c–a-w- C:\WINDOWS\system32\dllcache\wadv02nt.sys
2013-05-05 21:10:54 . 2004-08-04 04:29:38 12415 -c–a-w- C:\WINDOWS\system32\dllcache\wadv01nt.sys
2013-05-05 21:10:48 . 2001-08-17 18:13:12 16925 -c–a-w- C:\WINDOWS\system32\dllcache\w940nd.sys
2013-05-05 21:10:43 . 2001-08-17 18:13:08 19016 -c–a-w- C:\WINDOWS\system32\dllcache\w926nd.sys
2013-05-05 21:10:37 . 2001-08-17 18:13:08 19528 -c–a-w- C:\WINDOWS\system32\dllcache\w840nd.sys
2013-05-05 21:10:25 . 2001-08-17 19:28:16 64605 -c–a-w- C:\WINDOWS\system32\dllcache\vvoice.sys
2013-05-05 21:10:19 . 2001-08-17 19:28:16 397502 -c–a-w- C:\WINDOWS\system32\dllcache\vpctcom.sys
2013-05-05 21:10:13 . 2001-08-17 19:28:14 604253 -c–a-w- C:\WINDOWS\system32\dllcache\vmodem.sys
2013-05-05 21:10:07 . 2001-08-17 18:14:12 249402 -c–a-w- C:\WINDOWS\system32\dllcache\vinwm.sys
2013-05-05 21:10:02 . 2001-08-17 19:49:04 24576 -c–a-w- C:\WINDOWS\system32\dllcache\viairda.sys
2013-05-05 21:10:01 . 2008-04-13 18:40:32 5376 -c–a-w- C:\WINDOWS\system32\dllcache\viaide.sys
2013-05-05 21:09:58 . 2008-04-14 00:12:08 53760 -c–a-w- C:\WINDOWS\system32\dllcache\vfwwdm32.dll
2013-05-05 21:09:51 . 2001-08-17 19:28:26 687999 -c–a-w- C:\WINDOWS\system32\dllcache\usrwdxjs.sys
2013-05-05 21:09:45 . 2001-08-17 19:28:14 765884 -c–a-w- C:\WINDOWS\system32\dllcache\usrti.sys
2013-05-05 21:09:40 . 2001-08-17 19:28:26 113762 -c–a-w- C:\WINDOWS\system32\dllcache\usrpda.sys
2013-05-05 21:09:35 . 2001-08-17 19:28:24 7556 -c–a-w- C:\WINDOWS\system32\dllcache\usroslba.sys
2013-05-05 21:09:29 . 2001-08-17 19:28:24 224802 -c–a-w- C:\WINDOWS\system32\dllcache\usr1807a.sys
2013-05-05 21:09:24 . 2001-08-17 19:28:18 794399 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806v.sys
2013-05-05 21:09:19 . 2001-08-17 19:28:16 793598 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806.sys
2013-05-05 21:09:14 . 2001-08-17 19:28:16 794654 -c–a-w- C:\WINDOWS\system32\dllcache\usr1801.sys
2013-05-05 21:09:11 . 2008-04-13 18:45:36 20608 -c–a-w- C:\WINDOWS\system32\dllcache\usbuhci.sys
2013-05-05 21:09:09 . 2008-04-13 18:45:36 26112 -c–a-w- C:\WINDOWS\system32\dllcache\usbser.sys
2013-05-05 21:09:05 . 2004-08-04 04:31:26 32384 -c–a-w- C:\WINDOWS\system32\dllcache\usb101et.sys
2013-05-05 21:08:56 . 2001-08-18 04:36:34 94720 -c–a-w- C:\WINDOWS\system32\dllcache\umaxud32.dll
2013-05-05 21:08:51 . 2001-08-18 04:36:34 28160 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu40.dll
2013-05-05 21:08:46 . 2001-08-18 04:36:34 26624 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu22.dll
2013-05-05 21:08:41 . 2001-08-18 04:36:34 69632 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu12.dll
2013-05-05 21:08:36 . 2001-08-18 04:36:34 50688 -c–a-w- C:\WINDOWS\system32\dllcache\umaxscan.dll
2013-05-05 21:08:31 . 2001-08-17 19:58:12 22912 -c–a-w- C:\WINDOWS\system32\dllcache\umaxpcls.sys
2013-05-05 21:08:27 . 2001-08-18 04:36:34 50176 -c–a-w- C:\WINDOWS\system32\dllcache\umaxp60.dll
2013-05-05 21:08:22 . 2001-08-18 04:36:34 47616 -c–a-w- C:\WINDOWS\system32\dllcache\umaxcam.dll
2013-05-05 21:08:17 . 2001-08-18 04:36:34 211968 -c–a-w- C:\WINDOWS\system32\dllcache\um54scan.dll
2013-05-05 21:08:11 . 2001-08-18 04:36:34 216064 -c–a-w- C:\WINDOWS\system32\dllcache\um34scan.dll
2013-05-05 21:08:06 . 2001-08-17 19:52:22 36736 -c–a-w- C:\WINDOWS\system32\dllcache\ultra.sys
2013-05-05 21:08:00 . 2001-08-17 19:48:14 11520 -c–a-w- C:\WINDOWS\system32\dllcache\twotrack.sys
2013-05-05 21:07:46 . 2001-08-17 18:51:22 166784 -c–a-w- C:\WINDOWS\system32\dllcache\tridxpm.sys
2013-05-05 21:07:41 . 2001-08-18 04:36:32 525568 -c–a-w- C:\WINDOWS\system32\dllcache\tridxp.dll
2013-05-05 21:07:36 . 2001-08-17 18:51:16 159232 -c–a-w- C:\WINDOWS\system32\dllcache\tridkbm.sys
2013-05-05 21:07:31 . 2001-08-17 20:56:06 440576 -c–a-w- C:\WINDOWS\system32\dllcache\tridkb.dll
2013-05-05 21:07:26 . 2001-08-17 18:51:16 222336 -c–a-w- C:\WINDOWS\system32\dllcache\trid3dm.sys
2013-05-05 21:07:21 . 2001-08-17 20:56:06 315520 -c–a-w- C:\WINDOWS\system32\dllcache\trid3d.dll
2013-05-05 21:07:16 . 2001-08-17 18:12:12 34375 -c–a-w- C:\WINDOWS\system32\dllcache\tpro4.sys
2013-05-05 21:07:11 . 2001-08-18 04:35:42 42496 -c–a-w- C:\WINDOWS\system32\dllcache\tp4res.dll
2013-05-05 21:07:09 . 2008-04-14 00:12:38 82944 -c–a-w- C:\WINDOWS\system32\dllcache\tp4mon.exe
2013-05-05 21:07:04 . 2001-08-18 04:36:32 31744 -c–a-w- C:\WINDOWS\system32\dllcache\tp4.dll
2013-05-05 21:06:54 . 2001-08-17 19:51:56 4992 -c–a-w- C:\WINDOWS\system32\dllcache\toside.sys
2013-05-05 21:06:49 . 2001-08-17 20:02:00 230912 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd03.sys
2013-05-05 21:06:44 . 2001-08-17 20:01:52 241664 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd02.sys
2013-05-05 21:06:39 . 2001-08-17 18:10:26 28232 -c–a-w- C:\WINDOWS\system32\dllcache\tos4mo.sys
2013-05-05 21:06:32 . 2001-08-17 18:14:26 123995 -c–a-w- C:\WINDOWS\system32\dllcache\tjisdn.sys
2013-05-05 21:06:25 . 2001-08-17 18:51:10 138528 -c–a-w- C:\WINDOWS\system32\dllcache\tgiulnt5.sys
2013-05-05 21:06:20 . 2001-08-17 20:56:04 81408 -c–a-w- C:\WINDOWS\system32\dllcache\tgiul50.dll
2013-05-05 21:06:18 . 2008-04-13 18:40:50 149376 -c–a-w- C:\WINDOWS\system32\dllcache\tffsport.sys
2013-05-05 21:06:10 . 2001-08-17 18:13:00 17129 -c–a-w- C:\WINDOWS\system32\dllcache\tdkcd31.sys
2013-05-05 21:06:06 . 2001-08-17 18:13:00 37961 -c–a-w- C:\WINDOWS\system32\dllcache\tdk100b.sys
2013-05-05 21:05:55 . 2001-08-17 19:49:46 30464 -c–a-w- C:\WINDOWS\system32\dllcache\tbatm155.sys
2013-05-05 21:05:49 . 2001-08-17 19:52:54 7040 -c–a-w- C:\WINDOWS\system32\dllcache\tandqic.sys
2013-05-05 21:05:44 . 2001-08-17 18:50:12 36640 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4mini.sys
2013-05-05 21:05:39 . 2001-08-17 20:56:04 172768 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4disp.dll
2013-05-05 21:05:30 . 2001-08-17 20:07:36 32640 -c–a-w- C:\WINDOWS\system32\dllcache\symc8xx.sys
2013-05-05 21:05:26 . 2001-08-17 20:07:34 16256 -c–a-w- C:\WINDOWS\system32\dllcache\symc810.sys
2013-05-05 21:05:22 . 2001-08-17 20:07:42 30688 -c–a-w- C:\WINDOWS\system32\dllcache\sym_u3.sys
2013-05-05 21:05:17 . 2001-08-17 20:07:40 28384 -c–a-w- C:\WINDOWS\system32\dllcache\sym_hi.sys
2013-05-05 21:05:12 . 2001-08-18 04:36:32 94293 -c–a-w- C:\WINDOWS\system32\dllcache\sxports.dll
2013-05-05 21:05:08 . 2001-08-17 19:50:58 103936 -c–a-w- C:\WINDOWS\system32\dllcache\sx.sys
2013-05-05 21:05:03 . 2001-08-17 20:02:56 3968 -c–a-w- C:\WINDOWS\system32\dllcache\swusbflt.sys
2013-05-05 21:04:59 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpidflt.dll
2013-05-05 21:04:54 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpdflt2.dll
2013-05-05 21:04:50 . 2001-08-18 04:36:32 53760 -c–a-w- C:\WINDOWS\system32\dllcache\sw_wheel.dll
2013-05-05 21:04:45 . 2001-08-18 04:36:32 41472 -c–a-w- C:\WINDOWS\system32\dllcache\sw_effct.dll
2013-05-05 21:04:42 . 2008-04-13 18:46:22 15232 -c–a-w- C:\WINDOWS\system32\dllcache\streamip.sys
2013-05-05 21:04:37 . 2001-08-18 04:36:32 155648 -c–a-w- C:\WINDOWS\system32\dllcache\stlnprop.dll
2013-05-05 21:04:33 . 2001-08-18 04:36:32 53248 -c–a-w- C:\WINDOWS\system32\dllcache\stlncoin.dll
2013-05-05 21:04:29 . 2001-08-17 18:18:18 285760 -c–a-w- C:\WINDOWS\system32\dllcache\stlnata.sys
2013-05-05 21:04:23 . 2001-08-17 19:51:20 16896 -c–a-w- C:\WINDOWS\system32\dllcache\stcusb.sys
2013-05-05 21:04:14 . 2001-08-17 18:11:08 48736 -c–a-w- C:\WINDOWS\system32\dllcache\srwlnd5.sys
2013-05-05 21:04:06 . 2001-08-18 04:36:32 99328 -c–a-w- C:\WINDOWS\system32\dllcache\srusd.dll
2013-05-05 21:03:58 . 2001-08-18 04:36:32 24660 -c–a-w- C:\WINDOWS\system32\dllcache\spxupchk.dll
2013-05-05 21:03:50 . 2001-08-17 19:51:00 61824 -c–a-w- C:\WINDOWS\system32\dllcache\speed.sys
2013-05-05 21:03:46 . 2001-08-18 04:36:32 106584 -c–a-w- C:\WINDOWS\system32\dllcache\spdports.dll
2013-05-05 21:03:41 . 2001-08-17 20:07:44 19072 -c–a-w- C:\WINDOWS\system32\dllcache\sparrow.sys
2013-05-05 21:03:36 . 2001-08-17 19:56:16 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonypvu1.sys
2013-05-05 21:03:32 . 2001-08-17 18:51:22 37040 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.sys
2013-05-05 21:03:27 . 2001-08-18 04:36:32 114688 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.dll
2013-05-05 21:03:23 . 2001-08-17 18:51:20 20752 -c–a-w- C:\WINDOWS\system32\dllcache\sonync.sys
2013-05-05 21:03:18 . 2001-08-17 19:53:04 9600 -c–a-w- C:\WINDOWS\system32\dllcache\sonymc.sys
2013-05-05 21:03:17 . 2008-04-13 18:40:52 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonyait.sys
2013-05-05 21:03:11 . 2001-08-17 19:53:14 7040 -c–a-w- C:\WINDOWS\system32\dllcache\snyaitmc.sys
2013-05-05 21:02:52 . 2001-08-17 18:51:00 58368 -c–a-w- C:\WINDOWS\system32\dllcache\smiminib.sys
2013-05-05 21:02:45 . 2001-08-17 20:56:04 147200 -c–a-w- C:\WINDOWS\system32\dllcache\smidispb.dll
2013-05-05 21:02:39 . 2001-08-17 18:12:48 25034 -c–a-w- C:\WINDOWS\system32\dllcache\smcpwr2n.sys
2013-05-05 21:02:34 . 2001-08-17 18:10:28 35913 -c–a-w- C:\WINDOWS\system32\dllcache\smcirda.sys
2013-05-05 21:02:30 . 2001-08-17 18:12:46 24576 -c–a-w- C:\WINDOWS\system32\dllcache\smc8000n.sys
2013-05-05 21:02:25 . 2001-08-17 19:57:56 6784 -c–a-w- C:\WINDOWS\system32\dllcache\smbhc.sys

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2013-05-16 11:06:22 . 2012-04-08 14:12:52 692104 —-a-w- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-05-16 11:06:22 . 2011-06-13 00:36:04 71048 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-04-27 15:35:23 . 2013-03-28 22:17:50 13024 —-a-w- C:\WINDOWS\system32\drivers\SWDUMon.sys
2013-04-16 22:17:15 . 2006-03-15 12:00:00 920064 —-a-w- C:\WINDOWS\system32\wininet.dll
2013-04-16 22:17:14 . 2006-03-15 12:00:00 43520 —-a-w- C:\WINDOWS\system32\licmgr10.dll
2013-04-16 22:17:14 . 2006-03-15 12:00:00 1469440 ——w- C:\WINDOWS\system32\inetcpl.cpl
2013-04-16 06:22:37 . 2013-04-16 06:22:37 388096 —-a-r- C:\Documents and Settings\Sherry\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-04-12 23:28:55 . 2006-03-15 12:00:00 385024 —-a-w- C:\WINDOWS\system32\html.iec
2013-04-10 01:31:19 . 2006-03-15 12:00:00 1876352 —-a-w- C:\WINDOWS\system32\win32k.sys
2013-04-06 22:32:14 . 2013-04-06 22:32:14 445016 —-a-w- C:\WINDOWS\system32\wrap_oal.dll
2013-04-06 22:32:14 . 2013-04-06 22:32:14 109144 —-a-w- C:\WINDOWS\system32\OpenAL32.dll
2013-04-05 16:01:27 . 2013-04-04 14:39:11 33112 —-a-w- C:\WINDOWS\system32\drivers\avgtpx86.sys
2013-04-04 20:50:32 . 2010-10-27 11:21:04 22856 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys
2013-03-28 22:23:37 . 2013-03-28 22:23:37 0 —-a-w- C:\WINDOWS\system32\TempWmicBatchFile.bat
2013-03-26 13:13:07 . 2013-03-26 13:13:29 94112 —-a-w- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-03-26 13:13:02 . 2012-03-24 20:23:39 143872 —-a-w- C:\WINDOWS\system32\javacpl.cpl
2013-03-26 13:13:01 . 2012-07-15 13:39:56 861088 —-a-w- C:\WINDOWS\system32\npDeployJava1.dll
2013-03-26 13:13:01 . 2010-11-05 03:22:53 782240 —-a-w- C:\WINDOWS\system32\deployJava1.dll
2013-03-08 08:36:22 . 2006-03-15 12:00:00 293376 —-a-w- C:\WINDOWS\system32\winsrv.dll
2013-03-07 01:28:24 . 2006-03-15 12:00:00 2193408 —-a-w- C:\WINDOWS\system32\ntoskrnl.exe
2013-03-07 00:50:28 . 2004-08-03 22:59:00 2070016 —-a-w- C:\WINDOWS\system32\ntkrnlpa.exe
2013-02-27 07:56:51 . 2010-10-26 22:23:11 2067456 —-a-w- C:\WINDOWS\system32\mstscax.dll

sinnead

Post #59May 21, 2013, 12:21 AM UTC

Satchfan

Post #60May 21, 2013, 8:50 AM UTC

That obviously didn’t work either as there is still no complete log.

Before trying it the other way, I noticed in your DDS log that PopCap Browser Plugin is installed.

Please uninstall this through “Add or remove programs”.

Next

Can you try running ComboFix the other way I suggested.

Click the Windows “Start” button, select Run, then copy/paste the following bolded text into the run box and then click OK

combofix /nombr

Can you also tell me if you disabled Malwarebytes before running both OTL and ComboFix.

Thanks

Satchfan

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Infected? [Solved]

✨ Ask AI

Ask AI