Spyware / Malware / Virus Removal

Infected? [Solved]

91 min read

Looking for the outcome? Ask AI

sinnead

Post #61May 21, 2013, 5:31 PM UTC

Will do the above when I get home from work, but just had a thought. I had to have the system rebuilt a few years ago. Got infected with a nasty worm. Could that have resulted in what's happening now?

Satchfan

Post #62May 21, 2013, 9:31 PM UTC

Will do the above when I get home from work

No problem.

just had a thought. I had to have the system rebuilt a few years ago. Got infected with a nasty worm. Could that have resulted in what's happening now?

That is very unlikely. A "worm" wouldn't require a system to be "rebuilt".

I'll wait to hear from you.

Satchfan

sinnead

Post #63May 22, 2013, 12:03 AM UTC last edited May 22, 2013, 12:08 AM UTC

Same thing happened. Here's the report anyway: I am using the term "worm" wrong perhaps. But it was eating through data on the computer. I accidently downloaded it when I'd been running a scan for some reason. A pop up showed up(looked like the microsoft windows) asking if I wanted my antivirus turned back on. Without thinking I clicked yes, and next thing I knew I'd lost total control of the computer. I turned it off and immediately disconnected and took it to a computer repair place we trust. And yes, I was told the system had to be rebuilt. We lost everything off the computer(photos, etc). Almost forgot- the malwarebytes I'm using is the free edition, not the trial or paid version. Can't find where to disable that? Uninstalled popcap. ComboFix 13-05-14.01 - Sherry 21/05/2013 17:24:00.5.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1470.938 [GMT -6:00] Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe Command switches used :: /nombr AV: Bitdefender Antivirus Free Edition *Disabled/Updated* {9488E0FA-F058-4673-850E-E755F112BABC} FW: *Enabled* {9488E0FA-F058-4673-850E-E755F112BABC} FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66} * Created a new restore point ((((((((((((((((((((((((( Files Created from 2013-04-21 to 2013-05-21 ))))))))))))))))))))))))))))))) 2013-05-14 23:08:05 . 2013-05-14 23:08:06 242504 —-a-w- C:\WINDOWS\system32\drivers\avchv.sys 2013-05-14 23:07:28 . 2013-05-14 23:07:28 633344 —-a-w- C:\WINDOWS\system32\drivers\avc3.sys 2013-05-14 23:07:26 . 2013-05-14 23:07:26 486536 —-a-w- C:\WINDOWS\system32\drivers\avckf.sys 2013-05-14 23:07:24 . 2013-05-14 23:07:24 164952 —-a-w- C:\WINDOWS\system32\drivers\gzflt.sys 2013-05-10 07:57:26 . 2013-05-10 07:57:26 187456 —-a-w- C:\Program Files\Internet Explorer\Plugins\nppdf32.dll 2013-05-08 15:02:13 . 2013-05-08 15:03:21 ——– d—–w- C:\Program Files\Safari 2013-05-05 21:10:37 . 2001-08-17 18:13:08 19528 -c–a-w- C:\WINDOWS\system32\dllcache\w840nd.sys 2013-05-05 21:10:25 . 2001-08-17 19:28:16 64605 -c–a-w- C:\WINDOWS\system32\dllcache\vvoice.sys 2013-05-05 21:10:19 . 2001-08-17 19:28:16 397502 -c–a-w- C:\WINDOWS\system32\dllcache\vpctcom.sys 2013-05-05 21:10:13 . 2001-08-17 19:28:14 604253 -c–a-w- C:\WINDOWS\system32\dllcache\vmodem.sys 2013-05-05 21:10:07 . 2001-08-17 18:14:12 249402 -c–a-w- C:\WINDOWS\system32\dllcache\vinwm.sys 2013-05-05 21:10:02 . 2001-08-17 19:49:04 24576 -c–a-w- C:\WINDOWS\system32\dllcache\viairda.sys 2013-05-05 21:10:01 . 2008-04-13 18:40:32 5376 -c–a-w- C:\WINDOWS\system32\dllcache\viaide.sys 2013-05-05 21:09:58 . 2008-04-14 00:12:08 53760 -c–a-w- C:\WINDOWS\system32\dllcache\vfwwdm32.dll 2013-05-05 21:09:51 . 2001-08-17 19:28:26 687999 -c–a-w- C:\WINDOWS\system32\dllcache\usrwdxjs.sys 2013-05-05 21:09:45 . 2001-08-17 19:28:14 765884 -c–a-w- C:\WINDOWS\system32\dllcache\usrti.sys 2013-05-05 21:09:40 . 2001-08-17 19:28:26 113762 -c–a-w- C:\WINDOWS\system32\dllcache\usrpda.sys 2013-05-05 21:09:35 . 2001-08-17 19:28:24 7556 -c–a-w- C:\WINDOWS\system32\dllcache\usroslba.sys 2013-05-05 21:09:29 . 2001-08-17 19:28:24 224802 -c–a-w- C:\WINDOWS\system32\dllcache\usr1807a.sys 2013-05-05 21:09:24 . 2001-08-17 19:28:18 794399 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806v.sys 2013-05-05 21:09:19 . 2001-08-17 19:28:16 793598 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806.sys 2013-05-05 21:09:14 . 2001-08-17 19:28:16 794654 -c–a-w- C:\WINDOWS\system32\dllcache\usr1801.sys 2013-05-05 21:09:11 . 2008-04-13 18:45:36 20608 -c–a-w- C:\WINDOWS\system32\dllcache\usbuhci.sys 2013-05-05 21:09:09 . 2008-04-13 18:45:36 26112 -c–a-w- C:\WINDOWS\system32\dllcache\usbser.sys 2013-05-05 21:09:05 . 2004-08-04 04:31:26 32384 -c–a-w- C:\WINDOWS\system32\dllcache\usb101et.sys 2013-05-05 21:08:56 . 2001-08-18 04:36:34 94720 -c–a-w- C:\WINDOWS\system32\dllcache\umaxud32.dll 2013-05-05 21:08:51 . 2001-08-18 04:36:34 28160 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu40.dll 2013-05-05 21:08:46 . 2001-08-18 04:36:34 26624 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu22.dll 2013-05-05 21:08:41 . 2001-08-18 04:36:34 69632 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu12.dll 2013-05-05 21:08:36 . 2001-08-18 04:36:34 50688 -c–a-w- C:\WINDOWS\system32\dllcache\umaxscan.dll 2013-05-05 21:08:31 . 2001-08-17 19:58:12 22912 -c–a-w- C:\WINDOWS\system32\dllcache\umaxpcls.sys 2013-05-05 21:08:27 . 2001-08-18 04:36:34 50176 -c–a-w- C:\WINDOWS\system32\dllcache\umaxp60.dll 2013-05-05 21:08:22 . 2001-08-18 04:36:34 47616 -c–a-w- C:\WINDOWS\system32\dllcache\umaxcam.dll 2013-05-05 21:08:17 . 2001-08-18 04:36:34 211968 -c–a-w- C:\WINDOWS\system32\dllcache\um54scan.dll 2013-05-05 21:08:11 . 2001-08-18 04:36:34 216064 -c–a-w- C:\WINDOWS\system32\dllcache\um34scan.dll 2013-05-05 21:08:06 . 2001-08-17 19:52:22 36736 -c–a-w- C:\WINDOWS\system32\dllcache\ultra.sys 2013-05-05 21:08:00 . 2001-08-17 19:48:14 11520 -c–a-w- C:\WINDOWS\system32\dllcache\twotrack.sys 2013-05-05 21:07:46 . 2001-08-17 18:51:22 166784 -c–a-w- C:\WINDOWS\system32\dllcache\tridxpm.sys 2013-05-05 21:07:41 . 2001-08-18 04:36:32 525568 -c–a-w- C:\WINDOWS\system32\dllcache\tridxp.dll 2013-05-05 21:07:36 . 2001-08-17 18:51:16 159232 -c–a-w- C:\WINDOWS\system32\dllcache\tridkbm.sys 2013-05-05 21:07:31 . 2001-08-17 20:56:06 440576 -c–a-w- C:\WINDOWS\system32\dllcache\tridkb.dll 2013-05-05 21:07:26 . 2001-08-17 18:51:16 222336 -c–a-w- C:\WINDOWS\system32\dllcache\trid3dm.sys 2013-05-05 21:07:21 . 2001-08-17 20:56:06 315520 -c–a-w- C:\WINDOWS\system32\dllcache\trid3d.dll 2013-05-05 21:07:16 . 2001-08-17 18:12:12 34375 -c–a-w- C:\WINDOWS\system32\dllcache\tpro4.sys 2013-05-05 21:07:11 . 2001-08-18 04:35:42 42496 -c–a-w- C:\WINDOWS\system32\dllcache\tp4res.dll 2013-05-05 21:07:09 . 2008-04-14 00:12:38 82944 -c–a-w- C:\WINDOWS\system32\dllcache\tp4mon.exe 2013-05-05 21:07:04 . 2001-08-18 04:36:32 31744 -c–a-w- C:\WINDOWS\system32\dllcache\tp4.dll 2013-05-05 21:06:54 . 2001-08-17 19:51:56 4992 -c–a-w- C:\WINDOWS\system32\dllcache\toside.sys 2013-05-05 21:06:49 . 2001-08-17 20:02:00 230912 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd03.sys 2013-05-05 21:06:44 . 2001-08-17 20:01:52 241664 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd02.sys 2013-05-05 21:06:39 . 2001-08-17 18:10:26 28232 -c–a-w- C:\WINDOWS\system32\dllcache\tos4mo.sys 2013-05-05 21:06:32 . 2001-08-17 18:14:26 123995 -c–a-w- C:\WINDOWS\system32\dllcache\tjisdn.sys 2013-05-05 21:06:25 . 2001-08-17 18:51:10 138528 -c–a-w- C:\WINDOWS\system32\dllcache\tgiulnt5.sys 2013-05-05 21:06:20 . 2001-08-17 20:56:04 81408 -c–a-w- C:\WINDOWS\system32\dllcache\tgiul50.dll 2013-05-05 21:06:18 . 2008-04-13 18:40:50 149376 -c–a-w- C:\WINDOWS\system32\dllcache\tffsport.sys 2013-05-05 21:06:10 . 2001-08-17 18:13:00 17129 -c–a-w- C:\WINDOWS\system32\dllcache\tdkcd31.sys 2013-05-05 21:06:06 . 2001-08-17 18:13:00 37961 -c–a-w- C:\WINDOWS\system32\dllcache\tdk100b.sys 2013-05-05 21:05:55 . 2001-08-17 19:49:46 30464 -c–a-w- C:\WINDOWS\system32\dllcache\tbatm155.sys 2013-05-05 21:05:49 . 2001-08-17 19:52:54 7040 -c–a-w- C:\WINDOWS\system32\dllcache\tandqic.sys 2013-05-05 21:05:44 . 2001-08-17 18:50:12 36640 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4mini.sys 2013-05-05 21:05:39 . 2001-08-17 20:56:04 172768 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4disp.dll 2013-05-05 21:05:30 . 2001-08-17 20:07:36 32640 -c–a-w- C:\WINDOWS\system32\dllcache\symc8xx.sys 2013-05-05 21:05:26 . 2001-08-17 20:07:34 16256 -c–a-w- C:\WINDOWS\system32\dllcache\symc810.sys 2013-05-05 21:05:22 . 2001-08-17 20:07:42 30688 -c–a-w- C:\WINDOWS\system32\dllcache\sym_u3.sys 2013-05-05 21:05:17 . 2001-08-17 20:07:40 28384 -c–a-w- C:\WINDOWS\system32\dllcache\sym_hi.sys 2013-05-05 21:05:12 . 2001-08-18 04:36:32 94293 -c–a-w- C:\WINDOWS\system32\dllcache\sxports.dll 2013-05-05 21:05:08 . 2001-08-17 19:50:58 103936 -c–a-w- C:\WINDOWS\system32\dllcache\sx.sys 2013-05-05 21:05:03 . 2001-08-17 20:02:56 3968 -c–a-w- C:\WINDOWS\system32\dllcache\swusbflt.sys 2013-05-05 21:04:59 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpidflt.dll 2013-05-05 21:04:54 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpdflt2.dll 2013-05-05 21:04:50 . 2001-08-18 04:36:32 53760 -c–a-w- C:\WINDOWS\system32\dllcache\sw_wheel.dll 2013-05-05 21:04:45 . 2001-08-18 04:36:32 41472 -c–a-w- C:\WINDOWS\system32\dllcache\sw_effct.dll 2013-05-05 21:04:42 . 2008-04-13 18:46:22 15232 -c–a-w- C:\WINDOWS\system32\dllcache\streamip.sys 2013-05-05 21:04:37 . 2001-08-18 04:36:32 155648 -c–a-w- C:\WINDOWS\system32\dllcache\stlnprop.dll 2013-05-05 21:04:33 . 2001-08-18 04:36:32 53248 -c–a-w- C:\WINDOWS\system32\dllcache\stlncoin.dll 2013-05-05 21:04:29 . 2001-08-17 18:18:18 285760 -c–a-w- C:\WINDOWS\system32\dllcache\stlnata.sys 2013-05-05 21:04:23 . 2001-08-17 19:51:20 16896 -c–a-w- C:\WINDOWS\system32\dllcache\stcusb.sys 2013-05-05 21:04:14 . 2001-08-17 18:11:08 48736 -c–a-w- C:\WINDOWS\system32\dllcache\srwlnd5.sys 2013-05-05 21:04:06 . 2001-08-18 04:36:32 99328 -c–a-w- C:\WINDOWS\system32\dllcache\srusd.dll 2013-05-05 21:03:58 . 2001-08-18 04:36:32 24660 -c–a-w- C:\WINDOWS\system32\dllcache\spxupchk.dll 2013-05-05 21:03:50 . 2001-08-17 19:51:00 61824 -c–a-w- C:\WINDOWS\system32\dllcache\speed.sys 2013-05-05 21:03:46 . 2001-08-18 04:36:32 106584 -c–a-w- C:\WINDOWS\system32\dllcache\spdports.dll 2013-05-05 21:03:41 . 2001-08-17 20:07:44 19072 -c–a-w- C:\WINDOWS\system32\dllcache\sparrow.sys 2013-05-05 21:03:36 . 2001-08-17 19:56:16 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonypvu1.sys 2013-05-05 21:03:32 . 2001-08-17 18:51:22 37040 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.sys 2013-05-05 21:03:27 . 2001-08-18 04:36:32 114688 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.dll 2013-05-05 21:03:23 . 2001-08-17 18:51:20 20752 -c–a-w- C:\WINDOWS\system32\dllcache\sonync.sys 2013-05-05 21:03:18 . 2001-08-17 19:53:04 9600 -c–a-w- C:\WINDOWS\system32\dllcache\sonymc.sys 2013-05-05 21:03:17 . 2008-04-13 18:40:52 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonyait.sys 2013-05-05 21:03:11 . 2001-08-17 19:53:14 7040 -c–a-w- C:\WINDOWS\system32\dllcache\snyaitmc.sys 2013-05-05 21:02:52 . 2001-08-17 18:51:00 58368 -c–a-w- C:\WINDOWS\system32\dllcache\smiminib.sys 2013-05-05 21:02:45 . 2001-08-17 20:56:04 147200 -c–a-w- C:\WINDOWS\system32\dllcache\smidispb.dll 2013-05-05 21:02:39 . 2001-08-17 18:12:48 25034 -c–a-w- C:\WINDOWS\system32\dllcache\smcpwr2n.sys 2013-05-05 21:02:34 . 2001-08-17 18:10:28 35913 -c–a-w- C:\WINDOWS\system32\dllcache\smcirda.sys 2013-05-05 21:02:30 . 2001-08-17 18:12:46 24576 -c–a-w- C:\WINDOWS\system32\dllcache\smc8000n.sys 2013-05-05 21:02:25 . 2001-08-17 19:57:56 6784 -c–a-w- C:\WINDOWS\system32\dllcache\smbhc.sys 2013-05-05 21:02:24 . 2008-04-13 18:36:34 6912 -c–a-w- C:\WINDOWS\system32\dllcache\smbclass.sys 2013-05-05 21:02:22 . 2008-04-13 18:36:34 16000 -c–a-w- C:\WINDOWS\system32\dllcache\smbbatt.sys 2013-05-05 21:02:17 . 2001-08-18 04:36:32 45568 -c–a-w- C:\WINDOWS\system32\dllcache\smb3w.dll 2013-05-05 21:02:13 . 2001-08-18 04:36:32 33792 -c–a-w- C:\WINDOWS\system32\dllcache\smb0w.dll 2013-05-05 21:02:07 . 2001-08-18 04:36:32 28672 -c–a-w- C:\WINDOWS\system32\dllcache\sma0w.dll 2013-05-05 21:02:01 . 2001-08-18 04:36:32 28160 -c–a-w- C:\WINDOWS\system32\dllcache\sm91w.dll 2013-05-05 21:00:51 . 2001-07-21 20:29:20 161568 -c–a-w- C:\WINDOWS\system32\dllcache\sgsmusb.sys 2013-05-05 21:00:47 . 2001-07-21 20:29:20 18400 -c–a-w- C:\WINDOWS\system32\dllcache\sgsmld.sys 2013-05-05 21:00:42 . 2001-08-17 18:51:04 98080 -c–a-w- C:\WINDOWS\system32\dllcache\sgiulnt5.sys 2013-05-05 21:00:38 . 2001-08-18 04:36:02 386560 -c–a-w- C:\WINDOWS\system32\dllcache\sgiul50.dll 2013-05-05 21:00:34 . 2001-08-17 18:19:34 36480 -c–a-w- C:\WINDOWS\system32\dllcache\sfmanm.sys 2013-05-05 21:00:25 . 2001-08-17 19:53:32 6784 -c–a-w- C:\WINDOWS\system32\dllcache\serscan.sys 2013-05-05 21:00:21 . 2001-08-17 19:48:00 17664 -c–a-w- C:\WINDOWS\system32\dllcache\sermouse.sys 2013-05-05 21:00:12 . 2001-08-17 19:53:10 6912 -c–a-w- C:\WINDOWS\system32\dllcache\seaddsmc.sys 2013-05-05 21:00:10 . 2008-04-13 18:45:34 11520 -c–a-w- C:\WINDOWS\system32\dllcache\scsiscan.sys 2013-05-05 21:00:06 . 2001-08-17 19:52:34 11648 -c–a-w- C:\WINDOWS\system32\dllcache\scsiprnt.sys 2013-05-05 20:58:57 . 2001-08-18 04:36:02 62496 -c–a-w- C:\WINDOWS\system32\dllcache\s3mtrio.dll 2013-05-05 20:58:53 . 2001-08-17 18:50:40 41216 -c–a-w- C:\WINDOWS\system32\dllcache\s3mt3d.sys 2013-05-05 20:58:49 . 2001-08-17 20:56:04 182272 -c–a-w- C:\WINDOWS\system32\dllcache\s3mt3d.dll 2013-05-05 20:58:45 . 2001-08-17 18:50:34 166720 -c–a-w- C:\WINDOWS\system32\dllcache\s3m.sys 2013-05-05 20:58:40 . 2001-08-17 19:57:46 65664 -c–a-w- C:\WINDOWS\system32\dllcache\s3legacy.sys 2013-05-05 20:58:34 . 2001-08-18 04:36:30 82432 -c–a-w- C:\WINDOWS\system32\dllcache\rwia450.dll 2013-05-05 20:58:30 . 2001-08-18 04:36:30 79872 -c–a-w- C:\WINDOWS\system32\dllcache\rwia430.dll 2013-05-05 20:58:28 . 2008-04-14 00:12:04 29696 -c–a-w- C:\WINDOWS\system32\dllcache\rw450ext.dll 2013-05-05 20:58:27 . 2008-04-14 00:12:04 27648 -c–a-w- C:\WINDOWS\system32\dllcache\rw430ext.dll 2013-05-05 20:58:19 . 2001-08-17 18:12:40 19017 -c–a-w- C:\WINDOWS\system32\dllcache\rtl8029.sys 2013-05-05 20:58:14 . 2001-08-17 18:19:22 30720 -c–a-w- C:\WINDOWS\system32\dllcache\rthwcls.sys 2013-05-05 20:58:05 . 2001-08-18 04:36:30 9216 -c–a-w- C:\WINDOWS\system32\dllcache\rsmgrstr.dll 2013-05-05 20:57:59 . 2001-08-17 18:19:20 3840 -c–a-w- C:\WINDOWS\system32\dllcache\rpfun.sys (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2013-05-16 11:06:22 . 2012-04-08 14:12:52 692104 —-a-w- C:\WINDOWS\system32\FlashPlayerApp.exe 2013-05-16 11:06:22 . 2011-06-13 00:36:04 71048 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-04-27 15:35:23 . 2013-03-28 22:17:50 13024 —-a-w- C:\WINDOWS\system32\drivers\SWDUMon.sys 2013-04-16 22:17:15 . 2006-03-15 12:00:00 920064 —-a-w- C:\WINDOWS\system32\wininet.dll 2013-04-16 22:17:14 . 2006-03-15 12:00:00 43520 —-a-w- C:\WINDOWS\system32\licmgr10.dll 2013-04-16 22:17:14 . 2006-03-15 12:00:00 1469440 ——w- C:\WINDOWS\system32\inetcpl.cpl 2013-04-16 06:22:37 . 2013-04-16 06:22:37 388096 —-a-r- C:\Documents and Settings\Sherry\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2013-04-12 23:28:55 . 2006-03-15 12:00:00 385024 —-a-w- C:\WINDOWS\system32\html.iec 2013-04-10 01:31:19 . 2006-03-15 12:00:00 1876352 —-a-w- C:\WINDOWS\system32\win32k.sys 2013-04-06 22:32:14 . 2013-04-06 22:32:14 445016 —-a-w- C:\WINDOWS\system32\wrap_oal.dll 2013-04-06 22:32:14 . 2013-04-06 22:32:14 109144 —-a-w- C:\WINDOWS\system32\OpenAL32.dll 2013-04-05 16:01:27 . 2013-04-04 14:39:11 33112 —-a-w- C:\WINDOWS\system32\drivers\avgtpx86.sys 2013-04-04 20:50:32 . 2010-10-27 11:21:04 22856 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys 2013-03-28 22:23:37 . 2013-03-28 22:23:37 0 —-a-w- C:\WINDOWS\system32\TempWmicBatchFile.bat 2013-03-26 13:13:07 . 2013-03-26 13:13:29 94112 —-a-w- C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-03-26 13:13:02 . 2012-03-24 20:23:39 143872 —-a-w- C:\WINDOWS\system32\javacpl.cpl 2013-03-26 13:13:01 . 2012-07-15 13:39:56 861088 —-a-w- C:\WINDOWS\system32\npDeployJava1.dll 2013-03-26 13:13:01 . 2010-11-05 03:22:53 782240 —-a-w- C:\WINDOWS\system32\deployJava1.dll 2013-03-08 08:36:22 . 2006-03-15 12:00:00 293376 —-a-w- C:\WINDOWS\system32\winsrv.dll 2013-03-07 01:28:24 . 2006-03-15 12:00:00 2193408 —-a-w- C:\WINDOWS\system32\ntoskrnl.exe 2013-03-07 00:50:28 . 2004-08-03 22:59:00 2070016 —-a-w- C:\WINDOWS\system32\ntkrnlpa.exe 2013-02-27 07:56:51 . 2010-10-26 22:23:11 2067456 —-a-w- C:\WINDOWS\system32\mstscax.dll

Satchfan

Post #64May 22, 2013, 3:40 PM UTC

Sorry about the delay but I have been looking back through your posts for something I may have missed and did, in fact, find something that may have caused problems.

Let’s see if ComboFix will do it’s job.

Open ComboFix

Please do the following:

close any open browsers.
close/disable all anti virus and anti malware programs so that they do not interfere with the running of ComboFix.
open notepad and copy/paste the text in the codebox below into it:

File:: C:\WINDOWS\system32\drivers\avgtpx86.sys Driver:: avgtpx86 Registry:: [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{7530BFB8-7293-4D34-9923-61A11451AFC5}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{6A060448-60F9-11D5-A6CD-0002B31F7455}]

Save this as "CFScript.txt", and as Type: All Files (*.*) in the same location as ComboFix.exe

[external image: Posted Image]

Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it produces a log at C:\ComboFix.txt. Post the contents of Combofix.txt in your next reply.

Can you try safe mode again and tell me what happens.

Thanks

Satchfan

sinnead

Post #65May 23, 2013, 8:04 AM UTC

Here's the combofix log. Will try the safe mode in a moment and post after this. ComboFix 13-05-14.01 - Sherry 23/05/2013 0:29:20.6.1 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1470.945 [GMT -6:00] Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Sherry\Desktop\CFScript.txt AV: Bitdefender Antivirus Free Edition *Enabled/Updated* {9488E0FA-F058-4673-850E-E755F112BABC} FW: *Enabled* {9488E0FA-F058-4673-850E-E755F112BABC} FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66} * Created a new restore point FILE :: "C:\WINDOWS\system32\drivers\avgtpx86.sys" ((((((((((((((((((((((((( Files Created from 2013-04-23 to 2013-05-23 ))))))))))))))))))))))))))))))) 2013-05-14 23:08:05 . 2013-05-14 23:08:06 242504 —-a-w- C:\WINDOWS\system32\drivers\avchv.sys 2013-05-14 23:07:28 . 2013-05-14 23:07:28 633344 —-a-w- C:\WINDOWS\system32\drivers\avc3.sys 2013-05-14 23:07:26 . 2013-05-14 23:07:26 486536 —-a-w- C:\WINDOWS\system32\drivers\avckf.sys 2013-05-14 23:07:24 . 2013-05-14 23:07:24 164952 —-a-w- C:\WINDOWS\system32\drivers\gzflt.sys 2013-05-10 07:57:26 . 2013-05-10 07:57:26 187456 —-a-w- C:\Program Files\Internet Explorer\Plugins\nppdf32.dll 2013-05-08 15:02:13 . 2013-05-08 15:03:21 ——– d—–w- C:\Program Files\Safari 2013-05-05 21:13:18 . 2008-04-14 00:12:12 116224 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwiadr.dll 2013-05-05 21:13:13 . 2001-08-18 04:36:36 23040 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwbtmp.dll 2013-05-05 21:13:12 . 2008-04-14 00:12:12 18944 -c–a-w- C:\WINDOWS\system32\dllcache\xrxscnui.dll 2013-05-05 21:13:06 . 2001-08-18 04:37:02 27648 -c–a-w- C:\WINDOWS\system32\dllcache\xrxftplt.exe 2013-05-05 21:13:01 . 2001-08-18 04:37:02 4608 -c–a-w- C:\WINDOWS\system32\dllcache\xrxflnch.exe 2013-05-05 21:12:40 . 2001-08-18 04:37:02 99865 -c–a-w- C:\WINDOWS\system32\dllcache\xlog.exe 2013-05-05 21:12:34 . 2001-08-17 18:11:14 16970 -c–a-w- C:\WINDOWS\system32\dllcache\xem336n5.sys 2013-05-05 21:12:32 . 2004-08-04 04:29:50 19455 -c–a-w- C:\WINDOWS\system32\dllcache\wvchntxx.sys 2013-05-05 21:12:27 . 2008-04-13 18:46:24 19200 -c–a-w- C:\WINDOWS\system32\dllcache\wstcodec.sys 2013-05-05 21:12:25 . 2004-08-04 04:29:48 12063 -c–a-w- C:\WINDOWS\system32\dllcache\wsiintxx.sys 2013-05-05 21:12:23 . 2008-04-14 00:12:10 8192 -c–a-w- C:\WINDOWS\system32\dllcache\wshirda.dll 2013-05-05 21:12:04 . 2008-04-13 18:36:38 8832 -c–a-w- C:\WINDOWS\system32\dllcache\wmiacpi.sys 2013-05-05 21:12:01 . 2004-08-04 04:31:28 154624 -c–a-w- C:\WINDOWS\system32\dllcache\wlluc48.sys 2013-05-05 21:11:56 . 2001-08-17 18:12:38 34890 -c–a-w- C:\WINDOWS\system32\dllcache\wlandrv2.sys 2013-05-05 21:11:41 . 2001-08-17 19:28:14 771581 -c–a-w- C:\WINDOWS\system32\dllcache\winacisa.sys 2013-05-05 21:11:34 . 2001-08-18 04:36:34 53760 -c–a-w- C:\WINDOWS\system32\dllcache\wiamsmud.dll 2013-05-05 21:11:28 . 2001-08-18 04:36:34 87040 -c–a-w- C:\WINDOWS\system32\dllcache\wiafbdrv.dll 2013-05-05 21:11:16 . 2001-08-17 19:28:02 701386 -c–a-w- C:\WINDOWS\system32\dllcache\wdhaalba.sys 2013-05-05 21:11:14 . 2004-08-04 04:29:46 23615 -c–a-w- C:\WINDOWS\system32\dllcache\wch7xxnt.sys 2013-05-05 21:11:13 . 2008-04-13 18:45:38 31744 -c–a-w- C:\WINDOWS\system32\dllcache\wceusbsh.sys 2013-05-05 21:11:08 . 2001-08-17 18:10:30 35871 -c–a-w- C:\WINDOWS\system32\dllcache\wbfirdma.sys 2013-05-05 21:11:03 . 2004-08-04 04:29:44 33599 -c–a-w- C:\WINDOWS\system32\dllcache\watv04nt.sys 2013-05-05 21:11:01 . 2004-08-04 04:29:44 19551 -c–a-w- C:\WINDOWS\system32\dllcache\watv02nt.sys 2013-05-05 21:11:00 . 2004-08-04 04:29:42 29311 -c–a-w- C:\WINDOWS\system32\dllcache\watv01nt.sys 2013-05-05 21:10:57 . 2004-08-04 04:29:38 11775 -c–a-w- C:\WINDOWS\system32\dllcache\wadv05nt.sys 2013-05-05 21:10:55 . 2004-08-04 04:29:38 12127 -c–a-w- C:\WINDOWS\system32\dllcache\wadv02nt.sys 2013-05-05 21:10:54 . 2004-08-04 04:29:38 12415 -c–a-w- C:\WINDOWS\system32\dllcache\wadv01nt.sys 2013-05-05 21:10:48 . 2001-08-17 18:13:12 16925 -c–a-w- C:\WINDOWS\system32\dllcache\w940nd.sys 2013-05-05 21:10:43 . 2001-08-17 18:13:08 19016 -c–a-w- C:\WINDOWS\system32\dllcache\w926nd.sys 2013-05-05 21:10:37 . 2001-08-17 18:13:08 19528 -c–a-w- C:\WINDOWS\system32\dllcache\w840nd.sys 2013-05-05 21:10:25 . 2001-08-17 19:28:16 64605 -c–a-w- C:\WINDOWS\system32\dllcache\vvoice.sys 2013-05-05 21:10:19 . 2001-08-17 19:28:16 397502 -c–a-w- C:\WINDOWS\system32\dllcache\vpctcom.sys 2013-05-05 21:10:13 . 2001-08-17 19:28:14 604253 -c–a-w- C:\WINDOWS\system32\dllcache\vmodem.sys 2013-05-05 21:10:07 . 2001-08-17 18:14:12 249402 -c–a-w- C:\WINDOWS\system32\dllcache\vinwm.sys 2013-05-05 21:10:02 . 2001-08-17 19:49:04 24576 -c–a-w- C:\WINDOWS\system32\dllcache\viairda.sys 2013-05-05 21:10:01 . 2008-04-13 18:40:32 5376 -c–a-w- C:\WINDOWS\system32\dllcache\viaide.sys 2013-05-05 21:09:58 . 2008-04-14 00:12:08 53760 -c–a-w- C:\WINDOWS\system32\dllcache\vfwwdm32.dll 2013-05-05 21:09:51 . 2001-08-17 19:28:26 687999 -c–a-w- C:\WINDOWS\system32\dllcache\usrwdxjs.sys 2013-05-05 21:09:45 . 2001-08-17 19:28:14 765884 -c–a-w- C:\WINDOWS\system32\dllcache\usrti.sys 2013-05-05 21:09:40 . 2001-08-17 19:28:26 113762 -c–a-w- C:\WINDOWS\system32\dllcache\usrpda.sys 2013-05-05 21:09:35 . 2001-08-17 19:28:24 7556 -c–a-w- C:\WINDOWS\system32\dllcache\usroslba.sys 2013-05-05 21:09:29 . 2001-08-17 19:28:24 224802 -c–a-w- C:\WINDOWS\system32\dllcache\usr1807a.sys 2013-05-05 21:09:24 . 2001-08-17 19:28:18 794399 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806v.sys 2013-05-05 21:09:19 . 2001-08-17 19:28:16 793598 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806.sys 2013-05-05 21:09:14 . 2001-08-17 19:28:16 794654 -c–a-w- C:\WINDOWS\system32\dllcache\usr1801.sys 2013-05-05 21:09:11 . 2008-04-13 18:45:36 20608 -c–a-w- C:\WINDOWS\system32\dllcache\usbuhci.sys 2013-05-05 21:09:09 . 2008-04-13 18:45:36 26112 -c–a-w- C:\WINDOWS\system32\dllcache\usbser.sys 2013-05-05 21:09:05 . 2004-08-04 04:31:26 32384 -c–a-w- C:\WINDOWS\system32\dllcache\usb101et.sys 2013-05-05 21:08:56 . 2001-08-18 04:36:34 94720 -c–a-w- C:\WINDOWS\system32\dllcache\umaxud32.dll 2013-05-05 21:08:51 . 2001-08-18 04:36:34 28160 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu40.dll 2013-05-05 21:08:46 . 2001-08-18 04:36:34 26624 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu22.dll 2013-05-05 21:08:41 . 2001-08-18 04:36:34 69632 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu12.dll 2013-05-05 21:08:36 . 2001-08-18 04:36:34 50688 -c–a-w- C:\WINDOWS\system32\dllcache\umaxscan.dll 2013-05-05 21:08:31 . 2001-08-17 19:58:12 22912 -c–a-w- C:\WINDOWS\system32\dllcache\umaxpcls.sys 2013-05-05 21:08:27 . 2001-08-18 04:36:34 50176 -c–a-w- C:\WINDOWS\system32\dllcache\umaxp60.dll 2013-05-05 21:08:22 . 2001-08-18 04:36:34 47616 -c–a-w- C:\WINDOWS\system32\dllcache\umaxcam.dll 2013-05-05 21:08:17 . 2001-08-18 04:36:34 211968 -c–a-w- C:\WINDOWS\system32\dllcache\um54scan.dll 2013-05-05 21:08:11 . 2001-08-18 04:36:34 216064 -c–a-w- C:\WINDOWS\system32\dllcache\um34scan.dll 2013-05-05 21:08:06 . 2001-08-17 19:52:22 36736 -c–a-w- C:\WINDOWS\system32\dllcache\ultra.sys 2013-05-05 21:08:00 . 2001-08-17 19:48:14 11520 -c–a-w- C:\WINDOWS\system32\dllcache\twotrack.sys 2013-05-05 21:07:46 . 2001-08-17 18:51:22 166784 -c–a-w- C:\WINDOWS\system32\dllcache\tridxpm.sys 2013-05-05 21:07:41 . 2001-08-18 04:36:32 525568 -c–a-w- C:\WINDOWS\system32\dllcache\tridxp.dll 2013-05-05 21:07:36 . 2001-08-17 18:51:16 159232 -c–a-w- C:\WINDOWS\system32\dllcache\tridkbm.sys 2013-05-05 21:07:31 . 2001-08-17 20:56:06 440576 -c–a-w- C:\WINDOWS\system32\dllcache\tridkb.dll 2013-05-05 21:07:26 . 2001-08-17 18:51:16 222336 -c–a-w- C:\WINDOWS\system32\dllcache\trid3dm.sys 2013-05-05 21:07:21 . 2001-08-17 20:56:06 315520 -c–a-w- C:\WINDOWS\system32\dllcache\trid3d.dll 2013-05-05 21:07:16 . 2001-08-17 18:12:12 34375 -c–a-w- C:\WINDOWS\system32\dllcache\tpro4.sys 2013-05-05 21:07:11 . 2001-08-18 04:35:42 42496 -c–a-w- C:\WINDOWS\system32\dllcache\tp4res.dll 2013-05-05 21:07:09 . 2008-04-14 00:12:38 82944 -c–a-w- C:\WINDOWS\system32\dllcache\tp4mon.exe 2013-05-05 21:07:04 . 2001-08-18 04:36:32 31744 -c–a-w- C:\WINDOWS\system32\dllcache\tp4.dll 2013-05-05 21:06:54 . 2001-08-17 19:51:56 4992 -c–a-w- C:\WINDOWS\system32\dllcache\toside.sys 2013-05-05 21:06:49 . 2001-08-17 20:02:00 230912 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd03.sys 2013-05-05 21:06:44 . 2001-08-17 20:01:52 241664 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd02.sys 2013-05-05 21:06:39 . 2001-08-17 18:10:26 28232 -c–a-w- C:\WINDOWS\system32\dllcache\tos4mo.sys 2013-05-05 21:06:32 . 2001-08-17 18:14:26 123995 -c–a-w- C:\WINDOWS\system32\dllcache\tjisdn.sys 2013-05-05 21:06:25 . 2001-08-17 18:51:10 138528 -c–a-w- C:\WINDOWS\system32\dllcache\tgiulnt5.sys 2013-05-05 21:06:20 . 2001-08-17 20:56:04 81408 -c–a-w- C:\WINDOWS\system32\dllcache\tgiul50.dll 2013-05-05 21:06:18 . 2008-04-13 18:40:50 149376 -c–a-w- C:\WINDOWS\system32\dllcache\tffsport.sys 2013-05-05 21:06:10 . 2001-08-17 18:13:00 17129 -c–a-w- C:\WINDOWS\system32\dllcache\tdkcd31.sys 2013-05-05 21:06:06 . 2001-08-17 18:13:00 37961 -c–a-w- C:\WINDOWS\system32\dllcache\tdk100b.sys 2013-05-05 21:05:55 . 2001-08-17 19:49:46 30464 -c–a-w- C:\WINDOWS\system32\dllcache\tbatm155.sys 2013-05-05 21:05:49 . 2001-08-17 19:52:54 7040 -c–a-w- C:\WINDOWS\system32\dllcache\tandqic.sys 2013-05-05 21:05:44 . 2001-08-17 18:50:12 36640 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4mini.sys 2013-05-05 21:05:39 . 2001-08-17 20:56:04 172768 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4disp.dll 2013-05-05 21:05:30 . 2001-08-17 20:07:36 32640 -c–a-w- C:\WINDOWS\system32\dllcache\symc8xx.sys 2013-05-05 21:05:26 . 2001-08-17 20:07:34 16256 -c–a-w- C:\WINDOWS\system32\dllcache\symc810.sys 2013-05-05 21:05:22 . 2001-08-17 20:07:42 30688 -c–a-w- C:\WINDOWS\system32\dllcache\sym_u3.sys 2013-05-05 21:05:17 . 2001-08-17 20:07:40 28384 -c–a-w- C:\WINDOWS\system32\dllcache\sym_hi.sys 2013-05-05 21:05:12 . 2001-08-18 04:36:32 94293 -c–a-w- C:\WINDOWS\system32\dllcache\sxports.dll 2013-05-05 21:05:08 . 2001-08-17 19:50:58 103936 -c–a-w- C:\WINDOWS\system32\dllcache\sx.sys 2013-05-05 21:05:03 . 2001-08-17 20:02:56 3968 -c–a-w- C:\WINDOWS\system32\dllcache\swusbflt.sys 2013-05-05 21:04:59 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpidflt.dll 2013-05-05 21:04:54 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpdflt2.dll 2013-05-05 21:04:50 . 2001-08-18 04:36:32 53760 -c–a-w- C:\WINDOWS\system32\dllcache\sw_wheel.dll 2013-05-05 21:04:45 . 2001-08-18 04:36:32 41472 -c–a-w- C:\WINDOWS\system32\dllcache\sw_effct.dll 2013-05-05 21:04:42 . 2008-04-13 18:46:22 15232 -c–a-w- C:\WINDOWS\system32\dllcache\streamip.sys 2013-05-05 21:04:37 . 2001-08-18 04:36:32 155648 -c–a-w- C:\WINDOWS\system32\dllcache\stlnprop.dll 2013-05-05 21:04:33 . 2001-08-18 04:36:32 53248 -c–a-w- C:\WINDOWS\system32\dllcache\stlncoin.dll 2013-05-05 21:04:29 . 2001-08-17 18:18:18 285760 -c–a-w- C:\WINDOWS\system32\dllcache\stlnata.sys 2013-05-05 21:04:23 . 2001-08-17 19:51:20 16896 -c–a-w- C:\WINDOWS\system32\dllcache\stcusb.sys 2013-05-05 21:04:14 . 2001-08-17 18:11:08 48736 -c–a-w- C:\WINDOWS\system32\dllcache\srwlnd5.sys 2013-05-05 21:04:06 . 2001-08-18 04:36:32 99328 -c–a-w- C:\WINDOWS\system32\dllcache\srusd.dll 2013-05-05 21:03:58 . 2001-08-18 04:36:32 24660 -c–a-w- C:\WINDOWS\system32\dllcache\spxupchk.dll 2013-05-05 21:03:50 . 2001-08-17 19:51:00 61824 -c–a-w- C:\WINDOWS\system32\dllcache\speed.sys 2013-05-05 21:03:46 . 2001-08-18 04:36:32 106584 -c–a-w- C:\WINDOWS\system32\dllcache\spdports.dll 2013-05-05 21:03:41 . 2001-08-17 20:07:44 19072 -c–a-w- C:\WINDOWS\system32\dllcache\sparrow.sys 2013-05-05 21:03:36 . 2001-08-17 19:56:16 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonypvu1.sys 2013-05-05 21:03:32 . 2001-08-17 18:51:22 37040 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.sys 2013-05-05 21:03:27 . 2001-08-18 04:36:32 114688 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.dll 2013-05-05 21:03:23 . 2001-08-17 18:51:20 20752 -c–a-w- C:\WINDOWS\system32\dllcache\sonync.sys 2013-05-05 21:03:18 . 2001-08-17 19:53:04 9600 -c–a-w- C:\WINDOWS\system32\dllcache\sonymc.sys 2013-05-05 21:03:17 . 2008-04-13 18:40:52 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonyait.sys 2013-05-05 21:03:11 . 2001-08-17 19:53:14 7040 -c–a-w- C:\WINDOWS\system32\dllcache\snyaitmc.sys 2013-05-05 21:02:52 . 2001-08-17 18:51:00 58368 -c–a-w- C:\WINDOWS\system32\dllcache\smiminib.sys 2013-05-05 21:02:45 . 2001-08-17 20:56:04 147200 -c–a-w- C:\WINDOWS\system32\dllcache\smidispb.dll 2013-05-05 21:02:39 . 2001-08-17 18:12:48 25034 -c–a-w- C:\WINDOWS\system32\dllcache\smcpwr2n.sys 2013-05-05 21:02:34 . 2001-08-17 18:10:28 35913 -c–a-w- C:\WINDOWS\system32\dllcache\smcirda.sys 2013-05-05 21:02:30 . 2001-08-17 18:12:46 24576 -c–a-w- C:\WINDOWS\system32\dllcache\smc8000n.sys 2013-05-05 21:02:25 . 2001-08-17 19:57:56 6784 -c–a-w- C:\WINDOWS\system32\dllcache\smbhc.sys (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2013-05-16 11:06:22 . 2012-04-08 14:12:52 692104 —-a-w- C:\WINDOWS\system32\FlashPlayerApp.exe 2013-05-16 11:06:22 . 2011-06-13 00:36:04 71048 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2013-04-27 15:35:23 . 2013-03-28 22:17:50 13024 —-a-w- C:\WINDOWS\system32\drivers\SWDUMon.sys 2013-04-16 22:17:15 . 2006-03-15 12:00:00 920064 —-a-w- C:\WINDOWS\system32\wininet.dll 2013-04-16 22:17:14 . 2006-03-15 12:00:00 43520 —-a-w- C:\WINDOWS\system32\licmgr10.dll 2013-04-16 22:17:14 . 2006-03-15 12:00:00 1469440 ——w- C:\WINDOWS\system32\inetcpl.cpl 2013-04-16 06:22:37 . 2013-04-16 06:22:37 388096 —-a-r- C:\Documents and Settings\Sherry\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2013-04-12 23:28:55 . 2006-03-15 12:00:00 385024 —-a-w- C:\WINDOWS\system32\html.iec 2013-04-10 01:31:19 . 2006-03-15 12:00:00 1876352 —-a-w- C:\WINDOWS\system32\win32k.sys 2013-04-06 22:32:14 . 2013-04-06 22:32:14 445016 —-a-w- C:\WINDOWS\system32\wrap_oal.dll 2013-04-06 22:32:14 . 2013-04-06 22:32:14 109144 —-a-w- C:\WINDOWS\system32\OpenAL32.dll 2013-04-05 16:01:27 . 2013-04-04 14:39:11 33112 —-a-w- C:\WINDOWS\system32\drivers\avgtpx86.sys 2013-04-04 20:50:32 . 2010-10-27 11:21:04 22856 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys 2013-03-28 22:23:37 . 2013-03-28 22:23:37 0 —-a-w- C:\WINDOWS\system32\TempWmicBatchFile.bat 2013-03-26 13:13:07 . 2013-03-26 13:13:29 94112 —-a-w- C:\WINDOWS\system32\WindowsAccessBridge.dll 2013-03-26 13:13:02 . 2012-03-24 20:23:39 143872 —-a-w- C:\WINDOWS\system32\javacpl.cpl 2013-03-26 13:13:01 . 2012-07-15 13:39:56 861088 —-a-w- C:\WINDOWS\system32\npDeployJava1.dll 2013-03-26 13:13:01 . 2010-11-05 03:22:53 782240 —-a-w- C:\WINDOWS\system32\deployJava1.dll 2013-03-08 08:36:22 . 2006-03-15 12:00:00 293376 —-a-w- C:\WINDOWS\system32\winsrv.dll 2013-03-07 01:28:24 . 2006-03-15 12:00:00 2193408 —-a-w- C:\WINDOWS\system32\ntoskrnl.exe 2013-03-07 00:50:28 . 2004-08-03 22:59:00 2070016 —-a-w- C:\WINDOWS\system32\ntkrnlpa.exe 2013-02-27 07:56:51 . 2010-10-26 22:23:11 2067456 —-a-w- C:\WINDOWS\system32\mstscax.dll

sinnead

Post #66May 23, 2013, 8:13 AM UTC

No difference in trying to get into safe mode. Exact same thing happened. I'm wondering about a system restore? I know I'll lose a lot of info, but would it help? Yes, the comp is running a LOT more smoothly. But I am concerned about not being able to enter safe mode.

Satchfan

Post #67May 23, 2013, 11:08 AM UTC

Hi sinnead

Full marks for your staying-power in dealing with these niggles.

comp is running a LOT more smoothly. But I am concerned about not being able to enter safe mode.

I agree that the situation is not satisfactory and the safe mode issue is very strange considering that you have run the Safe mode reg “fix” tools.

ComboFix is still not functioning properly for some reason and the file I wanted deleted is still there.

I was wondering if you installed a new printer/scanner recently and, if so, is that about the time that you noticed that things were not as they should be?

You can try a system restore by all means. You won’t lose files that you have saved recently but we’ll need to run some scans again to be sure that nothing unsavoury returns.

Make sure that you restore it to a time prior to the problems.

Let me know what happens.

Satchfan

sinnead

Post #68May 23, 2013, 2:49 PM UTC

The problems started when I had done the most recent update for AVG. I realized that after it was deleted and the problems went away! Okay, now- how to I do a restore, and just how far back should I go?

Satchfan

Post #69May 23, 2013, 9:42 PM UTC

The problems started when I had done the most recent update for AVG.

I think the problem was caused by you deciding on your own to "delete" AVG and install BitDefender when you had been advised to do nothing without direction.

I can understand that you want to solve this but changing any programs or settings without instruction hindered what we were trying to achieve.

Let's deal with the security situation later but try a system restore and take it from there.

log on to Windows as an administrator
click Start, All Programs, Accessories, System Tools and then click System Restore
on the “Welcome to System Restore” page, click to select the Restore my computer to an earlier time option, and then click Next
on the “Select a Restore Point" page, click the most recent system restore point when you believe your system was working OK and then click Next
Note A System Restore message may appear that lists configuration changes that System Restore will make. Click OK
on the “Confirm Restore Point Selection” page, click Next. System Restore restores the previous Windows XP configuration, and then restarts the computer
log on to the computer as an Administrator. Then click OK on the System Restore “Restoration Complete” page.

Let me know what happens.

Satchfan

sinnead

Post #70May 24, 2013, 1:18 AM UTC

Well, that didn't work. For some reason it won't let me use a restore point before April 22nd. Won't even let me go back from April to March! And while yes, the problem with safe mode may have been because I wasn't comfortable with going any length of time with no antivirus(got client info on comp), the original problems I'd been having were prior to deleting AVG.

Satchfan

Post #71May 24, 2013, 8:17 AM UTC last edited May 24, 2013, 8:26 AM UTC

I wasn't comfortable with going any length of time with no antivirus

That is understandable but the reason that we don't suggest installing/uninstalling/changing antivirus on an infected computer is because it can have unpredictable consequences when the computer is unstable.

Have you tried Last Known Good Configuration?• restart your computer and hit the F8 key constantly until a menu shows up
• use the arrow keys to navigate to Last Known Good Configuration
• press Enter
================================================

Run OTL

Whatever the result of trying that, I'd like another OTL scan.

open OTL again, click on Extra Registry -> Use Safelist
then click Run Scan

Please post back with the 2 logfiles

Thanks

Satchfan

sinnead

Post #72May 25, 2013, 6:43 PM UTC

Last known good configuration worked.

OTL logfile created on: 25/05/2013 10:05:27 AM - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.73 Gb Available Physical Memory | 51.13% Memory free
3.29 Gb Paging File | 2.69 Gb Available in Paging File | 81.88% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 144.17 Gb Free Space | 61.91% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/05/22 23:44:09 | 000,825,808 | —- | M] (Google Inc.) – C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
PRC - [2013/05/14 17:06:20 | 000,235,728 | —- | M] (Bitdefender) – C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
PRC - [2013/05/14 17:06:14 | 000,027,136 | —- | M] (Bitdefender) – C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
PRC - [2013/05/11 21:08:20 | 000,216,968 | —- | M] (Google Inc.) – C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Fix it Center\Matsvc.exe
PRC - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) – C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2013/05/22 23:44:07 | 000,393,168 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\ppgooglenaclpluginchrome.dll
MOD - [2013/05/22 23:43:59 | 004,051,408 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\pdf.dll
MOD - [2013/05/22 23:43:03 | 001,597,392 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\ffmpegsumo.dll
MOD - [2013/05/14 17:06:17 | 000,093,040 | —- | M] () – C:\Program Files\Bitdefender\Antivirus Free Edition\bdmetrics.dll
MOD - [2013/05/14 17:06:14 | 000,508,136 | —- | M] () – C:\Program Files\Bitdefender\Antivirus Free Edition\sqlite3.dll
MOD - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
MOD - [2013/01/02 00:49:10 | 001,292,288 | —- | M] () – C:\WINDOWS\system32\quartz.dll
MOD - [2012/09/07 17:09:26 | 000,394,408 | —- | M] () – \\?\C:\Program Files\Bitdefender\Antivirus Free Edition\ThreatScanner\trufos.dll
MOD - [2012/02/16 04:13:10 | 013,137,920 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\ae33325d95b86d18adfe3b2b76deb55e\System.Windows.Forms.ni.dll
MOD - [2012/02/16 04:12:28 | 001,652,736 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\2f6d092e53fd5fe14e5a2e6ba7055cef\System.Drawing.ni.dll
MOD - [2012/02/16 04:09:24 | 005,618,176 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\fd4bcc08668bb561ba59e57a30de6bcf\System.Xml.ni.dll
MOD - [2012/02/16 04:09:05 | 009,090,560 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\2f52fc9cf3baf5181d1897788d9678f4\System.ni.dll
MOD - [2011/10/14 03:08:10 | 014,408,704 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\f3b6f64941ee3b90d6abb16e415ceb3b\mscorlib.ni.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/04/13 18:11:59 | 000,014,336 | —- | M] () – C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 18:11:51 | 000,059,904 | —- | M] () – C:\WINDOWS\system32\devenum.dll
MOD - [2006/03/15 06:00:00 | 000,268,288 | —- | M] () – C:\WINDOWS\system32\sbe.dll

========== Services (SafeList) ==========

SRV - [2013/05/16 05:06:22 | 000,256,904 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/14 17:06:14 | 000,027,136 | —- | M] (Bitdefender) [Auto | Running] – C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe – (gzserv)
SRV - [2013/04/06 16:32:02 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () [Auto | Running] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe – (vToolbarUpdater14.2.0)
SRV - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe – (MBAMScheduler)
SRV - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files\Microsoft Fix it Center\Matsvc.exe – (MatSvc)
SRV - [2010/03/18 11:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Sherry\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2013/05/14 17:07:41 | 000,148,600 | —- | M] (Bitdefender SRL) [Kernel | System | Running] – C:\Program Files\Bitdefender\Antivirus Free Edition\bdftdif.sys – (bdftdif)
DRV - [2013/05/14 17:07:28 | 000,633,344 | —- | M] (BitDefender) [File_System | Boot | Running] – C:\WINDOWS\system32\drivers\avc3.sys – (avc3)
DRV - [2013/05/14 17:07:26 | 000,486,536 | —- | M] (BitDefender) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\avckf.sys – (avckf)
DRV - [2013/05/14 17:07:24 | 000,164,952 | —- | M] (BitDefender LLC) [File_System | System | Running] – C:\WINDOWS\system32\drivers\gzflt.sys – (gzflt)
DRV - [2013/04/27 09:35:23 | 000,013,024 | —- | M] () [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\SWDUMon.sys – (SWDUMon)
DRV - [2013/04/05 10:01:27 | 000,033,112 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtpx86.sys – (avgtp)
DRV - [2013/04/04 14:50:32 | 000,022,856 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2012/10/31 12:13:10 | 000,343,456 | —- | M] (BitDefender S.R.L.) [File_System | Boot | Running] – C:\WINDOWS\system32\drivers\trufos.sys – (trufos)
DRV - [2012/10/02 11:31:18 | 000,134,136 | —- | M] (BitDefender LLC) [Kernel | System | Running] – C:\Program Files\Bitdefender\Antivirus Free Edition\bdselfpr.sys – (bdselfpr)
DRV - [2011/07/07 17:39:06 | 006,367,848 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2010/08/05 02:34:34 | 001,210,624 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaud.sys – (ksaud)
DRV - [2010/07/24 00:54:26 | 002,016,640 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaudfl.sys – (ksaudfl)
DRV - [2009/11/18 07:17:00 | 001,395,800 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Monfilt.sys – (Monfilt)
DRV - [2009/11/18 07:16:00 | 001,691,480 | —- | M] (Creative) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Ambfilt.sys – (Ambfilt)
DRV - [2006/06/16 22:09:48 | 001,611,776 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2004/08/03 16:31:34 | 000,020,992 | —- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RTL8139.sys – (rtl8139)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B0 15 FE 87 F9 2B CE 01 [binary data]
IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5: C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2011/04/17 16:43:48 | 000,000,000 | —D | M]

[2011/05/12 15:40:06 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/11/04 21:22:58 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/02 21:21:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/12/04 21:43:54 | 000,151,552 | —- | M] (PopCap Games) – C:\Program Files\mozilla firefox\plugins\nppopcaploader.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: RocketLife Secure Plug-In Layer (Enabled) = C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\

O1 HOSTS File: ([2013/05/04 09:54:12 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - Startup: C:\Documents and Settings\Cliff\Start Menu\Programs\Startup\Styler.lnk = C:\Documents and Settings\Cliff\Application Data\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareup…13/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave.com/content/bejeweled…ploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareup…015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareup…30321/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22C0B27B-0C75-4F33-8875-CAC5AA0C595B}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/26 19:25:31 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/05/23 00:26:02 | 000,000,000 | —D | C] – C:\ComboFix
[2013/05/18 08:34:18 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/15 23:21:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Desktop\tdsskiller
[2013/05/14 17:08:05 | 000,242,504 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\avchv.sys
[2013/05/14 17:07:28 | 000,633,344 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\avc3.sys
[2013/05/14 17:07:26 | 000,486,536 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\avckf.sys
[2013/05/14 17:07:24 | 000,164,952 | —- | C] (BitDefender LLC) – C:\WINDOWS\System32\drivers\gzflt.sys
[2013/05/13 07:13:55 | 005,066,131 | R— | C] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:02:13 | 000,000,000 | —D | C] – C:\Program Files\Safari
[2013/05/05 15:13:18 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2013/05/05 15:13:13 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2013/05/05 15:13:01 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2013/05/05 15:12:40 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2013/05/05 15:12:34 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2013/05/05 15:12:32 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2013/05/05 15:12:27 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2013/05/05 15:12:25 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2013/05/05 15:12:23 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2013/05/05 15:12:04 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2013/05/05 15:12:01 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2013/05/05 15:11:56 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2013/05/05 15:11:41 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2013/05/05 15:11:34 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2013/05/05 15:11:28 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2013/05/05 15:11:16 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2013/05/05 15:11:14 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2013/05/05 15:11:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2013/05/05 15:11:08 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2013/05/05 15:11:03 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2013/05/05 15:11:01 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2013/05/05 15:11:00 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2013/05/05 15:10:57 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2013/05/05 15:10:55 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2013/05/05 15:10:54 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2013/05/05 15:10:48 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2013/05/05 15:10:43 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2013/05/05 15:10:37 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2013/05/05 15:10:25 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2013/05/05 15:10:19 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2013/05/05 15:10:13 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2013/05/05 15:10:07 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2013/05/05 15:10:02 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2013/05/05 15:10:01 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2013/05/05 15:09:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2013/05/05 15:09:51 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2013/05/05 15:09:45 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2013/05/05 15:09:40 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2013/05/05 15:09:35 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2013/05/05 15:09:29 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2013/05/05 15:09:24 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2013/05/05 15:09:19 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2013/05/05 15:09:14 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2013/05/05 15:09:11 | 000,020,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbuhci.sys
[2013/05/05 15:09:09 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2013/05/05 15:09:05 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2013/05/05 15:08:56 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2013/05/05 15:08:51 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2013/05/05 15:08:46 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2013/05/05 15:08:41 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2013/05/05 15:08:36 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2013/05/05 15:08:31 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2013/05/05 15:08:27 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2013/05/05 15:08:22 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2013/05/05 15:08:17 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2013/05/05 15:08:11 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2013/05/05 15:08:06 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2013/05/05 15:08:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2013/05/05 15:07:46 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2013/05/05 15:07:41 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2013/05/05 15:07:36 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2013/05/05 15:07:31 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2013/05/05 15:07:26 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2013/05/05 15:07:21 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2013/05/05 15:07:16 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2013/05/05 15:07:11 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2013/05/05 15:07:09 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2013/05/05 15:07:04 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2013/05/05 15:06:54 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2013/05/05 15:06:49 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2013/05/05 15:06:44 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2013/05/05 15:06:39 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2013/05/05 15:06:32 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2013/05/05 15:06:25 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2013/05/05 15:06:20 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2013/05/05 15:06:18 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2013/05/05 15:06:10 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2013/05/05 15:06:06 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2013/05/05 15:05:55 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2013/05/05 15:05:49 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2013/05/05 15:05:44 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2013/05/05 15:05:39 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2013/05/05 15:05:30 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2013/05/05 15:05:26 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2013/05/05 15:05:22 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2013/05/05 15:05:17 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2013/05/05 15:05:12 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2013/05/05 15:05:08 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2013/05/05 15:05:03 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2013/05/05 15:04:59 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2013/05/05 15:04:54 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2013/05/05 15:04:50 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2013/05/05 15:04:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2013/05/05 15:04:42 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2013/05/05 15:04:37 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2013/05/05 15:04:33 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2013/05/05 15:04:29 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2013/05/05 15:04:23 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2013/05/05 15:04:14 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2013/05/05 15:04:06 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2013/05/05 15:03:58 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2013/05/05 15:03:50 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2013/05/05 15:03:46 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2013/05/05 15:03:41 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2013/05/05 15:03:36 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2013/05/05 15:03:32 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2013/05/05 15:03:27 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2013/05/05 15:03:23 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2013/05/05 15:03:18 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2013/05/05 15:03:17 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2013/05/05 15:03:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2013/05/05 15:02:52 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2013/05/05 15:02:45 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2013/05/05 15:02:39 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2013/05/05 15:02:34 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2013/05/05 15:02:30 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2013/05/05 15:02:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2013/05/05 15:02:24 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2013/05/05 15:02:22 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2013/05/05 15:02:17 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2013/05/05 15:02:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2013/05/05 15:02:07 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2013/05/05 15:02:01 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2013/05/05 15:01:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2013/05/05 15:01:51 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2013/05/05 15:01:47 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2013/05/05 15:01:42 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2013/05/05 15:01:38 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2013/05/05 15:01:34 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2013/05/05 15:01:32 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2013/05/05 15:01:28 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2013/05/05 15:01:24 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2013/05/05 15:01:19 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2013/05/05 15:01:15 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2013/05/05 15:01:10 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2013/05/05 15:01:05 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2013/05/05 15:00:51 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2013/05/05 15:00:47 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2013/05/05 15:00:42 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2013/05/05 15:00:38 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2013/05/05 15:00:34 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2013/05/05 15:00:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2013/05/05 15:00:21 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2013/05/05 15:00:12 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2013/05/05 15:00:10 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2013/05/05 15:00:06 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2013/05/05 14:59:57 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2013/05/05 14:59:52 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2013/05/05 14:59:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2013/05/05 14:59:42 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2013/05/05 14:59:39 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2013/05/05 14:59:35 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2013/05/05 14:59:27 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2013/05/05 14:59:23 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2013/05/05 14:59:19 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2013/05/05 14:59:14 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2013/05/05 14:59:10 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2013/05/05 14:59:06 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2013/05/05 14:59:02 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2013/05/05 14:58:57 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2013/05/05 14:58:53 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2013/05/05 14:58:49 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2013/05/05 14:58:45 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2013/05/05 14:58:40 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2013/05/05 14:58:34 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2013/05/05 14:58:30 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2013/05/05 14:58:28 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2013/05/05 14:58:27 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2013/05/05 14:58:19 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2013/05/05 14:58:14 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2013/05/05 14:58:05 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2013/05/05 14:57:59 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2013/05/05 14:57:55 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2013/05/05 14:57:49 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2013/05/05 14:57:43 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2013/05/05 14:57:27 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2013/05/05 14:57:21 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2013/05/05 14:57:17 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2013/05/05 14:57:12 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2013/05/05 14:57:07 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2013/05/05 14:56:55 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2013/05/05 14:56:51 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2013/05/05 14:56:47 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2013/05/05 14:56:43 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2013/05/05 14:56:39 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2013/05/05 14:56:37 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2013/05/05 14:56:31 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2013/05/05 14:56:27 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2013/05/05 14:56:23 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2013/05/05 14:56:21 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2013/05/05 14:56:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2013/05/05 14:56:11 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2013/05/05 14:56:05 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2013/05/05 14:55:59 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2013/05/05 14:55:54 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2013/05/05 14:55:53 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2013/05/05 14:55:48 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2013/05/05 14:55:37 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2013/05/05 14:55:33 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2013/05/05 14:55:29 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2013/05/05 14:55:25 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2013/05/05 14:55:20 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2013/05/05 14:55:16 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2013/05/05 14:55:12 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2013/05/05 14:55:10 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2013/05/05 14:55:09 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2013/05/05 14:55:07 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2013/05/05 14:55:06 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2013/05/05 14:55:01 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2013/05/05 14:54:57 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2013/05/05 14:54:55 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2013/05/05 14:54:51 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2013/05/05 14:54:46 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2013/05/05 14:54:42 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2013/05/05 14:54:38 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2013/05/05 14:54:34 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2013/05/05 14:54:32 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2013/05/05 14:54:28 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2013/05/05 14:54:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2013/05/05 14:54:11 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2013/05/05 14:54:06 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2013/05/05 14:54:02 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2013/05/05 14:53:58 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2013/05/05 14:53:54 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2013/05/05 14:53:50 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2013/05/05 14:53:46 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2013/05/05 14:53:42 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2013/05/05 14:53:38 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2013/05/05 14:53:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2013/05/05 14:53:29 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2013/05/05 14:53:25 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2013/05/05 14:53:21 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2013/05/05 14:53:16 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2013/05/05 14:53:12 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2013/05/05 14:53:02 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2013/05/05 14:52:58 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2013/05/05 14:52:48 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2013/05/05 14:52:42 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2013/05/05 14:52:38 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2013/05/05 14:52:37 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2013/05/05 14:52:29 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2013/05/05 14:52:25 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2013/05/05 14:52:19 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2013/05/05 14:52:14 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2013/05/05 14:52:07 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2013/05/05 14:52:01 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2013/05/05 14:51:57 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2013/05/05 14:51:53 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2013/05/05 14:51:52 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2013/05/05 14:51:48 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2013/05/05 14:51:44 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2013/05/05 14:51:40 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2013/05/05 14:51:37 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2013/05/05 14:51:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2013/05/05 14:51:29 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2013/05/05 14:51:25 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2013/05/05 14:51:21 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2013/05/05 14:51:17 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2013/05/05 14:51:13 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2013/05/05 14:51:09 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2013/05/05 14:51:05 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2013/05/05 14:51:01 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2013/05/05 14:50:57 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2013/05/05 14:50:52 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2013/05/05 14:50:41 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2013/05/05 14:50:40 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2013/05/05 14:50:33 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2013/05/05 14:50:22 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2013/05/05 14:50:20 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2013/05/05 14:50:03 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2013/05/05 14:49:59 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2013/05/05 14:49:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2013/05/05 14:49:46 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2013/05/05 14:49:27 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2013/05/05 14:49:20 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2013/05/05 14:49:11 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2013/05/05 14:49:05 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2013/05/05 14:49:01 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2013/05/05 14:48:57 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2013/05/05 14:48:53 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2013/05/05 14:48:49 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2013/05/05 14:48:44 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2013/05/05 14:48:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2013/05/05 14:48:32 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2013/05/05 14:48:28 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2013/05/05 14:48:25 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2013/05/05 14:48:20 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2013/05/05 14:48:20 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2013/05/05 14:48:16 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2013/05/05 14:48:12 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2013/05/05 14:48:11 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2013/05/05 14:48:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2013/05/05 14:48:07 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2013/05/05 14:48:06 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2013/05/05 14:48:03 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2013/05/05 14:47:56 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2013/05/05 14:47:47 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2013/05/05 14:47:44 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2013/05/05 14:47:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2013/05/05 14:47:36 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2013/05/05 14:47:35 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2013/05/05 14:47:31 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2013/05/05 14:47:26 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2013/05/05 14:47:26 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2013/05/05 14:47:25 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2013/05/05 14:47:24 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2013/05/05 14:47:19 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2013/05/05 14:47:15 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2013/05/05 14:47:15 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2013/05/05 14:46:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2013/05/05 14:46:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2013/05/05 14:46:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2013/05/05 14:46:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2013/05/05 14:46:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2013/05/05 14:46:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2013/05/05 14:46:20 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2013/05/05 14:46:17 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2013/05/05 14:46:16 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2013/05/05 14:46:13 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2013/05/05 14:46:12 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2013/05/05 14:46:11 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2013/05/05 14:46:09 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2013/05/05 14:46:02 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2013/05/05 14:45:58 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2013/05/05 14:45:55 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2013/05/05 14:45:54 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2013/05/05 14:45:50 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2013/05/05 14:45:47 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2013/05/05 14:45:07 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2013/05/05 14:45:04 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2013/05/05 14:45:00 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2013/05/05 14:44:57 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2013/05/05 14:44:53 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2013/05/05 14:44:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2013/05/05 14:44:46 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2013/05/05 14:44:43 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2013/05/05 14:44:40 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2013/05/05 14:44:36 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2013/05/05 14:44:33 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2013/05/05 14:44:30 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2013/05/05 14:44:26 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2013/05/05 14:44:23 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2013/05/05 14:44:20 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2013/05/05 14:44:19 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2013/05/05 14:44:16 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2013/05/05 14:44:12 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2013/05/05 14:44:12 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2013/05/05 14:44:11 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2013/05/05 14:43:45 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2013/05/05 14:43:41 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2013/05/05 14:43:38 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2013/05/05 14:43:35 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2013/05/05 14:43:31 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2013/05/05 14:43:28 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2013/05/05 14:43:25 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2013/05/05 14:43:21 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2013/05/05 14:43:18 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2013/05/05 14:43:15 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2013/05/05 14:43:11 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2013/05/05 14:43:08 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2013/05/05 14:43:04 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2013/05/05 14:43:00 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2013/05/05 14:42:56 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2013/05/05 14:42:53 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2013/05/05 14:42:49 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2013/05/05 14:42:46 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2013/05/05 14:42:43 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2013/05/05 14:42:40 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2013/05/05 14:42:34 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2013/05/05 14:42:27 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2013/05/05 14:42:21 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2013/05/05 14:42:15 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2013/05/05 14:42:09 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2013/05/05 14:42:04 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2013/05/05 14:42:00 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2013/05/05 14:42:00 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2013/05/05 14:41:54 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2013/05/05 14:41:51 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2013/05/05 14:41:48 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2013/05/05 14:41:44 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2013/05/05 14:41:41 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2013/05/05 14:41:40 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2013/05/05 14:41:36 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2013/05/05 14:41:33 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2013/05/05 14:41:31 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2013/05/05 14:41:28 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2013/05/05 14:41:25 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2013/05/05 14:41:13 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2013/05/05 14:41:10 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2013/05/05 14:41:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2013/05/05 14:41:01 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2013/05/05 14:40:58 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2013/05/05 14:40:55 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2013/05/05 14:40:53 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2013/05/05 14:40:50 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2013/05/05 14:40:44 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2013/05/05 14:40:36 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2013/05/05 14:40:31 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2013/05/05 14:40:29 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2013/05/05 14:40:26 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2013/05/05 14:40:24 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2013/05/05 14:40:19 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2013/05/05 14:40:16 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2013/05/05 14:40:09 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2013/05/05 14:40:07 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2013/05/05 14:40:04 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2013/05/05 14:39:58 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2013/05/05 14:39:58 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2013/05/05 14:39:55 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2013/05/05 14:39:51 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2013/05/05 14:39:49 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2013/05/05 14:39:46 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2013/05/05 14:39:44 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2013/05/05 14:39:41 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2013/05/05 14:39:39 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2013/05/05 14:39:36 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2013/05/05 14:39:34 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2013/05/05 14:39:31 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2013/05/05 14:39:28 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2013/05/05 14:39:26 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2013/05/05 14:39:23 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2013/05/05 14:39:21 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2013/05/05 14:39:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2013/05/05 14:39:17 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2013/05/05 14:39:15 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2013/05/05 14:39:09 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2013/05/05 14:39:07 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2013/05/05 14:39:05 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2013/05/05 14:39:04 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2013/05/05 14:39:02 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2013/05/05 14:39:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2013/05/05 14:38:58 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2013/05/05 14:38:56 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2013/05/05 14:38:55 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2013/05/05 14:38:53 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2013/05/05 14:38:51 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2013/05/05 14:38:49 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2013/05/05 14:38:47 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2013/05/05 14:38:46 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2013/05/05 14:38:43 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2013/05/05 14:38:41 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2013/05/05 14:38:40 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2013/05/05 14:38:33 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2013/05/05 14:38:31 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2013/05/05 14:38:29 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2013/05/05 14:38:23 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2013/05/05 14:38:21 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2013/05/05 14:38:17 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2013/05/05 14:38:13 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2013/05/05 14:38:11 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2013/05/05 14:38:10 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2013/05/05 14:38:08 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2013/05/05 14:38:07 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2013/05/05 14:37:59 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2013/05/05 14:37:59 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2013/05/05 14:37:57 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2013/05/05 14:37:55 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2013/05/05 14:37:49 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2013/05/05 14:37:47 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2013/05/05 14:37:45 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2013/05/05 14:37:44 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2013/05/05 14:37:40 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2013/05/05 14:37:39 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2013/05/05 14:37:37 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2013/05/05 14:37:36 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2013/05/05 14:37:34 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2013/05/05 14:37:33 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2013/05/05 14:37:31 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2013/05/05 14:37:29 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2013/05/05 14:37:28 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2013/05/05 14:37:26 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2013/05/05 14:37:25 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2013/05/05 14:37:23 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2013/05/05 14:37:21 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2013/05/05 14:37:20 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2013/05/05 14:37:16 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2013/05/05 14:37:14 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2013/05/05 14:37:12 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2013/05/05 14:37:10 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2013/05/05 14:37:09 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2013/05/05 14:37:07 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2013/05/05 14:37:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2013/05/05 14:37:03 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2013/05/05 14:37:00 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2013/05/05 14:36:59 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2013/05/05 14:36:57 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2013/05/05 14:36:55 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2013/05/05 14:36:54 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2013/05/05 14:36:50 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2013/05/05 14:36:48 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2013/05/05 14:36:44 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2013/05/05 14:36:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2013/05/05 14:36:41 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2013/05/05 14:36:40 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2013/05/05 14:36:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2013/05/05 14:36:37 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2013/05/05 14:36:35 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2013/05/05 14:36:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2013/05/05 14:36:32 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2013/05/05 14:36:32 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2013/05/05 14:36:30 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2013/05/05 14:36:29 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2013/05/05 14:36:27 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2013/05/05 14:36:26 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2013/05/05 14:36:24 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2013/05/05 14:36:23 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2013/05/05 14:36:21 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2013/05/05 14:36:20 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2013/05/05 14:36:19 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2013/05/05 14:36:17 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2013/05/05 14:36:16 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2013/05/05 14:36:12 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2013/05/05 14:36:11 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2013/05/05 14:36:09 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2013/05/05 14:36:07 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2013/05/05 14:36:06 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2013/05/05 14:36:04 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2013/05/05 14:35:57 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2013/05/05 14:35:54 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2013/05/05 14:35:53 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2013/05/05 14:35:49 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2013/05/05 14:35:48 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2013/05/05 14:35:47 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2013/05/05 14:35:45 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2013/05/05 14:35:44 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2013/05/05 14:35:43 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2013/05/05 14:35:41 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2013/05/05 14:35:40 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2013/05/05 14:35:37 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2013/05/05 14:35:36 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2013/05/05 14:35:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2013/05/05 14:35:25 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2013/05/05 14:35:24 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2013/05/05 14:35:23 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2013/05/05 14:35:22 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2013/05/05 14:35:21 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2013/05/05 14:35:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2013/05/05 14:35:18 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2013/05/05 14:35:17 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2013/05/05 14:35:16 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2013/05/05 14:35:15 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2013/05/05 14:35:13 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2013/05/05 14:35:10 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2013/05/05 14:35:09 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2013/05/05 14:35:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2013/05/05 14:35:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2013/05/05 14:35:05 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2013/05/05 14:35:04 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2013/05/05 14:35:03 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2013/05/05 14:35:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2013/05/05 14:35:01 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2013/05/05 14:35:00 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2013/05/05 14:34:59 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2013/05/05 14:34:22 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2013/05/05 14:34:20 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2013/05/05 14:34:19 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2013/05/05 14:34:18 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2013/05/05 14:34:17 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2013/05/05 14:34:16 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2013/05/05 14:34:15 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2013/05/05 14:34:14 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2013/05/05 14:34:13 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2013/05/05 14:34:11 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2013/05/05 14:34:10 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2013/05/05 14:34:09 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2013/05/05 14:34:09 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2013/05/05 14:34:08 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2013/05/05 14:34:07 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2013/05/05 14:34:06 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2013/05/05 14:34:05 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2013/05/05 14:34:04 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2013/05/05 14:34:04 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2013/05/05 14:34:03 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2013/05/05 14:33:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2013/05/05 14:33:54 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2013/05/05 14:33:53 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2013/05/05 14:33:53 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2013/05/05 14:33:52 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2013/05/05 14:33:51 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2013/05/05 14:33:50 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2013/05/05 14:33:48 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2013/05/05 14:33:47 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2013/05/05 14:33:47 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2013/05/05 14:33:46 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2013/05/05 14:33:45 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2013/05/05 14:33:45 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2013/05/05 14:33:43 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2013/05/05 14:33:43 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2013/05/05 14:33:42 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2013/05/05 14:33:40 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2013/05/05 14:33:39 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2013/05/05 14:33:38 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2013/05/05 14:33:26 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2013/05/05 14:33:25 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2013/05/05 14:33:22 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2013/05/05 14:33:22 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2013/05/05 14:33:21 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2013/05/05 14:33:20 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2013/05/05 14:33:20 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2013/05/05 14:33:19 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2013/05/05 14:33:18 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2013/05/05 14:33:13 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2013/05/05 14:33:12 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2013/05/05 14:33:06 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2013/05/05 14:33:05 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2013/05/05 14:33:04 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2013/05/05 14:33:03 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2013/05/05 14:33:00 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2013/05/05 14:32:59 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2013/05/05 14:32:58 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2013/05/05 14:32:57 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2013/05/05 14:32:56 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2013/05/05 14:32:56 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2013/05/05 14:32:55 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2013/05/05 14:32:54 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2013/05/05 14:32:53 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2013/05/05 14:32:53 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2013/05/05 14:32:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2013/05/05 14:32:42 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2013/05/05 14:32:42 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2013/05/05 14:32:40 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2013/05/05 14:32:39 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2013/05/05 14:32:38 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2013/05/05 14:32:38 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2013/05/05 14:32:37 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2013/05/05 14:32:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2013/05/05 14:32:34 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2013/05/05 14:32:33 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2013/05/05 14:32:33 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2013/05/05 14:32:32 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2013/05/05 14:32:31 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2013/05/05 14:32:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2013/05/05 14:32:30 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2013/05/05 14:32:30 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2013/05/05 14:32:29 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2013/05/05 14:32:28 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2013/05/05 14:32:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2013/05/05 14:32:27 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2013/05/05 14:32:26 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2013/05/05 14:32:26 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2013/05/05 14:32:25 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2013/05/05 14:32:25 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2013/05/05 14:31:50 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2013/05/04 09:39:18 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/05/04 09:34:38 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/05/04 09:34:38 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/05/04 09:34:38 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/05/04 09:34:38 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/05/04 09:34:09 | 000,000,000 | —D | C] – C:\Qoobox
[2013/05/04 09:33:39 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2013/04/27 10:34:46 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Application Data\QuickScan
[2013/04/27 10:28:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus Free Edition
[2013/04/27 10:25:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Application Data\QuickScan
[2013/04/27 10:25:07 | 000,000,000 | —D | C] – C:\Program Files\Bitdefender
[2013/04/27 10:25:04 | 000,343,456 | —- | C] (BitDefender S.R.L.) – C:\WINDOWS\System32\drivers\trufos.sys
[2013/04/27 09:11:47 | 000,000,000 | —D | C] – C:\WINDOWS\CSC

========== Files - Modified Within 30 Days ==========

[2013/05/25 10:16:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1E190112-6B6B-4844-9261-1AEE0E9744AB}.job
[2013/05/25 10:13:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/25 10:05:02 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/05/25 10:02:23 | 000,000,616 | -H– | M] () – C:\WINDOWS\tasks\ConfigExec.job
[2013/05/25 10:01:53 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/25 10:01:51 | 000,000,280 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/25 10:01:51 | 000,000,278 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/25 10:01:39 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/05/25 10:01:30 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/05/25 09:45:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004UA.job
[2013/05/25 09:43:03 | 000,000,492 | —- | M] () – C:\WINDOWS\tasks\HP Photo Creations Communicator.job
[2013/05/25 09:40:04 | 000,000,982 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003UA.job
[2013/05/25 09:09:50 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2013/05/25 07:38:00 | 000,000,580 | -H– | M] () – C:\WINDOWS\tasks\DataUpload.job
[2013/05/25 03:37:28 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1C1E1B38-3B03-4225-B51C-915EED3A727E}.job
[2013/05/24 13:42:54 | 000,002,311 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/05/24 13:42:53 | 000,002,293 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Google Chrome.lnk
[2013/05/24 11:58:00 | 000,000,820 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2013/05/24 10:45:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004Core.job
[2013/05/24 10:40:00 | 000,000,930 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003Core.job
[2013/05/24 07:47:00 | 000,000,286 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/20 17:46:00 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/20 17:43:56 | 000,050,477 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Defogger.exe
[2013/05/20 15:30:02 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/05/19 10:09:10 | 000,002,187 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/19 09:55:31 | 000,061,440 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/05/19 09:51:00 | 000,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2013/05/18 18:08:00 | 000,000,288 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/16 05:06:22 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/05/16 05:06:22 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/05/16 03:30:11 | 000,894,256 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/16 03:10:50 | 000,505,196 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/05/16 03:10:50 | 000,088,458 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/05/16 03:07:23 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2013/05/15 23:21:21 | 002,218,636 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\tdsskiller.zip
[2013/05/14 23:19:14 | 005,066,131 | R— | M] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/14 17:08:06 | 000,242,504 | —- | M] (BitDefender) – C:\WINDOWS\System32\drivers\avchv.sys
[2013/05/14 17:07:28 | 000,633,344 | —- | M] (BitDefender) – C:\WINDOWS\System32\drivers\avc3.sys
[2013/05/14 17:07:26 | 000,486,536 | —- | M] (BitDefender) – C:\WINDOWS\System32\drivers\avckf.sys
[2013/05/14 17:07:24 | 000,164,952 | —- | M] (BitDefender LLC) – C:\WINDOWS\System32\drivers\gzflt.sys
[2013/05/08 09:03:22 | 000,001,854 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/06 22:27:31 | 006,015,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/05/05 15:40:47 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/04 09:54:12 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/05/04 09:39:25 | 000,000,325 | RHS- | M] () – C:\boot.ini
[2013/04/29 07:40:25 | 000,000,209 | —- | M] () – C:\Boot.bak
[2013/04/29 07:38:43 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013/04/27 09:35:23 | 000,013,024 | —- | M] () – C:\WINDOWS\System32\drivers\SWDUMon.sys

========== Files Created - No Company Name ==========

[2013/05/20 17:46:00 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/20 17:43:56 | 000,050,477 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\Defogger.exe
[2013/05/15 23:21:20 | 002,218,636 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\tdsskiller.zip
[2013/05/08 09:03:22 | 000,002,187 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/08 09:03:22 | 000,001,854 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/08 09:03:21 | 000,001,854 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk
[2013/05/05 15:40:27 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/05 15:13:12 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2013/05/05 15:13:06 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2013/05/05 14:56:15 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2013/05/05 14:56:10 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2013/05/05 14:49:58 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2013/05/05 14:42:37 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2013/05/05 14:42:30 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2013/05/05 14:42:24 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2013/05/05 14:42:18 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2013/05/05 14:42:12 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2013/05/05 14:37:53 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2013/05/05 14:37:52 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2013/05/05 14:37:50 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2013/05/05 14:33:32 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2013/05/05 14:33:31 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2013/05/05 14:33:30 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2013/05/05 14:33:29 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2013/05/05 14:33:29 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2013/05/05 14:33:28 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2013/05/05 14:33:27 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2013/05/05 14:33:26 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2013/05/05 14:33:24 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2013/05/05 14:33:18 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2013/05/04 09:39:25 | 000,000,209 | —- | C] () – C:\Boot.bak
[2013/05/04 09:39:21 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/05/04 09:34:38 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/05/04 09:34:38 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/05/04 09:34:38 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/05/04 09:34:38 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/05/04 09:34:38 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/05/01 07:25:54 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1004-0.dat
[2013/05/01 07:25:51 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1003-0.dat
[2013/04/30 17:45:34 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/04/06 16:35:58 | 000,034,637 | R— | C] () – C:\WINDOWS\System32\ksaud.ini
[2013/04/06 16:34:03 | 000,044,795 | R— | C] () – C:\WINDOWS\System32\kschimp.ini
[2013/04/06 16:34:02 | 000,271,360 | R— | C] () – C:\WINDOWS\System32\KSXPPI32.dll
[2013/03/28 16:17:50 | 000,013,024 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/09/02 15:54:21 | 000,027,520 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\dt.dat
[2012/02/15 20:35:29 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/12/04 14:05:47 | 000,000,013 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2011/11/26 14:30:05 | 000,000,064 | —- | C] () – C:\WINDOWS\GPlrLanc.dat
[2011/11/23 14:14:27 | 000,002,216 | —- | C] () – C:\Documents and Settings\Sherry\.recently-used.xbel
[2011/08/31 13:57:47 | 000,000,272 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\.backup.dm
[2011/08/09 22:19:09 | 000,163,118 | —- | C] () – C:\WINDOWS\hpoins28.dat
[2011/08/09 22:19:09 | 000,000,796 | —- | C] () – C:\WINDOWS\hpomdl28.dat
[2011/07/17 20:36:28 | 000,000,129 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences2.dat
[2011/07/17 20:34:48 | 000,000,035 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences.dat
[2011/05/29 17:58:48 | 000,145,412 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Analog Swirl
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\Sherry\Application Data\Ambience
[2010/11/04 20:14:36 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/03 16:09:31 | 000,061,440 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2010/10/26 19:19:20 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2008/04/13 18:12:05 | 001,499,136 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 06:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/13 18:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

OTL Extras logfile created on: 25/05/2013 10:05:27 AM - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.73 Gb Available Physical Memory | 51.13% Memory free
3.29 Gb Paging File | 2.69 Gb Available in Paging File | 81.88% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 144.17 Gb Free Space | 61.91% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Reg Error: Value error.] – Reg Error: Key error. File not found
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
https [open] – Reg Error: Key error.
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh – (iMesh, Inc)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote – (Microsoft Corporation)
"C:\Program Files\Messenger\msmsgs.exe" = C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger – (Microsoft Corporation)
"C:\Program Files\Google\Google Earth\client\googleearth.exe" = C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth – (Google)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service – (Apple Inc.)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh – (iMesh, Inc)
"C:\Program Files\AVG\AVG2012\avgmfapx.exe" = C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:AVG Installer
"C:\Documents and Settings\Sherry\Application Data\Dropbox\bin\Dropbox.exe" = C:\Documents and Settings\Sherry\Application Data\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox – (Dropbox, Inc.)
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup – (Microsoft Corporation)
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe" = C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit – (Apple Inc.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype – (Skype Technologies S.A.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{1D2AB963-7FF4-4446-BF22-822101AA550F}" = The Print Shop 22
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22466889-7642-488d-AA0E-F619704CF7AB}" = DeviceDiscovery
"{268278CF-FB69-4D98-B70E-BFEC1CDCA225}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40963A3A-734C-48A6-9DF6-230A5E8B56ED}" = RoE Power Tools
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Apple Application Support
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{587B7A6F-CA1F-4639-9083-16F9BB2363B4}" = Sound Blaster X-Fi Go! Pro
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}" = iMesh
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{355EFB0F-D42B-4E8F-9BC8-42513EC417D9}" =
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}" = MobileMe Control Panel
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BC6AB96-3613-4676-ABE8-4B7F55D7D8E7}" = DriverUpdate
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B2C61EBB-F47C-48ba-B375-27A40F8F48F7}" = HP Deskjet All-In-One Software 9.0
"{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min
"{B7588D45-AFDC-4C93-9E2E-A100F3554B64}" = Microsoft Fix it Center
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BE8A9C2C-8E41-445B-A746-BEB0B1F992F8}" = DJ_AIO_03_F4200_Software_Min
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3B6AEB1-390C-4792-8677-CD87F8B2C959}" = HP Deskjet F4200 All-In-One Driver 11.0 03
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C89B5E3A-690F-4CEE-909A-BF869E198B0A}" = Scan
"{C8B44566-839A-459C-A73D-49764CE216CC}" = ArcSoft Video Downloader
"{C8E95BF5-C07F-4D98-BB42-F58FC98BC03E}" = Google Apps
"{CA50045C-5119-48e7-9BA7-6B317379857A}" = DJ_AIO_Software
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E96B0085-6659-486b-A221-5042A042728D}" = Toolbox
"{E9757890-7EC5-46C8-99AB-B00F07B6525C}" = Nikon Transfer
"{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}" = Styler
"{ECB9C58E-C565-4683-9599-B72290BD3B25}" = QuickTax 2009
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{FA8A44D7-3E8A-4034-9C4F-088FA6B72BC4}" = HP Deskjet All-In-One Software 9.0
"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Alchemy" = Alchemy
"ATI Display Driver" = ATI Display Driver
"BitDefender Gonzales" = Bitdefender Antivirus Free Edition
"Bubble Town" = Bubble Town
"Chuzzle Deluxe" = Chuzzle Deluxe
"Coupon Printer for Windows5.0.0.1" = Coupon Printer for Windows
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Google Updater" = Google Updater
"Hardwood Euchre v2" = Hardwood Euchre
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Photo Creations" = HP Photo Creations
"HP Photosmart Essential" = HP Photosmart Essential 2.01
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPExtendedCapabilities" = HP Customer Participation Program 9.0
"iMesh" = iMesh
"ImgBurn" = ImgBurn
"IrfanView" = IrfanView (remove only)
"MahJong Suite_is1" = MahJong Suite 2012 v9.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"MSNINST" = MSN
"Pretty Good Solitaire_is1" = Pretty Good Solitaire version 12.4.0
"SysInfo" = Creative System Information
"WebPost" = Microsoft Web Publishing Wizard 1.52
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.11

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 25/05/2013 9:38:03 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 25/05/2013 9:38:03 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

Error - 25/05/2013 9:43:01 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 25/05/2013 9:43:01 AM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

Error - 25/05/2013 12:02:23 PM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262152
Description = The MATS service encountered a failure when loading SAP. hr=0x80040154

SAP folder: C:\Program Files\Microsoft Fix it Center\SAPFolder\Scheduled\DDA435FA-6E05-4DBF-80FE-C4EBE882E798.32

Error - 25/05/2013 12:02:23 PM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262159
Description = The scheduled MATS task encountered a failure when collecting configuration
data. hr=0x80040154 .

Error - 25/05/2013 12:02:23 PM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 25/05/2013 12:02:23 PM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

Error - 25/05/2013 12:07:19 PM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262147
Description = The MATS service encountered a web service failure. hr=0xC004F018

Error - 25/05/2013 12:07:19 PM | Computer Name = DA658A6C7 | Source = MatSvc | ID = 262148
Description = The MATS service encountered a failure when uploading data. hr=0xC004F018

[ OSession Events ]
Error - 13/04/2011 3:43:35 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 38
seconds with 0 seconds of active time. This session ended with a crash.

Error - 19/04/2011 8:03:30 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 327
seconds with 240 seconds of active time. This session ended with a crash.

Error - 20/04/2011 9:42:34 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 276
seconds with 60 seconds of active time. This session ended with a crash.

Error - 22/04/2011 6:49:00 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 939
seconds with 480 seconds of active time. This session ended with a crash.

Error - 28/12/2011 2:09:58 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 56
seconds with 0 seconds of active time. This session ended with a crash.

Error - 06/04/2012 10:33:51 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 46
seconds with 0 seconds of active time. This session ended with a crash.

Error - 13/04/2012 1:41:57 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 84
seconds with 60 seconds of active time. This session ended with a crash.

Error - 07/05/2012 2:53:34 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 58
seconds with 0 seconds of active time. This session ended with a crash.

Error - 25/05/2012 2:52:39 PM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 81
seconds with 60 seconds of active time. This session ended with a crash.

Error - 16/05/2013 9:03:50 AM | Computer Name = DA658A6C7 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 25
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 14/05/2013 9:14:53 PM | Computer Name = DA658A6C7 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.100 for the Network Card with network
address 00167617ABCA has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).

Error - 16/05/2013 5:32:33 AM | Computer Name = DA658A6C7 | Source = DCOM | ID = 10010
Description = The server {7F6316B4-4D69-4765-B0A3-B2598F2FA80A} did not register
with DCOM within the required timeout.

Error - 19/05/2013 11:21:25 AM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Ati HotKey Poller service terminated unexpectedly. It has done
this 1 time(s).

Error - 19/05/2013 11:21:25 AM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Creative Audio Service service terminated unexpectedly. It has
done this 1 time(s).

Error - 19/05/2013 11:21:26 AM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7031
Description = The Apple Mobile Device service terminated unexpectedly. It has done
this 1 time(s). The following corrective action will be taken in 60000 milliseconds:
Restart the service.

Error - 19/05/2013 11:21:26 AM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Bonjour Service service terminated unexpectedly. It has done
this 1 time(s).

Error - 19/05/2013 11:21:27 AM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The MBAMScheduler service terminated unexpectedly. It has done this
1 time(s).

Error - 19/05/2013 11:21:27 AM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The Java Quick Starter service terminated unexpectedly. It has done
this 1 time(s).

Error - 19/05/2013 11:21:27 AM | Computer Name = DA658A6C7 | Source = Service Control Manager | ID = 7034
Description = The MBAMService service terminated unexpectedly. It has done this
1 time(s).

< End of report >

sinnead

Post #73May 25, 2013, 6:49 PM UTC

And safe mode is still not working.

Satchfan

Post #74May 25, 2013, 9:55 PM UTC

Are there any problems apart from "safe mode"?

sinnead

Post #75May 26, 2013, 1:20 AM UTC

Not at all.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Infected? [Solved]

✨ Ask AI

Ask AI