Spyware / Malware / Virus Removal

[Resolved] Files Disappearing

117 min read

Looking for the outcome? Ask AI

kawgirl96

Post #16November 23, 2007, 5:19 PM UTC

4th Continuation of Combo Fix

2002-03-27 12:33 804 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\PreViewer\pclose_down.bmp
2002-03-27 12:33 774 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\Audio_min.bmp
2002-03-27 12:33 6992 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\line01_I.bmp
2002-03-27 12:33 672 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\MNU_PAT.BMP
2002-03-27 12:33 631588 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\SettingArea\media_BG.bmp
2002-03-27 12:33 631588 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\SettingArea\effect_BG.bmp
2002-03-27 12:33 628 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\check box_normal.bmp
2002-03-27 12:33 628 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\check box_check.bmp
2002-03-27 12:33 628 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\StoryBoard\sb_menu_g.bmp
2002-03-27 12:33 582 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Wb_fh.bmp
2002-03-27 12:33 582 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\Wb_fh.bmp
2002-03-27 12:33 57654 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\caption.bmp
2002-03-27 12:33 574 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\std_tmb.bmp
2002-03-27 12:33 558 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\transition_omitted.bmp
2002-03-27 12:33 522 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\StoryBoard\project name_icon.bmp
2002-03-27 12:33 5094 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Sb_r.bmp
2002-03-27 12:33 5094 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\Sb_r.bmp
2002-03-27 12:33 506816 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\SettingArea\media_BG.bmp
2002-03-27 12:33 506816 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\SettingArea\effect_BG.bmp
2002-03-27 12:33 488 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\ratio BT_normal.bmp
2002-03-27 12:33 488 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\ratio BT_check.bmp
2002-03-27 12:33 478936 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\viewer_BG.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\play_up_I.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\play_rollover_I.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\play_gray_I.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\play_down_I.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\pause_up_I.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\pause_rollover_I.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\pause_gray_I.bmp
2002-03-27 12:33 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\pause_down_I.bmp
2002-03-27 12:33 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\hold_end_mask.bmp
2002-03-27 12:33 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\hold_end.bmp
2002-03-27 12:33 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\hold_begin_mask.bmp
2002-03-27 12:33 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\hold_begin.bmp
2002-03-27 12:33 4408 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\switch_media mode.bmp
2002-03-27 12:33 4408 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\switch_disable.bmp
2002-03-27 12:33 4408 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\switch_device mode.bmp
2002-03-27 12:33 43256 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\MB_bk.bmp
2002-03-27 12:33 43256 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\Main_BG_T.bmp
2002-03-27 12:33 43256 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\Main_BG_R.bmp
2002-03-27 12:33 43256 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\Main_BG_L.bmp
2002-03-27 12:33 43256 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\Main_BG_C.bmp
2002-03-27 12:33 43256 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\Main_BG_B.bmp
2002-03-27 12:33 432 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\MNU_PATS.BMP
2002-03-27 12:33 42824 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\list panel.bmp
2002-03-27 12:33 4254 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\Sb_pat.bmp
2002-03-27 12:33 4172 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Wave\DRAG.WAV
2002-03-27 12:33 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\pageup_up.bmp
2002-03-27 12:33 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\pageup_gray.bmp
2002-03-27 12:33 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\pageup_down.bmp
2002-03-27 12:33 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\pagedown_up.bmp
2002-03-27 12:33 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\pagedown_gray.bmp
2002-03-27 12:33 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\pagedown_down.bmp
2002-03-27 12:33 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\audiosldbtn.bmp
2002-03-27 12:33 3852 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\std_t.bmp
2002-03-27 12:33 380 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\position mark.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_play_up.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_play_rollover.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_play_gray.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_play_down.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_pause_up.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_pause_rollover.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_pause_gray.bmp
2002-03-27 12:33 3768 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_pause_down.bmp
2002-03-27 12:33 336 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\scroll_mask.bmp
2002-03-27 12:33 336 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\scroll.bmp
2002-03-27 12:33 3246 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Sb_l.bmp
2002-03-27 12:33 3246 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\Sb_l.bmp
2002-03-27 12:33 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\WB_PATF.BMP
2002-03-27 12:33 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\WB_PAT.BMP
2002-03-27 12:33 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Wb_fh_mid.bmp
2002-03-27 12:33 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\WB_PATF.BMP
2002-03-27 12:33 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\WB_PAT.BMP
2002-03-27 12:33 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\Wb_fh_mid.bmp
2002-03-27 12:33 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\end_up_I.bmp
2002-03-27 12:33 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\end_rollover_I.bmp
2002-03-27 12:33 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\end_gray_I.bmp
2002-03-27 12:33 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\end_down_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\stop_up_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\stop_rollover_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\stop_gray_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\stop_down_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\start_up_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\start_rollover_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\start_gray_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\start_down_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\previous_up_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\previous_rollover_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\previous_gray_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\previous_down_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\next_up_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\next_rollover_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\next_gray_I.bmp
2002-03-27 12:33 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\next_down_I.bmp
2002-03-27 12:33 308 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\effect end.bmp
2002-03-27 12:33 308 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\effect begin.bmp
2002-03-27 12:33 2980 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\combo box.bmp
2002-03-27 12:33 2960 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\select device_up.bmp
2002-03-27 12:33 2960 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\select device_rollover.bmp
2002-03-27 12:33 2960 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\select device_gray.bmp
2002-03-27 12:33 2872 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\capture batch_rollover.bmp
2002-03-27 12:33 2784 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\capture sequence_rollover.bmp
2002-03-27 12:33 2784 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\capture multi-pic_rollover.bmp
2002-03-27 12:33 274 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\range_end.bmp
2002-03-27 12:33 274 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\range_begin.bmp
2002-03-27 12:33 2696 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\device setting_up.bmp
2002-03-27 12:33 2696 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\device setting_rollover.bmp
2002-03-27 12:33 2696 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\device setting_gray.bmp
2002-03-27 12:33 2598 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Wave\DROPFAIL.WAV
2002-03-27 12:33 25794 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\audiosldbk.bmp
2002-03-27 12:33 2254 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Sb_lcd.bmp
2002-03-27 12:33 2254 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\Sb_lcd.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_stop_up.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_stop_rollover.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_stop_gray.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_stop_down.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_next_up.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_next_rollover.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_next_gray.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_next_down.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_foreward_up.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_foreward_rollover.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_foreward_gray.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_foreward_down.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_end_up.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_end_rollover.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_end_gray.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_end_down.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_begin_up.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_begin_rollover.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_begin_gray.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_begin_down.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_before_up.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_before_rollover.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_before_gray.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_before_down.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_backward_up.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_backward_rollover.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_backward_gray.bmp
2002-03-27 12:33 2168 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\controllor_backward_down.bmp
2002-03-27 12:33 2164 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\PreViewer\stop_up.bmp
2002-03-27 12:33 2164 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\PreViewer\stop_rollover.bmp
2002-03-27 12:33 2164 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\PreViewer\stop_down.bmp
2002-03-27 12:33 2164 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\PreViewer\play_up.bmp
2002-03-27 12:33 2164 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\PreViewer\play_rollover.bmp
2002-03-27 12:33 2164 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\PreViewer\play_down.bmp
2002-03-27 12:33 2000 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\snapshot_up.bmp
2002-03-27 12:33 2000 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\snapshot_down.bmp
2002-03-27 12:33 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\slider mark_mask.bmp
2002-03-27 12:33 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\slider mark.bmp
2002-03-27 12:33 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\slider mark_mask.bmp
2002-03-27 12:33 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\slider mark.bmp
2002-03-27 12:33 188 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\range_unit.bmp
2002-03-27 12:33 18798 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\psliderbk.bmp
2002-03-27 12:33 1856 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\full screen_up.bmp
2002-03-27 12:33 1856 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\full screen_down.bmp
2002-03-27 12:33 17216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\import_up.bmp
2002-03-27 12:33 17216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\import_rollover.bmp
2002-03-27 12:33 17216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\import_hit.bmp
2002-03-27 12:33 17216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\import_gray.bmp
2002-03-27 12:33 17216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\import_down.bmp
2002-03-27 12:33 160 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\BG_MASK.rgn
2002-03-27 12:33 1576 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\close_up.bmp
2002-03-27 12:33 1576 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\close_rollover.bmp
2002-03-27 12:33 1576 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\close_gray.bmp
2002-03-27 12:33 1576 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\close_down.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\minimize_up.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\minimize_rollover.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\minimize_gray.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\minimize_down.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\help_up.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\help_rollover.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\help_gray.bmp
2002-03-27 12:33 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\help_down.bmp
2002-03-27 12:33 1436 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\trash_open.bmp
2002-03-27 12:33 1436 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\trash_close.bmp
2002-03-27 12:33 1376 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\capture_part.bmp
2002-03-27 12:33 13748 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\NewSoft_Link.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\stop_u.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\stop_d.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\play_u.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\play_d.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\picker_up.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\picker_down.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\fadeout_u.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\fadeout_d.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\fadein_u.bmp
2002-03-27 12:33 1348 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\fadein_d.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\save_up.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\save_rollover.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\save_gray.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\save_down.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makeout_up.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makeout_rollover.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makeout_gray.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makeout_down.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makein_up.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makein_rollover.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makein_gray.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\makein_down.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\load_up.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\load_rollover.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\load_gray.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\load_down.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\clear_up.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\clear_rollover.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\clear_gray.bmp
2002-03-27 12:33 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\VIEWER\clear_down.bmp
2002-03-27 12:33 11928 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\MediaClip_up.bmp
2002-03-27 12:33 11928 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\MediaClip_hit.bmp
2002-03-27 12:33 1144 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Wave\DROPOK.WAV
2002-03-27 12:33 1094 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\GUIDEBAR\guide bar.BMP
2002-03-27 12:33 1024 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\WB_R.BMP
2002-03-27 12:33 1024 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\PROGRESS\WB_R.BMP
2002-03-27 12:33 102 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\800\audiosldbtn_mask.bmp
2002-03-27 12:33 10052 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Transition_B.bmp
2002-03-27 12:33 10052 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Transition_A.bmp
2002-03-12 17:32 6685968 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\Video\Train.avi
2002-03-12 16:08 5539074 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\Video\Gulls.avi
2002-03-12 15:58 7228528 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\Video\Teals.avi
2002-03-08 15:05 311096 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Viewer_Bg_Video.bmp
2002-03-08 15:05 311096 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Viewer_Bg_Image.bmp
2002-03-08 15:05 311096 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\Viewer_Bg_Audio.bmp
2002-03-04 14:22 224 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\hold bar.bmp
2002-02-27 15:24 634880 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Title\Animation\Start.avi
2002-02-27 15:22 521216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Title\Animation\End.avi
2002-02-26 15:42 824 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\transition_omitted.bmp
2002-02-25 16:51 384 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\ImageFolio.txt
2002-02-25 16:51 166436 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\ImageFolio.bmp
2002-02-22 11:13 169786 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Cat.jpg
2002-02-21 15:01 92954 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Toscany.jpg
2002-02-21 14:27 184078 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Colosseum.jpg
2002-02-21 14:22 201757 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Plaza.jpg
2002-02-21 13:45 209606 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Gondola.jpg
2002-02-21 09:47 6992 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\line01_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\play_up_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\play_rollover_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\play_gray_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\play_down_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\pause_up_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\pause_rollover_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\pause_gray_I.bmp
2002-02-21 09:47 4664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\pause_down_I.bmp
2002-02-21 09:47 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\end_up_I.bmp
2002-02-21 09:47 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\end_rollover_I.bmp
2002-02-21 09:47 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\end_gray_I.bmp
2002-02-21 09:47 3152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\end_down_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\stop_up_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\stop_rollover_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\stop_gray_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\stop_down_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\start_up_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\start_rollover_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\start_gray_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\start_down_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\previous_up_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\previous_rollover_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\previous_gray_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\previous_down_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\next_up_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\next_rollover_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\next_gray_I.bmp
2002-02-21 09:47 3080 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\next_down_I.bmp
2002-02-20 12:42 2254 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\Sb_lcd.bmp
2002-01-31 16:34 1608704 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\About6.avi
2002-01-31 13:34 8326 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Abouttxt.bmp
2002-01-31 11:28 360056 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\About6.bmp
2002-01-16 14:36 5406 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Ripple.JPG
2002-01-16 14:36 4236 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Swirl.JPG
2002-01-16 14:36 4099 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Sphere.JPG
2002-01-16 14:36 3761 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Emboss.JPG
2002-01-16 14:36 3490 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Slant.JPG
2002-01-16 14:36 3352 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Reverse.JPG
2002-01-16 14:36 2939 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Mirror.JPG
2002-01-16 14:36 2936 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Normal.JPG
2002-01-16 14:36 2925 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Inverse.JPG
2002-01-16 14:36 2803 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Zoom.JPG
2002-01-16 14:36 2679 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Fade.JPG
2002-01-16 14:36 1066 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\SpecialEffect\Mosaic.JPG
2002-01-16 14:33 3991 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\ripple.JPG
2002-01-16 14:33 3679 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\HS.JPG
2002-01-16 14:33 3497 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\Emboss.JPG
2002-01-16 14:33 3342 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\BC.JPG
2002-01-16 14:33 3292 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\sphere.JPG
2002-01-16 14:33 3115 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\swirl.JPG
2002-01-16 14:33 3074 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\Mosaic.JPG
2002-01-16 14:33 2936 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\MagicTouch\normal.JPG
2002-01-16 14:30 1007 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Title\Color\White.jpg
2002-01-16 14:30 1007 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Title\Color\Black.jpg
2002-01-14 07:59 5094 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\Sb_r.bmp
2002-01-14 07:59 4254 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\Sb_pat.bmp
2002-01-11 09:47 992 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\fadeout.bmp
2002-01-11 09:47 992 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\fadein.bmp
2002-01-11 09:47 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\picker_up.bmp
2002-01-11 09:47 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\picker_down.bmp
2002-01-11 06:35 2238 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\vworks6.ico
2002-01-10 10:34 308 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\effect end.bmp
2002-01-10 10:34 308 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\effect begin.bmp
2002-01-03 09:35 92672 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\RV203260.DLL
2002-01-03 09:35 92672 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\ERV13260.DLL
2002-01-03 09:35 90112 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\RV303260.DLL
2002-01-03 09:35 84992 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\14_43260.DLL
2002-01-03 09:35 78848 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\EDNT3260.DLL
2002-01-03 09:35 59392 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\ESPR3260.DLL
2002-01-03 09:35 537600 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\RMME3260.DLL
2002-01-03 09:35 536064 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RMBE3260.DLL
2002-01-03 09:35 525824 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\RNCO3260.DLL
2002-01-03 09:35 49664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\COOK3260.DLL
2002-01-03 09:35 49152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\TOKR3260.DLL
2002-01-03 09:35 474112 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\ENCN3260.DLL
2002-01-03 09:35 44032 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\28_83260.DLL
2002-01-03 09:35 38912 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\SDPP3260.DLL
2002-01-03 09:35 386560 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\PNGU3266.DLL
2002-01-03 09:35 347136 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\RMTO3260.DLL
2002-01-03 09:35 30720 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\AUTH3260.DLL
2002-01-03 09:35 30208 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\RV103260.DLL
2002-01-03 09:35 28160 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\RN5A3260.DLL
2002-01-03 09:35 278528 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\PNCRT.DLL
2002-01-03 09:35 270336 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\ERV23260.DLL
2002-01-03 09:35 24576 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\BASC3260.DLL
2002-01-03 09:35 22016 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\ENLV3260.DLL
2002-01-03 09:35 20480 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\DNET3260.DLL
2002-01-03 09:35 19968 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\ATRC3260.DLL
2002-01-03 09:35 177664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\ERV33260.DLL
2002-01-03 09:35 17408 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\SIPR3260.DLL
2002-01-03 09:35 11264 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RmDll\PNRS3260.DLL
2001-12-31 09:38 788 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\setting text space.bmp
2001-12-31 09:38 672 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\MNU_PAT.BMP
2001-12-31 09:38 432 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\MNU_PATS.BMP
2001-12-31 09:38 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\pageup_up.bmp
2001-12-31 09:38 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\pageup_gray.bmp
2001-12-31 09:38 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\pageup_down.bmp
2001-12-31 09:38 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\pagedown_up.bmp
2001-12-31 09:38 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\pagedown_gray.bmp
2001-12-31 09:38 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\pagedown_down.bmp
2001-12-31 09:38 2292 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\show list.bmp
2001-12-25 18:14 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\save_up.bmp
2001-12-25 18:14 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\save_rollover.bmp
2001-12-25 18:14 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\save_gray.bmp
2001-12-25 18:14 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\save_down.bmp
2001-12-21 08:42 5094 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\Sb_l.bmp
2001-12-19 20:18 28302 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\audiosldbk.bmp
2001-12-19 18:38 954 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\audio_max.bmp
2001-12-19 18:38 774 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Audio_min.bmp
2001-12-19 18:38 691880 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\Viewer_BG.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_play_up.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_play_rollover.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_play_gray.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_play_down.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_pause_up.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_pause_rollover.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_pause_gray.bmp
2001-12-19 18:38 6680 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_pause_down.bmp
2001-12-19 18:38 628 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\check box_normal.bmp
2001-12-19 18:38 628 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\check box_check.bmp
2001-12-19 18:38 574 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\std_tmb.bmp
2001-12-19 18:38 574 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\std_tmb.bmp
2001-12-19 18:38 488 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\ratio BT_normal.bmp
2001-12-19 18:38 488 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\ratio BT_check.bmp
2001-12-19 18:38 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\hold_end_mask.bmp
2001-12-19 18:38 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\hold_end.bmp
2001-12-19 18:38 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\hold_begin_mask.bmp
2001-12-19 18:38 452 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\hold_begin.bmp
2001-12-19 18:38 4408 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\switch_media mode.bmp
2001-12-19 18:38 4408 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\switch_disable.bmp
2001-12-19 18:38 4408 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\switch_device mode.bmp
2001-12-19 18:38 43256 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\MB_bk.bmp
2001-12-19 18:38 42824 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\list panel.bmp
2001-12-19 18:38 416 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\audiosldbtn.bmp
2001-12-19 18:38 3852 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\Common\Misc\std_t.bmp
2001-12-19 18:38 3852 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\std_t.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_stop_up.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_stop_rollover.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_stop_gray.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_stop_down.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_next_up.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_next_rollover.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_next_gray.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_next_down.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_foreward_up.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_foreward_rollover.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_foreward_gray.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_end_up.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_end_rollover.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_end_gray.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_end_down.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_begin_up.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_begin_rollover.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_begin_gray.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_begin_down.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_before_up.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_before_rollover.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_before_gray.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_before_down.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_backward_up.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_backward_rollover.bmp
2001-12-19 18:38 3460 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\controllor_backward_gray.bmp
2001-12-19 18:38 336 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\scroll_mask.bmp
2001-12-19 18:38 336 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\scroll.bmp
2001-12-19 18:38 3000 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\capture multi-pic_rollover.bmp
2001-12-19 18:38 2980 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\combo box.bmp
2001-12-19 18:38 274 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\range_end.bmp
2001-12-19 18:38 274 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\range_begin.bmp
2001-12-19 18:38 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\slider mark_mask.bmp
2001-12-19 18:38 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\slider mark.bmp
2001-12-19 18:38 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\slider mark_mask.bmp
2001-12-19 18:38 196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\slider mark.bmp
2001-12-19 18:38 1892 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\snapshot_up.bmp
2001-12-19 18:38 1892 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\snapshot_down.bmp
2001-12-19 18:38 188 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\range_unit.bmp
2001-12-19 18:38 18798 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\psliderbk.bmp
2001-12-19 18:38 1756 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\full screen_up.bmp
2001-12-19 18:38 1756 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\full screen_down.bmp
2001-12-19 18:38 160 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\BG_MASK.Rgn
2001-12-19 18:38 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\fadeout_u.bmp
2001-12-19 18:38 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\fadeout_d.bmp
2001-12-19 18:38 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\fadein_u.bmp
2001-12-19 18:38 1496 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\fadein_d.bmp
2001-12-19 18:38 1436 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\trash_open.bmp
2001-12-19 18:38 1436 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\trash_close.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makeout_up.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makeout_rollover.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makeout_gray.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makeout_down.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makein_up.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makein_rollover.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makein_gray.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\makein_down.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\load_up.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\load_rollover.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\load_gray.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\load_down.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\clear_up.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\clear_rollover.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\clear_gray.bmp
2001-12-19 18:38 1196 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\Viewer\clear_down.bmp
2001-12-19 18:38 102 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\audiosldbtn_mask.bmp
2001-12-17 14:27 582 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\Wb_fh.bmp
2001-12-17 14:27 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\WB_PATF.BMP
2001-12-17 14:27 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\WB_PAT.BMP
2001-12-17 14:27 318 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\Wb_fh_mid.bmp
2001-12-17 14:27 1024 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\PROGRESS\WB_R.BMP
2001-12-14 13:29 2538 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\guide bar.BMP
2001-12-14 13:15 95286 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\caption.bmp
2001-12-13 14:28 522 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\StoryBoard\project name_icon.bmp
2001-12-13 02:55 191145 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Sunset.jpg
2001-12-11 10:20 5744 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\CLOSE.BMP
2001-12-11 10:15 2216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\RIGHT.BMP
2001-12-11 10:14 2216 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\LEFT.BMP
2001-12-11 10:10 10664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\TOP1.BMP
2001-12-11 10:10 10664 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\TOP.BMP
2001-12-10 16:54 180056 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\Dlg_bk.bmp
2001-12-06 20:40 222 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\Group_lb.bmp
2001-12-06 20:38 222 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\Group_rt.bmp
2001-12-06 20:36 222 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\Group_lt.bmp
2001-12-06 20:29 222 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\Group_rb.bmp
2001-11-22 16:06 776 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\StoryBoard\sb_menu_g.BMP
2001-11-22 15:54 1336 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\StoryBoard\audio_no.bmp
2001-11-22 15:53 1336 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\StoryBoard\audio_ya.bmp
2001-11-21 15:55 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\help_down.bmp
2001-11-21 15:54 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\minimize_down.bmp
2001-11-21 15:54 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\help_up.bmp
2001-11-21 15:54 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\help_rollover.bmp
2001-11-21 15:54 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\help_gray.bmp
2001-11-21 15:53 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\minimize_up.bmp
2001-11-21 15:53 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\minimize_rollover.bmp
2001-11-21 15:53 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\minimize_gray.bmp
2001-11-21 15:52 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\close_rollover.bmp
2001-11-21 15:52 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\close_gray.bmp
2001-11-21 15:52 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\close_down.bmp
2001-11-21 15:51 2156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\close_up.bmp
2001-11-21 15:18 13076 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\link_rollover.bmp
2001-11-21 15:17 13076 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\link_hit.bmp
2001-11-21 14:27 12828 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\guide bar_rollover.bmp
2001-11-21 14:10 12828 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Resource\1024\GuideBar\guide bar_hit.bmp
2001-11-20 11:00 122450 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Help\ehlpdhtm.js
2001-11-15 11:00 9369 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Help\default.skn
2001-11-12 12:25 144505 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\City.jpg
2001-11-12 10:43 251951 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Building.jpg
2001-11-12 09:44 822 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\HEADER.BMP
2001-11-12 09:44 58368 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Nstb32.dll
2001-11-12 09:44 3896 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\VSCROLL3.BMP
2001-11-12 09:44 3896 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\HSCROLL3.BMP
2001-11-12 09:44 3896 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\HSCROLL2.BMP
2001-11-12 09:44 3896 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\HSCROLL1.BMP
2001-11-12 09:44 3704 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\HSCROLL4.BMP
2001-11-12 09:44 3656 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\VSCROLL4.BMP
2001-11-12 09:44 35840 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Nsconfig.dll
2001-11-12 09:44 33236 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\TREEV_BK.BMP
2001-11-12 09:44 33236 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\LISTV_BK.BMP
2001-11-12 09:44 25 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\SKIN.INI
2001-11-12 09:44 24576 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\ResInfo.dll
2001-11-12 09:44 2456 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\VSPIN2.BMP
2001-11-12 09:44 2456 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\VSPIN1.BMP
2001-11-12 09:44 211 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\VWorks6.nsz
2001-11-12 09:44 1854 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\BOTTOM.BMP
2001-11-12 09:44 17920 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Pmdata.dll
2001-11-12 09:44 122880 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Nsvideo.dll
2001-11-12 09:44 11228 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\Button.bmp
2001-11-12 09:44 11226 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Skin\VWorks6\Button-1.bmp
2001-11-09 17:45 249403 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Leaves.jpg
2001-11-09 14:37 117169 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Bridge.jpg
2001-10-30 03:57 290869 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Msvcrt.dll
2001-09-24 15:37 3126 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\RemoveIcons.ico
2001-08-27 17:21 49152 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Single2.dll
2001-08-16 10:33 2101372 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Music.wav
2001-08-15 13:40 45056 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\WavHandler.dll
2001-04-24 14:29 101644 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Window Display.jpg
2001-04-23 09:46 219861 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Clock Tower.jpg
2000-08-23 23:39 2262 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ENCODE.LOG
2000-08-19 01:52 0 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\OUT.DAT
2000-06-21 11:00 1619 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Help\default.css
2000-01-23 19:00 995383 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Mfc42.dll
2000-01-10 19:00 77878 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Msvcirt.dll
2000-01-10 19:00 65024 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Msvcrt40.dll
1998-07-28 17:15 39936 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\UXMAIL32.DLL
1998-05-19 09:58 2888 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Pamovie.reg
1997-08-05 09:32 5056 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\PMMAIL.EXE
1997-01-22 17:43 6799 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ABSTHR_2
1997-01-22 17:43 6643 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ABSTHR_1
1997-01-22 17:43 5810 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ABSTHR_0
1997-01-22 17:43 55895 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\PSY_DATA
1997-01-22 17:43 4709 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ALLOC_1
1997-01-22 17:43 4523 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ALLOC_0
1997-01-22 17:43 3833 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2TH6
1997-01-22 17:43 3833 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2TH5
1997-01-22 17:43 3833 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2TH4
1997-01-22 17:43 34499 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\HUFFCODE
1997-01-22 17:43 3137 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1TH6
1997-01-22 17:43 3137 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1TH5
1997-01-22 17:43 3137 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1TH4
1997-01-22 17:43 2872 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ALLOC_4
1997-01-22 17:43 2609 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2TH2
1997-01-22 17:43 2584 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2TH0
1997-01-22 17:43 2502 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2TH1
1997-01-22 17:43 2120 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1TH2
1997-01-22 17:43 2091 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1TH0
1997-01-22 17:43 2005 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1TH1
1997-01-22 17:43 19301 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\HUFFDEC
1997-01-22 17:43 187 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2CB0
1997-01-22 17:43 185 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2CB1
1997-01-22 17:43 175 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2CB2
1997-01-22 17:43 172 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1CB1
1997-01-22 17:43 169 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2CB5
1997-01-22 17:43 169 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2CB4
1997-01-22 17:43 166 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1CB0
1997-01-22 17:43 1632 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ALLOC_3
1997-01-22 17:43 162 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1CB2
1997-01-22 17:43 158 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1CB4
1997-01-22 17:43 156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\2CB6
1997-01-22 17:43 156 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1CB5
1997-01-22 17:43 145 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\1CB6
1997-01-22 17:43 1175 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ALLOC_2
1997-01-22 17:43 10876 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\ENWINDOW
1997-01-22 17:43 10876 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\TABLES\DEWINDOW
1995-05-31 15:56 22109 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Flowers.jpg
1995-05-31 15:56 14760 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\IMAGE\Lotus.jpg
1994-01-03 03:25 72246 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Cheer.wav
1994-01-03 02:10 58990 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Airplane.wav
1994-01-03 01:05 246402 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Typing.wav
1994-01-03 01:03 533128 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Thunder.wav
1994-01-03 01:00 179690 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Ring.wav
1994-01-02 20:42 272632 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Printer.wav
1994-01-02 20:41 164034 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Organ.wav
1994-01-02 20:39 87790 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Motorcycle.wav
1994-01-02 20:36 72276 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Horn.wav
1994-01-02 20:22 41486 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Bell.wav
1994-01-02 20:19 210682 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Clapping Hands.wav
1994-01-02 20:19 116986 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Choir.wav
1994-01-02 20:18 250486 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Bubble.wav
1994-01-02 20:18 109094 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Car Alarm.wav
1994-01-02 20:15 99850 –a—— C:\Program Files\NewSoft\Presto! VideoWorks 6\Samples\AUDIO\Ambulance.wav

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{549B5CA7-4A86-11D7-A4DF-000874180BB3}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RecordNow!"="" []
"NVIEW"="nview.dll" [2003-08-19 01:56 C:\WINDOWS\system32\nview.dll]
"PopUpStopperProfessional"="C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe" [2007-08-19 11:41]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 15:04]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2003-04-07 06:07]
"CamMonitor"="c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe" [2002-10-07 06:23]
"HPHUPD05"="c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" []
"HPHmon05"="C:\WINDOWS\System32\hphmon05.exe" [2003-05-23 01:55]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 19:02]
"UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 07:01]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2003-10-11 04:07]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2002-09-13 20:42]
"VTTimer"="VTTimer.exe" [2005-03-08 04:33 C:\WINDOWS\system32\VTTimer.exe]
"LTMSG"="LTMSG.exe" [2003-07-14 16:52 C:\WINDOWS\ltmsg.exe]
"NeroCheck"="C:\WINDOWS\system32\\NeroCheck.exe" [2001-07-09 10:50]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-03-31 19:57]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 13:47 C:\WINDOWS\ALCXMNTR.EXE]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2002-07-31 19:28]
"mmtask"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe" [2006-01-17 12:03]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26]
Quicken Scheduled Updates.lnk - C:\Program Files\Quicken\bagent.exe [2003-07-30 03:49:48]
C:\WINDOWS\system32\NavLogon.dll 2003-05-21 00:19 45056 C:\WINDOWS\system32\NavLogon.dll

R0 Achernar;Achernar - SCSI Command Filters;C:\WINDOWS\system32\Drivers\Achernar.sys
R2 msnsupport;msnsupport;C:\WINDOWS\system32\drivers\security\services.exe
R3 Aldebaran;Aldebaran - SCSI Command Filters;C:\WINDOWS\system32\Drivers\Aldebaran.sys
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys
S2 nvcap;nVidia WDM Video Capture (universal);C:\WINDOWS\system32\DRIVERS\nvcap.sys
S2 NVXBAR;nVidia WDM A/V Crossbar;C:\WINDOWS\system32\DRIVERS\NVxbar.sys
S3 S3chipid;S3chipid;\??\C:\DOCUME~1\Owner\LOCALS~1\Temp\{2B43252C-A1E3-4C47-927C-9F2C276D3515}\S3chipid.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
\Shell\AutoRun\command - D:\Info.exe folder.htt 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\LaunchU3.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{722eb08e-c997-11db-875c-00038a000015}]
\Shell\AutoRun\command - G:\LaunchU3.exe -a

.
**************************************************************************

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-22 22:43:52
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

**************************************************************************
.
Completion time: 2007-11-22 22:45:09
C:\ComboFix2.txt … 2007-11-22 08:00
.
— E O F —

kawgirl96

Post #17November 23, 2007, 5:20 PM UTC

HiJackThis Log

Logfile of HijackThis v1.99.1
Scan saved at 11:54:07 PM, on 11/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\cba\pds.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\drivers\security\services.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\cba\xfr.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal…llMgr_v01_4.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1191287272531
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Intel File Transfer - Intel® Corporation - C:\WINDOWS\system32\cba\xfr.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINDOWS\system32\cba\pds.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: msnsupport - Unknown owner - C:\WINDOWS\system32\drivers\security\services.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

kawgirl96

Post #18November 23, 2007, 5:21 PM UTC

Virus Tools Results

http://www.virustotal.com/resultado.html?e…60dfbdd3c9866a9

Let me know what you find ….

ndmmxiaomayi

Post #19November 24, 2007, 4:53 AM UTC

Hi kawgirl96,

Step 1

Please download Suspicious File Packer from Safer Networking and save it to your desktop.

Locate sfp.zip.
Right click on sfp.zip and select Extract All….
Click Next on seeing the Welcome to the Compressed (zipped) Folders Extraction Wizard.
Click on the Browse button. Click on Desktop. Then click OK.
Check (tick) the Show extracted files box.
Double click on sfp.exe to run it.
Copy and paste in the following file into Suspicious File Packer.
- C:\WINDOWS\system32\drivers\security\services.exe
Click Continue.
It will start packing. Once done, visit this website: http://www.thespykiller.co.uk/index.php?action=post;board=1.0
- In the Name field, type in your nickname.
- In the Email field, type in your email.
- In the Subject field, type in File for Analysis.
- In the Visual Verification field, type in what you see in the picture.
- In the Message box, copy and paste this in:
```
Files for analysis.

Link to log: http://forums.whatthetech.com/Files_Disappearing_t85218.html
```
- In the Attach field, browse to your desktop. There's a file named requested-files[date].cab. Select this file and click Open.
Click on Post to post the message.

Step 2

Please open HijackThis and select Do a system scan only.

Put a check (tick) next to these lines:

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

Click Fix checked. Close HijackThis.

Step 3

Please download Deckard's System Scanner from Tech Support Forum and save it to your desktop. Note: You must be logged onto an account with administrator privileges.
Save all your work and close all opened programs.
Double click on dss.exe to run it. Follow the prompts.
When the scan is complete, two log files will be produced. The first one, main.txt, will be maximized, the second one, extra.txt, will be minimized.
Please post the contents of the 2 log files in your next reply.

In your next reply, please post:

Deckard System Scanner logs (main.txt and extra.txt)
A new HijackThis log

Note: You will need several replies to prevent the logs from being cut off.

kawgirl96

Post #20November 24, 2007, 4:58 AM UTC

Is it safe to put the PC on the internet to check the "services" file ?

ndmmxiaomayi

Post #21November 24, 2007, 5:05 AM UTC

Yes. After that, please disconnect from the Net to do the scans.

kawgirl96

Post #22November 27, 2007, 3:05 AM UTC

Here you go ……….

Main.txt

Deckard's System Scanner v20071014.68
Run by [removed] on 2007-11-26 18:56:04
Computer is in Normal Mode.
——————————————————————————–

– System Restore ————————————————————–

Successfully created a Deckard's System Scanner Restore Point.

– Last 5 Restore Point(s) –
6: 2007-11-27 02:56:11 UTC - RP46 - Deckard's System Scanner Restore Point
5: 2007-11-26 08:58:00 UTC - RP45 - System Checkpoint
4: 2007-11-25 07:58:00 UTC - RP44 - System Checkpoint
3: 2007-11-24 06:58:00 UTC - RP43 - System Checkpoint
2: 2007-11-23 06:40:55 UTC - RP42 - ComboFix created restore point

– First Restore Point –
1: 2007-11-22 15:50:14 UTC - RP41 - System Checkpoint

Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 448 MiB (512 MiB recommended).

– HijackThis (run as Owner.exe) ———————————————–

Logfile of HijackThis v1.99.1
Scan saved at 6:57:22 PM, on 11/26/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\cba\pds.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\drivers\security\services.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\cba\xfr.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Owner\Desktop\dss.exe
C:\PROGRA~1\HIJACK~1\Owner.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal…llMgr_v01_4.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1191287272531
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Intel File Transfer - Intel® Corporation - C:\WINDOWS\system32\cba\xfr.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINDOWS\system32\cba\pds.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: msnsupport - Unknown owner - C:\WINDOWS\system32\drivers\security\services.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

– HijackThis Fixed Entries (C:\PROGRA~1\HIJACK~1\backups\) ——————–

backup-20071126-185307-130 O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
backup-20071126-185307-703 O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

– File Associations ———————————————————–

All associations okay.

– Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ———————

R0 Achernar (Achernar - SCSI Command Filters) - c:\windows\system32\drivers\achernar.sys

ndmmxiaomayi

Post #23November 28, 2007, 6:24 AM UTC

Still not showing much.

Please download WinPFind3u from Bleeping Computer by OldTimer and save it to your desktop.
Double click on winpfind3u.exe to run it.
Click on Extract. Once done, you will be prompted. Click OK and click Close.
Double click on the WinPFind3u folder. Double click on WinPFind3U.exe to run it.
Under Driver Services section, select Non-Microsoft. Leave the rest of the sections options as default.
Click on the Run Scan button at the top left hand corner.
WinPFind will start running. Once done, Notepad will open. Please post the contents of this Notepad file in your next reply.

kawgirl96

Post #24November 30, 2007, 9:44 PM UTC

Here are the results

WinPFind3 logfile created on: 11/30/2007 1:15:04 PM
WinPFind3U by OldTimer - Version 1.0.44 Folder = C:\Documents and Settings\Owner\Desktop\WinPFind3u\WinPFind3u\
Microsoft Windows XP Service Pack 2 (Version = 5.1.2600)
Internet Explorer (Version = 6.0.2900.2180)

447.48 Mb Total Physical Memory | 17.98 Mb Available Physical Memory | 4.02% Memory free
1.03 Gb Paging File | 0.62 Gb Available in Paging File | 59.51% Paging File free
Paging file location(s): c:\pagefile.sys 672 1344;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 143.89 Gb Total Space | 103.16 Gb Free Space | 71.70% Space Free
Drive D: | 5.14 Gb Total Space | 0.97 Gb Free Space | 18.97% Space Free
E: Drive not present or media not loaded
F: Drive not present or media not loaded

Computer Name: YOUR-W04GTXLD67
Current User Name: Owner
Logged in as Administrator.
Current Boot Mode: Normal

[Processes - Non-Microsoft Only]
acsd.exe -> %CommonProgramFiles%\AOL\ACS\acsd.exe -> America Online, Inc. [Ver = 1,0,25,3 | Size = 1434848 bytes | Modified Date = 4/21/2004 11:16:02 AM | Attr = ]
alcxmntr.exe -> %SystemRoot%\ALCXMNTR.EXE -> Realtek Semiconductor Corp. [Ver = 1.5 | Size = 57344 bytes | Modified Date = 9/7/2004 1:47:52 PM | Attr = ]
cdac11ba.exe -> %System32%\drivers\CDAC11BA.EXE -> Macrovision [Ver = 4.16.050 | Size = 52736 bytes | Modified Date = 5/22/2007 1:18:54 PM | Attr = ]
gearsec.exe -> %System32%\gearsec.exe -> GEAR Software [Ver = 1, 0, 0, 6 | Size = 53248 bytes | Modified Date = 11/3/2003 11:47:08 AM | Attr = ]
hijackthis.exe -> %ProgramFiles%\Hijackthis\HijackThis.exe -> Soeperman Enterprises Ltd. [Ver = 1.99.0001 | Size = 218112 bytes | Modified Date = 2/16/2005 11:06:16 AM | Attr = ]
hphmon05.exe -> %System32%\hphmon05.exe -> Hewlett-Packard [Ver = 5,0,84 | Size = 483328 bytes | Modified Date = 5/23/2003 1:55:38 AM | Attr = ]
hpqcmon.exe -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqCmon.exe -> [Ver = 2.0.0.133 | Size = 90112 bytes | Modified Date = 10/7/2002 6:23:20 AM | Attr = ]
hpqste08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqste08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 204800 bytes | Modified Date = 5/11/2005 9:40:38 PM | Attr = ]
hpqtra08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 5/11/2005 10:23:26 PM | Attr = ]
hprblog.exe -> %ProgramFiles%\HP\Digital Imaging\Product Assistant\bin\hprblog.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 77824 bytes | Modified Date = 5/11/2005 8:16:22 PM | Attr = ]
hpsysdrv.exe -> %SystemRoot%\system\hpsysdrv.exe -> Hewlett-Packard Company [Ver = 1, 7, 0, 0 | Size = 52736 bytes | Modified Date = 5/7/1998 3:04:38 PM | Attr = ]
kbd.exe -> %SystemDrive%\hp\KBD\kbd.exe -> Hewlett-Packard Company [Ver = 1.0.2.0 | Size = 61440 bytes | Modified Date = 2/11/2003 7:02:48 PM | Attr = ]
kodakccs.exe -> %System32%\drivers\KodakCCS.exe -> Eastman Kodak Company [Ver = 1.1.5100.4 | Size = 322104 bytes | Modified Date = 5/24/2004 11:35:52 AM | Attr = ]
ltmsg.exe -> %SystemRoot%\ltmsg.exe -> Agere Systems [Ver = 3, 0, 0, 4 | Size = 40960 bytes | Modified Date = 7/14/2003 4:52:44 PM | Attr = ]
mmtask.exe -> %ProgramFiles%\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe -> Musicmatch Inc. [Ver = 9.0.0.1 | Size = 53248 bytes | Modified Date = 1/17/2006 12:03:06 PM | Attr = ]
msgsys.exe -> %System32%\MSGSYS.EXE -> Intel® Corporation [Ver = 6.12.0.103 E | Size = 28729 bytes | Modified Date = 12/5/2002 10:41:34 AM | Attr = ]
pds.exe -> %System32%\CBA\PDS.EXE -> Intel® Corporation [Ver = 6.12.0.103 E | Size = 32819 bytes | Modified Date = 12/5/2002 10:42:20 AM | Attr = ]
popupstopperprofessional.exe -> %ProgramFiles%\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe -> Panicware, Inc. [Ver = 1, 80, 0, 1000 | Size = 516096 bytes | Modified Date = 8/19/2007 11:41:52 AM | Attr = ]
qttask.exe -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 6.5 | Size = 98304 bytes | Modified Date = 3/31/2007 7:57:48 PM | Attr = ]
services.exe -> %System32%\drivers\security\services.exe -> [Ver = | Size = 53760 bytes | Modified Date = 2/28/2004 8:47:26 AM | Attr = ]
vttimer.exe -> %System32%\VTTimer.exe -> S3 Graphics, Inc. [Ver = 2.00.01-0307 | Size = 53248 bytes | Modified Date = 3/8/2005 4:33:28 AM | Attr = ]
wanmpsvc.exe -> %SystemRoot%\wanmpsvc.exe -> America Online, Inc. [Ver = 7, 0, 0, 2 | Size = 65536 bytes | Modified Date = 1/10/2003 5:13:04 PM | Attr = ]
winpfind3u.exe -> %UserDesktop%\WinPFind3u\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.44.0 | Size = 371200 bytes | Modified Date = 11/21/2007 9:19:46 AM | Attr = ]
xfr.exe -> %System32%\CBA\XFR.EXE -> Intel® Corporation [Ver = 6.12.0.103 E | Size = 36915 bytes | Modified Date = 12/5/2002 10:42:40 AM | Attr = ]

[Win32 Services - Non-Microsoft Only]
(AOL ACS) AOL Connectivity Service [Win32_Own | Auto | Running] -> %CommonProgramFiles%\AOL\ACS\acsd.exe -> America Online, Inc. [Ver = 1,0,25,3 | Size = 1434848 bytes | Modified Date = 4/21/2004 11:16:02 AM | Attr = ]
(C-DillaCdaC11BA) C-DillaCdaC11BA [Win32_Own | Auto | Running] -> %System32%\drivers\CDAC11BA.EXE -> Macrovision [Ver = 4.16.050 | Size = 52736 bytes | Modified Date = 5/22/2007 1:18:54 PM | Attr = ]
(dmadmin) Logical Disk Manager Administrative Service [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 224768 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
(GEARSecurity) Gear Security Service [Win32_Own | Auto | Running] -> %System32%\gearsec.exe -> GEAR Software [Ver = 1, 0, 0, 6 | Size = 53248 bytes | Modified Date = 11/3/2003 11:47:08 AM | Attr = ]
(Intel File Transfer) Intel File Transfer [Win32_Own | Auto | Running] -> %System32%\CBA\XFR.EXE -> Intel® Corporation [Ver = 6.12.0.103 E | Size = 36915 bytes | Modified Date = 12/5/2002 10:42:40 AM | Attr = ]
(Intel PDS) Intel PDS [Win32_Own | Auto | Running] -> %System32%\CBA\PDS.EXE -> Intel® Corporation [Ver = 6.12.0.103 E | Size = 32819 bytes | Modified Date = 12/5/2002 10:42:20 AM | Attr = ]
(KodakCCS) Kodak Camera Connection Software [Win32_Own | Auto | Running] -> %System32%\drivers\KodakCCS.exe -> Eastman Kodak Company [Ver = 1.1.5100.4 | Size = 322104 bytes | Modified Date = 5/24/2004 11:35:52 AM | Attr = ]
(msnsupport) msnsupport [Win32_Own | Auto | Running] -> %System32%\drivers\security\services.exe -> [Ver = | Size = 53760 bytes | Modified Date = 2/28/2004 8:47:26 AM | Attr = ]
(NVSvc) NVIDIA Driver Helper Service [Win32_Own | Auto | Stopped] -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.4528 | Size = 77824 bytes | Modified Date = 8/19/2003 1:56:00 AM | Attr = ]
(Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Stopped] -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 9/29/2004 11:14:36 AM | Attr = ]
(WANMiniportService) WAN Miniport (ATW) Service [Win32_Own | Auto | Running] -> %SystemRoot%\wanmpsvc.exe -> America Online, Inc. [Ver = 7, 0, 0, 2 | Size = 65536 bytes | Modified Date = 1/10/2003 5:13:04 PM | Attr = ]

[Driver Services - Non-Microsoft Only]
(Abiosdsk) Abiosdsk [Kernel | Disabled | Stopped] -> -> File not found
(abp480n5) abp480n5 [Kernel | Disabled | Stopped] -> -> File not found
(Achernar) Achernar - SCSI Command Filters [Kernel | Boot | Running] -> %System32%\drivers\Achernar.sys -> NewSoft Technology Corporation [Ver = 1.5.9.23 | Size = 16855 bytes | Modified Date = 9/23/2005 12:50:28 PM | Attr = ]
(adpu160m) adpu160m [Kernel | Disabled | Stopped] -> -> File not found
(AFS2K) AFS2K [Kernel | System | Running] -> %System32%\drivers\AFS2K.SYS -> Oak Technology Inc. [Ver = 3.1.21.1103 | Size = 35840 bytes | Modified Date = 10/7/2004 5:16:04 PM | Attr = ]
(Aha154x) Aha154x [Kernel | Disabled | Stopped] -> -> File not found
(aic78u2) aic78u2 [Kernel | Disabled | Stopped] -> -> File not found
(aic78xx) aic78xx [Kernel | Disabled | Stopped] -> -> File not found
(ALCXWDM) Service for Realtek AC97 Audio (WDM) [Kernel | On_Demand | Running] -> %System32%\drivers\ALCXWDM.SYS -> Realtek Semiconductor Corp. [Ver = 5.10.5730 built by: WinDDK | Size = 2279424 bytes | Modified Date = 10/1/2004 10:24:02 AM | Attr = ]
(Aldebaran) Aldebaran - SCSI Command Filters [Kernel | On_Demand | Running] -> %System32%\drivers\Aldebaran.sys -> NewSoft Technology Corporation [Ver = 1.5.9.23 | Size = 21808 bytes | Modified Date = 9/23/2005 12:50:44 PM | Attr = ]
(AliIde) AliIde [Kernel | Disabled | Stopped] -> -> File not found
(amsint) amsint [Kernel | Disabled | Stopped] -> -> File not found
(asc) asc [Kernel | Disabled | Stopped] -> -> File not found
(asc3350p) asc3350p [Kernel | Disabled | Stopped] -> -> File not found
(asc3550) asc3550 [Kernel | Disabled | Stopped] -> -> File not found
(Atdisk) Atdisk [Kernel | Disabled | Stopped] -> -> File not found
(ATWPKT2) ATWPKT2 [Kernel | On_Demand | Stopped] -> %CommonProgramFiles%\AOL\ACS\ATWPkt2.sys -> America Online [Ver = 9.0.0.5 | Size = 17937 bytes | Modified Date = 4/20/2004 1:49:06 PM | Attr = ]
(catchme) catchme [Kernel | On_Demand | Running] -> %SystemDrive%\DOCUME~1\Owner\LOCALS~1\Temp\catchme.sys -> File not found
(cd20xrnt) cd20xrnt [Kernel | Disabled | Stopped] -> -> File not found
(CdaC15BA) CdaC15BA [Kernel | Auto | Running] -> %System32%\drivers\CdaC15BA.SYS -> [Ver = | Size = 11376 bytes | Modified Date = 5/22/2007 1:18:50 PM | Attr = ]
(Changer) Changer [Kernel | System | Stopped] -> -> File not found
(CmdIde) CmdIde [Kernel | Disabled | Stopped] -> -> File not found
(Cpqarray) Cpqarray [Kernel | Disabled | Stopped] -> -> File not found
(dac960nt) dac960nt [Kernel | Disabled | Stopped] -> -> File not found
(DcCam) Kodak Camera Proxy [Kernel | System | Running] -> %System32%\drivers\DcCam.sys -> Eastman Kodak Company [Ver = 1.5.0502.0 | Size = 36918 bytes | Modified Date = 5/20/2004 7:21:10 AM | Attr = ]
(DcFpoint) DcFpoint [Kernel | On_Demand | Stopped] -> %System32%\drivers\DcFpoint.sys -> Eastman Kodak Company [Ver = 1.5.0502.0 | Size = 61564 bytes | Modified Date = 5/20/2004 7:41:54 AM | Attr = ]
(DCFS2K) Kodak DCFS2K Driver [Kernel | Auto | Running] -> %System32%\drivers\DCFS2k.sys -> Eastman Kodak Company [Ver = 1.0.4100.7 | Size = 38705 bytes | Modified Date = 6/2/2004 12:19:00 PM | Attr = ]
(DcLps) Legacy Polling Service [Kernel | On_Demand | Stopped] -> %System32%\drivers\DcLps.sys -> Eastman Kodak Company [Ver = 1.5.0502.0 | Size = 8022 bytes | Modified Date = 5/20/2004 7:39:42 AM | Attr = ]
(DcPTP) DcPTP [Kernel | On_Demand | Stopped] -> %System32%\drivers\DcPtp.sys -> Eastman Kodak Company [Ver = 1.5.0502.0 | Size = 68950 bytes | Modified Date = 5/20/2004 7:45:20 AM | Attr = ]
(dmboot) dmboot [Kernel | Disabled | Stopped] -> %System32%\drivers\dmboot.sys -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 799744 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
(dmio) dmio [Kernel | Disabled | Stopped] -> %System32%\drivers\dmio.sys -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 153344 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
(dmload) dmload [Kernel | Disabled | Stopped] -> %System32%\drivers\dmload.sys -> Microsoft Corp., Veritas Software. [Ver = 2600.0.503.0 | Size = 5888 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
(dpti2o) dpti2o [Kernel | Disabled | Stopped] -> -> File not found
(Exportit) Exportit [Kernel | System | Stopped] -> %System32%\drivers\ExportIt.sys -> Eastman Kodak Company [Ver = 1.0.8900.7 | Size = 151985 bytes | Modified Date = 6/2/2004 12:17:56 PM | Attr = ]
(fasttx2k) fasttx2k [Kernel | Boot | Running] -> %System32%\drivers\Fasttx2k.sys -> Promise Technology, Inc. [Ver = 1.00.0030.7 | Size = 140800 bytes | Modified Date = 6/19/2003 12:59:00 AM | Attr = ]
(FET5X86V) VIA Rhine-Family Fast-Ethernet Adapter Driver Service [Kernel | On_Demand | Running] -> %System32%\drivers\fetnd5bv.sys -> VIA Technologies, Inc. [Ver = 3.66.0.451 | Size = 45568 bytes | Modified Date = 12/20/2006 7:00:38 AM | Attr = ]
(FETND5BV) VIA Rhine-Family Fast Ethernet Adapter Driver Service [Kernel | On_Demand | Stopped] -> %System32%\drivers\fetnd5bv.sys -> VIA Technologies, Inc. [Ver = 3.66.0.451 | Size = 45568 bytes | Modified Date = 12/20/2006 7:00:38 AM | Attr = ]
(FETNDISB) VIA Rhine Family Fast Ethernet Adapter Driver Service [Kernel | On_Demand | Stopped] -> %System32%\drivers\fetnd5b.sys -> VIA Technologies, Inc. [Ver = 3.15.00.0351 | Size = 41984 bytes | Modified Date = 1/15/2003 10:05:54 PM | Attr = ]
(GEARAspiWDM) GEAR CDRom Filter [Kernel | On_Demand | Running] -> %System32%\drivers\GEARAspiWDM.sys -> GEAR Software [Ver = 1.028 | Size = 9760 bytes | Modified Date = 11/3/2003 11:47:08 AM | Attr = ]
(hpn) hpn [Kernel | Disabled | Stopped] -> -> File not found
(HPZid412) IEEE-1284.4 Driver HPZid412 [Kernel | On_Demand | Stopped] -> %System32%\drivers\HPZid412.sys -> HP [Ver = 9, 0, 0, 0 | Size = 51120 bytes | Modified Date = 3/7/2005 8:43:26 PM | Attr = ]
(HPZipr12) Print Class Driver for IEEE-1284.4 HPZipr12 [Kernel | On_Demand | Stopped] -> %System32%\drivers\HPZipr12.sys -> HP [Ver = 9, 0, 0, 0 | Size = 16496 bytes | Modified Date = 3/7/2005 8:43:26 PM | Attr = ]
(HPZius12) USB to IEEE-1284.4 Translation Driver HPZius12 [Kernel | On_Demand | Stopped] -> %System32%\drivers\HPZius12.sys -> HP [Ver = 9, 0, 0, 0 | Size = 21744 bytes | Modified Date = 3/7/2005 8:43:28 PM | Attr = ]
(i2omgmt) i2omgmt [Kernel | System | Stopped] -> -> File not found
(i2omp) i2omp [Kernel | Disabled | Stopped] -> -> File not found
(ialm) ialm [Kernel | On_Demand | Stopped] -> %System32%\drivers\ialmnt5.sys -> Intel Corporation [Ver = 6.13.10.3510 | Size = 90907 bytes | Modified Date = 4/15/2003 4:39:46 PM | Attr = ]
(ini910u) ini910u [Kernel | Disabled | Stopped] -> -> File not found
(lbrtfdc) lbrtfdc [Kernel | System | Stopped] -> -> File not found
(ltmodem5) Agere Modem Driver [Kernel | On_Demand | Running] -> %System32%\drivers\ltmdmnt.sys -> Agere Systems [Ver = 8.31 | Size = 652689 bytes | Modified Date = 12/12/2003 7:03:10 PM | Attr = ]
(Modem) Modem [Kernel | On_Demand | Stopped] -> -> File not found
(mraid35x) mraid35x [Kernel | Disabled | Stopped] -> -> File not found
(mrtRate) mrtRate [Kernel | Auto | Stopped] -> -> File not found
(nv) nv [Kernel | On_Demand | Stopped] -> %System32%\drivers\nv4_mini.sys -> NVIDIA Corporation [Ver = 6.14.10.5673 | Size = 1897408 bytes | Modified Date = 8/3/2004 10:29:56 PM | Attr = ]
(nvcap) nVidia WDM Video Capture (universal) [Kernel | Auto | Stopped] -> %System32%\drivers\nvcap.sys -> [Ver = | Size = 126348 bytes | Modified Date = 7/30/2003 1:15:00 AM | Attr = ]
(NVXBAR) nVidia WDM A/V Crossbar [Kernel | Auto | Stopped] -> %System32%\drivers\nvxbar.sys -> NVIDIA Corporation [Ver = 2.07 | Size = 13006 bytes | Modified Date = 7/30/2003 1:15:00 AM | Attr = ]
(nv_agp) NVIDIA nForce AGP Bus Filter [Kernel | Boot | Running] -> %System32%\drivers\nv_agp.SYS -> NVIDIA Corporation [Ver = 4.12.01.0366 | Size = 21120 bytes | Modified Date = 9/2/2003 10:51:00 PM | Attr = ]
(PCIDump) PCIDump [Kernel | System | Stopped] -> -> File not found
(PDCOMP) PDCOMP [Kernel | On_Demand | Stopped] -> -> File not found
(PDFRAME) PDFRAME [Kernel | On_Demand | Stopped] -> -> File not found
(PDRELI) PDRELI [Kernel | On_Demand | Stopped] -> -> File not found
(PDRFRAME) PDRFRAME [Kernel | On_Demand | Stopped] -> -> File not found
(perc2) perc2 [Kernel | Disabled | Stopped] -> -> File not found
(perc2hib) perc2hib [Kernel | Disabled | Stopped] -> -> File not found
(pfc) Padus ASPI Shell [Kernel | On_Demand | Running] -> %System32%\drivers\pfc.sys -> Padus, Inc. [Ver = 2, 5, 0, 204 | Size = 10368 bytes | Modified Date = 9/3/2003 10:01:22 AM | Attr = ]
(Ps2) Ps2 [Kernel | On_Demand | Running] -> %System32%\drivers\PS2.sys -> Hewlett-Packard Company [Ver = 1.0.2.0 | Size = 23808 bytes | Modified Date = 7/29/2002 9:43:50 PM | Attr = ]
(Ptilink) Direct Parallel Link Driver [Kernel | On_Demand | Running] -> %System32%\drivers\ptilink.sys -> Parallel Technologies, Inc. [Ver = 1.10 (XPClient.010817-1148) | Size = 17792 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
(PxHelp20) PxHelp20 [Kernel | Boot | Running] -> %System32%\drivers\pxhelp20.sys -> Sonic Solutions [Ver = 2.03.18a | Size = 20576 bytes | Modified Date = 7/25/2007 4:27:04 AM | Attr = ]
(ql1080) ql1080 [Kernel | Disabled | Stopped] -> -> File not found
(Ql10wnt) Ql10wnt [Kernel | Disabled | Stopped] -> -> File not found
(ql12160) ql12160 [Kernel | Disabled | Stopped] -> -> File not found
(ql1240) ql1240 [Kernel | Disabled | Stopped] -> -> File not found
(ql1280) ql1280 [Kernel | Disabled | Stopped] -> -> File not found
(rtl8139) Realtek RTL8139/810x Family Fast Ethernet NIC NT Driver [Kernel | On_Demand | Stopped] -> %System32%\drivers\R8139n51.sys -> Realtek Semiconductor Corporation [Ver = 5.505.1004.2002 built by: WinDDK | Size = 46976 bytes | Modified Date = 10/4/2002 4:04:10 PM | Attr = ]
(S3chipid) S3chipid [Kernel | On_Demand | Stopped] -> %SystemDrive%\DOCUME~1\Owner\LOCALS~1\Temp\{2B43252C-A1E3-4C47-927C-9F2C276D3515}\S3chipid.sys -> File not found
(S3Psddr) S3Psddr [Kernel | On_Demand | Stopped] -> %System32%\drivers\s3gnbm.sys -> S3 Graphics, Inc. [Ver = 6.14.10.0012-13.94.12 | Size = 166912 bytes | Modified Date = 8/3/2004 10:29:52 PM | Attr = ]
(Secdrv) Secdrv [Kernel | On_Demand | Stopped] -> %System32%\drivers\secdrv.sys -> [Ver = | Size = 27440 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
(Sfloppy) Sfloppy [Kernel | System | Stopped] -> -> File not found
(Simbad) Simbad [Kernel | Disabled | Stopped] -> -> File not found
(SiS315) SiS315 [Kernel | On_Demand | Stopped] -> %System32%\drivers\sisgrp.sys -> Silicon Integrated Systems Corporation [Ver = 6.14.10.2170 | Size = 394752 bytes | Modified Date = 5/6/2003 2:34:56 PM | Attr = ]
(SISAGP) SiS AGP Filter [Kernel | Boot | Running] -> %System32%\drivers\SISAGPX.SYS -> Silicon Integrated Systems Corporation [Ver = 7.2.0.1160 built by: WinDDK | Size = 36608 bytes | Modified Date = 2/20/2003 3:18:36 PM | Attr = ]
(SiSkp) SiSkp [Kernel | System | Running] -> %System32%\drivers\srvkp.sys -> Silicon Integrated Systems Corporation [Ver = 6.14.10.2170 | Size = 10624 bytes | Modified Date = 4/11/2003 7:51:30 AM | Attr = ]
(Sparrow) Sparrow [Kernel | Disabled | Stopped] -> -> File not found
(SSKBFD) Webroot Spy Sweeper Keylogger Shield Keyboard Filter [Kernel | On_Demand | Running] -> %System32%\drivers\sskbfd.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.3.1.2592 | Size = 21056 bytes | Modified Date = 1/25/2007 8:57:20 PM | Attr = ]
(symc810) symc810 [Kernel | Disabled | Stopped] -> -> File not found
(symc8xx) symc8xx [Kernel | Disabled | Stopped] -> -> File not found
(SYMIDSCO) SYMIDSCO [Kernel | On_Demand | Stopped] -> %System32%\Drivers\SYMIDSCO.SYS -> File not found
(sym_hi) sym_hi [Kernel | Disabled | Stopped] -> -> File not found
(sym_u3) sym_u3 [Kernel | Disabled | Stopped] -> -> File not found
(TDPIPE) TDPIPE [Kernel | On_Demand | Stopped] -> -> File not found
(TDTCP) TDTCP [Kernel | On_Demand | Stopped] -> -> File not found
(TosIde) TosIde [Kernel | Disabled | Stopped] -> -> File not found
(ultra) ultra [Kernel | Disabled | Stopped] -> -> File not found
(viaagp1) VIA AGP Filter [Kernel | Boot | Running] -> %System32%\drivers\VIAAGP1.SYS -> VIA Technologies, Inc. [Ver = 5.1.0.3442 built by: VIA | Size = 27904 bytes | Modified Date = 7/2/2003 10:42:00 AM | Attr = ]
(viagfx) viagfx [Kernel | On_Demand | Running] -> %System32%\drivers\vtmini.sys -> Copyright © VIA/S3 Graphics Co, Ltd. [Ver = 6.14.10.0212-16.94.42.16 | Size = 172544 bytes | Modified Date = 3/8/2005 11:50:16 AM | Attr = ]
(wanatw) WAN Miniport (ATW) [Kernel | On_Demand | Running] -> %System32%\drivers\wanatw4.sys -> America Online, Inc. [Ver = 8.3.0.0 | Size = 33588 bytes | Modified Date = 1/10/2003 5:13:04 PM | Attr = ]
(WDICA) WDICA [Kernel | On_Demand | Stopped] -> -> File not found
({6080A529-897E-4629-A488-ABA0C29B635E}) Intel® Graphics Platform (SoftBIOS) Driver [Kernel | On_Demand | Stopped] -> %System32%\drivers\ialmsbw.sys -> Intel Corporation [Ver = 6.13.10.3510 | Size = 113504 bytes | Modified Date = 4/15/2003 4:40:54 PM | Attr = ]
({D31A0762-0CEB-444e-ACFF-B049A1F6FE91}) Intel® Graphics Chipset (KCH) Driver [Kernel | On_Demand | Stopped] -> %System32%\drivers\ialmkchw.sys -> Intel Corporation [Ver = 6.13.10.3510 | Size = 78752 bytes | Modified Date = 4/15/2003 4:40:46 PM | Attr = ]

[Registry - Non-Microsoft Only]
< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
AlcxMonitor -> %SystemRoot%\ALCXMNTR.EXE -> Realtek Semiconductor Corp. [Ver = 1.5 | Size = 57344 bytes | Modified Date = 9/7/2004 1:47:52 PM | Attr = ]
CamMonitor -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqCmon.exe -> [Ver = 2.0.0.133 | Size = 90112 bytes | Modified Date = 10/7/2002 6:23:20 AM | Attr = ]
HotKeysCmds -> %System32%\hkcmd.exe -> Intel Corporation [Ver = 3,0,0,2104 | Size = 114688 bytes | Modified Date = 4/7/2003 6:07:38 AM | Attr = ]
HPHmon05 -> %System32%\hphmon05.exe -> Hewlett-Packard [Ver = 5,0,84 | Size = 483328 bytes | Modified Date = 5/23/2003 1:55:38 AM | Attr = ]
HPHUPD05 -> %ProgramFiles%\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe -> File not found
hpsysdrv -> %SystemRoot%\system\hpsysdrv.exe -> Hewlett-Packard Company [Ver = 1, 7, 0, 0 | Size = 52736 bytes | Modified Date = 5/7/1998 3:04:38 PM | Attr = ]
KBD -> %SystemDrive%\hp\KBD\kbd.exe -> Hewlett-Packard Company [Ver = 1.0.2.0 | Size = 61440 bytes | Modified Date = 2/11/2003 7:02:48 PM | Attr = ]
LTMSG -> %SystemRoot%\ltmsg.exe -> Agere Systems [Ver = 3, 0, 0, 4 | Size = 40960 bytes | Modified Date = 7/14/2003 4:52:44 PM | Attr = ]
mmtask -> %ProgramFiles%\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe -> Musicmatch Inc. [Ver = 9.0.0.1 | Size = 53248 bytes | Modified Date = 1/17/2006 12:03:06 PM | Attr = ]
NeroCheck -> %System32%\NeroCheck.exe -> Ahead Software Gmbh [Ver = 1, 0, 0, 2 | Size = 155648 bytes | Modified Date = 7/9/2001 10:50:42 AM | Attr = ]
PS2 -> %System32%\ps2.EXE -> Hewlett-Packard Company [Ver = 1.0.2.1 | Size = 81920 bytes | Modified Date = 7/31/2002 7:28:38 PM | Attr = ]
QuickTime Task -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 6.5 | Size = 98304 bytes | Modified Date = 3/31/2007 7:57:48 PM | Attr = ]
Recguard -> %SystemRoot%\SMINST\Recguard.exe -> [Ver = 1, 0, 0, 1 | Size = 212992 bytes | Modified Date = 9/13/2002 8:42:26 PM | Attr = ]
TkBellExe -> %CommonProgramFiles%\Real\Update_OB\realsched.exe -> RealNetworks, Inc. [Ver = 0.1.0.1622 | Size = 151597 bytes | Modified Date = 10/11/2003 4:07:36 AM | Attr = ]
UpdateManager -> %CommonProgramFiles%\Sonic\Update Manager\sgtray.exe -> Sonic Solutions [Ver = 1.01.32a | Size = 110592 bytes | Modified Date = 8/19/2003 7:01:00 AM | Attr = ]
VTTimer -> %System32%\VTTimer.exe -> S3 Graphics, Inc. [Ver = 2.00.01-0307 | Size = 53248 bytes | Modified Date = 3/8/2005 4:33:28 AM | Attr = ]
< OptionalComponents [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ ->
IMAIL -> Installed = 1 ->
MAPI -> Installed = 1 ->
MSFS -> Installed = 1 ->
< Run [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
NVIEW -> %System32%\nview.dll [rundll32.exe nview.dll,nViewLoadHook] -> NVIDIA Corporation [Ver = 6.14.10.4528 | Size = 852038 bytes | Modified Date = 8/19/2003 1:56:00 AM | Attr = ]
PopUpStopperProfessional -> %ProgramFiles%\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe -> Panicware, Inc. [Ver = 1, 80, 0, 1000 | Size = 516096 bytes | Modified Date = 8/19/2007 11:41:52 AM | Attr = ]
RecordNow! -> -> File not found
< Common Startup > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup ->
%AllUsersStartup%\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 5/11/2005 10:23:26 PM | Attr = ]
%AllUsersStartup%\Quicken Scheduled Updates.lnk -> %ProgramFiles%\Quicken\bagent.exe -> Intuit Inc. [Ver = 008.000.000.000 | Size = 57344 bytes | Modified Date = 7/30/2003 3:49:48 AM | Attr = ]
< ICQ Agent [HKCU] > -> HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ ->
HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ -> ->
< SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders ->
< Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
< Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
< Winlogon\Notify settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ ->
igfxcui -> %System32%\igfxsrvc.dll -> Intel Corporation [Ver = 3,0,0,2104 | Size = 315392 bytes | Modified Date = 4/7/2003 6:06:48 AM | Attr = ]
NavLogon -> %System32%\NavLogon.dll -> [Ver = | Size = 45056 bytes | Modified Date = 5/21/2003 12:19:00 AM | Attr = ]
< CurrentVersion Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\\NoCDBurning -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\\NoDriveAutoRun -> 67108863 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\\NoDriveTypeAutoRun -> 255 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\ -> ->
< CurrentVersion Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Associations\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> ->
< HOSTS File > (27 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts ->
127.0.0.1 localhost -> ->
< Internet Explorer Settings > -> ->
HKLM: Default_Page_URL -> http://qus10.hpwis.com/ ->
HKLM: Main\\Default_Search_URL -> http://srch-qus10.hpwis.com/ ->
HKLM: Local Page -> %SystemRoot%\system32\blank.htm ->
HKLM: Search Bar -> http://srch-qus10.hpwis.com/ ->
HKLM: Search Page -> http://srch-qus10.hpwis.com/ ->
HKLM: Start Page -> http://www.comcast.net/ ->
HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->
HKLM: SearchAssistant -> http://www.comcast.net/toolbar2.0/search/ ->
HKCU: Default_Search_URL -> http://srch-qus10.hpwis.com/ ->
HKCU: Local Page -> C:\WINDOWS\system32\blank.htm ->
HKCU: Search Bar -> http://www.comcast.net/toolbar2.0/search/ ->
HKCU: Search Page -> http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch ->
HKCU: Start Page -> http://www.comcast.net/ ->
HKCU: ProxyEnable -> 0 ->
< Trusted Sites > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
msn.com [ - ] -> ->
< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [AcroIEHlprObj Class] -> Adobe Systems Incorporated [Ver = 6.0.0.2003051500 | Size = 50376 bytes | Modified Date = 5/15/2003 6:47:54 AM | Attr = ]
{4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} [HKLM] -> %ProgramFiles%\ComcastToolbar\comcasttoolbar.dll [Comcast Toolbar] -> Comcast Cable Communications. [Ver = 5.0.0.72 | Size = 1821184 bytes | Modified Date = 11/7/2006 11:21:58 AM | Attr = ]
{53707962-6F74-2D53-2644-206D7942484F} [HKLM] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [Spybot-S&D; IE Protection] -> Safer Networking Limited [Ver = 1, 5, 0, 8 | Size = 1122128 bytes | Modified Date = 8/31/2007 4:46:14 PM | Attr = ]
< Internet Explorer Bars [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ ->
{32683183-48a0-441b-a342-7c2a440a9478} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found
< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
{4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} [HKLM] -> %ProgramFiles%\ComcastToolbar\comcasttoolbar.dll [Comcast Toolbar] -> Comcast Cable Communications. [Ver = 5.0.0.72 | Size = 1821184 bytes | Modified Date = 11/7/2006 11:21:58 AM | Attr = ]
< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->
WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found
WebBrowser\\{4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} [HKLM] -> %ProgramFiles%\ComcastToolbar\comcasttoolbar.dll [Comcast Toolbar] -> Comcast Cable Communications. [Ver = 5.0.0.72 | Size = 1821184 bytes | Modified Date = 11/7/2006 11:21:58 AM | Attr = ]
WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found
< Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %System32%\msjava.dll [MenuText: Sun Java Console] -> File not found
{92780B25-18CC-41C8-B9BE-3C9C571A8263} -> Reg Data - Value does not exist [ButtonText: Research] -> File not found
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} [HKLM] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [MenuText: Spybot - Search & Destroy Configuration] -> Safer Networking Limited [Ver = 1, 5, 0, 8 | Size = 1122128 bytes | Modified Date = 8/31/2007 4:46:14 PM | Attr = ]
< Internet Explorer Menu Extensions [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ ->
E&xport; to Microsoft Excel -> -> File not found
< User Agent Post Platform [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform ->
SV1 -> ->
< DNS Name Servers [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->
{5BE266EC-C9C2-42D6-A881-8630BC7DC57E} -> (1394 Net Adapter) ->
{BA2AB463-5919-4669-A7F4-A397D431C3AB} -> () ->
{CA68CD7C-6CDA-4667-B0D7-AE865215EBA2} -> (VIA Rhine II Fast Ethernet Adapter) ->
< Protocol Handlers [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ ->
ipp -> Reg Data - Key not found -> File not found
msdaipp -> Reg Data - Key not found -> File not found
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->
{4CCA4E80-9259-11D9-AC6E-444553544200} -> FixController Control - CodeBase = http://h30155.www3.hp.com/ediags/dd/instal…llMgr_v01_4.cab ->
{6414512B-B978-451D-A0D8-FCFDF33E833C} -> WUWebControl Class - CodeBase = http://www.update.microsoft.com/windowsupd…b?1191287272531 ->
{8AD9C840-044E-11D1-B3E9-00805F499D93} -> Java Plug-in 1.4.2 - CodeBase = http://java.sun.com/products/plugin/autodl…indows-i586.cab ->
{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} -> Java Plug-in 1.4.2 - CodeBase = http://java.sun.com/products/plugin/autodl…indows-i586.cab ->

[Files/Folders - Created Within 30 days]
Deckard -> %SystemDrive%\Deckard -> [Folder | Created Date = 11/26/2007 6:55:49 PM | Attr = ]
hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 469291008 bytes | Created Date = 1/1/1601 8:00:00 AM | Attr = HS]
qoobox -> %SystemDrive%\qoobox -> [Folder | Created Date = 11/22/2007 7:50:15 AM | Attr = ]
SDFix -> %SystemDrive%\SDFix -> [Folder | Created Date = 11/20/2007 6:25:22 PM | Attr = ]
catchme.exe -> %SystemRoot%\catchme.exe -> [Ver = | Size = 136704 bytes | Created Date = 11/22/2007 7:50:04 AM | Attr = ]
erdnt -> %SystemRoot%\erdnt -> [Folder | Created Date = 11/22/2007 7:59:49 AM | Attr = ]
ERUNT -> %SystemRoot%\ERUNT -> [Folder | Created Date = 11/20/2007 6:29:49 PM | Attr = ]
TEMP -> %SystemRoot%\TEMP -> [Folder | Created Date = 11/22/2007 10:45:13 PM | Attr = ]
swreg.exe -> %System32%\swreg.exe -> SteelWerX [Ver = 2.0.1.8 | Size = 279552 bytes | Created Date = 11/22/2007 7:50:04 AM | Attr = ]
swsc.exe -> %System32%\swsc.exe -> SteelWerX [Ver = 2.0.0.0 | Size = 370688 bytes | Created Date = 11/22/2007 7:50:04 AM | Attr = ]
swxcacls.exe -> %System32%\swxcacls.exe -> SteelWerX [Ver = 1.0.1.1 | Size = 212480 bytes | Created Date = 11/22/2007 7:50:04 AM | Attr = ]
VFind.exe -> %System32%\VFind.exe -> [Ver = | Size = 49152 bytes | Created Date = 11/22/2007 7:50:04 AM | Attr = ]

[Files/Folders - Modified Within 30 days]
Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 11/12/2007 8:29:10 PM | Attr = HS]
Deckard -> %SystemDrive%\Deckard -> [Folder | Modified Date = 11/26/2007 6:55:50 PM | Attr = ]
hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 469291008 bytes | Modified Date = 11/22/2007 7:54:34 AM | Attr = HS]
qoobox -> %SystemDrive%\qoobox -> [Folder | Modified Date = 11/22/2007 10:45:14 PM | Attr = ]
SDFix -> %SystemDrive%\SDFix -> [Folder | Modified Date = 11/20/2007 6:50:40 PM | Attr = ]
System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Modified Date = 11/22/2007 7:50:06 AM | Attr = HS]
WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 11/22/2007 10:45:14 PM | Attr = ]
bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 11/22/2007 7:54:36 AM | Attr = S]
catchme.exe -> %SystemRoot%\catchme.exe -> [Ver = | Size = 136704 bytes | Modified Date = 11/8/2007 4:59:02 PM | Attr = ]
Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 11/26/2007 6:57:18 PM | Attr = S]
erdnt -> %SystemRoot%\erdnt -> [Folder | Modified Date = 11/26/2007 6:56:12 PM | Attr = ]
ERUNT -> %SystemRoot%\ERUNT -> [Folder | Modified Date = 11/20/2007 6:30:04 PM | Attr = ]
Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 11/12/2007 8:29:10 PM | Attr = HS]
Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 11/30/2007 1:13:46 PM | Attr = ]
system32 -> %System32% -> [Folder | Modified Date = 11/22/2007 7:53:10 AM | Attr = ]
TEMP -> %SystemRoot%\TEMP -> [Folder | Modified Date = 11/26/2007 6:59:22 PM | Attr = ]
SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 11/22/2007 7:54:38 AM | Attr = H ]
CatRoot2 -> %System32%\CatRoot2 -> [Folder | Modified Date = 11/26/2007 6:57:18 PM | Attr = ]
drivers -> %System32%\drivers -> [Folder | Modified Date = 11/22/2007 10:41:42 PM | Attr = ]
perfc009.dat -> %System32%\perfc009.dat -> [Ver = | Size = 55236 bytes | Modified Date = 11/10/2007 12:07:48 PM | Attr = ]
perfh009.dat -> %System32%\perfh009.dat -> [Ver = | Size = 386338 bytes | Modified Date = 11/10/2007 12:07:48 PM | Attr = ]
PerfStringBackup.INI -> %System32%\PerfStringBackup.INI -> [Ver = | Size = 448572 bytes | Modified Date = 11/10/2007 12:07:48 PM | Attr = ]
Restore -> %System32%\Restore -> [Folder | Modified Date = 11/22/2007 7:50:06 AM | Attr = ]
wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 12620 bytes | Modified Date = 11/22/2007 7:58:48 AM | Attr = ]
etc -> %System32%\drivers\etc -> [Folder | Modified Date = 11/22/2007 7:58:54 AM | Attr = ]
security -> %System32%\drivers\security -> [Folder | Modified Date = 11/30/2007 1:14:52 PM | Attr = HS]

[File String Scan - Non-Microsoft Only]
UPX! , UPX0 , -> %SystemRoot%\cpblpbc19.log -> [Ver = | Size = 71168 bytes | Modified Date = 5/26/2006 8:32:00 AM | Attr = ]
UPX! , UPX0 , -> %SystemRoot%\cpblpbc20.log -> [Ver = | Size = 71168 bytes | Modified Date = 5/5/2006 4:37:36 AM | Attr = ]
UPX! , UPX0 , -> %SystemRoot%\cpblpbc28.log -> [Ver = | Size = 62302 bytes | Modified Date = 7/16/2006 9:08:50 AM | Attr = ]
UPX! , UPX0 , -> %SystemRoot%\cpblpbc32.log -> [Ver = | Size = 37822 bytes | Modified Date = 8/3/2006 9:43:38 AM | Attr = ]
UPX! , UPX0 , -> %SystemRoot%\cpblpbc35.log -> [Ver = | Size = 56862 bytes | Modified Date = 8/13/2006 10:37:16 AM | Attr = ]
WSUD , -> %System32%\ALSNDMGR.CPL -> Realtek Semiconductor Corp. [Ver = 2.2.0.34 | Size = 16121856 bytes | Modified Date = 9/20/2004 3:20:44 PM | Attr = ]
WSUD , -> %System32%\ChilkatMail2.dll -> Chilkat Software, Inc. [Ver = 7, 4, 0, 0 | Size = 1413120 bytes | Modified Date = 7/7/2006 1:15:52 PM | Attr = ]
WSUD , -> %System32%\ChilkatUtil.dll -> Chilkat Software, Inc. [Ver = 3, 0, 0, 0 | Size = 630784 bytes | Modified Date = 7/7/2006 1:15:56 PM | Attr = ]
WSUD , -> %System32%\ChilkatXml.dll -> Chilkat Software, Inc. [Ver = 5, 1, 0, 1 | Size = 1028096 bytes | Modified Date = 7/7/2006 1:16:02 PM | Attr = ]
PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41397 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
PEC2 , -> %System32%\Dwapilib.tlb -> [Ver = | Size = 197171 bytes | Modified Date = 2/14/1997 10:24:14 PM | Attr = ]
WSUD , -> %System32%\qpqss.tmp2 -> [Ver = | Size = 2109440 bytes | Modified Date = 10/18/2007 12:24:52 PM | Attr = ]
UPX! , UPX0 , -> %System32%\swreg.exe -> SteelWerX [Ver = 2.0.1.8 | Size = 279552 bytes | Modified Date = 7/22/2007 6:39:28 PM | Attr = ]
winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 8/4/2004 4:00:00 AM | Attr = ]
Thawte Consulting , -> %System32%\XceedZip50.dll -> Xceed Software Inc [removed] [removed] www.xceedsoft.com [Ver = 6.0.6109.0 | Size = 497496 bytes | Modified Date = 3/8/2006 1:57:30 PM | Attr = ]
WSUD , UPX0 , -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 8/29/2002 11:00:00 AM | Attr = ]
PTech , -> %System32%\drivers\mtlstrm.sys -> Smart Link [Ver = 3.80.01MC15 | Size = 1309184 bytes | Modified Date = 8/3/2004 10:41:38 PM | Attr = ]

< End of report >

ndmmxiaomayi

Post #25December 1, 2007, 3:35 AM UTC

Hi kawgirl96,

Please download gmer.zip from Gmer and save it to your desktop.

Right click on gmer.zip and select Extract All….
Click Next on seeing the Welcome to the Compressed (zipped) Folders Extraction Wizard.
Click on the Browse button. Click on Desktop. Then click OK.
Click Next. It will start extracting.
Once done, check (tick) the Show extracted files box.
Double click on gmer.exe to run it.
Select the Rootkit tab.
On the right hand side, check all the items to be scanned, but leave Show All box unchecked.
Select all drives that are connected to your system to be scanned.
Click on the Scan button.
When the scan is finished, click Copy to save the scan log to the Windows clipboard.
Open Notepad or a similar text editor.
Paste the clipboard contents into the text editor.
Save the Gmer scan log and post it in your next reply.
Close Gmer.
Open Command Prompt by going to Start > Run and type in cmd. Press Enter.
In Command Prompt, type in net stop gmer. Press Enter.
Type in exit to close Command Prompt.

Note: Do not run any programs while Gmer is running.

One question: Did you upload the file in Post 19 to Spykiller?

Please post back the Gmer log as well as a new HijackThis log in your next reply.

kawgirl96

Post #26December 1, 2007, 6:19 AM UTC last edited December 1, 2007, 5:51 PM UTC

Yes, I did.

I post the link ( or though I had). Should I expect an e-mail from the site ?

GMER hasn't found any system modification. There wasn't anything to copy.

Hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 9:49:25 AM, on 12/1/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\cba\pds.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\drivers\security\services.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\cba\xfr.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\LTMSG.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\clipbrd.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal…llMgr_v01_4.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1191287272531
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Intel File Transfer - Intel® Corporation - C:\WINDOWS\system32\cba\xfr.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINDOWS\system32\cba\pds.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: msnsupport - Unknown owner - C:\WINDOWS\system32\drivers\security\services.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

ndmmxiaomayi

Post #27December 1, 2007, 6:25 PM UTC

Hi kawgirl96,

Please follow Post 19 again. Upload the file and post back the link.

Please go to Kaspersky website and perform an online antivirus scan. Please use Internet Explorer as it uses ActiveX.

Click on Kaspersky Online Scanner button.
Read through the requirements and privacy statement and click on Accept button.
It will start downloading and installing the scanner and virus definitions. You will be prompted to install an ActiveX from Kaspersky. Click Yes.
When the downloads have finished, click on Next button.
Click on Scan Settings button.
Select extended under Scan using the following antivirus database:
Check (tick) these boxes under Scan options:
- Scan Archives
- Scan Mail Bases
Click OK
Click on My Computer under Please select a target to scan:
Once the scan is complete it will display if your system has been infected. Click on Save as text button and save it to your desktop.
Copy and paste this log in your next reply.

In your next reply, please post:

Kaspersky Antivirus scan report
A new HijackThis log

kawgirl96

Post #28December 2, 2007, 12:36 AM UTC

OK….Here's some information I just found out ……… The updates for Microsoft Windows are missing updates. I'm trying to go back and install all the necessary updates. While I do this, is there any information you need ?

ndmmxiaomayi

Post #29December 2, 2007, 6:17 AM UTC

You do have a lot of missing updates, but don't do it now. It may cause problems. The updates problems can be solved later.

kawgirl96

Post #30December 3, 2007, 1:56 AM UTC

New Hijack This log

Logfile of HijackThis v1.99.1
Scan saved at 7:43:52 PM, on 12/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\cba\pds.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\drivers\security\services.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\cba\xfr.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/u…can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal…llMgr_v01_4.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1191287272531
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1196562630718
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Intel File Transfer - Intel® Corporation - C:\WINDOWS\system32\cba\xfr.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINDOWS\system32\cba\pds.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: msnsupport - Unknown owner - C:\WINDOWS\system32\drivers\security\services.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Link from Post #19

http://thespykiller.co.uk/index.php/topic,…8666f1afc395f1e

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Files Disappearing

✨ Ask AI

Ask AI