This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

baseline hijack this and ewido files

53 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

I have been having problems eliminating purityscan. Here is my logs from hijack this and ewido.



Logfile of HijackThis v1.99.1
Scan saved at 7:50:34 PM, on 9/20/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Common Files\AOL\1137632844\ee\AOLSoftware.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Plaxo\2.6.2.15\PlaxoHelper.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aimtoday.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1137632844\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\2.6.2.15\PlaxoHelper.exe -a
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as…rl/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3050E54C-D2C9-4C4F-BCDA-B04380738C35}: NameServer = 192.168.1.1,4.2.2.2
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Terminal Connections (terms) - Unknown owner - C:\WINDOWS\system32\terminals.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe

———————————————————
ewido anti-spyware - Scan Report
———————————————————

+ Created at: 7:58:07 PM 6/22/2006

+ Scan result:



HKU\.DEFAULT\Software\intexp -> Adware.IEPlugin : No action taken.
HKU\.DEFAULT\Software\intexp\Config -> Adware.IEPlugin : No action taken.
HKU\.DEFAULT\Software\intexp\MyFileSystem2 -> Adware.IEPlugin : No action taken.
HKU\S-1-5-18\Software\intexp -> Adware.IEPlugin : No action taken.
HKU\S-1-5-18\Software\intexp\Config -> Adware.IEPlugin : No action taken.
HKU\S-1-5-18\Software\intexp\MyFileSystem2 -> Adware.IEPlugin : No action taken.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7A1A109F-58B3-414B-9829-5F4D9BE5FEDE} -> Adware.Virtumonde : No action taken.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7A1A109F-58B3-414B-9829-5F4D9BE5FEDE} -> Adware.Virtumonde : No action taken.
C:\WINDOWS\Downloaded Program Files\UWA6P_0001_N68M2301NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Leigh\Cookies\leigh@abetterinternet[2].txt -> TrackingCookie.Abetterinternet : No action taken.
C:\Documents and Settings\Michael\Cookies\michael@abetterinternet[2].txt -> TrackingCookie.Abetterinternet : No action taken.
C:\Documents and Settings\Grays\Cookies\[removed][2].txt -> TrackingCookie.Addynamix : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@adrevolver[3].txt -> TrackingCookie.Adrevolver : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\Leigh\Cookies\leigh@cliks[2].txt -> TrackingCookie.Cliks : No action taken.
C:\Documents and Settings\Michael\Cookies\michael@cliks[2].txt -> TrackingCookie.Cliks : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@com[1].txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\Grays\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : No action taken.
C:\Documents and Settings\Grays\Cookies\[removed][1].txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@fastclick[2].txt -> TrackingCookie.Fastclick : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\Grays\Cookies\[removed][2].txt -> TrackingCookie.Myaffiliateprogram : No action taken.
C:\Documents and Settings\Grays\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@questionmarket[1].txt -> TrackingCookie.Questionmarket : No action taken.
C:\Documents and Settings\Leigh\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : No action taken.
C:\Documents and Settings\Grays\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@trafficmp[2].txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@valueclick[1].txt -> TrackingCookie.Valueclick : No action taken.
C:\Documents and Settings\Grays\Cookies\grays@zedo[1].txt -> TrackingCookie.Zedo : No action taken.


::Report end
Hi ma3572,

I'm Gary R. I'll be glad to help you with your computer problems.
Please be patient, I know that you want your problems solved quickly, and I will work hard to help you.

Please observe these rules while we work:
  • Perform all actions in the order given.
  • If you don't know, stop and ask! Don't keep going on.
  • Please reply to this thread. Do not start a new topic.
  • Stick with it till you're given the all clear.
  • Remember, absence of symptoms does not mean the infection is all gone.
If you can do these things, everything should go smoothly.

I don't see any signs of Purity Scan in your HJT log, however there are things to attend to. You ran Ewido as a scan only, therefore it has not attempted to remove anything it found.

We need to remove a service.
  • Click Start > Run now type sc stop terms click OK.
  • Click Start > Run now type sc delete terms click OK.
Note: There is a space between sc and stop/delete, and a space between stop/delete and servicename.

Update Ewido
  • At the top of the main screen click Update.
    • Then in the Manual Update section, click on Start Update.
  • The update will start and a progress bar will show the updates being installed.
  • When updates are completed, close Ewido.
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates

Run a scan with Ewido.
  • Click on Scanner
    • Click on the Settings tab, and set the following settings.
      • How to act
      • Click on Recommended actions, and set to Quarantine.
    • How to scan
      • Check all options.
    • Possibly unwanted software.
      • Check all options.
    • Reports
      • Check Automatically generate report after every scan.
      • Uncheck Only if threats were found.
    • What to scan
      • Check Scan every file.
  • Click on the Scan tab.
    • Click on Complete System Scan and the scan will begin.
    • When the scan has finished
    • Make sure that Set all elements to: shows Quarantine, if not click on the link and choose Quarantine from the popup menu.
    • At the bottom of the window click on the Apply all Actions button.
Note: Don't save the report before you hit the Apply action button.

Close ewido anti-malware.

Ewido will save a report in the following location C:\Program Files\ewido anti-spyware 4.0\Reports

Please do an online scan with Kaspersky Online Scanner

Note: You must be using Internet Explorer as your browser as it will be necessary to install an Active X component to your computer.

Important If you have previously used Kaspersky Online Scanner (before 8th Aug 2006), you will have to uninstall the old version using Add/Remove Programs in Control Panel before you can use the new version.

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings.
  • In the scan settings make sure that the following are selected:
    • Scan using the following Anti-Virus database:
      • Extended (If available otherwise Standard)
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK.
  • Now under select a target to scan select My Computer.
  • The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post please, along with the Ewido log and a new HJT log.
ewido did not save a report after a long scan.
Can't see the whole screen in safe mode.
I'll have to scan again - later

Kaspersky scanner found 3 viruses and 6 infected objects.

——————————————————————————-
KASPERSKY ONLINE SCANNER REPORT
Thursday, September 21, 2006 10:53:41 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 22/09/2006
Kaspersky Anti-Virus database records: 225410
——————————————————————————-

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 60742
Number of viruses found: 3
Number of infected objects: 6 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:44:58

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\WDLog-08062006-142914.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Documents\DESKTOP.INI Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Desktop.ini Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Music\DESKTOP.INI Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Music\New Stories (Highway Blues).wma Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst1.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst10.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst11.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst12.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst13.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst14.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst15.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst2.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst3.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst4.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst5.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst6.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst7.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst8.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists\000648E3\Plylst9.wpl Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Pictures\Desktop.ini Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Blue hills.jpg Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\DESKTOP.INI Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Sunset.jpg Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Water lilies.jpg Object is locked skipped
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Winter.jpg Object is locked skipped
C:\Documents and Settings\Grays\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt.log Object is locked skipped
C:\Documents and Settings\Grays\Cookies\INDEX.DAT Object is locked skipped
C:\Documents and Settings\Grays\Desktop\OiUninstaller.exe/data0002 Infected: not-a-virus:AdWare.Win32.PurityScan.bu skipped
C:\Documents and Settings\Grays\Desktop\OiUninstaller.exe/data0003 Infected: not-a-virus:AdWare.Win32.PurityScan.bu skipped
C:\Documents and Settings\Grays\Desktop\OiUninstaller.exe NSIS: infected - 2 skipped
C:\Documents and Settings\Grays\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{9D9BC823-CC05-459C-B98B-8447443E21C8} Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Temp\hsperfdata_Grays\2796 Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Temp\~DF2FD2.tmp Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Temp\~DFA886.tmp Object is locked skipped
C:\Documents and Settings\Grays\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Grays\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Grays\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\eengine\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBConfig.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDebug.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDetect.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBNotify.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBRefr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetDev.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetLoc.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetUsr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStHash.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStMSI.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBValid.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPPolicy.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStart.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStop.log Object is locked skipped
C:\Program Files\Symantec AntiVirus\SAVRT\0395NAV~.TMP Object is locked skipped
C:\Program Files\Symantec AntiVirus\SAVRT\0541NAV~.TMP Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP183\A0010850.com Infected: Backdoor.Win32.SdBot.xd skipped
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP183\A0010917.exe Infected: Backdoor.Win32.SdBot.xd skipped
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP194\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM32\7ldgn0nd.ini Infected: not-a-virus:AdWare.Win32.Sahat.ao skipped
C:\WINDOWS\SYSTEM32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\sеcurity\cemo.exe Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

Logfile of HijackThis v1.99.1
Scan saved at 11:08:38 PM, on 9/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Common Files\AOL\1137632844\ee\AOLSoftware.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Plaxo\2.6.2.15\PlaxoHelper.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Symantec AntiVirus\DoScan.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aimtoday.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1137632844\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\2.6.2.15\PlaxoHelper.exe -a
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as…rl/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3050E54C-D2C9-4C4F-BCDA-B04380738C35}: NameServer = 192.168.1.1,4.2.2.2
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
Hi ma3572,

You're HJT log looks clean now, just one file to see to from your Kaspersky scan the others are an uninstaller (these are often flagged as they exhibit traits associated with Trojans, and are therefore misdiagnosed by the Heuristics used), and your System Restore Points (these can not re-infect you unless you perform a system restore. We'll clean them out in due course).

OK, Make sure that you can see hidden files and folders.
  • Click Start.
  • Click My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Show hidden files and folders.
  • Click Yes to confirm.
  • Uncheck the Hide file extensions for known file types.
  • Click OK.
Search for Hidden Files
By default, the Search companion does not search for hidden files. Because of this, you may be unable to find files, even though they exist on the drive.

To search for hidden or system files in Windows XP:
  • Click Start.
  • Click Search.
  • Click All files and folders.
  • Click More advanced options.
  • Click to select the Search hidden files and folders check box.
Now find and delete the following file.

C:\WINDOWS\SYSTEM32\7ldgn0nd.ini

How's your computer behaving now? Any problems?

Let me know, and then we can clear out your System Restore points and secure your computer against further infection.
Gary, I deleted the file you requested. However, symantec antivirus scan keeps finding: Adware.purityscan cemo.exe C:\windows\system32\s?curity C:\windows\system32\scurit~1 How do I eliminate these once and for all?
  • Download combofix.exe
  • Double click combofix.exe & follow the prompts.
  • When finished, it will produce a log for you. Post that log in your next reply please.
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

I'd like to look at your System32 folder.
  • Go to Start > Run, enter cmd and click OK.
  • Enter cd C:\windows\system32 and hit ENTER
  • Enter dir /x > C:\directorytext.txt and hit ENTER
  • Enter notepad C:\directorytext.txt and hit ENTER
  • Exit Command Window.
This will open a Notepad file directorytext.txt, copy and paste that into your next post please.
Gary, As you requested: combofix . The system 32 log is posted separately do to post length overrun. Grays - 06-09-23 16:33:30.20 Service Pack 2 ComboFix 06.09.23.2 - Running from: "C:\Program Files\hijackthis" (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Folders Quarantined: C:\QooBox\Purity\Documents and Settings\Grays\Application Data\CROSOF~1.NET C:\QooBox\Purity\Documents and Settings\Grays\Application Data\DOBE~1 C:\QooBox\Purity\Documents and Settings\Grays\Application Data\FNTS~1 C:\QooBox\Purity\Documents and Settings\Grays\Application Data\FNTS~2 C:\QooBox\Purity\Documents and Settings\Grays\Application Data\MBOLS~1 C:\QooBox\Purity\Documents and Settings\Grays\Application Data\MCROSO~1 C:\QooBox\Purity\Documents and Settings\Grays\Application Data\PPPATC~1 C:\QooBox\Purity\Documents and Settings\Grays\Application Data\SKS~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\ASEMBL~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\CROSOF~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\ECURIT~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\FNTS~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\MCROSO~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\PPPATC~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\RACLE~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\SSEMBL~1 C:\QooBox\Purity\Documents and Settings\Grays\My Documents\YSTEM~1 C:\QooBox\Purity\Program Files\ASKS~1 C:\QooBox\Purity\Program Files\CROSOF~1 C:\QooBox\Purity\Program Files\ICROSO~1 C:\QooBox\Purity\Program Files\MBOLS~1 C:\QooBox\Purity\Program Files\RACLE~1 C:\QooBox\Purity\Program Files\Common Files\ASEMBL~1 C:\QooBox\Purity\Program Files\Common Files\ICROSO~1.NET C:\QooBox\Purity\Program Files\Common Files\RACLE~1 C:\QooBox\Purity\Program Files\Common Files\SEMBLY~1 C:\QooBox\Purity\Program Files\Common Files\SSTEM3~1 C:\QooBox\Purity\WINDOWS\APPATC~1 C:\QooBox\Purity\WINDOWS\ASKS~1 C:\QooBox\Purity\WINDOWS\ICROSO~1.NET C:\QooBox\Purity\WINDOWS\SCURIT~1 C:\QooBox\Purity\WINDOWS\YSTEM3~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\CROSOF~1.NET C:\QooBox\Purity\WINDOWS\SYSTEM32\CURITY~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\DOBE~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\ICROSO~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\MANTEC~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\PPATCH~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\PPPATC~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\SCURIT~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\SEMBLY~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\SKS~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\STEM32~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\STEM~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\TSKS~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\WNSXS~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\YSTEM3~1 C:\QooBox\Purity\WINDOWS\SYSTEM32\SCURIT~1\cemo.exe ((((((((((((((((((((((((((((((( Files Created from 2006-08-23 to 2006-09-23 )))))))))))))))))))))))))))))))))) No new files created in this timespan (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-09-23 16:34 ——– d-a—— C:\Program Files\Common Files 2006-09-23 16:33 ——– d——– C:\Program Files\hijackthis 2006-09-23 15:56 ——– d——– C:\Program Files\Plaxo 2006-09-23 11:36 ——– d——– C:\Program Files\Symantec AntiVirus 2006-09-22 12:34 ——– d——– C:\Program Files\SpywareGuard 2006-09-22 11:59 ——– d——– C:\Program Files\ewido anti-spyware 4.0 2006-09-20 17:14 ——– d——– C:\Documents and Settings\Grays\Application Data\Google 2006-09-17 13:05 ——– d——– C:\Program Files\Google 2006-09-16 20:53 ——– d——– C:\Program Files\Common Files\AOL 2006-09-16 20:53 ——– d——– C:\Program Files\AOL 2006-09-16 20:53 ——– d——– C:\Program Files\AOD 2006-09-16 20:52 ——– d——– C:\Program Files\Common Files\aolshare 2006-09-12 19:11 ——– d—s—- C:\Documents and Settings\Grays\Application Data\Microsoft 2006-09-12 17:43 900 –ahs—- C:\WINDOWS\SYSTEM32\KGyGaAvL.sys 2006-08-27 21:34 ——– d——– C:\Program Files\AIM 2006-08-21 08:21 16896 –a—— C:\WINDOWS\SYSTEM32\fltlib.dll 2006-08-21 05:14 23040 –a—— C:\WINDOWS\SYSTEM32\fltmc.exe 2006-08-21 05:14 128896 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\fltmgr.sys 2006-08-13 04:01 ——– d——– C:\Program Files\Internet Explorer 2006-08-10 20:06 ——– d——– C:\Program Files\Common Files\Microsoft Shared 2006-08-10 20:03 ——– d——– C:\Program Files\Snapshot Viewer 2006-08-10 20:03 ——– d——– C:\Program Files\microsoft frontpage 2006-08-10 20:03 ——– d——– C:\Program Files\Common Files\System 2006-08-10 19:58 ——– d——– C:\Program Files\Microsoft Office 2006-08-10 19:58 ——– d——– C:\Documents and Settings\Grays\Application Data\Microsoft Web Folders 2006-08-10 19:51 ——– d——– C:\Program Files\Symantec 2006-08-10 19:50 ——– d——– C:\Program Files\Common Files\Symantec Shared 2006-08-06 16:29 ——– d——– C:\Program Files\OfficeUpdate11 2006-08-06 16:16 ——– d——– C:\Program Files\Microsoft ActiveSync 2006-08-06 16:14 ——– d——– C:\Program Files\Common Files\DESIGNER 2006-08-06 16:12 ——– d——– C:\Program Files\Microsoft.NET 2006-08-06 14:28 ——– d——– C:\Program Files\Windows Defender 2006-08-06 14:28 ——– d——– C:\Program Files\Microsoft AntiSpyware 2006-07-27 09:24 679424 –a—— C:\WINDOWS\SYSTEM32\inetcomm.dll 2006-07-21 04:24 72704 –a—— C:\WINDOWS\SYSTEM32\hlink.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DellSupport"="\"C:\\Program Files\\Dell Support\\DSAgnt.exe\" /startup" "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background" "AIM"="C:\\Program Files\\AIM\\aim.exe -cnetwait.odl" "MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background" "Aim6"="\"C:\\Program Files\\Common Files\\AOL\\Launch\\AOLLaunch.exe\" /d locale=en-US ee://aol/imApp" "PlaxoUpdate"="C:\\Program Files\\Plaxo\\2.6.2.15\\PlaxoHelper.exe -a" "swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.0.720.3640\\GoogleToolbarNotifier.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe" "DVDLauncher"="\"C:\\Program Files\\CyberLink\\PowerDVD\\DVDLauncher.exe\"" "PCMService"="\"C:\\Program Files\\Dell\\Media Experience\\PCMService.exe\"" "RealTray"="C:\\Program Files\\Real\\RealPlayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER" "mmtask"="c:\\Program Files\\MusicMatch\\MusicMatch Jukebox\\mmtask.exe" "MMTray"="C:\\Program Files\\MUSICMATCH\\Musicmatch Jukebox\\mm_tray.exe" "dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.exe" "SoundMAXPnP"="C:\\Program Files\\Analog Devices\\Core\\smax4pnp.exe" "HostManager"="C:\\Program Files\\Common Files\\AOL\\1137632844\\ee\\AOLSoftware.exe" "igfxtray"="C:\\WINDOWS\\system32\\igfxtray.exe" "igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe" "igfxpers"="C:\\WINDOWS\\system32\\igfxpers.exe" "HPDJ Taskbar Utility"="C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\hpztsb06.exe" "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\"" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "UnlockerAssistant"="\"C:\\Program Files\\Unlocker\\UnlockerAssistant.exe\"" "Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide" "Zone Labs Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\"" "ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\"" "vptray"="C:\\PROGRA~1\\SYMANT~1\\VPTray.exe" "IPHSend"="C:\\Program Files\\Common Files\\AOL\\IPHSend\\IPHSend.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS] "Installed"="1" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="http://www.processlibrary.com/graphics/title.gif" "SubscribedURL"="http://www.processlibrary.com/graphics/title.gif" "FriendlyName"="" "Flags"=dword:00000001 "Position"=hex:2c,00,00,00,12,03,00,00,17,01,00,00,fd,02,00,00,57,00,00,00,e8,\ 03,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:01,00,00,00 "OriginalStateInfo"=hex:18,00,00,00,12,03,00,00,17,01,00,00,fd,02,00,00,57,00,\ 00,00,01,00,00,40 "RestoredStateInfo"=hex:14,6d,75,03,41,c0,b4,74,e8,df,24,00,68,de,75,03,20,6d,\ 75,03,09,0d,00,00 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\1] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e4,02,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,\ 00,00,04,00,00,40 "RestoredStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,\ 00,00,01,00,00,00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" "{81559C35-8464-49F7-BB0E-07A383BEF910}"="" "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" "{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll Contents of the 'Scheduled Tasks' folder C:\WINDOWS\tasks\DEFRAG.job C:\WINDOWS\tasks\Disk Cleanup.job C:\WINDOWS\tasks\ISP signup reminder 1.job C:\WINDOWS\tasks\MP Scheduled Scan.job Completion time: Sat 09/23/2006 16:34:51.43 ComboFix.txt
Volume in drive C has no label. Volume Serial Number is 10E2-068F Directory of C:\WINDOWS\SYSTEM32 09/23/2006 04:33 PM . 09/23/2006 04:33 PM .. 10/08/2004 08:04 PM 333 $NCSP$.INF 11/28/2004 12:01 AM 218 $WINNT$.INF 10/08/2004 07:27 PM 1025 10/08/2004 07:27 PM 1028 10/08/2004 07:27 PM 1031 10/08/2004 07:27 PM 1033 10/08/2004 07:27 PM 1037 10/08/2004 07:27 PM 1041 10/08/2004 07:27 PM 1042 10/08/2004 07:27 PM 1054 08/04/2004 06:00 AM 2,151 12520437.CPX 08/04/2004 06:00 AM 2,233 12520850.CPX 10/08/2004 07:27 PM 2052 10/08/2004 07:27 PM 3076 10/08/2004 07:27 PM 3COM_DMI 08/04/2004 06:00 AM 100,352 6TO4SVC.DLL 04/15/2005 09:18 AM 3,144 7grr6dc5.dat 09/19/2001 02:32 PM 720,896 a3d.dll 08/04/2004 06:00 AM 25,600 AAAAMON.DLL 08/04/2004 06:00 AM 68,608 ACCESS.CPL 08/04/2004 06:00 AM 64,512 ACCTRES.DLL 08/04/2004 06:00 AM 183,808 ACCWIZ.EXE 08/04/2004 06:00 AM 61,952 ACELPDEC.AX 08/04/2004 06:00 AM 129,536 ACLEDIT.DLL 08/04/2004 06:00 AM 114,688 ACLUI.DLL 08/04/2004 06:00 AM 194,048 ACTIVEDS.DLL 08/04/2004 06:00 AM 111,104 ACTIVEDS.TLB 08/04/2004 06:00 AM 4,096 ACTMOVIE.EXE 08/04/2004 06:00 AM 101,888 ACTXPRXY.DLL 08/04/2004 06:00 AM 61,440 ADMPARSE.DLL 08/04/2004 06:00 AM 26,112 ADPTIF.DLL 08/04/2004 06:00 AM 175,616 ADSLDP.DLL 08/04/2004 06:00 AM 143,360 ADSLDPC.DLL 08/04/2004 06:00 AM 68,096 ADSMSEXT.DLL 08/04/2004 06:00 AM 263,680 ADSNT.DLL 08/04/2004 06:00 AM 616,960 ADVAPI32.DLL 08/04/2004 06:00 AM 99,840 ADVPACK.DLL 08/04/2004 06:00 AM 98,304 AHUI.EXE 08/04/2004 06:00 AM 44,544 ALG.EXE 08/04/2004 06:00 AM 17,408 ALRSVC.DLL 08/10/2004 02:04 PM 16,832 AMCOMPAT.TLB 08/04/2004 06:00 AM 70,656 AMSTREAM.DLL 08/04/2004 06:00 AM 9,029 ANSI.SYS 03/07/2005 09:00 PM 178,648 ap2nqrd4.dat 08/04/2004 06:00 AM 102,912 APCUPS.DLL 08/04/2004 06:00 AM 12,498 APPEND.EXE 08/04/2004 06:00 AM 126,976 APPHELP.DLL 08/04/2004 06:00 AM 549,888 APPWIZ.CPL 08/04/2004 06:00 AM 19,456 ARP.EXE 08/04/2004 06:00 AM 114,688 ASCTRLS.OCX 08/04/2004 06:00 AM 8,192 ASFERROR.DLL 03/02/2001 09:52 PM 15,360 asfsipc.dll 08/04/2004 06:00 AM 65,024 ASYCFILT.DLL 08/04/2004 06:00 AM 25,088 AT.EXE 08/04/2004 06:00 AM 13,312 ATKCTRS.DLL 08/04/2004 06:00 AM 58,880 ATL.DLL 11/21/2003 05:05 PM 84,992 atl70.dll 07/06/2005 05:17 PM 89,088 atl71.dll 08/04/2004 06:00 AM 11,264 ATMADM.EXE 08/04/2004 06:00 AM 285,696 ATMFD.DLL 08/04/2004 06:00 AM 30,208 ATMLIB.DLL 08/04/2004 06:00 AM 34,816 ATMPVCNO.DLL 08/04/2004 06:00 AM 11,264 ATRACE.DLL 08/04/2004 06:00 AM 11,264 ATTRIB.EXE 08/19/2003 06:36 PM 65,536 Audio3d.dll 08/04/2004 06:00 AM 42,496 AUDIOSRV.DLL 08/04/2004 06:00 AM 14,336 AUDITUSR.EXE 03/02/2005 02:09 PM 56,832 authz.dll 08/04/2004 06:00 AM 588,800 AUTOCHK.EXE 08/04/2004 06:00 AM 602,624 AUTOCONV.EXE 08/04/2004 06:00 AM 80,384 AUTODISC.DLL 08/04/2004 06:00 AM 1,688 autoexec.nt 08/04/2004 06:00 AM 580,608 AUTOFMT.EXE 08/04/2004 06:00 AM 11,264 AUTOLFN.EXE 08/04/2004 06:00 AM 69,584 AVICAP.DLL 08/04/2004 06:00 AM 64,000 AVICAP32.DLL 08/04/2004 06:00 AM 84,992 AVIFIL32.DLL 08/04/2004 06:00 AM 109,456 AVIFILE.DLL 08/04/2004 06:00 AM 16,384 AVMETER.DLL 08/04/2004 06:00 AM 227,840 AVTAPI.DLL 08/04/2004 06:00 AM 73,216 AVWAV.DLL 08/04/2004 06:00 AM 52,736 BASESRV.DLL 08/04/2004 06:00 AM 28,672 BATMETER.DLL 08/04/2004 06:00 AM 8,704 BATT.DLL 03/07/2005 09:00 PM 10,592 baur5s9q.dat 10/07/2003 02:39 PM 184,320 bdeadmin.cpl 08/04/2004 06:00 AM 17,408 BIDISPL.DLL 08/04/2004 06:00 AM 28,420 BIOS1.ROM 08/04/2004 06:00 AM 8,191 BIOS4.ROM 08/04/2004 06:00 AM 8,192 BITSPRX2.DLL 08/04/2004 06:00 AM 7,168 BITSPRX3.DLL 08/04/2004 06:00 AM 286,208 BLACKBOX.DLL 08/04/2004 06:00 AM 71,680 BLASTCLN.EXE 08/04/2004 06:00 AM 4,608 BOOTOK.EXE 08/04/2004 06:00 AM 12,288 BOOTVID.DLL 08/04/2004 06:00 AM 5,120 BOOTVRFY.EXE 08/04/2004 06:00 AM 22,984 BOPOMOFO.UCE 08/04/2004 06:00 AM 63,488 BROWSELC.DLL 08/04/2004 06:00 AM 77,312 BROWSER.DLL 06/23/2006 07:02 AM 1,022,976 browseui.dll 08/04/2004 06:00 AM 78,336 BROWSEWM.DLL 08/04/2004 06:00 AM 20,992 BTHCI.DLL 08/04/2004 06:00 AM 110,592 BTHPROPS.CPL 08/04/2004 06:00 AM 30,208 BTHSERV.DLL 08/04/2004 06:00 AM 50,688 BTPANUI.DLL 08/04/2004 06:00 AM 59,904 CABINET.DLL 08/04/2004 06:00 AM 84,480 CABVIEW.DLL 08/04/2004 06:00 AM 18,432 CACLS.EXE 08/04/2004 06:00 AM 114,688 CALC.EXE 08/04/2004 06:00 AM 50,688 CAMOCX.DLL 08/04/2004 06:00 AM 142,848 CAPESNPN.DLL 03/31/2005 05:32 PM 466,944 capicom.dll 08/04/2004 06:00 AM 359,936 CARDS.DLL 02/15/2006 02:12 AM CatRoot 09/21/2006 11:04 PM CatRoot2 07/26/2005 12:39 AM 225,792 catsrv.dll 08/04/2004 06:00 AM 85,504 CATSRVPS.DLL 07/26/2005 12:39 AM 625,152 catsrvut.dll 11/15/2005 01:29 PM 34,600 cba.dll 08/04/2004 06:00 AM 27,648 CCFGNT.DLL 06/23/2006 07:02 AM 151,040 cdfview.dll 05/26/2005 04:16 AM 75,544 cdm.dll 08/04/2004 06:00 AM 15,872 CDMODEM.DLL 09/09/2005 09:53 PM 2,067,968 cdosys.dll 08/04/2004 06:00 AM 194,560 CERTCLI.DLL 08/04/2004 06:00 AM 457,728 CERTMGR.DLL 08/04/2004 06:00 AM 42,339 CERTMGR.MSC 11/26/2002 08:03 PM 159,232 cewmdm.dll 08/04/2004 06:00 AM 38,912 CFGBKEND.DLL 08/04/2004 06:00 AM 16,896 CFGMGR32.DLL 08/04/2004 06:00 AM 80,384 CHARMAP.EXE 08/04/2004 06:00 AM 7,680 CHCP.COM 08/04/2004 06:00 AM 11,776 CHKDSK.EXE 08/04/2004 06:00 AM 11,264 CHKNTFS.EXE 08/04/2004 06:00 AM 163,328 CIADMIN.DLL 08/04/2004 06:00 AM 41,762 CIADV.MSC 08/04/2004 06:00 AM 109,568 CIC.DLL 08/04/2004 06:00 AM 8,192 CIDAEMON.EXE 06/22/2006 01:06 AM 69,120 ciodm.dll 08/04/2004 06:00 AM 5,632 CISVC.EXE 08/04/2004 06:00 AM 7,680 CKCNV.EXE 08/04/2004 06:00 AM 10,752 CLB.DLL 07/26/2005 12:39 AM 110,080 clbcatex.dll 07/26/2005 12:39 AM 498,688 clbcatq.dll 08/04/2004 06:00 AM 64,000 CLEANMGR.EXE 04/17/2002 02:05 PM 45,056 CleanUp.exe 08/04/2004 06:00 AM 71,859 CLICONF.CHM 08/04/2004 06:00 AM 77,824 CLICONFG.DLL 08/04/2004 06:00 AM 20,480 CLICONFG.EXE 08/04/2004 06:00 AM 24,576 CLICONFG.RLL 08/04/2004 06:00 AM 102,912 CLIPBRD.EXE 08/04/2004 06:00 AM 33,280 CLIPSRV.EXE 08/04/2004 06:00 AM 57,856 CLUSAPI.DLL 08/04/2004 06:00 AM 15,872 CMCFG32.DLL 08/04/2004 06:00 AM 388,608 CMD.EXE 08/04/2004 06:00 AM 343,040 CMDIAL32.DLL 08/04/2004 06:00 AM 47,104 CMDL32.EXE 08/04/2004 06:00 AM 61,172 CMMGR32.HLP 08/04/2004 06:00 AM 39,936 CMMON32.EXE 08/04/2004 06:00 AM 64 CMOS.RAM 08/04/2004 06:00 AM 14,336 CMPBK32.DLL 08/04/2004 06:00 AM 185,344 CMPROPS.DLL 08/04/2004 06:00 AM 13,824 cmsetACL.dll 08/04/2004 06:00 AM 63,488 CMSTP.EXE 08/04/2004 06:00 AM 39,936 CMUTIL.DLL 08/04/2004 06:00 AM 47,104 CNBJMON.DLL 08/04/2004 06:00 AM 32,768 CNETCFG.DLL 07/30/2003 01:00 AM 107,008 CNMLM58.DLL 07/30/2003 01:00 AM 6,656 CNMVS58.DLL 08/04/2004 06:00 AM 26,624 CNVFAT.DLL 07/26/2005 12:39 AM 60,416 colbact.dll 10/21/2005 04:02 AM Com 08/04/2004 06:00 AM 25,600 COMADDIN.DLL 08/04/2004 06:00 AM 3,584 COMCAT.DLL 08/04/2004 06:00 AM 611,328 COMCTL32.DLL 01/12/1998 04:00 AM 224,256 COMCTL32.OCA 11/21/2003 05:05 PM 608,448 comctl32.ocx 08/04/2004 06:00 AM 276,992 COMDLG32.DLL 01/12/1998 04:00 AM 35,328 COMDLG32.OCA 05/22/2000 04:58 PM 140,488 comdlg32.ocx 08/04/2004 06:00 AM 10,544 COMM.DRV 08/04/2004 06:00 AM 50,620 COMMAND.COM 08/04/2004 06:00 AM 32,816 COMMDLG.DLL 08/04/2004 06:00 AM 15,872 COMP.EXE 08/04/2004 06:00 AM 17,408 COMPACT.EXE 08/04/2004 06:00 AM 252,928 compatUI.dll 08/04/2004 06:00 AM 38,302 COMPMGMT.MSC 08/04/2004 06:00 AM 30,160 COMPOBJ.DLL 08/04/2004 06:00 AM 229,376 COMPSTUI.DLL 07/26/2005 12:39 AM 97,792 comrepl.dll 08/04/2004 06:00 AM 792,064 COMRES.DLL 08/04/2004 06:00 AM 147,456 COMSNAP.DLL 07/26/2005 12:39 AM 1,267,200 comsvcs.dll 07/26/2005 12:39 AM 540,160 comuid.dll 11/28/2004 12:02 AM CONFIG 08/10/2004 02:04 PM 2,577 CONFIG.NT 08/04/2004 06:00 AM 345,600 CONFMSP.DLL 08/04/2004 06:00 AM 27,648 CONIME.EXE 08/04/2004 06:00 AM 66,560 CONSOLE.DLL 08/04/2004 06:00 AM 8,192 CONTROL.EXE 08/04/2004 06:00 AM 13,824 CONVERT.EXE 08/04/2004 06:00 AM 35,328 CORPOL.DLL 08/04/2004 06:00 AM 27,097 COUNTRY.SYS 08/04/2004 06:00 AM 163,840 CREDUI.DLL 08/04/2004 06:00 AM 149,019 CRTDLL.DLL 08/04/2004 06:00 AM 597,504 CRYPT32.DLL 08/04/2004 06:00 AM 74,752 CRYPTDLG.DLL 08/04/2004 06:00 AM 33,280 CRYPTDLL.DLL 08/04/2004 06:00 AM 53,760 CRYPTEXT.DLL 08/04/2004 06:00 AM 63,488 CRYPTNET.DLL 08/04/2004 06:00 AM 60,416 CRYPTSVC.DLL 08/04/2004 06:00 AM 512,512 CRYPTUI.DLL 08/04/2004 06:00 AM 101,888 CSCDLL.DLL 08/04/2004 06:00 AM 98,304 CSCRIPT.EXE 08/04/2004 06:00 AM 326,656 CSCUI.DLL 08/04/2004 06:00 AM 32,768 CSRSRV.DLL 08/04/2004 06:00 AM 6,144 CSRSS.EXE 08/04/2004 06:00 AM 73,728 CSSEQCHK.DLL 08/04/2004 06:00 AM 15,360 CTFMON.EXE 08/04/2004 06:00 AM 27,136 CTL3D32.DLL 08/04/2004 06:00 AM 27,200 CTL3DV2.DLL 08/04/2004 06:00 AM 8,386 CTYPE.NLS 08/04/2004 06:00 AM 66,082 C_037.NLS 08/04/2004 06:00 AM 66,082 C_10000.NLS 08/04/2004 06:00 AM 66,082 C_10006.NLS 08/04/2004 06:00 AM 66,082 C_10007.NLS 08/04/2004 06:00 AM 66,082 C_10010.NLS 08/04/2004 06:00 AM 66,082 C_10017.NLS 08/04/2004 06:00 AM 66,082 C_10029.NLS 08/04/2004 06:00 AM 66,082 C_10079.NLS 08/04/2004 06:00 AM 66,082 C_10081.NLS 08/04/2004 06:00 AM 66,082 C_10082.NLS 08/04/2004 06:00 AM 66,082 C_1026.NLS 08/04/2004 06:00 AM 66,082 C_1250.NLS 08/04/2004 06:00 AM 66,082 C_1251.NLS 08/04/2004 06:00 AM 66,082 C_1252.NLS 08/04/2004 06:00 AM 66,082 C_1253.NLS 08/04/2004 06:00 AM 66,082 C_1254.NLS 08/04/2004 06:00 AM 66,082 C_1255.NLS 08/04/2004 06:00 AM 66,082 C_1256.NLS 08/04/2004 06:00 AM 66,082 C_1257.NLS 08/04/2004 06:00 AM 66,082 C_1258.NLS 08/04/2004 06:00 AM 66,082 C_20127.NLS 08/04/2004 06:00 AM 139,810 C_20261.NLS 08/04/2004 06:00 AM 66,082 C_20866.NLS 08/04/2004 06:00 AM 66,082 C_20905.NLS 08/04/2004 06:00 AM 66,082 C_21866.NLS 08/04/2004 06:00 AM 66,082 C_28591.NLS 08/04/2004 06:00 AM 66,082 C_28592.NLS 08/04/2004 06:00 AM 66,082 C_28593.NLS 08/04/2004 06:00 AM 66,082 C_28594.NLS 08/04/2004 06:00 AM 66,082 C_28595.NLS 08/04/2004 06:00 AM 66,082 C_28597.NLS 08/04/2004 06:00 AM 66,082 C_28598.NLS 08/04/2004 06:00 AM 66,082 C_28599.NLS 08/04/2004 06:00 AM 66,082 C_28603.NLS 08/04/2004 06:00 AM 66,082 C_28605.NLS 08/04/2004 06:00 AM 66,594 C_437.NLS 08/04/2004 06:00 AM 66,082 C_500.NLS 08/04/2004 06:00 AM 66,594 C_737.NLS 08/04/2004 06:00 AM 66,594 C_775.NLS 08/04/2004 06:00 AM 66,594 C_850.NLS 08/04/2004 06:00 AM 66,594 C_852.NLS 08/04/2004 06:00 AM 66,594 C_855.NLS 08/04/2004 06:00 AM 66,594 C_857.NLS 08/04/2004 06:00 AM 66,594 C_860.NLS 08/04/2004 06:00 AM 66,594 C_861.NLS 08/04/2004 06:00 AM 66,594 C_863.NLS 08/04/2004 06:00 AM 66,594 C_865.NLS 08/04/2004 06:00 AM 66,594 C_866.NLS 08/04/2004 06:00 AM 66,594 C_869.NLS 08/04/2004 06:00 AM 66,594 C_874.NLS 08/04/2004 06:00 AM 66,082 C_875.NLS 08/04/2004 06:00 AM 162,850 C_932.NLS 08/04/2004 06:00 AM 196,642 C_936.NLS 08/04/2004 06:00 AM 196,642 C_949.NLS 08/04/2004 06:00 AM 196,642 C_950.NLS 08/04/2004 06:00 AM 1,179,648 D3D8.DLL 08/04/2004 06:00 AM 8,192 D3D8THK.DLL 08/04/2004 06:00 AM 1,689,088 D3D9.DLL 08/04/2004 06:00 AM 436,224 D3DIM.DLL 08/04/2004 06:00 AM 825,344 D3DIM700.DLL 08/04/2004 06:00 AM 34,816 D3DPMESH.DLL 08/04/2004 06:00 AM 590,336 D3DRAMP.DLL 08/04/2004 06:00 AM 350,208 D3DRM.DLL 08/04/2004 06:00 AM 47,616 D3DXOF.DLL 06/23/2006 07:02 AM 1,054,208 danim.dll 06/14/2004 02:26 PM 19,033 DANTIV~1.CFG DAntivirus.cfg 08/04/2004 06:00 AM 54,272 DATACLEN.DLL 08/04/2004 06:00 AM 152,064 DATIME.DLL 08/04/2004 06:00 AM 24,576 DAVCLNT.DLL 08/04/2004 06:00 AM 153,088 DAXCTLE.OCX 08/04/2004 06:00 AM 847,872 DBGENG.DLL 08/04/2004 06:00 AM 640,000 DBGHELP.DLL 08/04/2004 06:00 AM 24,576 DBMSRPCN.DLL 08/04/2004 06:00 AM 110,592 DBNETLIB.DLL 08/04/2004 06:00 AM 28,672 DBNMPNTW.DLL 08/04/2004 06:00 AM 1,788 Dcache.bin 08/04/2004 06:00 AM 8,704 DCIMAN32.DLL 08/04/2004 06:00 AM 5,120 DCOMCNFG.EXE 06/08/1998 04:44 PM 183,296 DDAO36.DLL 08/04/2004 06:00 AM 39,424 DDEML.DLL 08/04/2004 06:00 AM 30,208 DDESHARE.EXE 06/09/2004 10:29 AM 6,977 DDMI2.sys 02/07/2005 08:07 PM 4,608 DDMI64.sys 08/04/2004 06:00 AM 266,240 DDRAW.DLL 08/04/2004 06:00 AM 27,136 DDRAWEX.DLL 08/04/2004 06:00 AM 20,634 DEBUG.EXE 08/04/2004 06:00 AM 25,088 DEFRAG.EXE 05/27/2004 09:23 AM 96,310 DELLWALL.BMP 08/04/2004 06:00 AM 135,168 DESK.CPL 08/04/2004 06:00 AM 16,384 DESKADP.DLL 08/04/2004 06:00 AM 16,896 DESKMON.DLL 08/04/2004 06:00 AM 18,432 DESKPERF.DLL 08/04/2004 06:00 AM 2 DESKTOP.INI 08/04/2004 06:00 AM 59,904 DEVENUM.DLL 08/04/2004 06:00 AM 33,079 DEVMGMT.MSC 08/04/2004 06:00 AM 282,624 DEVMGR.DLL 08/04/2004 06:00 AM 41,397 DFRG.MSC 08/04/2004 06:00 AM 82,432 DFRGFAT.EXE 08/04/2004 06:00 AM 104,960 DFRGNTFS.EXE 08/04/2004 06:00 AM 51,200 DFRGRES.DLL 08/04/2004 06:00 AM 38,912 DFRGSNAP.DLL 08/04/2004 06:00 AM 123,904 DFRGUI.DLL 08/04/2004 06:00 AM 28,672 DFSSHLEX.DLL 08/04/2004 06:00 AM 111,104 DGNET.DLL 08/04/2004 06:00 AM 176,157 DGRPSETU.DLL 08/04/2004 06:00 AM 85,020 DGSETUP.DLL 10/08/2004 07:27 PM DHCP 05/19/2006 08:59 AM 111,616 dhcpcsvc.dll 08/04/2004 06:00 AM 370,176 DHCPMON.DLL 08/04/2004 06:00 AM 74,240 DHCPSAPI.DLL 08/04/2004 06:00 AM 394,240 DIACTFRM.DLL 08/04/2004 06:00 AM 85,504 DIANTZ.EXE 08/04/2004 06:00 AM 68,608 DIGEST.DLL 08/04/2004 06:00 AM 44,032 DIMAP.DLL 08/04/2004 06:00 AM 159,232 DINPUT.DLL 08/04/2004 06:00 AM 181,760 DINPUT8.DLL 10/08/2004 07:28 PM DirectX 08/04/2004 06:00 AM 9,216 DISKCOMP.COM 08/04/2004 06:00 AM 7,168 DISKCOPY.COM 08/04/2004 06:00 AM 1,501,696 DISKCOPY.DLL 08/04/2004 06:00 AM 33,673 DISKMGMT.MSC 08/04/2004 06:00 AM 163,840 DISKPART.EXE 08/04/2004 06:00 AM 17,920 DISKPERF.EXE 08/04/2004 06:00 AM 45,083 DISPEX.DLL 03/12/2005 06:39 PM dla 08/04/2004 06:00 AM 5,120 DLLHOST.EXE 08/04/2004 06:00 AM 4,608 DLLHST3G.EXE 06/09/2004 03:31 PM 6,144 DLPT.sys 03/13/2005 05:54 PM 6,656 DLPT2.sys 02/09/2005 02:08 PM 7,168 DLPT64.sys 08/04/2004 06:00 AM 224,768 DMADMIN.EXE 08/04/2004 06:00 AM 28,672 DMBAND.DLL 08/04/2004 06:00 AM 61,440 DMCOMPOS.DLL 08/04/2004 06:00 AM 330,752 DMCONFIG.DLL 08/04/2004 06:00 AM 273,920 DMDLGS.DLL 08/04/2004 06:00 AM 200,704 DMDSKMGR.DLL 08/04/2004 06:00 AM 118,784 DMDSKRES.DLL 08/04/2004 06:00 AM 181,248 DMIME.DLL 08/04/2004 06:00 AM 18,432 DMINTF.DLL 08/04/2004 06:00 AM 35,840 DMLOADER.DLL 08/04/2004 06:00 AM 19,456 DMOCX.DLL 08/04/2004 06:00 AM 15,872 DMREMOTE.EXE 08/04/2004 06:00 AM 82,432 DMSCRIPT.DLL 08/04/2004 06:00 AM 23,552 DMSERVER.DLL 08/04/2004 06:00 AM 105,984 DMSTYLE.DLL 08/04/2004 06:00 AM 103,424 DMSYNTH.DLL 08/04/2004 06:00 AM 104,448 DMUSIC.DLL 08/04/2004 06:00 AM 52,224 DMUTIL.DLL 08/04/2004 06:00 AM 61,440 DMVIEW.OCX 06/26/2006 01:37 PM 148,480 dnsapi.dll 08/04/2004 06:00 AM 45,568 DNSRSLVR.DLL 08/04/2004 06:00 AM 46,080 DOCPROP.DLL 08/04/2004 06:00 AM 48,128 DOCPROP2.DLL 08/04/2004 06:00 AM 10,752 DOSKEY.EXE 08/04/2004 06:00 AM 53,840 DOSX.EXE 08/04/2004 06:00 AM 97,280 DPCDLL.DLL 08/04/2004 06:00 AM 33,040 DPLAY.DLL 08/04/2004 06:00 AM 30,208 DPLAYSVR.EXE 08/04/2004 06:00 AM 229,888 DPLAYX.DLL 08/04/2004 06:00 AM 23,552 DPMODEMX.DLL 08/04/2004 06:00 AM 3,584 DPNADDR.DLL 08/04/2004 06:00 AM 375,296 DPNET.DLL 08/04/2004 06:00 AM 35,328 DPNHPAST.DLL 08/04/2004 06:00 AM 60,928 DPNHUPNP.DLL 08/04/2004 06:00 AM 3,584 DPNLOBBY.DLL 08/04/2004 06:00 AM 62,464 DPNMODEM.DLL 08/04/2004 06:00 AM 18,432 DPNSVR.EXE 08/04/2004 06:00 AM 61,952 DPNWSOCK.DLL 08/04/2004 06:00 AM 53,520 DPSERIAL.DLL 08/04/2004 06:00 AM 21,504 DPVACM.DLL 08/04/2004 06:00 AM 212,480 DPVOICE.DLL 08/04/2004 06:00 AM 83,456 DPVSETUP.EXE 08/04/2004 06:00 AM 116,736 DPVVOX.DLL 08/04/2004 06:00 AM 42,768 DPWSOCK.DLL 08/04/2004 06:00 AM 57,344 DPWSOCKX.DLL 09/18/2006 08:36 PM DRIVERS 08/04/2004 06:00 AM 299,520 DRMCLIEN.DLL 08/04/2004 06:00 AM 87,040 DRMSTOR.DLL 08/04/2004 06:00 AM 695,296 DRMV2CLT.DLL 08/04/2004 06:00 AM 14,336 DRPROV.DLL 08/04/2004 06:00 AM 28,112 DRWATSON.EXE 08/04/2004 06:00 AM 45,568 DRWTSN32.EXE 08/04/2004 06:00 AM 4,656 ds16gt.dLL 08/04/2004 06:00 AM 16,384 DS32GT.DLL 08/04/2004 06:00 AM 62,976 DSAUTH.DLL 08/04/2004 06:00 AM 181,760 DSDMO.DLL 08/04/2004 06:00 AM 71,680 DSDMOPRP.DLL 08/04/2004 06:00 AM 92,672 DSKQUOTA.DLL 08/04/2004 06:00 AM 144,384 DSKQUOUI.DLL 11/19/2004 10:00 AM 49,152 DSndUp.exe 08/04/2004 06:00 AM 367,616 DSOUND.DLL 08/04/2004 06:00 AM 81 DSOUND.VXD 08/04/2004 06:00 AM 1,294,336 DSOUND3D.DLL 08/04/2004 06:00 AM 142,336 DSPROP.DLL 08/04/2004 06:00 AM 4,096 DSPRPRES.DLL 08/04/2004 06:00 AM 239,104 DSQUERY.DLL 05/26/2004 04:20 PM 40 DSRIRREM.CFG 05/26/2004 04:09 PM 24,576 DSRIRREM.EXE 05/24/2004 04:16 PM 1,488 DSR_BAT.BAT 08/04/2004 06:00 AM 218,003 DSSEC.DAT 08/04/2004 06:00 AM 51,200 DSSEC.DLL 08/04/2004 06:00 AM 137,216 DSSENH.DLL 08/04/2004 06:00 AM 113,152 DSUIEXT.DLL 08/04/2004 06:00 AM 19,456 DSWAVE.DLL 08/04/2004 06:00 AM 10,752 DUMPREP.EXE 08/04/2004 06:00 AM 304,128 DUSER.DLL 08/04/2004 06:00 AM 55,296 DVDPLAY.EXE 08/04/2004 06:00 AM 17,920 DVDUPGRD.EXE 08/04/2004 06:00 AM 180,224 DWWIN.EXE 08/04/2004 06:00 AM 619,008 DX7VB.DLL 08/04/2004 06:00 AM 1,227,264 DX8VB.DLL 08/04/2004 06:00 AM 1,298,432 DXDIAG.EXE 08/04/2004 06:00 AM 2,113,536 DXDIAGN.DLL 08/04/2004 06:00 AM 498,205 DXMASF.DLL 06/23/2006 07:02 AM 357,888 dxtmsft.dll 06/23/2006 07:02 AM 205,312 dxtrans.dll 06/27/2002 07:53 AM 5,110 e100b325.din 02/18/2004 06:40 PM 12,288 e100bmsg.dll 09/23/2004 07:55 AM 311,296 Edcrypt.dll 08/04/2004 06:00 AM 69,886 EDIT.COM 08/04/2004 06:00 AM 10,790 EDIT.HLP 08/04/2004 06:00 AM 12,642 EDLIN.EXE 08/04/2004 06:00 AM 127,213 EGA.CPI 08/04/2004 06:00 AM 183,296 ELS.DLL 11/23/1998 02:12 AM 186,368 EMDAZ32.DLL 03/27/1998 05:20 PM 55,296 EMLCNS32.DLL 08/10/2004 02:02 PM 21,640 EMPTYR~1.DAT emptyregdb.dat 08/04/2004 06:00 AM 20,480 ENCAPI.DLL 08/04/2004 06:00 AM 186,368 ENCDEC.DLL 08/04/2004 06:00 AM 103,424 EqnClass.Dll 08/04/2004 06:00 AM 23,040 ERSVC.DLL 07/26/2005 12:39 AM 243,200 es.dll 10/20/2005 06:20 PM 1,082,368 esent.dll 08/04/2004 06:00 AM 1,114,896 ESENT97.DLL 08/04/2004 06:00 AM 17,408 ESENTPRF.DLL 08/04/2004 06:00 AM 6,708 ESENTPRF.HXX 08/04/2004 06:00 AM 1,015,477 ESENTPRF.INI 08/04/2004 06:00 AM 39,424 ESENTUTL.EXE 08/04/2004 06:00 AM 193,024 EUDCEDIT.EXE 08/04/2004 06:00 AM 47,723 EULA.TXT 08/04/2004 06:00 AM 33,280 EVENTCLS.DLL 08/04/2004 06:00 AM 55,808 EVENTLOG.DLL 08/04/2004 06:00 AM 8,704 EVENTVWR.EXE 08/04/2004 06:00 AM 56,678 EVENTVWR.MSC 08/04/2004 06:00 AM 8,424 EXE2BIN.EXE 08/04/2004 06:00 AM 15,872 EXPAND.EXE 10/08/2004 07:27 PM EXPORT 08/04/2004 06:00 AM 380,957 EXPSRV.DLL 02/16/1999 03:38 PM 38,912 EXSEC32.DLL 06/23/2006 07:02 AM 55,808 extmgr.dll 08/04/2004 06:00 AM 45,568 EXTRAC32.EXE 08/04/2004 06:00 AM 121,856 EXTS.DLL 08/04/2004 06:00 AM 882 FASTOPEN.EXE 08/04/2004 06:00 AM 80,384 FAULTREP.DLL 08/04/2004 06:00 AM 14,848 FC.EXE 08/04/2004 06:00 AM 21,504 FECLIENT.DLL 08/04/2004 06:00 AM 337,920 FILEMGMT.DLL 08/04/2004 06:00 AM 9,216 FIND.EXE 08/04/2004 06:00 AM 27,136 FINDSTR.EXE 08/04/2004 06:00 AM 9,216 FINGER.EXE 08/04/2004 06:00 AM 80,384 FIREWALL.CPL 08/04/2004 06:00 AM 3,072 FIXMAPI.EXE 08/04/2004 06:00 AM 87,552 FLDRCLNR.DLL 08/21/2006 08:21 AM 16,896 fltlib.dll 08/21/2006 05:14 AM 23,040 fltmc.exe 03/17/2005 05:39 PM 1,146,320 FM20.DLL 07/14/2003 07:57 PM 32,584 FM20ENU.DLL 08/04/2004 06:00 AM 16,384 FMIFS.DLL 08/11/2006 09:45 PM 325,112 FNTCACHE.DAT 08/04/2004 06:00 AM 382,976 FONTEXT.DLL 10/17/2005 05:14 PM 80,896 fontsub.dll 08/04/2004 06:00 AM 20,992 FONTVIEW.EXE 08/04/2004 06:00 AM 7,168 FORCEDOS.EXE 08/04/2004 06:00 AM 25,600 FORMAT.COM 08/04/2004 06:00 AM 9,344 FRAMEBUF.DLL 08/04/2004 06:00 AM 55,296 FREECELL.EXE 08/04/2004 06:00 AM 32,760 FSMGMT.MSC 08/04/2004 06:00 AM 193,024 FSQUIRT.EXE 08/04/2004 06:00 AM 81,408 FSUSD.DLL 08/04/2004 06:00 AM 56,320 FSUTIL.EXE 08/04/2004 06:00 AM 42,496 FTP.EXE 08/04/2004 06:00 AM 176,128 FTSRCH.DLL 08/04/2004 06:00 AM 60,416 FWCFG.DLL 02/11/2004 03:05 AM 126,976 FXAB32.DLL 02/11/2004 03:01 AM 421,888 Fxdb.dll 08/04/2004 06:00 AM 452,096 FXSAPI.DLL 08/04/2004 06:00 AM 111,104 FXSCFGWZ.DLL 08/04/2004 06:00 AM 143,360 FXSCLNT.EXE 08/04/2004 06:00 AM 132,608 fxsclntR.dll 08/04/2004 06:00 AM 72,192 FXSCOM.DLL 08/04/2004 06:00 AM 285,184 FXSCOMEX.DLL 08/04/2004 06:00 AM 1,361 FXSCOUNT.H 08/04/2004 06:00 AM 229,376 FXSCOVER.EXE 08/04/2004 06:00 AM 27,136 FXSDRV.DLL 08/04/2004 06:00 AM 55,296 FXSEVENT.DLL 08/04/2004 06:00 AM 23,552 FXSEXT32.DLL 08/04/2004 06:00 AM 23,552 FXSMON.DLL 08/04/2004 06:00 AM 8,704 FXSPERF.DLL 08/04/2004 06:00 AM 1,793 FXSPERF.INI 08/04/2004 06:00 AM 6,656 FXSRES.DLL 08/04/2004 06:00 AM 31,744 FXSROUTE.DLL 08/04/2004 06:00 AM 11,264 FXSSEND.EXE 08/04/2004 06:00 AM 562,176 FXSST.DLL 08/04/2004 06:00 AM 267,776 FXSSVC.EXE 08/04/2004 06:00 AM 246,272 FXST30.DLL 08/04/2004 06:00 AM 397,312 FXSTIFF.DLL 09/18/2006 06:07 PM FxsTmp 08/04/2004 06:00 AM 154,112 FXSUI.DLL 08/04/2004 06:00 AM 192,512 FXSWZRD.DLL 08/04/2004 06:00 AM 400,384 FXSXP32.DLL 08/04/2004 06:00 AM 41,472 G711CODC.AX 08/04/2004 06:00 AM 24,006 GB2312.UCE 11/15/2005 01:12 PM 126,680 GCCOLL~1.DLL GCCollection.dll 08/04/2004 06:00 AM 76,800 GCDEF.DLL 04/21/2005 06:46 PM 10,752 GCMD5Q~1.DLL gcmd5query.dll 02/10/2005 10:01 PM 328,128 GCTYPL~1.TLB gcTypLibA.tlb 11/15/2005 01:12 PM 95,448 GCUNCO~1.DLL gcUnCompress.dll 08/04/2004 06:00 AM 24,576 GDI.EXE 12/28/2005 10:54 PM 280,064 gdi32.dll 05/30/2003 02:46 PM 1,706,800 gdiplus.dll 05/31/2005 11:20 AM 79,432 GEARAspi.dll 08/04/2004 06:00 AM 24,772 GEO.NLS 08/04/2004 06:00 AM 605,696 GETUNAME.DLL 08/04/2004 06:00 AM 285,184 GLMF32.DLL 08/04/2004 06:00 AM 122,880 GLU32.DLL 02/08/2005 02:04 PM 5,632 GPCIEn64.sys 06/17/2004 12:56 PM 7,626 GPCIEnu.sys 02/08/2005 01:37 PM 7,626 GPCIEnum.sys 08/04/2004 06:00 AM 101,888 GPKCSP.DLL 08/04/2004 06:00 AM 9,728 GPKRSRC.DLL 08/04/2004 06:00 AM 26,112 GRAFTABL.COM 08/04/2004 06:00 AM 19,694 GRAPHICS.COM 08/04/2004 06:00 AM 21,232 GRAPHICS.PRO 08/04/2004 06:00 AM 39,424 GRPCONV.EXE 02/15/2006 05:49 PM 1,099 GTDOWN~1.INF gtdownde_110.inf 11/25/2004 03:15 PM 184,320 GTDOWN~2.OCX gtdownde_110.ocx 02/08/2005 04:46 PM 5,120 GTKCMO64.sys 06/15/2004 04:55 PM 7,882 GTKCMOS.sys 01/28/2005 03:37 PM 23,304 GWFSPI~1.DLL GWFSPidGen.DLL 08/04/2004 06:00 AM 265,728 H323.TSP 08/10/2004 02:00 PM 0 H323LOG.TXT 08/04/2004 06:00 AM 614,912 H323MSP.DLL 08/04/2004 06:00 AM 131,968 HAL.DLL 11/15/2005 01:12 PM 117,976 hashlib.dll 08/04/2004 06:00 AM 7,168 HCCOIN.DLL 09/20/2005 10:31 AM 73,728 hccutils.dll 08/04/2004 06:00 AM 155,136 HDWWIZ.CPL 08/04/2004 06:00 AM 14,848 HELP.EXE 07/14/2006 11:25 AM 546,304 hhctrl.ocx 05/26/2005 10:04 PM 41,472 hhsetup.dll 08/04/2004 06:00 AM 20,992 HID.DLL 08/04/2004 06:00 AM 29,696 HIDPHONE.TSP 08/04/2004 06:00 AM 4,768 HIMEM.SYS 09/20/2005 10:32 AM 77,824 hkcmd.exe 07/21/2006 04:24 AM 72,704 hlink.dll 08/04/2004 06:00 AM 344,064 HNETCFG.DLL 08/04/2004 06:00 AM 14,848 HNETMON.DLL 08/04/2004 06:00 AM 330,752 HNETWIZ.DLL 08/04/2004 06:00 AM 929 HOMEPAGE.INF 08/04/2004 06:00 AM 7,680 HOSTNAME.EXE 08/04/2004 06:00 AM 144,896 HOTPLUG.DLL 07/11/2002 08:06 AM 208,896 hpzcoi06.dll 07/11/2002 08:06 AM 270,336 hpzcon06.dll 07/11/2002 08:06 AM 147,512 hpzlnt06.dll 10/23/2003 04:01 PM 32,218 HSFCI008.dll 08/04/2004 06:00 AM 44,544 HTICONS.DLL 08/04/2004 06:00 AM 423,936 HTML.IEC 08/04/2004 06:00 AM 24,576 HTTPAPI.DLL 08/04/2004 06:00 AM 41,984 HTUI.DLL 11/17/2004 01:41 PM 347,136 hypertrm.dll 08/04/2004 06:00 AM 199,680 IAC25_32.AX 02/10/2004 01:10 PM 61,440 IALMCO~1.DLL iAlmCoIn_v3762.dll 08/20/2004 02:11 PM 61,440 IALMCO~2.DLL iAlmCoIn_v3889.dll 09/20/2005 10:52 AM 61,440 IALMCO~3.DLL iAlmCoIn_v4396.dll 09/20/2005 10:59 AM 900,218 ialmdd5.dll 09/20/2005 10:52 AM 213,274 ialmdev5.dll 09/20/2005 10:52 AM 118,395 ialmdnt5.dll 08/20/2004 02:10 PM 495,616 ialmgdev.dll 08/20/2004 02:09 PM 2,289,664 ialmgicd.dll 09/20/2005 10:52 AM 49,152 ialmrem.dll 09/20/2005 10:52 AM 36,990 ialmrnt5.dll 09/20/2005 10:37 AM 40,960 ialmuARA.dll 09/20/2005 10:37 AM 40,960 ialmuARB.dll 09/20/2005 10:37 AM 40,960 ialmuCHS.dll 09/20/2005 10:37 AM 40,960 ialmuCHT.dll 09/20/2005 10:37 AM 40,960 ialmuCSY.dll 09/20/2005 10:37 AM 40,960 ialmuDAN.dll 09/20/2005 10:37 AM 40,960 ialmuDEU.dll 09/20/2005 10:37 AM 114,688 ialmudlg.exe 09/20/2005 10:37 AM 40,960 ialmuELL.dll 09/20/2005 10:37 AM 40,960 ialmuENG.dll 09/20/2005 10:37 AM 40,960 ialmuESP.dll 09/20/2005 10:37 AM 40,960 ialmuFIN.dll 09/20/2005 10:37 AM 40,960 ialmuFRA.dll 09/20/2005 10:37 AM 40,960 ialmuFRC.dll 09/20/2005 10:37 AM 40,960 ialmuHEB.dll 09/20/2005 10:37 AM 40,960 ialmuHUN.dll 09/20/2005 10:37 AM 40,960 ialmuITA.dll 09/20/2005 10:37 AM 40,960 ialmuJPN.dll 09/20/2005 10:37 AM 40,960 ialmuKOR.dll 09/20/2005 10:37 AM 40,960 ialmuNLD.dll 09/20/2005 10:37 AM 40,960 ialmuNOR.dll 09/20/2005 10:37 AM 40,960 ialmuPLK.dll 09/20/2005 10:37 AM 40,960 ialmuPTB.dll 09/20/2005 10:37 AM 40,960 ialmuPTG.dll 09/20/2005 10:37 AM 40,960 ialmuRUS.dll 09/20/2005 10:37 AM 40,960 ialmuSVE.dll 09/20/2005 10:37 AM 40,960 ialmuTHA.dll 09/20/2005 10:37 AM 40,960 ialmuTRK.dll 10/08/2004 07:27 PM IAS 08/04/2004 06:00 AM 23,552 IASACCT.DLL 08/04/2004 06:00 AM 41,472 IASADS.DLL 08/04/2004 06:00 AM 32,256 IASHLPR.DLL 08/04/2004 06:00 AM 62,464 IASNAP.DLL 08/04/2004 06:00 AM 17,920 IASPOLCY.DLL 08/04/2004 06:00 AM 119,808 IASRAD.DLL 08/04/2004 06:00 AM 141,312 IASRECST.DLL 08/04/2004 06:00 AM 86,528 IASSAM.DLL 08/04/2004 06:00 AM 247,808 IASSDO.DLL 08/04/2004 06:00 AM 59,392 IASSVCS.DLL 08/04/2004 06:00 AM 11,264 ICAAPI.DLL 08/04/2004 06:00 AM 80,384 ICCVID.DLL 08/04/2004 06:00 AM 16,384 ICFGNT5.DLL 06/28/2005 09:46 PM 254,976 icm32.dll 08/04/2004 06:00 AM 3,584 ICMP.DLL 08/04/2004 06:00 AM 54,784 ICMUI.DLL 10/08/2004 07:27 PM ICSXML 08/04/2004 06:00 AM 73,728 ICWDIAL.DLL 08/04/2004 06:00 AM 65,536 ICWPHBK.DLL 08/04/2004 06:00 AM 60,458 IDEOGRAF.UCE 08/04/2004 06:00 AM 120,832 IDQ.DLL 08/04/2004 06:00 AM 34,304 IE4UINIT.EXE 08/04/2004 06:00 AM 139,264 IEAKENG.DLL 08/04/2004 06:00 AM 216,576 IEAKSIE.DLL 08/04/2004 06:00 AM 221,184 IEAKUI.DLL 08/04/2004 06:00 AM 323,584 IEDKCS32.DLL 08/04/2004 06:00 AM 81,920 IEENCODE.DLL 06/23/2006 07:02 AM 251,392 iepeers.dll 08/04/2004 06:00 AM 48,640 IERNONCE.DLL 08/04/2004 06:00 AM 62,976 IESETUP.DLL 08/04/2004 06:00 AM 23,024 IEUINIT.INF 08/04/2004 06:00 AM 114,688 IEXPRESS.EXE 08/04/2004 06:00 AM 135,680 IFMON.DLL 08/04/2004 06:00 AM 70,656 IFSUTIL.DLL 09/20/2005 10:35 AM 446,464 igfxcfg.exe 09/20/2005 10:35 AM 77,824 igfxcpl.cpl 09/20/2005 10:31 AM 135,168 igfxdev.dll 09/20/2005 10:32 AM 86,016 igfxdo.dll 09/20/2005 10:36 AM 40,960 igfxexps.dll 09/20/2005 10:36 AM 94,208 igfxext.exe 08/20/2004 01:56 PM 57,741 igfxhchs.lhp 08/20/2004 01:56 PM 58,790 igfxhcht.lhp 08/20/2004 01:56 PM 61,538 igfxhdeu.lhp 08/20/2004 01:56 PM 57,151 igfxhenu.lhp 08/20/2004 01:56 PM 60,185 igfxhesp.lhp 08/20/2004 01:56 PM 59,701 igfxhfra.lhp 08/20/2004 01:56 PM 59,323 igfxhita.lhp 08/20/2004 01:56 PM 62,266 igfxhjpn.lhp 08/20/2004 01:56 PM 65,335 igfxhkor.lhp 08/20/2004 01:56 PM 61,138 igfxhptb.lhp 08/20/2004 01:56 PM 62,231 igfxhtha.lhp 09/20/2005 10:36 AM 114,688 igfxpers.exe 09/20/2005 10:35 AM 147,456 igfxpph.dll 09/20/2005 10:36 AM 122,880 igfxrara.lrc 09/20/2005 10:36 AM 81,920 igfxrchs.lrc 09/20/2005 10:36 AM 81,920 igfxrcht.lrc 09/20/2005 10:36 AM 139,264 igfxrcsy.lrc 09/20/2005 10:36 AM 139,264 igfxrdan.lrc 09/20/2005 10:36 AM 155,648 igfxrdeu.lrc 09/20/2005 10:36 AM 155,648 igfxrell.lrc 09/20/2005 10:31 AM 135,168 igfxrenu.lrc 09/20/2005 10:31 AM 135,168 igfxres.dll 09/20/2005 10:36 AM 151,552 igfxresp.lrc 09/20/2005 10:35 AM 1,503,232 igfxress.dll 09/20/2005 10:36 AM 139,264 igfxrfin.lrc 09/20/2005 10:36 AM 147,456 igfxrfra.lrc 09/20/2005 10:36 AM 122,880 igfxrheb.lrc 09/20/2005 10:36 AM 147,456 igfxrhun.lrc 09/20/2005 10:36 AM 151,552 igfxrita.lrc 09/20/2005 10:36 AM 98,304 igfxrjpn.lrc 09/20/2005 10:36 AM 98,304 igfxrkor.lrc 09/20/2005 10:36 AM 151,552 igfxrnld.lrc 09/20/2005 10:36 AM 139,264 igfxrnor.lrc 09/20/2005 10:36 AM 143,360 igfxrplk.lrc 09/20/2005 10:36 AM 143,360 igfxrptb.lrc 09/20/2005 10:36 AM 143,360 igfxrptg.lrc 09/20/2005 10:36 AM 143,360 igfxrrus.lrc 09/20/2005 10:36 AM 139,264 igfxrsve.lrc 09/20/2005 10:36 AM 126,976 igfxrtha.lrc 09/20/2005 10:36 AM 139,264 igfxrtrk.lrc 09/20/2005 10:32 AM 57,344 igfxsrvc.dll 09/20/2005 10:32 AM 159,744 igfxsrvc.exe 09/20/2005 10:35 AM 94,208 igfxtray.exe 09/20/2005 10:36 AM 114,688 igfxzoom.exe 09/20/2005 10:44 AM 524,288 igldev32.dll 09/20/2005 10:43 AM 2,310,144 iglicd32.dll 08/04/2004 06:00 AM 8,192 IGMPAGNT.DLL 09/20/2005 10:26 AM 524,850 igxpxa32.cpa 09/20/2005 10:26 AM 929 igxpxa32.vp 09/20/2005 10:26 AM 58,704 igxpxk32.vp 09/20/2005 11:14 AM 24,736 igxpxs32.vp 08/04/2004 06:00 AM 81,920 ILS.DLL 08/04/2004 06:00 AM 16,384 IMAADP32.ACM 08/04/2004 06:00 AM 144,384 IMAGEHLP.DLL 08/04/2004 06:00 AM 150,016 IMAPI.EXE 10/08/2004 07:27 PM IME 10/18/2005 01:56 PM 94,720 imekr61.ime 08/04/2004 06:00 AM 36,921 IMESHARE.DLL 08/04/2004 06:00 AM 35,840 IMGUTIL.DLL 08/04/2004 06:00 AM 340,023 imjp81.ime 08/04/2004 06:00 AM 811,064 imjp81k.dll 08/04/2004 06:00 AM 110,080 IMM32.DLL 08/04/2004 06:00 AM 274,432 INETCFG.DLL 07/27/2006 09:24 AM 679,424 inetcomm.dll 08/04/2004 06:00 AM 358,400 INETCPL.CPL 08/04/2004 06:00 AM 110,592 INETCPLC.DLL 08/04/2004 06:00 AM 33,280 INETMIB1.DLL 08/04/2004 06:00 AM 75,264 INETPP.DLL 08/04/2004 06:00 AM 15,872 INETPPUI.DLL 08/04/2004 06:00 AM 48,128 INETRES.DLL 10/08/2004 07:27 PM INETSRV 09/01/1999 01:04 PM 49,152 inetwh32.dll 08/04/2004 06:00 AM 450,560 INFOSOFT.DLL 08/04/2004 06:00 AM 147,456 INITPKI.DLL 08/21/2002 06:10 AM 204,800 INKED.DLL 08/04/2004 06:00 AM 123,392 INPUT.DLL 06/23/2006 07:02 AM 96,256 inseng.dll 08/04/2004 06:00 AM 956,990 INSTCAT.SQL 07/28/2003 07:55 AM 24,064 IntelNic.dll 08/04/2004 06:00 AM 129,536 INTL.CPL 08/04/2004 06:00 AM 30,720 IOLOGMSG.DLL 08/04/2004 06:00 AM 17,408 IPCONF.TSP 08/04/2004 06:00 AM 55,808 IPCONFIG.EXE 05/19/2006 08:59 AM 94,720 iphlpapi.dll 08/04/2004 06:00 AM 154,112 IPMONTR.DLL 08/04/2004 06:00 AM 331,264 IPNATHLP.DLL 08/04/2004 06:00 AM 330,752 IPPROMON.DLL 08/04/2004 06:00 AM 3,584 IPROP.DLL 08/04/2004 06:00 AM 4,096 IPRTPRIO.DLL 08/04/2004 06:00 AM 169,984 IPRTRMGR.DLL 08/04/2004 06:00 AM 44,032 IPSEC6.EXE 08/04/2004 06:00 AM 349,696 IPSECSNP.DLL 08/04/2004 06:00 AM 182,784 IPSECSVC.DLL 08/04/2004 06:00 AM 384,000 IPSMSNAP.DLL 08/04/2004 06:00 AM 53,248 IPV6.EXE 08/04/2004 06:00 AM 59,904 IPV6MON.DLL 08/04/2004 06:00 AM 83,968 IPXMONTR.DLL 08/04/2004 06:00 AM 69,120 IPXPROMN.DLL 08/04/2004 06:00 AM 21,504 IPXRIP.DLL 08/04/2004 06:00 AM 23,552 IPXROUTE.EXE 08/04/2004 06:00 AM 39,936 IPXRTMGR.DLL 08/04/2004 06:00 AM 66,560 IPXSAP.DLL 08/04/2004 06:00 AM 20,992 IPXWAN.DLL 08/04/2004 06:00 AM 199,168 IR32_32.DLL 08/04/2004 06:00 AM 848,384 IR41_32.AX 08/04/2004 06:00 AM 120,320 IR41_QC.DLL 08/04/2004 06:00 AM 338,432 IR41_QCX.DLL 08/04/2004 06:00 AM 755,200 IR50_32.DLL 08/04/2004 06:00 AM 200,192 IR50_QC.DLL 08/04/2004 06:00 AM 183,808 IR50_QCX.DLL 08/04/2004 06:00 AM 13,312 IRCLASS.DLL 08/04/2004 06:00 AM 380,416 IRPROPS.CPL 08/04/2004 06:00 AM 81,920 ISIGN32.DLL 08/04/2004 06:00 AM 32,768 ISRDBG32.DLL 05/26/2005 10:04 PM 155,136 itircl.dll 05/26/2005 10:04 PM 137,216 itss.dll 05/26/2005 04:16 AM 198,424 iuengine.dll 08/04/2004 06:00 AM 154,624 IVFSRC.AX 08/04/2004 06:00 AM 54,272 IXSSO.DLL 08/04/2004 06:00 AM 47,616 IYUV_32.DLL 10/02/2003 06:36 PM 294,912 JASCPA~1.SCR Jasc Paint Shop Photo Album.scr 11/10/2005 12:27 PM 49,248 java.exe 11/10/2005 12:27 PM 49,250 javaw.exe 11/10/2005 02:03 PM 127,078 javaws.exe 08/04/2004 06:00 AM 362,496 JET500.DLL 08/09/2003 06:36 PM 44,544 JGAW400.DLL 06/01/2006 02:47 PM 163,840 jgdw400.dll 08/09/2003 06:36 PM 35,840 JGMD400.DLL
06/01/2006 02:47 PM 27,648 jgpl400.dll 08/09/2003 06:36 PM 45,568 JGSD400.DLL 08/09/2003 06:36 PM 65,536 JGSH400.DLL 08/04/2004 06:00 AM 47,952 JOBEXEC.DLL 08/04/2004 06:00 AM 68,608 JOY.CPL 11/10/2005 02:03 PM 49,265 jpicpl32.cpl 05/18/2006 01:24 AM 450,560 jscript.dll 06/23/2006 07:02 AM 16,384 jsproxy.dll 10/08/2004 07:52 PM 2,978 JUPDAT~1.LOG jupdate-1.4.2_03-b02.log 02/15/2006 05:52 PM 6,675 JUPDAT~2.LOG jupdate-1.5.0_06-b05.log 08/04/2004 06:00 AM 6,948 KANJI_1.UCE 08/04/2004 06:00 AM 8,484 KANJI_2.UCE 09/21/2006 09:59 PM KASPER~1 Kaspersky Lab 08/04/2004 06:00 AM 14,710 KB16.COM 08/17/2001 03:55 PM 6,144 kbd101b.dll 08/17/2001 03:55 PM 6,144 kbd101c.dll 08/17/2001 03:55 PM 5,632 kbd103.dll 08/17/2001 03:55 PM 6,144 kbd106.dll 08/04/2004 06:00 AM 6,656 KBDAL.DLL 08/04/2004 06:00 AM 5,632 KBDAZE.DLL 08/04/2004 06:00 AM 5,632 KBDAZEL.DLL 08/04/2004 06:00 AM 6,144 KBDBE.DLL 08/04/2004 06:00 AM 6,144 KBDBENE.DLL 08/04/2004 06:00 AM 5,632 KBDBLR.DLL 08/04/2004 06:00 AM 6,144 KBDBR.DLL 08/04/2004 06:00 AM 5,632 KBDBU.DLL 08/04/2004 06:00 AM 6,144 KBDCA.DLL 08/04/2004 06:00 AM 7,680 KBDCAN.DLL 08/04/2004 06:00 AM 6,656 KBDCR.DLL 08/04/2004 06:00 AM 7,168 KBDCZ.DLL 08/04/2004 06:00 AM 6,656 KBDCZ1.DLL 08/04/2004 06:00 AM 6,656 KBDCZ2.DLL 08/04/2004 06:00 AM 6,144 KBDDA.DLL 08/04/2004 06:00 AM 5,120 KBDDV.DLL 08/04/2004 06:00 AM 6,144 KBDES.DLL 08/04/2004 06:00 AM 6,144 KBDEST.DLL 08/04/2004 06:00 AM 6,144 KBDFC.DLL 08/04/2004 06:00 AM 6,144 KBDFI.DLL 08/04/2004 06:00 AM 7,168 KBDFI1.DLL 08/04/2004 06:00 AM 6,144 KBDFO.DLL 08/04/2004 06:00 AM 6,144 KBDFR.DLL 08/04/2004 06:00 AM 5,632 KBDGAE.DLL 08/04/2004 06:00 AM 6,144 KBDGKL.DLL 08/04/2004 06:00 AM 6,144 KBDGR.DLL 08/04/2004 06:00 AM 6,144 KBDGR1.DLL 08/04/2004 06:00 AM 5,632 KBDHE.DLL 08/04/2004 06:00 AM 5,632 KBDHE220.DLL 08/04/2004 06:00 AM 5,632 KBDHE319.DLL 08/04/2004 06:00 AM 6,144 KBDHELA2.DLL 08/04/2004 06:00 AM 6,656 KBDHELA3.DLL 08/04/2004 06:00 AM 8,192 KBDHEPT.DLL 08/04/2004 06:00 AM 6,656 KBDHU.DLL 08/04/2004 06:00 AM 5,632 KBDHU1.DLL 08/04/2004 06:00 AM 6,144 KBDIC.DLL 08/04/2004 06:00 AM 6,144 KBDINBE1.DLL 08/04/2004 06:00 AM 6,656 KBDINBEN.DLL 08/04/2004 06:00 AM 6,656 KBDINMAL.DLL 08/04/2004 06:00 AM 5,632 KBDIR.DLL 08/04/2004 06:00 AM 5,632 KBDIT.DLL 08/04/2004 06:00 AM 5,632 KBDIT142.DLL 08/17/2001 11:36 PM 8,704 kbdjpn.dll 08/04/2004 06:00 AM 5,632 KBDKAZ.DLL 08/17/2001 11:36 PM 8,192 kbdkor.dll 08/04/2004 06:00 AM 5,632 KBDKYR.DLL 08/04/2004 06:00 AM 6,656 KBDLA.DLL 08/04/2004 06:00 AM 5,632 KBDLT.DLL 08/04/2004 06:00 AM 5,632 KBDLT1.DLL 08/04/2004 06:00 AM 6,144 KBDLV.DLL 08/04/2004 06:00 AM 6,144 KBDLV1.DLL 08/04/2004 06:00 AM 6,144 KBDMAC.DLL 08/04/2004 06:00 AM 5,632 KBDMAORI.DLL 08/04/2004 06:00 AM 6,144 KBDMLT47.DLL 08/04/2004 06:00 AM 6,144 KBDMLT48.DLL 08/04/2004 06:00 AM 5,632 KBDMON.DLL 08/04/2004 06:00 AM 6,144 KBDNE.DLL 08/04/2004 06:00 AM 7,168 KBDNEC.DLL 08/04/2004 06:00 AM 6,144 KBDNO.DLL 08/04/2004 06:00 AM 7,168 KBDNO1.DLL 08/04/2004 06:00 AM 6,656 KBDPL.DLL 08/04/2004 06:00 AM 5,632 KBDPL1.DLL 08/04/2004 06:00 AM 6,144 KBDPO.DLL 08/04/2004 06:00 AM 5,632 KBDRO.DLL 08/04/2004 06:00 AM 5,632 KBDRU.DLL 08/04/2004 06:00 AM 5,632 KBDRU1.DLL 08/04/2004 06:00 AM 6,144 KBDSF.DLL 08/04/2004 06:00 AM 6,656 KBDSG.DLL 08/04/2004 06:00 AM 6,656 KBDSL.DLL 08/04/2004 06:00 AM 6,656 KBDSL1.DLL 08/04/2004 06:00 AM 7,680 KBDSMSFI.DLL 08/04/2004 06:00 AM 7,680 KBDSMSNO.DLL 08/04/2004 06:00 AM 6,144 KBDSP.DLL 08/04/2004 06:00 AM 6,144 KBDSW.DLL 08/04/2004 06:00 AM 5,632 KBDTAT.DLL 08/04/2004 06:00 AM 6,144 KBDTUF.DLL 08/04/2004 06:00 AM 6,144 KBDTUQ.DLL 08/04/2004 06:00 AM 5,632 KBDUK.DLL 08/04/2004 06:00 AM 7,168 KBDUKX.DLL 08/04/2004 06:00 AM 5,632 KBDUR.DLL 08/04/2004 06:00 AM 5,632 KBDUS.DLL 08/04/2004 06:00 AM 6,144 KBDUSL.DLL 08/04/2004 06:00 AM 6,144 KBDUSR.DLL 08/04/2004 06:00 AM 6,144 KBDUSX.DLL 08/04/2004 06:00 AM 5,632 KBDUZB.DLL 08/04/2004 06:00 AM 5,632 KBDYCC.DLL 08/04/2004 06:00 AM 6,656 KBDYCL.DLL 08/04/2004 06:00 AM 7,424 KD1394.DLL 08/04/2004 06:00 AM 7,040 KDCOM.DLL 06/15/2005 01:49 PM 295,936 kerberos.dll 07/05/2006 06:55 AM 984,064 kernel32.dll 08/04/2004 06:00 AM 42,809 KEY01.SYS 08/04/2004 06:00 AM 2,000 KEYBOARD.DRV 08/04/2004 06:00 AM 42,537 KEYBOARD.SYS 08/04/2004 06:00 AM 150,528 KEYMGR.DLL 08/04/2004 06:00 AM 33,280 KMDDSP.TSP 08/04/2004 06:00 AM 12,876 KOREAN.UCE 08/04/2004 06:00 AM 92,224 KRNL386.EXE 08/04/2004 12:56 AM 130,048 ksproxy.ax 08/04/2004 12:56 AM 4,096 ksuser.dll 04/03/2002 03:37 PM 290,816 L3CODECA.ACM 08/04/2004 06:00 AM 83,456 L3CODECX.AX 08/04/2004 06:00 AM 9,728 LABEL.EXE 08/04/2004 06:00 AM 89,600 LANGWRBK.DLL 08/04/2004 06:00 AM 221,600 LANMAN.DRV 08/04/2004 06:00 AM 6,656 LAPRXY.DLL 06/19/2006 04:19 PM 571,184 LEGITC~1.DLL LegitCheckControl.dll 05/14/2004 05:53 PM 57,344 lfbmp13n.dll 05/14/2004 05:53 PM 401,408 lfcmp13n.dll 11/04/2003 04:10 PM 69,632 lfgif13n.dll 06/18/2006 05:54 PM 796,584 LIBEAY~1.DLL libeay32_0.9.6l.dll 08/04/2004 06:00 AM 423,936 LICDLL.DLL 08/04/2004 06:00 AM 22,016 LICMGR10.DLL 08/04/2004 06:00 AM 58,880 LICWMI.DLL 08/04/2004 06:00 AM 29,696 LIGHTS.EXE 08/31/2005 09:41 PM 19,968 linkinfo.dll 08/04/2004 06:00 AM 13,824 LMHSVC.DLL 08/04/2004 06:00 AM 399,872 LMRT.DLL 08/04/2004 06:00 AM 25,088 LNKSTUB.EXE 08/04/2004 06:00 AM 1,131 LOADFIX.COM 08/04/2004 06:00 AM 97,280 LOADPERF.DLL 11/15/2005 01:29 PM 83,696 loc32vc0.dll 08/04/2004 06:00 AM 249,270 LOCALE.NLS 08/04/2004 06:00 AM 221,696 LOCALSEC.DLL 08/04/2004 06:00 AM 341,504 LOCALSPL.DLL 08/04/2004 06:00 AM 11,776 LOCALUI.DLL 08/04/2004 06:00 AM 75,264 LOCATOR.EXE 08/04/2004 06:00 AM 5,120 LODCTR.EXE 08/04/2004 06:00 AM 103,936 LOGAGENT.EXE 08/04/2004 06:00 AM 50,176 LOGHOURS.DLL 08/04/2004 06:00 AM 59,392 LOGMAN.EXE 08/04/2004 06:00 AM 15,360 LOGOFF.EXE 08/04/2004 06:00 AM 220,672 LOGON.SCR 08/04/2004 06:00 AM 514,560 LOGONUI.EXE 08/04/2004 06:00 AM 22,016 LPK.DLL 08/04/2004 06:00 AM 6,144 LPQ.EXE 08/04/2004 06:00 AM 8,192 LPR.EXE 08/04/2004 06:00 AM 10,240 LPRHELP.DLL 08/04/2004 06:00 AM 9,216 LPRMONUI.DLL 08/10/2004 11:11 AM 22,486 LRNXP.ICO 10/27/2004 09:21 PM 721,920 lsasrv.dll 08/04/2004 06:00 AM 13,312 LSASS.EXE 05/14/2004 05:53 PM 299,008 ltdis13n.dll 01/12/2004 03:09 AM 206,336 ltefx13n.dll 05/14/2004 05:53 PM 163,840 ltfil13n.dll 05/14/2004 05:53 PM 450,560 ltimg13n.dll 05/14/2004 05:53 PM 462,848 ltkrn13n.dll 02/22/2005 06:57 PM 75 LuResult.txt 08/04/2004 06:00 AM 42,166 LUSRMGR.MSC 08/04/2004 06:00 AM 2,560 LZ32.DLL 08/04/2004 06:00 AM 9,936 LZEXPAND.DLL 08/04/2004 06:00 AM 168 L_EXCEPT.NLS 08/04/2004 06:00 AM 7,046 L_INTL.NLS 10/08/2004 07:28 PM Macromed 08/04/2004 06:00 AM 72,704 MAGNIFY.EXE 08/04/2004 06:00 AM 8,192 MAG_HOOK.DLL 08/04/2004 06:00 AM 187,904 MAIN.CPL 08/04/2004 06:00 AM 85,504 MAKECAB.EXE 10/01/1998 12:00 PM 520,128 MAPI.DLL 08/04/2004 06:00 AM 112,128 MAPI32.DLL 10/01/1998 12:00 PM 40,208 MAPISRVR.EXE 08/04/2004 06:00 AM 112,128 MAPISTUB.DLL 08/10/2004 02:01 PM 535 MAPISVC.INF 08/04/2004 06:00 AM 14,848 MCASTMIB.DLL 08/04/2004 06:00 AM 10,240 MCD32.DLL 08/04/2004 06:00 AM 10,496 MCDSRV32.DLL 08/04/2004 06:00 AM 4,608 MCHGRCOI.DLL 08/04/2004 06:00 AM 73,376 MCIAVI.DRV 08/04/2004 06:00 AM 84,480 MCIAVI32.DLL 08/04/2004 06:00 AM 17,408 MCICDA.DLL 08/04/2004 06:00 AM 8,192 MCIOLE16.DLL 08/04/2004 06:00 AM 7,680 MCIOLE32.DLL 08/04/2004 06:00 AM 35,328 MCIQTZ32.DLL 08/04/2004 06:00 AM 23,040 MCISEQ.DLL 08/04/2004 06:00 AM 25,264 MCISEQ.DRV 08/04/2004 06:00 AM 23,552 MCIWAVE.DLL 08/04/2004 06:00 AM 28,160 MCIWAVE.DRV 08/04/2004 06:00 AM 50,176 MDHCP.DLL 06/18/2003 06:31 PM 17,920 mdimon.dll 08/04/2004 06:00 AM 118,272 MDMINST.DLL 04/09/2003 03:01 PM 90,112 mdmxsdk.dll 03/03/1999 11:05 AM 81,920 MDT2FW95.DLL 08/04/2004 06:00 AM 147,968 MDWMDMSP.DLL 08/04/2004 06:00 AM 39,274 MEM.EXE 08/04/2004 06:00 AM 39,936 MF3216.DLL 08/04/2004 06:00 AM 924,432 MFC40.DLL 08/04/2004 06:00 AM 924,432 MFC40U.DLL 08/04/2004 06:00 AM 1,028,096 MFC42.DLL 06/17/1998 04:08 PM 53,248 MFC42ENU.DLL 08/04/2004 06:00 AM 1,024,000 MFC42U.DLL 11/21/2003 05:05 PM 974,848 mfc70.dll 11/21/2003 05:05 PM 964,608 mfc70u.dll 07/06/2005 05:17 PM 1,060,864 mfc71.dll 03/18/2003 10:12 PM 1,047,552 mfc71u.dll 01/01/2003 01:05 PM 133,904 MFCANS32.DLL 08/04/2004 06:00 AM 22,528 MFCSUBS.DLL 01/01/2003 01:05 PM 5,632 mfcuia32.dll 08/04/2004 06:00 AM 14,848 MGMTAPI.DLL 08/04/2004 06:00 AM 46,258 MIB.BIN 08/04/2004 06:00 AM 18,944 MIDIMAP.DLL 08/04/2004 06:00 AM 60,928 MIGLIBNT.DLL 08/04/2004 06:00 AM 51,712 MIGPWD.EXE 08/04/2004 06:00 AM 18,944 MIMEFILT.DLL 08/04/2004 06:00 AM 673,088 MLANG.DAT 08/04/2004 06:00 AM 586,240 MLANG.DLL 08/04/2004 06:00 AM 3,584 MLL_HP.DLL 08/04/2004 06:00 AM 7,680 MLL_MTF.DLL 08/04/2004 06:00 AM 5,632 MLL_QIC.DLL 08/04/2004 06:00 AM 815,104 MMC.EXE 08/04/2004 06:00 AM 70,656 MMCBASE.DLL 08/04/2004 06:00 AM 1,192,960 MMCNDMGR.DLL 08/04/2004 06:00 AM 50,688 MMCSHEXT.DLL 08/04/2004 06:00 AM 1,490 MMDRIVER.INF 08/04/2004 06:00 AM 12,288 MMDRV.DLL 08/04/2004 06:00 AM 17,408 MMFUTIL.DLL 08/04/2004 06:00 AM 618,496 MMSYS.CPL 08/04/2004 06:00 AM 68,768 MMSYSTEM.DLL 08/04/2004 06:00 AM 1,152 MMTASK.TSK 08/04/2004 06:00 AM 119,808 MMUTILSE.DLL 08/04/2004 06:00 AM 34,560 MNMDD.DLL 08/04/2004 06:00 AM 32,768 MNMSRVC.EXE 08/04/2004 06:00 AM 207,360 MOBSYNC.DLL 08/04/2004 06:00 AM 143,360 MOBSYNC.EXE 08/04/2004 06:00 AM 19,456 MODE.COM 08/04/2004 06:00 AM 153,600 MODEMUI.DLL 08/04/2004 06:00 AM 10,112 MODEX.DLL 08/04/2004 06:00 AM 15,872 MORE.COM 08/04/2004 06:00 AM 216,064 MORICONS.DLL 08/04/2004 06:00 AM 8,192 MOUNTVOL.EXE 08/04/2004 06:00 AM 2,032 MOUSE.DRV 08/04/2004 06:00 AM 310,272 MP43DMOD.DLL 08/04/2004 06:00 AM 384,512 MP4SDMOD.DLL 08/04/2004 06:00 AM 118,272 MPEG2D~1.AX mpeg2data.ax 08/04/2004 06:00 AM 148,992 MPG2SPLT.AX 08/04/2004 06:00 AM 240,640 MPG4DMOD.DLL 08/04/2004 06:00 AM 262,144 MPG4DS32.AX 08/04/2004 06:00 AM 123,392 MPLAY32.EXE 08/04/2004 06:00 AM 22,016 MPNOTIFY.EXE 08/04/2004 06:00 AM 59,904 MPR.DLL 08/04/2004 06:00 AM 87,040 MPRAPI.DLL 08/04/2004 06:00 AM 69,120 MPRDDM.DLL 08/04/2004 06:00 AM 49,152 MPRDIM.DLL 08/04/2004 06:00 AM 99,840 MPRMSG.DLL 08/04/2004 06:00 AM 47,104 MPRUI.DLL 08/04/2004 06:00 AM 12,800 MRINFO.EXE 09/11/2006 01:37 PM 8,960,936 MRT.exe 06/16/2005 04:01 AM 1,386 MRT.INI 03/10/1999 06:36 PM 111,616 MSAAP.XLA 08/04/2004 06:00 AM 102,912 MSAATEXT.DLL 08/04/2004 06:00 AM 61,168 MSACM.DLL 08/04/2004 06:00 AM 71,680 MSACM32.DLL 08/04/2004 06:00 AM 20,480 MSACM32.DRV 08/04/2004 06:00 AM 221,184 MSADDS32.AX 08/18/1998 03:24 PM 118,064 MSADODC.OCX 08/04/2004 06:00 AM 14,848 MSADP32.ACM 08/04/2004 06:00 AM 3,584 MSAFD.DLL 08/04/2004 06:00 AM 86,016 MSAPSSPC.DLL 08/04/2004 06:00 AM 57,344 MSASN1.DLL 08/04/2004 06:00 AM 294,912 MSAUD32.ACM 08/04/2004 06:00 AM 65,024 MSAUDITE.DLL 08/04/2004 06:00 AM 7,168 MSCAT32.DLL 08/04/2004 06:00 AM 817 MSCDEXNT.EXE 06/28/2005 09:46 PM 74,240 mscms.dll 05/22/2000 04:58 PM 647,872 mscomct2.ocx 03/09/2004 02:00 AM 1,081,616 MSCOMCTL.OCX 08/04/2004 06:00 AM 69,632 MSCONF.DLL 07/15/2004 01:24 AM 155,648 MSCOREE.DLL 07/15/2004 12:34 AM 16,896 MSCORIER.DLL 02/20/2003 08:09 PM 106,496 MSCORIES.DLL 08/04/2004 06:00 AM 12,288 mscpx32r.dLL 08/04/2004 06:00 AM 36,864 mscpxl32.dLL 08/04/2004 06:00 AM 294,400 MSCTF.DLL 08/04/2004 06:00 AM 177,152 MSCTFIME.IME 08/04/2004 06:00 AM 69,120 MSCTFP.DLL 08/04/2004 06:00 AM 118,784 MSDADIAG.DLL 08/04/2004 06:00 AM 151,552 MSDART.DLL 10/13/1998 02:38 PM 260,920 MSDATGRD.OCX 08/04/2004 06:00 AM 12,288 MSDATSRC.TLB 08/04/2004 06:00 AM 14,336 MSDMO.DLL 10/08/2004 07:28 PM MsDtc 08/04/2004 06:00 AM 6,144 MSDTC.EXE 08/04/2004 06:00 AM 58,880 MSDTCLOG.DLL 08/04/2004 06:00 AM 768 MSDTCPRF.H 08/04/2004 06:00 AM 1,931 MSDTCPRF.INI 03/01/2006 03:42 PM 426,496 msdtcprx.dll 03/01/2006 03:42 PM 956,416 msdtctm.dll 03/01/2006 03:42 PM 161,280 msdtcuiu.dll 08/04/2004 06:00 AM 844,314 MSDXM.OCX 08/04/2004 06:00 AM 4,126 MSDXMLC.DLL 08/04/2004 06:00 AM 94,282 MSENCODE.DLL 08/04/2004 06:00 AM 512,029 MSEXCH40.DLL 08/04/2004 06:00 AM 319,517 MSEXCL40.DLL 08/04/2004 06:00 AM 537,088 MSFTEDIT.DLL 08/04/2004 06:00 AM 20,992 MSG.EXE 08/04/2004 06:00 AM 9,216 MSG711.ACM 08/04/2004 06:00 AM 118,784 MSG723.ACM 08/04/2004 06:00 AM 994,304 MSGINA.DLL 08/04/2004 06:00 AM 19,968 MSGSM32.ACM 08/04/2004 06:00 AM 33,792 MSGSVC.DLL 11/15/2005 01:29 PM 46,896 msgsys.dll 08/04/2004 06:00 AM 188,416 MSH261.DRV 08/04/2004 06:00 AM 294,912 MSH263.DRV 08/04/2004 06:00 AM 126,976 MSHEARTS.EXE 08/04/2004 06:00 AM 29,184 MSHTA.EXE 07/28/2006 07:28 AM 3,054,080 mshtml.dll 08/04/2004 06:00 AM 1,351,168 MSHTML.TLB 06/23/2006 07:02 AM 448,512 mshtmled.dll 08/04/2004 06:00 AM 56,832 MSHTMLER.DLL 05/04/2005 02:45 PM 2,890,240 msi.dll 08/04/2004 06:00 AM 51,712 MSIDENT.DLL 08/04/2004 06:00 AM 6,656 MSIDLE.DLL 08/04/2004 06:00 AM 14,848 MSIDNTLD.DLL 08/04/2004 06:00 AM 248,832 MSIEFTP.DLL 03/21/2005 03:00 PM 78,848 msiexec.exe 03/21/2005 03:00 PM 271,360 msihnd.dll 08/04/2004 06:00 AM 4,608 MSIMG32.DLL 07/10/1997 07:00 PM 14,336 MSIMRT.DLL 07/10/1997 07:00 PM 10,544 MSIMRT16.DLL 07/10/1997 07:00 PM 22,016 MSIMRT32.DLL 03/21/2005 03:00 PM 884,736 msimsg.dll 08/04/2004 06:00 AM 159,232 MSIMTF.DLL 07/10/1997 07:00 PM 120,320 MSIMUSIC.DLL 05/22/2000 01:00 AM 115,920 MSINET.OCX 03/21/2005 03:00 PM 15,360 msisip.dll 08/04/2004 06:00 AM 1,507,356 MSJET40.DLL 08/04/2004 06:00 AM 358,976 MSJETO~1.DLL msjetoledb40.dll 08/04/2004 06:00 AM 151,583 MSJINT40.DLL 08/04/2004 06:00 AM 53,279 MSJTER40.DLL 08/04/2004 06:00 AM 241,693 MSJTES40.DLL 08/04/2004 06:00 AM 25,088 MSLBUI.DLL 03/23/1998 01:05 PM 91,136 MSLS2.DLL 08/04/2004 06:00 AM 146,432 MSLS31.DLL 08/04/2004 06:00 AM 213,023 MSLTUS40.DLL 08/04/2004 06:00 AM 259,072 MSNETOBJ.DLL 08/04/2004 06:00 AM 290,816 MSNSSPC.DLL 08/04/2004 06:00 AM 33,280 MSOBJS.DLL 08/04/2004 06:00 AM 252,928 MSOEACCT.DLL 08/04/2004 06:00 AM 105,984 MSOERT2.DLL 08/04/2004 06:00 AM 20,480 MSORC32R.DLL 08/04/2004 06:00 AM 143,360 MSORCL32.DLL 08/04/2004 06:00 AM 343,040 MSPAINT.EXE 08/04/2004 06:00 AM 30,208 MSPATCHA.DLL 08/04/2004 06:00 AM 348,189 MSPBDE40.DLL 11/26/2002 08:03 PM 52,224 mspmsnsv.dll 11/26/2002 08:03 PM 201,728 mspmsp.dll 08/04/2004 06:00 AM 41,984 MSPORTS.DLL 08/04/2004 06:00 AM 48,128 MSPRIVS.DLL 08/04/2004 06:00 AM 69,632 MSR2C.DLL 08/04/2004 06:00 AM 7,168 MSR2CENU.DLL 08/04/2004 06:00 AM 60,416 MSRATELC.DLL 06/23/2006 07:02 AM 146,432 msrating.dll 08/04/2004 06:00 AM 73,802 MSRCLR40.DLL 08/04/2004 06:00 AM 421,919 MSRD2X40.DLL 08/04/2004 06:00 AM 315,423 MSRD3X40.DLL 05/11/2000 02:06 PM 397,312 MSRDO20.DLL 08/04/2004 06:00 AM 28,746 MSRECR40.DLL 08/04/2004 06:00 AM 552,989 MSREPL40.DLL 08/04/2004 06:00 AM 11,264 MSRLE32.DLL 01/22/1999 02:46 PM 65,536 MSRTEDIT.DLL 08/04/2004 06:00 AM 134,656 MSSAP.DLL 08/04/2004 06:00 AM 69,632 MSSCDS32.AX 12/11/2002 08:09 PM 358,912 MSSCP.dll 08/04/2004 06:00 AM 102,400 MSSCRIPT.OCX 08/04/2004 06:00 AM 35,840 MSSIGN32.DLL 08/04/2004 06:00 AM 4,608 MSSIP32.DLL 05/23/2000 07:45 PM 118,784 MSSTDFMT.DLL 04/03/2000 06:52 PM 94,208 msstkprp.dll 08/04/2004 06:00 AM 13,312 MSSWCH.DLL 08/04/2004 06:00 AM 6,656 MSSWCHX.EXE 08/04/2004 06:00 AM 274,944 MSTASK.DLL 08/04/2004 06:00 AM 258,077 MSTEXT40.DLL 06/23/2006 07:02 AM 532,480 mstime.dll 08/04/2004 06:00 AM 12,288 MSTINIT.EXE 08/04/2004 06:00 AM 115,712 MSTLSAPI.DLL 08/04/2004 06:00 AM 407,552 MSTSC.EXE 08/04/2004 06:00 AM 655,360 MSTSCAX.DLL 08/04/2004 06:00 AM 195,072 MSUTB.DLL 08/04/2004 06:00 AM 129,536 MSV1_0.DLL 08/04/2004 06:00 AM 1,355,776 MSVBVM50.DLL 08/04/2004 06:00 AM 1,392,671 MSVBVM60.DLL 11/21/2003 05:05 PM 54,784 msvci70.dll 08/04/2004 06:00 AM 54,784 MSVCIRT.DLL 08/04/2004 06:00 AM 565,760 MSVCP50.DLL 08/04/2004 06:00 AM 413,696 MSVCP60.DLL 11/21/2003 05:05 PM 487,424 msvcp70.dll 09/18/2003 01:41 PM 499,712 msvcp71.dll 11/21/2003 05:05 PM 344,064 msvcr70.dll 02/25/2004 01:05 PM 348,160 msvcr71.dll 08/04/2004 06:00 AM 343,040 MSVCRT.DLL 08/04/2004 06:00 AM 253,952 MSVCRT20.DLL 08/04/2004 06:00 AM 61,440 MSVCRT40.DLL 08/04/2004 06:00 AM 120,832 MSVFW32.DLL 08/04/2004 06:00 AM 25,600 MSVIDC32.DLL 08/04/2004 06:00 AM 1,428,480 MSVIDCTL.DLL 08/04/2004 06:00 AM 126,912 MSVIDEO.DLL 08/04/2004 06:00 AM 72,704 MSW3PRT.DLL 08/04/2004 06:00 AM 831,519 MSWDAT10.DLL 08/04/2004 06:00 AM 204,288 MSWEBDVD.DLL 11/26/2002 09:03 PM 245,760 MSWMDM.dll 08/04/2004 06:00 AM 245,248 MSWSOCK.DLL 08/04/2004 06:00 AM 614,429 MSWSTR10.DLL 08/04/2004 06:00 AM 348,189 MSXBDE40.DLL 08/04/2004 06:00 AM 506,368 MSXML.DLL 08/04/2004 06:00 AM 701,440 MSXML2.DLL 08/04/2004 06:00 AM 37,916 MSXML2R.DLL 01/25/2005 08:33 AM 1,049,088 msxml3.dll 02/10/2005 09:04 PM 44,032 msxml3r.dll 08/04/2004 06:00 AM 26,624 MSXMLR.DLL 08/04/2004 06:00 AM 17,408 MSYUV.DLL 03/01/2006 03:42 PM 66,560 mtxclu.dll 08/04/2004 06:00 AM 20,480 MTXDM.DLL 08/04/2004 06:00 AM 4,096 MTXEX.DLL 08/04/2004 06:00 AM 25,088 MTXLEGIH.DLL 03/01/2006 03:42 PM 91,136 mtxoci.dll 10/08/2004 07:27 PM MUI 08/04/2004 06:00 AM 90,112 MYCOMPUT.DLL 08/04/2004 06:00 AM 90,624 MYDOCS.DLL 08/04/2004 06:00 AM 53,760 NARRATOR.EXE 08/04/2004 06:00 AM 35,840 NARRHOOK.DLL 05/27/2006 04:06 PM 43,760 NavLogon.dll 08/04/2004 06:00 AM 20,480 NBTSTAT.EXE 08/04/2004 06:00 AM 36,352 NCOBJAPI.DLL 08/04/2004 06:00 AM 35,840 NCPA.CPL 08/04/2004 06:00 AM 7,680 NCXPNT.DLL 08/04/2004 06:00 AM 17,920 NDDEAPI.DLL 08/04/2004 06:00 AM 4,096 NDDEAPIR.EXE 08/04/2004 06:00 AM 18,944 NDDENB32.DLL 08/04/2004 06:00 AM 56,832 NDPTSP.TSP 08/04/2004 06:00 AM 42,496 NET.EXE 08/04/2004 06:00 AM 102,446 NET.HLP 08/04/2004 06:00 AM 124,928 NET1.EXE 08/04/2004 06:00 AM 108,464 NETAPI.DLL 07/14/2006 11:31 AM 332,288 netapi32.dll 08/04/2004 06:00 AM 622,080 NETCFGX.DLL 08/04/2004 06:00 AM 111,104 NETDDE.EXE 08/04/2004 06:00 AM 214,016 NETEVENT.DLL 02/20/2003 08:16 PM 32,768 NETFXP~1.DLL netfxperf.dll 08/04/2004 06:00 AM 253,952 NETH.DLL 08/04/2004 06:00 AM 139,264 NETID.DLL 08/04/2004 06:00 AM 407,040 NETLOGON.DLL 08/22/2005 02:29 PM 197,632 netman.dll 08/04/2004 06:00 AM 171,008 NETMSG.DLL 08/04/2004 06:00 AM 875,008 NETPLWIZ.DLL 08/04/2004 06:00 AM 12,288 NETRAP.DLL 08/04/2004 06:00 AM 25,600 NETSETUP.CPL 08/04/2004 06:00 AM 329,728 NETSETUP.EXE 08/04/2004 06:00 AM 86,016 NETSH.EXE 08/04/2004 06:00 AM 1,708,032 NETSHELL.DLL 08/04/2004 06:00 AM 36,864 NETSTAT.EXE 08/04/2004 06:00 AM 80,896 NETUI0.DLL 08/04/2004 06:00 AM 245,760 NETUI1.DLL 08/04/2004 06:00 AM 308,224 NETUI2.DLL 08/04/2004 06:00 AM 248,832 NEWDEV.DLL 08/04/2004 06:00 AM 103,936 NLHTML.DLL 08/04/2004 06:00 AM 7,052 NLSFUNC.EXE 08/04/2004 06:00 AM 12,288 NMEVTMSG.DLL 08/04/2004 06:00 AM 28,672 NMMKCERT.DLL 08/04/2004 06:00 AM 1,696 NOISE.CHS 08/04/2004 06:00 AM 1,696 NOISE.CHT 08/04/2004 06:00 AM 741 NOISE.DAT 08/04/2004 06:00 AM 149,848 NOISE.DEU 08/04/2004 06:00 AM 751 NOISE.ENG 08/04/2004 06:00 AM 751 NOISE.ENU 08/04/2004 06:00 AM 19,684 NOISE.ESN 08/04/2004 06:00 AM 49,196 NOISE.FRA 08/04/2004 06:00 AM 19,618 NOISE.ITA 08/04/2004 06:00 AM 13,256 NOISE.NLD 08/04/2004 06:00 AM 13,730 NOISE.SVE 08/04/2004 06:00 AM 697 NOISE.THA 08/04/2004 06:00 AM 69,120 NOTEPAD.EXE 10/08/2004 07:27 PM NPP 08/04/2004 06:00 AM 54,784 NPPTOOLS.DLL 03/02/2001 09:52 PM 8,704 npwmsdrm.dll 08/10/2004 02:04 PM 23,392 NSCOMPAT.TLB 08/04/2004 06:00 AM 76,800 NSLOOKUP.EXE 08/04/2004 06:00 AM 708,096 NTDLL.DLL 08/04/2004 06:00 AM 27,866 NTDOS.SYS 08/04/2004 06:00 AM 29,146 NTDOS404.SYS 08/04/2004 06:00 AM 29,370 NTDOS411.SYS 08/04/2004 06:00 AM 29,274 NTDOS412.SYS 08/04/2004 06:00 AM 29,146 NTDOS804.SYS 08/04/2004 06:00 AM 67,072 NTDSAPI.DLL 08/04/2004 06:00 AM 48,794 NTIMAGE.GIF 08/04/2004 06:00 AM 33,840 NTIO.SYS 08/04/2004 06:00 AM 34,560 NTIO404.SYS 08/04/2004 06:00 AM 35,648 NTIO411.SYS 08/04/2004 06:00 AM 35,424 NTIO412.SYS 08/04/2004 06:00 AM 34,560 NTIO804.SYS 03/01/2005 08:34 PM 2,056,832 ntkrnlpa.exe 08/04/2004 06:00 AM 43,520 NTLANMAN.DLL 08/04/2004 06:00 AM 57,856 NTLANUI.DLL 08/04/2004 06:00 AM 14,336 NTLANUI2.DLL 08/04/2004 06:00 AM 8,192 NTLSAPI.DLL 08/04/2004 06:00 AM 118,784 NTMARTA.DLL 08/04/2004 06:00 AM 40,960 NTMSAPI.DLL 08/04/2004 06:00 AM 179,712 NTMSDBA.DLL 08/04/2004 06:00 AM 36,864 NTMSEVT.DLL 08/04/2004 06:00 AM 488,448 NTMSMGR.DLL 08/04/2004 06:00 AM 26,209 NTMSMGR.MSC 08/04/2004 06:00 AM 32,968 NTMSOPRQ.MSC 08/04/2004 06:00 AM 435,200 NTMSSVC.DLL 03/01/2005 08:59 PM 2,179,328 ntoskrnl.exe 08/04/2004 06:00 AM 91,136 NTPRINT.DLL 11/15/2005 01:29 PM 83,752 nts.dll 08/04/2004 06:00 AM 31,744 NTSD.EXE 08/04/2004 06:00 AM 36,864 NTSDEXTS.DLL 08/04/2004 06:00 AM 143,872 NTSHRUI.DLL 08/04/2004 06:00 AM 419,840 NTVDM.EXE 08/04/2004 06:00 AM 13,312 NTVDMD.DLL 08/04/2004 06:00 AM 257,024 NUSRMGR.CPL 08/04/2004 01:56 AM 4,274,816 NV4_DISP.DLL 08/04/2004 06:00 AM 144,384 NWPROVAU.DLL 08/04/2004 06:00 AM 266,752 OAKLEY.DLL 08/04/2004 06:00 AM 285,696 OBJSEL.DLL 08/04/2004 06:00 AM 96,256 OCCACHE.DLL 08/04/2004 06:00 AM 60,928 OCMANAGE.DLL 04/15/2005 09:18 AM 35 od2te2r0.ini 08/04/2004 06:00 AM 26,224 ODBC16GT.DLL 08/04/2004 06:00 AM 249,856 ODBC32.DLL 08/04/2004 06:00 AM 16,384 ODBC32GT.DLL 08/04/2004 06:00 AM 32,768 ODBCAD32.EXE 08/04/2004 06:00 AM 24,576 ODBCBCP.DLL 08/04/2004 06:00 AM 135,168 ODBCCONF.DLL 08/04/2004 06:00 AM 69,632 ODBCCONF.EXE 08/04/2004 06:00 AM 4,310 ODBCCONF.RSP 08/04/2004 06:00 AM 32,768 ODBCCP32.CPL 08/04/2004 06:00 AM 106,496 ODBCCP32.DLL 08/04/2004 06:00 AM 65,536 ODBCCR32.DLL 08/04/2004 06:00 AM 65,536 ODBCCU32.DLL 08/04/2004 06:00 AM 94,208 ODBCINT.DLL 08/04/2004 06:00 AM 53,279 ODBCJI32.DLL 08/04/2004 06:00 AM 278,559 ODBCJT32.DLL 08/04/2004 06:00 AM 12,288 ODBCP32R.DLL 08/04/2004 06:00 AM 147,456 ODBCTRAC.DLL 08/04/2004 06:00 AM 20,511 ODDBSE32.DLL 08/04/2004 06:00 AM 20,510 ODEXL32.DLL 08/04/2004 06:00 AM 20,510 ODFOX32.DLL 08/04/2004 06:00 AM 20,510 ODPDX32.DLL 08/04/2004 06:00 AM 20,511 ODTEXT32.DLL 08/10/2004 11:08 AM 13,107,200 OEMBIOS.BIN 08/10/2004 11:08 AM 4,627 OEMBIOS.DAT 08/10/2004 11:08 AM 7,208 OEMBIOS.SIG 05/27/2004 09:23 AM 787,356 OEMBKGN1.BMP 10/08/2004 07:30 PM 519 OEMINFO.INI 10/08/2004 08:02 PM 2,888 OEMINFO.PNF 05/27/2004 09:23 AM 5,134 OEMLOGO.BMP 08/04/2004 06:00 AM 120,832 OFFFILT.DLL 08/04/2004 06:00 AM 39,744 OLE2.DLL 08/04/2004 06:00 AM 169,520 OLE2DISP.DLL 08/04/2004 06:00 AM 153,008 OLE2NLS.DLL 07/26/2005 12:39 AM 1,285,120 ole32.dll 08/04/2004 06:00 AM 163,328 OLEACC.DLL 08/04/2004 06:00 AM 16,896 OLEACCRC.DLL 08/04/2004 06:00 AM 553,472 OLEAUT32.DLL 08/04/2004 06:00 AM 82,944 OLECLI.DLL 07/26/2005 12:39 AM 74,752 olecli32.dll 07/26/2005 12:39 AM 37,888 olecnv32.dll 08/04/2004 06:00 AM 117,760 OLEDLG.DLL 08/04/2004 06:00 AM 107,008 OLEPRN.DLL 08/04/2004 06:00 AM 83,456 OLEPRO32.DLL 08/04/2004 06:00 AM 24,064 OLESVR.DLL 08/04/2004 06:00 AM 22,016 OLESVR32.DLL 08/04/2004 06:00 AM 69,120 OLETHK32.DLL 10/08/2004 08:02 PM OOBE 08/04/2004 06:00 AM 713,728 OPENGL32.DLL 08/04/2004 06:00 AM 215,552 OSK.EXE 08/04/2004 06:00 AM 67,584 OSUNINST.DLL 08/04/2004 06:00 AM 40,448 OSUNINST.EXE 01/07/2003 04:05 PM 551 OUTLPERF.H 01/07/2003 04:05 PM 2,695 OUTLPERF.INI 02/04/1999 01:09 PM 57,393 OUTLWAB.DLL 08/04/2004 06:00 AM 116,224 P2P.DLL 08/04/2004 06:00 AM 86,016 P2PGASVC.DLL 08/04/2004 06:00 AM 312,320 P2PGRAPH.DLL 08/04/2004 06:00 AM 88,064 P2PNETSH.DLL 08/04/2004 06:00 AM 526,848 P2PSVC.DLL 08/04/2004 06:00 AM 58,368 PACKAGER.EXE 08/04/2004 06:00 AM 10,240 PANMAP.DLL 08/04/2004 06:00 AM 157,696 PAQSP.DLL 08/04/2004 06:00 AM 21,504 PATHPING.EXE 08/04/2004 06:00 AM 62,976 PAUTOENR.DLL 08/04/2004 06:00 AM 114 PCL.SEP 08/04/2004 06:00 AM 283,648 PDH.DLL 11/15/2005 01:29 PM 83,752 pds.dll 08/04/2004 06:00 AM 15,360 PENTNT.EXE 07/12/2006 05:22 PM 53,436 PERFC009.DAT 08/04/2004 06:00 AM 427 PERFCI.H 08/04/2004 06:00 AM 2,891 PERFCI.INI 08/04/2004 06:00 AM 39,936 PERFCTRS.DLL 08/04/2004 06:00 AM 28,626 PERFD009.DAT 08/04/2004 06:00 AM 26,624 PERFDISK.DLL 08/04/2004 06:00 AM 140 PERFFILT.H 08/04/2004 06:00 AM 1,152 PERFFILT.INI 07/12/2006 05:22 PM 381,692 PERFH009.DAT 08/04/2004 06:00 AM 272,128 PERFI009.DAT 08/04/2004 06:00 AM 15,872 PERFMON.EXE 08/04/2004 06:00 AM 58,273 PERFMON.MSC 08/04/2004 06:00 AM 16,896 PERFNET.DLL 08/04/2004 06:00 AM 25,088 PERFOS.DLL 08/04/2004 06:00 AM 34,816 PERFPROC.DLL 07/12/2006 05:22 PM 441,626 PERFST~1.INI PerfStringBackup.INI 08/04/2004 06:00 AM 12,288 PERFTS.DLL 08/04/2004 06:00 AM 435 PERFWCI.H 08/04/2004 06:00 AM 2,732 PERFWCI.INI 08/04/2004 06:00 AM 176,128 PHOTOWIZ.DLL 08/04/2004 06:00 AM 35,328 PID.DLL 08/04/2004 06:00 AM 24,064 PIDGEN.DLL 08/04/2004 06:00 AM 35,328 PIFMGR.DLL 08/04/2004 06:00 AM 17,920 PING.EXE 08/04/2004 06:00 AM 33,280 PING6.EXE 08/04/2004 06:00 AM 482,304 PINTLGNT.IME 08/04/2004 06:00 AM 15,360 PJLMON.DLL 04/17/2005 02:56 PM 3,478 pl6jurq7.ini 08/04/2004 06:00 AM 30,720 PLUSTAB.DLL 08/04/2004 06:00 AM 46,592 PMSPL.DLL 10/08/2004 07:55 PM 278,528 pncrt.dll 10/08/2004 07:55 PM 6,656 pndx5016.dll 10/08/2004 07:55 PM 5,632 pndx5032.dll 06/23/2006 07:02 AM 39,424 pngfilt.dll 08/04/2004 06:00 AM 48,640 PNRPNSP.DLL 08/04/2004 06:00 AM 105,472 POLSTORE.DLL 08/09/2003 06:36 PM 29,184 popup.ocx 10/05/2004 04:10 PM 23,040 PostProc.dll 08/04/2004 06:00 AM 114,688 POWERCFG.CPL 08/04/2004 06:00 AM 49,152 POWERCFG.EXE 08/04/2004 06:00 AM 17,408 POWRPROF.DLL 03/02/2004 12:39 PM 77,824 PRApplet.cpl 10/08/2004 07:55 PM 24,576 prefscpl.cpl 06/29/2005 04:00 AM PREINS~1 PreInstall 08/04/2004 06:00 AM 16,384 PRFLBMSG.DLL 08/04/2004 06:00 AM 9,216 PRINT.EXE 08/04/2004 06:00 AM 560,640 PRINTUI.DLL 08/04/2004 06:00 AM 81,920 PROCTEXE.OCX 08/04/2004 06:00 AM 343 PRODSPEC.INI 08/04/2004 06:00 AM 27,648 PROFMAP.DLL 08/04/2004 06:00 AM 109,568 PROGMAN.EXE 12/19/2002 03:19 PM 147,456 PRONtObj.dll 08/04/2004 06:00 AM 50,176 PROQUOTA.EXE 11/21/2003 04:26 PM 118,784 Prounstl.exe 08/04/2004 06:00 AM 9,216 PROXYCFG.EXE 08/04/2004 06:00 AM 23,040 PSAPI.DLL 08/04/2004 06:00 AM 96,768 PSBASE.DLL 08/04/2004 06:00 AM 3,010 PSCHDCNT.H 08/04/2004 06:00 AM 10,752 PSCHDPRF.DLL 08/04/2004 06:00 AM 6,877 PSCHDPRF.INI 08/04/2004 06:00 AM 51 PSCRIPT.SEP 08/04/2004 06:00 AM 8,192 PSNPPAGN.DLL 10/02/2003 06:36 PM 167,936 PSPASC~1.DLL pspascrrc.dll 08/04/2004 06:00 AM 43,520 PSTOREC.DLL 08/04/2004 06:00 AM 34,304 PSTORSVC.DLL 08/17/2001 11:36 PM 5,632 ptpusb.dll 08/04/2004 01:56 AM 159,232 ptpusd.dll 12/08/1997 04:00 AM 2,844 PUB3BRSH.ANI 09/29/1998 03:43 PM 45,056 PUBDLG.DLL 08/04/2004 06:00 AM 3,708 PUBPRN.VBS 03/25/2004 11:30 AM 491,520 Px.dll 03/26/2004 02:00 AM 360,448 pxdrv.dll 03/25/2004 11:28 AM 155,648 PxMas.dll 03/25/2004 11:28 AM 286,720 PxWave.dll 03/25/2004 11:30 AM 86,016 PXWMA.dll 03/07/2005 09:00 PM 2,840 q10pvbrv.dat 08/04/2004 06:00 AM 16,896 QAPPSRV.EXE 08/04/2004 06:00 AM 237,568 QASF.DLL 08/04/2004 06:00 AM 192,512 QCAP.DLL 08/11/2004 05:48 PM 1,458,176 qdiagd.ocx 07/04/2005 05:03 PM 1,650,688 qdiagdwc.ocx 08/04/2004 06:00 AM 279,040 QDV.DLL 08/04/2004 06:00 AM 385,024 QDVD.DLL 08/04/2004 06:00 AM 562,176 QEDIT.DLL 08/04/2004 06:00 AM 733,696 QEDWIPES.DLL 08/04/2004 06:00 AM 382,464 QMGR.DLL 08/04/2004 06:00 AM 18,944 QMGRPRXY.DLL 08/04/2004 06:00 AM 8,192 QOSNAME.DLL 08/04/2004 06:00 AM 20,480 QPROCESS.EXE 08/29/2005 11:54 PM 1,287,168 quartz.dll 06/22/2006 01:06 AM 1,435,648 query.dll 12/08/2005 02:56 PM 49,152 QUICKT~1.QTS QuickTime.qts 12/08/2005 02:56 PM 65,536 QUICKT~2.QTX QuickTimeVR.qtx 08/04/2004 06:00 AM 22,016 QWINSTA.EXE 08/04/2004 06:00 AM 43,520 RACPLDLG.DLL 10/08/2004 07:27 PM RAS 06/26/2006 01:37 PM 8,192 rasadhlp.dll 08/04/2004 06:00 AM 236,544 RASAPI32.DLL 08/04/2004 06:00 AM 89,088 RASAUTO.DLL 08/04/2004 06:00 AM 11,776 RASAUTOU.EXE 08/04/2004 06:00 AM 69,632 RASCHAP.DLL 08/04/2004 06:00 AM 1,818 RASCTRNM.H 08/04/2004 06:00 AM 11,776 RASCTRS.DLL 08/04/2004 06:00 AM 3,458 RASCTRS.INI 08/04/2004 06:00 AM 11,264 RASDIAL.EXE 08/04/2004 06:00 AM 657,920 RASDLG.DLL 08/04/2004 06:00 AM 61,440 RASMAN.DLL 05/14/2006 04:44 AM 181,248 rasmans.dll 08/04/2004 06:00 AM 143,360 RASMONTR.DLL 08/04/2004 06:00 AM 22,528 RASMXS.DLL 08/04/2004 06:00 AM 56,832 RASPHONE.EXE 08/04/2004 06:00 AM 206,336 RASPPP.DLL 08/04/2004 06:00 AM 23,552 RASRAD.DLL 08/04/2004 06:00 AM 16,896 RASSAPI.DLL 08/04/2004 06:00 AM 12,800 RASSER.DLL 08/04/2004 06:00 AM 58,880 RASTAPI.DLL 08/04/2004 06:00 AM 112,128 RASTLS.DLL 08/04/2004 06:00 AM 102,400 RCBDYCTL.DLL 08/04/2004 06:00 AM 35,840 RCIMLBY.EXE 08/04/2004 06:00 AM 21,504 RCP.EXE 08/04/2004 06:00 AM 147,968 RDCHOST.DLL 04/03/2000 06:52 PM 151,552 RDOCURS.DLL 08/04/2004 06:00 AM 4,096 RDPCFGEX.DLL 08/04/2004 06:00 AM 62,464 RDPCLIP.EXE 08/04/2004 06:00 AM 92,168 RDPDD.DLL 08/04/2004 06:00 AM 19,968 RDPSND.DLL 08/04/2004 06:00 AM 87,176 RDPWSX.DLL 08/04/2004 06:00 AM 13,824 RDSADDIN.EXE 08/04/2004 06:00 AM 67,072 RDSHOST.EXE 08/04/2004 06:00 AM 7,168 RECOVER.EXE 08/04/2004 06:00 AM 3,338 REDIR.EXE 08/04/2004 06:00 AM 50,176 REG.EXE 08/04/2004 06:00 AM 49,664 REGAPI.DLL 08/04/2004 06:00 AM 3,584 REGEDT32.EXE 08/04/2004 06:00 AM 33,792 REGINI.EXE 12/25/2004 07:23 PM 1,748 reglog.txt 01/12/1998 04:00 AM 40,448 REGOBJ.DLL 08/04/2004 06:00 AM 59,904 REGSVC.DLL 08/04/2004 06:00 AM 11,776 REGSVR32.EXE 08/04/2004 06:00 AM 4,608 REGWIZ.EXE 08/04/2004 06:00 AM 397,824 REGWIZC.DLL 02/09/2006 05:00 AM REINST~1 ReinstallBackups 08/04/2004 06:00 AM 60,416 REMOTEPG.DLL 07/08/2005 12:27 PM 76,800 remotesp.tsp 08/04/2004 06:00 AM 107,520 REND.DLL 08/04/2004 06:00 AM 12,800 REPLACE.EXE 08/04/2004 06:00 AM 9,728 RESET.EXE 09/21/2006 11:30 PM Restore 08/04/2004 06:00 AM 58,880 RESUTILS.DLL 08/04/2004 06:00 AM 13,824 REXEC.EXE 08/04/2004 06:00 AM 431,616 RICHED20.DLL 08/04/2004 06:00 AM 3,584 RICHED32.DLL 02/10/2005 10:03 PM 212,240 RICHTX32.OCX 10/08/2004 07:55 PM 157,696 rmoc3260.dll 08/04/2004 06:00 AM 3,072 RNR20.DLL 08/09/2003 06:36 PM 1,044,480 ROBOEX32.DLL 08/04/2004 06:00 AM 19,968 ROUTE.EXE 08/04/2004 06:00 AM 25,600 ROUTEMON.EXE 08/04/2004 06:00 AM 6,656 ROUTETAB.DLL 08/04/2004 06:00 AM 22,016 RPCNS4.DLL 08/04/2004 06:00 AM 581,120 RPCRT4.DLL 07/26/2005 12:39 AM 397,824 rpcss.dll 08/04/2004 06:00 AM 3,167 RSACI.RAT 08/04/2004 06:00 AM 152,576 RSAENH.DLL 08/04/2004 06:00 AM 14,848 RSH.EXE 08/04/2004 06:00 AM 39,936 RSHX32.DLL 08/04/2004 06:00 AM 49,152 RSM.EXE 08/04/2004 06:00 AM 18,944 RSMPS.DLL 08/04/2004 06:00 AM 24,576 RSMSINK.EXE 08/04/2004 06:00 AM 49,152 RSMUI.EXE 08/04/2004 06:00 AM 132,608 RSVP.EXE 08/04/2004 06:00 AM 12,082 RSVP.INI 08/04/2004 06:00 AM 3,178 RSVPCNTS.H 08/04/2004 06:00 AM 23,552 RSVPMSG.DLL 08/04/2004 06:00 AM 9,728 RSVPPERF.DLL 08/04/2004 06:00 AM 90,112 RSVPSP.DLL 08/04/2004 06:00 AM 77,312 RTCSHARE.EXE 08/04/2004 06:00 AM 31,744 RTIPXMIB.DLL 08/04/2004 06:00 AM 98,304 RTM.DLL 08/04/2004 06:00 AM 44,032 RTUTILS.DLL 08/04/2004 06:00 AM 16,384 RUNAS.EXE 08/04/2004 06:00 AM 33,280 RUNDLL32.EXE 08/04/2004 06:00 AM 14,336 RUNONCE.EXE 08/04/2004 06:00 AM 15,872 RWINSTA.EXE 09/17/2005 12:20 AM 87,768 S32EVNT1.DLL 08/04/2004 06:00 AM 43,520 SAFRCDLG.DLL 08/04/2004 06:00 AM 29,696 SAFRDM.DLL 08/04/2004 06:00 AM 45,568 SAFRSLV.DLL 08/04/2004 06:00 AM 64,000 SAMLIB.DLL 08/04/2004 06:00 AM 415,744 SAMSRV.DLL 08/04/2004 06:00 AM 13,312 SAVEDUMP.EXE 08/04/2004 06:00 AM 270,848 SBE.DLL 08/04/2004 06:00 AM 159,232 SBEIO.DLL 03/10/1999 06:37 PM 1,494,528 SBFM40.XLA 08/04/2004 06:00 AM 31,232 SC.EXE 08/04/2004 06:00 AM 69,632 SCARDDLG.DLL 08/04/2004 06:00 AM 118,784 SCARDSSP.DLL 08/04/2004 06:00 AM 95,744 SCARDSVR.EXE 08/04/2004 06:00 AM 169,984 SCCBASE.DLL 08/04/2004 06:00 AM 171,008 SCCSCCP.DLL 08/04/2004 06:00 AM 180,224 SCECLI.DLL 08/04/2004 06:00 AM 313,856 SCESRV.DLL 08/04/2004 06:00 AM 144,896 SCHANNEL.DLL 08/04/2004 06:00 AM 190,976 SCHEDSVC.DLL 08/04/2004 06:00 AM 20,992 SCLGNTFY.DLL 03/24/1998 06:54 PM 15,872 SCP32.DLL 08/04/2004 06:00 AM 26,624 SCREDIR.DLL 08/04/2004 06:00 AM 9,216 SCRNSAVE.SCR 08/04/2004 06:00 AM 159,744 SCROBJ.DLL 08/04/2004 06:00 AM 151,552 SCRRUN.DLL 08/04/2004 06:00 AM 77,312 SDBINST.EXE 08/04/2004 06:00 AM 29,184 SDHCINST.DLL 08/04/2004 06:00 AM 130,048 SDPBLB.DLL 08/04/2004 06:00 AM 18,944 SECLOGON.DLL 08/04/2004 06:00 AM 4,569 SECUPD.DAT 08/04/2004 06:00 AM 7,208 SECUPD.SIG 08/04/2004 06:00 AM 55,808 SECUR32.DLL 08/04/2004 06:00 AM 5,632 SECURITY.DLL 08/04/2004 06:00 AM 29,184 SENDCMSG.DLL 08/04/2004 06:00 AM 55,296 SENDMAIL.DLL 08/04/2004 06:00 AM 38,912 SENS.DLL 08/04/2004 06:00 AM 6,656 SENSAPI.DLL 08/04/2004 06:00 AM 13,824 SENSCFG.DLL 08/04/2004 06:00 AM 14,336 SERIALUI.DLL 08/04/2004 06:00 AM 56,320 SERVDEPS.DLL 06/02/2006 09:25 PM service 08/04/2004 06:00 AM 108,032 SERVICES.EXE 08/04/2004 06:00 AM 33,464 SERVICES.MSC 08/04/2004 06:00 AM 14,848 SERWVDRV.DLL 08/04/2004 06:00 AM 140,800 SESSMGR.EXE 08/04/2004 06:00 AM 31,232 SETHC.EXE 10/08/2004 07:27 PM Setup 08/04/2004 06:00 AM 240,120 SETUP.BMP 08/04/2004 06:00 AM 23,040 SETUP.EXE 08/04/2004 06:00 AM 983,552 SETUPAPI.DLL 08/04/2004 06:00 AM 414,208 SETUPDLL.DLL 08/04/2004 06:00 AM 11,753 SETVER.EXE 08/04/2004 06:00 AM 5,120 SFC.DLL 08/04/2004 06:00 AM 9,728 SFC.EXE 08/04/2004 06:00 AM 1,580,544 SFCFILES.DLL 08/04/2004 06:00 AM 140,288 SFC_OS.DLL 08/04/2004 06:00 AM 23,552 SFMAPI.DLL 08/04/2004 06:00 AM 14,848 SHADOW.EXE 08/04/2004 06:00 AM 882 SHARE.EXE 08/04/2004 06:00 AM 549,376 SHDOCLC.DLL 06/23/2006 07:02 AM 1,494,016 shdocvw.dll 08/04/2004 06:00 AM 5,120 SHELL.DLL 07/13/2006 09:33 AM 8,453,632 shell32.dll 10/08/2004 07:27 PM ShellExt 01/01/2003 05:53 PM 216,416 SHELLE~1.TLB shellextlib.tlb 08/04/2004 06:00 AM 435,712 SHELLS~1.DLL shellstyle.dll 08/04/2004 06:00 AM 25,088 SHFOLDER.DLL 08/04/2004 06:00 AM 68,096 SHGINA.DLL 08/04/2004 06:00 AM 16,740 SHIFTJIS.UCE 08/04/2004 06:00 AM 65,536 SHIMENG.DLL 08/04/2004 06:00 AM 438,272 SHIMGVW.DLL 06/23/2006 07:02 AM 474,112 shlwapi.dll 08/04/2004 06:00 AM 151,552 SHMEDIA.DLL 08/04/2004 06:00 AM 42,496 SHMGRATE.EXE 08/04/2004 06:00 AM 77,824 SHRPUBW.EXE 08/04/2004 06:00 AM 27,648 SHSCRAP.DLL 08/04/2004 06:00 AM 134,656 SHSVCS.DLL 08/04/2004 06:00 AM 19,456 SHUTDOWN.EXE 08/04/2004 06:00 AM 13,312 SIGTAB.DLL 08/04/2004 06:00 AM 70,144 SIGVERIF.EXE 08/04/2004 06:00 AM 16,384 SIMPDATA.TLB 10/12/2005 06:11 PM 118,784 sirenacm.dll 08/04/2004 06:00 AM 13,824 SISBKUP.DLL 08/04/2004 06:00 AM 5,632 SKDLL.DLL 08/04/2004 06:00 AM 26,112 SKEYS.EXE 08/04/2004 06:00 AM 25,088 SLAYERXP.DLL 08/04/2004 06:00 AM 306,176 SLBCSP.DLL 08/04/2004 06:00 AM 98,304 SLBIOP.DLL 08/04/2004 06:00 AM 14,848 SLBRCCSP.DLL 08/04/2004 06:00 AM 86,016 SL_ANET.ACM 08/04/2004 06:00 AM 8,192 SMBINST.EXE 08/04/2004 06:00 AM 363,008 SMLOGCFG.DLL 08/04/2004 06:00 AM 89,600 SMLOGSVC.EXE 08/04/2004 06:00 AM 50,688 SMSS.EXE 08/04/2004 06:00 AM 131,584 SNDREC32.EXE 08/04/2004 06:00 AM 138,752 SNDVOL32.EXE 08/04/2004 06:00 AM 18,944 SNMPAPI.DLL 08/04/2004 06:00 AM 182,272 SNMPSNAP.DLL 08/04/2004 06:00 AM 5,632 SOFTPUB.DLL 12/08/2004 09:29 PM SOFTWA~1 SoftwareDistribution 08/04/2004 06:00 AM 56,832 SOL.EXE 08/04/2004 06:00 AM 23,552 SORT.EXE 08/04/2004 06:00 AM 262,148 SORTKEY.NLS 08/04/2004 06:00 AM 22,040 SORTTBLS.NLS 08/04/2004 06:00 AM 1,744 SOUND.DRV 08/04/2004 06:00 AM 538,624 SPIDER.EXE 10/12/2005 07:12 PM 14,048 spmsg.dll 08/04/2004 06:00 AM 69,632 SPNIKE.DLL 08/04/2004 06:00 AM 11,776 SPNPINST.EXE 10/08/2004 07:27 PM SPOOL 08/04/2004 06:00 AM 74,752 SPOOLSS.DLL 06/10/2005 07:53 PM 57,856 spoolsv.exe 08/04/2004 06:00 AM 9,728 SPRESTRT.EXE 08/04/2004 06:00 AM 70,656 SPRIO600.DLL 08/04/2004 06:00 AM 72,192 SPRIO800.DLL 06/28/2005 10:21 AM 22,752 spupdsvc.exe 08/04/2004 06:00 AM 24,661 SPXCOINS.DLL 08/04/2004 06:00 AM 46,133 SQLSODBC.CHM 08/04/2004 06:00 AM 442,368 SQLSRV32.DLL 08/04/2004 06:00 AM 90,112 SQLSRV32.RLL 08/04/2004 06:00 AM 180,800 SQLUNIRL.DLL 08/04/2004 06:00 AM 24,603 SQLWID.DLL 08/04/2004 06:00 AM 49,179 SQLWOA.DLL 08/04/2004 06:00 AM 67,584 SRCLIENT.DLL 08/04/2004 06:00 AM 239,104 SRRSTR.DLL 08/04/2004 06:00 AM 170,496 SRSVC.DLL 12/07/2004 03:32 PM 96,768 srvsvc.dll 08/04/2004 06:00 AM 704,512 SS3DFO.SCR 08/04/2004 06:00 AM 19,968 SSBEZIER.SCR 08/04/2004 06:00 AM 34,816 SSDPAPI.DLL 08/04/2004 06:00 AM 71,680 SSDPSRV.DLL 08/04/2004 06:00 AM 393,216 SSFLWBOX.SCR 08/04/2004 06:00 AM 20,992 SSMARQUE.SCR 08/04/2004 06:00 AM 47,104 SSMYPICS.SCR 08/04/2004 06:00 AM 18,944 SSMYST.SCR 08/04/2004 06:00 AM 610,304 SSPIPES.SCR 08/04/2004 06:00 AM 14,336 SSSTARS.SCR 08/04/2004 06:00 AM 679,936 SSTEXT3D.SCR 12/29/2002 01:14 AM 81,920 Startup.cpl 08/04/2004 06:00 AM 54,272 STCLIENT.DLL 07/22/1999 09:13 PM 5,532 STDOLE.TLB 08/04/2004 06:00 AM 17,920 STDOLE2.TLB 08/04/2004 06:00 AM 7,168 STDOLE32.TLB 08/04/2004 06:00 AM 67,584 STI.DLL 08/04/2004 06:00 AM 14,848 STIMON.EXE 08/04/2004 06:00 AM 136,704 STI_CI.DLL 01/12/1996 07:00 PM 24,576 STKIT432.DLL 04/23/2005 02:18 PM 3,853 stlb2.xml 08/04/2004 06:00 AM 121,856 STOBJECT.DLL 08/04/2004 06:00 AM 4,208 STORAGE.DLL 08/04/2004 01:56 AM 74,752 STORPROP.DLL 08/17/2001 11:36 PM 8,192 STREAMCI.DLL 08/04/2004 06:00 AM 246,302 STRMDLL.DLL 08/04/2004 06:00 AM 75,776 STRMFILT.DLL 08/04/2004 06:00 AM 93,702 SUBRANGE.UCE 08/04/2004 06:00 AM 9,216 SUBST.EXE 08/04/2004 06:00 AM 14,336 SVCHOST.EXE 08/04/2004 06:00 AM 6,144 SVCPACK.DLL 08/04/2004 06:00 AM 138,752 SWPRV.DLL 08/04/2004 06:00 AM 713,216 SXS.DLL 10/19/2005 05:39 PM 534,160 SymNeti.dll 10/19/2005 05:39 PM 161,424 SymRedir.dll 08/04/2004 06:00 AM 51,200 SYNCAPP.EXE 08/04/2004 06:00 AM 57,856 SYNCENG.DLL 08/04/2004 06:00 AM 191,488 SYNCUI.DLL 08/04/2004 06:00 AM
Gary, Here is the ewindo report, however I did not scan in safe mode. In safe mode the desktop screen is bigger than the monitor space and there are no slide bars to move the screen. Thanks for all your help. ——————————————————— ewido anti-spyware - Scan Report ——————————————————— + Created at: 5:26:45 PM 9/23/2006 + Scan result: C:\Documents and Settings\Grays\Cookies\grays@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@amznshopbop.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\[removed][2].txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\[removed][1].txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@overture[1].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\grays@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). C:\Documents and Settings\Grays\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). ::Report end
Hi ma3572,

Looks like that got em, is Norton still flagging anything?

If not then your computer looks clean.

Are you still noticing any problems?. If not, it's time to secure your system to prevent against further intrusions.

THESE STEPS ARE VERY IMPORTANT

Lets reset system restore
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: You will lose all previous restore points which are likely to be infected. Please note you need Administrator Access to clean the restore points.
  • Turn off System Restore.
    • On the Desktop, right-click My Computer.
    • Click Properties.
    • Click the System Restore tab.
    • Check Turn off System Restore.
    • Click Apply, and then click OK.
  • Reboot.
  • Turn ON System Restore.
    • On the Desktop, right-click My Computer.
    • Click Properties.
    • Click the System Restore tab.
    • UN-Check *Turn off System Restore*.
    • Click Apply, and then click OK.
  • NOTE: only do this ONCE, NOTon a regular basis
We need to re hide system files.

To do so, please follow the steps below:
  • Double-click My Computer.
  • Click the Tools menu, and then click Folder Options.
  • Click the View tab.
  • Put a check by "Hide file extensions for known file types."
  • Under the "Hidden files" folder, select "Do not show hidden files and folders."
  • Check "Hide protected operating system files."
  • Click Apply, and then click OK.

Updating Windows and Internet Explorer

IMPORTANT: You need to update Windows and Internet Explorer to protect your computer from the malware that is around on the Internet. Please go to the windows update site to get the critical updates.

If you're running Microsoft Office, or any portion thereof, go to Microsoft's Office Update site and make sure you have at least all the critical updates installed. (Free at Microsoft Office Update).

Make your Internet Explorer more secure
  • From within Internet Explorer click on Tools > Options > Security > Internet > Custom Level.
  • Make sure these options are set as follows:
    • Download signed ActiveX controls to Prompt
    • Download unsigned ActiveX controls to Disable
    • Initialize and script ActiveX controls not marked as safe to Disable
    • Installation of desktop items to Prompt
    • Launching programs and files in an IFRAME to Prompt
    • Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Press the Apply button and then the OK to exit the Internet Properties page.
The following are free programs that are designed to keep your computer clean. A brief description is included with each item, click on name to go to download site.
  • Adaware SE Personal
    Adaware is a free program. It scans for known spyware on your computer. These scans should be run at least once every two weeks. For more information, see this tutorial
  • Spybot S & D
    Spybot is a scanner like Adaware. It scans for spyware and other malicious programs. It is important to have both Adaware and Spybot on your computer because each program provides unique detection and protection measures. Spybot has preventitive tools that stop programs from even installing on your computer.
    To see how to set this up as well as more spybot features, see here
  • SpywareBlaster
    Spyware blaster is a program that stops known malicious activex controls from installing on your computer. It works by changing settings in your registry. It makes "kill bits" in the registry, so that certain activex controls can't install.
    If you don't know what activex controls are, see here
  • IE Spyad
    It puts many bad webpages on your restricted zones LIST. This means that you can still view the "bad" webpages, but the webpages can't do certain things (such as use javascripts and cookies). Use IE Spyad for single account computers, and IE Spyad 2 for multi account computers.
  • Hosts file:
    • Every version of windows has a hosts file as part of them.
    • In a very basic sense, they are used to locate webpages.
    • We can customize a hosts file so that it blocks certain webpages.
    • However, it can slow down certain computers.
    • This is why using a hosts file is optional!!
    • Make sure you read the instructions on how to install the hosts file, here.
  • If you decide to download the hosts file, the slowdown problems can usually be avoided by following these steps:
    • Click the start button (at the lower left hand corner of your screen)
    • Click run
    • In the dialog box, type services.msc
    • hit enter, then locate dns client
    • Highlight it, then double-click it.
    • On the dropdown box, change the setting from automatic to manual.
    • Click ok
  • Use an Anti Virus Software - It's very important that your computer has an anti-virus software running. This alone can save you a lot of trouble with malware in the future. See this link for a LISTing of some, on line & their stand-alone anti virus programs:
    Computer Safety On line - LIST of free Anti virus programs
  • Use a Firewall - I cannot stress enough how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For more info, check this webpage out.
    See here to choose one.
  • Site Advisor This is a utility that can be downloaded and installed. It loads an icon to the taskbar of your browser (versions for IE and Firefox), indicating the trustworthiness of the site you are on. Green for safe, Red for suspicious. Click on the icon to access details that SiteAdvisor has about the site.

Just a final reminder for you.
  • UPDATE UPDATE UPDATE!!! Make sure you do this about every 1-2 weeks.
  • Run Spybot and Adaware regularly. (Once a week minimum)
  • It is important that you visit http://www.windowsupdate.com regularly. This will ensure you always have the latest security updates installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
Once again, please post and tell me how things are going with your system… problems etc.

Gary R

The above is a general post I give when someone's computer is clean. Obviously you have already taken care of some of the issues mentioned, but it is important that you read through them, and address any that you may have missed.

Keep secure.

Gary R

Lastly

Please remove the following programmes:
  • Combofix
Gary, I scanned my computer using ewido in safe mode and found the following and quarenteened and deleted them. I even found a new file for purity scan and deleted it. It finally may be gone for good! My question is: Is it necessary to scan in normal mode after scanning in safe mode? It seems redundant. Is safemode more thorough than normal mode? I deleted combofix and reset everything. I tried to automate disk cleaning, check disk, and defragging at regular intervals to save some time for other things like updating antispyware updates. Hopefully, my daughter will leave zone alarm on. Thanks again for your help. I'll probably be back soon! ——————————————————— ewido anti-spyware - Scan Report ——————————————————— + Created at: 5:10:57 PM 9/25/2006 + Scan result: HKU\S-1-5-21-1535245887-1044504659-268624670-1009\Software\aurora -> Adware.BetterInternet : Cleaned with backup (quarantined). HKU\S-1-5-21-1535245887-1044504659-268624670-1009\Software\intexp -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\S-1-5-21-1535245887-1044504659-268624670-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{827DC836-DD9F-4A68-A602-5812EB50A834} -> Adware.Virtumonde : Cleaned with backup (quarantined). HKU\S-1-5-21-1535245887-1044504659-268624670-1009\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{827DC836-DD9F-4A68-A602-5812EB50A834} -> Adware.Virtumonde : Cleaned with backup (quarantined). HKU\S-1-5-21-1535245887-1044504659-268624670-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00DBDAC8-4691-4797-8E6A-7C6AB89BC441} -> Downloader.ConHook.l : Cleaned with backup (quarantined). ::Report end
I scanned my computer using ewido in safe mode and found the following and quarenteened and deleted them. I even found a new file for purity scan and deleted it. It finally may be gone for good! My question is: Is it necessary to scan in normal mode after scanning in safe mode? It seems redundant. Is safemode more thorough than normal mode?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI