This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Ad on desktop, log file

48 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi,
I have the black and red ad for the $50 software on my desktop, i saw someone else had it but their log and solution for you guys was not the same so Im wondering if someone could help me, heres my hijack this log…thanks for any replies and help! —-Sean

Logfile of HijackThis v1.99.1
Scan saved at 4:03:20 PM, on 7/15/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\Zero Knowledge\Freedom\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
O4 - HKLM\..\Run: [Freedom] C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: Win32 Classes -
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{58325CC7-35AD-4CC4-9545-97C098E815AC}: NameServer = 85.255.115.26,85.255.112.166
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.26 85.255.112.166
O17 - HKLM\System\CS1\Services\Tcpip\..\{58325CC7-35AD-4CC4-9545-97C098E815AC}: NameServer = 85.255.115.26,85.255.112.166
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.26 85.255.112.166
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
Welcome to the forum :wavey:

Please download FixWareout from one of these links:
Fixwareout.exe
Fixwareout.exe

Download it to your desktop.

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

Run Hijack This!
Click "Do a systen scan only".
Then "check" the box to the left of these item(s):

O17 - HKLM\System\CCS\Services\Tcpip\..\{58325CC7-35AD-4CC4-9545-97C098E815AC}: NameServer = 85.255.115.26,85.255.112.166

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.26 85.255.112.166

O17 - HKLM\System\CS1\Services\Tcpip\..\{58325CC7-35AD-4CC4-9545-97C098E815AC}: NameServer = 85.255.115.26,85.255.112.166

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.26 85.255.112.166

Then click "Fix checked" and close Hijack This!.

* Run fixwareout.exe on the desktop.
* Click Next, then Install, make sure "Run fixit" is checked and click Finish.
* The fix will begin; follow the prompts.
* You will be asked to reboot your computer; please do so.
* Your system may take longer than usual to load; this is normal.
* Once the desktop loads a text will open (report.txt). We'll need that in a bit.

"Copy/paste" a new HijackThis! log file into this thread.

Also open this file with Notepad:

C:\fixwareout\report.txt

And paste it's contents into your next post.

:)
thanks for the response! i did what you said.
here is the hijack and fixwareout report. the ad is still there although just white and grey screen… thanks —–sean

Logfile of HijackThis v1.99.1
Scan saved at 6:37:25 PM, on 7/15/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\msiexec.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 11 for hijackthis.zip\HijackThis.exe

O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\Zero Knowledge\Freedom\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
O4 - HKLM\..\Run: [Freedom] C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: Win32 Classes -
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe





Fixwareout ver 1.003
Last edited 07/1/2006
Post this report in the forums please

Reg Entries that were deleted
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}151D332A3629-004A-4CA4-D2A2-0CFE2FE2{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}A8A3183CC5EC-29D9-3D54-EE4D-9000ABF8{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}1F5666073B58-E108-5144-3E00-D09F2BAA{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}564B83182B6B-93DA-F184-691A-A03AA26C{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}3762975588E1-9C7B-DB44-0074-18D663B3{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}E5C9AA6C556B-154A-1D24-EA54-CD256E4A{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}6BC9B72D2461-0DAB-AD04-9C37-D882E511{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}E36278965B9D-5FE8-8554-BC56-4EA1EAE4{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\edmmd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ypszr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\daolnwodi
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\swen
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ogol
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\eno
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\llun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\owt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\eerht
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ruof
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\evif
…

Microsoft ® Windows Script Host Version 5.6
Random Runs removed from HKLM
"dmmde.exe"=-
…

PLEASE NOTE, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Example ipsec6.exe is legitimate

»»»»» Search by size and names…
C:\WINDOWS\SYSTEM32\IPSEC6.EXE
C:\WINDOWS\SYSTEM32\RDPCLIP.EXE
* csr.exe C:\WINDOWS\System32\CSWZP.EXE

»»»»» Misc files

»»»»» Checking for older varients covered by the Rem3 tool

»»»»»
Search five digit cs, dm and jb files
This WILL/CAN also list Legit Files, Submit them at Virustotal
C:\WINDOWS\SYSTEM32\CSWZP.EXE 51,202 2006-07-14
C:\WINDOWS\SYSTEM32\DMMDE.EXE 61,976 2004-05-25
Other suspects
Directory of C:\WINDOWS\system32
{A4E652DC-45AE-42D1-A451-B655C6AA9C5E}.exe
{AAB2F90D-00E3-4415-801E-85B3706665F1}.exe
{3319214D-C64D-4B63-82B9-1369063223E6}.exe
Copy the text in the following quote box into Notepad:

attrib -s -h -r C:\WINDOWS\SYSTEM32\CSWZP.EXE
attrib -s -h -r C:\WINDOWS\SYSTEM32\DMMDE.EXE
attrib -s -h -r C:\WINDOWS\system32\{A4E652DC-45AE-42D1-A451-B655C6AA9C5E}.exe
attrib -s -h -r C:\WINDOWS\system32\{AAB2F90D-00E3-4415-801E-85B3706665F1}.exe
attrib -s -h -r C:\WINDOWS\system32\{3319214D-C64D-4B63-82B9-1369063223E6}.exe
del C:\WINDOWS\SYSTEM32\CSWZP.EXE
del C:\WINDOWS\SYSTEM32\DMMDE.EXE
del C:\WINDOWS\system32\{A4E652DC-45AE-42D1-A451-B655C6AA9C5E}.exe
del C:\WINDOWS\system32\{AAB2F90D-00E3-4415-801E-85B3706665F1}.exe
del C:\WINDOWS\system32\{3319214D-C64D-4B63-82B9-1369063223E6}.exe


Save it to your desktop as ff.bat.

Now, the ff.bat file on the desktop. A DOS window will open, then close.

Copy and paste the contents of the quote box below into notepad.

Save it as file name: "fixme.reg" (not including the quotes). Save as file type: *All files* and save it on your Desktop.

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"WallpaperStyle"=-
"Wallpaper"=-
"NoDispBackgroundPage"=-
"NoDispAppearancePage"=-

[HKEY_CURRENT_USER\Control Panel\Desktop]
"Wallpaper"=-
"WallpaperStyle"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoActiveDesktopChanges"=-
"NoActiveDesktop"=-
"NoSaveSettings"=-
"ClassicShell"=-
"NoThemesTab"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoChangingWallPaper"=-


Then, locate fixme.reg on your desktop and it.

You will receive a prompt similar to: "Do you wish to merge the information into the registry?".

Answer 'Yes' and wait for a message to appear similar to "Merged Successfully".

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

Find the fixwareout-folder present on your C:\
Open that folder and doubleclick FixIt.bat

This starts the fixwareoutfix again and will ask to reboot.

After reboot, post a new HijackThis! log together with the fixwareout log.

(Note: It may not create a log this time. If it doesn't, let me know.)

See if you can change your desktop now.
:)
Thanks for the quick replies Micah, I really appresiate it. the ad or grey white screen is still there. here are the logs:

Logfile of HijackThis v1.99.1
Scan saved at 7:27:13 PM, on 7/15/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 12 for hijackthis.zip\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe

O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\Zero Knowledge\Freedom\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Freedom] C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: Win32 Classes -
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe


——————————————————————————————————


Fixwareout ver 1.003
Last edited 07/1/2006
Post this report in the forums please

Reg Entries that were deleted
…

Microsoft ® Windows Script Host Version 5.6
Random Runs removed from HKLM
…

PLEASE NOTE, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Example ipsec6.exe is legitimate

»»»»» Search by size and names…
C:\WINDOWS\SYSTEM32\IPSEC6.EXE
C:\WINDOWS\SYSTEM32\RDPCLIP.EXE

»»»»» Misc files

»»»»» Checking for older varients covered by the Rem3 tool

»»»»»
Search five digit cs, dm and jb files
This WILL/CAN also list Legit Files, Submit them at Virustotal
Other suspects
Directory of C:\WINDOWS\system32
Run Hijack This!.

Click on Open Misc Tools section

To the right of Generate Startuplist log, there are two boxes.

Check them both, then click Generate Startuplist log.

"Copy/paste" the startuplist log into this thread.
:)
StartupList report, 7/15/2006, 8:21:17 PM
StartupList version: 1.52.2
Started from : C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 13 for hijackthis.zip\HijackThis.EXE
Detected: Windows XP SP1 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
* Including empty and uninteresting sections
* Showing rarely important sections
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Zero Knowledge\Freedom\Freedom.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Winamp\Winamp.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 13 for hijackthis.zip\HijackThis.exe

————————————————–

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\Administrator\Start Menu\Programs\Startup]
*No files*

Shell folders AltStartup:
*Folder not found*

User shell folders Startup:
*Folder not found*

User shell folders AltStartup:
*Folder not found*

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

Shell folders Common AltStartup:
*Folder not found*

User shell folders Common Startup:
*Folder not found*

User shell folders Alternate Common Startup:
*Folder not found*

————————————————–

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

[HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
*Registry value not found*

[HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

SystemTray = SysTray.Exe
Freedom = C:\Program Files\Zero Knowledge\Freedom\Freedom.exe

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*No values found*

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

*Registry key not found*

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*Registry key not found*

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

*Registry key not found*

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

————————————————–

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
*No values found*

————————————————–

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

————————————————–

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*No subkeys found*

————————————————–

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
*Registry key not found*

————————————————–

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

————————————————–

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
*No subkeys found*

————————————————–

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

————————————————–

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*Registry key not found*

————————————————–

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
*Registry key not found*

————————————————–

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

————————————————–

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

————————————————–

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

————————————————–

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

————————————————–

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

————————————————–

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

————————————————–

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

————————————————–

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

————————————————–

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\System32\mshta.exe "%1" %*

————————————————–

File association entry for .TXT:
HKEY_CLASSES_ROOT\txtfile\shell\open\command

(Default) = %SystemRoot%\system32\NOTEPAD.EXE %1

————————————————–

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

[>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] *
StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\mplayer2.inf,PerUserStub.NT

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{306D6C21-C1B6-4629-986C-E59E1875B8AF}]
StubPath = "C:\WINDOWS\System32\rundll32.exe" "C:\Program Files\Messenger\msgsc.dll",ShowIconsUser

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

[{5945c046-1e7d-11d1-bc44-00c04fd912be}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.Install.PerUser

[{6BF52A52-394A-11d3-B153-00C04F79FAA6}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = %SystemRoot%\system32\ie4uinit.exe

[{CA0A4247-44BE-11d1-A005-00805F8ABE06}] *
StubPath = RunDLL setupx.dll,InstallHinfSection PowerCfg.user 0 powercfg.inf

————————————————–

Enumerating ICQ Agent Autostart apps:
HKCU\Software\Mirabilis\ICQ\Agent\Apps

*Registry key not found*

————————————————–

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=

————————————————–

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

————————————————–

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
C:\WINDOWS\Fonts\Explorer.exe: not present

————————————————–

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

————————————————–

Verifying REGEDIT.EXE integrity:

- Regedit.exe found in C:\WINDOWS
- .reg open command is normal (regedit.exe %1)
- Company name OK: 'Microsoft Corporation'
- Original filename OK: 'REGEDIT.EXE'
- File description: 'Registry Editor'

Registry check passed

————————————————–

Enumerating Browser Helper Objects:

Pop-Up Blocker BHO - C:\Program Files\Zero Knowledge\Freedom\pkR.dll - {3C060EA2-E6A9-4E49-A530-D4657B8C449A}
Form Filler BHO - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll - {56071E0D-C61B-11D3-B41C-00E02927A304}

————————————————–

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Uninstall Expiration Reminder.job

————————————————–

Enumerating Download Program Files:

[DirectAnimation Java Classes]
CODEBASE = file://C:\WINDOWS\Java\classes\dajava.cab
OSD = C:\WINDOWS\Downloaded Program Files\DirectAnimation Java Classes.osd

[Internet Explorer Classes for Java]
CODEBASE = file://C:\WINDOWS\SYSTEM\iejava.cab
OSD = C:\WINDOWS\Downloaded Program Files\Internet Explorer Classes for Java.osd

[Microsoft XML Parser for Java]
CODEBASE = file://C:\WINDOWS\Java\classes\xmldso.cab
OSD = C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

[Win32 Classes]

[Support.com Installer]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\tgctlins.dll
CODEBASE = http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab

[Windows Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\System32\LegitCheckControl.DLL
CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204

[{33564D57-9980-0010-8000-00AA00389B71}]
CODEBASE = http://download.microsoft.com/download/D/0…D0C/wmv9dmo.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx
CODEBASE = http://fpdownload.macromedia.com/pub/shock…ash/swflash.cab

————————————————–

Enumerating Winsock LSP files:

NameSpace #1: C:\WINDOWS\System32\mswsock.dll
NameSpace #2: C:\WINDOWS\System32\winrnr.dll
NameSpace #3: C:\WINDOWS\System32\mswsock.dll
Protocol #1: C:\WINDOWS\system32\mswsock.dll
Protocol #2: C:\WINDOWS\system32\mswsock.dll
Protocol #3: C:\WINDOWS\system32\mswsock.dll
Protocol #4: C:\WINDOWS\system32\rsvpsp.dll
Protocol #5: C:\WINDOWS\system32\rsvpsp.dll
Protocol #6: C:\WINDOWS\system32\mswsock.dll
Protocol #7: C:\WINDOWS\system32\mswsock.dll
Protocol #8: C:\WINDOWS\system32\mswsock.dll
Protocol #9: C:\WINDOWS\system32\mswsock.dll
Protocol #10: C:\WINDOWS\system32\mswsock.dll
Protocol #11: C:\WINDOWS\system32\mswsock.dll
Protocol #12: C:\WINDOWS\system32\mswsock.dll
Protocol #13: C:\WINDOWS\system32\mswsock.dll
Protocol #14: C:\WINDOWS\system32\mswsock.dll
Protocol #15: C:\WINDOWS\system32\mswsock.dll
Protocol #16: C:\WINDOWS\system32\mswsock.dll

————————————————–

Enumerating Windows NT/2000/XP services

6to4: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Microsoft ACPI Driver: System32\DRIVERS\ACPI.sys (system)
Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)
AFD Networking Support Environment: \SystemRoot\System32\drivers\afd.sys (autostart)
Alerter: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Application Layer Gateway Service: %SystemRoot%\System32\alg.exe (manual start)
Application Management: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
RAS Asynchronous Media Driver: System32\DRIVERS\asyncmac.sys (manual start)
Standard IDE/ESDI Hard Disk Controller: System32\DRIVERS\atapi.sys (system)
ATM ARP Client Protocol: System32\DRIVERS\atmarpc.sys (manual start)
Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Audio Stub Driver: System32\DRIVERS\audstub.sys (manual start)
Background Intelligent Transfer Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Computer Browser: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
CD-ROM Driver: System32\DRIVERS\cdrom.sys (system)
Indexing Service: %SystemRoot%\system32\cisvc.exe (manual start)
ClipBook: %SystemRoot%\system32\clipsrv.exe (manual start)
COM+ System Application: C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start)
Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
CSS DVP: System32\DRIVERS\css-dvp.sys (autostart)
DHCP Client: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Disk Driver: System32\DRIVERS\disk.sys (system)
Logical Disk Manager Administrative Service: %SystemRoot%\System32\dmadmin.exe /com (manual start)
dmboot: System32\drivers\dmboot.sys (disabled)
Logical Disk Manager Driver: System32\drivers\dmio.sys (system)
dmload: System32\drivers\dmload.sys (system)
Logical Disk Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Microsoft Kernel DLS Syntheiszer: system32\drivers\DMusic.sys (manual start)
DNS Client: %SystemRoot%\System32\svchost.exe -k NetworkService (autostart)
Microsoft Kernel DRM Audio Descrambler: system32\drivers\drmkaud.sys (manual start)
DvpApi: C:\Program Files\Common Files\Command Software\dvpapi.exe (autostart)
3Com EtherLink XL 90XB/C Adapter Driver: System32\DRIVERS\el90xbc5.sys (manual start)
Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Creative AudioPCI (ES1371,ES1373) (WDM): system32\drivers\es1371mp.sys (manual start)
Event Log: %SystemRoot%\system32\services.exe (autostart)
COM+ Event System: C:\WINDOWS\System32\svchost.exe -k netsvcs (manual start)
Fast User Switching Compatibility: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Floppy Disk Controller Driver: System32\DRIVERS\fdc.sys (manual start)
Floppy Disk Driver: System32\DRIVERS\flpydisk.sys (manual start)
Freedom Miniport: System32\DRIVERS\FREEDOM.SYS (manual start)
Freedom Filter: System32\Drivers\FreeTdi.sys (system)
Volume Manager Driver: System32\DRIVERS\ftdisk.sys (system)
Generic Packet Classifier: System32\DRIVERS\msgpc.sys (manual start)
Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Human Interface Device Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
i8042 Keyboard and PS/2 Mouse Port Driver: System32\DRIVERS\i8042prt.sys (system)
i81x: System32\DRIVERS\i81xnt5.sys (manual start)
iAimFP0: System32\DRIVERS\wADV01nt.sys (manual start)
iAimFP1: System32\DRIVERS\wADV02NT.sys (manual start)
iAimFP2: System32\DRIVERS\wADV05NT.sys (manual start)
iAimFP3: System32\DRIVERS\wSiINTxx.sys (manual start)
iAimFP4: System32\DRIVERS\wVchNTxx.sys (manual start)
iAimTV0: System32\DRIVERS\wATV01nt.sys (manual start)
iAimTV1: System32\DRIVERS\wATV02NT.sys (manual start)
iAimTV2: System32\DRIVERS\wATV03nt.sys (manual start)
iAimTV3: System32\DRIVERS\wATV04nt.sys (manual start)
iAimTV4: System32\DRIVERS\wCh7xxNT.sys (manual start)
CD-Burning Filter Driver: System32\DRIVERS\imapi.sys (system)
IMAPI CD-Burning COM Service: C:\WINDOWS\System32\imapi.exe (manual start)
IntelIde: System32\DRIVERS\intelide.sys (system)
IP Traffic Filter Driver: System32\DRIVERS\ipfltdrv.sys (manual start)
IP in IP Tunnel Driver: System32\DRIVERS\ipinip.sys (manual start)
IP Network Address Translator: System32\DRIVERS\ipnat.sys (manual start)
IPSEC driver: System32\DRIVERS\ipsec.sys (system)
IR Enumerator Service: System32\DRIVERS\irenum.sys (manual start)
PnP ISA/EISA Bus Driver: System32\DRIVERS\isapnp.sys (system)
Keyboard Class Driver: System32\DRIVERS\kbdclass.sys (system)
Microsoft Kernel Wave Audio Mixer: system32\drivers\kmixer.sys (manual start)
Server: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
TCP/IP NetBIOS Helper: %SystemRoot%\System32\svchost.exe -k LocalService (autostart)
Messenger: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
NetMeeting Remote Desktop Sharing: C:\WINDOWS\System32\mnmsrvc.exe (manual start)
Mouse Class Driver: System32\DRIVERS\mouclass.sys (system)
WebDav Client Redirector: System32\DRIVERS\mrxdav.sys (manual start)
MRXSMB: System32\DRIVERS\mrxsmb.sys (system)
Distributed Transaction Coordinator: C:\WINDOWS\System32\msdtc.exe (manual start)
Windows Installer: C:\WINDOWS\System32\msiexec.exe /V (manual start)
Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start)
Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start)
Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start)
Remote Access NDIS TAPI Driver: System32\DRIVERS\ndistapi.sys (manual start)
NDIS Usermode I/O Protocol: System32\DRIVERS\ndisuio.sys (manual start)
Remote Access NDIS WAN Driver: System32\DRIVERS\ndiswan.sys (manual start)
NetBIOS Interface: System32\DRIVERS\netbios.sys (system)
NetBios over Tcpip: System32\DRIVERS\netbt.sys (system)
Network DDE: %SystemRoot%\system32\netdde.exe (manual start)
Network DDE DSDM: %SystemRoot%\system32\netdde.exe (manual start)
Net Logon: %SystemRoot%\System32\lsass.exe (manual start)
Network Connections: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Network Location Awareness (NLA): %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Network Monitor Driver: System32\DRIVERS\NMnt.sys (manual start)
NT LM Security Support Provider: %SystemRoot%\System32\lsass.exe (manual start)
Removable Storage: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
IPX Traffic Filter Driver: System32\DRIVERS\nwlnkflt.sys (manual start)
IPX Traffic Forwarder Driver: System32\DRIVERS\nwlnkfwd.sys (manual start)
Intel PentiumIII Processor Driver: System32\DRIVERS\p3.sys (system)
PalmUSBD: system32\drivers\PalmUSBD.sys (manual start)
Parallel port driver: System32\DRIVERS\parport.sys (manual start)
PCI Bus Driver: System32\DRIVERS\pci.sys (system)
Plug and Play: %SystemRoot%\system32\services.exe (autostart)
IPSEC Services: %SystemRoot%\System32\lsass.exe (autostart)
WAN Miniport (PPTP): System32\DRIVERS\raspptp.sys (manual start)
Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)
QoS Packet Scheduler: System32\DRIVERS\psched.sys (manual start)
Direct Parallel Link Driver: System32\DRIVERS\ptilink.sys (manual start)
Remote Access Auto Connection Driver: System32\DRIVERS\rasacd.sys (system)
Remote Access Auto Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WAN Miniport (L2TP): System32\DRIVERS\rasl2tp.sys (manual start)
Remote Access Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Remote Access PPPOE Driver: System32\DRIVERS\raspppoe.sys (manual start)
Direct Parallel: System32\DRIVERS\raspti.sys (manual start)
Rdbss: System32\DRIVERS\rdbss.sys (system)
RDPCDD: System32\DRIVERS\RDPCDD.sys (system)
Terminal Server Device Redirector Driver: System32\DRIVERS\rdpdr.sys (manual start)
Remote Desktop Help Session Manager: C:\WINDOWS\system32\sessmgr.exe (manual start)
Digital CD Audio Playback Filter Driver: System32\DRIVERS\redbook.sys (system)
Routing and Remote Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
Remote Registry: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)
Remote Procedure Call (RPC) Locator: %SystemRoot%\System32\locator.exe (manual start)
Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)
QoS RSVP: %SystemRoot%\System32\rsvp.exe (manual start)
Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)
Smart Card Helper: %SystemRoot%\System32\SCardSvr.exe (manual start)
Smart Card: %SystemRoot%\System32\SCardSvr.exe (manual start)
Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Secdrv: System32\DRIVERS\secdrv.sys (manual start)
Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Serenum Filter Driver: System32\DRIVERS\serenum.sys (manual start)
Serial port driver: System32\DRIVERS\serial.sys (system)
Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS): %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Microsoft Kernel Audio Splitter: system32\drivers\splitter.sys (manual start)
Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)
System Restore Filter Driver: System32\DRIVERS\sr.sys (system)
System Restore Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Srv: System32\DRIVERS\srv.sys (manual start)
SSDP Discovery Service: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Windows Image Acquisition (WIA): %SystemRoot%\System32\svchost.exe -k imgsvc (manual start)
Software Bus Driver: System32\DRIVERS\swenum.sys (manual start)
Microsoft Kernel GS Wavetable Synthesizer: system32\drivers\swmidi.sys (manual start)
MS Software Shadow Copy Provider: C:\WINDOWS\System32\dllhost.exe /Processid:{7A815DDB-2245-403F-BC7B-677B0D9139AC} (manual start)
Microsoft Kernel System Audio Device: system32\drivers\sysaudio.sys (manual start)
Performance Logs and Alerts: %SystemRoot%\system32\smlogsvc.exe (manual start)
Telephony: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
TCP/IP Protocol Driver: System32\DRIVERS\tcpip.sys (system)
Microsoft IPv6 Protocol Driver: System32\DRIVERS\tcpip6.sys (system)
Terminal Device Driver: System32\DRIVERS\termdd.sys (system)
Terminal Services: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Telnet: C:\WINDOWS\System32\tlntsvr.exe (disabled)
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Microcode Update Driver: System32\DRIVERS\update.sys (manual start)
Upload Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Universal Plug and Play Device Host: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start)
USB2 Enabled Hub: System32\DRIVERS\usbhub.sys (manual start)
USB Mass Storage Driver: System32\DRIVERS\USBSTOR.SYS (manual start)
Microsoft USB Universal Host Controller Miniport Driver: System32\DRIVERS\usbuhci.sys (manual start)
VgaSave: \SystemRoot\System32\drivers\vga.sys (system)
Volume Shadow Copy: %SystemRoot%\System32\vssvc.exe (manual start)
Windows Time: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Remote Access IP ARP Driver: System32\DRIVERS\wanarp.sys (manual start)
Microsoft WINMM WDM Audio Compatibility Driver: system32\drivers\wdmaud.sys (manual start)
WebClient: %SystemRoot%\System32\svchost.exe -k LocalService (autostart)
Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Portable Media Serial Number: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Windows Management Instrumentation Driver Extensions: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WMI Performance Adapter: C:\WINDOWS\System32\wbem\wmiapsrv.exe (manual start)
Automatic Updates: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)


————————————————–

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: *Registry value not found*

————————————————–

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

————————————————–
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*Registry key not found*

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*Registry key not found*

————————————————–

End of report, 30,382 bytes
Report generated in 1.522 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
Copy the text in the following quote box into Notepad:

dir c:\windows\system32\ /od > files.txt
dir c:\windows\system32\ /ah /od >> files.txt


Save it to your desktop as ff.bat.

Now, the ff.bat

This will create a file on the desktop named "files.txt".

Open it with Notepad, and copy/paste it into this thread.
:)
Volume in drive C has no label. Volume Serial Number is 0660-1DE1 Directory of c:\windows\system32 12/03/1996 01:50 PM 37,376 VEN2232.OLB 06/13/1997 08:56 PM 56,832 iyvu9_32.dll 12/08/1997 03:00 AM 2,844 PUB3BRSH.ANI 01/12/1998 03:00 AM 35,328 COMDLG32.OCA 01/12/1998 03:00 AM 40,448 REGOBJ.DLL 01/12/1998 03:00 AM 224,256 COMCTL32.OCA 02/25/1998 11:24 PM 848,384 IR41_32.AX 03/23/1998 12:05 PM 91,136 MSLS2.DLL 03/24/1998 12:44 PM 24,848 VBAEN32.OLB 03/24/1998 12:44 PM 24,848 VBAEND32.OLB 03/24/1998 08:54 PM 15,872 SCP32.DLL 03/27/1998 04:20 PM 55,296 EMLCNS32.DLL 05/07/1998 10:56 PM 199,680 IAC25_32.AX 05/07/1998 10:57 PM 143,872 iacenc.dll 05/20/1998 09:31 AM 48,640 CSTART.DLL 06/08/1998 08:44 PM 183,296 DDAO36.DLL 06/17/1998 02:08 AM 53,248 MFC42ENU.DLL 08/08/1998 02:39 AM 739,328 IR50_32.DLL 08/09/1998 10:07 AM 118,784 MSSTDFMT.DLL 08/09/1998 10:07 AM 94,208 MSSTKPRP.DLL 08/10/1998 01:56 PM 89,360 VB5DB.DLL 08/10/1998 01:56 PM 209,192 TABCTL32.OCX 08/10/1998 01:56 PM 609,584 COMCTL32.OCX 08/18/1998 07:24 PM 118,064 MSADODC.OCX 09/17/1998 12:20 AM 393,216 MSRDO20.DLL 09/17/1998 12:20 AM 151,552 RDOCURS.DLL 09/29/1998 07:43 PM 45,056 PUBDLG.DLL 10/01/1998 12:00 PM 520,128 MAPI.DLL 10/01/1998 12:00 PM 40,208 MAPISRVR.EXE 10/13/1998 01:38 PM 260,920 MSDATGRD.OCX 11/23/1998 01:12 AM 186,368 EMDAZ32.DLL 12/24/1998 11:23 AM 40,960 VBAME.DLL 01/12/1999 01:54 PM 26,384 FM20ENU.DLL 01/12/1999 01:54 PM 1,109,264 FM20.DLL 01/22/1999 01:46 PM 65,536 MSRTEDIT.DLL 02/04/1999 01:09 PM 57,393 OUTLWAB.DLL 02/16/1999 02:38 PM 38,912 EXSEC32.DLL 03/03/1999 01:05 PM 81,920 MDT2FW95.DLL 03/10/1999 05:36 PM 111,616 MSAAP.XLA 03/10/1999 05:37 PM 1,494,528 SBFM40.XLA 04/23/1999 10:22 PM 24,576 MFCUIA32.DLL 04/23/1999 10:22 PM 167,184 AMOVIE.OCX 04/23/1999 10:22 PM 155,920 MMEFXE.OCX 04/23/1999 10:22 PM 335,872 MFC30.DLL 04/23/1999 10:22 PM 188,416 MEMBG.DLL 04/23/1999 10:22 PM 950,272 MSJT3032.DLL 04/23/1999 10:22 PM 33,040 LHACM.ACM 04/23/1999 10:22 PM 139,264 IVFSRC.AX 04/23/1999 10:22 PM 200,704 QCUT.DLL 04/23/1999 10:22 PM 119,056 SQLSTR.DLL 04/23/1999 10:22 PM 45,056 MBSLGN32.DLL 04/23/1999 10:22 PM 24,576 MFCUIW32.DLL 04/23/1999 10:22 PM 430,080 MSREPL35.DLL 04/23/1999 10:22 PM 217,088 CLRVIDDC.DLL 04/23/1999 10:22 PM 24,576 INDICDLL.DLL 04/23/1999 10:22 PM 28,944 DBMSSOCN.DLL 04/23/1999 10:22 PM 33,040 DBMSSPXN.DLL 04/23/1999 10:22 PM 196,608 IR50_QCX.DLL 04/23/1999 10:22 PM 352,256 IR41_QCX.DLL 04/23/1999 10:22 PM 200,704 DDAO35.DLL 04/23/1999 10:22 PM 94,208 VDODEC32.DLL 04/23/1999 10:22 PM 232,432 THUMBVW.DLL 04/23/1999 10:22 PM 57,344 WMICORE.DLL 04/23/1999 10:22 PM 57,344 ICMFILTER.DLL 04/23/1999 10:22 PM 135,168 IR41_QC.DLL 04/23/1999 10:22 PM 212,992 IR50_QC.DLL 04/23/1999 10:22 PM 114,688 INSTRSA.DLL 04/23/1999 10:22 PM 1,056,768 MSJET35.DLL 04/23/1999 10:22 PM 77,824 IESHWIZ.EXE 04/23/1999 10:22 PM 88,464 DECVW_32.DLL 04/23/1999 10:22 PM 12,288 CMMGR32.EXE 05/22/2000 04:58 PM 140,488 comdlg32.ocx 05/22/2000 04:58 PM 647,872 Mscomct2.ocx 05/22/2000 04:58 PM 1,066,176 mscomctl.ocx 06/12/2001 03:52 PM 36,864 PalmDevC.dll 07/21/2001 06:52 PM 33,489 CNBJHLP2.HLP 07/21/2001 06:52 PM 1,075 CNBJHLP2.CNT 08/17/2001 10:36 PM 585,344 i81xdnt5.dll 08/17/2001 10:36 PM 75,776 CNBJMON2.DLL 08/17/2001 10:36 PM 4,096 ksuser.dll 08/17/2001 10:36 PM 67,072 usbui.dll 08/17/2001 10:37 PM 117,248 ksproxy.ax 01/05/2002 03:37 AM 344,064 msvcr70.dll 08/29/2002 03:41 AM 71,168 storprop.dll 03/18/2003 08:14 PM 499,712 msvcp71.dll 04/18/2003 04:29 PM 82,432 msxml4r.dll 04/18/2003 04:46 PM 1,233,920 msxml4.dll 02/25/2004 12:05 PM 348,160 msvcr71.dll 05/02/2004 10:52 AM 60,056 avmontr.dll 05/25/2004 05:26 PM 2,233 12520850.cpx 05/25/2004 05:26 PM 25,600 aaaamon.dll 05/25/2004 05:26 PM 59,392 6to4svc.dll 05/25/2004 05:26 PM 2,151 12520437.cpx 05/25/2004 05:26 PM 4,096 actmovie.exe 05/25/2004 05:26 PM 66,048 access.cpl 05/25/2004 05:26 PM 179,200 accwiz.exe 05/25/2004 05:26 PM 91,136 advpack.dll 05/25/2004 05:26 PM 181,760 activeds.dll 05/25/2004 05:26 PM 139,776 adsldpc.dll 05/25/2004 05:26 PM 107,008 aclui.dll 05/25/2004 05:26 PM 109,568 adsnw.dll 05/25/2004 05:26 PM 98,304 actxprxy.dll 05/25/2004 05:26 PM 61,952 acelpdec.ax 05/25/2004 05:26 PM 239,616 adsnt.dll 05/25/2004 05:26 PM 129,536 acledit.dll 05/25/2004 05:26 PM 62,464 adsmsext.dll 05/25/2004 05:26 PM 111,104 activeds.tlb 05/25/2004 05:26 PM 57,344 admparse.dll 05/25/2004 05:26 PM 558,080 advapi32.dll 05/25/2004 05:26 PM 162,816 adsldp.dll 05/25/2004 05:26 PM 26,112 adptif.dll 05/25/2004 05:26 PM 161,792 adsnds.dll 05/25/2004 05:26 PM 64,512 acctres.dll 05/25/2004 05:26 PM 156,672 appmgmts.dll 05/25/2004 05:26 PM 277,504 appmgr.dll 05/25/2004 05:26 PM 15,872 alrsvc.dll 05/25/2004 05:26 PM 91,648 ahui.exe 05/25/2004 05:26 PM 578,560 appwiz.cpl 05/25/2004 05:26 PM 63,488 amstream.dll 05/25/2004 05:26 PM 9,029 ansi.sys 05/25/2004 05:26 PM 102,912 apcups.dll 05/25/2004 05:26 PM 115,712 apphelp.dll 05/25/2004 05:26 PM 12,498 append.exe 05/25/2004 05:26 PM 19,456 arp.exe 05/25/2004 05:26 PM 41,984 alg.exe 05/25/2004 05:26 PM 89,600 asctrls.ocx 05/25/2004 05:26 PM 5,120 asferror.dll 05/25/2004 05:26 PM 14,366 asfsipc.dll 05/25/2004 05:26 PM 22,528 at.exe 05/25/2004 05:26 PM 34,816 atmpvcno.dll 05/25/2004 05:26 PM 27,136 atmlib.dll 05/25/2004 05:26 PM 272,768 atmfd.dll 05/25/2004 05:26 PM 27,136 asr_fmt.exe 05/25/2004 05:26 PM 32,256 asr_ldm.exe 05/25/2004 05:26 PM 10,240 atmadm.exe 05/25/2004 05:26 PM 77,824 asycfilt.dll 05/25/2004 05:26 PM 74,810 atl.dll 05/25/2004 05:26 PM 13,312 atkctrs.dll 05/25/2004 05:26 PM 227,840 avtapi.dll 05/25/2004 05:26 PM 76,288 avifil32.dll 05/25/2004 05:26 PM 80,384 autodisc.dll 05/25/2004 05:26 PM 558,592 autofmt.exe 05/25/2004 05:26 PM 6,656 batt.dll 05/25/2004 05:26 PM 578,560 autoconv.exe 05/25/2004 05:26 PM 69,584 avicap.dll 05/25/2004 05:26 PM 64,000 avicap32.dll 05/25/2004 05:26 PM 109,456 avifile.dll 05/25/2004 05:26 PM 27,136 batmeter.dll 05/25/2004 05:26 PM 73,216 avwav.dll 05/25/2004 05:26 PM 11,264 atrace.dll 05/25/2004 05:26 PM 1,688 AUTOEXEC.NT 05/25/2004 05:26 PM 16,384 avmeter.dll 05/25/2004 05:26 PM 44,032 basesrv.dll 05/25/2004 05:26 PM 11,264 attrib.exe 05/25/2004 05:26 PM 565,760 autochk.exe 05/25/2004 05:26 PM 38,912 audiosrv.dll 05/25/2004 05:26 PM 8,192 autolfn.exe 05/25/2004 05:26 PM 51,200 authz.dll 05/25/2004 05:26 PM 12,288 bootvid.dll 05/25/2004 05:26 PM 5,120 bootvrfy.exe 05/25/2004 05:26 PM 136,704 bootcfg.exe 05/25/2004 05:26 PM 204,800 blackbox.dll 05/25/2004 05:26 PM 14,848 bidispl.dll 05/25/2004 05:26 PM 71,680 browsewm.dll 05/25/2004 05:26 PM 49,152 browser.dll 05/25/2004 05:26 PM 62,976 browselc.dll 05/25/2004 05:26 PM 28,420 bios1.rom 05/25/2004 05:26 PM 1,021,952 browseui.dll 05/25/2004 05:26 PM 8,191 bios4.rom 05/25/2004 05:26 PM 22,984 bopomofo.uce 05/25/2004 05:26 PM 4,608 bootok.exe 05/25/2004 05:26 PM 142,336 cdfview.dll 05/25/2004 05:26 PM 582,656 catsrvut.dll 05/25/2004 05:26 PM 27,648 ccfgnt.dll 05/25/2004 05:26 PM 114,688 calc.exe 05/25/2004 05:26 PM 359,936 cards.dll 05/25/2004 05:26 PM 59,904 cabinet.dll 05/25/2004 05:26 PM 142,848 capesnpn.dll 05/25/2004 05:26 PM 45,056 camocx.dll 05/25/2004 05:26 PM 18,432 cacls.exe 05/25/2004 05:26 PM 80,384 cabview.dll 05/25/2004 05:26 PM 85,504 catsrvps.dll 05/25/2004 05:26 PM 215,040 catsrv.dll 05/25/2004 05:26 PM 15,872 cdmodem.dll 05/25/2004 05:26 PM 109,568 cic.dll 05/25/2004 05:26 PM 64,512 ciodm.dll 05/25/2004 05:26 PM 2,028,032 cdosys.dll 05/25/2004 05:26 PM 436,736 certmgr.dll 05/25/2004 05:26 PM 42,339 certmgr.msc 05/25/2004 05:26 PM 186,880 certcli.dll 05/25/2004 05:26 PM 75 View Channels.scf 05/25/2004 05:26 PM 7,680 chcp.com 05/25/2004 05:26 PM 11,776 chkdsk.exe 05/25/2004 05:26 PM 11,264 chkntfs.exe 05/25/2004 05:26 PM 163,328 ciadmin.dll 05/25/2004 05:26 PM 80,384 charmap.exe 05/25/2004 05:26 PM 41,762 ciadv.msc 05/25/2004 05:26 PM 8,192 cidaemon.exe 05/25/2004 05:26 PM 16,896 cfgmgr32.dll 05/25/2004 05:26 PM 45,056 cipher.exe 05/25/2004 05:26 PM 5,120 cisvc.exe 05/25/2004 05:26 PM 179,712 cewmdm.dll 05/25/2004 05:26 PM 32,768 cfgbkend.dll 05/25/2004 05:26 PM 30,720 clipsrv.exe 05/25/2004 05:26 PM 24,576 cliconfg.rll 05/25/2004 05:26 PM 45,632 cliconfg.exe 05/25/2004 05:26 PM 127,552 cliconfg.dll 05/25/2004 05:26 PM 98,816 clipbrd.exe 05/25/2004 05:26 PM 174,592 cmprops.dll 05/25/2004 05:26 PM 12,288 cmcfg32.dll 05/25/2004 05:26 PM 61,440 cleanmgr.exe 05/25/2004 05:26 PM 468,480 clbcatq.dll 05/25/2004 05:26 PM 435,712 shellstyle.dll 05/25/2004 05:26 PM 54,272 clusapi.dll 05/25/2004 05:26 PM 7,680 ckcnv.exe 05/25/2004 05:26 PM 100,864 clbcatex.dll 05/25/2004 05:26 PM 40,505 cmdlib.wsc 05/25/2004 05:26 PM 10,752 clb.dll 05/25/2004 05:26 PM 375,808 cmd.exe 05/25/2004 05:26 PM 61,172 cmmgr32.hlp 05/25/2004 05:26 PM 25,600 comaddin.dll 05/25/2004 05:26 PM 35,840 cmmon32.exe 05/25/2004 05:26 PM 64 cmos.ram 05/25/2004 05:26 PM 14,336 cmpbk32.dll 05/25/2004 05:26 PM 54,784 cmstp.exe 05/25/2004 05:26 PM 36,352 cmutil.dll 05/25/2004 05:26 PM 32,768 cnetcfg.dll 05/25/2004 05:26 PM 56,832 colbact.dll 05/25/2004 05:26 PM 26,624 cnvfat.dll 05/25/2004 05:26 PM 258,048 comdlg32.dll 05/25/2004 05:26 PM 3,584 comcat.dll 05/25/2004 05:26 PM 324,608 cmdial32.dll 05/25/2004 05:26 PM 41,472 cmdl32.exe 05/25/2004 05:26 PM 71,859 cliconf.chm 05/25/2004 05:26 PM 557,056 comctl32.dll 05/25/2004 05:26 PM 32,816 commdlg.dll 05/25/2004 05:26 PM 10,544 comm.drv 05/25/2004 05:26 PM 238,592 compatUI.dll 05/25/2004 05:26 PM 50,620 command.com 05/25/2004 05:26 PM 15,872 comp.exe 05/25/2004 05:26 PM 17,408 compact.exe 05/25/2004 05:26 PM 82,432 comrepl.dll 05/25/2004 05:26 PM 30,160 compobj.dll 05/25/2004 05:26 PM 147,456 comsnap.dll 05/25/2004 05:26 PM 222,208 compstui.dll 05/25/2004 05:26 PM 792,064 comres.dll 05/25/2004 05:26 PM 38,302 compmgmt.msc 05/25/2004 05:26 PM 345,600 confmsp.dll 05/25/2004 05:26 PM 14,877 corpol.dll 05/25/2004 05:26 PM 27,097 country.sys 05/25/2004 05:26 PM 2,577 CONFIG.TMP 05/25/2004 05:26 PM 8,192 control.exe 05/25/2004 05:26 PM 13,824 convert.exe 05/25/2004 05:26 PM 1,172,992 comsvcs.dll 05/25/2004 05:26 PM 66,560 console.dll 05/25/2004 05:26 PM 24,576 conime.exe 05/25/2004 05:26 PM 158,720 credui.dll 05/25/2004 05:26 PM 495,616 comuid.dll 05/25/2004 05:26 PM 53,248 cryptnet.dll 05/25/2004 05:26 PM 149,019 crtdll.dll 05/25/2004 05:26 PM 27,136 ctl3d32.dll 05/25/2004 05:26 PM 307,712 cscui.dll 05/25/2004 05:26 PM 27,200 ctl3dv2.dll 05/25/2004 05:26 PM 89,600 cscdll.dll 05/25/2004 05:26 PM 13,312 ctfmon.exe 05/25/2004 05:26 PM 4,096 csrss.exe 05/25/2004 05:26 PM 48,640 cryptext.dll 05/25/2004 05:26 PM 557,568 crypt32.dll 05/25/2004 05:26 PM 66,082 c_10000.nls 05/25/2004 05:26 PM 66,082 c_037.nls 05/25/2004 05:26 PM 102,450 cscript.exe 05/25/2004 05:26 PM 70,144 cryptdlg.dll 05/25/2004 05:26 PM 8,386 ctype.nls 05/25/2004 05:26 PM 29,184 cryptdll.dll 05/25/2004 05:26 PM 53,248 cryptsvc.dll 05/25/2004 05:26 PM 29,184 csrsrv.dll 05/25/2004 05:26 PM 471,040 cryptui.dll 05/25/2004 05:26 PM 73,728 csseqchk.dll 05/25/2004 05:26 PM 66,594 c_869.nls 05/25/2004 05:26 PM 66,082 c_875.nls 05/25/2004 05:26 PM 66,082 c_10006.nls 05/25/2004 05:26 PM 66,594 c_737.nls 05/25/2004 05:26 PM 1,180,672 d3d8.dll 05/25/2004 05:26 PM 66,082 c_1252.nls 05/25/2004 05:26 PM 66,594 c_852.nls 05/25/2004 05:26 PM 66,082 c_10010.nls 05/25/2004 05:26 PM 66,082 c_10029.nls 05/25/2004 05:26 PM 66,594 c_437.nls 05/25/2004 05:26 PM 66,082 c_10079.nls 05/25/2004 05:26 PM 196,642 c_950.nls 05/25/2004 05:26 PM 66,594 c_855.nls 05/25/2004 05:26 PM 66,082 c_10082.nls 05/25/2004 05:26 PM 66,082 C_28597.NLS 05/25/2004 05:26 PM 196,642 c_949.nls 05/25/2004 05:26 PM 196,642 c_936.nls 05/25/2004 05:26 PM 66,082 c_10007.nls 05/25/2004 05:26 PM 162,850 c_932.nls 05/25/2004 05:26 PM 66,082 c_10017.nls 05/25/2004 05:26 PM 66,594 c_874.nls 05/25/2004 05:26 PM 66,594 c_865.nls 05/25/2004 05:26 PM 66,082 c_28599.nls 05/25/2004 05:26 PM 66,594 c_866.nls 05/25/2004 05:26 PM 66,594 c_863.nls 05/25/2004 05:26 PM 66,594 c_857.nls 05/25/2004 05:26 PM 66,594 c_861.nls 05/25/2004 05:26 PM 66,082 C_28594.NLS 05/25/2004 05:26 PM 66,594 c_860.nls 05/25/2004 05:26 PM 66,594 c_850.nls 05/25/2004 05:26 PM 66,082 c_1026.nls 05/25/2004 05:26 PM 66,594 c_775.nls 05/25/2004 05:26 PM 66,082 c_500.nls 05/25/2004 05:26 PM 66,082 c_28605.nls 05/25/2004 05:26 PM 66,082 c_28598.nls 05/25/2004 05:26 PM 66,082 c_28593.nls 05/25/2004 05:26 PM 66,082 c_28592.nls 05/25/2004 05:26 PM 66,082 c_28591.nls 05/25/2004 05:26 PM 66,082 c_21866.nls 05/25/2004 05:26 PM 66,082 c_20905.nls 05/25/2004 05:26 PM 66,082 c_20866.nls 05/25/2004 05:26 PM 139,810 c_20261.nls 05/25/2004 05:26 PM 66,082 c_1258.nls 05/25/2004 05:26 PM 66,082 c_1257.nls 05/25/2004 05:26 PM 66,082 c_1256.nls 05/25/2004 05:26 PM 66,082 c_1255.nls 05/25/2004 05:26 PM 8,192 d3d8thk.dll 05/25/2004 05:26 PM 436,224 d3dim.dll 05/25/2004 05:26 PM 66,082 C_28595.NLS 05/25/2004 05:26 PM 66,082 c_1254.nls 05/25/2004 05:26 PM 66,082 c_1253.nls 05/25/2004 05:26 PM 66,082 c_1251.nls 05/25/2004 05:26 PM 66,082 c_1250.nls 05/25/2004 05:26 PM 66,082 c_20127.nls 05/25/2004 05:26 PM 66,082 c_10081.nls 05/25/2004 05:26 PM 847,872 dbgeng.dll 05/25/2004 05:26 PM 7,680 dciman32.dll 05/25/2004 05:26 PM 39,424 ddeml.dll 05/25/2004 05:26 PM 27,136 ddeshare.exe 05/25/2004 05:26 PM 24,064 ddrawex.dll 05/25/2004 05:26 PM 20,634 debug.exe 05/25/2004 05:26 PM 16,384 deskadp.dll 05/25/2004 05:26 PM 16,896 deskmon.dll 05/25/2004 05:26 PM 18,432 deskperf.dll 05/25/2004 05:26 PM 51,712 devenum.dll 05/25/2004 05:26 PM 33,079 devmgmt.msc 05/25/2004 05:26 PM 41,397 dfrg.msc 05/25/2004 05:26 PM 489,984 dbghelp.dll 05/25/2004 05:26 PM 99,328 dfrgntfs.exe 05/25/2004 05:26 PM 76,288 dfrgfat.exe 05/25/2004 05:26 PM 35,328 dfrgsnap.dll 05/25/2004 05:26 PM 51,200 dfrgres.dll 05/25/2004 05:26 PM 152,064 datime.dll 05/25/2004 05:26 PM 51,712 dataclen.dll 05/25/2004 05:26 PM 47,616 d3dxof.dll 05/25/2004 05:26 PM 350,208 d3drm.dll 05/25/2004 05:26 PM 34,816 d3dpmesh.dll 05/25/2004 05:26 PM 986,112 danim.dll 05/25/2004 05:26 PM 142,848 daxctle.ocx 05/25/2004 05:26 PM 791,040 d3dim700.dll 05/25/2004 05:26 PM 20,480 dbmsadsn.dll 05/25/2004 05:26 PM 590,336 d3dramp.dll 05/25/2004 05:26 PM 24,576 dbmsrpcn.dll 05/25/2004 05:26 PM 5,120 dcomcnfg.exe 05/25/2004 05:26 PM 61,440 dbnetlib.dll 05/25/2004 05:26 PM 28,672 dbnmpntw.dll 05/25/2004 05:26 PM 24,576 dbmsvinn.dLL 05/25/2004 05:26 PM 1,740 Dcache.bin 05/25/2004 05:26 PM 253,440 ddraw.dll 05/25/2004 05:26 PM 263,168 devmgr.dll 05/25/2004 05:26 PM 70,656 defrag.exe 05/25/2004 05:26 PM 129,024 desk.cpl 05/25/2004 05:26 PM 22,016 davclnt.dll 05/25/2004 05:26 PM 25,600 dfsshlex.dll 05/25/2004 05:26 PM 79,360 diantz.exe 05/25/2004 05:26 PM 394,240 diactfrm.dll 05/25/2004 05:26 PM 113,152 dfrgui.dll 05/25/2004 05:26 PM 74,240 dhcpsapi.dll 05/25/2004 05:26 PM 85,020 dgsetup.dll 05/25/2004 05:26 PM 370,176 dhcpmon.dll 05/25/2004 05:26 PM 103,424 dgnet.dll 05/25/2004 05:26 PM 176,157 dgrpsetu.dll 05/25/2004 05:26 PM 99,840 dhcpcsvc.dll 05/25/2004 05:26 PM 55,296 digest.dll 05/25/2004 05:26 PM 330,752 dmconfig.dll 05/25/2004 05:26 PM 4,608 dllhst3g.exe 05/25/2004 05:26 PM 4,608 dllhost.exe 05/25/2004 05:26 PM 45,083 dispex.dll 05/25/2004 05:26 PM 151,552 dinput.dll 05/25/2004 05:26 PM 168,960 dinput8.dll 05/25/2004 05:26 PM 26,112 dmband.dll 05/25/2004 05:26 PM 57,344 dmcompos.dll 05/25/2004 05:26 PM 17,920 diskperf.exe 05/25/2004 05:26 PM 145,920 diskpart.exe 05/25/2004 05:26 PM 33,673 diskmgmt.msc 05/25/2004 05:26 PM 1,501,696 diskcopy.dll 05/25/2004 05:26 PM 7,168 diskcopy.com 05/25/2004 05:26 PM 9,216 diskcomp.com 05/25/2004 05:26 PM 44,032 dimap.dll 05/25/2004 05:26 PM 204,800 dmadmin.exe 05/25/2004 05:26 PM 56,320 dpnhupnp.dll 05/25/2004 05:26 PM 29,696 dpnhpast.dll 05/25/2004 05:26 PM 58,368 dpvsetup.exe 05/25/2004 05:26 PM 49,664 dpwsockx.dll 05/25/2004 05:26 PM 139,264 dnsapi.dll 05/25/2004 05:26 PM 44,032 dnsrslvr.dll 05/25/2004 05:26 PM 21,504 dmserver.dll 05/25/2004 05:26 PM 115,200 dpcdll.dll 05/25/2004 05:26 PM 156,672 dpnet.dll 05/25/2004 05:26 PM 45,568 docprop2.dll 05/25/2004 05:26 PM 94,720 dmusic.dll 05/25/2004 05:26 PM 110,080 dmstyle.dll 05/25/2004 05:26 PM 77,312 dmscript.dll 05/25/2004 05:26 PM 31,744 dmloader.dll 05/25/2004 05:26 PM 172,544 dmime.dll 05/25/2004 05:26 PM 42,768 dpwsock.dll 05/25/2004 05:26 PM 113,152 dpvvox.dll 05/25/2004 05:26 PM 24,064 dpvacm.dll 05/25/2004 05:26 PM 206,336 dpvoice.dll 05/25/2004 05:26 PM 53,520 dpserial.dll 05/25/2004 05:26 PM 273,920 dmdlgs.dll 05/25/2004 05:26 PM 184,320 dmdskmgr.dll 05/25/2004 05:26 PM 118,784 dmdskres.dll 05/25/2004 05:26 PM 18,432 dmintf.dll 05/25/2004 05:26 PM 19,456 dmocx.dll 05/25/2004 05:26 PM 61,952 dpnwsock.dll 05/25/2004 05:26 PM 14,336 dmremote.exe 05/25/2004 05:26 PM 99,840 dmsynth.dll 05/25/2004 05:26 PM 61,440 dmview.ocx 05/25/2004 05:26 PM 46,080 docprop.dll 05/25/2004 05:26 PM 10,752 doskey.exe 05/25/2004 05:26 PM 53,840 dosx.exe 05/25/2004 05:26 PM 33,040 dplay.dll 05/25/2004 05:26 PM 26,112 dplaysvr.exe 05/25/2004 05:26 PM 212,992 dplayx.dll 05/25/2004 05:26 PM 20,992 dpmodemx.dll 05/25/2004 05:26 PM 26,112 dpnaddr.dll 05/25/2004 05:26 PM 38,400 dpnlobby.dll 05/25/2004 05:26 PM 62,464 dpnmodem.dll 05/25/2004 05:26 PM 18,944 dpnsvr.exe 05/25/2004 05:27 PM 53,305 usrlbva.dll 05/25/2004 05:27 PM 66,560 dsdmoprp.dll 05/25/2004 05:27 PM 165,888 dsdmo.dll 05/25/2004 05:27 PM 62,976 dsauth.dll 05/25/2004 05:27 PM 102,457 usrv42a.dll 05/25/2004 05:27 PM 4,656 ds16gt.dLL 05/25/2004 05:27 PM 16,896 dswave.dll 05/25/2004 05:27 PM 227,840 dsquery.dll 05/25/2004 05:27 PM 22,016 wdmaud.drv 05/25/2004 05:27 PM 135,680 dsprop.dll 05/25/2004 05:27 PM 49,209 usrv80a.dll 05/25/2004 05:27 PM 16,384 ds32gt.dll 05/25/2004 05:27 PM 45,116 usrvoica.dll 05/25/2004 05:27 PM 602,112 drmv2clt.dll 05/25/2004 05:27 PM 49,211 usrvpa.dll 05/25/2004 05:27 PM 50,688 dmutil.dll 05/25/2004 05:27 PM 76,830 drmstor.dll 05/25/2004 05:27 PM 45,568 iyuv_32.dll 05/25/2004 05:27 PM 3,200 wowfax.dll 05/25/2004 05:27 PM 13,824 wowfaxui.dll 05/25/2004 05:27 PM 147,968 mdwmdmsp.dll 05/25/2004 05:27 PM 266,240 drmclien.dll 05/25/2004 05:27 PM 47,104 dssec.dll 05/25/2004 05:27 PM 218,003 dssec.dat 05/25/2004 05:27 PM 41,019 usrsvpia.dll 05/25/2004 05:27 PM 45,568 drwtsn32.exe 05/25/2004 05:27 PM 69,700 usrshuta.exe 05/25/2004 05:27 PM 22,528 hid.dll 05/25/2004 05:27 PM 1,293,824 dsound3d.dll 05/25/2004 05:27 PM 81 dsound.vxd 05/25/2004 05:27 PM 28,112 drwatson.exe 05/25/2004 05:27 PM 106,496 dsuiext.dll 05/25/2004 05:27 PM 58,368 driverquery.exe 05/25/2004 05:27 PM 323,641 usrdtea.dll 05/25/2004 05:27 PM 49,211 usrsdpia.dll 05/25/2004 05:27 PM 144,384 dskquoui.dll 05/25/2004 05:27 PM 77,883 usrrtosa.dll 05/25/2004 05:27 PM 84,992 dskquota.dll 05/25/2004 05:27 PM 61,508 usrprbda.exe 05/25/2004 05:27 PM 11,776 drprov.dll 05/25/2004 05:27 PM 69,632 spnike.dll 05/25/2004 05:27 PM 70,656 sprio600.dll 05/25/2004 05:27 PM 72,192 sprio800.dll 05/25/2004 05:27 PM 77,891 usrmlnka.exe 05/25/2004 05:27 PM 8,192 streamci.dll 05/25/2004 05:27 PM 77,890 usrdpa.dll 05/25/2004 05:27 PM 8,192 tsbyuv.dll 05/25/2004 05:27 PM 12,800 pjlmon.dll 05/25/2004 05:27 PM 86,073 usrfaxa.dll 05/25/2004 05:27 PM 157,696 paqsp.dll 05/25/2004 05:27 PM 45,568 cnbjmon.dll 05/25/2004 05:27 PM 124,928 dssenh.dll 05/25/2004 05:27 PM 338,944 dsound.dll 05/25/2004 05:27 PM 16,384 msyuv.dll 05/25/2004 05:27 PM 69,699 usrcoina.dll 05/25/2004 05:27 PM 61,500 usrcntra.dll 05/25/2004 05:27 PM 55,296 dvdplay.exe 05/25/2004 05:27 PM 15,872 dvdupgrd.exe 05/25/2004 05:27 PM 19,456 ersvc.dll 05/25/2004 05:27 PM 127,213 ega.cpi 05/25/2004 05:27 PM 10,790 edit.hlp 05/25/2004 05:27 PM 180,224 dwwin.exe 05/25/2004 05:27 PM 69,886 edit.com 05/25/2004 05:27 PM 595,456 dx7vb.dll 05/25/2004 05:27 PM 12,642 edlin.exe 05/25/2004 05:27 PM 24,576 efsadu.dll 05/25/2004 05:27 PM 103,424 EqnClass.Dll 05/25/2004 05:27 PM 498,205 dxmasf.dll 05/25/2004 05:27 PM 165,376 els.dll 05/25/2004 05:27 PM 263,680 duser.dll 05/25/2004 05:27 PM 9,216 dumprep.exe 05/25/2004 05:27 PM 786,432 dxdiag.exe 05/25/2004 05:27 PM 802,304 dxmrtp.dll 05/25/2004 05:27 PM 337,920 dxtmsft.dll 05/25/2004 05:27 PM 1,185,792 dx8vb.dll 05/25/2004 05:27 PM 194,560 dxtrans.dll 05/25/2004 05:27 PM 178,688 eudcedit.exe 05/25/2004 05:27 PM 49,152 eventlog.dll 05/25/2004 05:27 PM 1,114,896 esent97.dll 05/25/2004 05:27 PM 17,408 esentprf.dll 05/25/2004 05:27 PM 6,708 esentprf.hxx 05/25/2004 05:27 PM 225,280 es.dll 05/25/2004 05:27 PM 1,015,477 esentprf.ini 05/25/2004 05:27 PM 15,872 expand.exe 05/25/2004 05:27 PM 8,424 exe2bin.exe 05/25/2004 05:27 PM 77,824 eventtriggers.exe 05/25/2004 05:27 PM 97,965 eventquery.vbs 05/25/2004 05:27 PM 39,424 esentutl.exe 05/25/2004 05:27 PM 56,678 eventvwr.msc 05/25/2004 05:27 PM 8,704 eventvwr.exe 05/25/2004 05:27 PM 33,280 eventcls.dll 05/25/2004 05:27 PM 47,616 eventcreate.exe 05/25/2004 05:27 PM 1,018,368 esent.dll 05/25/2004 05:27 PM 29,338 eula.txt 05/25/2004 05:27 PM 361,472 fontext.dll 05/25/2004 05:27 PM 16,384 fmifs.dll 05/25/2004 05:27 PM 79,360 fontsub.dll 05/25/2004 05:27 PM 7,168 forcedos.exe 05/25/2004 05:27 PM 25,600 format.com 05/25/2004 05:27 PM 380,445 expsrv.dll 05/25/2004 05:27 PM 67,584 fdeploy.dll 05/25/2004 05:27 PM 82,432 fldrclnr.dll 05/25/2004 05:27 PM 19,456 fontview.exe 05/25/2004 05:27 PM 9,216 finger.exe 05/25/2004 05:27 PM 9,216 find.exe 05/25/2004 05:27 PM 66,560 faultrep.dll 05/25/2004 05:27 PM 323,072 filemgmt.dll 05/25/2004 05:27 PM 18,432 feclient.dll 05/25/2004 05:27 PM 117,760 fde.dll 05/25/2004 05:27 PM 14,848 fc.exe 05/25/2004 05:27 PM 882 fastopen.exe 05/25/2004 05:27 PM 121,856 exts.dll 05/25/2004 05:27 PM 40,960 extrac32.exe 05/25/2004 05:27 PM 3,072 fixmapi.exe 05/25/2004 05:27 PM 25,088 findstr.exe 05/25/2004 05:27 PM 56,320 fsutil.exe 05/25/2004 05:27 PM 8,832 framebuf.dll 05/25/2004 05:27 PM 40,448 ftp.exe 05/25/2004 05:27 PM 32,760 fsmgmt.msc 05/25/2004 05:27 PM 81,408 fsusd.dll 05/25/2004 05:27 PM 176,128 ftsrch.dll 05/25/2004 05:27 PM 41,472 g711codc.ax 05/25/2004 05:27 PM 55,296 freecell.exe 05/25/2004 05:27 PM 24,772 geo.nls 05/25/2004 05:27 PM 55,296 getmac.exe 05/25/2004 05:27 PM 24,006 gb2312.uce 05/25/2004 05:27 PM 488,960 gpedit.dll 05/25/2004 05:27 PM 605,696 getuname.dll 05/25/2004 05:27 PM 116,736 glu32.dll 05/25/2004 05:27 PM 285,184 glmf32.dll 05/25/2004 05:27 PM 76,800 gcdef.dll 05/25/2004 05:27 PM 250,368 gdi32.dll 05/25/2004 05:27 PM 24,576 gdi.exe 05/25/2004 05:27 PM 26,112 graftabl.com 05/25/2004 05:27 PM 9,728 gpkrsrc.dll 05/25/2004 05:27 PM 101,888 gpkcsp.dll 05/25/2004 05:27 PM 19,694 graphics.com 05/25/2004 05:27 PM 183,296 gptext.dll 05/25/2004 05:27 PM 21,232 graphics.pro 05/25/2004 05:27 PM 113,152 gpresult.exe 05/25/2004 05:27 PM 57,344 gpupdate.exe 05/25/2004 05:27 PM 14,848 help.exe 05/25/2004 05:27 PM 150,016 hdwwiz.cpl 05/25/2004 05:27 PM 34,871 gpedit.msc 05/25/2004 05:27 PM 592,896 h323msp.dll 05/25/2004 05:27 PM 37,888 grpconv.exe 05/25/2004 05:27 PM 252,928 h323.tsp 05/25/2004 05:27 PM 28,160 hidphone.tsp 05/25/2004 05:27 PM 240,640 hnetcfg.dll 05/25/2004 05:27 PM 511,560 hhctrl.ocx 05/25/2004 05:27 PM 4,768 himem.sys 05/25/2004 05:27 PM 77,850 hlink.dll 05/25/2004 05:27 PM 14,848 hnetmon.dll 05/25/2004 05:27 PM 315,904 hnetwiz.dll 05/25/2004 05:27 PM 37,888 hhsetup.dll 05/25/2004 05:27 PM 39,936 htui.dll 05/25/2004 05:27 PM 41,472 iasads.dll 05/25/2004 05:27 PM 23,552 iasacct.dll 05/25/2004 05:27 PM 32,256 iashlpr.dll 05/25/2004 05:27 PM 62,464 iasnap.dll 05/25/2004 05:27 PM 7,680 hostname.exe 05/25/2004 05:27 PM 137,216 hotplug.dll 05/25/2004 05:27 PM 929 homepage.inf 05/25/2004 05:27 PM 44,544 hticons.dll 05/25/2004 05:27 PM 489,984 hypertrm.dll 05/25/2004 05:27 PM 141,312 iasrecst.dll 05/25/2004 05:27 PM 3,072 icmp.dll 05/25/2004 05:27 PM 86,528 iassam.dll 05/25/2004 05:27 PM 247,808 iassdo.dll 05/25/2004 05:27 PM 59,392 iassvcs.dll 05/25/2004 05:27 PM 110,592 iccvid.dll 05/25/2004 05:27 PM 54,784 icmui.dll 05/25/2004 05:27 PM 221,184 ieakui.dll 05/25/2004 05:27 PM 69,632 icwdial.dll 05/25/2004 05:27 PM 204,288 ieaksie.dll 05/25/2004 05:27 PM 126,976 ieakeng.dll 05/25/2004 05:27 PM 113,152 idq.dll 05/25/2004 05:27 PM 236,032 icm32.dll 05/25/2004 05:27 PM 116,224 iasrad.dll 05/25/2004 05:27 PM 28,672 ie4uinit.exe 05/25/2004 05:27 PM 17,920 iaspolcy.dll 05/25/2004 05:27 PM 61,440 icwphbk.dll 05/25/2004 05:27 PM 294,912 iedkcs32.dll 05/25/2004 05:27 PM 16,384 icfgnt5.dll 05/25/2004 05:27 PM 9,216 icaapi.dll 05/25/2004 05:27 PM 60,458 ideograf.uce 05/25/2004 05:27 PM 14,848 imaadp32.acm 05/25/2004 05:27 PM 23,040 iernonce.dll 05/25/2004 05:27 PM 126,976 imagehlp.dll 05/25/2004 05:27 PM 99,840 iexpress.exe 05/25/2004 05:27 PM 125,952 ifmon.dll 05/25/2004 05:27 PM 36,922 imeshare.dll 05/25/2004 05:27 PM 30,208 imgutil.dll 05/25/2004 05:27 PM 70,656 ifsutil.dll 05/25/2004 05:27 PM 73,728 ils.dll 05/25/2004 05:27 PM 59,392 iesetup.dll 05/25/2004 05:27 PM 19,514 ieuinit.inf 05/25/2004 05:27 PM 103,936 imm32.dll 05/25/2004 05:27 PM 231,424 iepeers.dll 05/25/2004 05:27 PM 8,192 igmpagnt.dll 05/25/2004 05:27 PM 9,216 iissuba.dll 05/25/2004 05:27 PM 123,904 imapi.exe 05/25/2004 05:27 PM 110,592 inetcplc.dll 05/25/2004 05:27 PM 31,232 inetmib1.dll 05/25/2004 05:27 PM 14,336 inetppui.dll 05/25/2004 05:27 PM 450,560 infosoft.dll 05/25/2004 05:27 PM 16,384 ipconf.tsp 05/25/2004 05:27 PM 30,720 iologmsg.dll 05/25/2004 05:27 PM 47,616 inetres.dll 05/25/2004 05:27 PM 121,856 intl.cpl 05/25/2004 05:27 PM 766,934 instcat.sql 05/25/2004 05:27 PM 266,240 inetcfg.dll 05/25/2004 05:27 PM 114,176 input.dll 05/25/2004 05:27 PM 292,352 inetcpl.cpl 05/25/2004 05:27 PM 82,944 iphlpapi.dll 05/25/2004 05:27 PM 69,632 inseng.dll 05/25/2004 05:27 PM 51,712 ipconfig.exe 05/25/2004 05:27 PM 587,776 inetcomm.dll 05/25/2004 05:27 PM 68,096 inetpp.dll 05/25/2004 05:27 PM 144,896 initpki.dll 05/25/2004 05:27 PM 28,672 isrdbg32.dll 05/25/2004 05:27 PM 435,200 ipnathlp.dll 05/25/2004 05:27 PM 318,464 ippromon.dll 05/25/2004 05:27 PM 154,112 ipmontr.dll 05/25/2004 05:27 PM 60,928 ipv6.exe 05/25/2004 05:27 PM 4,096 iprtprio.dll 05/25/2004 05:27 PM 134,144 ipv6mon.dll 05/25/2004 05:27 PM 3,584 iprop.dll 05/25/2004 05:27 PM 199,168 ir32_32.dll 05/25/2004 05:27 PM 20,992 ipxwan.dll 05/25/2004 05:27 PM 66,560 ipxsap.dll 05/25/2004 05:27 PM 39,936 ipxrtmgr.dll 05/25/2004 05:27 PM 22,016 ipxroute.exe 05/25/2004 05:27 PM 21,504 ipxrip.dll 05/25/2004 05:27 PM 69,120 ipxpromn.dll 05/25/2004 05:27 PM 83,968 ipxmontr.dll 05/25/2004 05:27 PM 364,032 ipsmsnap.dll 05/25/2004 05:27 PM 143,872 itircl.dll 05/25/2004 05:27 PM 122,368 itss.dll 05/25/2004 05:27 PM 91,648 iuctl.dll 05/25/2004 05:27 PM 77,824 isign32.dll 05/25/2004 05:27 PM 13,312 irclass.dll 05/25/2004 05:27 PM 155,648 ipsecsvc.dll 05/25/2004 05:27 PM 44,032 ipsec6.exe 05/25/2004 05:27 PM 169,984 iprtrmgr.dll 05/25/2004 05:27 PM 332,800 ipsecsnp.dll 05/25/2004 05:27 PM 362,496 jet500.dll 05/25/2004 05:27 PM 6,656 kbdcr.dll 05/25/2004 05:27 PM 44,544 jgaw400.dll 05/25/2004 05:27 PM 144,896 jgdw400.dll 05/25/2004 05:27 PM 35,840 jgmd400.dll 05/25/2004 05:27 PM 42,496 jgpl400.dll 05/25/2004 05:27 PM 45,568 jgsd400.dll 05/25/2004 05:27 PM 65,536 jgsh400.dll 05/25/2004 05:27 PM 47,952 jobexec.dll 05/25/2004 05:27 PM 593,948 jscript.dll 05/25/2004 05:27 PM 6,656 KBDAL.DLL 05/25/2004 05:27 PM 12,288 jsproxy.dll 05/25/2004 05:27 PM 5,632 kbdazel.dll 05/25/2004 05:27 PM 14,710 kb16.com 05/25/2004 05:27 PM 6,144 kbdbe.dll 05/25/2004 05:27 PM 6,144 kbdbene.dll 05/25/2004 05:27 PM 6,144 kbdest.dll 05/25/2004 05:27 PM 6,144 kbdbr.dll 05/25/2004 05:27 PM 6,144 kbdca.dll 05/25/2004 05:27 PM 7,680 kbdcan.dll 05/25/2004 05:27 PM 6,144 kbdda.dll 05/25/2004 05:27 PM 5,632 kbdaze.dll 05/25/2004 05:27 PM 5,120 kbddv.dll 05/25/2004 05:27 PM 6,144 kbdes.dll 05/25/2004 05:27 PM 6,144 kbdfc.dll 05/25/2004 05:27 PM 6,144 kbdfi.dll 05/25/2004 05:27 PM 6,144 kbdfo.dll 05/25/2004 05:27 PM 6,144 kbdfr.dll 05/25/2004 05:27 PM 5,632 kbdbu.dll 05/25/2004 05:27 PM 5,632 kbdblr.dll 05/25/2004 05:27 PM 8,192 kbdhept.dll 05/25/2004 05:27 PM 5,632 kbdgae.dll 05/25/2004 05:27 PM 6,656 kbdhela3.dll 05/25/2004 05:27 PM 6,144 kbdhela2.dll 05/25/2004 05:27 PM 6,144 kbdgr.dll 05/25/2004 05:27 PM 5,632 kbdhe319.dll 05/25/2004 05:27 PM 6,144 kbdgr1.dll 05/25/2004 05:27 PM 5,632 kbdhe220.dll 05/25/2004 05:27 PM 6,144 kbdgkl.dll 05/25/2004 05:27 PM 5,632 kbdhe.dll 05/25/2004 05:27 PM 49,664 ixsso.dll 05/25/2004 05:27 PM 65,536 joy.cpl 05/25/2004 05:27 PM 7,168 kbdcz.dll 05/25/2004 05:27 PM 8,484 kanji_2.uce 05/25/2004 05:27 PM 6,948 kanji_1.uce 05/25/2004 05:27 PM 6,656 kbdcz2.dll 05/25/2004 05:27 PM 6,656 kbdcz1.dll 05/25/2004 05:27 PM 5,632 kbdtat.dll 05/25/2004 05:27 PM 6,144 kbdsw.dll 05/25/2004 05:27 PM 6,144 kbdsp.dll 05/25/2004 05:27 PM 5,632 kbdkaz.dll 05/25/2004 05:27 PM 5,632 kbdur.dll 05/25/2004 05:27 PM 5,632 kbdlt1.dll 05/25/2004 05:27 PM 6,656 kbdsl.dll 05/25/2004 05:27 PM 5,632 kbdro.dll 05/25/2004 05:27 PM 6,656 kbdpl.dll 05/25/2004 05:27 PM 6,656 kbdsg.dll 05/25/2004 05:27 PM 5,632 kbdpl1.dll 05/25/2004 05:27 PM 5,632 kbdru1.dll 05/25/2004 05:27 PM 6,144 kbdsf.dll 05/25/2004 05:27 PM 6,144 kbdlv.dll 05/25/2004 05:27 PM 5,632 kbdhu1.dll 05/25/2004 05:27 PM 5,632 kbdru.dll 05/25/2004 05:27 PM 6,656 kbdsl1.dll 05/25/2004 05:27 PM 6,656 kbdhu.dll 05/25/2004 05:27 PM 5,632 kbdlt.dll 05/25/2004 05:27 PM 6,144 kbdic.dll 05/25/2004 05:27 PM 6,144 kbdpo.dll 05/25/2004 05:27 PM 6,144 kbdtuq.dll 05/25/2004 05:27 PM 6,144 kbdtuf.dll 05/25/2004 05:27 PM 5,632 kbdir.dll 05/25/2004 05:27 PM 5,632 kbdit.dll 05/25/2004 05:27 PM 5,632 kbdkyr.dll 05/25/2004 05:27 PM 5,632 kbdmon.dll 05/25/2004 05:27 PM 6,144 kbdno.dll 05/25/2004 05:27 PM 5,632 kbdit142.dll 05/25/2004 05:27 PM 6,656 kbdla.dll 05/25/2004 05:27 PM 6,144 kbdmac.dll 05/25/2004 05:27 PM 6,144 kbdne.dll 05/25/2004 05:27 PM 7,168 kbdnec.dll 05/25/2004 05:27 PM 6,144 kbdlv1.dll 05/25/2004 05:27 PM 5,632 kbduk.dll 05/25/2004 05:27 PM 12,876 korean.uce 05/25/2004 05:27 PM 290,816 l3codeca.acm 05/25/2004 05:27 PM 42,537 keyboard.sys 05/25/2004 05:27 PM 7,040 kd1394.dll 05/25/2004 05:27 PM 5,632 kbdus.dll 05/25/2004 05:27 PM 92,160 krnl386.exe 05/25/2004 05:27 PM 7,040 kdcom.dll 05/25/2004 05:27 PM 272,896 kerberos.dll 05/25/2004 05:27 PM 83,456 l3codecx.ax 05/25/2004 05:27 PM 5,632 kbdycc.dll 05/25/2004 05:27 PM 6,656 kbdycl.dll 05/25/2004 05:27 PM 5,632 kbduzb.dll 05/25/2004 05:27 PM 930,304 kernel32.dll 05/25/2004 05:27 PM 6,144 kbdusl.dll 05/25/2004 05:27 PM 146,432 keymgr.dll 05/25/2004 05:27 PM 6,144 kbdusr.dll 05/25/2004 05:27 PM 6,144 kbdusx.dll 05/25/2004 05:27 PM 42,809 key01.sys 05/25/2004 05:27 PM 2,000 keyboard.drv 05/25/2004 05:27 PM 32,256 kmddsp.tsp 05/25/2004 05:27 PM 9,728 label.exe 05/25/2004 05:28 PM 6,656 laprxy.dll 05/25/2004 05:28 PM 25,088 lnkstub.exe 05/25/2004 05:28 PM 367,616 licdll.dll 05/25/2004 05:28 PM 202,752 localsec.dll 05/25/2004 05:28 PM 1,131 loadfix.com 05/25/2004 05:28 PM 29,696 lights.exe 05/25/2004 05:28 PM 221,600 lanman.drv 05/25/2004 05:28 PM 89,600 langwrbk.dll 05/25/2004 05:28 PM 57,856 licwmi.dll 05/25/2004 05:28 PM 209,010 locale.nls 05/25/2004 05:28 PM 12,288 lmhsvc.dll 05/25/2004 05:28 PM 15,360 linkinfo.dll 05/25/2004 05:28 PM 91,648 loadperf.dll 05/25/2004 05:28 PM 10,240 localui.dll 05/25/2004 05:28 PM 381,440 lmrt.dll 05/25/2004 05:28 PM 19,456 licmgr10.dll 05/25/2004 05:28 PM 295,936 localspl.dll 05/25/2004 05:28 PM 8,192 mag_hook.dll 05/25/2004 05:28 PM 67,584 magnify.exe 05/25/2004 05:28 PM 187,904 main.cpl 05/25/2004 05:28 PM 79,360 makecab.exe 05/25/2004 05:28 PM 9,936 lzexpand.dll 05/25/2004 05:28 PM 42,166 lusrmgr.msc 05/25/2004 05:28 PM 9,216 lprmonui.dll 05/25/2004 05:28 PM 8,704 lprhelp.dll 05/25/2004 05:28 PM 24,576 logagent.exe 05/25/2004 05:28 PM 487 login.cmd 05/25/2004 05:28 PM 671,744 lsasrv.dll 05/25/2004 05:28 PM 11,776 lsass.exe 05/25/2004 05:28 PM 8,192 lpr.exe 05/25/2004 05:28 PM 6,144 lpq.exe 05/25/2004 05:28 PM 504,320 logonui.exe 05/25/2004 05:28 PM 219,648 logon.scr 05/25/2004 05:28 PM 18,944 lpk.dll 05/25/2004 05:28 PM 168 l_except.nls 05/25/2004 05:28 PM 7,046 l_intl.nls 05/25/2004 05:28 PM 2,560 lz32.dll 05/25/2004 05:28 PM 55,296 logman.exe 05/25/2004 05:28 PM 68,096 locator.exe 05/25/2004 05:28 PM 5,120 lodctr.exe 05/25/2004 05:28 PM 15,360 logoff.exe 05/25/2004 05:28 PM 50,176 loghours.dll 05/25/2004 05:28 PM 112,128 mapistub.dll 05/25/2004 05:28 PM 10,240 mcd32.dll 05/25/2004 05:28 PM 10,496 mcdsrv32.dll 05/25/2004 05:28 PM 4,608 mchgrcoi.dll 05/25/2004 05:28 PM 73,376 mciavi.drv 05/25/2004 05:28 PM 80,384 mciavi32.dll 05/25/2004 05:28 PM 112,128 mapi32.dll 05/25/2004 05:28 PM 17,408 mcicda.dll 05/25/2004 05:28 PM 8,192 mciole16.dll 05/25/2004 05:28 PM 7,680 mciole32.dll 05/25/2004 05:28 PM 33,280 mciqtz32.dll 05/25/2004 05:28 PM 20,992 mciseq.dll 05/25/2004 05:28 PM 25,264 mciseq.drv 05/25/2004 05:28 PM 22,016 mciwave.dll 05/25/2004 05:28 PM 28,160 mciwave.drv 05/25/2004 05:28 PM 50,176 mdhcp.dll 05/25/2004 05:28 PM 12,800 mcastmib.dll 05/25/2004 05:28 PM 108,544 mdminst.dll 05/25/2004 05:28 PM 35,328 mf3216.dll 05/25/2004 05:28 PM 924,432 mfc40.dll 05/25/2004 05:28 PM 924,432 mfc40u.dll 05/25/2004 05:28 PM 995,383 mfc42.dll 05/25/2004 05:28 PM 995,384 mfc42u.dll 05/25/2004 05:28 PM 20,992 mfcsubs.dll 05/25/2004 05:28 PM 39,274 mem.exe 05/25/2004 05:28 PM 12,800 mgmtapi.dll 05/25/2004 05:28 PM 46,258 mib.bin 05/25/2004 05:28 PM 17,920 midimap.dll 05/25/2004 05:28 PM 18,944 mimefilt.dll 05/25/2004 05:28 PM 577,024 mlang.dll 05/25/2004 05:28 PM 673,088 mlang.dat 05/25/2004 05:28 PM 3,584 mll_hp.dll 05/25/2004 05:28 PM 7,680 mll_mtf.dll 05/25/2004 05:28 PM 66,560 mmcbase.dll 05/25/2004 05:28 PM 163,840 mindex.dll 05/25/2004 05:28 PM 5,632 mll_qic.dll 05/25/2004 05:28 PM 774,144 mmc.exe 05/25/2004 05:28 PM 56,320 miglibnt.dll 05/25/2004 05:28 PM 46,592 mmcshext.dll 05/25/2004 05:28 PM 1,492 mmdriver.inf 05/25/2004 05:28 PM 16,384 mmfutil.dll 05/25/2004 05:28 PM 12,288 mmdrv.dll 05/25/2004 05:28 PM 32,256 mnmdd.dll 05/25/2004 05:28 PM 559,616 mmsys.cpl 05/25/2004 05:28 PM 196,096 mobsync.dll 05/25/2004 05:28 PM 68,928 mmsystem.dll 05/25/2004 05:28 PM 1,152 mmtask.tsk 05/25/2004 05:28 PM 119,808 mmutilse.dll 05/25/2004 05:28 PM 135,680 mobsync.exe 05/25/2004 05:28 PM 19,456 mode.com 05/25/2004 05:28 PM 145,408 modemui.dll 05/25/2004 05:28 PM 10,112 modex.dll 05/25/2004 05:28 PM 210,944 moricons.dll 05/25/2004 05:28 PM 1,128,960 mmcndmgr.dll 05/25/2004 05:28 PM 2,032 mouse.drv 05/25/2004 05:28 PM 8,192 mountvol.exe 05/25/2004 05:28 PM 15,872 more.com 05/25/2004 05:28 PM 32,768 mnmsrvc.exe 05/25/2004 05:28 PM 47,104 mprui.dll 05/25/2004 05:28 PM 49,152 mprdim.dll 05/25/2004 05:28 PM 99,840 mprmsg.dll 05/25/2004 05:28 PM 17,408 mqbkup.exe 05/25/2004 05:28 PM 10,752 mqcertui.dll 05/25/2004 05:28 PM 44,032 mqdscli.dll 05/25/2004 05:28 PM 60,928 mqgentr.dll 05/25/2004 05:28 PM 214,016 mqoa.dll 05/25/2004 05:28 PM 81,408 mqoa.tlb 05/25/2004 05:28 PM 36,864 mqoa10.tlb 05/25/2004 05:28 PM 55,808 mqlogmgr.dll 05/25/2004 05:28 PM 55,808 mpr.dll 05/25/2004 05:28 PM 55,296 mqoa20.tlb 05/25/2004 05:28 PM 8,192 mqperf.dll 05/25/2004 05:28 PM 10,110 mqperf.ini 05/25/2004 05:28 PM 116,736 mplay32.exe 05/25/2004 05:28 PM 2,755 mqprfsym.h 05/25/2004 05:28 PM 115,200 mqrtdep.dll 05/25/2004 05:28 PM 4,608 mqsvc.exe 05/25/2004 05:28 PM 97,792 mqtgsvc.exe 05/25/2004 05:28 PM 44,544 mqupgrd.dll 05/25/2004 05:28 PM 469,504 mqutil.dll 05/25/2004 05:28 PM 164,352 mqtrig.dll 05/25/2004 05:28 PM 478,720 mqsnap.dll 05/25/2004 05:28 PM 89,088 mqsec.dll 05/25/2004 05:28 PM 164,864 mqrt.dll 05/25/2004 05:28 PM 613,888 mqqm.dll 05/25/2004 05:28 PM 14,848 mqise.dll 05/25/2004 05:28 PM 130,048 mqad.dll 05/25/2004 05:28 PM 135,168 mpg2splt.ax 05/25/2004 05:28 PM 262,144 mpg4ds32.ax 05/25/2004 05:28 PM 233,472 mpg4dmod.dll 05/25/2004 05:28 PM 12,800 mrinfo.exe 05/25/2004 05:28 PM 79,360 mprapi.dll 05/25/2004 05:28 PM 69,120 mprddm.dll 05/25/2004 05:28 PM 22,016 mpnotify.exe 05/25/2004 05:28 PM 61,168 msacm.dll 05/25/2004 05:28 PM 102,912 msaatext.dll 05/25/2004 05:28 PM 20,480 msacm32.drv 05/25/2004 05:28 PM 67,072 msacm32.dll 05/25/2004 05:28 PM 54,784 msdtclog.dll 05/25/2004 05:28 PM 6,144 msdtc.exe 05/25/2004 05:28 PM 768 msdtcprf.h 05/25/2004 05:28 PM 1,931 msdtcprf.ini 05/25/2004 05:28 PM 266,752 MSCTF.dll 05/25/2004 05:28 PM 869,376 msdtctm.dll 05/25/2004 05:28 PM 151,040 msdtcuiu.dll 05/25/2004 05:28 PM 51,200 msasn1.dll 05/25/2004 05:28 PM 842,268 msdxm.ocx 05/25/2004 05:28 PM 319,519 msexcl40.dll 05/25/2004 05:28 PM 512,031 msexch40.dll 05/25/2004 05:28 PM 4,126 msdxmlc.dll 05/25/2004 05:28 PM 12,288 msdatsrc.tlb 05/25/2004 05:28 PM 12,288 mscpx32r.dLL 05/25/2004 05:28 PM 68,096 mscms.dll 05/25/2004 05:28 PM 294,912 msaud32.acm 05/25/2004 05:28 PM 13,312 msadp32.acm 05/25/2004 05:28 PM 221,184 msadds32.ax 05/25/2004 05:28 PM 67,584 MSCTFP.dll 05/25/2004 05:28 PM 65,536 msconf.dll 05/25/2004 05:28 PM 126,976 msdart.dll 05/25/2004 05:28 PM 3,584 msafd.dll 05/25/2004 05:28 PM 80,128 msapsspc.dll 05/25/2004 05:28 PM 65,024 msaudite.dll 05/25/2004 05:28 PM 7,168 mscat32.dll 05/25/2004 05:28 PM 817 mscdexnt.exe 05/25/2004 05:28 PM 36,864 mscpxl32.dLL 05/25/2004 05:28 PM 359,936 msdtcprx.dll 05/25/2004 05:28 PM 11,264 msdmo.dll 05/25/2004 05:28 PM 94,282 msencode.dll 05/25/2004 05:28 PM 118,784 msg723.acm 05/25/2004 05:28 PM 14,848 msidntld.dll 05/25/2004 05:28 PM 44,032 msident.dll 05/25/2004 05:28 PM 56,320 mshtmler.dll 05/25/2004 05:28 PM 2,086,400 msi.dll 05/25/2004 05:28 PM 968,192 msgina.dll 05/25/2004 05:28 PM 2,833,920 mshtml.dll 05/25/2004 05:28 PM 34,304 msgsvc.dll 05/25/2004 05:28 PM 5,120 msidle.dll 05/25/2004 05:28 PM 229,888 msieftp.dll 05/25/2004 05:28 PM 440,320 mshtmled.dll 05/25/2004 05:28 PM 126,976 mshearts.exe 05/25/2004 05:28 PM 1,350,656 mshtml.tlb 05/25/2004 05:28 PM 20,992 msg.exe 05/25/2004 05:28 PM 24,064 mshta.exe 05/25/2004 05:28 PM 19,968 msgsm32.acm 05/25/2004 05:28 PM 9,216 msg711.acm 05/25/2004 05:28 PM 184,320 msh261.drv 05/25/2004 05:28 PM 368,710 msisam11.dll 05/25/2004 05:28 PM 39,936 msisip.dll 05/25/2004 05:28 PM 213,023 msltus40.dll 05/25/2004 05:28 PM 305,664 msihnd.dll 05/25/2004 05:28 PM 143,872 MSIMTF.dll 05/25/2004 05:28 PM 22,528 mslbui.dll 05/25/2004 05:28 PM 151,626 msjint40.dll 05/25/2004 05:28 PM 1,503,262 msjet40.dll 05/25/2004 05:28 PM 53,322 msjter40.dll 05/25/2004 05:28 PM 4,608 msimg32.dll 05/25/2004 05:28 PM 146,432 msls31.dll 05/25/2004 05:28 PM 241,695 msjtes40.dll 05/25/2004 05:28 PM 847,872 msimsg.dll 05/25/2004 05:28 PM 348,195 msjetoledb40.dll 05/25/2004 05:28 PM 64,512 msiexec.exe 05/25/2004 05:28 PM 339,968 mspaint.exe 05/25/2004 05:28 PM 319,760 msnsspc.dll 05/25/2004 05:28 PM 47,104 mspmspsv.dll 05/25/2004 05:28 PM 81,408 msoert2.dll 05/25/2004 05:28 PM 228,864 msoeacct.dll 05/25/2004 05:28 PM 131,072 msorcl32.dll 05/25/2004 05:28 PM 27,136 mspatcha.dll 05/25/2004 05:28 PM 175,104 mspmsp.dll 05/25/2004 05:28 PM 20,480 msorc32r.dll 05/25/2004 05:28 PM 33,280 msobjs.dll 05/25/2004 05:28 PM 348,191 mspbde40.dll 05/25/2004 05:28 PM 174,592 msnetobj.dll 05/25/2004 05:28 PM 245,760 msscp.dll 05/25/2004 05:28 PM 1,355,776 msvbvm50.dll 05/25/2004 05:28 PM 241,725 msuni11.dll 05/25/2004 05:28 PM 106,547 msscript.ocx 05/25/2004 05:28 PM 69,632 msscds32.ax 05/25/2004 05:28 PM 45,056 msprivs.dll 05/25/2004 05:28 PM 496,128 mstime.dll 05/25/2004 05:28 PM 10,240 msrle32.dll 05/25/2004 05:28 PM 6,656 msswchx.exe 05/25/2004 05:28 PM 1,388,544 msvbvm60.dll 05/25/2004 05:28 PM 552,991 msrepl40.dll 05/25/2004 05:28 PM 50,688 msvcirt.dll 05/25/2004 05:28 PM 132,096 msrating.dll 05/25/2004 05:28 PM 182,784 msutb.dll 05/25/2004 05:28 PM 250,368 mstask.dll 05/25/2004 05:28 PM 108,544 msv1_0.dll 05/25/2004 05:28 PM 253,983 mstext40.dll 05/25/2004 05:28 PM 388,608 mstsc.exe 05/25/2004 05:28 PM 598,016 mstscax.dll 05/25/2004 05:28 PM 7,168 msr2cenu.dll 05/25/2004 05:28 PM 28,746 msrecr40.dll 05/25/2004 05:28 PM 73,802 msrclr40.dll 05/25/2004 05:28 PM 69,632 msr2c.dll 05/25/2004 05:28 PM 103,936 mstlsapi.dll 05/25/2004 05:28 PM 421,919 msrd2x40.dll 05/25/2004 05:28 PM 13,312 msswch.dll 05/25/2004 05:28 PM 41,984 msports.dll 05/25/2004 05:28 PM 60,416 msratelc.dll 05/25/2004 05:28 PM 315,466 msrd3x40.dll 05/25/2004 05:28 PM 35,840 mssign32.dll 05/25/2004 05:28 PM 4,608 mssip32.dll 05/25/2004 05:28 PM 9,728 mstinit.exe 05/25/2004 05:29 PM 228,352 mswsock.dll 05/25/2004 05:29 PM 1,122,304 msxml3.dll 05/25/2004 05:29 PM 699,392 msxml2.dll 05/25/2004 05:29 PM 565,760 msvcp50.dll 05/25/2004 05:29 PM 192,512 mswebdvd.dll 05/25/2004 05:29 PM 65,024 msvcrt40.dll 05/25/2004 05:29 PM 25,600 msvidc32.dll 05/25/2004 05:29 PM 1,220,608 msvidctl.dll 05/25/2004 05:29 PM 113,664 msvfw32.dll 05/25/2004 05:29 PM 83,968 mtxoci.dll 05/25/2004 05:29 PM 126,912 msvideo.dll 05/25/2004 05:29 PM 61,440 mtxclu.dll 05/25/2004 05:29 PM 66,048 msw3prt.dll 05/25/2004 05:29 PM 44,032 msxml3r.dll 05/25/2004 05:29 PM 323,072 msvcrt.dll 05/25/2004 05:29 PM 831,562 mswdat10.dll 05/25/2004 05:29 PM 155,648 mswmdm.dll 05/25/2004 05:29 PM 401,462 msvcp60.dll 05/25/2004 05:29 PM 344,095 msxbde40.dll 05/25/2004 05:29 PM 614,474 mswstr10.dll 05/25/2004 05:29 PM 26,624 msxmlr.dll 05/25/2004 05:29 PM 495,376 msxml.dll 05/25/2004 05:29 PM 20,480 mtxdm.dll 05/25/2004 05:29 PM 4,096 mtxex.dll 05/25/2004 05:29 PM 25,088 mtxlegih.dll 05/25/2004 05:29 PM 253,952 msvcrt20.dll 05/25/2004 05:29 PM 37,916 msxml2r.dll 05/25/2004 05:29 PM 39,424 net.exe 05/25/2004 05:29 PM 16,384 nddenb32.dll 05/25/2004 05:29 PM 20,480 nbtstat.exe 05/25/2004 05:29 PM 90,112 mycomput.dll 05/25/2004 05:29 PM 42,496 ncobjapi.dll 05/25/2004 05:29 PM 7,680 ncxpnt.dll 05/25/2004 05:29 PM 88,064 mydocs.dll 05/25/2004 05:29 PM 15,360 nddeapi.dll 05/25/2004 05:29 PM 35,840 ncpa.cpl 05/25/2004 05:29 PM 4,096 nddeapir.exe 05/25/2004 05:29 PM 102,446 net.hlp 05/25/2004 05:29 PM 52,736 ndptsp.tsp 05/25/2004 05:29 PM 51,200 narrator.exe 05/25/2004 05:29 PM 115,200 net1.exe 05/25/2004 05:29 PM 35,840 narrhook.dll 05/25/2004 05:29 PM 584,192 netcfgx.dll 05/25/2004 05:29 PM 309,248 netapi32.dll 05/25/2004 05:29 PM 108,464 netapi.dll 05/25/2004 05:29 PM 171,008 netmsg.dll 05/25/2004 05:29 PM 214,016 netevent.dll 05/25/2004 05:29 PM 399,360 netlogon.dll 05/25/2004 05:29 PM 134,656 netid.dll 05/25/2004 05:29 PM 105,984 netdde.exe 05/25/2004 05:29 PM 253,952 neth.dll 05/25/2004 05:29 PM 154,112 netman.dll 05/25/2004 05:29 PM 857,600 netplwiz.dll 05/25/2004 05:29 PM 10,752 netrap.dll 05/25/2004 05:29 PM 326,656 netsetup.exe 05/25/2004 05:29 PM 230,400 netui1.dll 05/25/2004 05:29 PM 74,752 netui0.dll 05/25/2004 05:29 PM 82,944 netsh.exe 05/25/2004 05:29 PM 30,720 netstat.exe 05/25/2004 05:29 PM 238,080 newdev.dll 05/25/2004 05:29 PM 308,224 netui2.dll 05/25/2004 05:29 PM 2,656 netware.drv 05/25/2004 05:29 PM 1,622,528 netshell.dll 05/25/2004 05:29 PM 1,696 noise.chs 05/25/2004 05:29 PM 95,744 nlhtml.dll 05/25/2004 05:29 PM 697 noise.tha 05/25/2004 05:29 PM 741 noise.dat 05/25/2004 05:29 PM 24,576 nmmkcert.dll 05/25/2004 05:29 PM 149,848 noise.deu 05/25/2004 05:29 PM 751 noise.eng 05/25/2004 05:29 PM 66,048 notepad.exe 05/25/2004 05:29 PM 7,052 nlsfunc.exe 05/25/2004 05:29 PM 751 noise.enu 05/25/2004 05:29 PM 1,696 noise.cht 05/25/2004 05:29 PM 19,684 noise.esn 05/25/2004 05:29 PM 13,730 noise.sve 05/25/2004 05:29 PM 49,196 noise.fra 05/25/2004 05:29 PM 13,256 noise.nld 05/25/2004 05:29 PM 12,288 nmevtmsg.dll 05/25/2004 05:29 PM 19,618 noise.ita 05/25/2004 05:29 PM 71,680 nslookup.exe 05/25/2004 05:29 PM 26,112 ntdsbcli.dll 05/25/2004 05:29 PM 64,512 ntdsapi.dll 05/25/2004 05:29 PM 29,146 ntdos404.sys 05/25/2004 05:29 PM 668,672 ntdll.dll 05/25/2004 05:29 PM 29,274 ntdos412.sys 05/25/2004 05:29 PM 49,152 npptools.dll 05/25/2004 05:29 PM 29,370 ntdos411.sys 05/25/2004 05:29 PM 27,866 ntdos.sys 05/25/2004 05:29 PM 1,135,616 ntbackup.exe 05/25/2004 05:29 PM 29,146 ntdos804.sys 05/25/2004 05:29 PM 14,336 ntlanui2.dll 05/25/2004 05:29 PM 57,856 ntlanui.dll 05/25/2004 05:29 PM 34,528 ntio804.sys 05/25/2004 05:29 PM 38,400 ntlanman.dll 05/25/2004 05:29 PM 2,042,240 ntoskrnl.exe 05/25/2004 05:29 PM 6,656 ntlsapi.dll 05/25/2004 05:29 PM 33,808 ntio.sys 05/25/2004 05:29 PM 36,864 ntmsevt.dll 05/25/2004 05:29 PM 460,288 ntmsmgr.dll 05/25/2004 05:29 PM 26,209 ntmsmgr.msc 05/25/2004 05:29 PM 35,392 ntio412.sys 05/25/2004 05:29 PM 38,400 ntmsapi.dll 05/25/2004 05:29 PM 165,888 ntmsdba.dll 05/25/2004 05:29 PM 32,968 ntmsoprq.msc 05/25/2004 05:29 PM 35,632 ntio411.sys 05/25/2004 05:29 PM 34,528 ntio404.sys 05/25/2004 05:29 PM 48,794 ntimage.gif 05/25/2004 05:29 PM 392,704 ntmssvc.dll 05/25/2004 05:29 PM 31,744 ntsd.exe 05/25/2004 05:29 PM 80,896 ntprint.dll 05/25/2004 05:29 PM 112,128 ntmarta.dll 05/25/2004 05:29 PM 26,224 odbc16gt.dll 05/25/2004 05:29 PM 36,864 ntsdexts.dll 05/25/2004 05:29 PM 13,312 ntvdmd.dll 05/25/2004 05:29 PM 256,000 nusrmgr.cpl 05/25/2004 05:29 PM 3,252 nw16.exe 05/25/2004 05:29 PM 137,216 ntshrui.dll 05/25/2004 05:29 PM 17,408 nwapi16.dll 05/25/2004 05:29 PM 58,880 nwapi32.dll 05/25/2004 05:29 PM 36,864 nwc.cpl 05/25/2004 05:29 PM 200,704 odbc32.dll 05/25/2004 05:29 PM 20,480 nwcfg.dll 05/25/2004 05:29 PM 6,144 nwevent.dll 05/25/2004 05:29 PM 395,776 ntvdm.exe 05/25/2004 05:29 PM 133,632 nwprovau.dll 05/25/2004 05:29 PM 57,344 nwwks.dll 05/25/2004 05:29 PM 147,456 odbctrac.dll 05/25/2004 05:29 PM 126,464 nwscript.exe 05/25/2004 05:29 PM 16,384 odbc32gt.dll 05/25/2004 05:29 PM 328,704 oakley.dll 05/25/2004 05:29 PM 12,288 odbcp32r.dll 05/25/2004 05:29 PM 61,440 odbccu32.dll 05/25/2004 05:29 PM 271,360 objsel.dll 05/25/2004 05:29 PM 61,440 odbccr32.dll 05/25/2004 05:29 PM 87,552 occache.dll 05/25/2004 05:29 PM 60,928 ocmanage.dll 05/25/2004 05:29 PM 20,554 odtext32.dll 05/25/2004 05:29 PM 20,553 odpdx32.dll 05/25/2004 05:29 PM 20,553 odfox32.dll 05/25/2004 05:29 PM 20,553 odexl32.dll 05/25/2004 05:29 PM 20,554 oddbse32.dll 05/25/2004 05:29 PM 94,20
05/25/2004 05:29 PM 94,208 odbccp32.dll 05/25/2004 05:29 PM 4,294 odbcconf.rsp 05/25/2004 05:29 PM 122,880 odbcconf.dll 05/25/2004 05:29 PM 36,864 odbccp32.cpl 05/25/2004 05:29 PM 53,279 odbcji32.dll 05/25/2004 05:29 PM 53,248 odbcconf.exe 05/25/2004 05:29 PM 24,576 odbcbcp.dll 05/25/2004 05:29 PM 270,365 odbcjt32.dll 05/25/2004 05:29 PM 32,768 odbcad32.exe 05/25/2004 05:29 PM 90,112 odbcint.dll 05/25/2004 05:29 PM 13,107,200 oembios.bin 05/25/2004 05:29 PM 4,463 oembios.dat 05/25/2004 05:29 PM 6,761 oembios.sig 05/25/2004 05:29 PM 39,744 ole2.dll 05/25/2004 05:29 PM 169,520 ole2disp.dll 05/25/2004 05:29 PM 40,448 osuninst.exe 05/25/2004 05:29 PM 1,169,920 ole32.dll 05/25/2004 05:29 PM 569,344 oleaut32.dll 05/25/2004 05:29 PM 109,568 offfilt.dll 05/25/2004 05:29 PM 98,304 oleprn.dll 05/25/2004 05:29 PM 686,080 opengl32.dll 05/25/2004 05:29 PM 153,008 ole2nls.dll 05/25/2004 05:29 PM 61,952 osuninst.dll 05/25/2004 05:29 PM 163,328 oleacc.dll 05/25/2004 05:29 PM 16,896 oleaccrc.dll 05/25/2004 05:29 PM 82,944 olecli.dll 05/25/2004 05:29 PM 117,760 oledlg.dll 05/25/2004 05:29 PM 68,608 olecli32.dll 05/25/2004 05:29 PM 34,304 olecnv32.dll 05/25/2004 05:29 PM 22,016 olesvr32.dll 05/25/2004 05:29 PM 69,120 olethk32.dll 05/25/2004 05:29 PM 106,496 olepro32.dll 05/25/2004 05:29 PM 24,064 olesvr.dll 05/25/2004 05:29 PM 61,440 openfiles.exe 05/25/2004 05:29 PM 212,480 osk.exe 05/25/2004 05:29 PM 21,504 pathping.exe 05/25/2004 05:29 PM 254,976 pdh.dll 05/25/2004 05:29 PM 53,248 packager.exe 05/25/2004 05:29 PM 15,360 pentnt.exe 05/25/2004 05:29 PM 10,240 panmap.dll 05/25/2004 05:29 PM 167,219 pagefileconfig.vbs 05/25/2004 05:29 PM 114 pcl.sep 05/25/2004 05:29 PM 58,880 pautoenr.dll 05/25/2004 05:29 PM 1,152 perffilt.ini 05/25/2004 05:29 PM 140 perffilt.h 05/25/2004 05:29 PM 23,552 perfdisk.dll 05/25/2004 05:29 PM 16,384 ping.exe 05/25/2004 05:29 PM 32,256 perfproc.dll 05/25/2004 05:29 PM 12,288 perfts.dll 05/25/2004 05:29 PM 435 perfwci.h 05/25/2004 05:29 PM 28,626 perfd009.dat 05/25/2004 05:29 PM 2,732 perfwci.ini 05/25/2004 05:29 PM 166,912 photowiz.dll 05/25/2004 05:29 PM 27,648 pidgen.dll 05/25/2004 05:29 PM 35,328 pifmgr.dll 05/25/2004 05:29 PM 37,376 perfctrs.dll 05/25/2004 05:29 PM 2,891 perfci.ini 05/25/2004 05:29 PM 33,280 ping6.exe 05/25/2004 05:29 PM 427 perfci.h 05/25/2004 05:29 PM 272,128 perfi009.dat 05/25/2004 05:29 PM 68,608 plugin.ocx 05/25/2004 05:29 PM 14,336 perfmon.exe 05/25/2004 05:29 PM 30,720 plustab.dll 05/25/2004 05:29 PM 58,273 perfmon.msc 05/25/2004 05:29 PM 46,592 pmspl.dll 05/25/2004 05:29 PM 5,632 perfnw.dll 05/25/2004 05:29 PM 23,040 perfos.dll 05/25/2004 05:29 PM 16,896 perfnet.dll 05/25/2004 05:29 PM 34,304 pngfilt.dll 05/25/2004 05:29 PM 45,056 proquota.exe 05/25/2004 05:29 PM 522,240 printui.dll 05/25/2004 05:29 PM 205,824 progman.exe 05/25/2004 05:29 PM 343 prodspec.ini 05/25/2004 05:29 PM 15,860 prnqctl.vbs 05/25/2004 05:29 PM 29,454 prnport.vbs 05/25/2004 05:29 PM 32,546 prnmngr.vbs 05/25/2004 05:29 PM 23,040 proxycfg.exe 05/25/2004 05:29 PM 21,527 prnjobs.vbs 05/25/2004 05:29 PM 25,415 prndrvr.vbs 05/25/2004 05:29 PM 109,056 powercfg.cpl 05/25/2004 05:29 PM 87,552 polstore.dll 05/25/2004 05:29 PM 14,848 powrprof.dll 05/25/2004 05:29 PM 75,776 proctexe.ocx 05/25/2004 05:29 PM 16,384 prflbmsg.dll 05/25/2004 05:29 PM 35,755 prncnfg.vbs 05/25/2004 05:29 PM 9,216 print.exe 05/25/2004 05:29 PM 28,672 profmap.dll 05/25/2004 05:29 PM 152,576 qasf.dll 05/25/2004 05:29 PM 8,192 psnppagn.dll 05/25/2004 05:29 PM 51 pscript.sep 05/25/2004 05:29 PM 6,877 pschdprf.ini 05/25/2004 05:29 PM 17,408 psapi.dll 05/25/2004 05:29 PM 184,832 qcap.dll 05/25/2004 05:29 PM 10,752 pschdprf.dll 05/25/2004 05:29 PM 16,896 qappsrv.exe 05/25/2004 05:29 PM 3,010 pschdcnt.h 05/25/2004 05:29 PM 37,888 pstorec.dll 05/25/2004 05:29 PM 82,944 psbase.dll 05/25/2004 05:29 PM 3,708 pubprn.vbs 05/25/2004 05:29 PM 25,600 pstorsvc.dll 05/25/2004 05:29 PM 217,088 rasapi32.dll 05/25/2004 05:29 PM 13,824 rassapi.dll 05/25/2004 05:29 PM 6,144 rasadhlp.dll 05/25/2004 05:29 PM 158,720 rasmans.dll 05/25/2004 05:29 PM 33,280 racpldlg.dll 05/25/2004 05:29 PM 1,349,120 query.dll 05/25/2004 05:29 PM 18,432 qprocess.exe 05/25/2004 05:29 PM 193,536 rasppp.dll 05/25/2004 05:29 PM 22,016 qwinsta.exe 05/25/2004 05:29 PM 1,142,784 quartz.dll 05/25/2004 05:29 PM 357,376 qdvd.dll 05/25/2004 05:29 PM 17,408 qmgrprxy.dll 05/25/2004 05:29 PM 221,696 qmgr.dll 05/25/2004 05:29 PM 57,856 raschap.dll 05/25/2004 05:29 PM 54,272 rastapi.dll 05/25/2004 05:29 PM 55,808 rasman.dll 05/25/2004 05:29 PM 631,808 rasdlg.dll 05/25/2004 05:29 PM 266,752 qdv.dll 05/25/2004 05:29 PM 734,208 qedwipes.dll 05/25/2004 05:29 PM 8,192 qosname.dll 05/25/2004 05:29 PM 82,944 rasauto.dll 05/25/2004 05:29 PM 11,776 rasautou.exe 05/25/2004 05:29 PM 1,818 rasctrnm.h 05/25/2004 05:29 PM 11,776 rasctrs.dll 05/25/2004 05:29 PM 3,458 rasctrs.ini 05/25/2004 05:29 PM 11,264 rasdial.exe 05/25/2004 05:29 PM 511,488 qedit.dll 05/25/2004 05:29 PM 143,360 rasmontr.dll 05/25/2004 05:29 PM 22,528 rasmxs.dll 05/25/2004 05:29 PM 54,272 rasphone.exe 05/25/2004 05:29 PM 23,552 rasrad.dll 05/25/2004 05:29 PM 12,800 rasser.dll 05/25/2004 05:29 PM 96,256 rcbdyctl.dll 05/25/2004 05:29 PM 19,968 rcp.exe 05/25/2004 05:29 PM 7,168 recover.exe 05/25/2004 05:29 PM 3,584 regedt32.exe 05/25/2004 05:29 PM 4,608 regwiz.exe 05/25/2004 05:29 PM 387,584 regwizc.dll 05/25/2004 05:29 PM 72,192 remotesp.tsp 05/25/2004 05:29 PM 107,520 rend.dll 05/25/2004 05:29 PM 12,800 replace.exe 05/25/2004 05:29 PM 54,784 resutils.dll 05/25/2004 05:29 PM 11,776 rexec.exe 05/25/2004 05:29 PM 3,584 riched32.dll 05/25/2004 05:29 PM 3,072 rnr20.dll 05/25/2004 05:29 PM 19,968 route.exe 05/25/2004 05:29 PM 75,912 rdpwsx.dll 05/25/2004 05:29 PM 135,680 rdchost.dll 05/25/2004 05:29 PM 87,304 rdpdd.dll 05/25/2004 05:29 PM 12,288 rdsaddin.exe 05/25/2004 05:29 PM 56,320 remotepg.dll 05/25/2004 05:29 PM 33,792 regini.exe 05/25/2004 05:29 PM 4,096 rdpcfgex.dll 05/25/2004 05:29 PM 3,338 redir.exe 05/25/2004 05:29 PM 48,128 reg.exe 05/25/2004 05:29 PM 14,848 rdpsnd.dll 05/25/2004 05:29 PM 44,032 rdpclip.exe 05/25/2004 05:29 PM 61,952 rdshost.exe 05/25/2004 05:29 PM 9,728 reset.exe 05/25/2004 05:29 PM 51,712 regsvc.dll 05/25/2004 05:29 PM 34,304 rcimlby.exe 05/25/2004 05:29 PM 9,728 regsvr32.exe 05/25/2004 05:29 PM 44,032 regapi.dll 05/25/2004 05:29 PM 423,424 riched20.dll 05/25/2004 05:29 PM 91,136 rastls.dll 05/25/2004 05:29 PM 32,768 relog.exe 05/25/2004 05:29 PM 25,600 routemon.exe 05/25/2004 05:29 PM 6,656 routetab.dll 05/25/2004 05:29 PM 22,016 rpcns4.dll 05/25/2004 05:29 PM 3,167 rsaci.rat 05/25/2004 05:29 PM 28,672 rsfsaps.dll 05/25/2004 05:29 PM 13,312 rsh.exe 05/25/2004 05:29 PM 49,152 rsm.exe 05/25/2004 05:29 PM 18,432 rsmps.dll 05/25/2004 05:29 PM 24,576 rsmsink.exe 05/25/2004 05:29 PM 49,152 rsmui.exe 05/25/2004 05:29 PM 44,451 rsop.msc 05/25/2004 05:29 PM 62,976 rsopprov.exe 05/25/2004 05:29 PM 132,608 rsvp.exe 05/25/2004 05:29 PM 12,082 rsvp.ini 05/25/2004 05:29 PM 3,178 rsvpcnts.h 05/25/2004 05:29 PM 23,552 rsvpmsg.dll 05/25/2004 05:29 PM 9,728 rsvpperf.dll 05/25/2004 05:29 PM 90,112 rsvpsp.dll 05/25/2004 05:29 PM 29,696 rtipxmib.dll 05/25/2004 05:29 PM 98,304 rtm.dll 05/25/2004 05:29 PM 16,384 runas.exe 05/25/2004 05:29 PM 39,936 rtutils.dll 05/25/2004 05:29 PM 12,800 runonce.exe 05/25/2004 05:29 PM 74,240 rtcshare.exe 05/25/2004 05:29 PM 15,872 rwinsta.exe 05/25/2004 05:29 PM 548,864 rtcdll.dll 05/25/2004 05:29 PM 103,936 rsnotify.exe 05/25/2004 05:29 PM 36,352 rshx32.dll 05/25/2004 05:29 PM 31,744 rundll32.exe 05/25/2004 05:29 PM 530,432 rpcrt4.dll 05/25/2004 05:29 PM 260,608 rpcss.dll 05/25/2004 05:29 PM 133,632 rsaenh.dll 05/25/2004 05:29 PM 297,984 scesrv.dll 05/25/2004 05:29 PM 54,784 samlib.dll 05/25/2004 05:29 PM 174,592 scecli.dll 05/25/2004 05:29 PM 130,048 sdpblb.dll 05/25/2004 05:29 PM 147,483 scrrun.dll 05/25/2004 05:29 PM 10,240 scriptpw.dll 05/25/2004 05:29 PM 57,856 scripto.dll 05/25/2004 05:29 PM 26,624 scredir.dll 05/25/2004 05:29 PM 40,960 safrslv.dll 05/25/2004 05:29 PM 26,624 safrdm.dll 05/25/2004 05:29 PM 93,184 scardsvr.exe 05/25/2004 05:29 PM 118,784 scardssp.dll 05/25/2004 05:29 PM 66,560 scarddlg.dll 05/25/2004 05:29 PM 159,232 schedsvc.dll 05/25/2004 05:29 PM 39,424 safrcdlg.dll 05/25/2004 05:29 PM 19,456 savedump.exe 05/25/2004 05:29 PM 169,984 sccbase.dll 05/25/2004 05:29 PM 171,008 sccsccp.dll 05/25/2004 05:29 PM 8,192 scrnsave.scr 05/25/2004 05:29 PM 113,664 schtasks.exe 05/25/2004 05:29 PM 71,168 sdbinst.exe 05/25/2004 05:29 PM 411,136 samsrv.dll 05/25/2004 05:29 PM 31,232 sc.exe 05/25/2004 05:29 PM 155,675 scrobj.dll 05/25/2004 05:29 PM 18,432 sclgntfy.dll 05/25/2004 05:29 PM 136,704 schannel.dll 05/25/2004 05:29 PM 9,728 sfc.exe 05/25/2004 05:29 PM 932,864 setupapi.dll 05/25/2004 05:29 PM 36,364 secpol.msc 05/25/2004 05:29 PM 14,848 shadow.exe 05/25/2004 05:29 PM 5,632 security.dll 05/25/2004 05:29 PM 27,136 sendcmsg.dll 05/25/2004 05:29 PM 52,224 secur32.dll 05/25/2004 05:29 PM 53,248 sendmail.dll 05/25/2004 05:29 PM 1,157,632 sfcfiles.dll 05/25/2004 05:29 PM 13,824 senscfg.dll 05/25/2004 05:29 PM 36,352 sens.dll 05/25/2004 05:29 PM 20,992 seclogon.dll 05/25/2004 05:29 PM 14,336 serialui.dll 05/25/2004 05:29 PM 33,464 services.msc 05/25/2004 05:29 PM 6,144 sensapi.dll 05/25/2004 05:29 PM 14,848 serwvdrv.dll 05/25/2004 05:29 PM 1,341,440 shdocvw.dll 05/25/2004 05:29 PM 101,376 services.exe 05/25/2004 05:29 PM 4,096 sfc.dll 05/25/2004 05:29 PM 133,120 sfc_os.dll 05/25/2004 05:29 PM 20,992 setup.exe 05/25/2004 05:29 PM 28,672 sethc.exe 05/25/2004 05:29 PM 129,024 sessmgr.exe 05/25/2004 05:29 PM 240,120 setup.bmp 05/25/2004 05:29 PM 5,120 shell.dll 05/25/2004 05:29 PM 548,864 shdoclc.dll 05/25/2004 05:29 PM 882 share.exe 05/25/2004 05:29 PM 23,552 sfmapi.dll 05/25/2004 05:29 PM 414,208 setupdll.dll 05/25/2004 05:29 PM 53,248 servdeps.dll 05/25/2004 05:29 PM 16,896 secedit.exe 05/25/2004 05:29 PM 11,753 setver.exe 05/25/2004 05:29 PM 62,976 shgina.dll 05/25/2004 05:29 PM 401,920 shlwapi.dll 05/25/2004 05:29 PM 8,336,384 shell32.dll 05/25/2004 05:29 PM 126,464 shmedia.dll 05/25/2004 05:29 PM 69,632 shrpubw.exe 05/25/2004 05:29 PM 16,740 shiftjis.uce 05/25/2004 05:29 PM 23,040 shscrap.dll 05/25/2004 05:29 PM 60,416 shimeng.dll 05/25/2004 05:29 PM 17,920 shutdown.exe 05/25/2004 05:29 PM 420,864 shimgvw.dll 05/25/2004 05:29 PM 33,280 shmgrate.exe 05/25/2004 05:29 PM 22,528 shfolder.dll 05/25/2004 05:29 PM 11,776 sigtab.dll 05/25/2004 05:29 PM 13,824 sisbkup.dll 05/25/2004 05:29 PM 16,384 simpdata.tlb 05/25/2004 05:29 PM 66,048 sigverif.exe 05/25/2004 05:29 PM 116,224 shsvcs.dll 05/25/2004 05:29 PM 138,752 sndvol32.exe 05/25/2004 05:29 PM 24,064 skeys.exe 05/25/2004 05:29 PM 86,016 sl_anet.acm 05/25/2004 05:29 PM 5,632 skdll.dll 05/25/2004 05:29 PM 124,416 sndrec32.exe 05/25/2004 05:29 PM 45,568 smss.exe 05/25/2004 05:29 PM 334,848 smlogcfg.dll 05/25/2004 05:29 PM 276,480 slbcsp.dll 05/25/2004 05:29 PM 16,896 snmpapi.dll 05/25/2004 05:29 PM 22,528 slayerxp.dll 05/25/2004 05:29 PM 89,600 slbiop.dll 05/25/2004 05:29 PM 14,848 slbrccsp.dll 05/25/2004 05:29 PM 82,944 smlogsvc.exe 05/25/2004 05:29 PM 23,552 sort.exe 05/25/2004 05:29 PM 5,632 softpub.dll 05/25/2004 05:29 PM 1,744 sound.drv 05/25/2004 05:29 PM 262,148 sortkey.nls 05/25/2004 05:29 PM 21,116 sorttbls.nls 05/25/2004 05:29 PM 56,832 sol.exe 05/25/2004 05:29 PM 2 desktop.ini 05/25/2004 05:29 PM 172,032 snmpsnap.dll 05/25/2004 05:29 PM 66,560 spoolss.dll 05/25/2004 05:29 PM 24,661 spxcoins.dll 05/25/2004 05:29 PM 9,728 sprestrt.exe 05/25/2004 05:29 PM 46,133 sqlsodbc.chm 05/25/2004 05:29 PM 90,112 sqlsrv32.rll 05/25/2004 05:29 PM 534,016 spider.exe 05/25/2004 05:29 PM 180,800 sqlunirl.dll 05/25/2004 05:29 PM 24,603 sqlwid.dll 05/25/2004 05:29 PM 49,179 sqlwoa.dll 05/25/2004 05:29 PM 51,200 spoolsv.exe 05/25/2004 05:29 PM 226,304 srrstr.dll 05/25/2004 05:29 PM 158,720 srsvc.dll 05/25/2004 05:29 PM 63,488 srclient.dll 05/25/2004 05:29 PM 385,024 sqlsrv32.dll 05/25/2004 05:29 PM 61,952 sti.dll 05/25/2004 05:29 PM 638,976 sstext3d.scr 05/25/2004 05:29 PM 93,702 subrange.uce 05/25/2004 05:29 PM 17,408 ssmyst.scr 05/25/2004 05:29 PM 6,144 svcpack.dll 05/25/2004 05:29 PM 9,216 subst.exe 05/25/2004 05:29 PM 4,208 storage.dll 05/25/2004 05:29 PM 20,480 stimon.exe 05/25/2004 05:29 PM 7,168 stdole32.tlb 05/25/2004 05:29 PM 43,008 ssmypics.scr 05/25/2004 05:29 PM 19,456 ssmarque.scr 05/25/2004 05:29 PM 364,544 ssflwbox.scr 05/25/2004 05:29 PM 43,008 ssdpsrv.dll 05/25/2004 05:29 PM 117,760 stobject.dll 05/25/2004 05:29 PM 569,344 sspipes.scr 05/25/2004 05:29 PM 13,312 ssstars.scr 05/25/2004 05:29 PM 27,136 ssdpapi.dll 05/25/2004 05:29 PM 12,800 svchost.exe 05/25/2004 05:29 PM 667,648 ss3dfo.scr 05/25/2004 05:29 PM 87,040 srvsvc.dll 05/25/2004 05:29 PM 17,920 stdole2.tlb 05/25/2004 05:29 PM 130,560 sti_ci.dll 05/25/2004 05:29 PM 18,944 ssbezier.scr 05/25/2004 05:29 PM 251,904 strmdll.dll 05/25/2004 05:29 PM 54,272 stclient.dll 05/25/2004 05:29 PM 205,312 sysmon.ocx 05/25/2004 05:29 PM 268,288 sysdm.cpl 05/25/2004 05:29 PM 138,752 swprv.dll 05/25/2004 05:29 PM 51,200 syncapp.exe 05/25/2004 05:29 PM 51,712 synceng.dll 05/25/2004 05:29 PM 183,296 syncui.dll 05/25/2004 05:29 PM 18,896 sysedit.exe 05/25/2004 05:29 PM 68,096 systeminfo.exe 05/25/2004 05:29 PM 15,872 sysinv.dll 05/25/2004 05:29 PM 36,864 syskey.exe 05/25/2004 05:29 PM 103,936 sysocmgr.exe 05/25/2004 05:29 PM 3,214 sysprint.sep 05/25/2004 05:29 PM 3,577 sysprtj.sep 05/25/2004 05:29 PM 674,816 sxs.dll 05/25/2004 05:29 PM 938,496 syssetup.dll 05/25/2004 05:29 PM 3,360 system.drv 05/25/2004 05:29 PM 12,288 tcmsetup.exe 05/25/2004 05:29 PM 165,376 tapi32.dll 05/25/2004 05:29 PM 343,552 termmgr.dll 05/25/2004 05:29 PM 200,192 termsrv.dll 05/25/2004 05:29 PM 233,984 tapisrv.dll 05/25/2004 05:29 PM 28,160 telephon.cpl 05/25/2004 05:29 PM 55,808 tdc.ocx 05/25/2004 05:29 PM 19,456 tcpsvcs.exe 05/25/2004 05:29 PM 40,448 tcpmon.dll 05/25/2004 05:29 PM 128,512 taskmgr.exe 05/25/2004 05:29 PM 862 termcap 05/25/2004 05:29 PM 71,168 telnet.exe 05/25/2004 05:29 PM 3,072 systray.exe 05/25/2004 05:29 PM 198,656 t2embed.dll 05/25/2004 05:29 PM 19,200 tapi.dll 05/25/2004 05:29 PM 829,952 tapi3.dll 05/25/2004 05:29 PM 5,632 tapiperf.dll 05/25/2004 05:29 PM 78,848 tapiui.dll 05/25/2004 05:29 PM 72,192 taskkill.exe 05/25/2004 05:29 PM 72,192 tasklist.exe 05/25/2004 05:29 PM 15,360 taskman.exe 05/25/2004 05:29 PM 40,960 tcpmonui.dll 05/25/2004 05:29 PM 45,672 tcpmon.ini 05/25/2004 05:29 PM 13,312 tcpmib.dll 05/25/2004 05:29 PM 16,896 tftp.exe 05/25/2004 05:30 PM 384,000 themeui.dll 05/25/2004 05:30 PM 7,168 tlntsvrp.dll 05/25/2004 05:30 PM 73,728 tlntsess.exe 05/25/2004 05:30 PM 57,856 tlntadmn.exe 05/25/2004 05:30 PM 90,112 timedate.cpl 05/25/2004 05:30 PM 346,624 tourstart.exe 05/25/2004 05:30 PM 67,584 tlntsvr.exe 05/25/2004 05:30 PM 4,048 timer.drv 05/25/2004 05:30 PM 13,888 toolhelp.dll 05/25/2004 05:30 PM 88,064 tscfgwmi.dll 05/25/2004 05:30 PM 8,456 tsddd.dll 05/25/2004 05:30 PM 15,360 tsd32.dll 05/25/2004 05:30 PM 14,848 tscon.exe 05/25/2004 05:30 PM 14,848 tsdiscon.exe 05/25/2004 05:30 PM 81,920 trkwks.dll 05/25/2004 05:30 PM 231,936 tracerpt.exe 05/25/2004 05:30 PM 40,960 tscupgrd.exe 05/25/2004 05:30 PM 10,752 tracert.exe 05/25/2004 05:30 PM 31,744 tracert6.exe 05/25/2004 05:30 PM 52,224 tsappcmp.dll 05/25/2004 05:30 PM 11,264 tree.com 05/25/2004 05:30 PM 31,232 traffic.dll 05/25/2004 05:30 PM 16,384 tskill.exe 05/25/2004 05:30 PM 32,256 umandlg.dll 05/25/2004 05:30 PM 22,016 udhisapi.dll 05/25/2004 05:30 PM 188,928 unimdm.tsp 05/25/2004 05:30 PM 16,896 tsshutdn.exe 05/25/2004 05:30 PM 13,312 umdmxfrm.dll 05/25/2004 05:30 PM 82,432 ufat.dll 05/25/2004 05:30 PM 36,352 typeperf.exe 05/25/2004 05:30 PM 107,008 umpnpmgr.dll 05/25/2004 05:30 PM 177,856 typelib.dll 05/25/2004 05:30 PM 90,624 txflog.dll 05/25/2004 05:30 PM 268,800 ulib.dll 05/25/2004 05:30 PM 3,286 tslabels.h 05/25/2004 05:30 PM 89,588 unicode.nls 05/25/2004 05:30 PM 8,192 tssoft32.acm 05/25/2004 05:30 PM 13,223 tslabels.ini 05/25/2004 05:30 PM 106,496 url.dll 05/25/2004 05:30 PM 455,680 urlmon.dll 05/25/2004 05:30 PM 16,384 ups.exe 05/25/2004 05:30 PM 231,424 upnpui.dll 05/25/2004 05:30 PM 164,864 upnphost.dll 05/25/2004 05:30 PM 120,320 upnp.dll 05/25/2004 05:30 PM 69,120 unimdmat.dll 05/25/2004 05:30 PM 13,824 uniplat.dll 05/25/2004 05:30 PM 4,096 unlodctr.exe 05/25/2004 05:30 PM 14,848 upnpcont.exe 05/25/2004 05:30 PM 17,920 ureg.dll 05/25/2004 05:30 PM 14,848 usbmon.dll 05/25/2004 05:30 PM 302,080 untfs.dll 05/25/2004 05:30 PM 18,832 v7vga.rom 05/25/2004 05:30 PM 30,992 vbajet32.dll 05/25/2004 05:30 PM 7,680 vcdex.dll 05/25/2004 05:30 PM 24,064 vdmdbg.dll 05/25/2004 05:30 PM 9,008 ver.dll 05/25/2004 05:30 PM 13,312 verifier.dll 05/25/2004 05:30 PM 479,261 vbscript.dll 05/25/2004 05:30 PM 47,872 user.exe 05/25/2004 05:30 PM 27,136 vbisurf.ax 05/25/2004 05:30 PM 47,616 utilman.exe 05/25/2004 05:30 PM 560,128 user32.dll 05/25/2004 05:30 PM 667,136 userenv.dll 05/25/2004 05:30 PM 339,456 usp10.dll 05/25/2004 05:30 PM 203,264 uxtheme.dll 05/25/2004 05:30 PM 1,161 usrlogon.cmd 05/25/2004 05:30 PM 48,640 vdmredir.dll 05/25/2004 05:30 PM 22,016 userinit.exe 05/25/2004 05:30 PM 25,600 utildll.dll 05/25/2004 05:30 PM 20,535 vfpodbc.dll 05/25/2004 05:30 PM 49,664 w32tm.exe 05/25/2004 05:30 PM 1,129 vwipxspx.exe 05/25/2004 05:30 PM 98,304 verifier.exe 05/25/2004 05:30 PM 2,176 vga.drv 05/25/2004 05:30 PM 19,456 vwipxspx.dll 05/25/2004 05:30 PM 51,456 vga256.dll 05/25/2004 05:30 PM 165,376 w32time.dll 05/25/2004 05:30 PM 18,176 vga64k.dll 05/25/2004 05:30 PM 9,344 vga.dll 05/25/2004 05:30 PM 409,088 vssapi.dll 05/25/2004 05:30 PM 16,896 vss_ps.dll 05/25/2004 05:30 PM 275,456 vssvc.exe 05/25/2004 05:30 PM 4,608 vjoy.dll 05/25/2004 05:30 PM 16,384 version.dll 05/25/2004 05:30 PM 33,792 vssadmin.exe 05/25/2004 05:30 PM 22,016 w32topl.dll 05/25/2004 05:30 PM 1,309,184 wbdbase.deu 05/25/2004 05:30 PM 65,489 wbcache.esn 05/25/2004 05:30 PM 957,440 wbdbase.enu 05/25/2004 05:30 PM 750,080 wbdbase.esn 05/25/2004 05:30 PM 65,489 wbcache.enu 05/25/2004 05:30 PM 786,944 wbdbase.fra 05/25/2004 05:30 PM 65,489 wbcache.fra 05/25/2004 05:30 PM 65,489 wbcache.ita 05/25/2004 05:30 PM 65,489 wbcache.nld 05/25/2004 05:30 PM 65,489 wbcache.sve 05/25/2004 05:30 PM 867,840 wbdbase.ita 05/25/2004 05:30 PM 65,489 wbcache.deu 05/25/2004 05:30 PM 1,095,680 wbdbase.nld 05/25/2004 05:30 PM 937,984 wbdbase.sve 05/25/2004 05:30 PM 16,384 watchdog.sys 05/25/2004 05:30 PM 208,896 wavemsp.dll 05/25/2004 05:30 PM 40,448 webhits.dll 05/25/2004 05:30 PM 46,592 wdigest.dll 05/25/2004 05:30 PM 13,600 wfwnet.drv 05/25/2004 05:30 PM 414,720 wiaacmgr.exe 05/25/2004 05:30 PM 4,096 wdl.trm 05/25/2004 05:30 PM 124,928 webvw.dll 05/25/2004 05:30 PM 258,048 webcheck.dll 05/25/2004 05:30 PM 60,416 wextract.exe 05/25/2004 05:30 PM 1,325,568 webfldrs.msi 05/25/2004 05:30 PM 61,952 webclnt.dll 05/25/2004 05:30 PM 119,808 wiadss.dll 05/25/2004 05:30 PM 70,656 wiascr.dll 05/25/2004 05:30 PM 40,448 wiasf.ax 05/25/2004 05:30 PM 568,832 wiashext.dll 05/25/2004 05:30 PM 104,448 wiavideo.dll 05/25/2004 05:30 PM 99,328 win32spl.dll 05/25/2004 05:30 PM 1,813,632 win32k.sys 05/25/2004 05:30 PM 316,416 wiaservc.dll 05/25/2004 05:30 PM 145,408 wiavusd.dll 05/25/2004 05:30 PM 9,216 wifeman.dll 05/25/2004 05:30 PM 18,432 win.com 05/25/2004 05:30 PM 449,536 wiadefui.dll 05/25/2004 05:30 PM 13,312 win87em.dll 05/25/2004 05:30 PM 35,328 winchat.exe 05/25/2004 05:30 PM 9,216 winfax.dll 05/25/2004 05:30 PM 5,120 winnls.dll 05/25/2004 05:30 PM 599,040 wininet.dll 05/25/2004 05:30 PM 119,808 winmine.exe 05/25/2004 05:30 PM 11,776 winmsd.exe 05/25/2004 05:30 PM 32,674 winhelp.hlp 05/25/2004 05:30 PM 516,608 winlogon.exe 05/25/2004 05:30 PM 171,520 winmm.dll 05/25/2004 05:30 PM 8,192 winhlp32.exe 05/25/2004 05:30 PM 25,600 winipsec.dll 05/25/2004 05:30 PM 762,368 winntbbu.dll 05/25/2004 05:30 PM 2,080 winoldap.mod 05/25/2004 05:30 PM 2,864 winsock.dll 05/25/2004 05:30 PM 2,112 winspool.exe 05/25/2004 05:30 PM 132,096 winspool.drv 05/25/2004 05:30 PM 48,128 winsta.dll 05/25/2004 05:30 PM 276,480 winsrv.dll 05/25/2004 05:30 PM 93,184 winscard.dll 05/25/2004 05:30 PM 14,848 winrnr.dll 05/25/2004 05:30 PM 18,944 winstrm.dll 05/25/2004 05:30 PM 4,096 winver.exe 05/25/2004 05:30 PM 5,632 wmi.dll 05/25/2004 05:30 PM 442,398 wmadmoe.dll 05/25/2004 05:30 PM 184,320 wmadmod.dll 05/25/2004 05:30 PM 89,600 wmidx.ocx 05/25/2004 05:30 PM 253,952 wmnetmgr.dll 05/25/2004 05:30 PM 63,488 wmimgmt.msc 05/25/2004 05:30 PM 166,912 wintrust.dll 05/25/2004 05:30 PM 188,416 wmp.ocx 05/25/2004 05:30 PM 168,448 wldap32.dll 05/25/2004 05:30 PM 18,944 wmiprop.dll 05/25/2004 05:30 PM 20,480 wmdmps.dll 05/25/2004 05:30 PM 86,528 wlnotify.dll 05/25/2004 05:30 PM 55,808 wmiscmgr.dll 05/25/2004 05:30 PM 22,528 wmdmlog.dll 05/25/2004 05:30 PM 51,200 wmerrenu.dll 05/25/2004 05:30 PM 274,432 wmasf.dll 05/25/2004 05:30 PM 120,832 wkssvc.dll 05/25/2004 05:30 PM 118,784 wmsdmoe.dll 05/25/2004 05:30 PM 1,298,432 wmpcore.dll 05/25/2004 05:30 PM 1,998,848 wmploc.dll 05/25/2004 05:30 PM 77,824 wmpshell.dll 05/25/2004 05:30 PM 253,952 wmpcd.dll 05/25/2004 05:30 PM 77,824 wmpstub.exe 05/25/2004 05:30 PM 1,404,928 wmpui.dll 05/25/2004 05:30 PM 110,592 wmsdmod.dll 05/25/2004 05:30 PM 1,220,608 wmvcore.dll 05/25/2004 05:30 PM 296,448 wmstream.dll 05/25/2004 05:30 PM 278,559 wmv8ds32.ax 05/25/2004 05:30 PM 311,327 wmv8dmod.dll 05/25/2004 05:30 PM 294,912 wmvdmod.dll 05/25/2004 05:30 PM 446,464 wmvdmoe.dll 05/25/2004 05:30 PM 258,048 wmvds32.ax 05/25/2004 05:31 PM 10,368 wowexec.exe 05/25/2004 05:31 PM 65,585 wshext.dll 05/25/2004 05:31 PM 28,721 wshcon.dll 05/25/2004 05:31 PM 9,216 wshatm.dll 05/25/2004 05:31 PM 17,408 wtsapi32.dll 05/25/2004 05:31 PM 118,834 wscript.exe 05/25/2004 05:31 PM 29,184 wpnpinst.exe 05/25/2004 05:31 PM 31,232 wpabaln.exe 05/25/2004 05:31 PM 7,168 wshnetbs.dll 05/25/2004 05:31 PM 5,632 write.exe 05/25/2004 05:31 PM 247,808 wow32.dll 05/25/2004 05:31 PM 2,736 wowdeb.exe 05/25/2004 05:31 PM 172,664 xenroll.dll 05/25/2004 05:31 PM 86,016 xactsrv.dll 05/25/2004 05:31 PM 21,504 wsock32.dll 05/25/2004 05:31 PM 75,264 ws2_32.dll 05/25/2004 05:31 PM 56,832 wzcdlg.dll 05/25/2004 05:31 PM 38,912 wsnmp32.dll 05/25/2004 05:31 PM 13,312 wship6.dll 05/25/2004 05:31 PM 545,792 wsecedit.dll 05/25/2004 05:31 PM 18,944 ws2help.dll 05/25/2004 05:31 PM 102,448 wshom.ocx 05/25/2004 05:31 PM 28,160 xcopy.exe 05/25/2004 05:31 PM 32,256 wupdmgr.exe 05/25/2004 05:31 PM 9,216 wuauserv.dll 05/25/2004 05:31 PM 17,408 wshtcpip.dll 05/25/2004 05:31 PM 10,240 WshRm.dll 05/25/2004 05:31 PM 9,728 xolehlp.dll 05/25/2004 05:31 PM 46,080 wstdecod.dll 05/25/2004 05:31 PM 11,776 wshisn.dll 05/25/2004 05:31 PM 29,696 asr_pfu.exe 05/25/2004 05:31 PM 316,416 zipfldr.dll 05/25/2004 05:31 PM 3,584 dsprpres.dll 05/25/2004 05:31 PM 49,182 clspack.exe 05/25/2004 05:31 PM 186,911 javacypt.dll 05/25/2004 05:31 PM 63,007 javaprxy.dll 05/25/2004 05:31 PM 12,288 encapi.dll 05/25/2004 05:31 PM 313,856 dx3j.dll 05/25/2004 05:31 PM 171,034 jit.dll 05/25/2004 05:31 PM 172,060 jview.exe 05/25/2004 05:31 PM 14,878 jdbgmgr.exe 05/25/2004 05:31 PM 155,648 encdec.dll 05/25/2004 05:31 PM 404,509 javart.dll 05/25/2004 05:31 PM 66,082 c_28603.nls 05/25/2004 05:31 PM 6,788 secupd.sig 05/25/2004 05:31 PM 4,573 secupd.dat 05/25/2004 05:31 PM 110,080 sbeio.dll 05/25/2004 05:31 PM 154,140 msawt.dll 05/25/2004 05:31 PM 945,693 msjava.dll 05/25/2004 05:31 PM 21,023 msjdbc10.dll 05/25/2004 05:31 PM 172,032 mssap.dll 05/25/2004 05:31 PM 218,112 sbe.dll 05/25/2004 05:31 PM 504,832 msftedit.dll 05/25/2004 05:31 PM 162,304 MSCTFIME.IME 05/25/2004 05:31 PM 10,752 spiisupd.exe 05/25/2004 05:31 PM 287,263 vmhelper.dll 05/25/2004 05:31 PM 23,552 wzcsapi.dll 05/25/2004 05:31 PM 264,704 wzcsvc.dll 05/25/2004 05:31 PM 403,456 winbrand.dll 05/25/2004 05:31 PM 31,744 pid.dll 05/25/2004 05:31 PM 77,440 hal.dll 05/25/2004 05:31 PM 1,947,904 ntkrnlpa.exe 05/25/2004 05:31 PM 286,720 msh263.drv 05/25/2004 05:31 PM 310,272 winhttp.dll 05/25/2004 05:31 PM 1,677,312 wmvcore2.dll 05/25/2004 05:31 PM 187,904 xpsp1res.dll 05/25/2004 05:31 PM 171,549 wjview.exe 08/11/2004 02:22 AM 828,152 wmv9dmod.dll 01/09/2005 10:14 PM .. 01/09/2005 10:14 PM . 01/09/2005 10:14 PM DRIVERS 01/10/2005 08:13 PM 39,992 perfc009.dat 01/10/2005 08:13 PM 356,120 PerfStringBackup.INI 01/10/2005 08:13 PM 311,604 perfh009.dat 05/26/2005 04:16 AM 75,544 cdm.dll 05/26/2005 04:16 AM 198,424 iuengine.dll 05/26/2005 04:16 AM 172,312 wuauclt1.exe 05/26/2005 04:16 AM 124,184 wuauclt.exe 05/26/2005 04:16 AM 174,360 wuaucpl.cpl 05/26/2005 04:16 AM 41,240 wups.dll 05/26/2005 04:16 AM 127,256 wucltui.dll 05/26/2005 04:16 AM 194,328 wuaueng1.dll 05/26/2005 04:16 AM 18,200 wups2.dll 05/26/2005 04:16 AM 1,343,768 wuaueng.dll 05/26/2005 04:16 AM 173,536 wuweb.dll 05/26/2005 04:16 AM 465,176 wuapi.dll 04/26/2006 02:59 PM 250,544 KeyHelp.ocx 05/17/2006 11:23 AM 579,888 LegitCheckControl.DLL 06/02/2006 06:40 PM 229,592 FNTCACHE.DAT 07/13/2006 10:22 AM SoftwareDistribution 07/15/2006 01:10 AM 2,206 wpa.dbl 07/15/2006 03:29 PM appmgmt 01/09/2009 10:54 PM npp 01/09/2009 10:54 PM wbem 01/09/2009 10:54 PM Setup 01/09/2009 10:54 PM ShellExt 01/09/2009 10:54 PM IME 01/09/2009 10:54 PM inetsrv 01/09/2009 10:54 PM usmt 01/09/2009 10:54 PM 3076 01/09/2009 10:54 PM dhcp 01/09/2009 10:54 PM 2052 01/09/2009 10:54 PM 1054 01/09/2009 10:54 PM 1042 01/09/2009 10:54 PM 1041 01/09/2009 10:54 PM 1037 01/09/2009 10:54 PM 1033 01/09/2009 10:54 PM 1031 01/09/2009 10:54 PM 1028 01/09/2009 10:54 PM 1025 01/09/2009 10:54 PM oobe 01/09/2009 10:54 PM mui 01/09/2009 10:54 PM icsxml 01/09/2009 10:54 PM export 01/09/2009 10:54 PM ias 01/09/2009 10:54 PM wins 01/09/2009 10:54 PM spool 01/09/2009 10:54 PM ras 01/09/2009 10:54 PM config 01/09/2009 10:54 PM 3com_dmi 01/09/2009 11:01 PM CatRoot2 01/09/2009 11:01 PM CatRoot 01/09/2009 11:06 PM 0 h323log.txt 01/09/2009 11:28 PM Com 01/09/2009 11:28 PM MsDtc 01/09/2009 11:29 PM 21,640 emptyregdb.dat 01/09/2009 11:31 PM Restore 01/09/2009 11:31 PM Macromed 01/09/2009 11:32 PM DirectX 01/09/2009 11:37 PM 16,832 amcompat.tlb 01/09/2009 11:37 PM 23,392 nscompat.tlb 01/09/2009 11:38 PM 96,256 migicons.exe 01/09/2009 11:38 PM 2,831 CONFIG.NT 01/09/2009 11:39 PM xircom 01/09/2009 11:48 PM 2,229 $winnt$.inf 01/09/2009 11:51 PM 25,065 wmpscheme.xml 1824 File(s) 286,807,542 bytes 41 Dir(s) 14,490,337,280 bytes free Volume in drive C has no label. Volume Serial Number is 0660-1DE1 Directory of c:\windows\system32 01/10/2005 05:07 PM GroupPolicy 01/09/2009 10:24 PM 13,122 folder.htt 01/09/2009 10:54 PM dllcache 01/09/2009 11:33 PM 749 ncpa.cpl.manifest 01/09/2009 11:33 PM 749 nwc.cpl.manifest 01/09/2009 11:33 PM 749 sapi.cpl.manifest 01/09/2009 11:33 PM 749 wuaucpl.cpl.manifest 01/09/2009 11:33 PM 749 cdplayer.exe.manifest 01/09/2009 11:33 PM 488 WindowsLogon.manifest 01/09/2009 11:33 PM 488 logonui.exe.manifest 8 File(s) 17,843 bytes 2 Dir(s) 14,490,779,648 bytes free
Please go to these free online file checkers:

Kaspersky Online File Scanner

Jotti Online File Scanner

VirusTotal Online File Scanner

And submit this file for a virus scan:

C:\windows\system32\migicons.exe

Let me know the results.

You don't have to try all three. If one says it's "infected", you can stop there.

Do you know why some of the files in there have a date "in the future"?

Example:

01/09/2009 10:54 PM 1031

Is your system date/time correct?
:unsure:
micah, those three sites did not find that file, migicons.exe, to be a virus. i have no idea why the time says in the future…my time and date on the windows taskbar and settings is correct.
Only for Windows XP and Windows 2000

Download SmitfraudFix (by S!Ri) to your Desktop.
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.

[external image: Posted Image]

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press Enter

[external image: Posted Image]

This program will scan large amounts of files on your computer for known patterns so please be patient while it works. It will create a file named:

c:\rapport.txt

Open that file with Notepad, and "copy/paste" the ENTIRE CONTENTS of it into this thread.
SmitFraudFix v2.70 Scan done at 21:05:26.55, Sat 07/15/2006 Run from C:\Documents and Settings\Administrator\Desktop OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT Fix ran in normal mode »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 C:\WINDOWS\system32\migicons.exe FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrator\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\FAVORI~1 »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="C:\\WINDOWS\\desktop.html" "SubscribedURL"="C:\\WINDOWS\\desktop.html" "FriendlyName"="Security" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End
Running the Clean

Warning: running option #2 on a non infected computer will remove your Desktop background.

Please print out or copy these instructions/tutorial to Notepad as the internet will not be (while in Safe Mode) available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, ask your question(s) before moving on with the fixes.

Reboot your computer in Safe Mode.
  • If the computer is running, shut down Windows, and then turn off the power.
  • Wait 30 seconds, and then turn the computer on.
  • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • Ensure that the Safe Mode option is selected.
  • Press Enter. The computer then begins to start in Safe mode.
  • Login on your usual account.
______________________________

Open the SmitfraudFix Folder, then double-click smitfraudfix.cmd file to start the tool.
Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter.

[external image: Posted Image]


The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. Answer Yes to the question "Replace infected file ?" by typing Y and hit Enter.

A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually. Reboot in Safe Mode.

The tool will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.
______________________________

Clean out your Temporary Internet files. Proceed like this:
  • Quit Internet Explorer and quit any instances of Windows Explorer.
  • Click Start, click Control Panel, and then double-click Internet Options.
  • On the General tab, click Delete Files under Temporary Internet Files.
  • In the Delete Files dialog box, tick the Delete all offline content check box , and then click OK.
  • On the General tab, click Delete Cookies under Temporary Internet Files, and then click OK.
  • Click on the Programs tab then click the Reset Web Settings button. Click Apply then OK.
  • Click OK.
Next Click Start, click Control Panel and then double-click Display. Click on the Desktop tab, then click the Customize Desktop button. Click on the Web tab. Under Web Pages you should see a checked entry called Security info or something similar. If it is there, select that entry and click the Delete button. Click Ok then Apply and Ok.

Empty the Recycle Bin by right-clicking the Recycle Bin icon on your Desktop, and then clicking Empty Recycle Bin.
______________________________

Reboot in Normal Mode.

______________________________

Please post:
[*]c:\rapport.txt

[*]A new HijackThis log

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI