Need help cleaning system

Hi JacKNight welcome to Tom Coyote forums

I am currently looking over your log. As I am an Undergraduate, everything that I post to you must be checked by an Admin or Moderator. Thus, there may be a tiny bit of a delay between posts, but it shouldn't be too long. I will post back shortly with a potential fix.

Thanks for your patience!

Thanks dan

Hi JacKNight

1. Download this file - combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

please post a new HJT log and the combo log
Thanks dan

Thanks for the help here is the logfile from combofix Owner - 06-12-26 14:42:30.39 Service Pack 2 ComboFix 06.11.27 - Running from: "C:\Documents and Settings\Owner\Desktop" ((((((((((((((((((((((((((((((((((((((((((((( Qoologic's Log ))))))))))))))))))))))))))))))))))))))))))))))))))) * * * PRE-RUN - Filepaths extracted from the Registry * * * * * * * * * * * * * * * * * * * * * * O4 - HKCU\…\Run C:\WINDOWS\system32\wcdmjv.exe O4 - HKLM\…\Run C:\WINDOWS\system32\wcdmjv.exe F2 -REG:system.ini: Shell C:\WINDOWS\system32\nltqj.exe F2 -REG:system.ini: UserInit C:\WINDOWS\system32\xgautba.exe * * * POST-RUN - Files in the Quarantine folder * * * * * * * * * * * * * * * * * * * * * * * * * 06-12-25 18:10 219136 cyrpu.dat.qoo 06-12-24 11:38 71168 djcmael.dll.qoo DO NOT DELETE ANY FILES FROM THIS DIRECTORY UNLESS INSTRUCTED TO (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\Program Files\Common Files\{E06C6DA8-0852-1033-0304-030108030001} ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Folders Quarantined: C:\QooBox\Purity\Documents and Settings\Owner\Application Data\PPPATC~1 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\MCROSO~1 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\chkntfs.exe C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-506.0000 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-506.0001 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-506.0002 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-506.0003 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-507.0000 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-507.0001 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-507.0002 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-507.0003 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-507.0004 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-510.0000 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-510.0001 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-511.0000 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-518.0000 C:\QooBox\Purity\Documents and Settings\Owner\My Documents\RACLE~1\RACLE~1\ctxad-518.0001 C:\QooBox\Purity\Program Files\Common Files\SSTEM3~1 C:\QooBox\Purity\WINDOWS\PPATCH~1 C:\QooBox\Purity\WINDOWS\RACLE~1 C:\QooBox\Purity\WINDOWS\RACLE~1\?ttrib.exe ((((((((((((((((((((((((((((((( Files Created from 2006-11-26 to 2006-12-26 )))))))))))))))))))))))))))))))))) 2006-12-26 14:48 71,168 –a—— C:\WINDOWS\system32\djcmael.dll 2006-12-26 12:19 dr-h—– C:\Documents and Settings\Owner\Recent 2006-12-24 12:03 d–h—– C:\WINDOWS\PIF 2006-12-24 11:54 33,408 –a—— C:\WINDOWS\system32\drivers\freedom.sys 2006-12-24 11:53 d——– C:\Program Files\Common Files\PestPatrol 2006-12-24 11:53 d——– C:\Program Files\Common Files\Command Software 2006-12-24 11:36 219,136 ——— C:\WINDOWS\system32\wcdmjv.exe 2006-12-23 21:15 d——– C:\Documents and Settings\Owner\Application Data\Radialpoint 2006-12-23 21:14 d——– C:\Program Files\Radialpoint 2006-12-23 21:14 d——– C:\Documents and Settings\All Users\Application Data\Radialpoint 2006-12-23 21:08 d——– C:\WINDOWS\system32\LogFiles 2006-12-23 20:59 d——– C:\c8bcf9d599c49177a6 2006-12-23 20:30 46,352 –a—— C:\WINDOWS\setdebug.exe 2006-12-23 20:30 139,536 –a—— C:\WINDOWS\system32\javaee.dll 2006-12-23 20:30 113 –a—— C:\WINDOWS\system32\zonedon.reg 2006-12-23 20:30 113 –a—— C:\WINDOWS\system32\zonedoff.reg 2006-12-23 20:21 35,328 –a—— C:\WINDOWS\system32\nltqj.exe 2006-12-23 19:57 d——– C:\WINDOWS\pss 2006-12-23 14:03 d——– C:\Program Files\MSXML 4.0 2006-12-22 14:02 127,208 –a—— C:\WINDOWS\system32\mucltui.dll 2006-12-22 13:33 d——– C:\Program Files\Windows Defender 2006-12-22 13:23 d——– C:\WINDOWS\Prefetch 2006-12-22 13:12 95,424 ——— C:\WINDOWS\system32\drivers\slnthal.sys 2006-12-22 13:12 9,216 ——— C:\WINDOWS\system32\proxycfg.exe 2006-12-22 13:12 88,064 ——— C:\WINDOWS\system32\p2pnetsh.dll 2006-12-22 13:12 870,784 ——— C:\WINDOWS\system32\ati3d1ag.dll 2006-12-22 13:12 86,016 ——— C:\WINDOWS\system32\p2pgasvc.dll 2006-12-22 13:12 86,016 ——— C:\WINDOWS\system32\mdmxsdk.dll 2006-12-22 13:12 81,920 ——— C:\WINDOWS\system32\ieencode.dll 2006-12-22 13:12 81,408 ——— C:\WINDOWS\system32\wscsvc.dll 2006-12-22 13:12 8,192 ——— C:\WINDOWS\system32\smbinst.exe 2006-12-22 13:12 78,464 ——— C:\WINDOWS\system32\drivers\usbvideo.sys 2006-12-22 13:12 75,776 ——— C:\WINDOWS\system32\strmfilt.dll 2006-12-22 13:12 73,832 ——— C:\WINDOWS\system32\slcoinst.dll 2006-12-22 13:12 73,796 ——— C:\WINDOWS\system32\slserv.exe 2006-12-22 13:12 73,216 ——— C:\WINDOWS\system32\drivers\atintuxx.sys 2006-12-22 13:12 71,680 ——— C:\WINDOWS\system32\blastcln.exe 2006-12-22 13:12 701,440 ——— C:\WINDOWS\system32\drivers\ati2mtag.sys 2006-12-22 13:12 7,680 ——— C:\WINDOWS\system32\kbdsmsno.dll 2006-12-22 13:12 7,680 ——— C:\WINDOWS\system32\kbdsmsfi.dll 2006-12-22 13:12 7,168 ——— C:\WINDOWS\system32\kbdukx.dll 2006-12-22 13:12 7,168 ——— C:\WINDOWS\system32\kbdno1.dll 2006-12-22 13:12 7,168 ——— C:\WINDOWS\system32\kbdfi1.dll 2006-12-22 13:12 685,056 ——— C:\WINDOWS\system32\drivers\hsfcxts2.sys 2006-12-22 13:12 67,584 ——— C:\WINDOWS\system32\drivers\sdbus.sys 2006-12-22 13:12 63,663 ——— C:\WINDOWS\system32\drivers\ati1rvxx.sys 2006-12-22 13:12 63,488 ——— C:\WINDOWS\system32\drivers\atinxsxx.sys 2006-12-22 13:12 60,416 ——— C:\WINDOWS\system32\fwcfg.dll 2006-12-22 13:12 6,656 ——— C:\WINDOWS\system32\kbdinmal.dll 2006-12-22 13:12 6,656 ——— C:\WINDOWS\system32\kbdinben.dll 2006-12-22 13:12 6,144 ——— C:\WINDOWS\system32\kbdmlt48.dll 2006-12-22 13:12 6,144 ——— C:\WINDOWS\system32\kbdmlt47.dll 2006-12-22 13:12 6,144 ——— C:\WINDOWS\system32\kbdinbe1.dll 2006-12-22 13:12 6,016 ——— C:\WINDOWS\system32\drivers\smbali.sys 2006-12-22 13:12 59,648 ——— C:\WINDOWS\system32\drivers\rfcomm.sys 2006-12-22 13:12 59,392 ——— C:\WINDOWS\system32\logman.exe 2006-12-22 13:12 57,856 ——— C:\WINDOWS\system32\drivers\atinbtxx.sys 2006-12-22 13:12 56,623 ——— C:\WINDOWS\system32\drivers\ati1btxx.sys 2006-12-22 13:12 526,848 ——— C:\WINDOWS\system32\p2psvc.dll 2006-12-22 13:12 52,224 ——— C:\WINDOWS\system32\drivers\atinraxx.sys 2006-12-22 13:12 516,768 ——— C:\WINDOWS\system32\ativvaxx.dll 2006-12-22 13:12 50,688 ——— C:\WINDOWS\system32\btpanui.dll 2006-12-22 13:12 50,176 ——— C:\WINDOWS\system32\xmlprovi.dll 2006-12-22 13:12 5,632 ——— C:\WINDOWS\system32\kbdmaori.dll 2006-12-22 13:12 49,152 ——— C:\WINDOWS\system32\powercfg.exe 2006-12-22 13:12 48,640 ——— C:\WINDOWS\system32\pnrpnsp.dll 2006-12-22 13:12 46,464 ——— C:\WINDOWS\system32\drivers\gagp30kx.sys 2006-12-22 13:12 452,736 ——— C:\WINDOWS\system32\drivers\mtxparhm.sys 2006-12-22 13:12 44,928 ——— C:\WINDOWS\system32\drivers\agpcpq.sys 2006-12-22 13:12 44,672 ——— C:\WINDOWS\system32\drivers\uagp35.sys 2006-12-22 13:12 44,032 ——— C:\WINDOWS\system32\twext.dll 2006-12-22 13:12 43,008 ——— C:\WINDOWS\system32\drivers\amdagp.sys 2006-12-22 13:12 42,752 ——— C:\WINDOWS\system32\drivers\alim1541.sys 2006-12-22 13:12 42,368 ——— C:\WINDOWS\system32\drivers\agp440.sys 2006-12-22 13:12 42,240 ——— C:\WINDOWS\system32\drivers\viaagp.sys 2006-12-22 13:12 41,088 ——— C:\WINDOWS\system32\drivers\sisagp.sys 2006-12-22 13:12 404,990 ——— C:\WINDOWS\system32\drivers\slntamr.sys 2006-12-22 13:12 4,255 ——— C:\WINDOWS\system32\drivers\adv01nt5.dll 2006-12-22 13:12 38,016 ——— C:\WINDOWS\system32\drivers\bthmodem.sys 2006-12-22 13:12 377,984 ——— C:\WINDOWS\system32\ati2dvaa.dll 2006-12-22 13:12 36,463 ——— C:\WINDOWS\system32\drivers\ati1tuxx.sys 2006-12-22 13:12 36,096 ——— C:\WINDOWS\system32\drivers\intelppm.sys 2006-12-22 13:12 35,456 ——— C:\WINDOWS\system32\drivers\bthprint.sys 2006-12-22 13:12 34,735 ——— C:\WINDOWS\system32\drivers\ati1xsxx.sys 2006-12-22 13:12 327,040 ——— C:\WINDOWS\system32\drivers\ati2mtaa.sys 2006-12-22 13:12 32,866 ——— C:\WINDOWS\system32\slrundll.exe 2006-12-22 13:12 32,866 ——— C:\WINDOWS\slrundll.exe 2006-12-22 13:12 32,768 ——— C:\WINDOWS\system32\ativtmxx.dll 2006-12-22 13:12 32,285 ——— C:\WINDOWS\system32\hsfcisp2.dll 2006-12-22 13:12 312,320 ——— C:\WINDOWS\system32\p2pgraph.dll 2006-12-22 13:12 31,744 ——— C:\WINDOWS\system32\drivers\atinxbxx.sys 2006-12-22 13:12 30,671 ——— C:\WINDOWS\system32\drivers\ati1raxx.sys 2006-12-22 13:12 30,208 ——— C:\WINDOWS\system32\bthserv.dll 2006-12-22 13:12 3,967 ——— C:\WINDOWS\system32\drivers\adv02nt5.dll 2006-12-22 13:12 3,901 ——— C:\WINDOWS\system32\drivers\siint5.dll 2006-12-22 13:12 3,775 ——— C:\WINDOWS\system32\drivers\adv11nt5.dll 2006-12-22 13:12 3,711 ——— C:\WINDOWS\system32\drivers\adv09nt5.dll 2006-12-22 13:12 3,647 ——— C:\WINDOWS\system32\drivers\adv07nt5.dll 2006-12-22 13:12 3,615 ——— C:\WINDOWS\system32\drivers\adv05nt5.dll 2006-12-22 13:12 3,135 ——— C:\WINDOWS\system32\drivers\adv08nt5.dll 2006-12-22 13:12 29,455 ——— C:\WINDOWS\system32\drivers\ati1xbxx.sys 2006-12-22 13:12 29,184 ——— C:\WINDOWS\system32\sdhcinst.dll 2006-12-22 13:12 29,056 ——— C:\WINDOWS\system32\drivers\ip6fw.sys 2006-12-22 13:12 286,792 ——— C:\WINDOWS\system32\slextspk.dll 2006-12-22 13:12 28,672 ——— C:\WINDOWS\system32\drivers\atinsnxx.sys 2006-12-22 13:12 274,304 ——— C:\WINDOWS\system32\drivers\bthport.sys 2006-12-22 13:12 262,784 ——— C:\WINDOWS\system32\drivers\http.sys 2006-12-22 13:12 26,367 ——— C:\WINDOWS\system32\drivers\ati1snxx.sys 2006-12-22 13:12 25,600 ——— C:\WINDOWS\system32\drivers\hidbth.sys 2006-12-22 13:12 25,471 ——— C:\WINDOWS\system32\drivers\watv10nt.sys 2006-12-22 13:12 25,471 ——— C:\WINDOWS\system32\drivers\atv04nt5.dll 2006-12-22 13:12 24,576 ——— C:\WINDOWS\system32\httpapi.dll 2006-12-22 13:12 233,472 ——— C:\WINDOWS\system32\wmpdxm.dll 2006-12-22 13:12 23,040 –a—— C:\WINDOWS\system32\fltmc.exe 2006-12-22 13:12 229,376 ——— C:\WINDOWS\system32\ati2cqag.dll 2006-12-22 13:12 220,032 ——— C:\WINDOWS\system32\drivers\hsfbs2s2.sys 2006-12-22 13:12 22,271 ——— C:\WINDOWS\system32\drivers\watv06nt.sys 2006-12-22 13:12 21,343 ——— C:\WINDOWS\system32\drivers\ati1ttxx.sys 2006-12-22 13:12 21,183 ——— C:\WINDOWS\system32\drivers\atv01nt5.dll 2006-12-22 13:12 201,728 ——— C:\WINDOWS\system32\ati2dvag.dll 2006-12-22 13:12 20,992 ——— C:\WINDOWS\system32\bthci.dll 2006-12-22 13:12 193,024 ——— C:\WINDOWS\system32\fsquirt.exe 2006-12-22 13:12 188,508 ——— C:\WINDOWS\system32\slgen.dll 2006-12-22 13:12 180,360 ——— C:\WINDOWS\system32\drivers\ntmtlfax.sys 2006-12-22 13:12 18,944 ——— C:\WINDOWS\system32\drivers\bthusb.sys 2006-12-22 13:12 17,408 ——— C:\WINDOWS\system32\winshfhc.dll 2006-12-22 13:12 17,279 ——— C:\WINDOWS\system32\drivers\atv10nt5.dll 2006-12-22 13:12 17,024 ——— C:\WINDOWS\system32\drivers\bthenum.sys 2006-12-22 13:12 168,448 ——— C:\WINDOWS\system32\wmerror.dll 2006-12-22 13:12 16,896 –a—— C:\WINDOWS\system32\fltlib.dll 2006-12-22 13:12 15,872 ——— C:\WINDOWS\system32\w3ssl.dll 2006-12-22 13:12 15,488 ——— C:\WINDOWS\system32\drivers\mssmbios.sys 2006-12-22 13:12 15,423 ——— C:\WINDOWS\system32\drivers\ch7xxnt5.dll 2006-12-22 13:12 15,104 ——— C:\WINDOWS\system32\drivers\hidir.sys 2006-12-22 13:12 14,336 ——— C:\WINDOWS\system32\drivers\atinpdxx.sys 2006-12-22 13:12 14,336 ——— C:\WINDOWS\system32\auditusr.exe 2006-12-22 13:12 14,143 ——— C:\WINDOWS\system32\drivers\atv06nt5.dll 2006-12-22 13:12 13,824 ——— C:\WINDOWS\system32\wscntfy.exe 2006-12-22 13:12 13,824 ——— C:\WINDOWS\system32\drivers\atinttxx.sys 2006-12-22 13:12 13,824 ——— C:\WINDOWS\system32\drivers\atinmdxx.sys 2006-12-22 13:12 13,824 ——— C:\WINDOWS\system32\cmsetacl.dll 2006-12-22 13:12 13,776 ——— C:\WINDOWS\system32\drivers\recagent.sys 2006-12-22 13:12 13,568 ——— C:\WINDOWS\system32\drivers\wacompen.sys 2006-12-22 13:12 13,240 ——— C:\WINDOWS\system32\drivers\slwdmsup.sys 2006-12-22 13:12 129,536 ——— C:\WINDOWS\system32\xmlprov.dll 2006-12-22 13:12 129,535 ——— C:\WINDOWS\system32\drivers\slnt7554.sys 2006-12-22 13:12 128,896 ——— C:\WINDOWS\system32\drivers\fltmgr.sys 2006-12-22 13:12 126,686 ——— C:\WINDOWS\system32\drivers\mtlmnt5.sys 2006-12-22 13:12 12,672 ——— C:\WINDOWS\system32\drivers\mutohpen.sys 2006-12-22 13:12 12,047 ——— C:\WINDOWS\system32\drivers\ati1pdxx.sys 2006-12-22 13:12 118,784 ——— C:\WINDOWS\system32\msdadiag.dll 2006-12-22 13:12 116,224 ——— C:\WINDOWS\system32\p2p.dll 2006-12-22 13:12 114,688 ——— C:\WINDOWS\system32\wmpasf.dll 2006-12-22 13:12 11,935 ——— C:\WINDOWS\system32\drivers\wadv11nt.sys 2006-12-22 13:12 11,871 ——— C:\WINDOWS\system32\drivers\wadv09nt.sys 2006-12-22 13:12 11,868 ——— C:\WINDOWS\system32\drivers\mdmxsdk.sys 2006-12-22 13:12 11,807 ——— C:\WINDOWS\system32\drivers\wadv07nt.sys 2006-12-22 13:12 11,615 ——— C:\WINDOWS\system32\drivers\ati1mdxx.sys 2006-12-22 13:12 11,359 ——— C:\WINDOWS\system32\drivers\atv02nt5.dll 2006-12-22 13:12 11,325 ——— C:\WINDOWS\system32\drivers\vchnt5.dll 2006-12-22 13:12 11,295 ——— C:\WINDOWS\system32\drivers\wadv08nt.sys 2006-12-22 13:12 11,136 ——— C:\WINDOWS\system32\drivers\sffdisk.sys 2006-12-22 13:12 108,032 ——— C:\WINDOWS\system32\wshbth.dll 2006-12-22 13:12 104,960 ——— C:\WINDOWS\system32\drivers\atinrvxx.sys 2006-12-22 13:12 100,992 ——— C:\WINDOWS\system32\drivers\bthpan.sys 2006-12-22 13:12 10,240 ——— C:\WINDOWS\system32\drivers\sffp_sd.sys 2006-12-22 13:12 1,888,992 ——— C:\WINDOWS\system32\ati3duag.dll 2006-12-22 13:12 1,737,856 ——— C:\WINDOWS\system32\mtxparhd.dll 2006-12-22 13:12 1,309,184 ——— C:\WINDOWS\system32\drivers\mtlstrm.sys 2006-12-22 13:12 1,041,536 ——— C:\WINDOWS\system32\drivers\hsfdpsp2.sys 2006-12-22 13:05 2,897,920 ——— C:\WINDOWS\system32\xpsp2res.dll 2006-12-22 12:06 97,280 –a—— C:\WINDOWS\system32\dpcdll.dll 2006-12-22 12:06 937,984 –a—— C:\WINDOWS\system32\winbrand.dll 2006-12-22 12:06 8,192 ——— C:\WINDOWS\system32\bitsprx2.dll 2006-12-22 12:06 755,200 –a—— C:\WINDOWS\system32\ir50_32.dll 2006-12-22 12:06 7,168 –a—— C:\WINDOWS\system32\hccoin.dll 2006-12-22 12:06 7,168 ——— C:\WINDOWS\system32\bitsprx3.dll 2006-12-22 12:06 537,088 –a—— C:\WINDOWS\system32\msftedit.dll 2006-12-22 12:06 438,784 ——— C:\WINDOWS\system32\xpob2res.dll 2006-12-22 12:06 4,096 –a—— C:\WINDOWS\system32\dsprpres.dll 2006-12-22 12:06 397,056 –a—— C:\WINDOWS\system32\s3gnb.dll 2006-12-22 12:06 384,512 –a—— C:\WINDOWS\system32\mp4sdmod.dll 2006-12-22 12:06 382,464 –a—— C:\WINDOWS\system32\qmgr.dll 2006-12-22 12:06 37,376 –a—— C:\WINDOWS\system32\drivers\amdk7.sys 2006-12-22 12:06 351,232 –a—— C:\WINDOWS\system32\winhttp.dll 2006-12-22 12:06 338,432 –a—— C:\WINDOWS\system32\ir41_qcx.dll 2006-12-22 12:06 310,272 –a—— C:\WINDOWS\system32\mp43dmod.dll 2006-12-22 12:06 30,592 –a—— C:\WINDOWS\system32\drivers\rndismpx.sys 2006-12-22 12:06 270,848 –a—— C:\WINDOWS\system32\sbe.dll 2006-12-22 12:06 26,624 –a—— C:\WINDOWS\system32\drivers\usbehci.sys 2006-12-22 12:06 24,064 –a—— C:\WINDOWS\system32\pidgen.dll 2006-12-22 12:06 200,192 –a—— C:\WINDOWS\system32\ir50_qc.dll 2006-12-22 12:06 20,480 –a—— C:\WINDOWS\system32\encapi.dll 2006-12-22 12:06 2,113,536 –a—— C:\WINDOWS\system32\dxdiagn.dll 2006-12-22 12:06 187,392 –a—— C:\WINDOWS\system32\xpsp1res.dll 2006-12-22 12:06 186,368 –a—— C:\WINDOWS\system32\encdec.dll 2006-12-22 12:06 183,808 –a—— C:\WINDOWS\system32\ir50_qcx.dll 2006-12-22 12:06 166,912 –a—— C:\WINDOWS\system32\drivers\s3gnbm.sys 2006-12-22 12:06 159,232 –a—— C:\WINDOWS\system32\sbeio.dll 2006-12-22 12:06 134,656 –a—— C:\WINDOWS\system32\mssap.dll 2006-12-22 12:06 120,320 –a—— C:\WINDOWS\system32\ir41_qc.dll 2006-12-22 12:06 12,416 –a—— C:\WINDOWS\system32\drivers\tunmp.sys 2006-12-22 12:06 1,689,088 –a—— C:\WINDOWS\system32\d3d9.dll 2006-12-22 12:05 994,304 –a—— C:\WINDOWS\system32\msgina.dll 2006-12-22 12:05 99,840 –a—— C:\WINDOWS\system32\advpack.dll 2006-12-22 12:05 98,304 –a—— C:\WINDOWS\system32\cscript.exe 2006-12-22 12:05 98,304 –a—— C:\WINDOWS\system32\ahui.exe 2006-12-22 12:05 97,280 –a—— C:\WINDOWS\system32\loadperf.dll 2006-12-22 12:05 956,416 –a—— C:\WINDOWS\system32\msdtctm.dll 2006-12-22 12:05 92,672 –a—— C:\WINDOWS\system32\dskquota.dll 2006-12-22 12:05 92,224 –a—— C:\WINDOWS\system32\krnl386.exe 2006-12-22 12:05 9,728 –a—— C:\WINDOWS\system32\gpkrsrc.dll 2006-12-22 12:05 9,344 –a—— C:\WINDOWS\system32\framebuf.dll 2006-12-22 12:05 87,552 –a—— C:\WINDOWS\system32\fldrclnr.dll 2006-12-22 12:05 87,040 –a—— C:\WINDOWS\system32\mprapi.dll 2006-12-22 12:05 86,016 –a—— C:\WINDOWS\system32\msapsspc.dll 2006-12-22 12:05 85,504 –a—— C:\WINDOWS\system32\makecab.exe 2006-12-22 12:05 85,504 –a—— C:\WINDOWS\system32\diantz.exe 2006-12-22 12:05 85,504 –a—— C:\WINDOWS\system32\catsrvps.dll 2006-12-22 12:05 84,992 –a—— C:\WINDOWS\system32\avifil32.dll 2006-12-22 12:05 84,480 –a—— C:\WINDOWS\system32\mciavi32.dll 2006-12-22 12:05 84,480 –a—— C:\WINDOWS\system32\cabview.dll 2006-12-22 12:05 83,456 –a—— C:\WINDOWS\system32\dpvsetup.exe 2006-12-22 12:05 825,344 –a—— C:\WINDOWS\system32\d3dim700.dll 2006-12-22 12:05 82,432 –a—— C:\WINDOWS\system32\dmscript.dll 2006-12-22 12:05 82,432 –a—— C:\WINDOWS\system32\dfrgfat.exe 2006-12-22 12:05 815,104 –a—— C:\WINDOWS\system32\mmc.exe 2006-12-22 12:05 81,920 –a—— C:\WINDOWS\system32\isign32.dll 2006-12-22 12:05 81,920 –a—— C:\WINDOWS\system32\ils.dll 2006-12-22 12:05 80,384 –a—— C:\WINDOWS\system32\iccvid.dll 2006-12-22 12:05 80,384 –a—— C:\WINDOWS\system32\faultrep.dll 2006-12-22 12:05 8,704 –a—— C:\WINDOWS\system32\fxsperf.dll 2006-12-22 12:05 8,704 –a—— C:\WINDOWS\system32\dciman32.dll 2006-12-22 12:05 8,704 –a—— C:\WINDOWS\system32\batt.dll 2006-12-22 12:05 8,192 –a—— C:\WINDOWS\system32\igmpagnt.dll 2006-12-22 12:05 8,192 –a—— C:\WINDOWS\system32\d3d8thk.dll 2006-12-22 12:05 8,192 –a—— C:\WINDOWS\system32\asferror.dll 2006-12-22 12:05 792,064 –a—— C:\WINDOWS\system32\comres.dll 2006-12-22 12:05 78,336 –a—— C:\WINDOWS\system32\browsewm.dll 2006-12-22 12:05 77,824 –a—— C:\WINDOWS\system32\cliconfg.dll 2006-12-22 12:05 77,312 –a—— C:\WINDOWS\system32\browser.dll 2006-12-22 12:05 75,264 –a—— C:\WINDOWS\system32\inetpp.dll 2006-12-22 12:05 74,752 –a—— C:\WINDOWS\system32\cryptdlg.dll 2006-12-22 12:05 74,240 –a—— C:\WINDOWS\system32\mscms.dll 2006-12-22 12:05 73,728 –a—— C:\WINDOWS\system32\icwdial.dll 2006-12-22 12:05 72,704 –a—— C:\WINDOWS\system32\magnify.exe 2006-12-22 12:05 72,192 –a—— C:\WINDOWS\system32\fxscom.dll 2006-12-22 12:05 71,680 –a—— C:\WINDOWS\system32\msacm32.dll 2006-12-22 12:05 71,680 –a—— C:\WINDOWS\system32\dsdmoprp.dll 2006-12-22 12:05 70,656 –a—— C:\WINDOWS\system32\mmcbase.dll 2006-12-22 12:05 70,656 –a—— C:\WINDOWS\system32\amstream.dll 2006-12-22 12:05 7,424 –a—— C:\WINDOWS\system32\kd1394.dll 2006-12-22 12:05 69,632 –a—— C:\WINDOWS\system32\msconf.dll 2006-12-22 12:05 69,120 –a—— C:\WINDOWS\system32\msctfp.dll 2006-12-22 12:05 69,120 –a—— C:\WINDOWS\system32\ciodm.dll 2006-12-22 12:05 68,768 –a—— C:\WINDOWS\system32\mmsystem.dll 2006-12-22 12:05 68,768 –a—— C:\WINDOWS\system\mmsystem.dll 2006-12-22 12:05 68,608 –a—— C:\WINDOWS\system32\digest.dll 2006-12-22 12:05 68,096 –a—— C:\WINDOWS\system32\adsmsext.dll 2006-12-22 12:05 679,424 –a—— C:\WINDOWS\system32\inetcomm.dll 2006-12-22 12:05 65,536 –a—— C:\WINDOWS\system32\icwphbk.dll 2006-12-22 12:05 65,024 –a—— C:\WINDOWS\system32\asycfilt.dll 2006-12-22 12:05 640,000 –a—— C:\WINDOWS\system32\dbghelp.dll 2006-12-22 12:05 64,000 –a—— C:\WINDOWS\system32\cleanmgr.exe 2006-12-22 12:05 63,488 –a—— C:\WINDOWS\system32\cryptnet.dll 2006-12-22 12:05 63,488 –a—— C:\WINDOWS\system32\cmstp.exe 2006-12-22 12:05 63,488 –a—— C:\WINDOWS\system32\browselc.dll 2006-12-22 12:05 625,152 –a—— C:\WINDOWS\system32\catsrvut.dll 2006-12-22 12:05 62,976 –a—— C:\WINDOWS\system32\iesetup.dll 2006-12-22 12:05 619,008 –a—— C:\WINDOWS\system32\dx7vb.dll 2006-12-22 12:05 614,912 –a—— C:\WINDOWS\system32\h323msp.dll 2006-12-22 12:05 61,440 –a—— C:\WINDOWS\system32\dmcompos.dll 2006-12-22 12:05 61,440 –a—— C:\WINDOWS\system32\admparse.dll 2006-12-22 12:05 60,928 –a—— C:\WINDOWS\system32\miglibnt.dll 2006-12-22 12:05 60,928 –a—— C:\WINDOWS\system32\dpnhupnp.dll 2006-12-22 12:05 60,416 –a—— C:\WINDOWS\system32\cryptsvc.dll 2006-12-22 12:05 60,416 –a—— C:\WINDOWS\system32\colbact.dll 2006-12-22 12:05 6,656 –a—— C:\WINDOWS\system32\wuauserv.dll 2006-12-22 12:05 6,656 –a—— C:\WINDOWS\system32\msidle.dll 2006-12-22 12:05 6,656 –a—— C:\WINDOWS\system32\fxsres.dll 2006-12-22 12:05 6,144 –a—— C:\WINDOWS\system32\msdtc.exe 2006-12-22 12:05 597,504 –a—— C:\WINDOWS\system32\crypt32.dll 2006-12-22 12:05 59,904 –a—— C:\WINDOWS\system32\mpr.dll 2006-12-22 12:05 59,904 –a—— C:\WINDOWS\system32\ipv6mon.dll 2006-12-22 12:05 59,904 –a—— C:\WINDOWS\system32\cabinet.dll 2006-12-22 12:05 59,904 ——— C:\WINDOWS\system32\devenum.dll 2006-12-22 12:05 586,240 –a—— C:\WINDOWS\system32\mlang.dll 2006-12-22 12:05 580,608 –a—— C:\WINDOWS\system32\autofmt.exe 2006-12-22 12:05 58,880 –a—— C:\WINDOWS\system32\msdtclog.dll 2006-12-22 12:05 58,880 –a—— C:\WINDOWS\system32\licwmi.dll 2006-12-22 12:05 58,880 –a—— C:\WINDOWS\system32\atl.dll 2006-12-22 12:05 57,856 –a—— C:\WINDOWS\system32\clusapi.dll 2006-12-22 12:05 57,344 –a—— C:\WINDOWS\system32\msasn1.dll 2006-12-22 12:05 57,344 –a—— C:\WINDOWS\system32\dpwsockx.dll 2006-12-22 12:05 562,176 –a—— C:\WINDOWS\system32\fxsst.dll 2006-12-22 12:05 56,832 –a—— C:\WINDOWS\system32\mshtmler.dll 2006-12-22 12:05 56,832 –a—— C:\WINDOWS\system32\authz.dll 2006-12-22 12:05 55,808 –a—— C:\WINDOWS\system32\ipconfig.exe 2006-12-22 12:05 55,808 –a—— C:\WINDOWS\system32\eventlog.dll 2006-12-22 12:05 55,296 –a—— C:\WINDOWS\system32\fxsevent.dll 2006-12-22 12:05 540,160 –a—— C:\WINDOWS\system32\comuid.dll 2006-12-22 12:05 54,272 –a—— C:\WINDOWS\system32\ixsso.dll 2006-12-22 12:05 54,272 –a—— C:\WINDOWS\system32\dataclen.dll 2006-12-22 12:05 53,840 –a—— C:\WINDOWS\system32\dosx.exe 2006-12-22 12:05 53,760 –a—— C:\WINDOWS\system32\cryptext.dll 2006-12-22 12:05 53,279 –a—— C:\WINDOWS\system32\msjter40.dll 2006-12-22 12:05 53,248 –a—— C:\WINDOWS\system32\ipv6.exe 2006-12-22 12:05 52,736 –a—— C:\WINDOWS\system32\basesrv.dll 2006-12-22 12:05 52,224 –a—— C:\WINDOWS\system32\dmutil.dll 2006-12-22 12:05 514,560 –a—— C:\WINDOWS\system32\logonui.exe 2006-12-22 12:05 512,512 –a—— C:\WINDOWS\system32\cryptui.dll 2006-12-22 12:05 512,029 –a—— C:\WINDOWS\system32\msexch40.dll 2006-12-22 12:05 51,712 –a—— C:\WINDOWS\system32\msident.dll 2006-12-22 12:05 51,200 –a—— C:\WINDOWS\system32\dssec.dll 2006-12-22 12:05 50,688 –a—— C:\WINDOWS\twain_32.dll 2006-12-22 12:05 50,688 –a—— C:\WINDOWS\system32\mmcshext.dll 2006-12-22 12:05 50,688 –a—— C:\WINDOWS\system32\camocx.dll 2006-12-22 12:05 5,632 –a—— C:\WINDOWS\system32\cisvc.exe 2006-12-22 12:05 498,742 –a—— C:\WINDOWS\system32\dxmasf.dll 2006-12-22 12:05 498,688 –a—— C:\WINDOWS\system32\clbcatq.dll 2006-12-22 12:05 48,640 –a—— C:\WINDOWS\system32\iernonce.dll 2006-12-22 12:05 48,128 –a—— C:\WINDOWS\system32\msprivs.dll 2006-12-22 12:05 48,128 –a—— C:\WINDOWS\system32\inetres.dll 2006-12-22 12:05 48,128 –a—— C:\WINDOWS\system32\docprop2.dll 2006-12-22 12:05 47,616 –a—— C:\WINDOWS\system32\iyuv_32.dll 2006-12-22 12:05 47,104 –a—— C:\WINDOWS\system32\cnbjmon.dll 2006-12-22 12:05 47,104 –a—— C:\WINDOWS\system32\cmdl32.exe 2006-12-22 12:05 457,728 –a—— C:\WINDOWS\system32\certmgr.dll 2006-12-22 12:05 452,096 –a—— C:\WINDOWS\system32\fxsapi.dll 2006-12-22 12:05 45,568 –a—— C:\WINDOWS\system32\extrac32.exe 2006-12-22 12:05 45,568 –a—— C:\WINDOWS\system32\dnsrslvr.dll 2006-12-22 12:05 44,544 –a—— C:\WINDOWS\system32\alg.exe 2006-12-22 12:05 426,496 –a—— C:\WINDOWS\system32\msdtcprx.dll 2006-12-22 12:05 423,936 –a—— C:\WINDOWS\system32\licdll.dll 2006-12-22 12:05 421,919 –a—— C:\WINDOWS\system32\msrd2x40.dll 2006-12-22 12:05 42,496 –a—— C:\WINDOWS\system32\audiosrv.dll 2006-12-22 12:05 41,984 –a—— C:\WINDOWS\system32\htui.dll 2006-12-22 12:05 41,472 –a—— C:\WINDOWS\system32\hhsetup.dll 2006-12-22 12:05 400,384 –a—— C:\WINDOWS\system32\fxsxp32.dll 2006-12-22 12:05 4,608 –a—— C:\WINDOWS\system32\msimg32.dll 2006-12-22 12:05 4,126 –a—— C:\WINDOWS\system32\msdxmlc.dll 2006-12-22 12:05 4,096 –a—— C:\WINDOWS\system32\ksuser.dll 2006-12-22 12:05 4,096 –a—— C:\WINDOWS\system32\actmovie.exe 2006-12-22 12:05 399,872 –a—— C:\WINDOWS\system32\lmrt.dll 2006-12-22 12:05 397,312 –a—— C:\WINDOWS\system32\fxstiff.dll 2006-12-22 12:05 39,936 –a—— C:\WINDOWS\system32\mf3216.dll 2006-12-22 12:05 39,936 –a—— C:\WINDOWS\system32\cmutil.dll 2006-12-22 12:05 39,936 –a—— C:\WINDOWS\system32\cmmon32.exe 2006-12-22 12:05 39,424 –a—— C:\WINDOWS\system32\grpconv.exe 2006-12-22 12:05 384,000 –a—— C:\WINDOWS\system32\ipsmsnap.dll 2006-12-22 12:05 382,976 –a—— C:\WINDOWS\system32\fontext.dll 2006-12-22 12:05 380,957 –a—— C:\WINDOWS\system32\expsrv.dll 2006-12-22 12:05 38,912 –a—— C:\WINDOWS\system32\dfrgsnap.dll 2006-12-22 12:05 38,912 –a—— C:\WINDOWS\system32\cfgbkend.dll 2006-12-22 12:05 375,296 –a—— C:\WINDOWS\system32\dpnet.dll 2006-12-22 12:05 367,616 –a—— C:\WINDOWS\system32\dsound.dll 2006-12-22 12:05 36,921 –a—— C:\WINDOWS\system32\imeshare.dll 2006-12-22 12:05 36,864 –a—— C:\WINDOWS\system32\mscpxl32.dll 2006-12-22 12:05 358,976 –a—— C:\WINDOWS\system32\msjetoledb40.dll 2006-12-22 12:05 35,840 –a—— C:\WINDOWS\system32\imgutil.dll 2006-12-22 12:05 35,840 –a—— C:\WINDOWS\system32\dmloader.dll 2006-12-22 12:05 35,328 –a—— C:\WINDOWS\system32\mciqtz32.dll 2006-12-22 12:05 35,328 –a—— C:\WINDOWS\system32\dpnhpast.dll 2006-12-22 12:05 35,328 –a—— C:\WINDOWS\system32\corpol.dll 2006-12-22 12:05 349,696 –a—— C:\WINDOWS\system32\ipsecsnp.dll 2006-12-22 12:05 348,189 –a—— C:\WINDOWS\system32\mspbde40.dll 2006-12-22 12:05 344,064 –a—— C:\WINDOWS\system32\hnetcfg.dll 2006-12-22 12:05 343,040 –a—— C:\WINDOWS\system32\mspaint.exe 2006-12-22 12:05 343,040 –a—— C:\WINDOWS\system32\cmdial32.dll 2006-12-22 12:05 34,560 –a—— C:\WINDOWS\system32\mnmdd.dll 2006-12-22 12:05 34,304 –a—— C:\WINDOWS\system32\ie4uinit.exe 2006-12-22 12:05 337,920 –a—— C:\WINDOWS\system32\filemgmt.dll 2006-12-22 12:05 331,264 –a—— C:\WINDOWS\system32\ipnathlp.dll 2006-12-22 12:05 330,752 –a—— C:\WINDOWS\system32\ippromon.dll 2006-12-22 12:05 330,752 –a—— C:\WINDOWS\system32\hnetwiz.dll 2006-12-22 12:05 33,280 –a—— C:\WINDOWS\system32\inetmib1.dll 2006-12-22 12:05 33,280 –a—— C:\WINDOWS\system32\cryptdll.dll 2006-12-22 12:05 33,280 –a—— C:\WINDOWS\system32\clipsrv.exe 2006-12-22 12:05 326,656 –a—— C:\WINDOWS\system32\cscui.dll 2006-12-22 12:05 323,584 –a—— C:\WINDOWS\system32\iedkcs32.dll 2006-12-22 12:05 32,768 –a—— C:\WINDOWS\system32\mnmsrvc.exe 2006-12-22 12:05 32,768 –a—— C:\WINDOWS\system32\isrdbg32.dll 2006-12-22 12:05 319,517 –a—— C:\WINDOWS\system32\msexcl40.dll 2006-12-22 12:05 315,423 –a—— C:\WINDOWS\system32\msrd3x40.dll 2006-12-22 12:05 304,128 –a—— C:\WINDOWS\system32\duser.dll 2006-12-22 12:05 30,208 –a—— C:\WINDOWS\system32\mspatcha.dll 2006-12-22 12:05 30,208 –a—— C:\WINDOWS\system32\dplaysvr.exe 2006-12-22 12:05 30,208 –a—— C:\WINDOWS\system32\ddeshare.exe 2006-12-22 12:05 30,208 –a—— C:\WINDOWS\system32\atmlib.dll 2006-12-22 12:05 3,584 –a—— C:\WINDOWS\system32\msafd.dll 2006-12-22 12:05 3,584 –a—— C:\WINDOWS\system32\icmp.dll 2006-12-22 12:05 3,584 –a—— C:\WINDOWS\system32\dpnlobby.dll 2006-12-22 12:05 3,584 –a—— C:\WINDOWS\system32\dpnaddr.dll 2006-12-22 12:05 295,936 –a—— C:\WINDOWS\system32\kerberos.dll 2006-12-22 12:05 294,400 –a—— C:\WINDOWS\system32\msctf.dll 2006-12-22 12:05 290,816 –a—— C:\WINDOWS\system32\msnsspc.dll 2006-12-22 12:05 29,184 –a—— C:\WINDOWS\system32\mshta.exe 2006-12-22 12:05 285,696 –a—— C:\WINDOWS\system32\atmfd.dll 2006-12-22 12:05 285,184 –a—— C:\WINDOWS\system32\fxscomex.dll 2006-12-22 12:05 283,648 –a—— C:\WINDOWS\winhlp32.exe 2006-12-22 12:05 282,624 –a—— C:\WINDOWS\system32\devmgr.dll 2006-12-22 12:05 280,064 –a—— C:\WINDOWS\system32\gdi32.dll 2006-12-22 12:05 28,672 –a—— C:\WINDOWS\system32\dmband.dll 2006-12-22 12:05 28,672 –a—— C:\WINDOWS\system32\dfsshlex.dll 2006-12-22 12:05 28,672 –a—— C:\WINDOWS\system32\dbnmpntw.dll 2006-12-22 12:05 28,672 –a—— C:\WINDOWS\system32\batmeter.dll 2006-12-22 12:05 274,432 –a—— C:\WINDOWS\system32\inetcfg.dll 2006-12-22 12:05 27,648 –a—— C:\WINDOWS\system32\conime.exe 2006-12-22 12:05 27,136 –a—— C:\WINDOWS\system32\fxsdrv.dll 2006-12-22 12:05 27,136 –a—— C:\WINDOWS\system32\findstr.exe 2006-12-22 12:05 27,136 –a—— C:\WINDOWS\system32\ddrawex.dll 2006-12-22 12:05 267,776 –a—— C:\WINDOWS\system32\fxssvc.exe 2006-12-22 12:05 266,240 –a—— C:\WINDOWS\system32\ddraw.dll 2006-12-22 12:05 263,680 –a—— C:\WINDOWS\system32\adsnt.dll 2006-12-22 12:05 254,976 –a—— C:\WINDOWS\system32\icm32.dll 2006-12-22 12:05 252,928 –a—— C:\WINDOWS\system32\msoeacct.dll 2006-12-22 12:05 252,928 –a—— C:\WINDOWS\system32\compatui.dll 2006-12-22 12:05 25,088 –a—— C:\WINDOWS\system32\mslbui.dll 2006-12-22 12:05 25,088 –a—— C:\WINDOWS\system32\defrag.exe 2006-12-22 12:05 25,088 –a—— C:\WINDOWS\system32\at.exe 2006-12-22 12:05 248,832 –a—— C:\WINDOWS\system32\msieftp.dll 2006-12-22 12:05 246,272 –a—— C:\WINDOWS\system32\fxst30.dll 2006-12-22 12:05 243,200 –a—— C:\WINDOWS\system32\es.dll 2006-12-22 12:05 241,693 –a—— C:\WINDOWS\system32\msjtes40.dll 2006-12-22 12:05 240,640 –a—— C:\WINDOWS\system32\mpg4dmod.dll 2006-12-22 12:05 24,576 –a—— C:\WINDOWS\system32\dbmsrpcn.dll 2006-12-22 12:05 24,576 –a—— C:\WINDOWS\system32\davclnt.dll 2006-12-22 12:05 239,104 –a—— C:\WINDOWS\system32\dsquery.dll 2006-12-22 12:05 23,552 –a—— C:\WINDOWS\system32\mciwave.dll 2006-12-22 12:05 23,552 –a—— C:\WINDOWS\system32\ipxroute.exe 2006-12-22 12:05 23,552 –a—— C:\WINDOWS\system32\fxsmon.dll 2006-12-22 12:05 23,552 –a—— C:\WINDOWS\system32\fxsext32.dll 2006-12-22 12:05 23,552 –a—— C:\WINDOWS\system32\dpmodemx.dll 2006-12-22 12:05 23,552 –a—— C:\WINDOWS\system32\dmserver.dll 2006-12-22 12:05 23,040 –a—— C:\WINDOWS\system32\mciseq.dll 2006-12-22 12:05 23,040 –a—— C:\WINDOWS\system32\ersvc.dll 2006-12-22 12:05 229,888 –a—— C:\WINDOWS\system32\dplayx.dll 2006-12-22 12:05 229,376 –a—— C:\WINDOWS\system32\fxscover.exe 2006-12-22 12:05 229,376 –a—— C:\WINDOWS\system32\compstui.dll 2006-12-22 12:05 225,792 –a—— C:\WINDOWS\system32\catsrv.dll 2006-12-22 12:05 224,768 –a—— C:\WINDOWS\system32\dmadmin.exe 2006-12-22 12:05 221,696 –a—— C:\WINDOWS\system32\localsec.dll 2006-12-22 12:05 220,672 –a—— C:\WINDOWS\system32\logon.scr 2006-12-22 12:05 22,528 –a—— C:\WINDOWS\system32\mfcsubs.dll 2006-12-22 12:05 22,016 –a—— C:\WINDOWS\system32\lpk.dll 2006-12-22 12:05 22,016 –a—— C:\WINDOWS\system32\licmgr10.dll 2006-12-22 12:05 216,576 –a—— C:\WINDOWS\system32\ieaksie.dll 2006-12-22 12:05 216,064 –a—— C:\WINDOWS\system32\moricons.dll 2006-12-22 12:05 213,023 –a—— C:\WINDOWS\system32\msltus40.dll 2006-12-22 12:05 212,480 –a—— C:\WINDOWS\system32\dpvoice.dll 2006-12-22 12:05 21,504 –a—— C:\WINDOWS\system32\hidserv.dll 2006-12-22 12:05 21,504 –a—— C:\WINDOWS\system32\feclient.dll 2006-12-22 12:05 21,504 –a—— C:\WINDOWS\system32\dpvacm.dll 2006-12-22 12:05 207,360 –a—— C:\WINDOWS\system32\mobsync.dll 2006-12-22 12:05 200,704 –a—— C:\WINDOWS\system32\dmdskmgr.dll 2006-12-22 12:05 20,992 –a—— C:\WINDOWS\system32\hid.dll 2006-12-22 12:05 20,992 –a—— C:\WINDOWS\system32\fontview.exe 2006-12-22 12:05 20,480 –a—— C:\WINDOWS\system32\msorc32r.dll 2006-12-22 12:05 20,480 –a—— C:\WINDOWS\system32\cliconfg.exe 2006-12-22 12:05 2,067,968 –a—— C:\WINDOWS\system32\cdosys.dll 2006-12-22 12:05 194,560 –a—— C:\WINDOWS\system32\certcli.dll 2006-12-22 12:05 194,048 –a—— C:\WINDOWS\system32\activeds.dll 2006-12-22 12:05 193,024 –a—— C:\WINDOWS\system32\eudcedit.exe 2006-12-22 12:05 192,512 –a—— C:\WINDOWS\system32\fxswzrd.dll 2006-12-22 12:05 19,968 –a—— C:\WINDOWS\system32\linkinfo.dll 2006-12-22 12:05 19,456 –a—— C:\WINDOWS\system32\dswave.dll 2006-12-22 12:05 185,344 –a—— C:\WINDOWS\system32\cmprops.dll 2006-12-22 12:05 183,808 –a—— C:\WINDOWS\system32\accwiz.exe 2006-12-22 12:05 183,296 –a—— C:\WINDOWS\system32\els.dll 2006-12-22 12:05 182,784 –a—— C:\WINDOWS\system32\ipsecsvc.dll 2006-12-22 12:05 181,760 –a—— C:\WINDOWS\system32\dsdmo.dll 2006-12-22 12:05 181,760 –a—— C:\WINDOWS\system32\dinput8.dll 2006-12-22 12:05 181,248 –a—— C:\WINDOWS\system32\dmime.dll 2006-12-22 12:05 180,224 –a—— C:\WINDOWS\system32\dwwin.exe 2006-12-22 12:05 18,944 –a—— C:\WINDOWS\system32\midimap.dll 2006-12-22 12:05 18,432 –a—— C:\WINDOWS\system32\dpnsvr.exe 2006-12-22 12:05 175,616 –a—— C:\WINDOWS\system32\adsldp.dll 2006-12-22 12:05 17,920 –a—— C:\WINDOWS\system32\dvdupgrd.exe 2006-12-22 12:05 17,408 –a—— C:\WINDOWS\system32\mmfutil.dll 2006-12-22 12:05 17,408 –a—— C:\WINDOWS\system32\bidispl.dll 2006-12-22 12:05 17,408 –a—— C:\WINDOWS\system32\alrsvc.dll 2006-12-22 12:05 163,840 –a—— C:\WINDOWS\system32\diskpart.exe 2006-12-22 12:05 163,840 –a—— C:\WINDOWS\system32\credui.dll 2006-12-22 12:05 161,280 –a—— C:\WINDOWS\system32\msdtcuiu.dll 2006-12-22 12:05 16,896 –a—— C:\WINDOWS\system32\cfgmgr32.dll 2006-12-22 12:05 16,384 –a—— C:\WINDOWS\system32\ds32gt.dll 2006-12-22 12:05 159,232 –a—— C:\WINDOWS\system32\msimtf.dll 2006-12-22 12:05 159,232 –a—— C:\WINDOWS\system32\dinput.dll 2006-12-22 12:05 155,136 –a—— C:\WINDOWS\system32\itircl.dll 2006-12-22 12:05 154,112 –a—— C:\WINDOWS\system32\fxsui.dll 2006-12-22 12:05 153,600 –a—— C:\WINDOWS\system32\modemui.dll 2006-12-22 12:05 151,583 –a—— C:\WINDOWS\system32\msjint40.dll 2006-12-22 12:05 151,552 –a—— C:\WINDOWS\system32\msdart.dll 2006-12-22 12:05 150,528 –a—— C:\WINDOWS\system32\keymgr.dll 2006-12-22 12:05 150,016 –a—— C:\WINDOWS\system32\imapi.exe 2006-12-22 12:05 15,872 –a—— C:\WINDOWS\system32\inetppui.dll 2006-12-22 12:05 15,872 –a—— C:\WINDOWS\system32\dmremote.exe 2006-12-22 12:05 15,872 –a—— C:\WINDOWS\system32\cmcfg32.dll 2006-12-22 12:05 15,360 –a—— C:\WINDOWS\system32\ctfmon.exe 2006-12-22 12:05 147,456 –a—— C:\WINDOWS\system32\initpki.dll 2006-12-22 12:05 146,432 –a—— C:\WINDOWS\regedit.exe 2006-12-22 12:05 144,896 –a—— C:\WINDOWS\system32\hotplug.dll 2006-12-22 12:05 143,360 –a—— C:\WINDOWS\system32\msorcl32.dll 2006-12-22 12:05 143,360 –a—— C:\WINDOWS\system32\mobsync.exe 2006-12-22 12:05 143,360 –a—— C:\WINDOWS\system32\fxsclnt.exe 2006-12-22 12:05 143,360 –a—— C:\WINDOWS\system32\adsldpc.dll 2006-12-22 12:05 142,336 –a—— C:\WINDOWS\system32\dsprop.dll 2006-12-22 12:05 14,848 –a—— C:\WINDOWS\system32\mcastmib.dll 2006-12-22 12:05 14,336 –a—— C:\WINDOWS\system32\msdmo.dll 2006-12-22 12:05 14,336 –a—— C:\WINDOWS\system32\drprov.dll 2006-12-22 12:05 139,264 –a—— C:\WINDOWS\system32\ieakeng.dll 2006-12-22 12:05 137,216 –a—— C:\WINDOWS\system32\itss.dll 2006-12-22 12:05 137,216 –a—— C:\WINDOWS\system32\dssenh.dll 2006-12-22 12:05 135,680 –a—— C:\WINDOWS\system32\ifmon.dll 2006-12-22 12:05 13,312 –a—— C:\WINDOWS\system32\lsass.exe 2006-12-22 12:05 126,976 –a—— C:\WINDOWS\system32\apphelp.dll 2006-12-22 12:05 123,904 –a—— C:\WINDOWS\system32\dfrgui.dll 2006-12-22 12:05 123,392 –a—— C:\WINDOWS\system32\mplay32.exe 2006-12-22 12:05 123,392 –a—— C:\WINDOWS\system32\input.dll 2006-12-22 12:05 122,880 –a—— C:\WINDOWS\system32\glu32.dll 2006-12-22 12:05 120,832 –a—— C:\WINDOWS\system32\idq.dll 2006-12-22 12:05 12,800 –a—— C:\WINDOWS\system32\drivers\usb8023x.sys 2006-12-22 12:05 12,288 –a—— C:\WINDOWS\system32\mscpx32r.dll 2006-12-22 12:05 119,808 –a—— C:\WINDOWS\system32\iasrad.dll 2006-12-22 12:05 118,272 –a—— C:\WINDOWS\system32\mdminst.dll 2006-12-22 12:05 116,736 –a—— C:\WINDOWS\system32\dpvvox.dll 2006-12-22 12:05 114,688 –a—— C:\WINDOWS\system32\iexpress.exe 2006-12-22 12:05 114,688 –a—— C:\WINDOWS\system32\aclui.dll 2006-12-22 12:05 113,152 –a—— C:\WINDOWS\system32\dsuiext.dll 2006-12-22 12:05 111,104 –a—— C:\WINDOWS\system32\dgnet.dll 2006-12-22 12:05 110,592 –a—— C:\WINDOWS\system32\dbnetlib.dll 2006-12-22 12:05 110,080 –a—— C:\WINDOWS\system32\imm32.dll 2006-12-22 12:05 110,080 –a—— C:\WINDOWS\system32\clbcatex.dll 2006-12-22 12:05 11,776 –a—— C:\WINDOWS\system32\localui.dll 2006-12-22 12:05 11,264 –a—— C:\WINDOWS\system32\icaapi.dll 2006-12-22 12:05 11,264 –a—— C:\WINDOWS\system32\autolfn.exe 2006-12-22 12:05 11,264 –a—— C:\WINDOWS\system32\atmadm.exe 2006-12-22 12:05 105,984 –a—— C:\WINDOWS\system32\msoert2.dll 2006-12-22 12:05 105,984 –a—— C:\WINDOWS\system32\dmstyle.dll 2006-12-22 12:05 104,448 –a—— C:\WINDOWS\system32\dmusic.dll 2006-12-22 12:05 103,424 –a—— C:\WINDOWS\system32\dmsynth.dll 2006-12-22 12:05 102,912 –a—— C:\WINDOWS\system32\clipbrd.exe 2006-12-22 12:05 101,888 –a—— C:\WINDOWS\system32\cscdll.dll 2006-12-22 12:05 101,888 –a—— C:\WINDOWS\system32\actxprxy.dll 2006-12-22 12:05 100,352 –a—— C:\WINDOWS\system32\6to4svc.dll 2006-12-22 12:05 10,752 –a—— C:\WINDOWS\system32\dumprep.exe 2006-12-22 12:05 10,752 –a—— C:\WINDOWS\hh.exe 2006-12-22 12:05 10,240 –a—— C:\WINDOWS\system32\lprhelp.dll 2006-12-22 12:05 1,507,356 –a—— C:\WINDOWS\system32\msjet40.dll 2006-12-22 12:05 1,298,432 –a—— C:\WINDOWS\system32\dxdiag.exe 2006-12-22 12:05 1,294,336 –a—— C:\WINDOWS\system32\dsound3d.dll 2006-12-22 12:05 1,267,200 –a—— C:\WINDOWS\system32\comsvcs.dll 2006-12-22 12:05 1,227,264 –a—— C:\WINDOWS\system32\dx8vb.dll 2006-12-22 12:05 1,192,960 –a—— C:\WINDOWS\system32\mmcndmgr.dll 2006-12-22 12:05 1,179,648 –a—— C:\WINDOWS\system32\d3d8.dll 2006-12-22 12:05 1,082,368 –a—— C:\WINDOWS\system32\esent.dll 2006-12-22 12:05 1,032,192 –a—— C:\WINDOWS\explorer.exe 2006-12-22 12:05 1,028,096 –a—— C:\WINDOWS\system32\mfc42.dll 2006-12-22 12:05 1,024,000 –a—— C:\WINDOWS\system32\mfc42u.dll 2006-12-22 12:04 99,328 –a—— C:\WINDOWS\system32\winscard.dll 2006-12-22 12:04 984,576 –a—— C:\WINDOWS\system32\syssetup.dll 2006-12-22 12:04 983,552 –a—— C:\WINDOWS\system32\setupapi.dll 2006-12-22 12:04 98,304 –a—— C:\WINDOWS\system32\slbiop.dll 2006-12-22 12:04 96,768 –a—— C:\WINDOWS\system32\srvsvc.dll 2006-12-22 12:04 96,768 –a—— C:\WINDOWS\system32\psbase.dll 2006-12-22 12:04 96,256 –a—— C:\WINDOWS\system32\occache.dll 2006-12-22 12:04 96,256 –a—— C:\WINDOWS\system32\drivers\scsiport.sys 2006-12-22 12:04 95,744 –a—— C:\WINDOWS\system32\scardsvr.exe 2006-12-22 12:04 95,360 –a—— C:\WINDOWS\system32\drivers\atapi.sys 2006-12-22 12:04 94,208 –a—— C:\WINDOWS\system32\odbcint.dll 2006-12-22 12:04 93,696 –a—— C:\WINDOWS\system32\tscfgwmi.dll 2006-12-22 12:04 92,672 –a—— C:\WINDOWS\system32\wlnotify.dll 2006-12-22 12:04 92,168 –a—— C:\WINDOWS\system32\rdpdd.dll 2006-12-22 12:04 92,032 –a—— C:\WINDOWS\system32\drivers\ksecdd.sys 2006-12-22 12:04 91,776 –a—— C:\WINDOWS\system32\drivers\ndiswan.sys 2006-12-22 12:04 91,648 –a—— C:\WINDOWS\system32\xactsrv.dll 2006-12-22 12:04 91,136 –a—— C:\WINDOWS\system32\ntprint.dll 2006-12-22 12:04 91,136 –a—— C:\WINDOWS\system32\mtxoci.dll 2006-12-22 12:04 90,624 –a—— C:\WINDOWS\system32\trkwks.dll 2006-12-22 12:04 90,624 –a—— C:\WINDOWS\system32\mydocs.dll 2006-12-22 12:04 9,216 –a—— C:\WINDOWS\system32\scrnsave.scr 2006-12-22 12:04 89,600 –a—— C:\WINDOWS\system32\smlogsvc.exe 2006-12-22 12:04 89,088 –a—— C:\WINDOWS\system32\rasauto.dll 2006-12-22 12:04 88,448 –a—— C:\WINDOWS\system32\drivers\nwlnkipx.sys 2006-12-22 12:04 875,008 –a—— C:\WINDOWS\system32\netplwiz.dll 2006-12-22 12:04 87,176 –a—— C:\WINDOWS\system32\rdpwsx.dll 2006-12-22 12:04 86,016 –a—— C:\WINDOWS\system32\netsh.exe 2006-12-22 12:04 858,624 –a—— C:\WINDOWS\system32\tapi3.dll 2006-12-22 12:04 85,376 –a—— C:\WINDOWS\system32\drivers\nabtsfec.sys 2006-12-22 12:04 831,519 –a—— C:\WINDOWS\system32\mswdat10.dll 2006-12-22 12:04 83,456 –a—— C:\WINDOWS\system32\olepro32.dll 2006-12-22 12:04 82,944 –a—— C:\WINDOWS\system32\ws2_32.dll 2006-12-22 12:04 82,944 –a—— C:\WINDOWS\system32\drivers\wdmaud.sys 2006-12-22 12:04 80,896 –a—— C:\WINDOWS\system32\netui0.dll 2006-12-22 12:04 80,128 –a—— C:\WINDOWS\system32\drivers\parport.sys 2006-12-22 12:04 8,192 –a—— C:\WINDOWS\system32\ntlsapi.dll 2006-12-22 12:04 799,744 –a—— C:\WINDOWS\system32\drivers\dmboot.sys 2006-12-22 12:04 79,744 –a—— C:\WINDOWS\system32\drivers\videoprt.sys 2006-12-22 12:04 77,824 –a—— C:\WINDOWS\system32\shrpubw.exe 2006-12-22 12:04 77,312 –a—— C:\WINDOWS\system32\sdbinst.exe 2006-12-22 12:04 77,312 –a—— C:\WINDOWS\system32\rtcshare.exe 2006-12-22 12:04 764,928 –a—— C:\WINDOWS\system32\winntbbu.dll 2006-12-22 12:04 76,800 –a—— C:\WINDOWS\system32\nslookup.exe 2006-12-22 12:04 75,776 –a—— C:\WINDOWS\system32\wiascr.dll 2006-12-22 12:04 75,776 –a—— C:\WINDOWS\system32\telnet.exe 2006-12-22 12:04 75,264 –a—— C:\WINDOWS\system32\locator.exe 2006-12-22 12:04 74,752 –a—— C:\WINDOWS\system32\storprop.dll 2006-12-22 12:04 74,752 –a—— C:\WINDOWS\system32\spoolss.dll 2006-12-22 12:04 74,752 –a—— C:\WINDOWS\system32\drivers\ipsec.sys 2006-12-22 12:04 74,240 –a—— C:\WINDOWS\system32\usbui.dll 2006-12-22 12:04 74,240 –a—— C:\WINDOWS\system32\unimdmat.dll 2006-12-22 12:04 733,696 –a—— C:\WINDOWS\system32\qedwipes.dll 2006-12-22 12:04 73,472 –a—— C:\WINDOWS\system32\drivers\sr.sys 2006-12-22 12:04 723,456 –a—— C:\WINDOWS\system32\userenv.dll 2006-12-22 12:04 721,920 –a—— C:\WINDOWS\system32\lsasrv.dll 2006-12-22 12:04 72,704 –a—— C:\WINDOWS\system32\msw3prt.dll 2006-12-22 12:04 713,728 –a—— C:\WINDOWS\system32\opengl32.dll 2006-12-22 12:04 713,216 –a—— C:\WINDOWS\system32\sxs.dll 2006-12-22 12:04 71,680 –a—— C:\WINDOWS\system32\ssdpsrv.dll 2006-12-22 12:04 71,552 –a—— C:\WINDOWS\system32\drivers\bridge.sys 2006-12-22 12:04 71,040 –a—— C:\WINDOWS\system32\drivers\dxg.sys 2006-12-22 12:04 708,096 –a—— C:\WINDOWS\system32\ntdll.dll 2006-12-22 12:04 704,512 –a—— C:\WINDOWS\system32\ss3dfo.scr 2006-12-22 12:04 701,440 –a—— C:\WINDOWS\system32\msxml2.dll 2006-12-22 12:04 70,144 –a—— C:\WINDOWS\system32\sigverif.exe 2006-12-22 12:04 7,552 –a—— C:\WINDOWS\system32\drivers\mskssrv.sys 2006-12-22 12:04 69,632 –a—— C:\WINDOWS\system32\scarddlg.dll 2006-12-22 12:04 69,632 –a—— C:\WINDOWS\system32\raschap.dll 2006-12-22 12:04 69,632 –a—— C:\WINDOWS\system32\odbcconf.exe 2006-12-22 12:04 69,120 –a—— C:\WINDOWS\system32\notepad.exe 2006-12-22 12:04 69,120 –a—— C:\WINDOWS\system32\drivers\psched.sys 2006-12-22 12:04 69,120 –a—— C:\WINDOWS\notepad.exe 2006-12-22 12:04 68,224 –a—— C:\WINDOWS\system32\drivers\pci.sys 2006-12-22 12:04 68,096 –a—— C:\WINDOWS\system32\webclnt.dll 2006-12-22 12:04 68,096 –a—— C:\WINDOWS\system32\shgina.dll 2006-12-22 12:04 679,936 –a—— C:\WINDOWS\system32\sstext3d.scr 2006-12-22 12:04 67,584 –a—— C:\WINDOWS\system32\sti.dll 2006-12-22 12:04 67,584 –a—— C:\WINDOWS\system32\srclient.dll 2006-12-22 12:04 67,584 –a—— C:\WINDOWS\system32\osuninst.dll 2006-12-22 12:04 67,072 –a—— C:\WINDOWS\system32\rdshost.exe 2006-12-22 12:04 67,072 –a—— C:\WINDOWS\system32\ntdsapi.dll 2006-12-22 12:04 66,560 –a—— C:\WINDOWS\system32\mtxclu.dll 2006-12-22 12:04 66,176 –a—— C:\WINDOWS\system32\drivers\udfs.sys 2006-12-22 12:04 657,920 –a—— C:\WINDOWS\system32\rasdlg.dll 2006-12-22 12:04 655,360 –a—— C:\WINDOWS\system32\mstscax.dll 2006-12-22 12:04 65,536 –a—— C:\WINDOWS\system32\wshext.dll 2006-12-22 12:04 65,536 –a—— C:\WINDOWS\system32\wextract.exe 2006-12-22 12:04 65,536 –a—— C:\WINDOWS\system32\shimeng.dll 2006-12-22 12:04 65,536 –a—— C:\WINDOWS\system32\odbccu32.dll 2006-12-22 12:04 65,536 –a—— C:\WINDOWS\system32\odbccr32.dll 2006-12-22 12:04 64,896 –a—— C:\WINDOWS\system32\drivers\serial.sys 2006-12-22 12:04 64,000 –a—— C:\WINDOWS\system32\samlib.dll 2006-12-22 12:04 63,744 –a—— C:\WINDOWS\system32\drivers\mf.sys 2006-12-22 12:04 63,744 –a—— C:\WINDOWS\system32\drivers\cdfs.sys 2006-12-22 12:04 622,080 –a—— C:\WINDOWS\system32\netcfgx.dll 2006-12-22 12:04 62,976 –a—— C:\WINDOWS\system32\pautoenr.dll 2006-12-22 12:04 62,464 –a—— C:\WINDOWS\system32\rdpclip.exe 2006-12-22 12:04 617,472 –a—— C:\WINDOWS\system32\comctl32.dll 2006-12-22 12:04 616,960 –a—— C:\WINDOWS\system32\advapi32.dll 2006-12-22 12:04 614,429 –a—— C:\WINDOWS\system32\mswstr10.dll 2006-12-22 12:04 610,304 –a—— C:\WINDOWS\system32\sspipes.scr 2006-12-22 12:04 61,824 –a—— C:\WINDOWS\system32\drivers\nic1394.sys 2006-12-22 12:04 61,440 –a—— C:\WINDOWS\system32\rasman.dll 2006-12-22 12:04 61,440 –a—— C:\WINDOWS\system32\msvcrt40.dll 2006-12-22 12:04 61,056 –a—— C:\WINDOWS\system32\drivers\ohci1394.sys 2006-12-22 12:04 602,624 –a—— C:\WINDOWS\system32\autoconv.exe 2006-12-22 12:04 60,800 –a—— C:\WINDOWS\system32\drivers\sysaudio.sys 2006-12-22 12:04 60,800 –a—— C:\WINDOWS\system32\drivers\arp1394.sys 2006-12-22 12:04 60,416 –a—— C:\WINDOWS\system32\remotepg.dll 2006-12-22 12:04 60,288 –a—— C:\WINDOWS\system32\drivers\drmk.sys 2006-12-22 12:04 6,656 –a—— C:\WINDOWS\system32\sensapi.dll 2006-12-22 12:04 6,400 –a—— C:\WINDOWS\system32\drivers\splitter.sys 2006-12-22 12:04 59,904 –a—— C:\WINDOWS\system32\regsvc.dll 2006-12-22 12:04 59,904 –a—— C:\WINDOWS\system32\drivers\atmarpc.sys 2006-12-22 12:04 59,264 –a—— C:\WINDOWS\system32\drivers\usbaudio.sys 2006-12-22 12:04 589,312 –a—— C:\WINDOWS\system32\wiashext.dll 2006-12-22 12:04 588,800 –a—— C:\WINDOWS\system32\autochk.exe 2006-12-22 12:04 581,120 –a—— C:\WINDOWS\system32\rpcrt4.dll 2006-12-22 12:04 58,880 –a—— C:\WINDOWS\system32\resutils.dll 2006-12-22 12:04 58,880 –a—— C:\WINDOWS\system32\rastapi.dll 2006-12-22 12:04 58,368 –a—— C:\WINDOWS\system32\packager.exe 2006-12-22 12:04 577,024 –a—— C:\WINDOWS\system32\user32.dll 2006-12-22 12:04 574,592 –a—— C:\WINDOWS\system32\drivers\ntfs.sys 2006-12-22 12:04 57,856 –a—— C:\WINDOWS\system32\synceng.dll 2006-12-22 12:04 57,856 –a—— C:\WINDOWS\system32\spoolsv.exe 2006-12-22 12:04 57,600 –a—— C:\WINDOWS\system32\drivers\usbhub.sys 2006-12-22 12:04 57,472 –a—— C:\WINDOWS\system32\drivers\redbook.sys 2006-12-22 12:04 562,176 –a—— C:\WINDOWS\system32\qedit.dll 2006-12-22 12:04 560,640 –a—— C:\WINDOWS\system32\printui.dll 2006-12-22 12:04 56,832 –a—— C:\WINDOWS\system32\rasphone.exe 2006-12-22 12:04 56,320 –a—— C:\WINDOWS\system32\servdeps.dll 2006-12-22 12:04 553,472 –a—— C:\WINDOWS\system32\oleaut32.dll 2

Hi JacKNight Your combo log seems to of been cut short, I need the full log, It may take Several posts. I will need a fresh HJT log as Instructed also. Thanks dan

Here is the rest of combofix.txt 2006-12-22 12:04 552,989 –a—— C:\WINDOWS\system32\msrepl40.dll 2006-12-22 12:04 55,936 –a—— C:\WINDOWS\system32\drivers\atmlane.sys 2006-12-22 12:04 55,808 –a—— C:\WINDOWS\system32\secur32.dll 2006-12-22 12:04 55,296 –a—— C:\WINDOWS\system32\sendmail.dll 2006-12-22 12:04 549,376 –a—— C:\WINDOWS\system32\shdoclc.dll 2006-12-22 12:04 54,784 –a—— C:\WINDOWS\system32\npptools.dll 2006-12-22 12:04 54,784 –a—— C:\WINDOWS\system32\msvcirt.dll 2006-12-22 12:04 538,624 –a—— C:\WINDOWS\system32\spider.exe 2006-12-22 12:04 53,760 –a—— C:\WINDOWS\system32\winsta.dll 2006-12-22 12:04 53,760 –a—— C:\WINDOWS\system32\vfwwdm32.dll 2006-12-22 12:04 53,760 –a—— C:\WINDOWS\system32\narrator.exe 2006-12-22 12:04 53,279 –a—— C:\WINDOWS\system32\odbcji32.dll 2006-12-22 12:04 53,248 –a—— C:\WINDOWS\system32\drivers\1394bus.sys 2006-12-22 12:04 52,864 –a—— C:\WINDOWS\system32\drivers\dmusic.sys 2006-12-22 12:04 52,736 –a—— C:\WINDOWS\system32\drivers\i8042prt.sys 2006-12-22 12:04 52,352 –a—— C:\WINDOWS\system32\drivers\volsnap.sys 2006-12-22 12:04 51,712 –a—— C:\WINDOWS\system32\wzcsapi.dll 2006-12-22 12:04 51,712 –a—— C:\WINDOWS\system32\vdmredir.dll 2006-12-22 12:04 51,328 –a—— C:\WINDOWS\system32\drivers\rasl2tp.sys 2006-12-22 12:04 51,328 –a—— C:\WINDOWS\system32\drivers\msdv.sys 2006-12-22 12:04 506,368 –a—— C:\WINDOWS\system32\msxml.dll 2006-12-22 12:04 502,272 –a—— C:\WINDOWS\system32\winlogon.exe 2006-12-22 12:04 50,688 –a—— C:\WINDOWS\system32\wstdecod.dll 2006-12-22 12:04 50,688 –a—— C:\WINDOWS\system32\smss.exe 2006-12-22 12:04 50,176 –a—— C:\WINDOWS\system32\utilman.exe 2006-12-22 12:04 50,176 –a—— C:\WINDOWS\system32\reg.exe 2006-12-22 12:04 50,176 –a—— C:\WINDOWS\system32\proquota.exe 2006-12-22 12:04 5,632 –a—— C:\WINDOWS\system32\wmi.dll 2006-12-22 12:04 5,632 –a—— C:\WINDOWS\system32\winver.exe 2006-12-22 12:04 5,632 –a—— C:\WINDOWS\system32\security.dll 2006-12-22 12:04 5,504 –a—— C:\WINDOWS\system32\drivers\mstee.sys 2006-12-22 12:04 5,504 –a—— C:\WINDOWS\system32\drivers\intelide.sys 2006-12-22 12:04 5,376 –a—— C:\WINDOWS\system32\drivers\viaide.sys 2006-12-22 12:04 5,376 –a—— C:\WINDOWS\system32\drivers\mspclock.sys 2006-12-22 12:04 5,120 –a—— C:\WINDOWS\system32\sfc.dll 2006-12-22 12:04 49,664 –a—— C:\WINDOWS\system32\regapi.dll 2006-12-22 12:04 49,664 –a—— C:\WINDOWS\system32\drivers\classpnp.sys 2006-12-22 12:04 49,536 –a—— C:\WINDOWS\system32\drivers\cdrom.sys 2006-12-22 12:04 49,152 –a—— C:\WINDOWS\system32\wdigest.dll 2006-12-22 12:04 488,448 –a—— C:\WINDOWS\system32\ntmsmgr.dll 2006-12-22 12:04 48,640 –a—— C:\WINDOWS\system32\drivers\stream.sys 2006-12-22 12:04 48,384 –a—— C:\WINDOWS\system32\drivers\raspptp.sys 2006-12-22 12:04 47,104 –a—— C:\WINDOWS\system32\ssmypics.scr 2006-12-22 12:04 463,360 –a—— C:\WINDOWS\system32\wiadefui.dll 2006-12-22 12:04 453,120 –a—— C:\WINDOWS\system32\drivers\mrxsmb.sys 2006-12-22 12:04 45,568 –a—— C:\WINDOWS\system32\tcpmonui.dll 2006-12-22 12:04 45,568 –a—— C:\WINDOWS\system32\tcpmon.dll 2006-12-22 12:04 45,568 –a—— C:\WINDOWS\system32\safrslv.dll 2006-12-22 12:04 442,368 –a—— C:\WINDOWS\system32\sqlsrv32.dll 2006-12-22 12:04 44,544 –a—— C:\WINDOWS\system32\tscupgrd.exe 2006-12-22 12:04 44,032 –a—— C:\WINDOWS\system32\rtutils.dll 2006-12-22 12:04 438,272 –a—— C:\WINDOWS\system32\shimgvw.dll 2006-12-22 12:04 435,200 –a—— C:\WINDOWS\system32\ntmssvc.dll 2006-12-22 12:04 433,664 –a—— C:\WINDOWS\system32\wiaacmgr.exe 2006-12-22 12:04 431,616 –a—— C:\WINDOWS\system32\riched20.dll 2006-12-22 12:04 430,592 –a—— C:\WINDOWS\system32\vssapi.dll 2006-12-22 12:04 43,520 –a—— C:\WINDOWS\system32\safrcdlg.dll 2006-12-22 12:04 43,520 –a—— C:\WINDOWS\system32\racpldlg.dll 2006-12-22 12:04 43,520 –a—— C:\WINDOWS\system32\pstorec.dll 2006-12-22 12:04 43,520 –a—— C:\WINDOWS\system32\ntlanman.dll 2006-12-22 12:04 42,496 –a—— C:\WINDOWS\system32\wsnmp32.dll 2006-12-22 12:04 42,496 –a—— C:\WINDOWS\system32\shmgrate.exe 2006-12-22 12:04 42,496 –a—— C:\WINDOWS\system32\net.exe 2006-12-22 12:04 42,496 –a—— C:\WINDOWS\system32\ftp.exe 2006-12-22 12:04 42,496 –a—— C:\WINDOWS\system32\drivers\p3.sys 2006-12-22 12:04 42,240 –a—— C:\WINDOWS\system32\drivers\mountmgr.sys 2006-12-22 12:04 419,840 –a—— C:\WINDOWS\system32\ntvdm.exe 2006-12-22 12:04 417,792 –a—— C:\WINDOWS\system32\vbscript.dll 2006-12-22 12:04 415,744 –a—— C:\WINDOWS\system32\samsrv.dll 2006-12-22 12:04 413,696 –a—— C:\WINDOWS\system32\msvcp60.dll 2006-12-22 12:04 41,856 –a—— C:\WINDOWS\system32\drivers\imapi.sys 2006-12-22 12:04 41,472 –a—— C:\WINDOWS\system32\drivers\raspppoe.sys 2006-12-22 12:04 407,552 –a—— C:\WINDOWS\system32\mstsc.exe 2006-12-22 12:04 407,040 –a—— C:\WINDOWS\system32\netlogon.dll 2006-12-22 12:04 406,528 –a—— C:\WINDOWS\system32\usp10.dll 2006-12-22 12:04 40,960 –a—— C:\WINDOWS\system32\ntmsapi.dll 2006-12-22 12:04 40,840 –a—— C:\WINDOWS\system32\drivers\termdd.sys 2006-12-22 12:04 40,320 –a—— C:\WINDOWS\system32\drivers\nmnt.sys 2006-12-22 12:04 4,992 –a—— C:\WINDOWS\system32\drivers\mspqm.sys 2006-12-22 12:04 4,352 –a—— C:\WINDOWS\system32\drivers\swenum.sys 2006-12-22 12:04 4,096 –a—— C:\WINDOWS\system32\nddeapir.exe 2006-12-22 12:04 397,824 –a—— C:\WINDOWS\system32\rpcss.dll 2006-12-22 12:04 397,824 –a—— C:\WINDOWS\system32\regwizc.dll 2006-12-22 12:04 393,216 –a—— C:\WINDOWS\system32\ssflwbox.scr 2006-12-22 12:04 39,936 –a—— C:\WINDOWS\system32\rshx32.dll 2006-12-22 12:04 39,936 –a—— C:\WINDOWS\system32\perfctrs.dll 2006-12-22 12:04 388,608 –a—— C:\WINDOWS\system32\cmd.exe 2006-12-22 12:04 385,536 –a—— C:\WINDOWS\system32\themeui.dll 2006-12-22 12:04 385,024 –a—— C:\WINDOWS\system32\qdvd.dll 2006-12-22 12:04 38,912 –a—— C:\WINDOWS\system32\sens.dll 2006-12-22 12:04 378,368 –a—— C:\WINDOWS\system32\wzcdlg.dll 2006-12-22 12:04 37,888 –a—— C:\WINDOWS\system32\url.dll 2006-12-22 12:04 363,520 –a—— C:\WINDOWS\system32\psisdecd.dll 2006-12-22 12:04 363,008 –a—— C:\WINDOWS\system32\smlogcfg.dll 2006-12-22 12:04 36,992 –a—— C:\WINDOWS\system32\drivers\amdk6.sys 2006-12-22 12:04 36,864 –a—— C:\WINDOWS\system32\netstat.exe 2006-12-22 12:04 36,480 –a—— C:\WINDOWS\system32\drivers\crusoe.sys 2006-12-22 12:04 36,352 –a—— C:\WINDOWS\system32\ncobjapi.dll 2006-12-22 12:04 36,352 –a—— C:\WINDOWS\system32\drivers\disk.sys 2006-12-22 12:04 36,224 –a—— C:\WINDOWS\system32\drivers\hidclass.sys 2006-12-22 12:04 359,936 –a—— C:\WINDOWS\system32\wzcsvc.dll 2006-12-22 12:04 359,808 –a—— C:\WINDOWS\system32\drivers\tcpip.sys 2006-12-22 12:04 358,400 –a—— C:\WINDOWS\system32\termmgr.dll 2006-12-22 12:04 35,840 –a—— C:\WINDOWS\system32\umandlg.dll 2006-12-22 12:04 35,840 –a—— C:\WINDOWS\system32\rcimlby.exe 2006-12-22 12:04 35,648 –a—— C:\WINDOWS\system32\ntio411.sys 2006-12-22 12:04 35,424 –a—— C:\WINDOWS\system32\ntio412.sys 2006-12-22 12:04 35,328 –a—— C:\WINDOWS\system32\pid.dll 2006-12-22 12:04 35,328 –a—— C:\WINDOWS\system32\drivers\processr.sys 2006-12-22 12:04 35,072 –a—— C:\WINDOWS\system32\drivers\msgpc.sys 2006-12-22 12:04 348,189 –a—— C:\WINDOWS\system32\msxbde40.dll 2006-12-22 12:04 347,136 –a—— C:\WINDOWS\system32\tourstart.exe 2006-12-22 12:04 347,136 –a—— C:\WINDOWS\system32\hypertrm.dll 2006-12-22 12:04 343,040 –a—— C:\WINDOWS\system32\msvcrt.dll 2006-12-22 12:04 341,504 –a—— C:\WINDOWS\system32\localspl.dll 2006-12-22 12:04 34,816 –a—— C:\WINDOWS\system32\ssdpapi.dll 2006-12-22 12:04 34,816 –a—— C:\WINDOWS\system32\perfproc.dll 2006-12-22 12:04 34,560 –a—— C:\WINDOWS\system32\ntio804.sys 2006-12-22 12:04 34,560 –a—— C:\WINDOWS\system32\ntio404.sys 2006-12-22 12:04 34,560 –a—— C:\WINDOWS\system32\drivers\wanarp.sys 2006-12-22 12:04 34,560 –a—— C:\WINDOWS\system32\drivers\netbios.sys 2006-12-22 12:04 34,304 –a—— C:\WINDOWS\system32\pstorsvc.dll 2006-12-22 12:04 337,920 –a—— C:\WINDOWS\system32\zipfldr.dll 2006-12-22 12:04 333,312 –a—— C:\WINDOWS\system32\wiaservc.dll 2006-12-22 12:04 332,928 –a—— C:\WINDOWS\system32\drivers\srv.sys 2006-12-22 12:04 33,840 –a—— C:\WINDOWS\system32\ntio.sys 2006-12-22 12:04 33,792 –a—— C:\WINDOWS\system32\msgsvc.dll 2006-12-22 12:04 33,280 –a—— C:\WINDOWS\system32\rundll32.exe 2006-12-22 12:04 329,728 –a—— C:\WINDOWS\system32\netsetup.exe 2006-12-22 12:04 32,768 –a—— C:\WINDOWS\system32\winipsec.dll 2006-12-22 12:04 32,768 –a—— C:\WINDOWS\system32\odbcad32.exe 2006-12-22 12:04 32,768 –a—— C:\WINDOWS\system32\csrsrv.dll 2006-12-22 12:04 32,256 –a—— C:\WINDOWS\system32\wpnpinst.exe 2006-12-22 12:04 32,256 –a—— C:\WINDOWS\system32\wpabaln.exe 2006-12-22 12:04 316,416 –a—— C:\WINDOWS\system32\untfs.dll 2006-12-22 12:04 313,856 –a—— C:\WINDOWS\system32\scesrv.dll 2006-12-22 12:04 31,744 –a—— C:\WINDOWS\system32\rtipxmib.dll 2006-12-22 12:04 31,616 –a—— C:\WINDOWS\system32\drivers\usbccgp.sys 2006-12-22 12:04 31,232 –a—— C:\WINDOWS\system32\sethc.exe 2006-12-22 12:04 306,176 –a—— C:\WINDOWS\system32\slbcsp.dll 2006-12-22 12:04 303,616 –a—— C:\WINDOWS\system32\wmstream.dll 2006-12-22 12:04 30,848 –a—— C:\WINDOWS\system32\drivers\npfs.sys 2006-12-22 12:04 30,749 –a—— C:\WINDOWS\system32\vbajet32.dll 2006-12-22 12:04 30,720 –a—— C:\WINDOWS\system32\xcopy.exe 2006-12-22 12:04 30,592 –a—— C:\WINDOWS\system32\drivers\rndismp.sys 2006-12-22 12:04 30,080 –a—— C:\WINDOWS\system32\drivers\modem.sys 2006-12-22 12:04 3,338 –a—— C:\WINDOWS\system32\redir.exe 2006-12-22 12:04 295,424 –a—— C:\WINDOWS\system32\termsrv.dll 2006-12-22 12:04 291,840 –a—— C:\WINDOWS\system32\winsrv.dll 2006-12-22 12:04 29,696 –a—— C:\WINDOWS\system32\safrdm.dll 2006-12-22 12:04 29,184 –a—— C:\WINDOWS\system32\sendcmsg.dll 2006-12-22 12:04 289,792 –a—— C:\WINDOWS\system32\vssvc.exe 2006-12-22 12:04 285,696 –a—— C:\WINDOWS\system32\objsel.dll 2006-12-22 12:04 283,648 –a—— C:\WINDOWS\system32\pdh.dll 2006-12-22 12:04 28,672 –a—— C:\WINDOWS\system32\wshcon.dll 2006-12-22 12:04 28,672 –a—— C:\WINDOWS\system32\nmmkcert.dll 2006-12-22 12:04 279,040 –a—— C:\WINDOWS\system32\qdv.dll 2006-12-22 12:04 278,559 –a—— C:\WINDOWS\system32\odbcjt32.dll 2006-12-22 12:04 276,992 –a—— C:\WINDOWS\system32\comdlg32.dll 2006-12-22 12:04 276,480 –a—— C:\WINDOWS\system32\webcheck.dll 2006-12-22 12:04 275,456 –a—— C:\WINDOWS\system32\ulib.dll 2006-12-22 12:04 274,944 –a—— C:\WINDOWS\system32\mstask.dll 2006-12-22 12:04 27,648 –a—— C:\WINDOWS\system32\shscrap.dll 2006-12-22 12:04 27,648 –a—— C:\WINDOWS\system32\profmap.dll 2006-12-22 12:04 27,392 –a—— C:\WINDOWS\system32\drivers\fdc.sys 2006-12-22 12:04 266,752 –a—— C:\WINDOWS\system32\oakley.dll 2006-12-22 12:04 264,192 –a—— C:\WINDOWS\system32\wow32.dll 2006-12-22 12:04 26,624 –a—— C:\WINDOWS\system32\perfdisk.dll 2006-12-22 12:04 26,496 –a—— C:\WINDOWS\system32\drivers\usbstor.sys 2006-12-22 12:04 26,112 –a—— C:\WINDOWS\system32\vdmdbg.dll 2006-12-22 12:04 26,112 –a—— C:\WINDOWS\system32\skeys.exe 2006-12-22 12:04 258,077 –a—— C:\WINDOWS\system32\mstext40.dll 2006-12-22 12:04 25,856 –a—— C:\WINDOWS\system32\drivers\usbprint.sys 2006-12-22 12:04 25,600 –a—— C:\WINDOWS\system32\udhisapi.dll 2006-12-22 12:04 25,472 –a—— C:\WINDOWS\system32\drivers\sonydcam.sys 2006-12-22 12:04 25,088 –a—— C:\WINDOWS\system32\slayerxp.dll 2006-12-22 12:04 25,088 –a—— C:\WINDOWS\system32\shfolder.dll 2006-12-22 12:04 25,088 –a—— C:\WINDOWS\system32\perfos.dll 2006-12-22 12:04 25,088 –a—— C:\WINDOWS\system32\drivers\pciidex.sys 2006-12-22 12:04 249,856 –a—— C:\WINDOWS\system32\odbc32.dll 2006-12-22 12:04 249,344 –a—— C:\WINDOWS\system32\tapisrv.dll 2006-12-22 12:04 248,832 –a—— C:\WINDOWS\system32\newdev.dll 2006-12-22 12:04 246,814 –a—— C:\WINDOWS\system32\strmdll.dll 2006-12-22 12:04 245,760 –a—— C:\WINDOWS\system32\netui1.dll 2006-12-22 12:04 245,248 –a—— C:\WINDOWS\system32\mswsock.dll 2006-12-22 12:04 24,960 –a—— C:\WINDOWS\system32\drivers\hidparse.sys 2006-12-22 12:04 24,576 –a—— C:\WINDOWS\system32\userinit.exe 2006-12-22 12:04 24,576 –a—— C:\WINDOWS\system32\odbcbcp.dll 2006-12-22 12:04 24,576 –a—— C:\WINDOWS\system32\drivers\kbdclass.sys 2006-12-22 12:04 239,616 –a—— C:\WINDOWS\system32\upnpui.dll 2006-12-22 12:04 239,104 –a—— C:\WINDOWS\system32\srrstr.dll 2006-12-22 12:04 236,544 –a—— C:\WINDOWS\system32\rasapi32.dll 2006-12-22 12:04 23,040 –a—— C:\WINDOWS\system32\setup.exe 2006-12-22 12:04 23,040 –a—— C:\WINDOWS\system32\psapi.dll 2006-12-22 12:04 23,040 –a—— C:\WINDOWS\system32\drivers\mouclass.sys 2006-12-22 12:04 225,664 –a—— C:\WINDOWS\system32\drivers\tcpip6.sys 2006-12-22 12:04 22,528 –a—— C:\WINDOWS\system32\wsock32.dll 2006-12-22 12:04 218,624 –a—— C:\WINDOWS\system32\uxtheme.dll 2006-12-22 12:04 215,552 –a—— C:\WINDOWS\system32\osk.exe 2006-12-22 12:04 21,896 –a—— C:\WINDOWS\system32\drivers\tdtcp.sys 2006-12-22 12:04 21,504 –a—— C:\WINDOWS\system32\rcp.exe 2006-12-22 12:04 209,408 –a—— C:\WINDOWS\system32\drivers\update.sys 2006-12-22 12:04 206,336 –a—— C:\WINDOWS\system32\rasppp.dll 2006-12-22 12:04 204,288 –a—— C:\WINDOWS\system32\mswebdvd.dll 2006-12-22 12:04 20,992 –a—— C:\WINDOWS\system32\ssmarque.scr 2006-12-22 12:04 20,992 –a—— C:\WINDOWS\system32\sclgntfy.dll 2006-12-22 12:04 20,992 –a—— C:\WINDOWS\system32\drivers\vga.sys 2006-12-22 12:04 20,992 –a—— C:\WINDOWS\system32\drivers\rtl8139.sys 2006-12-22 12:04 20,992 –a—— C:\WINDOWS\system32\drivers\ipinip.sys 2006-12-22 12:04 20,511 –a—— C:\WINDOWS\system32\odtext32.dll 2006-12-22 12:04 20,511 –a—— C:\WINDOWS\system32\oddbse32.dll 2006-12-22 12:04 20,510 –a—— C:\WINDOWS\system32\odpdx32.dll 2006-12-22 12:04 20,510 –a—— C:\WINDOWS\system32\odfox32.dll 2006-12-22 12:04 20,510 –a—— C:\WINDOWS\system32\odexl32.dll 2006-12-22 12:04 20,480 –a—— C:\WINDOWS\system32\wmpui.dll 2006-12-22 12:04 20,480 –a—— C:\WINDOWS\system32\wmpcore.dll 2006-12-22 12:04 20,480 –a—— C:\WINDOWS\system32\wmpcd.dll 2006-12-22 12:04 20,480 –a—— C:\WINDOWS\system32\qprocess.exe 2006-12-22 12:04 20,480 –a—— C:\WINDOWS\system32\drivers\usbuhci.sys 2006-12-22 12:04 20,480 –a—— C:\WINDOWS\system32\drivers\flpydisk.sys 2006-12-22 12:04 2,944 –a—— C:\WINDOWS\system32\drivers\drmkaud.sys 2006-12-22 12:04 2,940,928 –a—— C:\WINDOWS\system32\wmploc.dll 2006-12-22 12:04 2,135,552 –a—— C:\WINDOWS\system32\ntoskrnl.exe 2006-12-22 12:04 2,015,232 –a—— C:\WINDOWS\system32\ntkrnlpa.exe 2006-12-22 12:04 197,632 –a—— C:\WINDOWS\system32\netman.dll 2006-12-22 12:04 196,864 –a—— C:\WINDOWS\system32\drivers\rdpdr.sys 2006-12-22 12:04 195,072 –a—— C:\WINDOWS\system32\msutb.dll 2006-12-22 12:04 192,512 –a—— C:\WINDOWS\system32\qcap.dll 2006-12-22 12:04 191,488 –a—— C:\WINDOWS\system32\syncui.dll 2006-12-22 12:04 190,976 –a—— C:\WINDOWS\system32\schedsvc.dll 2006-12-22 12:04 19,968 –a—— C:\WINDOWS\system32\wshtcpip.dll 2006-12-22 12:04 19,968 –a—— C:\WINDOWS\system32\ws2help.dll 2006-12-22 12:04 19,968 –a—— C:\WINDOWS\system32\ssbezier.scr 2006-12-22 12:04 19,968 –a—— C:\WINDOWS\system32\rdpsnd.dll 2006-12-22 12:04 19,456 –a—— C:\WINDOWS\system32\shutdown.exe 2006-12-22 12:04 19,328 –a—— C:\WINDOWS\system32\drivers\wstcodec.sys 2006-12-22 12:04 19,072 –a—— C:\WINDOWS\system32\drivers\msfs.sys 2006-12-22 12:04 187,776 –a—— C:\WINDOWS\system32\drivers\acpi.sys 2006-12-22 12:04 185,344 –a—— C:\WINDOWS\system32\upnphost.dll 2006-12-22 12:04 182,912 –a—— C:\WINDOWS\system32\drivers\ndis.sys 2006-12-22 12:04 182,272 –a—— C:\WINDOWS\system32\snmpsnap.dll 2006-12-22 12:04 181,760 –a—— C:\WINDOWS\system32\tapi32.dll 2006-12-22 12:04 181,248 –a—— C:\WINDOWS\system32\drivers\mrxdav.sys 2006-12-22 12:04 180,800 –a—— C:\WINDOWS\system32\sqlunirl.dll 2006-12-22 12:04 180,224 –a—— C:\WINDOWS\system32\scecli.dll 2006-12-22 12:04 18,944 –a—— C:\WINDOWS\system32\version.dll 2006-12-22 12:04 18,944 –a—— C:\WINDOWS\system32\ssmyst.scr 2006-12-22 12:04 18,944 –a—— C:\WINDOWS\system32\snmpapi.dll 2006-12-22 12:04 18,944 –a—— C:\WINDOWS\system32\seclogon.dll 2006-12-22 12:04 18,944 –a—— C:\WINDOWS\system32\rsmps.dll 2006-12-22 12:04 18,944 –a—— C:\WINDOWS\system32\qmgrprxy.dll 2006-12-22 12:04 18,944 –a—— C:\WINDOWS\system32\nddenb32.dll 2006-12-22 12:04 18,560 –a—— C:\WINDOWS\system32\drivers\tdi.sys 2006-12-22 12:04 18,432 –a—— C:\WINDOWS\system32\wtsapi32.dll 2006-12-22 12:04 18,432 –a—— C:\WINDOWS\system32\ups.exe 2006-12-22 12:04 179,712 –a—— C:\WINDOWS\system32\ntmsdba.dll 2006-12-22 12:04 176,640 –a—— C:\WINDOWS\system32\wintrust.dll 2006-12-22 12:04 176,128 –a—— C:\WINDOWS\system32\winmm.dll 2006-12-22 12:04 176,128 –a—— C:\WINDOWS\system32\photowiz.dll 2006-12-22 12:04 174,592 –a—— C:\WINDOWS\system32\w32time.dll 2006-12-22 12:04 174,592 –a—— C:\WINDOWS\system32\drivers\rdbss.sys 2006-12-22 12:04 174,200 –a—— C:\WINDOWS\system32\xenroll.dll 2006-12-22 12:04 172,416 –a—— C:\WINDOWS\system32\drivers\kmixer.sys 2006-12-22 12:04 172,032 –a—— C:\WINDOWS\system32\wldap32.dll 2006-12-22 12:04 171,008 –a—— C:\WINDOWS\system32\sccsccp.dll 2006-12-22 12:04 170,496 –a—— C:\WINDOWS\system32\srsvc.dll 2006-12-22 12:04 17,920 –a—— C:\WINDOWS\system32\ping.exe 2006-12-22 12:04 17,920 –a—— C:\WINDOWS\system32\nddeapi.dll 2006-12-22 12:04 17,664 –a—— C:\WINDOWS\system32\watchdog.sys 2006-12-22 12:04 17,408 –a—— C:\WINDOWS\system32\powrprof.dll 2006-12-22 12:04 17,408 –a—— C:\WINDOWS\system32\msyuv.dll 2006-12-22 12:04 17,024 –a—— C:\WINDOWS\system32\drivers\usbohci.sys 2006-12-22 12:04 17,024 –a—— C:\WINDOWS\system32\drivers\ccdecode.sys 2006-12-22 12:04 162,816 –a—— C:\WINDOWS\system32\drivers\netbt.sys 2006-12-22 12:04 16,896 –a—— C:\WINDOWS\system32\winrnr.dll 2006-12-22 12:04 16,896 –a—— C:\WINDOWS\system32\usbmon.dll 2006-12-22 12:04 16,896 –a—— C:\WINDOWS\system32\upnpcont.exe 2006-12-22 12:04 16,896 –a—— C:\WINDOWS\system32\rassapi.dll 2006-12-22 12:04 16,384 –a—— C:\WINDOWS\system32\odbc32gt.dll 2006-12-22 12:04 16,000 –a—— C:\WINDOWS\system32\drivers\usbintel.sys 2006-12-22 12:04 159,744 –a—— C:\WINDOWS\system32\scrobj.dll 2006-12-22 12:04 153,344 –a—— C:\WINDOWS\system32\drivers\dmio.sys 2006-12-22 12:04 152,576 –a—— C:\WINDOWS\system32\rsaenh.dll 2006-12-22 12:04 151,552 –a—— C:\WINDOWS\system32\shmedia.dll 2006-12-22 12:04 151,552 –a—— C:\WINDOWS\system32\scrrun.dll 2006-12-22 12:04 15,872 –a—— C:\WINDOWS\system32\perfmon.exe 2006-12-22 12:04 15,488 –a—— C:\WINDOWS\system32\drivers\serenum.sys 2006-12-22 12:04 15,360 –a—— C:\WINDOWS\system32\pjlmon.dll 2006-12-22 12:04 15,360 –a—— C:\WINDOWS\system32\drivers\streamip.sys 2006-12-22 12:04 15,360 –a—— C:\WINDOWS\system32\drivers\mpe.sys 2006-12-22 12:04 147,968 –a—— C:\WINDOWS\system32\rdchost.dll 2006-12-22 12:04 147,456 –a—— C:\WINDOWS\system32\odbctrac.dll 2006-12-22 12:04 145,792 –a—— C:\WINDOWS\system32\drivers\portcls.sys 2006-12-22 12:04 144,896 –a—— C:\WINDOWS\system32\schannel.dll 2006-12-22 12:04 144,384 –a—— C:\WINDOWS\system32\imagehlp.dll 2006-12-22 12:04 143,872 –a—— C:\WINDOWS\system32\ntshrui.dll 2006-12-22 12:04 143,360 –a—— C:\WINDOWS\system32\drivers\fastfat.sys 2006-12-22 12:04 142,976 –a—— C:\WINDOWS\system32\drivers\usbport.sys 2006-12-22 12:04 142,464 –a—— C:\WINDOWS\system32\drivers\aec.sys 2006-12-22 12:04 142,336 –a—— C:\WINDOWS\system32\nwprovau.dll 2006-12-22 12:04 140,928 –a—— C:\WINDOWS\system32\drivers\ks.sys 2006-12-22 12:04 140,800 –a—— C:\WINDOWS\system32\sessmgr.exe 2006-12-22 12:04 140,288 –a—— C:\WINDOWS\system32\sfc_os.dll 2006-12-22 12:04 14,976 –a—— C:\WINDOWS\system32\drivers\tape.sys 2006-12-22 12:04 14,848 –a—— C:\WINDOWS\system32\tcpmib.dll 2006-12-22 12:04 14,848 –a—— C:\WINDOWS\system32\stimon.exe 2006-12-22 12:04 14,848 –a—— C:\WINDOWS\system32\rsh.exe 2006-12-22 12:04 14,848 –a—— C:\WINDOWS\system32\mgmtapi.dll 2006-12-22 12:04 14,848 –a—— C:\WINDOWS\system32\drivers\kbdhid.sys 2006-12-22 12:04 14,336 –a—— C:\WINDOWS\system32\wship6.dll 2006-12-22 12:04 14,336 –a—— C:\WINDOWS\system32\svchost.exe 2006-12-22 12:04 14,336 –a—— C:\WINDOWS\system32\ssstars.scr 2006-12-22 12:04 14,336 –a—— C:\WINDOWS\system32\runonce.exe 2006-12-22 12:04 14,336 –a—— C:\WINDOWS\system32\drivers\asyncmac.sys 2006-12-22 12:04 14,208 –a—— C:\WINDOWS\system32\drivers\diskdump.sys 2006-12-22 12:04 139,528 –a—— C:\WINDOWS\system32\drivers\rdpwd.sys 2006-12-22 12:04 139,264 –a—— C:\WINDOWS\system32\netid.dll 2006-12-22 12:04 138,496 –a—— C:\WINDOWS\system32\drivers\afd.sys 2006-12-22 12:04 136,704 –a—— C:\WINDOWS\system32\sti_ci.dll 2006-12-22 12:04 135,680 –a—— C:\WINDOWS\system32\webvw.dll 2006-12-22 12:04 135,680 –a—— C:\WINDOWS\system32\taskmgr.exe 2006-12-22 12:04 135,168 –a—— C:\WINDOWS\system32\odbcconf.dll 2006-12-22 12:04 134,912 –a—— C:\WINDOWS\system32\drivers\ipnat.sys 2006-12-22 12:04 134,656 –a—— C:\WINDOWS\system32\shsvcs.dll 2006-12-22 12:04 132,608 –a—— C:\WINDOWS\system32\upnp.dll 2006-12-22 12:04 132,096 –a—— C:\WINDOWS\system32\wkssvc.dll 2006-12-22 12:04 131,584 –a—— C:\WINDOWS\system32\sndrec32.exe 2006-12-22 12:04 13,824 –a—— C:\WINDOWS\system32\uniplat.dll 2006-12-22 12:04 13,824 –a—— C:\WINDOWS\system32\rexec.exe 2006-12-22 12:04 13,824 –a—— C:\WINDOWS\system32\rdsaddin.exe 2006-12-22 12:04 13,824 –a—— C:\WINDOWS\system32\lmhsvc.dll 2006-12-22 12:04 13,312 –a—— C:\WINDOWS\system32\sigtab.dll 2006-12-22 12:04 13,312 –a—— C:\WINDOWS\system32\savedump.exe 2006-12-22 12:04 129,536 –a—— C:\WINDOWS\system32\msv1_0.dll 2006-12-22 12:04 124,928 –a—— C:\WINDOWS\system32\net1.exe 2006-12-22 12:04 124,416 –a—— C:\WINDOWS\system32\wiadss.dll 2006-12-22 12:04 123,392 –a—— C:\WINDOWS\system32\umpnpmgr.dll 2006-12-22 12:04 121,856 –a—— C:\WINDOWS\system32\stobject.dll 2006-12-22 12:04 120,832 –a—— C:\WINDOWS\system32\offfilt.dll 2006-12-22 12:04 120,832 –a—— C:\WINDOWS\system32\msvfw32.dll 2006-12-22 12:04 12,928 –a—— C:\WINDOWS\system32\drivers\ndisuio.sys 2006-12-22 12:04 12,800 –a—— C:\WINDOWS\system32\drivers\usb8023.sys 2006-12-22 12:04 12,288 –a—— C:\WINDOWS\system32\tracert.exe 2006-12-22 12:04 12,288 –a—— C:\WINDOWS\system32\odbcp32r.dll 2006-12-22 12:04 12,288 –a—— C:\WINDOWS\system32\netrap.dll 2006-12-22 12:04 12,288 –a—— C:\WINDOWS\system32\mstinit.exe 2006-12-22 12:04 12,168 –a—— C:\WINDOWS\system32\tsddd.dll 2006-12-22 12:04 12,040 –a—— C:\WINDOWS\system32\drivers\tdpipe.sys 2006-12-22 12:04 119,936 –a—— C:\WINDOWS\system32\drivers\pcmcia.sys 2006-12-22 12:04 118,784 –a—— C:\WINDOWS\system32\ntmarta.dll 2006-12-22 12:04 118,272 –a—— C:\WINDOWS\system32\t2embed.dll 2006-12-22 12:04 115,712 –a—— C:\WINDOWS\system32\mstlsapi.dll 2006-12-22 12:04 115,200 –a—— C:\WINDOWS\system32\wmsdmoe.dll 2006-12-22 12:04 114,688 –a—— C:\WINDOWS\system32\wscript.exe 2006-12-22 12:04 112,128 –a—— C:\WINDOWS\system32\rastls.dll 2006-12-22 12:04 111,104 –a—— C:\WINDOWS\system32\wiavideo.dll 2006-12-22 12:04 111,104 –a—— C:\WINDOWS\system32\netdde.exe 2006-12-22 12:04 11,776 –a—— C:\WINDOWS\system32\xolehlp.dll 2006-12-22 12:04 11,776 –a—— C:\WINDOWS\system32\wshrm.dll 2006-12-22 12:04 11,776 –a—— C:\WINDOWS\system32\regsvr32.exe 2006-12-22 12:04 11,776 –a—— C:\WINDOWS\system32\drivers\bdasup.sys 2006-12-22 12:04 11,392 –a—— C:\WINDOWS\system32\drivers\sfloppy.sys 2006-12-22 12:04 11,264 –a—— C:\WINDOWS\system32\msrle32.dll 2006-12-22 12:04 11,264 –a—— C:\WINDOWS\system32\drivers\irenum.sys 2006-12-22 12:04 11,136 –a—— C:\WINDOWS\system32\drivers\slip.sys 2006-12-22 12:04 109,568 –a—— C:\WINDOWS\system32\progman.exe 2006-12-22 12:04 108,032 –a—— C:\WINDOWS\system32\services.exe 2006-12-22 12:04 107,904 –a—— C:\WINDOWS\system32\drivers\mup.sys 2006-12-22 12:04 107,008 –a—— C:\WINDOWS\system32\oleprn.dll 2006-12-22 12:04 106,496 –a—— C:\WINDOWS\system32\odbccp32.dll 2006-12-22 12:04 105,984 –a—— C:\WINDOWS\system32\sysocmgr.exe 2006-12-22 12:04 105,472 –a—— C:\WINDOWS\system32\polstore.dll 2006-12-22 12:04 103,936 –a—— C:\WINDOWS\system32\nlhtml.dll 2006-12-22 12:04 102,400 –a—— C:\WINDOWS\system32\wmpshell.dll 2006-12-22 12:04 102,400 –a—— C:\WINDOWS\system32\rcbdyctl.dll 2006-12-22 12:04 101,888 –a—— C:\WINDOWS\system32\win32spl.dll 2006-12-22 12:04 101,376 –a—— C:\WINDOWS\system32\txflog.dll 2006-12-22 12:04 10,880 –a—— C:\WINDOWS\system32\drivers\ndisip.sys 2006-12-22 12:04 1,839,488 –a—— C:\WINDOWS\system32\win32k.sys 2006-12-22 12:04 1,708,032 –a—— C:\WINDOWS\system32\netshell.dll 2006-12-22 12:04 1,580,544 –a—— C:\WINDOWS\system32\sfcfiles.dll 2006-12-22 12:04 1,435,648 –a—— C:\WINDOWS\system32\query.dll 2006-12-22 12:04 1,428,480 –a—— C:\WINDOWS\system32\msvidctl.dll 2006-12-22 12:04 1,392,671 –a—— C:\WINDOWS\system32\msvbvm60.dll 2006-12-22 12:04 1,287,168 –a—— C:\WINDOWS\system32\quartz.dll 2006-12-22 12:04 1,285,120 –a—— C:\WINDOWS\system32\ole32.dll 2006-12-22 12:04 1,084,416 –a—— C:\WINDOWS\system32\msxml3.dll 2006-12-22 11:10 548,864 ——— C:\WINDOWS\system32\_003519_.tmp.dll 2006-12-22 11:10 47,104 ——— C:\WINDOWS\system32\_003522_.tmp.dll 2006-12-22 11:10 132,096 ——— C:\WINDOWS\system32\_003693_.tmp.dll 2006-12-22 11:10 120,832 ——— C:\WINDOWS\system32\_003692_.tmp.dll 2006-12-21 19:20 d——– C:\WINDOWS\system32\PreInstall 2006-12-21 19:20 d——– C:\WINDOWS\system32\bits 2006-12-21 19:15 18,200 –a—— C:\WINDOWS\system32\wups2.dll 2006-12-21 19:15 d——– C:\WINDOWS\system32\SoftwareDistribution 2006-12-21 17:51 99,328 ——— C:\WINDOWS\system32\_003694_.tmp.dll 2006-12-21 17:51 99,328 ——— C:\WINDOWS\system32\_003686_.tmp.dll 2006-12-21 17:51 548,864 ——— C:\WINDOWS\system32\_003511_.tmp.dll 2006-12-21 17:51 132,096 ——— C:\WINDOWS\system32\_003685_.tmp.dll 2006-12-21 17:51 120,832 ——— C:\WINDOWS\system32\_003684_.tmp.dll 2006-12-21 17:51 1,813,632 ——— C:\WINDOWS\system32\_003695_.tmp.dll 2006-12-21 17:51 1,813,632 ——— C:\WINDOWS\system32\_003687_.tmp.dll 2006-12-21 01:09 d——– C:\WINDOWS\provisioning 2006-12-21 01:09 d——– C:\WINDOWS\peernet 2006-12-21 00:47 930,304 ——— C:\WINDOWS\system32\_003601_.tmp.dll 2006-12-21 00:47 68,992 ——— C:\WINDOWS\system32\drivers\_003534_.tmp.dll 2006-12-21 00:47 6,656 ——— C:\WINDOWS\system32\_003591_.tmp.dll 2006-12-21 00:47 558,080 ——— C:\WINDOWS\system32\_003613_.tmp.dll 2006-12-21 00:47 55,808 ——— C:\WINDOWS\system32\_003581_.tmp.dll 2006-12-21 00:47 54,784 ——— C:\WINDOWS\system32\_003578_.tmp.dll 2006-12-21 00:47 54,272 ——— C:\WINDOWS\system32\_003580_.tmp.dll 2006-12-21 00:47 522,240 ——— C:\WINDOWS\system32\_003585_.tmp.dll 2006-12-21 00:47 411,136 ——— C:\WINDOWS\system32\_003577_.tmp.dll 2006-12-21 00:47 295,936 ——— C:\WINDOWS\system32\_003599_.tmp.dll 2006-12-21 00:47 29,184 ——— C:\WINDOWS\system32\_003607_.tmp.dll 2006-12-21 00:47 258,048 ——— C:\WINDOWS\system32\_003608_.tmp.dll 2006-12-21 00:47 217,088 ——— C:\WINDOWS\system32\_003584_.tmp.dll 2006-12-21 00:47 136,704 ——— C:\WINDOWS\system32\_003574_.tmp.dll 2006-12-21 00:47 132,096 ——— C:\WINDOWS\system32\_003560_.tmp.dll 2006-12-21 00:47 126,976 ——— C:\WINDOWS\system32\_003602_.tmp.dll 2006-12-21 00:47 120,832 ——— C:\WINDOWS\system32\_003559_.tmp.dll 2006-12-21 00:47 12,288 ——— C:\WINDOWS\system32\_003600_.tmp.dll 2006-12-21 00:47 108,544 ——— C:\WINDOWS\system32\_003594_.tmp.dll 2006-12-21 00:46 802,304 ——— C:\WINDOWS\system32\_003392_.tmp.dll 2006-12-21 00:46 548,864 ——— C:\WINDOWS\system32\_003386_.tmp.dll 2006-12-21 00:46 47,104 ——— C:\WINDOWS\system32\_003389_.tmp.dll 2006-12-20 18:04 d——– C:\WINDOWS\ServicePackFiles 2006-12-20 17:58 22,752 –a—— C:\WINDOWS\system32\spupdsvc.exe 2006-12-20 17:57 993,546 –a—— C:\WINDOWS\system32\drivers\nv4_mini.sys 2006-12-20 17:57 3,543,674 –a—— C:\WINDOWS\system32\nv4_disp.dll 2006-12-20 17:55 99,840 ——— C:\WINDOWS\system32\_003605_.tmp.dll 2006-12-20 17:55 671,744 ——— C:\WINDOWS\system32\_003597_.tmp.dll 2006-12-20 17:55 668,672 ——— C:\WINDOWS\system32\_003592_.tmp.dll 2006-12-20 17:55 631,808 ——— C:\WINDOWS\system32\_003582_.tmp.dll 2006-12-20 17:55 625,537 –a—— C:\WINDOWS\system32\drivers\ltmdmnt.sys 2006-12-20 17:55 569,344 ——— C:\WINDOWS\system32\_003587_.tmp.dll 2006-12-20 17:55 557,056 ——— C:\WINDOWS\system32\_003609_.tmp.dll 2006-12-20 17:55 101,376 ——— C:\WINDOWS\system32\_003573_.tmp.dll 2006-12-20 17:55 1,813,632 ——— C:\WINDOWS\system32\_003556_.tmp.dll 2006-12-20 17:54 d——– C:\WINDOWS\EHome 2006-12-20 17:45 d——– C:\27420a84abe036a6fde9b5a509de0292 2006-12-20 17:23 d——– C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage 2006-12-20 10:55 3,968 –a—— C:\WINDOWS\system32\drivers\AvgAsCln.sys 2006-12-20 10:54 d——– C:\Program Files\Grisoft 2006-12-20 10:24 d——– C:\WINDOWS\temp 2006-12-20 01:00 d——– C:\Program Files\Spybot - Search & Destroy 2006-12-20 01:00 d——– C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2006-12-19 23:15 d——– C:\Program Files\Lavasoft 2006-12-19 16:51 12,160 –a—— C:\WINDOWS\system32\drivers\mouhid.sys 2006-12-19 16:50 9,600 –a—— C:\WINDOWS\system32\drivers\hidusb.sys 2006-12-01 15:33 d–hs—- C:\WINDOWS\VGFzaGEgU2xvYW4 2006-11-29 14:44 d——– C:\WINDOWS\roqq 2006-11-29 14:44 d——– C:\Program Files\Common Files\roqq 2006-11-27 13:48 96,256 –a-s—- C:\WINDOWS\system32\druid_redux.exe (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-12-26 18:55 814 –a—— C:\WINDOWS\uwjta.dll 2006-12-26 14:44 ——– d——– C:\Program Files\Common Files 2006-12-25 02:28 ——– d——– C:\Program Files\Microsoft ActiveSync 2006-12-25 02:27 ——– d——– C:\Program Files\Common Files\Microsoft Shared 2006-12-23 22:37 ——– d——– C:\Program Files\Common Files\AOL 2006-12-23 22:37 ——– d——– C:\Program Files\AOL 2006-12-23 22:35 ——– d——– C:\Documents and Settings\Owner\Application Data\Lavasoft 2006-12-23 22:27 ——– d——– C:\Program Files\Symantec 2006-12-23 22:26 ——– d——– C:\Program Files\Common Files\Symantec Shared 2006-12-23 22:25 ——– d–h—– C:\Program Files\InstallShield Installation Information 2006-12-23 21:57 ——– d——– C:\Program Files\Norton AntiVirus 2006-12-23 21:09 ——– d——– C:\Program Files\Messenger 2006-12-23 21:07 ——– d——– C:\Program Files\Internet Explorer 2006-12-23 21:02 ——– d——– C:\Program Files\Windows Media Player 2006-12-23 20:58 ——– d——– C:\Program Files\Outlook Express 2006-12-23 20:58 ——– d——– C:\Program Files\Common Files\System 2006-12-22 13:12 ——– d——– C:\Program Files\Movie Maker 2006-12-22 13:08 ——– d——– C:\Program Files\Windows NT 2006-12-22 13:08 ——– d——– C:\Program Files\NetMeeting 2006-12-20 11:08 ——– d–h—– C:\Program Files\WindowsUpdate 2006-12-06 23:29 2374472 –a—— C:\WINDOWS\system32\wmvcore.dll 2006-11-23 19:30 69 –a-s—- C:\WINDOWS\test.bat 2006-11-17 01:42 ——– d——– C:\Documents and Settings\Owner\Application Data\ArcSoft 2006-11-17 01:39 ——– d——– C:\Program Files\ArcSoft 2006-11-13 13:31 ——– d——– C:\Program Files\Common Files\Logitech 2006-11-13 13:29 ——– d——– C:\Program Files\Logitech 2006-11-12 23:10 ——– d——– C:\Program Files\AIM 2006-11-04 14:14 1245696 –a—— C:\WINDOWS\system32\msxml4.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "H/PC Connection Agent"="\"C:\\PROGRA~1\\MICROS~3\\wcescomm.exe\"" "Hdyj"="C:\\WINDOWS\\?racle\\?ttrib.exe" "roqq"="C:\\PROGRA~1\\COMMON~1\\roqq\\roqqm.exe" "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background" "spngk"="C:\\WINDOWS\\system32\\wcdmjv.exe reg_run" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "CamMonitor"="c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\hpqcmon.exe" "AutoTBar"="C:\\hp\\bin\\autotbar.exe" "LogitechCameraAssistant"="C:\\Program Files\\Logitech\\Video\\CameraAssistant.exe" "LogitechVideo[inspector]"="C:\\Program Files\\Logitech\\Video\\InstallHelper.exe /inspect" "LogitechCameraService(E)"="C:\\WINDOWS\\System32\\ElkCtrl.exe /automation" "DDCActiveMenu"="\"C:\\Program Files\\WildTangent\\DDC\\ActiveMenu\\DDCActiveMenu.exe\" -boot" "NvCplDaemon"="RUNDLL32.EXE NvQTwk,NvCplDaemon initialize" "nwiz"="nwiz.exe /install" "PS2"="C:\\WINDOWS\\system32\\ps2.exe" "Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide" "AlcxMonitor"="ALCXMNTR.EXE" "RadialpointServicepoint.exe"="\"C:\\Program Files\\Radialpoint\\Servicepoint\\RadialpointServicepoint.exe\" /AUTORUN" "Radialpoint"="\"C:\\Program Files\\Radialpoint\\Radialpoint\\Rps.exe\"" "vthejt"="C:\\WINDOWS\\system32\\wcdmjv.exe reg_run" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000005 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\ ff,ff,04,00,00,00 "RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\ 00,00,01,00,00,00 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5" "{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "NoDispAppearancePage"=dword:00000000 "NoColorChoice"=dword:00000000 "NoSizeChoice"=dword:00000000 "NoDispBackgroundPage"=dword:00000000 "NoDispScrSavPage"=dword:00000000 "NoDispCPL"=dword:00000000 "NoVisualStyleChoice"=dword:00000000 "NoDispSettingsPage"=dword:00000000 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 "NoActiveDesktop"=dword:00000000 "NoSaveSettings"=dword:00000000 "ClassicShell"=dword:00000000 "NoThemesTab"=dword:00000000 "ForceActiveDesktopOn"=dword:00000000 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 "DisableTaskMgr"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoActiveDesktopChanges"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" "SystemCheck2"="{54645654-2225-4455-44A1-9F4543D34546}" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" Contents of the 'Scheduled Tasks' folder C:\WINDOWS\tasks\easy Internet sign-up.job C:\WINDOWS\tasks\MP Scheduled Scan.job Completion time: 06-12-26 19:07:22.87 C:\ComboFix.txt … 06-12-26 19:07 C:\ComboFix2.txt … 06-12-26 14:49

Dan, Looks like we're making progress! Here is the rollout of what I got from reports and fixme.bat output fixme.bat _________ Microsoft Windows XP [Version 5.1.2600] © Copyright 1985-2001 Microsoft Corp. C:\Documents and Settings\Administrator>cd desktop C:\Documents and Settings\Administrator\Desktop>fixme.bat C:\Documents and Settings\Administrator\Desktop>REGEDIT4 'REGEDIT4' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\Administrator\Desktop>[HKEY_CURRENT_USER\software\micr osoft\windows\currentversion\run] The system cannot find the path specified. C:\Documents and Settings\Administrator\Desktop>"Hdyj"=- '"Hdyj"' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\Administrator\Desktop>"roqq"=- '"roqq"' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\Administrator\Desktop>"spngk"=- '"spngk"' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\Administrator\Desktop>[HKEY_LOCAL_MACHINE\software\mic rosoft\windows\currentversion\run] The system cannot find the path specified. C:\Documents and Settings\Administrator\Desktop>"vthejt"=- '"vthejt"' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\Administrator\Desktop> I had already run AVG before contacting you so no big suprise here: ——————————————————— AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 3:09:12 AM 12/27/2006 + Scan result: Nothing found. ::Report end

——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Wednesday, December 27, 2006 2:53:42 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 27/12/2006 Kaspersky Anti-Virus database records: 254556 ——————————————————————————- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: A:\ C:\ D:\ E:\ F:\ Scan Statistics: Total number of scanned objects: 127742 Number of viruses found: 9 Number of infected objects: 22 / 0 Number of suspicious objects: 0 Duration of the scan process: 02:15:12 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\161d6418a1026f9476e35750273c2fb2_8a405c0d-8ae2-496a-9ffc-7c39cb1fb3d9 Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2940d034c59725a4a7e6557baf47c37_a4cadecc-d515-4808-9b22-84d4c47e142e Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea563f5ed0b8ea72081a19b9b561dd25_a4cadecc-d515-4808-9b22-84d4c47e142e Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea563f5ed0b8ea72081a19b9b561dd25_eaa10d74-c869-434e-9867-a5dc4c7d30d8 Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-12222006-133328.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Radialpoint\Radialpoint\logs\FirewallService12-27-2006–10-44-20.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Radialpoint\Radialpoint\logs\Fw_Session.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Radialpoint\Radialpoint\logs\SafetyConsoleLog12-27-2006–10-47-09.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Radialpoint\Radialpoint\logs\ServiceModel12-27-2006–10-47-09.log Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Owner\Application Data\$_hpcst$.hpc Object is locked skipped C:\Documents and Settings\Owner\Application Data\Radialpoint\Servicepoint\client_gateway.log Object is locked skipped C:\Documents and Settings\Owner\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{5F04CBC0-372C-4300-A2C2-2C21D51AFBD0} Object is locked skipped C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Temp\WCESLog.log Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Owner\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Owner\ntuser.dat.LOG Object is locked skipped C:\hp\bin\KillWind.exe Infected: not-a-virus:RiskTool.Win32.PsKill.p skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP200\A0115019.exe Object is locked skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP208\A0118647.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP208\A0118648.sys Infected: Rootkit.Win32.Agent.p skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119273.exe Infected: Trojan.Win32.Kolweb.j skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119276.dll Infected: not-a-virus:AdWare.Win32.HotBar.an skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119278.dll Infected: not-a-virus:AdWare.Win32.HotBar.be skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119279.exe/stream/data0001 Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119279.exe/stream Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119279.exe NSIS: infected - 2 skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119281.exe/stream/data0012/stream/data0001 Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119281.exe/stream/data0012/stream Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119281.exe/stream/data0012 Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119281.exe/stream Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP214\A0119281.exe NSIS: infected - 4 skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP217\A0121038.exe Infected: Trojan.Win32.Kolweb.j skipped C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP217\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Prefetch\layout.ini Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{78156859-AAB6-4BA8-AF13-2B06721C1965}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\0q1wzbn.dll Infected: Trojan.Win32.Kolweb.d skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edbtmp.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\FxsTmp\fxs20.tmp Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\h70n4m5p.ini Infected: not-a-virus:AdWare.Win32.Sahat.ao skipped C:\WINDOWS\system32\ltykotzp.exe/stream/data0012/stream/data0001 Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\WINDOWS\system32\ltykotzp.exe/stream/data0012/stream Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\WINDOWS\system32\ltykotzp.exe/stream/data0012 Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\WINDOWS\system32\ltykotzp.exe/stream Infected: not-a-virus:AdWare.Win32.Shopper.c skipped C:\WINDOWS\system32\ltykotzp.exe NSIS: infected - 4 skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP217\change.log Object is locked skipped Scan process completed.

Save this as fixme.bat , choose to save it as *all files and place it on your desktop.

Hi JacKNight, not sure why the batch didn't work, did you save it as "all files" if you saved it as a text document it wouldn't have worked, did you use notepad?
Will look through logs tomorrow as I'm at work at the moment.
Thanks dan

Yes that is the way I saved it

This bat file looks like it is just trying to delete things out of the registry. Can't I just go in and do this manually?

Hi JacKNight, It's ok I know what the problem was, I will address it in my next post. Hope to be back with you later today. thanks dan