Spyware / Malware / Virus Removal

[Resolved] Something Blocking AVG Free

9 min read

Looking for the outcome? Ask AI

jfinner1 Topic Starter

Post #1October 13, 2008, 3:23 AM UTC

Hello, and let me first thank whoever is reading this for taking the time to help me. I am trying to help out a friend by removing some spyware and such from her computer. I thought it would be an easy fix, but I may have been wrong. My mistake was assuming that she was running XP, only to find out when she dropped it off that she uses Vista. I've never used Vista before, and don't really have any desire to. (Actually, I just switched to Linux.) But I stil started with the basics, downloaded ATF Cleaner, and AVG Free. I did a scan and found Antivirus 2009, which I've heard is pretty nasty. Then, as soon as I finished the AVG scan and minamized the console, Windows pops up with a security alert saying I don't have any ativirus software running. I look, and something is blocking parts of AVG. So I went and downloaded Erunt and saved a backup of her registry, then downloaded HijackThis, and came here. I hope you can help me out. Here is my log. Again, thanks for taking the time to help me.

Logfile of HijackThis v1.99.1
Scan saved at 11:11:14 PM, on 10/12/2008
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\System32\wsqmcons.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…n&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…n&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…n&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [PhilipsDM] C:\Program Files\Philips\SA44xx\Philips Device Manager\Bin\LaunchDM.exe OS_STARTUP
O4 - HKLM\..\Run: [LanzarP2006] "C:\Users\HP\AppData\Local\Temp\P2006tmp\Install.exe" /SETUP:"/l0x0009"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: igfxcui - C:\Windows\SYSTEM32\igfxdev.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

jpshortstuff

Post #2October 13, 2008, 4:27 PM UTC

Hi, and Welcome to WhatTheTech

My name is jpshortstuff. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.

You've got an older version of HijackThis, which doesn't work so well with Vista. Please remove you current copy of HijackThis. The newest version will be automatically downloaded when we run the following scan.

Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<info.txt (<

You say you downloaded AVG free, but this computer already has Symantec. Would you rather we get rid of Symantec and go with AVG instead?

Thanks.

jfinner1

Post #3October 14, 2008, 12:08 AM UTC

Hello jpshortstuff! I followed your instructions and posted the new logs below. Yes, this computer has Symantec, but it is expired. I was asked not to uninstall it, because my friend *might* renew her subscription, but I've been trying to talk her around. I find it to be a horrid resource hog, and I'm not sure why she won't just switch to something better… Anyways, for now I have to keep it but not use it. Hope that's not a problem. Thanks for helping me!

Here are the logs:

Logfile of random's system information tool 1.04 (written by random/random)
Run by [removed] at 2008-10-13 19:55:16
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 203 GB (88%) free of 230 GB
Total RAM: 2038 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:55:29 PM, on 10/13/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\System32\wsqmcons.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\HP\Desktop\RSIT.exe
C:\Program Files\trend micro\HP.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf;=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf;=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf;=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [PhilipsDM] C:\Program Files\Philips\SA44xx\Philips Device Manager\Bin\LaunchDM.exe OS_STARTUP
O4 - HKLM\..\Run: [LanzarP2006] "C:\Users\HP\AppData\Local\Temp\P2006tmp\Install.exe" /SETUP:"/l0x0009"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

–
End of file - 9607 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{392E2BD4-B2A7-41BB-A5FE-405C31DB16EB}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-01-12 96936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-10-12 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-08-16 501384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{90222687-F593-4738-B738-FBEE9C7B26DF} - Show Norton Toolbar - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-01-12 607888]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2007-03-11 159744]
"ccApp"=c:\Program Files\Common Files\Symantec Shared\ccApp.exe [2007-01-10 115816]
"IS CfgWiz"=c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe [2007-01-13 431752]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-04-04 138008]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-04-04 154392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-04-04 133912]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-02-12 174872]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-04-23 176128]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-02-13 159744]
"HP Health Check Scheduler"=C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2007-03-12 50696]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-03-01 472776]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-10 317128]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-17 49152]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0\bin\jusched.exe [2007-08-16 77824]
"PhilipsDM"=C:\Program Files\Philips\SA44xx\Philips Device Manager\Bin\LaunchDM.exe [2007-08-11 40960]
"LanzarP2006"=C:\Users\HP\AppData\Local\Temp\P2006tmp\Install.exe [2008-05-14 152880]
"MSConfig"=C:\Windows\system32\msconfig.exe [2008-01-19 227840]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-10-12 1234712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\85925386420872458042664962738194]
C:\Program Files\Antivirus 2009\av2009.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-03-30 204800]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2008-10-13 19:55:16 —-D—- C:\rsit
2008-10-12 23:10:27 —-D—- C:\Program Files\Hijackthis
2008-10-12 23:01:57 —-D—- C:\Windows\ERDNT
2008-10-12 23:00:58 —-D—- C:\Program Files\ERUNT
2008-10-12 21:59:51 —-HD—- C:\$AVG8.VAULT$
2008-10-12 21:55:52 —-A—- C:\Windows\system32\avgrsstx.dll
2008-10-12 21:55:40 —-D—- C:\Program Files\AVG
2008-10-12 21:55:39 —-D—- C:\ProgramData\avg8
2008-10-12 21:27:55 —-D—- C:\PerfLogs
2008-10-01 08:02:04 —-A—- C:\Windows\system32\SLsvc.exe
2008-10-01 08:02:04 —-A—- C:\Windows\system32\onex.dll
2008-10-01 08:01:55 —-A—- C:\Windows\system32\ntkrnlpa.exe
2008-10-01 08:01:54 —-A—- C:\Windows\system32\PSHED.DLL
2008-10-01 08:01:54 —-A—- C:\Windows\system32\ntoskrnl.exe
2008-10-01 08:01:53 —-A—- C:\Windows\system32\imagesp1.dll
2008-10-01 08:01:51 —-A—- C:\Windows\system32\pidgenx.dll
2008-10-01 08:01:51 —-A—- C:\Windows\system32\dfsr.exe
2008-10-01 08:01:50 —-A—- C:\Windows\system32\sstpsvc.dll
2008-10-01 08:01:50 —-A—- C:\Windows\system32\mstscax.dll
2008-10-01 08:01:48 —-A—- C:\Windows\system32\WsmSvc.dll
2008-10-01 08:01:48 —-A—- C:\Windows\system32\winrscmd.dll
2008-10-01 08:01:48 —-A—- C:\Windows\system32\sysmain.dll
2008-10-01 08:01:47 —-A—- C:\Windows\system32\VSSVC.exe
2008-10-01 08:01:47 —-A—- C:\Windows\system32\vssapi.dll
2008-10-01 08:01:47 —-A—- C:\Windows\system32\RMActivate.exe
2008-10-01 08:01:46 —-A—- C:\Windows\system32\secproc.dll
2008-10-01 08:01:46 —-A—- C:\Windows\system32\RMActivate_isv.exe
2008-10-01 08:01:46 —-A—- C:\Windows\system32\PresentationNative_v0300.dll
2008-10-01 08:01:46 —-A—- C:\Windows\system32\iesetup.dll
2008-10-01 08:01:44 —-A—- C:\Windows\system32\secproc_isv.dll
2008-10-01 08:01:42 —-A—- C:\Windows\system32\icardres.dll
2008-10-01 08:01:42 —-A—- C:\Windows\system32\icardagt.exe
2008-10-01 08:01:42 —-A—- C:\Windows\system32\drmv2clt.dll
2008-10-01 08:01:41 —-A—- C:\Windows\system32\xpssvcs.dll
2008-10-01 08:01:41 —-A—- C:\Windows\system32\blackbox.dll
2008-10-01 08:01:40 —-A—- C:\Windows\system32\RMActivate_ssp.exe
2008-10-01 08:01:40 —-A—- C:\Windows\system32\RacEngn.dll
2008-10-01 08:01:39 —-A—- C:\Windows\system32\spwizimg.dll
2008-10-01 08:01:39 —-A—- C:\Windows\system32\rpcrt4.dll
2008-10-01 08:01:39 —-A—- C:\Windows\system32\RMActivate_ssp_isv.exe
2008-10-01 08:01:39 —-A—- C:\Windows\system32\rdpencom.dll
2008-10-01 08:01:39 —-A—- C:\Windows\system32\MSMPEG2VDEC.DLL
2008-10-01 08:01:38 —-A—- C:\Windows\system32\msxml6.dll
2008-10-01 08:01:38 —-A—- C:\Windows\system32\msxml3.dll
2008-10-01 08:01:38 —-A—- C:\Windows\system32\lpremove.exe
2008-10-01 08:01:38 —-A—- C:\Windows\bfsvc.exe
2008-10-01 08:01:37 —-A—- C:\Windows\system32\qmgr.dll
2008-10-01 08:01:37 —-A—- C:\Windows\system32\ntdll.dll
2008-10-01 08:01:37 —-A—- C:\Windows\system32\msjet40.dll
2008-10-01 08:01:37 —-A—- C:\Windows\system32\lsasrv.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\wevtsvc.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\wcncsvc.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\mssrch.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\localspl.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\IKEEXT.DLL
2008-10-01 08:01:35 —-A—- C:\Windows\system32\TsWpfWrp.exe
2008-10-01 08:01:35 —-A—- C:\Windows\system32\recdisc.exe
2008-10-01 08:01:35 —-A—- C:\Windows\system32\mscoree.dll
2008-10-01 08:01:35 —-A—- C:\Windows\system32\kernel32.dll
2008-10-01 08:01:34 —-A—- C:\Windows\system32\vds.exe
2008-10-01 08:01:34 —-A—- C:\Windows\system32\tquery.dll
2008-10-01 08:01:34 —-A—- C:\Windows\system32\CompMgmtLauncher.exe
2008-10-01 08:01:31 —-A—- C:\Windows\system32\wmp.dll
2008-10-01 08:01:31 —-A—- C:\Windows\system32\mstsc.exe
2008-10-01 08:01:30 —-A—- C:\Windows\system32\wcnwiz.dll
2008-10-01 08:01:30 —-A—- C:\Windows\system32\SMBHelperClass.dll
2008-10-01 08:01:30 —-A—- C:\Windows\system32\msvbvm60.dll
2008-10-01 08:01:30 —-A—- C:\Windows\system32\mf.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\termsrv.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\msdtctm.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\kerberos.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\IMJP10K.DLL
2008-10-01 08:01:29 —-A—- C:\Windows\system32\advapi32.dll
2008-10-01 08:01:28 —-A—- C:\Windows\system32\MSMPEG2ADEC.DLL
2008-10-01 08:01:28 —-A—- C:\Windows\system32\mmcndmgr.dll
2008-10-01 08:01:28 —-A—- C:\Windows\system32\CertEnroll.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\xolehlp.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\Query.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\ole32.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\msdtcprx.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\MPSSVC.dll
2008-10-01 08:01:26 —-A—- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2008-10-01 08:01:26 —-A—- C:\Windows\system32\propsys.dll
2008-10-01 08:01:26 —-A—- C:\Windows\system32\netlogon.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\SSShim.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\schedsvc.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\nlmgp.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\msvcrt.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\mcupdate_GenuineIntel.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\DfsShlEx.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\wer.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\user32.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\shlwapi.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\sdclt.exe
2008-10-01 08:01:24 —-A—- C:\Windows\system32\printfilterpipelinesvc.exe
2008-10-01 08:01:24 —-A—- C:\Windows\system32\milcore.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\IasMigPlugin.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\WSDApi.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\vdsdyn.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\QAGENTRT.DLL
2008-10-01 08:01:23 —-A—- C:\Windows\system32\jscript.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\diagperf.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\d3d9.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\clusapi.dll
2008-10-01 08:01:22 —-A—- C:\Windows\system32\winrsmgr.dll
2008-10-01 08:01:22 —-A—- C:\Windows\system32\vbscript.dll
2008-10-01 08:01:22 —-A—- C:\Windows\system32\mmc.exe
2008-10-01 08:01:21 —-A—- C:\Windows\system32\vdsbas.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\swprv.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\SLC.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\mtxclu.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\msi.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\comctl32.dll
2008-10-01 08:01:20 —-A—- C:\Windows\system32\MSVidCtl.dll
2008-10-01 08:01:20 —-A—- C:\Windows\system32\gpsvc.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\XPSSHHDR.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\sbe.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\samsrv.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\msdtckrm.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\mfc42u.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\FWPUCLNT.DLL
2008-10-01 08:01:19 —-A—- C:\Windows\system32\esent.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\wecutil.exe
2008-10-01 08:01:18 —-A—- C:\Windows\system32\usp10.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\sdengin2.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\mfc42.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\gacinstall.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\cmipnpinstall.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\cmicryptinstall.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\WSManMigrationPlugin.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\mswsock.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\crypt32.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\comsvcs.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\certutil.exe
2008-10-01 08:01:16 —-A—- C:\Windows\system32\wmdrmsdk.dll
2008-10-01 08:01:16 —-A—- C:\Windows\system32\setupapi.dll
2008-10-01 08:01:16 —-A—- C:\Windows\system32\oleaut32.dll
2008-10-01 08:01:16 —-A—- C:\Windows\system32\FirewallAPI.dll
2008-10-01 08:01:16 —-A—- C:\Windows\explorer.exe
2008-10-01 08:01:15 —-A—- C:\Windows\system32\wecsvc.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\sqlceqp30.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\sdohlp.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\schannel.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\msv1_0.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\lsm.exe
2008-10-01 08:01:15 —-A—- C:\Windows\system32\iphlpsvc.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\bcrypt.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\wmpmde.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\thumbcache.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\p2psvc.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\netapi32.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\mcmde.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\eapp3hst.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\WinSAT.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\vdsutil.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\riched20.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\imapi2fs.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\d3d10_1.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\autofmt.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\autoconv.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\autochk.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\authui.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\authfwcfg.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\wevtapi.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\dmvdsitf.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\d3d10_1core.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\comdlg32.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\browseui.dll
2008-10-01 08:01:11 —-A—- C:\Windows\system32\comuid.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\WSDMon.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\wevtfwd.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\msshsq.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\mscories.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\eapphost.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\wlansvc.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\whealogr.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\untfs.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\uexfat.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\sqlcese30.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\SearchIndexer.exe
2008-10-01 08:01:09 —-A—- C:\Windows\system32\rasmans.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\pcaui.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\iassam.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\eappcfg.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\DfrgNtfs.exe
2008-10-01 08:01:08 —-A—- C:\Windows\system32\dot3svc.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\zipfldr.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\winhttp.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\rdpwsx.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\mssha.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\msdrm.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\evr.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\dfrgui.exe
2008-10-01 08:01:05 —-A—- C:\Windows\system32\WsmAuto.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\rpcss.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\rasppp.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\nlasvc.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\ncrypt.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\BFE.DLL
2008-10-01 08:01:05 —-A—- C:\Windows\system32\audiosrv.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\WsmWmiPl.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\WMVCORE.DLL
2008-10-01 08:01:04 —-A—- C:\Windows\system32\wmdrmdev.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\win32spl.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\rastls.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\printui.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\msrepl40.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\dhcpcsvc6.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\ddraw.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\WebClnt.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\themecpl.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\sqlsrv32.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\QAGENT.DLL
2008-10-01 08:01:03 —-A—- C:\Windows\system32\objsel.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\mssph.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\iasnap.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\dbghelp.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\wmdrmnet.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\WerFaultSecure.exe
2008-10-01 08:01:02 —-A—- C:\Windows\system32\w32time.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\spoolss.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\scrrun.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\PresentationHost.exe
2008-10-01 08:01:02 —-A—- C:\Windows\system32\ncryptui.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\iprtrmgr.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\icm32.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\emdmgmt.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\azroles.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\wlangpui.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\winsrv.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\taskschd.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\msctf.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\infocardapi.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\bcdedit.exe
2008-10-01 08:01:01 —-A—- C:\Windows\system32\basecsp.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\winsta.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\scksp.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\rsaenh.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\netprofm.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\netcfgx.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\mstlsapi.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\mssphtb.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\hcrstco.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\dbgeng.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\AudioEng.dll
2008-10-01 08:00:59 —-A—- C:\Windows\system32\winlogon.exe
2008-10-01 08:00:59 —-A—- C:\Windows\system32\wercon.exe
2008-10-01 08:00:59 —-A—- C:\Windows\system32\taskcomp.dll
2008-10-01 08:00:59 —-A—- C:\Windows\system32\lpksetup.exe
2008-10-01 08:00:59 —-A—- C:\Windows\system32\cdosys.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\wlansec.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\sqmapi.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\mssvp.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\msdtcuiu.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\mprddm.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\dfshim.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\certcli.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\apds.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\tsgqec.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\srchadmin.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\shdocvw.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\iasrad.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\eapsvc.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\AUDIOKSE.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\aaclient.dll
2008-10-01 08:00:56 —-A—- C:\Windows\system32\uDWM.dll
2008-10-01 08:00:56 —-A—- C:\Windows\system32\certmgr.dll
2008-10-01 08:00:56 —-A—- C:\Windows\system32\bcdsrv.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\wscript.exe
2008-10-01 08:00:54 —-A—- C:\Windows\system32\WMVDECOD.DLL
2008-10-01 08:00:54 —-A—- C:\Windows\system32\Wldap32.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\umpnpmgr.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\SearchProtocolHost.exe
2008-10-01 08:00:54 —-A—- C:\Windows\system32\msidcrl30.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\dnsapi.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\cscript.exe
2008-10-01 08:00:53 —-A—- C:\Windows\system32\scrobj.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\pla.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\netshell.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\dxgi.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\dot3gpui.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\wmicmiplugin.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\shsvcs.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\ntprint.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\MMDevAPI.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\cryptnet.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\comsnap.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\wshext.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\wscsvc.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\winmm.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\synceng.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\services.exe
2008-10-01 08:00:50 —-A—- C:\Windows\system32\wscisvif.dll
2008-10-01 08:00:50 —-A—- C:\Windows\system32\taskeng.exe
2008-10-01 08:00:50 —-A—- C:\Windows\system32\pnidui.dll
2008-10-01 08:00:50 —-A—- C:\Windows\system32\msconfig.exe
2008-10-01 08:00:50 —-A—- C:\Windows\system32\cmifw.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\WMVSDECD.DLL
2008-10-01 08:00:49 —-A—- C:\Windows\system32\tdh.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\rasapi32.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\msjtes40.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\imapi2.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\iassdo.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\cipher.exe
2008-10-01 08:00:48 —-A—- C:\Windows\system32\wersvc.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\uxtheme.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\SessEnv.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\dot3api.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\dmdskmgr.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\cmd.exe
2008-10-01 08:00:48 —-A—- C:\Windows\system32\cbsra.exe
2008-10-01 08:00:48 —-A—- C:\Windows\system32\AuthFWSnapin.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\WUDFx.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wlanmsm.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wlancfg.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wkssvc.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wevtutil.exe
2008-10-01 08:00:47 —-A—- C:\Windows\system32\srvsvc.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\qdvd.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\msscp.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\msdtcVSp1res.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\loadperf.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\comres.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\wlanapi.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\WinSATAPI.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\rpchttp.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\rdpdd.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\mshtmled.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\localsec.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\hnetcfg.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\fontext.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\diskpart.exe
2008-10-01 08:00:45 —-A—- C:\Windows\system32\wsqmcons.exe
2008-10-01 08:00:45 —-A—- C:\Windows\system32\WMADMOD.DLL
2008-10-01 08:00:45 —-A—- C:\Windows\system32\wlanpref.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\WindowsCodecs.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\RDPENCDD.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\profprov.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\NAPMONTR.DLL
2008-10-01 08:00:45 —-A—- C:\Windows\system32\filemgmt.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\dsound.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\avifil32.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\wsecedit.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\tracerpt.exe
2008-10-01 08:00:44 —-A—- C:\Windows\system32\SmartcardCredentialProvider.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\SLCommDlg.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\PresentationHostProxy.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\P2PGraph.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\MuiUnattend.exe
2008-10-01 08:00:44 —-A—- C:\Windows\system32\dwmredir.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\dnsrslvr.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\dhcpcsvc.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\WMSPDMOD.DLL
2008-10-01 08:00:43 —-A—- C:\Windows\system32\wininit.exe
2008-10-01 08:00:43 —-A—- C:\Windows\system32\spp.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\rasdlg.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\QSHVHOST.DLL
2008-10-01 08:00:43 —-A—- C:\Windows\system32\iassvcs.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\gpresult.exe
2008-10-01 08:00:43 —-A—- C:\Windows\system32\dwm.exe
2008-10-01 08:00:43 —-A—- C:\Windows\system32\azroleui.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\apphelp.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\srrstr.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\spwizeng.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\SLUI.exe
2008-10-01 08:00:42 —-A—- C:\Windows\system32\rasmontr.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\PortableDeviceApi.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\mscorier.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\mcbuilder.exe
2008-10-01 08:00:42 —-A—- C:\Windows\system32\iashost.exe
2008-10-01 08:00:42 —-A—- C:\Windows\HelpPane.exe
2008-10-01 08:00:41 —-A—- C:\Windows\system32\wecapi.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\unbcl.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\tcpmon.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\shrink.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\msra.exe
2008-10-01 08:00:41 —-A—- C:\Windows\system32\lltdsvc.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\IPHLPAPI.DLL
2008-10-01 08:00:41 —-A—- C:\Windows\system32\gpedit.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\brcpl.dll
2008-10-01 08:00:40 —-A—- C:\Windows\system32\WMPEncEn.dll
2008-10-01 08:00:40 —-A—- C:\Windows\system32\iashlpr.dll
2008-10-01 08:00:39 —-A—- C:\Windows\system32\oleacc.dll
2008-10-01 08:00:39 —-A—- C:\Windows\system32\msdri.dll
2008-10-01 08:00:39 —-A—- C:\Windows\system32\iertutil.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\vsstrace.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\regsvc.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\raschap.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\PerfCenterCPL.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\ntvdm.exe
2008-10-01 08:00:38 —-A—- C:\Windows\system32\ipsmsnap.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\framedynos.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\fdWSD.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\Faultrep.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\advpack.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\wpdshext.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\wdc.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\Storprop.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\ntlanman.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\NetProjW.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\netman.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\l2nacp.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\iedkcs32.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\framedyn.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\dssenh.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\WlanMM.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\tcpipcfg.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\sxs.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\profsvc.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\KMSVC.DLL
2008-10-01 08:00:36 —-A—- C:\Windows\system32\ieapfltr.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\certreq.exe
2008-10-01 08:00:36 —-A—- C:\Windows\system32\adsnt.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\wusa.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WUDFHost.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WsmProv.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\wlanhlp.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WLanConn.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WerFault.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\VAN.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\userenv.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\umb.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\PhotoMetadataHandler.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\ncsi.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\IPBusEnum.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\ie4uinit.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\fundisc.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\puiobj.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\photowiz.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\netid.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\MdSched.exe
2008-10-01 08:00:34 —-A—- C:\Windows\system32\InkEd.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\dps.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\cryptui.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\catsrvut.dll
2008-10-01 08:00:33 —-A—- C:\Windows\system32\netcenter.dll
2008-10-01 08:00:33 —-A—- C:\Windows\system32\ipsecsnp.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\ws2_32.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\WinSCard.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\winrs.exe
2008-10-01 08:00:32 —-A—- C:\Windows\system32\spbcd.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\secur32.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\odbcjt32.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\ntdsapi.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\NAPSTAT.EXE
2008-10-01 08:00:32 —-A—- C:\Windows\system32\msinfo32.exe
2008-10-01 08:00:31 —-A—- C:\Windows\system32\RelMon.dll
2008-10-01 08:00:31 —-A—- C:\Windows\system32\prnntfy.dll
2008-10-01 08:00:31 —-A—- C:\Windows\system32\msfeeds.dll
2008-10-01 08:00:31 —-A—- C:\Windows\system32\mblctr.exe
2008-10-01 08:00:31 —-A—- C:\Windows\system32\cryptsvc.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\TSpkg.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\schtasks.exe
2008-10-01 08:00:30 —-A—- C:\Windows\system32\pdh.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\netdiagfx.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\iasacct.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\FirewallControlPanel.exe
2008-10-01 08:00:30 —-A—- C:\Windows\system32\dmdlgs.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\dhcpsapi.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\dfrgfat.exe
2008-10-01 08:00:30 —-A—- C:\Windows\system32\catsrv.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\activeds.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\wvc.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\winrm.vbs
2008-10-01 08:00:29 —-A—- C:\Windows\system32\rastapi.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\qwave.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\netcorehc.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\NAPHLPR.DLL
2008-10-01 08:00:29 —-A—- C:\Windows\system32\MSMPEG2ENC.DLL
2008-10-01 08:00:29 —-A—- C:\Windows\system32\msacm32.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\ifmon.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\fdWCN.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\dot3msm.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\dot3cfg.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\AudioSes.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\wow32.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\shsetup.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\els.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\adsldp.dll
2008-10-01 08:00:27 —-A—- C:\Windows\system32\ntshrui.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\wscntfy.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\WMNetMgr.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\stobject.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\sdrsvc.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\QUTIL.DLL
2008-10-01 08:00:26 —-A—- C:\Windows\system32\msdt.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\iasrecst.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\iasdatastore.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\fdSSDP.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\clbcatq.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\wlgpclnt.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\wlanui.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\smss.exe
2008-10-01 08:00:25 —-A—- C:\Windows\system32\net1.exe
2008-10-01 08:00:25 —-A—- C:\Windows\system32\nci.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\ipnathlp.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\dsprop.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\Defrag.exe
2008-10-01 08:00:25 —-A—- C:\Windows\system32\adsldpc.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\upnphost.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\systemcpl.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\rasman.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\rascfg.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\PresentationSettings.exe
2008-10-01 08:00:24 —-A—- C:\Windows\system32\P2P.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\msftedit.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\MSAC3ENC.DLL
2008-10-01 08:00:24 —-A—- C:\Windows\system32\mprmsg.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\loghours.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\fde.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\CompatUI.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\ActiveContentWizard.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\Wpc.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\t2embed.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\oleprn.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\MigAutoPlay.exe
2008-10-01 08:00:23 —-A—- C:\Windows\system32\L2SecHC.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\dxdiag.exe
2008-10-01 08:00:23 —-A—- C:\Windows\system32\DFDWiz.exe
2008-10-01 08:00:22 —-A—- C:\Windows\system32\wdigest.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\setupcl.exe
2008-10-01 08:00:22 —-A—- C:\Windows\system32\rtm.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\msutb.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\mprdim.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\gpapi.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\AuxiliaryDisplayServices.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\wiaservc.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\scansetting.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\NAPCRYPT.DLL
2008-10-01 08:00:21 —-A—- C:\Windows\system32\msihnd.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\ifsutil.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\devmgr.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\CertEnrollUI.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\wscapi.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\WinFXDocObj.exe
2008-10-01 08:00:20 —-A—- C:\Windows\system32\wdi.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\usbmon.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\SyncCenter.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\spoolsv.exe
2008-10-01 08:00:20 —-A—- C:\Windows\system32\mswmdm.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\kdusb.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\imagehlp.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\dimsroam.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\BOOTVID.DLL
2008-10-01 08:00:20 —-A—- C:\Windows\system32\audiodg.exe
2008-10-01 08:00:20 —-A—- C:\Windows\system32\actxprxy.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\wlandlg.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\vssadmin.exe
2008-10-01 08:00:19 —-A—- C:\Windows\system32\uudf.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\scecli.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\regapi.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\PortableDeviceWMDRM.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\mycomput.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\mspaint.exe
2008-10-01 08:00:19 —-A—- C:\Windows\system32\msls31.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\termmgr.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\sud.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\ssdpsrv.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\SCardSvr.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\samlib.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\puiapi.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\newdev.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\mstask.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\kdcom.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\duser.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\wisptis.exe
2008-10-01 08:00:17 —-A—- C:\Windows\system32\tapisrv.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\SLUINotify.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\Robocopy.exe
2008-10-01 08:00:17 —-A—- C:\Windows\system32\mtxoci.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\input.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\inetpp.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\iasads.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\cic.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\AzSqlExt.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\adtschema.dll
2008-10-01 08:00:16 —-A—- C:\Windows\system32\cscapi.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\WUDFPlatform.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\verifier.exe
2008-10-01 08:00:15 —-A—- C:\Windows\system32\sdshext.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\PortableDeviceTypes.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\netiohlp.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\msdtclog.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\msdt.exe
2008-10-01 08:00:15 —-A—- C:\Windows\system32\authz.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\wpcsvc.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\wintrust.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\webcheck.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\themeui.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\slcinst.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\PortableDeviceClassExtension.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\oledlg.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\dxtmsft.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\d3d8.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\cmdial32.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\clfsw32.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\wpccpl.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\WMPhoto.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\vdsldr.exe
2008-10-01 08:00:13 —-A—- C:\Windows\system32\SnippingTool.exe
2008-10-01 08:00:13 —-A—- C:\Windows\system32\SndVol.exe
2008-10-01 08:00:13 —-A—- C:\Windows\system32\rasgcw.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\pnpsetup.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\ntmarta.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\mmcbase.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\mlang.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\icfupgd.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\icardie.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\wtsapi32.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\wpd_ci.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\unlodctr.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\syssetup.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\slmgr.vbs
2008-10-01 08:00:12 —-A—- C:\Windows\system32\rasqec.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\nslookup.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\ncobjapi.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\msrd3x40.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\msaatext.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\mpr.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\lodctr.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\extmgr.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\diskraid.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\accessibilitycpl.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\xmlfilter.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\Utilman.exe
2008-10-01 08:00:11 —-A—- C:\Windows\system32\ulib.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\sethc.exe
2008-10-01 08:00:11 —-A—- C:\Windows\system32\pnpui.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\oobefldr.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\mscms.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\Mcx2Svc.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\iaspolcy.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\fontsub.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\dxdiagn.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\cabinet.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\WSManHTTPConfig.exe
2008-10-01 08:00:10 —-A—- C:\Windows\system32\wermgr.exe
2008-10-01 08:00:10 —-A—- C:\Windows\system32\unattend.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\trkwks.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\scesrv.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\ogldrv.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\occache.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\mssitlb.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\lnkstub.exe
2008-10-01 08:00:10 —-A—- C:\Windows\system32\dfdts.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\chsbrkr.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\cabview.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\wpcao.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\printfilterpipelineprxy.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\p2pcollab.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\msnetobj.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\iepeers.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\ieaksie.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\eappgnui.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\DHCPQEC.DLL
2008-10-01 08:00:09 —-A—- C:\Windows\system32\bthci.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\basesrv.dll
2008-10-01 08:00:08 —-A—- C:\Windows\system32\mmcss.dll
2008-10-01 08:00:08 —-A—- C:\Windows\system32\dsquery.dll
2008-10-01 08:00:08 —-A—- C:\Windows\system32\drvinst.exe
2008-10-01 08:00:08 —-A—- C:\Windows\system32\dispdiag.exe
2008-10-01 08:00:07 —-A—- C:\Windows\system32\verifier.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\secproc_ssp_isv.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\secproc_ssp.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\RstrtMgr.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\mprapi.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\efsadu.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\WPDSp.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\WPDShServiceObj.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\WMVENCOD.DLL
2008-10-01 08:00:06 —-A—- C:\Windows\system32\wercplsupport.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\SearchFilterHost.exe
2008-10-01 08:00:06 —-A—- C:\Windows\system32\qedit.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\msoeacct.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\d3d10core.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\wiascanprofiles.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\wiaaut.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\usercpl.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\setupugc.exe
2008-10-01 08:00:05 —-A—- C:\Windows\system32\QSVRMGMT.DLL
2008-10-01 08:00:05 —-A—- C:\Windows\system32\pnrpnsp.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\pngfilt.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\p2pnetsh.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\networkmap.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\msrdc.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\msdmo.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\iscsiexe.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\icacls.exe
2008-10-01 08:00:05 —-A—- C:\Windows\system32\consent.exe
2008-10-01 08:00:05 —-A—- C:\Windows\system32\conime.exe
2008-10-01 08:00:04 —-A—- C:\Windows\system32\xactsrv.dll
2008-10-01 08:00:04 —-A—- C:\Windows\system32\PNPXAssocPrx.dll
2008-10-01 08:00:04 —-A—- C:\Windows\system32\lsass.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\xwizards.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\systeminfo.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\PNPXAssoc.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\pcadm.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\offfilt.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\netcfg.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\msrating.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\mfplat.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\lpk.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\findstr.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\eappprxy.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\drmmgrtn.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\dpapimig.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\autoplay.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\resutils.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\powercpl.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\netprof.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\MFWMAAEC.DLL
2008-10-01 08:00:02 —-A—- C:\Windows\system32\DWWIN.EXE
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dssec.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dot3ui.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dfrgifc.exe
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dbnetlib.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\cmdl32.exe
2008-10-01 08:00:02 —-A—- C:\Windows\system32\alg.exe
2008-10-01 08:00:01 —-A—- C:\Windows\system32\txflog.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\odbc32.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\nshhttp.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\imm32.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\feclient.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\btpanui.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\apircl.dll
2008-10-01 08:00:01 —-A—- C:\Windows\regedit.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\tbssvc.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\taskkill.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\svchost.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\RASMM.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\provthrd.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\msieftp.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\MediaMetadataHandler.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\iexpress.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\dxva2.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\dwmapi.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\d3d10.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\bcdprov.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\ActionQueue.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\syncui.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\slwmi.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\SLCExt.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\slcc.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\shwebsvc.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\raserver.exe
2008-10-01 07:59:59 —-A—- C:\Windows\system32\olepro32.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\networkexplorer.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\korwbrkr.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\EAPQEC.DLL
2008-10-01 07:59:59 —-A—- C:\Windows\system32\dmocx.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\aclui.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\xcopy.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\WMASF.DLL
2008-10-01 07:59:58 —-A—- C:\Windows\system32\uxsms.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\UIHub.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\taskmgr.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\QCLIPROV.DLL
2008-10-01 07:59:58 —-A—- C:\Windows\system32\PnPUnattend.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\ias.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\dnscacheugc.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\connect.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\brcplsdw.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\audiodev.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\wlanext.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\upnp.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\reg.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\perfts.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\NapiNSP.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\msoert2.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\msjetoledb40.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\mountvol.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\mmcshext.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\icsfiltr.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\cmstp.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\certprop.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\browser.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\AuxiliaryDisplayApi.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\atl.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\appinfo.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\WUDFCoinstaller.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\WpdMtpUS.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\WMVXENCD.DLL
2008-10-01 07:59:56 —-A—- C:\Windows\system32\wmpdxm.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\SoundRecorder.exe
2008-10-01 07:59:56 —-A—- C:\Windows\system32\qcap.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\qasf.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\PING.EXE
2008-10-01 07:59:56 —-A—- C:\Windows\system32\netplwiz.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\inetmib1.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\ieakeng.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\httpapi.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\dskquoui.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\cewmdm.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\bitsadmin.exe
2008-10-01 07:59:55 —-A—- C:\Windows\system32\WUDFSvc.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\SysFxUI.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\rekeywiz.exe
2008-10-01 07:59:55 —-A—- C:\Windows\system32\dsuiext.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\dmusic.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\auditpol.exe
2008-10-01 07:59:55 —-A—- C:\Windows\system32\adsmsext.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\wmpsrcwp.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\Sens.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\SecEdit.exe
2008-10-01 07:59:54 —-A—- C:\Windows\system32\mtstocom.exe
2008-10-01 07:59:54 —-A—- C:\Windows\system32\mscandui.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\makecab.exe
2008-10-01 07:59:54 —-A—- C:\Windows\system32\lsmproxy.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\xwtpw32.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\wzcdlg.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\WMVSENCD.DLL
2008-10-01 07:59:53 —-A—- C:\Windows\system32\wiashext.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\wiadefui.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\sppnp.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\shimgvw.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\seclogon.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\sbeio.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\printcom.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\ndfapi.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\msorcl32.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\msdadiag.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\dxtrans.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\dot3gpclnt.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\batt.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\apss.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\wscmisetup.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\wpdwcn.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\WMSPDMOE.DLL
2008-10-01 07:59:52 —-A—- C:\Windows\system32\winrshost.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\userinit.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\tasklist.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\TapiMigPlugin.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\sxstrace.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\shacct.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\rrinstaller.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\prntvpt.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\perfmon.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\p2phost.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\notepad.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\napipsec.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\MP4SDECD.DLL
2008-10-01 07:59:52 —-A—- C:\Windows\system32\ktmutil.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\keymgr.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\HelpPaneProxy.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\ftp.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\csrsrv.dll
2008-10-01 07:59:52 —-A—- C:\Windows\notepad.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\wscproxystub.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\winethc.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\UIAutomationCore.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\takeown.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\PnPutil.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\pcasvc.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\nshipsec.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\netiougc.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\msimtf.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\msiexec.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\mfps.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\fmifs.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\driverquery.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\d3dim700.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\cryptdll.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\colorui.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\wpdbusenum.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\wmiprop.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\WindowsCodecsExt.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\txfw32.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\shrpubw.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\RESAMPLEDMO.DLL
2008-10-01 07:59:50 —-A—- C:\Windows\system32\rasplap.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\powrprof.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\pots.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\mfpmp.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\logagent.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\inseng.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\fsutil.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\findnetprinters.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\dnshc.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\capisp.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\WLanHC.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\wiaacmgr.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\wextract.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\version.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\TMM.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\shgina.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\sfc_os.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\sendmail.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\runonce.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\rshx32.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\RpcPing.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\propdefs.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\perfnet.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\olecli32.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\nsisvc.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\luainstall.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\ktmw32.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\imapi.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\fdPHost.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\d3dim.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\compstui.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\cmmon32.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\WMADMOE.DLL
2008-10-01 07:59:48 —-A—- C:\Windows\system32\w32tm.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\unregmp2.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\UI0Detect.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\net.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\msvfw32.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\msstrc.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\MPG4DECD.DLL
2008-10-01 07:59:48 —-A—- C:\Windows\system32\MP43DECD.DLL
2008-10-01 07:59:48 —-A—- C:\Windows\system32\mdminst.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\imgutil.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\getmac.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\dsauth.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\dimsjob.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\cmlua.dll
2008-10-01 07:59:47 —-A—- C:\Windows\system32\wmpshell.dll
2008-10-01 07:59:47 —-A—- C:\Windows\system32\tscupgrd.exe
2008-10-01 07:59:47 —-A—- C:\Windows\system32\credui.dll
2008-10-01 07:59:47 —-A—- C:\Windows\system32\ACW.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\sfc.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\sdchange.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\PortableDeviceWiaCompat.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\pnpts.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\nlhtml.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\migisol.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\ipconfig.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\fdeploy.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\dispci.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\dinput8.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\diantz.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\comrepl.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\cmutil.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\WPDShextAutoplay.exe
2008-10-01 07:59:45 —-A—- C:\Windows\system32\wmidx.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\vdmredir.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\TSTheme.exe
2008-10-01 07:59:45 —-A—- C:\Windows\system32\remotepg.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\pdhui.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\nlaapi.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\fwcfg.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\ExplorerFrame.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\expand.exe
2008-10-01 07:59:45 —-A—- C:\Windows\system32\EncDump.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\colbact.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\cfgbkend.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\wsnmp32.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\wmvdspa.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\waitfor.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\vds_ps.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\utildll.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\TpmInit.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\tabcal.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\sti_ci.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\softkbd.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\rdrleakdiag.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\msfeedsbs.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\modemui.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\McxDriv.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\logman.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\iscsium.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\iernonce.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\hlink.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\esentutl.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\cmcfg32.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\bridgeunattend.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\bootcfg.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\amstream.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\admparse.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\WsmCl.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\wfapigp.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\shutdown.exe
2008-10-01 07:59:43 —-A—- C:\Windows\system32\qdv.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\osblprov.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\odbccp32.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\dpnet.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\cacls.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\wpnpinst.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\wmpcm.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\werdiagcontroller.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\wavemsp.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\rasauto.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\olethk32.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\olesvr32.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\mstext40.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\msdtc.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\mfvdsp.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\iscsiwmi.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\DpiScaling.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\dmsynth.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\COLORCNV.DLL
2008-10-01 07:59:41 —-A—- C:\Windows\system32\xmlprovi.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\WpdConns.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\ufat.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\ucsvc.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\TimeDateMUICallback.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\sxproxy.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\SLLUA.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\rtffilt.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\rgb9rast.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\RegCtrl.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\odbctrac.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\networkitemfactory.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\msscntrs.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\mshta.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\msctfui.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\mobsync.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\licmgr10.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\itss.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\csrstub.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\convert.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\bitsigd.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\at.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\winnsi.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\unattendedjoin.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\tbs.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\setupcln.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\rasdiag.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\prevhost.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\ocsetup.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\netbtugc.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\mydocs.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\l2gpstore.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\iscsied.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\GuidedHelp.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\fphc.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\dskquota.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\dmime.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\cscdll.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\cmpbk32.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\AuthFWGP.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\AtBroker.exe
2008-10-01 07:59:39 —-A—- C:\Windows\system32\regini.exe
2008-10-01 07:59:39 —-A—- C:\Windows\system32\napdsnap.dll
2008-10-01 07:59:39 —-A—- C:\Windows\system32\dsdmo.dll
2008-10-01 07:59:39 —-A—- C:\Windows\system32\amxread.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\usbui.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\odbccu32.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\odbccr32.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\msident.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\msdart.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\dot3dlg.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\devenum.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\cmstplua.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\apilogen.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\wpclsp.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\WINSRPC.DLL
2008-10-01 07:59:37 —-A—- C:\Windows\system32\vss_ps.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\VIDRESZR.DLL
2008-10-01 07:59:37 —-A—- C:\Windows\system32\upnpcont.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\srwmi.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\rasphone.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\RacAgent.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\nsi.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\netevent.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\nbtstat.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\mtxlegih.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\mtxdm.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\MsCtfMonitor.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\mfcsubs.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\graftabl.com
2008-10-01 07:59:37 —-A—- C:\Windows\system32\gpupdate.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\avrt.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\wsock32.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\WindowsAnytimeUpgrade.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\wiarpc.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\WavDest.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\vfwwdm32.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\syskey.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\ROUTE.EXE
2008-10-01 07:59:36 —-A—- C:\Windows\system32\procinst.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\odbcbcp.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\ndfetw.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\msexcl40.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\MP3DMOD.DLL
2008-10-01 07:59:36 —-A—- C:\Windows\system32\extrac32.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\eventcls.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\d3dxof.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\csrss.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\atmfd.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\WlanMmHC.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\wiadss.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\TabbtnEx.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\Tabbtn.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\psbase.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\msxbde40.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\mssprxy.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\inetppui.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\dmscript.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\dmloader.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\CertEnrollCtrl.exe
2008-10-01 07:59:35 —-A—- C:\Windows\system32\cdd.dll
2008-10-01 07:59:35 —-A—- C:\Windows\fveupdate.exe
2008-10-01 07:59:34 —-A—- C:\Windows\system32\wshcon.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\PlaySndSrv.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\Netplwiz.exe
2008-10-01 07:59:34 —-A—- C:\Windows\system32\msscb.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\mspbde40.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\msltus40.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\mimefilt.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\icsunattend.exe
2008-10-01 07:59:34 —-A—- C:\Windows\system32\credssp.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\WsmRes.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\WSHTCPIP.DLL
2008-10-01 07:59:33 —-A—- C:\Windows\system32\wship6.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\tcpmon.ini
2008-10-01 07:59:33 —-A—- C:\Windows\system32\sxsstore.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\slwga.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\setupSNK.exe
2008-10-01 07:59:33 —-A—- C:\Windows\system32\OptionalFeatures.exe
2008-10-01 07:59:33 —-A—- C:\Windows\system32\msvidc32.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\localui.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\lltdapi.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\LangCleanupSysprepAction.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\icaapi.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\HotStartUserAgent.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\ComputerDefaults.exe
2008-10-01 07:59:32 —-A—- C:\Windows\system32\usbperf.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\spopk.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\serialui.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\sbunattend.exe
2008-10-01 07:59:32 —-A—- C:\Windows\system32\NcdProp.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\dmutil.dll
2008-10-01 07:59:31 —-A—- C:\Windows\system32\chtbrkr.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\wsepno.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\rasctrs.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\odbcconf.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\msobjs.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\msfeedssync.exe
2008-10-01 07:59:30 —-A—- C:\Windows\system32\ieencode.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\hbaapi.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\corpol.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\cofiredm.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\vdmdbg.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\url.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\nlsbres.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\midimap.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\LogonUI.exe
2008-10-01 07:59:29 —-A—- C:\Windows\system32\iprtprio.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\InfDefaultInstall.exe
2008-10-01 07:59:29 —-A—- C:\Windows\system32\hnetmon.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\esentprf.dll
2008-10-01 07:59:28 —-A—- C:\Windows\system32\sdspres.dll
2008-10-01 07:59:28 —-A—- C:\Windows\system32\osbaseln.dll
2008-10-01 07:59:28 —-A—- C:\Windows\system32\cfgmgr32.dll
2008-10-01 07:59:27 —-A—- C:\Windows\system32\msmmsp.dll
2008-10-01 07:59:27 —-A—- C:\Windows\system32\msisip.dll
2008-10-01 07:59:25 —-A—- C:\Windows\system32\winusb.dll
2008-10-01 07:59:25 —-A—- C:\Windows\system32\rdpcfgex.dll
2008-10-01 07:59:25 —-A—- C:\Windows\system32\dispex.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\spwmp.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\riched32.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\Nlsdl.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\msidle.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\idndl.dll
2008-10-01 07:59:22 —-A—- C:\Windows\system32\KBDKOR.DLL
2008-10-01 07:59:22 —-A—- C:\Windows\system32\KBDJPN.DLL
2008-10-01 07:59:21 —-A—- C:\Windows\system32\iscsilog.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\wmploc.DLL
2008-10-01 07:59:20 —-A—- C:\Windows\system32\vga64k.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\vga256.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\tsddd.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\framebuf.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\dxmasf.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\vga.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\spwizres.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\f3ahvoas.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\dmdskres2.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\bootstr.dll
2008-10-01 07:59:17 —-A—- C:\Windows\system32\gatherWirelessInfo.vbs
2008-10-01 07:59:17 —-A—- C:\Windows\system32\gatherWiredInfo.vbs
2008-10-01 07:59:17 —-A—- C:\Windows\system32\fsmgmt.msc
2008-10-01 07:59:12 —-A—- C:\Windows\system32\vsp1cln.exe
2008-10-01 07:59:12 —-A—- C:\Windows\system32\perfmon.msc
2008-10-01 07:58:49 —-A—- C:\Windows\system32\xmllite.dll
2008-10-01 07:58:48 —-A—- C:\Windows\system32\wbemcomn.dll
2008-10-01 07:58:45 —-A—- C:\Windows\system32\SmiInstaller.dll
2008-10-01 07:58:45 —-A—- C:\Windows\system32\SmiEngine.dll
2008-10-01 07:58:40 —-A—- C:\Windows\system32\wdscore.dll
2008-10-01 07:58:40 —-A—- C:\Windows\system32\PkgMgr.exe
2008-10-01 07:58:30 —-A—- C:\Windows\system32\drvstore.dll
2008-10-01 07:58:29 —-A—- C:\Windows\system32\mspatcha.dll
2008-10-01 07:58:29 —-A—- C:\Windows\system32\msdelta.dll
2008-10-01 07:58:29 —-A—- C:\Windows\system32\dpx.dll
2008-09-30 16:54:47 —-A—- C:\Windows\ntbtlog.txt
2008-09-30 10:19:21 —-A—- C:\Windows\AvDetected.ini
2008-09-30 10:03:43 —-D—- C:\Program Files\Antivirus 2009
2008-09-29 09:21:35 —-A—- C:\Windows\system32\es.dll
2008-09-28 21:49:27 —-D—- C:\Users\HP\AppData\Roaming\WildTangent
2008-09-28 11:19:39 —-A—- C:\Windows\system32\NlsLexicons0046.dll
2008-09-28 11:19:39 —-A—- C:\Windows\system32\NlsLexicons0045.dll
2008-09-28 11:19:38 —-A—- C:\Windows\system32\NlsLexicons0049.dll
2008-09-28 11:19:38 —-A—- C:\Windows\system32\NlsLexicons0047.dll
2008-09-28 11:19:38 —-A—- C:\Windows\system32\NlsLexicons0020.dll
2008-09-28 11:19:37 —-A—- C:\Windows\system32\NlsLexicons0039.dll
2008-09-28 11:19:37 —-A—- C:\Windows\system32\NlsLexicons0022.dll
2008-09-28 11:19:37 —-A—- C:\Windows\system32\NlsLexicons0021.dll
2008-09-28 11:19:36 —-A—- C:\Windows\system32\NlsLexicons0026.dll
2008-09-28 11:19:36 —-A—- C:\Windows\system32\NlsLexicons0024.dll
2008-09-28 11:19:35 —-A—- C:\Windows\system32\NlsLexicons0027.dll
2008-09-28 11:19:35 —-A—- C:\Windows\system32\NlsLexicons0010.dll
2008-09-28 11:19:34 —-A—- C:\Windows\system32\NlsLexicons0018.dll
2008-09-28 11:19:34 —-A—- C:\Windows\system32\NlsLexicons0013.dll
2008-09-28 11:19:34 —-A—- C:\Windows\system32\NlsLexicons0011.dll
2008-09-28 11:19:33 —-A—- C:\Windows\system32\NlsLexicons0019.dll
2008-09-28 11:19:32 —-A—- C:\Windows\system32\NlsLexicons0003.dll
2008-09-28 11:19:32 —-A—- C:\Windows\system32\NlsLexicons0002.dll
2008-09-28 11:19:32 —-A—- C:\Windows\system32\NlsLexicons0001.dll
2008-09-28 11:19:31 —-A—- C:\Windows\system32\NlsLexicons004a.dll
2008-09-28 11:19:31 —-A—- C:\Windows\system32\NlsLexicons0009.dll
2008-09-28 11:19:31 —-A—- C:\Windows\system32\NlsLexicons0007.dll
2008-09-28 11:19:30 —-A—- C:\Windows\system32\NlsLexicons004e.dll
2008-09-28 11:19:30 —-A—- C:\Windows\system32\NlsLexicons004c.dll
2008-09-28 11:19:30 —-A—- C:\Windows\system32\NlsLexicons004b.dll
2008-09-28 11:19:29 —-A—- C:\Windows\system32\NlsLexicons003e.dll
2008-09-28 11:19:29 —-A—- C:\Windows\system32\NlsLexicons002a.dll
2008-09-28 11:19:28 —-A—- C:\Windows\system32\NlsLexicons001d.dll
2008-09-28 11:19:28 —-A—- C:\Windows\system32\NlsLexicons001b.dll
2008-09-28 11:19:28 —-A—- C:\Windows\system32\NlsLexicons001a.dll
2008-09-28 11:19:27 —-A—- C:\Windows\system32\NlsLexicons000c.dll
2008-09-28 11:19:27 —-A—- C:\Windows\system32\NlsLexicons000a.dll
2008-09-28 11:19:26 —-A—- C:\Windows\system32\NlsLexicons0414.dll
2008-09-28 11:19:26 —-A—- C:\Windows\system32\NlsLexicons000f.dll
2008-09-28 11:19:26 —-A—- C:\Windows\system32\NlsLexicons000d.dll
2008-09-28 11:19:25 —-A—- C:\Windows\system32\NlsLexicons0816.dll
2008-09-28 11:19:25 —-A—- C:\Windows\system32\NlsLexicons0416.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsModels0011.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsLexicons081a.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsData0046.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsData0045.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0049.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0047.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0039.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0020.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0027.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0026.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0024.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0022.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0021.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0018.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0013.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0011.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0010.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0019.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0002.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0001.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0000.dll
2008-09-28 11:19:19 —-A—- C:\Windows\system32\NlsData0007.dll
2008-09-28 11:19:19 —-A—- C:\Windows\system32\NlsData0003.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData004c.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData004b.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData004a.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData0009.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData004e.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData003e.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData002a.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData001a.dll
2008-09-28 11:19:16 —-A—- C:\Windows\system32\NlsData001d.dll
2008-09-28 11:19:16 —-A—- C:\Windows\system32\NlsData001b.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000f.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000d.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000c.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000a.dll
2008-09-28 11:19:14 —-A—- C:\Windows\system32\NlsData0416.dll
2008-09-28 11:19:14 —-A—- C:\Windows\system32\NlsData0414.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NlsLexicons0c1a.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NlsData081a.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NlsData0816.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NaturalLanguage6.dll
2008-09-28 11:19:12 —-A—- C:\Windows\system32\NlsData0c1a.dll
2008-09-28 11:17:13 —-A—- C:\Windows\system32\wininet.dll
2008-09-28 11:17:13 —-A—- C:\Windows\system32\jsproxy.dll
2008-09-28 11:17:12 —-A—- C:\Windows\system32\ieui.dll
2008-09-28 11:17:12 —-A—- C:\Windows\system32\ieframe.dll
2008-09-28 11:17:10 —-A—- C:\Windows\system32\mshtml.dll
2008-09-28 11:17:08 —-A—- C:\Windows\system32\mstime.dll
2008-09-28 11:17:07 —-A—- C:\Windows\system32\urlmon.dll
2008-09-27 10:59:26 —-A—- C:\Windows\system32\winipsec.dll
2008-09-27 10:59:26 —-A—- C:\Windows\system32\polstore.dll
2008-09-27 10:59:26 —-A—- C:\Windows\system32\IPSECSVC.DLL
2008-09-27 10:59:26 —-A—- C:\Windows\system32\FwRemoteSvr.dll
2008-09-27 10:58:56 —-A—- C:\Windows\system32\Apphlpdm.dll
2008-09-27 10:58:54 —-A—- C:\Windows\system32\GameUXLegacyGDFs.dll
2008-09-27 10:58:54 —-A—- C:\Windows\system32\gameux.dll
2008-09-27 10:57:23 —-A—- C:\Windows\system32\shell32.dll
2008-09-27 10:54:49 —-A—- C:\Windows\system32\tzres.dll
2008-09-27 10:53:48 —-A—- C:\Windows\system32\wmpeffects.dll
2008-09-27 10:51:31 —-A—- C:\Windows\system32\kbd106n.dll
2008-09-27 10:51:28 —-A—- C:\Windows\system32\winresume.exe
2008-09-27 10:51:28 —-A—- C:\Windows\system32\winload.exe
2008-09-27 10:51:28 —-A—- C:\Windows\system32\srclient.dll
2008-09-27 10:51:28 —-A—- C:\Windows\system32\rstrui.exe
2008-09-27 10:51:27 —-A—- C:\Windows\system32\srdelayed.exe
2008-09-27 10:51:27 —-A—- C:\Windows\system32\srcore.dll
2008-09-27 10:51:27 —-A—- C:\Windows\system32\setbcdlocale.dll
2008-09-27 10:51:27 —-A—- C:\Windows\system32\kd1394.dll
2008-09-27 10:51:27 —-A—- C:\Windows\system32\ci.dll
2008-09-27 10:50:29 —-A—- C:\Windows\system32\gdi32.dll
2008-09-27 10:50:15 —-A—- C:\Windows\system32\wshrm.dll
2008-09-27 10:49:33 —-A—- C:\Windows\system32\INETRES.dll
2008-09-27 10:49:33 —-A—- C:\Windows\system32\inetcomm.dll
2008-09-27 10:49:25 —-A—- C:\Windows\system32\quartz.dll
2008-09-27 10:49:09 —-A—- C:\Windows\system32\psisdecd.dll
2008-09-27 10:49:09 —-A—- C:\Windows\system32\EncDec.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wups2.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wucltux.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wuaueng.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wuauclt.exe
2008-09-26 15:52:17 —-A—- C:\Windows\system32\wups.dll
2008-09-26 15:52:17 —-A—- C:\Windows\system32\wudriver.dll
2008-09-26 15:52:17 —-A—- C:\Windows\system32\wuapi.dll
2008-09-26 15:51:58 —-A—- C:\Windows\system32\wuwebv.dll
2008-09-26 15:51:58 —-A—- C:\Windows\system32\wuapp.exe
2008-09-23 15:36:52 —-D—- C:\Program Files\Philips

======List of files/folders modified in the last 1 months======

2008-10-13 19:55:29 —-D—- C:\Windows\Temp
2008-10-13 19:55:29 —-D—- C:\Program Files\Trend Micro
2008-10-13 19:54:07 —-D—- C:\Windows\system32\catroot
2008-10-13 19:54:06 —-D—- C:\Windows\winsxs
2008-10-13 19:53:56 —-D—- C:\Windows\system32\catroot2
2008-10-13 00:31:24 —-D—- C:\Windows\Prefetch
2008-10-13 00:26:44 —-D—- C:\Windows\system32\WDI
2008-10-13 00:15:21 —-D—- C:\Windows\Logs
2008-10-12 23:10:27 —-RD—- C:\Program Files
2008-10-12 23:01:57 —-D—- C:\Windows
2008-10-12 22:06:44 —-D—- C:\Windows\Microsoft.NET
2008-10-12 22:06:39 —-RSD—- C:\Windows\assembly
2008-10-12 21:55:52 —-D—- C:\Windows\System32
2008-10-12 21:55:51 —-D—- C:\Windows\system32\drivers
2008-10-12 21:55:39 —-HD—- C:\ProgramData
2008-10-12 21:55:36 —-SHD—- C:\System Volume Information
2008-10-12 21:55:15 —-SHD—- C:\Windows\Installer
2008-10-12 21:55:12 —-D—- C:\Program Files\Common Files\microsoft shared
2008-10-12 21:54:19 —-SD—- C:\Users\HP\AppData\Roaming\Microsoft
2008-10-12 21:47:59 —-D—- C:\Windows\rescache
2008-10-12 21:38:56 —-D—- C:\Windows\inf
2008-10-12 21:38:56 —-A—- C:\Windows\system32\PerfStringBackup.INI
2008-10-12 21:35:31 —-SHD—- C:\boot
2008-10-12 21:35:15 —-ASH—- C:\Program Files\desktop.ini
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Sidebar
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Photo Gallery
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Media Player
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Mail
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Journal
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Collaboration
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Calendar
2008-10-12 21:28:41 —-D—- C:\Program Files\Movie Maker
2008-10-12 21:28:41 —-D—- C:\Program Files\Internet Explorer
2008-10-12 21:28:39 —-D—- C:\Windows\servicing
2008-10-12 21:28:39 —-D—- C:\Windows\ehome
2008-10-12 21:28:39 —-D—- C:\Program Files\Windows Defender
2008-10-12 21:28:39 —-D—- C:\Program Files\Common Files\System
2008-10-12 21:28:37 —-D—- C:\Windows\MSAgent
2008-10-12 21:28:36 —-D—- C:\Windows\system32\XPSViewer
2008-10-12 21:28:36 —-D—- C:\Windows\system32\ko-KR
2008-10-12 21:28:36 —-D—- C:\Windows\system32\da-DK
2008-10-12 21:28:36 —-D—- C:\Windows\system32\com
2008-10-12 21:28:36 —-D—- C:\Windows\PolicyDefinitions
2008-10-12 21:28:36 —-D—- C:\Windows\L2Schemas
2008-10-12 21:28:36 —-D—- C:\Windows\IME
2008-10-12 21:28:36 —-D—- C:\Windows\DigitalLocker
2008-10-12 21:28:32 —-D—- C:\Windows\system32\en-US
2008-10-12 21:28:31 —-D—- C:\Windows\system32\sysprep
2008-10-12 21:28:31 —-D—- C:\Windows\system32\oobe
2008-10-12 21:28:31 —-D—- C:\Windows\system32\migration
2008-10-12 21:28:31 —-D—- C:\Windows\system32\it-IT
2008-10-12 21:28:31 —-D—- C:\Windows\system32\el-GR
2008-10-12 21:28:31 —-D—- C:\Windows\system32\de-DE
2008-10-12 21:28:29 —-D—- C:\Windows\system32\sv-SE
2008-10-12 21:28:29 —-D—- C:\Windows\system32\SLUI
2008-10-12 21:28:29 —-D—- C:\Windows\system32\setup
2008-10-12 21:28:29 —-D—- C:\Windows\system32\ru-RU
2008-10-12 21:28:29 —-D—- C:\Windows\system32\pt-PT
2008-10-12 21:28:29 —-D—- C:\Windows\system32\ias
2008-10-12 21:28:29 —-D—- C:\Windows\system32\hu-HU
2008-10-12 21:28:29 —-D—- C:\Windows\system32\he-IL
2008-10-12 21:28:29 —-D—- C:\Windows\system32\fr-FR
2008-10-12 21:28:29 —-D—- C:\Windows\system32\fi-FI
2008-10-12 21:28:29 —-D—- C:\Windows\system32\cs-CZ
2008-10-12 21:28:29 —-D—- C:\Windows\system32\AdvancedInstallers
2008-10-12 21:28:28 —-D—- C:\Windows\system32\zh-TW
2008-10-12 21:28:28 —-D—- C:\Windows\system32\zh-CN
2008-10-12 21:28:28 —-D—- C:\Windows\system32\ro-RO
2008-10-12 21:28:28 —-D—- C:\Windows\system32\pl-PL
2008-10-12 21:28:28 —-D—- C:\Windows\system32\manifeststore
2008-10-12 21:28:28 —-D—- C:\Windows\system32\ja-JP
2008-10-12 21:28:28 —-D—- C:\Windows\system32\es-ES
2008-10-12 21:28:28 —-D—- C:\Windows\system32\en
2008-10-12 21:28:27 —-D—- C:\Windows\system32\wbem
2008-10-12 21:28:27 —-D—- C:\Windows\system32\tr-TR
2008-10-12 21:28:24 —-D—- C:\Windows\system32\nl-NL
2008-10-12 21:28:24 —-D—- C:\Windows\system32\nb-NO
2008-10-12 21:28:24 —-D—- C:\Windows\system32\ar-SA
2008-10-12 21:28:23 —-D—- C:\Windows\system32\pt-BR
2008-10-12 21:28:23 —-D—- C:\Windows\system32\migwiz
2008-10-12 21:28:02 —-D—- C:\Windows\AppPatch
2008-10-12 21:27:56 —-D—- C:\Windows\Boot
2008-10-12 21:27:55 —-D—- C:\Windows\system32\Boot
2008-10-12 21:20:29 —-A—- C:\Windows\system32\ifxcardm.dll
2008-10-12 21:20:28 —-A—- C:\Windows\system32\axaltocm.dll
2008-10-02 22:29:20 —-D—- C:\Windows\system32\NDF
2008-09-30 14:37:08 —-D—- C:\Program Files\Common Files
2008-09-28 21:49:26 —-D—- C:\ProgramData\WildTangent
2008-09-27 10:59:57 —-D—- C:\Program Files\CONEXANT
2008-09-26 15:51:15 —-SD—- C:\ProgramData\Microsoft
2008-09-23 15:36:52 —-HD—- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2008-10-12 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2008-10-12 26824]
R1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-11-30 8192]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2007-01-10 387384]
R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [2007-01-12 25400]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2007-04-18 141312]
R3 AvgWfpX;AVG Free8 Firewall Driver x86; C:\Windows\System32\Drivers\avgwfpx.sys [2008-10-12 69128]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-04 188416]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-03-30 1671680]
R3 NETw4v32;Intel® Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-03-01 2216448]
R3 NWADI;NWADI Bus Enumerator; C:\Windows\system32\DRIVERS\NWADIenum.sys [2007-04-19 194048]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-19 88576]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-02-07 196096]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 E100B;Intel® PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-04-30 160768]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-03-30 1671680]
S3 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20070108.003\IDSvix86.sys [2006-12-28 212280]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NAVENG;NAVENG; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20070430.018\NAVENG.SYS [2007-04-30 77688]
S3 NAVEX15;NAVEX15; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20070430.018\NAVEX15.SYS [2007-04-30 852824]
S3 NETw3v32;Intel® PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 NWUSBModem;Novatel Wireless USB Modem Driver; C:\Windows\system32\DRIVERS\nwusbmdm.sys [2007-04-19 99200]
S3 NWUSBPort;Novatel Wireless USB Status Port Driver; C:\Windows\system32\DRIVERS\nwusbser.sys [2007-04-19 99200]
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [2007-01-03 417592]
S3 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [2007-01-12 247608]
S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [2007-01-12 276792]
S3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2007-08-16 115000]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2007-01-06 554616]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-10-12 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-10-12 231704]
R2 ccEvtMgr;Symantec Event Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 ccSetMgr;Symantec Settings Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2007-04-23 262243]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2007-04-23 106593]
R2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-03-14 62984]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-02-12 355096]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 SymAppCore;Symantec AppCore Service; c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe [2007-01-05 47712]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560]
S3 comHost;COM Host; c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-01-13 49248]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ISPwdSvc;Symantec IS Password Validation; c:\Program Files\Norton Internet Security\isPwdSvc.exe [2007-01-14 80504]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-01-06 2918008]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656]
S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-08-16 1174664]

—————–EOF—————–

info.txt logfile of random's system information tool 1.04 2008-10-13 19:55:33

======Uninstall list======

–>"C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe"
–>"C:\Program Files\HP Games\Blackhawk Striker 2\Uninstall.exe"
–>"C:\Program Files\HP Games\Blasterball 3\Uninstall.exe"
–>"C:\Program Files\HP Games\Bookworm Deluxe\Uninstall.exe"
–>"C:\Program Files\HP Games\Bounce Symphony\Uninstall.exe"
–>"C:\Program Files\HP Games\Cake Mania\Uninstall.exe"
–>"C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe"
–>"C:\Program Files\HP Games\Crystal Maze\Uninstall.exe"
–>"C:\Program Files\HP Games\Diner Dash\Uninstall.exe"
–>"C:\Program Files\HP Games\Family Feud\Uninstall.exe"
–>"C:\Program Files\HP Games\FATE\Uninstall.exe"
–>"C:\Program Files\HP Games\Final Drive Fury\Uninstall.exe"
–>"C:\Program Files\HP Games\Flip Words\Uninstall.exe"
–>"C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe"
–>"C:\Program Files\HP Games\Jewel Quest\Uninstall.exe"
–>"C:\Program Files\HP Games\Lemonade Tycoon 2\Uninstall.exe"
–>"C:\Program Files\HP Games\Mah Jong Quest\Uninstall.exe"
–>"C:\Program Files\HP Games\My HP Game Console\Uninstall.exe"
–>"C:\Program Files\HP Games\Otto\Uninstall.exe"
–>"C:\Program Files\HP Games\Penguins!\Uninstall.exe"
–>"C:\Program Files\HP Games\Phoenix Assault\Uninstall.exe"
–>"C:\Program Files\HP Games\Polar Bowler\Uninstall.exe"
–>"C:\Program Files\HP Games\Polar Golfer\Uninstall.exe"
–>"C:\Program Files\HP Games\Puzzle Express\Uninstall.exe"
–>"C:\Program Files\HP Games\SCRABBLE\Uninstall.exe"
–>"C:\Program Files\HP Games\Snowboard SuperJam\Uninstall.exe"
–>"C:\Program Files\HP Games\SpongeBob SquarePants Krabby Quest\Uninstall.exe"
–>"C:\Program Files\HP Games\Super Granny\Uninstall.exe"
–>"C:\Program Files\HP Games\Tradewinds\Uninstall.exe"
–>"C:\Program Files\HP Games\Wheel of Fortune\Uninstall.exe"
–>"C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe"
Activation Assistant for the 2007 Microsoft Office suites–>"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
Adobe Flash Player 9 ActiveX–>C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Reader 8–>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A80000000002}
AppCore–>MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
AV–>MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
AVG Free 8.0–>C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
ccCommon–>MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
Conexant HD Audio–>C:\Program Files\CONEXANT\CNXT_AUDIO_HDA\UIU32a.exe -U -IwisVenza.INF
ERUNT 1.1j–>"C:\Program Files\ERUNT\unins000.exe"
ESU for Microsoft Vista–>MsiExec.exe /X{1517A7CB-5F00-4A88-8F06-E89B6DB63784}
HDAUDIO Soft Data Fax Modem with SmartCP–>C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV;_5045&SUBSYS;_103C30B7\UIU32m.EXE -U -IwqcVenz.inf
Hewlett-Packard Active Check–>MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
Hewlett-Packard Asset Agent–>MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
HijackThis 2.0.2–>"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HP Active Support Library 32 bit components–>MsiExec.exe /I{FAB0C302-CB18-4A7A-BA03-C3DC23101A68}
HP Active Support Library–>C:\Program Files\InstallShield Installation Information\{290B83AA-093A-45BF-A917-D1C4A1E8D917}\setup.exe -runfromtemp -l0x0409
HP Customer Experience Enhancements–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}\setup.exe" -l0x9 -removeonly
HP Doc Viewer–>MsiExec.exe /I{082702D5-5DD8-4600-BCE5-48B15174687F}
HP Easy Setup - Frontend–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40F7AED3-0C7D-4582-99F6-484A515C73F2}\setup.exe" -l0x9 -removeonly
HP Help and Support–>MsiExec.exe /I{9061CEF2-51F5-42C9-8A70-9ED351C6597A}
HP Photosmart Essential 2.0–>C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Quick Launch Buttons 6.20 B1–>C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe -runfromtemp -l0x0009 uninst
HP QuickPlay 3.2–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\setup.exe" -uninstall
HP Update–>MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
HP User Guides 0060–>MsiExec.exe /I{40385AA8-F33A-4E8E-BCAB-DF94A6AF7D51}
HP Wireless Assistant–>MsiExec.exe /I{D32067CD-7409-4792-BFA0-1469BCD8F0C8}
HPNetworkAssistant–>MsiExec.exe /I{228C6B46-64E2-404E-898A-EF0830603EF4}
Intel Matrix Storage Manager–>C:\Windows\system32\imsmudlg.exe -uninstall
Intel® Graphics Media Accelerator Driver–>C:\Windows\system32\igxpun.exe -uninstall
Java™ SE Runtime Environment 6–>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
LiveUpdate 3.2 (Symantec Corporation)–>"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
Marvell Miniport Driver–>MsiExec.exe /X{C950420B-4182-49EA-850A-A6A2ABF06C6B}
Microsoft Office Excel MUI (English) 2007–>MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Home and Student 2007–>"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007–>MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007–>MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007–>MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007–>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007–>MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007–>MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007–>MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007–>MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007–>MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007–>MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works–>MsiExec.exe /I{6D52C408-B09A-4520-9B18-475B81D393F1}
Mobile Broadband Drivers–>MsiExec.exe /X{190D0C6E-C8A7-4019-8FB5-FD041EC1F2D2}
MSCU for Microsoft Vista–>MsiExec.exe /I{F7F3B252-E772-48AA-93EB-7964BC326067}
MSRedist–>MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
MSXML 4.0 SP2 (KB936181)–>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)–>MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
muvee autoProducer 6.0–>C:\Program Files\InstallShield Installation Information\{0BFC200F-C45D-4271-AF34-4CA969225DEB}\setup.exe -runfromtemp -l0x0009 -removeonly
My HP Games–>"C:\Program Files\HP Games\Uninstall.exe"
NetWaiting–>C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
Norton AntiVirus–>MsiExec.exe /X{830D8CBD-C668-49e2-A969-C2C2106332E0}
Norton Confidential Browser Component–>MsiExec.exe /I{4843B611-8FCB-4428-8C23-31D0A5EAE164}
Norton Confidential Web Protection Component–>MsiExec.exe /I{D353CC51-430D-4C6F-9B7E-52003DA1E05A}
Norton Internet Security (Symantec Corporation)–>"C:\Program Files\Common Files\Symantec Shared\SymSetup\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}_10_2_0_30\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}.exe" /X
Norton Internet Security–>MsiExec.exe /I{3672B097-EA69-4bfe-B92F-29AE6D9D2B34}
Norton Internet Security–>MsiExec.exe /I{48185814-A224-447A-81DA-71BD20580E1B}
Norton Internet Security–>MsiExec.exe /I{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}
Norton Internet Security–>MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
Norton Internet Security–>MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
Norton Protection Center–>MsiExec.exe /I{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}
Philips SA44XX Device Manager–>"C:\Program Files\InstallShield Installation Information\{18189A4F-C93E-4CC0-8E7D-A0CD1A334707}\setup.exe" -runfromtemp -l0x0009 -removeonly
Rhapsody Player Engine–>MsiExec.exe /I{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}
Rhapsody–>C:\PROGRA~1\Rhapsody\Unwise32.exe /A C:\PROGRA~1\Rhapsody\install.log
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x9 anything
Roxio Activation Module–>MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
Roxio Creator Audio–>MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
Roxio Creator Basic v9–>MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
Roxio Creator Copy–>MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
Roxio Creator Data–>MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
Roxio Creator EasyArchive–>MsiExec.exe /I{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}
Roxio Creator Tools–>MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
Roxio Express Labeler 3–>MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio MyDVD Basic v9–>MsiExec.exe /I{33C65B6A-5D73-4E3E-A1F9-127C27BD3F72}
SPBBC 32bit–>MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
Symantec Real Time Storage Protection Component–>MsiExec.exe /I{D6E6FA4A-5445-4850-8365-CF216C1CBB7A}
SymNet–>MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
Touch Pad Driver–>C:\Program Files\Apoint2K\Uninstap.exe ADDREMOVE
VZAccess Manager–>C:\PROGRA~1\VERIZO~1\VZACCE~1\UNWISE.EXE C:\PROGRA~1\VERIZO~1\VZACCE~1\INSTALL.LOG

======Security center information======

AV: AVG Anti-Virus Free (disabled)
AV: Norton Internet Security (disabled) (outdated)
FW: Norton Internet Security (disabled)
AS: AVG Anti-Virus Free (disabled)
AS: Windows Defender
AS: Norton Internet Security (outdated)

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PLATFORM"=MCD
"PCBRAND"=Pavilion
"OnlineServices"=Online Services
"RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
"USERPART"=E:

—————–EOF—————–

jpshortstuff

Post #4October 14, 2008, 1:32 PM UTC

Hi.

Does your friend not have the installation CD for Symantec or similar? Can they not acquire Symantec again if/when they start paying the subscription again? I would personally recommend getting rid of it since you already have found a free alternative that does the job. As you say, Symantec is a resource hog.

Please download the OTMoveIt3 by OldTimer.

Save it to your desktop.
Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

:Reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\85925386420872458042664962738194]

:Files
C:\Program Files\Antivirus 2009
C:\WINDOWS\AvDetected.ini

:Commands
[Reboot]
Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
Click the red Moveit! button.
Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
Close OTMoveIt3

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

Please right click Internet Explorer on your desktop and then select "Run As Administrator". Next, go to Kaspersky website and perform an online antivirus scan.

NOTE: Internet Explorer will temporarily have administrator privileges, this is required for the scan but dangerous for normal surfing so do NOT open any other websites in IE until after the scan has finished and this window has been closed.

Read through the requirements and privacy statement and click on Accept button.
It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
When the downloads have finished, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
- Spyware, Adware, Dialers, and other potentially dangerous programs
  Archives
  Mail databases
Click on My Computer under Scan.
Once the scan is complete, it will display the results. Click on View Scan Report.
You will see a list of infected items there. Click on Save Report As….
Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
Please post this log in your next reply.

What happens if you try to enable AVG now? Please post a new HijackThis log in your next reply. Also, please give a detailed description of how your computer is running and behaving at the moment, listing any remaining problems.

Thanks.

jfinner1

Post #5October 14, 2008, 11:24 PM UTC

I'm not positive, but I'm pretty sure she doesn't have the disc Symantic anymore, or it came installed on her computer when she bought it, and never had disc. I should be talking to her tonight, and I plan on asking. AVG seems to be running fully functionally now, and I haven't gotten any popups today, so that's good! In fact, I don't seem to be having any problems on here now. Well, other then having to deal with Vista itself.

Anyways, here are the logs you asked for. ========== REGISTRY ========== Unable to delete registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\85925386420872458042664962738194\\ . ========== FILES ========== Folder move failed. C:\Program Files\Antivirus 2009 scheduled to be moved on reboot. File move failed. C:\WINDOWS\AvDetected.ini scheduled to be moved on reboot. ========== COMMANDS ========== OTMoveIt3 by OldTimer - Version 1.0.5.0 log created on 10142008_141656 ——————————————————————————– KASPERSKY ONLINE SCANNER 7 REPORT Tuesday, October 14, 2008 Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Tuesday, October 14, 2008 10:36:49 Records in database: 1310847 ——————————————————————————– Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ Scan statistics: Files scanned: 136911 Threat name: 2 Infected objects: 2 Suspicious objects: 0 Duration of the scan: 01:32:09 File name / Threat name / Threats count C:\Users\HP\AppData\Local\Temp\ropotok.cc Infected: Trojan-Downloader.Win32.Agent.ahqz 1 C:\Users\HP\AppData\Local\Temp\video0.cfg Infected: Trojan-Downloader.Win32.Agent.aifs 1 The selected area was scanned.

jpshortstuff

Post #6October 15, 2008, 5:23 AM UTC

That fix didn't seem to work. Did you see this:

(Note: If you are running on Vista, right-click on the file and choose Run As Administrator).

?

If you did or if you didn't, please run OTMoveIt3 again like that, with the following script:

:Processes
explorer.exe

:Reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\85925386420872458042664962738194]

:Files
C:\Program Files\Antivirus 2009
C:\WINDOWS\AvDetected.ini
C:\Users\HP\AppData\Local\Temp\ropotok.cc
C:\Users\HP\AppData\Local\Temp\video0.cfg

:Commands
[emptytemp]
[Reboot]

Post the log found in:
C:\_OTMoveIt\MovedFiles
along with a new HijackThis log.

Thanks.

jfinner1

Post #7October 17, 2008, 3:37 PM UTC

Oops, must of missed the Run as Admin bit. Sorry it's taken me a few days to reply, I had to go OOT, and I was expecting to have net access… Anyways, I ran that scan again, and I think it worked this time. Also, I ran the HijackThis through the RSIT program again, I hope that was right. Here are the logs.

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\85925386420872458042664962738194\\ deleted successfully.
========== FILES ==========
C:\Program Files\Antivirus 2009 moved successfully.
C:\WINDOWS\AvDetected.ini moved successfully.
C:\Users\HP\AppData\Local\Temp\ropotok.cc moved successfully.
C:\Users\HP\AppData\Local\Temp\video0.cfg moved successfully.
========== COMMANDS ==========
File delete failed. C:\Users\HP\AppData\Local\Temp\Low\~DF901D.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\HP\AppData\Local\Temp\Low\~DF9055.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\HP\AppData\Local\Temp\ehmsas.txt scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.5.0 log created on 10172008_112331

Files moved on Reboot…
File C:\Users\HP\AppData\Local\Temp\Low\~DF901D.tmp not found!
File C:\Users\HP\AppData\Local\Temp\Low\~DF9055.tmp not found!
C:\Users\HP\AppData\Local\Temp\ehmsas.txt moved successfully.

Logfile of random's system information tool 1.04 (written by random/random)
Run by [removed] at 2008-10-17 11:30:10
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 203 GB (88%) free of 230 GB
Total RAM: 2038 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:30:29 AM, on 10/17/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
C:\Users\HP\Desktop\RSIT.exe
C:\Program Files\trend micro\HP.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…n&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…n&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…n&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [PhilipsDM] C:\Program Files\Philips\SA44xx\Philips Device Manager\Bin\LaunchDM.exe OS_STARTUP
O4 - HKLM\..\Run: [LanzarP2006] "C:\Users\HP\AppData\Local\Temp\P2006tmp\Install.exe" /SETUP:"/l0x0009"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

–
End of file - 9607 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{392E2BD4-B2A7-41BB-A5FE-405C31DB16EB}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-01-12 96936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-10-12 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-08-16 501384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{90222687-F593-4738-B738-FBEE9C7B26DF} - Show Norton Toolbar - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-01-12 607888]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2007-03-11 159744]
"ccApp"=c:\Program Files\Common Files\Symantec Shared\ccApp.exe [2007-01-10 115816]
"IS CfgWiz"=c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe [2007-01-13 431752]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-04-04 138008]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-04-04 154392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-04-04 133912]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-02-12 174872]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-04-23 176128]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-02-13 159744]
"HP Health Check Scheduler"=C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2007-03-12 50696]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-03-01 472776]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-10 317128]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-17 49152]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0\bin\jusched.exe [2007-08-16 77824]
"PhilipsDM"=C:\Program Files\Philips\SA44xx\Philips Device Manager\Bin\LaunchDM.exe [2007-08-11 40960]
"LanzarP2006"=C:\Users\HP\AppData\Local\Temp\P2006tmp\Install.exe /SETUP:/l0x0009 []
"MSConfig"=C:\Windows\system32\msconfig.exe [2008-01-19 227840]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-10-12 1234712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-03-30 204800]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2008-10-14 14:27:46 —-D—- C:\Windows\Sun
2008-10-14 14:16:56 —-D—- C:\_OTMoveIt
2008-10-14 14:16:49 —-A—- C:\Windows\system32\ntkrnlpa.exe
2008-10-14 14:16:48 —-A—- C:\Windows\system32\ntoskrnl.exe
2008-10-14 14:16:45 —-A—- C:\Windows\system32\mshtml.dll
2008-10-14 14:16:44 —-A—- C:\Windows\system32\wininet.dll
2008-10-14 14:16:44 —-A—- C:\Windows\system32\urlmon.dll
2008-10-14 14:16:44 —-A—- C:\Windows\system32\iertutil.dll
2008-10-14 14:16:44 —-A—- C:\Windows\system32\ieframe.dll
2008-10-14 14:16:43 —-A—- C:\Windows\system32\mstime.dll
2008-10-14 14:16:43 —-A—- C:\Windows\system32\jsproxy.dll
2008-10-14 03:01:16 —-A—- C:\Windows\system32\msshooks.dll
2008-10-14 03:01:16 —-A—- C:\Windows\system32\msscb.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\thawbrkr.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\srchadmin.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\SearchFilterHost.exe
2008-10-14 03:01:15 —-A—- C:\Windows\system32\propsys.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\propdefs.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\msstrc.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\mssprxy.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\mssitlb.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\msshsq.dll
2008-10-14 03:01:15 —-A—- C:\Windows\system32\korwbrkr.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\xmlfilter.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\wsepno.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\rtffilt.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\offfilt.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\nlhtml.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\msscntrs.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\mimefilt.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\chtbrkr.dll
2008-10-14 03:01:14 —-A—- C:\Windows\system32\chsbrkr.dll
2008-10-14 03:01:12 —-A—- C:\Windows\system32\tquery.dll
2008-10-14 03:01:12 —-A—- C:\Windows\system32\SearchProtocolHost.exe
2008-10-14 03:01:12 —-A—- C:\Windows\system32\SearchIndexer.exe
2008-10-14 03:01:12 —-A—- C:\Windows\system32\mssvp.dll
2008-10-14 03:01:12 —-A—- C:\Windows\system32\mssrch.dll
2008-10-14 03:01:12 —-A—- C:\Windows\system32\mssphtb.dll
2008-10-14 03:01:12 —-A—- C:\Windows\system32\mssph.dll
2008-10-13 19:55:16 —-D—- C:\rsit
2008-10-13 19:54:18 —-A—- C:\Windows\system32\rpcrt4.dll
2008-10-13 19:54:17 —-A—- C:\Windows\system32\pacerprf.dll
2008-10-13 19:54:15 —-A—- C:\Windows\system32\emdmgmt.dll
2008-10-13 19:54:15 —-A—- C:\Windows\system32\dataclen.dll
2008-10-13 19:54:15 —-A—- C:\Windows\system32\cdd.dll
2008-10-13 19:54:14 —-A—- C:\Windows\system32\wshext.dll
2008-10-13 19:54:14 —-A—- C:\Windows\system32\wscript.exe
2008-10-13 19:54:14 —-A—- C:\Windows\system32\vbscript.dll
2008-10-13 19:54:14 —-A—- C:\Windows\system32\scrrun.dll
2008-10-13 19:54:14 —-A—- C:\Windows\system32\scrobj.dll
2008-10-13 19:54:14 —-A—- C:\Windows\system32\jscript.dll
2008-10-13 19:54:14 —-A—- C:\Windows\system32\cscript.exe
2008-10-12 23:10:27 —-D—- C:\Program Files\Hijackthis
2008-10-12 23:01:57 —-D—- C:\Windows\ERDNT
2008-10-12 23:00:58 —-D—- C:\Program Files\ERUNT
2008-10-12 21:59:51 —-HD—- C:\$AVG8.VAULT$
2008-10-12 21:55:52 —-A—- C:\Windows\system32\avgrsstx.dll
2008-10-12 21:55:40 —-D—- C:\Program Files\AVG
2008-10-12 21:55:39 —-D—- C:\ProgramData\avg8
2008-10-12 21:27:55 —-D—- C:\PerfLogs
2008-10-01 08:02:04 —-A—- C:\Windows\system32\SLsvc.exe
2008-10-01 08:02:04 —-A—- C:\Windows\system32\onex.dll
2008-10-01 08:01:54 —-A—- C:\Windows\system32\PSHED.DLL
2008-10-01 08:01:53 —-A—- C:\Windows\system32\imagesp1.dll
2008-10-01 08:01:51 —-A—- C:\Windows\system32\pidgenx.dll
2008-10-01 08:01:51 —-A—- C:\Windows\system32\dfsr.exe
2008-10-01 08:01:50 —-A—- C:\Windows\system32\sstpsvc.dll
2008-10-01 08:01:50 —-A—- C:\Windows\system32\mstscax.dll
2008-10-01 08:01:48 —-A—- C:\Windows\system32\WsmSvc.dll
2008-10-01 08:01:48 —-A—- C:\Windows\system32\winrscmd.dll
2008-10-01 08:01:48 —-A—- C:\Windows\system32\sysmain.dll
2008-10-01 08:01:47 —-A—- C:\Windows\system32\VSSVC.exe
2008-10-01 08:01:47 —-A—- C:\Windows\system32\vssapi.dll
2008-10-01 08:01:47 —-A—- C:\Windows\system32\RMActivate.exe
2008-10-01 08:01:46 —-A—- C:\Windows\system32\secproc.dll
2008-10-01 08:01:46 —-A—- C:\Windows\system32\RMActivate_isv.exe
2008-10-01 08:01:46 —-A—- C:\Windows\system32\PresentationNative_v0300.dll
2008-10-01 08:01:46 —-A—- C:\Windows\system32\iesetup.dll
2008-10-01 08:01:44 —-A—- C:\Windows\system32\secproc_isv.dll
2008-10-01 08:01:42 —-A—- C:\Windows\system32\icardres.dll
2008-10-01 08:01:42 —-A—- C:\Windows\system32\icardagt.exe
2008-10-01 08:01:42 —-A—- C:\Windows\system32\drmv2clt.dll
2008-10-01 08:01:41 —-A—- C:\Windows\system32\xpssvcs.dll
2008-10-01 08:01:41 —-A—- C:\Windows\system32\blackbox.dll
2008-10-01 08:01:40 —-A—- C:\Windows\system32\RMActivate_ssp.exe
2008-10-01 08:01:40 —-A—- C:\Windows\system32\RacEngn.dll
2008-10-01 08:01:39 —-A—- C:\Windows\system32\spwizimg.dll
2008-10-01 08:01:39 —-A—- C:\Windows\system32\RMActivate_ssp_isv.exe
2008-10-01 08:01:39 —-A—- C:\Windows\system32\rdpencom.dll
2008-10-01 08:01:39 —-A—- C:\Windows\system32\MSMPEG2VDEC.DLL
2008-10-01 08:01:38 —-A—- C:\Windows\system32\msxml6.dll
2008-10-01 08:01:38 —-A—- C:\Windows\system32\msxml3.dll
2008-10-01 08:01:38 —-A—- C:\Windows\system32\lpremove.exe
2008-10-01 08:01:38 —-A—- C:\Windows\bfsvc.exe
2008-10-01 08:01:37 —-A—- C:\Windows\system32\qmgr.dll
2008-10-01 08:01:37 —-A—- C:\Windows\system32\ntdll.dll
2008-10-01 08:01:37 —-A—- C:\Windows\system32\msjet40.dll
2008-10-01 08:01:37 —-A—- C:\Windows\system32\lsasrv.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\wevtsvc.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\wcncsvc.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\localspl.dll
2008-10-01 08:01:36 —-A—- C:\Windows\system32\IKEEXT.DLL
2008-10-01 08:01:35 —-A—- C:\Windows\system32\TsWpfWrp.exe
2008-10-01 08:01:35 —-A—- C:\Windows\system32\recdisc.exe
2008-10-01 08:01:35 —-A—- C:\Windows\system32\mscoree.dll
2008-10-01 08:01:35 —-A—- C:\Windows\system32\kernel32.dll
2008-10-01 08:01:34 —-A—- C:\Windows\system32\vds.exe
2008-10-01 08:01:34 —-A—- C:\Windows\system32\CompMgmtLauncher.exe
2008-10-01 08:01:31 —-A—- C:\Windows\system32\wmp.dll
2008-10-01 08:01:31 —-A—- C:\Windows\system32\mstsc.exe
2008-10-01 08:01:30 —-A—- C:\Windows\system32\wcnwiz.dll
2008-10-01 08:01:30 —-A—- C:\Windows\system32\SMBHelperClass.dll
2008-10-01 08:01:30 —-A—- C:\Windows\system32\msvbvm60.dll
2008-10-01 08:01:30 —-A—- C:\Windows\system32\mf.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\termsrv.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\msdtctm.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\kerberos.dll
2008-10-01 08:01:29 —-A—- C:\Windows\system32\IMJP10K.DLL
2008-10-01 08:01:29 —-A—- C:\Windows\system32\advapi32.dll
2008-10-01 08:01:28 —-A—- C:\Windows\system32\MSMPEG2ADEC.DLL
2008-10-01 08:01:28 —-A—- C:\Windows\system32\mmcndmgr.dll
2008-10-01 08:01:28 —-A—- C:\Windows\system32\CertEnroll.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\xolehlp.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\Query.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\ole32.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\msdtcprx.dll
2008-10-01 08:01:27 —-A—- C:\Windows\system32\MPSSVC.dll
2008-10-01 08:01:26 —-A—- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2008-10-01 08:01:26 —-A—- C:\Windows\system32\netlogon.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\SSShim.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\schedsvc.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\nlmgp.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\msvcrt.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\mcupdate_GenuineIntel.dll
2008-10-01 08:01:25 —-A—- C:\Windows\system32\DfsShlEx.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\wer.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\user32.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\shlwapi.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\sdclt.exe
2008-10-01 08:01:24 —-A—- C:\Windows\system32\printfilterpipelinesvc.exe
2008-10-01 08:01:24 —-A—- C:\Windows\system32\milcore.dll
2008-10-01 08:01:24 —-A—- C:\Windows\system32\IasMigPlugin.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\WSDApi.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\vdsdyn.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\QAGENTRT.DLL
2008-10-01 08:01:23 —-A—- C:\Windows\system32\diagperf.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\d3d9.dll
2008-10-01 08:01:23 —-A—- C:\Windows\system32\clusapi.dll
2008-10-01 08:01:22 —-A—- C:\Windows\system32\winrsmgr.dll
2008-10-01 08:01:22 —-A—- C:\Windows\system32\mmc.exe
2008-10-01 08:01:21 —-A—- C:\Windows\system32\vdsbas.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\swprv.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\SLC.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\mtxclu.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\msi.dll
2008-10-01 08:01:21 —-A—- C:\Windows\system32\comctl32.dll
2008-10-01 08:01:20 —-A—- C:\Windows\system32\MSVidCtl.dll
2008-10-01 08:01:20 —-A—- C:\Windows\system32\gpsvc.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\XPSSHHDR.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\sbe.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\samsrv.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\msdtckrm.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\mfc42u.dll
2008-10-01 08:01:19 —-A—- C:\Windows\system32\FWPUCLNT.DLL
2008-10-01 08:01:19 —-A—- C:\Windows\system32\esent.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\wecutil.exe
2008-10-01 08:01:18 —-A—- C:\Windows\system32\usp10.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\sdengin2.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\mfc42.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\gacinstall.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\cmipnpinstall.dll
2008-10-01 08:01:18 —-A—- C:\Windows\system32\cmicryptinstall.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\WSManMigrationPlugin.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\mswsock.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\crypt32.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\comsvcs.dll
2008-10-01 08:01:17 —-A—- C:\Windows\system32\certutil.exe
2008-10-01 08:01:16 —-A—- C:\Windows\system32\wmdrmsdk.dll
2008-10-01 08:01:16 —-A—- C:\Windows\system32\setupapi.dll
2008-10-01 08:01:16 —-A—- C:\Windows\system32\oleaut32.dll
2008-10-01 08:01:16 —-A—- C:\Windows\system32\FirewallAPI.dll
2008-10-01 08:01:16 —-A—- C:\Windows\explorer.exe
2008-10-01 08:01:15 —-A—- C:\Windows\system32\wecsvc.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\sqlceqp30.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\sdohlp.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\schannel.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\msv1_0.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\lsm.exe
2008-10-01 08:01:15 —-A—- C:\Windows\system32\iphlpsvc.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\bcrypt.dll
2008-10-01 08:01:15 —-A—- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\wmpmde.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\thumbcache.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\p2psvc.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\netapi32.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\mcmde.dll
2008-10-01 08:01:14 —-A—- C:\Windows\system32\eapp3hst.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\WinSAT.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\vdsutil.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\riched20.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\imapi2fs.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\d3d10_1.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\autofmt.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\autoconv.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\autochk.exe
2008-10-01 08:01:13 —-A—- C:\Windows\system32\authui.dll
2008-10-01 08:01:13 —-A—- C:\Windows\system32\authfwcfg.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\wevtapi.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\dmvdsitf.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\d3d10_1core.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\comdlg32.dll
2008-10-01 08:01:12 —-A—- C:\Windows\system32\browseui.dll
2008-10-01 08:01:11 —-A—- C:\Windows\system32\comuid.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\WSDMon.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\wevtfwd.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\mscories.dll
2008-10-01 08:01:10 —-A—- C:\Windows\system32\eapphost.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\wlansvc.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\whealogr.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\untfs.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\uexfat.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\sqlcese30.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\rasmans.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\pcaui.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\iassam.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\eappcfg.dll
2008-10-01 08:01:09 —-A—- C:\Windows\system32\DfrgNtfs.exe
2008-10-01 08:01:08 —-A—- C:\Windows\system32\dot3svc.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\zipfldr.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\winhttp.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\rdpwsx.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\mssha.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\msdrm.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\evr.dll
2008-10-01 08:01:06 —-A—- C:\Windows\system32\dfrgui.exe
2008-10-01 08:01:05 —-A—- C:\Windows\system32\WsmAuto.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\rpcss.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\rasppp.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\nlasvc.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\ncrypt.dll
2008-10-01 08:01:05 —-A—- C:\Windows\system32\BFE.DLL
2008-10-01 08:01:05 —-A—- C:\Windows\system32\audiosrv.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\WsmWmiPl.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\WMVCORE.DLL
2008-10-01 08:01:04 —-A—- C:\Windows\system32\wmdrmdev.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\win32spl.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\rastls.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\printui.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\msrepl40.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\dhcpcsvc6.dll
2008-10-01 08:01:04 —-A—- C:\Windows\system32\ddraw.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\WebClnt.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\themecpl.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\sqlsrv32.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\QAGENT.DLL
2008-10-01 08:01:03 —-A—- C:\Windows\system32\objsel.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\iasnap.dll
2008-10-01 08:01:03 —-A—- C:\Windows\system32\dbghelp.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\wmdrmnet.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\WerFaultSecure.exe
2008-10-01 08:01:02 —-A—- C:\Windows\system32\w32time.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\spoolss.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\PresentationHost.exe
2008-10-01 08:01:02 —-A—- C:\Windows\system32\ncryptui.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\iprtrmgr.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\icm32.dll
2008-10-01 08:01:02 —-A—- C:\Windows\system32\azroles.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\wlangpui.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\winsrv.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\taskschd.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\msctf.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\infocardapi.dll
2008-10-01 08:01:01 —-A—- C:\Windows\system32\bcdedit.exe
2008-10-01 08:01:01 —-A—- C:\Windows\system32\basecsp.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\winsta.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\scksp.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\rsaenh.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\netprofm.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\netcfgx.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\mstlsapi.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\hcrstco.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\dbgeng.dll
2008-10-01 08:01:00 —-A—- C:\Windows\system32\AudioEng.dll
2008-10-01 08:00:59 —-A—- C:\Windows\system32\winlogon.exe
2008-10-01 08:00:59 —-A—- C:\Windows\system32\wercon.exe
2008-10-01 08:00:59 —-A—- C:\Windows\system32\taskcomp.dll
2008-10-01 08:00:59 —-A—- C:\Windows\system32\lpksetup.exe
2008-10-01 08:00:59 —-A—- C:\Windows\system32\cdosys.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\wlansec.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\sqmapi.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\msdtcuiu.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\mprddm.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\dfshim.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\certcli.dll
2008-10-01 08:00:58 —-A—- C:\Windows\system32\apds.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\tsgqec.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\shdocvw.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\iasrad.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\eapsvc.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\AUDIOKSE.dll
2008-10-01 08:00:57 —-A—- C:\Windows\system32\aaclient.dll
2008-10-01 08:00:56 —-A—- C:\Windows\system32\uDWM.dll
2008-10-01 08:00:56 —-A—- C:\Windows\system32\certmgr.dll
2008-10-01 08:00:56 —-A—- C:\Windows\system32\bcdsrv.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\WMVDECOD.DLL
2008-10-01 08:00:54 —-A—- C:\Windows\system32\Wldap32.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\umpnpmgr.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\msidcrl30.dll
2008-10-01 08:00:54 —-A—- C:\Windows\system32\dnsapi.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\pla.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\netshell.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\dxgi.dll
2008-10-01 08:00:53 —-A—- C:\Windows\system32\dot3gpui.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\wmicmiplugin.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\shsvcs.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\ntprint.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\MMDevAPI.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\cryptnet.dll
2008-10-01 08:00:52 —-A—- C:\Windows\system32\comsnap.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\wscsvc.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\winmm.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\synceng.dll
2008-10-01 08:00:51 —-A—- C:\Windows\system32\services.exe
2008-10-01 08:00:50 —-A—- C:\Windows\system32\wscisvif.dll
2008-10-01 08:00:50 —-A—- C:\Windows\system32\taskeng.exe
2008-10-01 08:00:50 —-A—- C:\Windows\system32\pnidui.dll
2008-10-01 08:00:50 —-A—- C:\Windows\system32\msconfig.exe
2008-10-01 08:00:50 —-A—- C:\Windows\system32\cmifw.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\WMVSDECD.DLL
2008-10-01 08:00:49 —-A—- C:\Windows\system32\tdh.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\rasapi32.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\msjtes40.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\imapi2.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\iassdo.dll
2008-10-01 08:00:49 —-A—- C:\Windows\system32\cipher.exe
2008-10-01 08:00:48 —-A—- C:\Windows\system32\wersvc.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\uxtheme.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\SessEnv.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\dot3api.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\dmdskmgr.dll
2008-10-01 08:00:48 —-A—- C:\Windows\system32\cmd.exe
2008-10-01 08:00:48 —-A—- C:\Windows\system32\cbsra.exe
2008-10-01 08:00:48 —-A—- C:\Windows\system32\AuthFWSnapin.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\WUDFx.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wlanmsm.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wlancfg.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wkssvc.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\wevtutil.exe
2008-10-01 08:00:47 —-A—- C:\Windows\system32\srvsvc.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\qdvd.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\msscp.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\msdtcVSp1res.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\loadperf.dll
2008-10-01 08:00:47 —-A—- C:\Windows\system32\comres.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\wlanapi.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\WinSATAPI.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\rpchttp.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\rdpdd.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\mshtmled.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\localsec.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\hnetcfg.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\fontext.dll
2008-10-01 08:00:46 —-A—- C:\Windows\system32\diskpart.exe
2008-10-01 08:00:45 —-A—- C:\Windows\system32\wsqmcons.exe
2008-10-01 08:00:45 —-A—- C:\Windows\system32\WMADMOD.DLL
2008-10-01 08:00:45 —-A—- C:\Windows\system32\wlanpref.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\WindowsCodecs.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\RDPENCDD.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\profprov.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\NAPMONTR.DLL
2008-10-01 08:00:45 —-A—- C:\Windows\system32\filemgmt.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\dsound.dll
2008-10-01 08:00:45 —-A—- C:\Windows\system32\avifil32.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\wsecedit.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\tracerpt.exe
2008-10-01 08:00:44 —-A—- C:\Windows\system32\SmartcardCredentialProvider.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\SLCommDlg.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\PresentationHostProxy.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\P2PGraph.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\MuiUnattend.exe
2008-10-01 08:00:44 —-A—- C:\Windows\system32\dwmredir.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\dnsrslvr.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\dhcpcsvc.dll
2008-10-01 08:00:44 —-A—- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\WMSPDMOD.DLL
2008-10-01 08:00:43 —-A—- C:\Windows\system32\wininit.exe
2008-10-01 08:00:43 —-A—- C:\Windows\system32\spp.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\rasdlg.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\QSHVHOST.DLL
2008-10-01 08:00:43 —-A—- C:\Windows\system32\iassvcs.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\gpresult.exe
2008-10-01 08:00:43 —-A—- C:\Windows\system32\dwm.exe
2008-10-01 08:00:43 —-A—- C:\Windows\system32\azroleui.dll
2008-10-01 08:00:43 —-A—- C:\Windows\system32\apphelp.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\srrstr.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\spwizeng.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\SLUI.exe
2008-10-01 08:00:42 —-A—- C:\Windows\system32\rasmontr.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\PortableDeviceApi.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\mscorier.dll
2008-10-01 08:00:42 —-A—- C:\Windows\system32\mcbuilder.exe
2008-10-01 08:00:42 —-A—- C:\Windows\system32\iashost.exe
2008-10-01 08:00:42 —-A—- C:\Windows\HelpPane.exe
2008-10-01 08:00:41 —-A—- C:\Windows\system32\wecapi.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\unbcl.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\tcpmon.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\shrink.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\msra.exe
2008-10-01 08:00:41 —-A—- C:\Windows\system32\lltdsvc.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\IPHLPAPI.DLL
2008-10-01 08:00:41 —-A—- C:\Windows\system32\gpedit.dll
2008-10-01 08:00:41 —-A—- C:\Windows\system32\brcpl.dll
2008-10-01 08:00:40 —-A—- C:\Windows\system32\WMPEncEn.dll
2008-10-01 08:00:40 —-A—- C:\Windows\system32\iashlpr.dll
2008-10-01 08:00:39 —-A—- C:\Windows\system32\oleacc.dll
2008-10-01 08:00:39 —-A—- C:\Windows\system32\msdri.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\vsstrace.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\regsvc.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\raschap.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\PerfCenterCPL.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\ntvdm.exe
2008-10-01 08:00:38 —-A—- C:\Windows\system32\ipsmsnap.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\framedynos.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\fdWSD.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\Faultrep.dll
2008-10-01 08:00:38 —-A—- C:\Windows\system32\advpack.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\wpdshext.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\wdc.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\Storprop.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\ntlanman.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\NetProjW.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\netman.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\l2nacp.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\iedkcs32.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\framedyn.dll
2008-10-01 08:00:37 —-A—- C:\Windows\system32\dssenh.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\WlanMM.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\tcpipcfg.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\sxs.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\profsvc.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\KMSVC.DLL
2008-10-01 08:00:36 —-A—- C:\Windows\system32\ieapfltr.dll
2008-10-01 08:00:36 —-A—- C:\Windows\system32\certreq.exe
2008-10-01 08:00:36 —-A—- C:\Windows\system32\adsnt.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\wusa.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WUDFHost.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WsmProv.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\wlanhlp.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WLanConn.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\WerFault.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\VAN.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\userenv.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\umb.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\PhotoMetadataHandler.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\ncsi.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\IPBusEnum.dll
2008-10-01 08:00:35 —-A—- C:\Windows\system32\ie4uinit.exe
2008-10-01 08:00:35 —-A—- C:\Windows\system32\fundisc.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\puiobj.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\photowiz.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\netid.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\MdSched.exe
2008-10-01 08:00:34 —-A—- C:\Windows\system32\InkEd.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\dps.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\cryptui.dll
2008-10-01 08:00:34 —-A—- C:\Windows\system32\catsrvut.dll
2008-10-01 08:00:33 —-A—- C:\Windows\system32\netcenter.dll
2008-10-01 08:00:33 —-A—- C:\Windows\system32\ipsecsnp.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\ws2_32.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\WinSCard.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\winrs.exe
2008-10-01 08:00:32 —-A—- C:\Windows\system32\spbcd.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\secur32.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\odbcjt32.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\ntdsapi.dll
2008-10-01 08:00:32 —-A—- C:\Windows\system32\NAPSTAT.EXE
2008-10-01 08:00:32 —-A—- C:\Windows\system32\msinfo32.exe
2008-10-01 08:00:31 —-A—- C:\Windows\system32\RelMon.dll
2008-10-01 08:00:31 —-A—- C:\Windows\system32\prnntfy.dll
2008-10-01 08:00:31 —-A—- C:\Windows\system32\msfeeds.dll
2008-10-01 08:00:31 —-A—- C:\Windows\system32\mblctr.exe
2008-10-01 08:00:31 —-A—- C:\Windows\system32\cryptsvc.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\TSpkg.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\schtasks.exe
2008-10-01 08:00:30 —-A—- C:\Windows\system32\pdh.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\netdiagfx.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\iasacct.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\FirewallControlPanel.exe
2008-10-01 08:00:30 —-A—- C:\Windows\system32\dmdlgs.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\dhcpsapi.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\dfrgfat.exe
2008-10-01 08:00:30 —-A—- C:\Windows\system32\catsrv.dll
2008-10-01 08:00:30 —-A—- C:\Windows\system32\activeds.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\wvc.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\winrm.vbs
2008-10-01 08:00:29 —-A—- C:\Windows\system32\rastapi.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\qwave.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\netcorehc.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\NAPHLPR.DLL
2008-10-01 08:00:29 —-A—- C:\Windows\system32\MSMPEG2ENC.DLL
2008-10-01 08:00:29 —-A—- C:\Windows\system32\msacm32.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\ifmon.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\fdWCN.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\dot3msm.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\dot3cfg.dll
2008-10-01 08:00:29 —-A—- C:\Windows\system32\AudioSes.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\wow32.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\shsetup.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\els.dll
2008-10-01 08:00:28 —-A—- C:\Windows\system32\adsldp.dll
2008-10-01 08:00:27 —-A—- C:\Windows\system32\ntshrui.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\wscntfy.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\WMNetMgr.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\stobject.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\sdrsvc.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\QUTIL.DLL
2008-10-01 08:00:26 —-A—- C:\Windows\system32\msdt.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\iasrecst.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\iasdatastore.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\fdSSDP.dll
2008-10-01 08:00:26 —-A—- C:\Windows\system32\clbcatq.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\wlgpclnt.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\wlanui.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\smss.exe
2008-10-01 08:00:25 —-A—- C:\Windows\system32\net1.exe
2008-10-01 08:00:25 —-A—- C:\Windows\system32\nci.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\ipnathlp.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\dsprop.dll
2008-10-01 08:00:25 —-A—- C:\Windows\system32\Defrag.exe
2008-10-01 08:00:25 —-A—- C:\Windows\system32\adsldpc.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\upnphost.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\systemcpl.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\rasman.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\rascfg.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\PresentationSettings.exe
2008-10-01 08:00:24 —-A—- C:\Windows\system32\P2P.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\msftedit.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\MSAC3ENC.DLL
2008-10-01 08:00:24 —-A—- C:\Windows\system32\mprmsg.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\loghours.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\fde.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\CompatUI.dll
2008-10-01 08:00:24 —-A—- C:\Windows\system32\ActiveContentWizard.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\Wpc.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\t2embed.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\oleprn.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\MigAutoPlay.exe
2008-10-01 08:00:23 —-A—- C:\Windows\system32\L2SecHC.dll
2008-10-01 08:00:23 —-A—- C:\Windows\system32\dxdiag.exe
2008-10-01 08:00:23 —-A—- C:\Windows\system32\DFDWiz.exe
2008-10-01 08:00:22 —-A—- C:\Windows\system32\wdigest.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\setupcl.exe
2008-10-01 08:00:22 —-A—- C:\Windows\system32\rtm.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\msutb.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\mprdim.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\gpapi.dll
2008-10-01 08:00:22 —-A—- C:\Windows\system32\AuxiliaryDisplayServices.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\wiaservc.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\scansetting.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\NAPCRYPT.DLL
2008-10-01 08:00:21 —-A—- C:\Windows\system32\msihnd.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\ifsutil.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\devmgr.dll
2008-10-01 08:00:21 —-A—- C:\Windows\system32\CertEnrollUI.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\wscapi.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\WinFXDocObj.exe
2008-10-01 08:00:20 —-A—- C:\Windows\system32\wdi.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\usbmon.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\SyncCenter.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\spoolsv.exe
2008-10-01 08:00:20 —-A—- C:\Windows\system32\mswmdm.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\kdusb.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\imagehlp.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\dimsroam.dll
2008-10-01 08:00:20 —-A—- C:\Windows\system32\BOOTVID.DLL
2008-10-01 08:00:20 —-A—- C:\Windows\system32\audiodg.exe
2008-10-01 08:00:20 —-A—- C:\Windows\system32\actxprxy.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\wlandlg.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\vssadmin.exe
2008-10-01 08:00:19 —-A—- C:\Windows\system32\uudf.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\scecli.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\regapi.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\PortableDeviceWMDRM.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\mycomput.dll
2008-10-01 08:00:19 —-A—- C:\Windows\system32\mspaint.exe
2008-10-01 08:00:19 —-A—- C:\Windows\system32\msls31.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\termmgr.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\sud.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\ssdpsrv.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\SCardSvr.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\samlib.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\puiapi.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\newdev.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\mstask.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\kdcom.dll
2008-10-01 08:00:18 —-A—- C:\Windows\system32\duser.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\wisptis.exe
2008-10-01 08:00:17 —-A—- C:\Windows\system32\tapisrv.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\SLUINotify.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\Robocopy.exe
2008-10-01 08:00:17 —-A—- C:\Windows\system32\mtxoci.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\input.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\inetpp.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\iasads.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\cic.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\AzSqlExt.dll
2008-10-01 08:00:17 —-A—- C:\Windows\system32\adtschema.dll
2008-10-01 08:00:16 —-A—- C:\Windows\system32\cscapi.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\WUDFPlatform.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\verifier.exe
2008-10-01 08:00:15 —-A—- C:\Windows\system32\sdshext.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\PortableDeviceTypes.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\netiohlp.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\msdtclog.dll
2008-10-01 08:00:15 —-A—- C:\Windows\system32\msdt.exe
2008-10-01 08:00:15 —-A—- C:\Windows\system32\authz.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\wpcsvc.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\wintrust.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\webcheck.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\themeui.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\slcinst.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\PortableDeviceClassExtension.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\oledlg.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\dxtmsft.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\d3d8.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\cmdial32.dll
2008-10-01 08:00:14 —-A—- C:\Windows\system32\clfsw32.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\wpccpl.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\WMPhoto.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\vdsldr.exe
2008-10-01 08:00:13 —-A—- C:\Windows\system32\SnippingTool.exe
2008-10-01 08:00:13 —-A—- C:\Windows\system32\SndVol.exe
2008-10-01 08:00:13 —-A—- C:\Windows\system32\rasgcw.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\pnpsetup.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\ntmarta.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\mmcbase.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\mlang.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\icfupgd.dll
2008-10-01 08:00:13 —-A—- C:\Windows\system32\icardie.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\wtsapi32.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\wpd_ci.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\unlodctr.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\syssetup.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\slmgr.vbs
2008-10-01 08:00:12 —-A—- C:\Windows\system32\rasqec.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\nslookup.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\ncobjapi.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\msrd3x40.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\msaatext.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\mpr.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\lodctr.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\extmgr.dll
2008-10-01 08:00:12 —-A—- C:\Windows\system32\diskraid.exe
2008-10-01 08:00:12 —-A—- C:\Windows\system32\accessibilitycpl.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\Utilman.exe
2008-10-01 08:00:11 —-A—- C:\Windows\system32\ulib.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\sethc.exe
2008-10-01 08:00:11 —-A—- C:\Windows\system32\pnpui.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\oobefldr.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\mscms.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\Mcx2Svc.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\iaspolcy.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\fontsub.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\dxdiagn.dll
2008-10-01 08:00:11 —-A—- C:\Windows\system32\cabinet.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\WSManHTTPConfig.exe
2008-10-01 08:00:10 —-A—- C:\Windows\system32\wermgr.exe
2008-10-01 08:00:10 —-A—- C:\Windows\system32\unattend.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\trkwks.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\scesrv.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\ogldrv.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\occache.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\lnkstub.exe
2008-10-01 08:00:10 —-A—- C:\Windows\system32\dfdts.dll
2008-10-01 08:00:10 —-A—- C:\Windows\system32\cabview.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\wpcao.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\printfilterpipelineprxy.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\p2pcollab.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\msnetobj.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\iepeers.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\ieaksie.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\eappgnui.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\DHCPQEC.DLL
2008-10-01 08:00:09 —-A—- C:\Windows\system32\bthci.dll
2008-10-01 08:00:09 —-A—- C:\Windows\system32\basesrv.dll
2008-10-01 08:00:08 —-A—- C:\Windows\system32\mmcss.dll
2008-10-01 08:00:08 —-A—- C:\Windows\system32\dsquery.dll
2008-10-01 08:00:08 —-A—- C:\Windows\system32\drvinst.exe
2008-10-01 08:00:08 —-A—- C:\Windows\system32\dispdiag.exe
2008-10-01 08:00:07 —-A—- C:\Windows\system32\verifier.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\secproc_ssp_isv.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\secproc_ssp.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\RstrtMgr.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\mprapi.dll
2008-10-01 08:00:07 —-A—- C:\Windows\system32\efsadu.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\WPDSp.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\WPDShServiceObj.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\WMVENCOD.DLL
2008-10-01 08:00:06 —-A—- C:\Windows\system32\wercplsupport.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\qedit.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\msoeacct.dll
2008-10-01 08:00:06 —-A—- C:\Windows\system32\d3d10core.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\wiascanprofiles.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\wiaaut.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\usercpl.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\setupugc.exe
2008-10-01 08:00:05 —-A—- C:\Windows\system32\QSVRMGMT.DLL
2008-10-01 08:00:05 —-A—- C:\Windows\system32\pnrpnsp.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\pngfilt.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\p2pnetsh.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\networkmap.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\msrdc.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\msdmo.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\iscsiexe.dll
2008-10-01 08:00:05 —-A—- C:\Windows\system32\icacls.exe
2008-10-01 08:00:05 —-A—- C:\Windows\system32\consent.exe
2008-10-01 08:00:05 —-A—- C:\Windows\system32\conime.exe
2008-10-01 08:00:04 —-A—- C:\Windows\system32\xactsrv.dll
2008-10-01 08:00:04 —-A—- C:\Windows\system32\PNPXAssocPrx.dll
2008-10-01 08:00:04 —-A—- C:\Windows\system32\lsass.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\xwizards.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\systeminfo.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\PNPXAssoc.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\pcadm.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\netcfg.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\msrating.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\mfplat.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\lpk.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\findstr.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\eappprxy.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\drmmgrtn.dll
2008-10-01 08:00:03 —-A—- C:\Windows\system32\dpapimig.exe
2008-10-01 08:00:03 —-A—- C:\Windows\system32\autoplay.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\resutils.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\powercpl.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\netprof.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\MFWMAAEC.DLL
2008-10-01 08:00:02 —-A—- C:\Windows\system32\DWWIN.EXE
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dssec.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dot3ui.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dfrgifc.exe
2008-10-01 08:00:02 —-A—- C:\Windows\system32\dbnetlib.dll
2008-10-01 08:00:02 —-A—- C:\Windows\system32\cmdl32.exe
2008-10-01 08:00:02 —-A—- C:\Windows\system32\alg.exe
2008-10-01 08:00:01 —-A—- C:\Windows\system32\txflog.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\odbc32.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\nshhttp.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\imm32.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\feclient.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\btpanui.dll
2008-10-01 08:00:01 —-A—- C:\Windows\system32\apircl.dll
2008-10-01 08:00:01 —-A—- C:\Windows\regedit.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\tbssvc.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\taskkill.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\svchost.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\RASMM.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\provthrd.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\msieftp.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\MediaMetadataHandler.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\iexpress.exe
2008-10-01 08:00:00 —-A—- C:\Windows\system32\dxva2.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\dwmapi.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\d3d10.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\bcdprov.dll
2008-10-01 08:00:00 —-A—- C:\Windows\system32\ActionQueue.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\syncui.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\slwmi.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\SLCExt.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\slcc.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\shwebsvc.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\raserver.exe
2008-10-01 07:59:59 —-A—- C:\Windows\system32\olepro32.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\networkexplorer.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\EAPQEC.DLL
2008-10-01 07:59:59 —-A—- C:\Windows\system32\dmocx.dll
2008-10-01 07:59:59 —-A—- C:\Windows\system32\aclui.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\xcopy.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\WMASF.DLL
2008-10-01 07:59:58 —-A—- C:\Windows\system32\uxsms.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\UIHub.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\taskmgr.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\QCLIPROV.DLL
2008-10-01 07:59:58 —-A—- C:\Windows\system32\PnPUnattend.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\ias.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\dnscacheugc.exe
2008-10-01 07:59:58 —-A—- C:\Windows\system32\connect.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\brcplsdw.dll
2008-10-01 07:59:58 —-A—- C:\Windows\system32\audiodev.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\wlanext.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\upnp.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\reg.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\perfts.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\NapiNSP.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\msoert2.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\msjetoledb40.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\mountvol.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\mmcshext.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\icsfiltr.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\cmstp.exe
2008-10-01 07:59:57 —-A—- C:\Windows\system32\certprop.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\browser.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\AuxiliaryDisplayApi.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\atl.dll
2008-10-01 07:59:57 —-A—- C:\Windows\system32\appinfo.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\WUDFCoinstaller.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\WpdMtpUS.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\WMVXENCD.DLL
2008-10-01 07:59:56 —-A—- C:\Windows\system32\wmpdxm.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\SoundRecorder.exe
2008-10-01 07:59:56 —-A—- C:\Windows\system32\qcap.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\qasf.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\PING.EXE
2008-10-01 07:59:56 —-A—- C:\Windows\system32\netplwiz.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\inetmib1.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\ieakeng.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\httpapi.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\dskquoui.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\cewmdm.dll
2008-10-01 07:59:56 —-A—- C:\Windows\system32\bitsadmin.exe
2008-10-01 07:59:55 —-A—- C:\Windows\system32\WUDFSvc.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\SysFxUI.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\rekeywiz.exe
2008-10-01 07:59:55 —-A—- C:\Windows\system32\dsuiext.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\dmusic.dll
2008-10-01 07:59:55 —-A—- C:\Windows\system32\auditpol.exe
2008-10-01 07:59:55 —-A—- C:\Windows\system32\adsmsext.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\wmpsrcwp.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\Sens.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\SecEdit.exe
2008-10-01 07:59:54 —-A—- C:\Windows\system32\mtstocom.exe
2008-10-01 07:59:54 —-A—- C:\Windows\system32\mscandui.dll
2008-10-01 07:59:54 —-A—- C:\Windows\system32\makecab.exe
2008-10-01 07:59:54 —-A—- C:\Windows\system32\lsmproxy.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\xwtpw32.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\wzcdlg.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\WMVSENCD.DLL
2008-10-01 07:59:53 —-A—- C:\Windows\system32\wiashext.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\wiadefui.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\sppnp.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\shimgvw.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\seclogon.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\sbeio.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\printcom.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\ndfapi.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\msorcl32.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\msdadiag.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\dxtrans.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\dot3gpclnt.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\batt.dll
2008-10-01 07:59:53 —-A—- C:\Windows\system32\apss.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\wscmisetup.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\wpdwcn.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\WMSPDMOE.DLL
2008-10-01 07:59:52 —-A—- C:\Windows\system32\winrshost.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\userinit.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\tasklist.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\TapiMigPlugin.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\sxstrace.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\shacct.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\rrinstaller.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\prntvpt.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\perfmon.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\p2phost.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\notepad.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\napipsec.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\MP4SDECD.DLL
2008-10-01 07:59:52 —-A—- C:\Windows\system32\ktmutil.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\keymgr.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\HelpPaneProxy.dll
2008-10-01 07:59:52 —-A—- C:\Windows\system32\ftp.exe
2008-10-01 07:59:52 —-A—- C:\Windows\system32\csrsrv.dll
2008-10-01 07:59:52 —-A—- C:\Windows\notepad.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\wscproxystub.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\winethc.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\UIAutomationCore.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\takeown.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\PnPutil.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\pcasvc.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\nshipsec.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\netiougc.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\msimtf.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\msiexec.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\mfps.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\fmifs.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\driverquery.exe
2008-10-01 07:59:51 —-A—- C:\Windows\system32\d3dim700.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\cryptdll.dll
2008-10-01 07:59:51 —-A—- C:\Windows\system32\colorui.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\wpdbusenum.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\wmiprop.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\WindowsCodecsExt.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\txfw32.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\shrpubw.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\RESAMPLEDMO.DLL
2008-10-01 07:59:50 —-A—- C:\Windows\system32\rasplap.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\powrprof.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\pots.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\mfpmp.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\logagent.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\inseng.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\fsutil.exe
2008-10-01 07:59:50 —-A—- C:\Windows\system32\findnetprinters.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\dnshc.dll
2008-10-01 07:59:50 —-A—- C:\Windows\system32\capisp.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\WLanHC.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\wiaacmgr.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\wextract.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\version.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\TMM.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\shgina.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\sfc_os.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\sendmail.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\runonce.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\rshx32.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\RpcPing.exe
2008-10-01 07:59:49 —-A—- C:\Windows\system32\perfnet.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\olecli32.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\nsisvc.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\luainstall.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\ktmw32.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\imapi.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\fdPHost.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\d3dim.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\compstui.dll
2008-10-01 07:59:49 —-A—- C:\Windows\system32\cmmon32.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\WMADMOE.DLL
2008-10-01 07:59:48 —-A—- C:\Windows\system32\w32tm.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\unregmp2.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\UI0Detect.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\net.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\msvfw32.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\MPG4DECD.DLL
2008-10-01 07:59:48 —-A—- C:\Windows\system32\MP43DECD.DLL
2008-10-01 07:59:48 —-A—- C:\Windows\system32\mdminst.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\imgutil.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\getmac.exe
2008-10-01 07:59:48 —-A—- C:\Windows\system32\dsauth.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\dimsjob.dll
2008-10-01 07:59:48 —-A—- C:\Windows\system32\cmlua.dll
2008-10-01 07:59:47 —-A—- C:\Windows\system32\wmpshell.dll
2008-10-01 07:59:47 —-A—- C:\Windows\system32\tscupgrd.exe
2008-10-01 07:59:47 —-A—- C:\Windows\system32\credui.dll
2008-10-01 07:59:47 —-A—- C:\Windows\system32\ACW.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\sfc.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\sdchange.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\PortableDeviceWiaCompat.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\pnpts.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\migisol.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\ipconfig.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\fdeploy.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\dispci.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\dinput8.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\diantz.exe
2008-10-01 07:59:46 —-A—- C:\Windows\system32\comrepl.dll
2008-10-01 07:59:46 —-A—- C:\Windows\system32\cmutil.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\WPDShextAutoplay.exe
2008-10-01 07:59:45 —-A—- C:\Windows\system32\wmidx.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\vdmredir.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\TSTheme.exe
2008-10-01 07:59:45 —-A—- C:\Windows\system32\remotepg.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\pdhui.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\nlaapi.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\fwcfg.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\ExplorerFrame.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\expand.exe
2008-10-01 07:59:45 —-A—- C:\Windows\system32\EncDump.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\colbact.dll
2008-10-01 07:59:45 —-A—- C:\Windows\system32\cfgbkend.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\wsnmp32.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\wmvdspa.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\waitfor.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\vds_ps.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\utildll.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\TpmInit.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\tabcal.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\sti_ci.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\softkbd.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\rdrleakdiag.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\msfeedsbs.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\modemui.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\McxDriv.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\logman.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\iscsium.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\iernonce.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\hlink.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\esentutl.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\cmcfg32.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\bridgeunattend.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\bootcfg.exe
2008-10-01 07:59:44 —-A—- C:\Windows\system32\amstream.dll
2008-10-01 07:59:44 —-A—- C:\Windows\system32\admparse.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\WsmCl.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\wfapigp.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\shutdown.exe
2008-10-01 07:59:43 —-A—- C:\Windows\system32\qdv.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\osblprov.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\odbccp32.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\dpnet.dll
2008-10-01 07:59:43 —-A—- C:\Windows\system32\cacls.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\wpnpinst.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\wmpcm.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\werdiagcontroller.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\wavemsp.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\rasauto.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\olethk32.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\olesvr32.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\mstext40.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\msdtc.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\mfvdsp.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\iscsiwmi.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\DpiScaling.exe
2008-10-01 07:59:42 —-A—- C:\Windows\system32\dmsynth.dll
2008-10-01 07:59:42 —-A—- C:\Windows\system32\COLORCNV.DLL
2008-10-01 07:59:41 —-A—- C:\Windows\system32\xmlprovi.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\WpdConns.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\ufat.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\ucsvc.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\TimeDateMUICallback.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\sxproxy.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\SLLUA.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\rgb9rast.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\RegCtrl.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\odbctrac.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\networkitemfactory.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\mshta.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\msctfui.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\mobsync.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\licmgr10.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\itss.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\csrstub.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\convert.exe
2008-10-01 07:59:41 —-A—- C:\Windows\system32\bitsigd.dll
2008-10-01 07:59:41 —-A—- C:\Windows\system32\at.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\winnsi.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\unattendedjoin.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\tbs.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\setupcln.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\rasdiag.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\prevhost.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\ocsetup.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\netbtugc.exe
2008-10-01 07:59:40 —-A—- C:\Windows\system32\mydocs.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\l2gpstore.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\iscsied.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\GuidedHelp.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\fphc.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\dskquota.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\dmime.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\cscdll.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\cmpbk32.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\AuthFWGP.dll
2008-10-01 07:59:40 —-A—- C:\Windows\system32\AtBroker.exe
2008-10-01 07:59:39 —-A—- C:\Windows\system32\regini.exe
2008-10-01 07:59:39 —-A—- C:\Windows\system32\napdsnap.dll
2008-10-01 07:59:39 —-A—- C:\Windows\system32\dsdmo.dll
2008-10-01 07:59:39 —-A—- C:\Windows\system32\amxread.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\usbui.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\odbccu32.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\odbccr32.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\msident.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\msdart.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\dot3dlg.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\devenum.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\cmstplua.dll
2008-10-01 07:59:38 —-A—- C:\Windows\system32\apilogen.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\wpclsp.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\WINSRPC.DLL
2008-10-01 07:59:37 —-A—- C:\Windows\system32\vss_ps.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\VIDRESZR.DLL
2008-10-01 07:59:37 —-A—- C:\Windows\system32\upnpcont.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\srwmi.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\rasphone.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\RacAgent.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\nsi.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\netevent.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\nbtstat.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\mtxlegih.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\mtxdm.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\MsCtfMonitor.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\mfcsubs.dll
2008-10-01 07:59:37 —-A—- C:\Windows\system32\graftabl.com
2008-10-01 07:59:37 —-A—- C:\Windows\system32\gpupdate.exe
2008-10-01 07:59:37 —-A—- C:\Windows\system32\avrt.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\wsock32.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\WindowsAnytimeUpgrade.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\wiarpc.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\WavDest.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\vfwwdm32.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\syskey.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\ROUTE.EXE
2008-10-01 07:59:36 —-A—- C:\Windows\system32\procinst.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\odbcbcp.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\ndfetw.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\msexcl40.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\MP3DMOD.DLL
2008-10-01 07:59:36 —-A—- C:\Windows\system32\extrac32.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\eventcls.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\d3dxof.dll
2008-10-01 07:59:36 —-A—- C:\Windows\system32\csrss.exe
2008-10-01 07:59:36 —-A—- C:\Windows\system32\atmfd.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\WlanMmHC.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\wiadss.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\TabbtnEx.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\Tabbtn.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\psbase.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\msxbde40.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\inetppui.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\dmscript.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\dmloader.dll
2008-10-01 07:59:35 —-A—- C:\Windows\system32\CertEnrollCtrl.exe
2008-10-01 07:59:35 —-A—- C:\Windows\fveupdate.exe
2008-10-01 07:59:34 —-A—- C:\Windows\system32\wshcon.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\PlaySndSrv.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\Netplwiz.exe
2008-10-01 07:59:34 —-A—- C:\Windows\system32\mspbde40.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\msltus40.dll
2008-10-01 07:59:34 —-A—- C:\Windows\system32\icsunattend.exe
2008-10-01 07:59:34 —-A—- C:\Windows\system32\credssp.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\WsmRes.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\WSHTCPIP.DLL
2008-10-01 07:59:33 —-A—- C:\Windows\system32\wship6.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\tcpmon.ini
2008-10-01 07:59:33 —-A—- C:\Windows\system32\sxsstore.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\slwga.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\setupSNK.exe
2008-10-01 07:59:33 —-A—- C:\Windows\system32\OptionalFeatures.exe
2008-10-01 07:59:33 —-A—- C:\Windows\system32\msvidc32.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\localui.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\lltdapi.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\LangCleanupSysprepAction.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\icaapi.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\HotStartUserAgent.dll
2008-10-01 07:59:33 —-A—- C:\Windows\system32\ComputerDefaults.exe
2008-10-01 07:59:32 —-A—- C:\Windows\system32\usbperf.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\spopk.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\serialui.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\sbunattend.exe
2008-10-01 07:59:32 —-A—- C:\Windows\system32\NcdProp.dll
2008-10-01 07:59:32 —-A—- C:\Windows\system32\dmutil.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\rasctrs.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\odbcconf.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\msobjs.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\msfeedssync.exe
2008-10-01 07:59:30 —-A—- C:\Windows\system32\ieencode.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\hbaapi.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\corpol.dll
2008-10-01 07:59:30 —-A—- C:\Windows\system32\cofiredm.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\vdmdbg.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\url.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\nlsbres.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\midimap.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\LogonUI.exe
2008-10-01 07:59:29 —-A—- C:\Windows\system32\iprtprio.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\InfDefaultInstall.exe
2008-10-01 07:59:29 —-A—- C:\Windows\system32\hnetmon.dll
2008-10-01 07:59:29 —-A—- C:\Windows\system32\esentprf.dll
2008-10-01 07:59:28 —-A—- C:\Windows\system32\sdspres.dll
2008-10-01 07:59:28 —-A—- C:\Windows\system32\osbaseln.dll
2008-10-01 07:59:28 —-A—- C:\Windows\system32\cfgmgr32.dll
2008-10-01 07:59:27 —-A—- C:\Windows\system32\msmmsp.dll
2008-10-01 07:59:27 —-A—- C:\Windows\system32\msisip.dll
2008-10-01 07:59:25 —-A—- C:\Windows\system32\winusb.dll
2008-10-01 07:59:25 —-A—- C:\Windows\system32\rdpcfgex.dll
2008-10-01 07:59:25 —-A—- C:\Windows\system32\dispex.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\spwmp.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\riched32.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\Nlsdl.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\msidle.dll
2008-10-01 07:59:23 —-A—- C:\Windows\system32\idndl.dll
2008-10-01 07:59:22 —-A—- C:\Windows\system32\KBDKOR.DLL
2008-10-01 07:59:22 —-A—- C:\Windows\system32\KBDJPN.DLL
2008-10-01 07:59:21 —-A—- C:\Windows\system32\iscsilog.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\wmploc.DLL
2008-10-01 07:59:20 —-A—- C:\Windows\system32\vga64k.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\vga256.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\tsddd.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\framebuf.dll
2008-10-01 07:59:20 —-A—- C:\Windows\system32\dxmasf.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\vga.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\spwizres.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\f3ahvoas.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\dmdskres2.dll
2008-10-01 07:59:19 —-A—- C:\Windows\system32\bootstr.dll
2008-10-01 07:59:17 —-A—- C:\Windows\system32\gatherWirelessInfo.vbs
2008-10-01 07:59:17 —-A—- C:\Windows\system32\gatherWiredInfo.vbs
2008-10-01 07:59:17 —-A—- C:\Windows\system32\fsmgmt.msc
2008-10-01 07:59:12 —-A—- C:\Windows\system32\vsp1cln.exe
2008-10-01 07:59:12 —-A—- C:\Windows\system32\perfmon.msc
2008-10-01 07:58:49 —-A—- C:\Windows\system32\xmllite.dll
2008-10-01 07:58:48 —-A—- C:\Windows\system32\wbemcomn.dll
2008-10-01 07:58:45 —-A—- C:\Windows\system32\SmiInstaller.dll
2008-10-01 07:58:45 —-A—- C:\Windows\system32\SmiEngine.dll
2008-10-01 07:58:40 —-A—- C:\Windows\system32\wdscore.dll
2008-10-01 07:58:40 —-A—- C:\Windows\system32\PkgMgr.exe
2008-10-01 07:58:30 —-A—- C:\Windows\system32\drvstore.dll
2008-10-01 07:58:29 —-A—- C:\Windows\system32\mspatcha.dll
2008-10-01 07:58:29 —-A—- C:\Windows\system32\msdelta.dll
2008-10-01 07:58:29 —-A—- C:\Windows\system32\dpx.dll
2008-09-30 16:54:47 —-A—- C:\Windows\ntbtlog.txt
2008-09-29 09:21:35 —-A—- C:\Windows\system32\es.dll
2008-09-28 21:49:27 —-D—- C:\Users\HP\AppData\Roaming\WildTangent
2008-09-28 11:19:39 —-A—- C:\Windows\system32\NlsLexicons0046.dll
2008-09-28 11:19:39 —-A—- C:\Windows\system32\NlsLexicons0045.dll
2008-09-28 11:19:38 —-A—- C:\Windows\system32\NlsLexicons0049.dll
2008-09-28 11:19:38 —-A—- C:\Windows\system32\NlsLexicons0047.dll
2008-09-28 11:19:38 —-A—- C:\Windows\system32\NlsLexicons0020.dll
2008-09-28 11:19:37 —-A—- C:\Windows\system32\NlsLexicons0039.dll
2008-09-28 11:19:37 —-A—- C:\Windows\system32\NlsLexicons0022.dll
2008-09-28 11:19:37 —-A—- C:\Windows\system32\NlsLexicons0021.dll
2008-09-28 11:19:36 —-A—- C:\Windows\system32\NlsLexicons0026.dll
2008-09-28 11:19:36 —-A—- C:\Windows\system32\NlsLexicons0024.dll
2008-09-28 11:19:35 —-A—- C:\Windows\system32\NlsLexicons0027.dll
2008-09-28 11:19:35 —-A—- C:\Windows\system32\NlsLexicons0010.dll
2008-09-28 11:19:34 —-A—- C:\Windows\system32\NlsLexicons0018.dll
2008-09-28 11:19:34 —-A—- C:\Windows\system32\NlsLexicons0013.dll
2008-09-28 11:19:34 —-A—- C:\Windows\system32\NlsLexicons0011.dll
2008-09-28 11:19:33 —-A—- C:\Windows\system32\NlsLexicons0019.dll
2008-09-28 11:19:32 —-A—- C:\Windows\system32\NlsLexicons0003.dll
2008-09-28 11:19:32 —-A—- C:\Windows\system32\NlsLexicons0002.dll
2008-09-28 11:19:32 —-A—- C:\Windows\system32\NlsLexicons0001.dll
2008-09-28 11:19:31 —-A—- C:\Windows\system32\NlsLexicons004a.dll
2008-09-28 11:19:31 —-A—- C:\Windows\system32\NlsLexicons0009.dll
2008-09-28 11:19:31 —-A—- C:\Windows\system32\NlsLexicons0007.dll
2008-09-28 11:19:30 —-A—- C:\Windows\system32\NlsLexicons004e.dll
2008-09-28 11:19:30 —-A—- C:\Windows\system32\NlsLexicons004c.dll
2008-09-28 11:19:30 —-A—- C:\Windows\system32\NlsLexicons004b.dll
2008-09-28 11:19:29 —-A—- C:\Windows\system32\NlsLexicons003e.dll
2008-09-28 11:19:29 —-A—- C:\Windows\system32\NlsLexicons002a.dll
2008-09-28 11:19:28 —-A—- C:\Windows\system32\NlsLexicons001d.dll
2008-09-28 11:19:28 —-A—- C:\Windows\system32\NlsLexicons001b.dll
2008-09-28 11:19:28 —-A—- C:\Windows\system32\NlsLexicons001a.dll
2008-09-28 11:19:27 —-A—- C:\Windows\system32\NlsLexicons000c.dll
2008-09-28 11:19:27 —-A—- C:\Windows\system32\NlsLexicons000a.dll
2008-09-28 11:19:26 —-A—- C:\Windows\system32\NlsLexicons0414.dll
2008-09-28 11:19:26 —-A—- C:\Windows\system32\NlsLexicons000f.dll
2008-09-28 11:19:26 —-A—- C:\Windows\system32\NlsLexicons000d.dll
2008-09-28 11:19:25 —-A—- C:\Windows\system32\NlsLexicons0816.dll
2008-09-28 11:19:25 —-A—- C:\Windows\system32\NlsLexicons0416.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsModels0011.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsLexicons081a.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsData0046.dll
2008-09-28 11:19:24 —-A—- C:\Windows\system32\NlsData0045.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0049.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0047.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0039.dll
2008-09-28 11:19:23 —-A—- C:\Windows\system32\NlsData0020.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0027.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0026.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0024.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0022.dll
2008-09-28 11:19:22 —-A—- C:\Windows\system32\NlsData0021.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0018.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0013.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0011.dll
2008-09-28 11:19:21 —-A—- C:\Windows\system32\NlsData0010.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0019.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0002.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0001.dll
2008-09-28 11:19:20 —-A—- C:\Windows\system32\NlsData0000.dll
2008-09-28 11:19:19 —-A—- C:\Windows\system32\NlsData0007.dll
2008-09-28 11:19:19 —-A—- C:\Windows\system32\NlsData0003.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData004c.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData004b.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData004a.dll
2008-09-28 11:19:18 —-A—- C:\Windows\system32\NlsData0009.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData004e.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData003e.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData002a.dll
2008-09-28 11:19:17 —-A—- C:\Windows\system32\NlsData001a.dll
2008-09-28 11:19:16 —-A—- C:\Windows\system32\NlsData001d.dll
2008-09-28 11:19:16 —-A—- C:\Windows\system32\NlsData001b.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000f.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000d.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000c.dll
2008-09-28 11:19:15 —-A—- C:\Windows\system32\NlsData000a.dll
2008-09-28 11:19:14 —-A—- C:\Windows\system32\NlsData0416.dll
2008-09-28 11:19:14 —-A—- C:\Windows\system32\NlsData0414.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NlsLexicons0c1a.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NlsData081a.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NlsData0816.dll
2008-09-28 11:19:13 —-A—- C:\Windows\system32\NaturalLanguage6.dll
2008-09-28 11:19:12 —-A—- C:\Windows\system32\NlsData0c1a.dll
2008-09-28 11:17:12 —-A—- C:\Windows\system32\ieui.dll
2008-09-27 10:59:26 —-A—- C:\Windows\system32\winipsec.dll
2008-09-27 10:59:26 —-A—- C:\Windows\system32\polstore.dll
2008-09-27 10:59:26 —-A—- C:\Windows\system32\IPSECSVC.DLL
2008-09-27 10:59:26 —-A—- C:\Windows\system32\FwRemoteSvr.dll
2008-09-27 10:58:56 —-A—- C:\Windows\system32\Apphlpdm.dll
2008-09-27 10:58:54 —-A—- C:\Windows\system32\GameUXLegacyGDFs.dll
2008-09-27 10:58:54 —-A—- C:\Windows\system32\gameux.dll
2008-09-27 10:57:23 —-A—- C:\Windows\system32\shell32.dll
2008-09-27 10:54:49 —-A—- C:\Windows\system32\tzres.dll
2008-09-27 10:53:48 —-A—- C:\Windows\system32\wmpeffects.dll
2008-09-27 10:51:31 —-A—- C:\Windows\system32\kbd106n.dll
2008-09-27 10:51:28 —-A—- C:\Windows\system32\winresume.exe
2008-09-27 10:51:28 —-A—- C:\Windows\system32\winload.exe
2008-09-27 10:51:28 —-A—- C:\Windows\system32\srclient.dll
2008-09-27 10:51:28 —-A—- C:\Windows\system32\rstrui.exe
2008-09-27 10:51:27 —-A—- C:\Windows\system32\srdelayed.exe
2008-09-27 10:51:27 —-A—- C:\Windows\system32\srcore.dll
2008-09-27 10:51:27 —-A—- C:\Windows\system32\setbcdlocale.dll
2008-09-27 10:51:27 —-A—- C:\Windows\system32\kd1394.dll
2008-09-27 10:51:27 —-A—- C:\Windows\system32\ci.dll
2008-09-27 10:50:29 —-A—- C:\Windows\system32\gdi32.dll
2008-09-27 10:50:15 —-A—- C:\Windows\system32\wshrm.dll
2008-09-27 10:49:33 —-A—- C:\Windows\system32\INETRES.dll
2008-09-27 10:49:33 —-A—- C:\Windows\system32\inetcomm.dll
2008-09-27 10:49:25 —-A—- C:\Windows\system32\quartz.dll
2008-09-27 10:49:09 —-A—- C:\Windows\system32\psisdecd.dll
2008-09-27 10:49:09 —-A—- C:\Windows\system32\EncDec.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wups2.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wucltux.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wuaueng.dll
2008-09-26 15:52:37 —-A—- C:\Windows\system32\wuauclt.exe
2008-09-26 15:52:17 —-A—- C:\Windows\system32\wups.dll
2008-09-26 15:52:17 —-A—- C:\Windows\system32\wudriver.dll
2008-09-26 15:52:17 —-A—- C:\Windows\system32\wuapi.dll
2008-09-26 15:51:58 —-A—- C:\Windows\system32\wuwebv.dll
2008-09-26 15:51:58 —-A—- C:\Windows\system32\wuapp.exe
2008-09-23 15:36:52 —-D—- C:\Program Files\Philips

======List of files/folders modified in the last 1 months======

2008-10-17 11:30:29 —-D—- C:\Windows\Temp
2008-10-17 11:30:24 —-D—- C:\Windows\Prefetch
2008-10-17 11:30:14 —-D—- C:\Program Files\Trend Micro
2008-10-17 11:23:32 —-RD—- C:\Program Files
2008-10-17 11:23:32 —-D—- C:\Windows
2008-10-15 03:23:51 —-D—- C:\Windows\winsxs
2008-10-15 03:18:25 —-D—- C:\Windows\System32
2008-10-15 03:18:25 —-D—- C:\Windows\inf
2008-10-15 03:18:25 —-A—- C:\Windows\system32\PerfStringBackup.INI
2008-10-15 03:13:47 —-D—- C:\Windows\system32\catroot
2008-10-15 03:10:58 —-D—- C:\Windows\system32\drivers
2008-10-15 03:10:58 —-D—- C:\Program Files\Windows Mail
2008-10-15 03:10:57 —-D—- C:\Windows\system32\migration
2008-10-15 03:00:26 —-D—- C:\Windows\system32\catroot2
2008-10-15 03:00:24 —-SHD—- C:\System Volume Information
2008-10-14 19:05:45 —-D—- C:\Windows\system32\WDI
2008-10-14 03:24:46 —-D—- C:\Windows\rescache
2008-10-14 03:07:23 —-D—- C:\Windows\system32\en-US
2008-10-14 03:07:23 —-D—- C:\Windows\PolicyDefinitions
2008-10-13 00:15:21 —-D—- C:\Windows\Logs
2008-10-12 22:06:44 —-D—- C:\Windows\Microsoft.NET
2008-10-12 22:06:39 —-RSD—- C:\Windows\assembly
2008-10-12 21:55:39 —-HD—- C:\ProgramData
2008-10-12 21:55:15 —-SHD—- C:\Windows\Installer
2008-10-12 21:55:12 —-D—- C:\Program Files\Common Files\microsoft shared
2008-10-12 21:54:19 —-SD—- C:\Users\HP\AppData\Roaming\Microsoft
2008-10-12 21:35:31 —-SHD—- C:\boot
2008-10-12 21:35:15 —-ASH—- C:\Program Files\desktop.ini
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Sidebar
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Photo Gallery
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Media Player
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Journal
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Collaboration
2008-10-12 21:28:41 —-D—- C:\Program Files\Windows Calendar
2008-10-12 21:28:41 —-D—- C:\Program Files\Movie Maker
2008-10-12 21:28:41 —-D—- C:\Program Files\Internet Explorer
2008-10-12 21:28:39 —-D—- C:\Windows\servicing
2008-10-12 21:28:39 —-D—- C:\Windows\ehome
2008-10-12 21:28:39 —-D—- C:\Program Files\Windows Defender
2008-10-12 21:28:39 —-D—- C:\Program Files\Common Files\System
2008-10-12 21:28:37 —-D—- C:\Windows\MSAgent
2008-10-12 21:28:36 —-D—- C:\Windows\system32\XPSViewer
2008-10-12 21:28:36 —-D—- C:\Windows\system32\ko-KR
2008-10-12 21:28:36 —-D—- C:\Windows\system32\da-DK
2008-10-12 21:28:36 —-D—- C:\Windows\system32\com
2008-10-12 21:28:36 —-D—- C:\Windows\L2Schemas
2008-10-12 21:28:36 —-D—- C:\Windows\IME
2008-10-12 21:28:36 —-D—- C:\Windows\DigitalLocker
2008-10-12 21:28:31 —-D—- C:\Windows\system32\sysprep
2008-10-12 21:28:31 —-D—- C:\Windows\system32\oobe
2008-10-12 21:28:31 —-D—- C:\Windows\system32\it-IT
2008-10-12 21:28:31 —-D—- C:\Windows\system32\el-GR
2008-10-12 21:28:31 —-D—- C:\Windows\system32\de-DE
2008-10-12 21:28:29 —-D—- C:\Windows\system32\sv-SE
2008-10-12 21:28:29 —-D—- C:\Windows\system32\SLUI
2008-10-12 21:28:29 —-D—- C:\Windows\system32\setup
2008-10-12 21:28:29 —-D—- C:\Windows\system32\ru-RU
2008-10-12 21:28:29 —-D—- C:\Windows\system32\pt-PT
2008-10-12 21:28:29 —-D—- C:\Windows\system32\ias
2008-10-12 21:28:29 —-D—- C:\Windows\system32\hu-HU
2008-10-12 21:28:29 —-D—- C:\Windows\system32\he-IL
2008-10-12 21:28:29 —-D—- C:\Windows\system32\fr-FR
2008-10-12 21:28:29 —-D—- C:\Windows\system32\fi-FI
2008-10-12 21:28:29 —-D—- C:\Windows\system32\cs-CZ
2008-10-12 21:28:29 —-D—- C:\Windows\system32\AdvancedInstallers
2008-10-12 21:28:28 —-D—- C:\Windows\system32\zh-TW
2008-10-12 21:28:28 —-D—- C:\Windows\system32\zh-CN
2008-10-12 21:28:28 —-D—- C:\Windows\system32\ro-RO
2008-10-12 21:28:28 —-D—- C:\Windows\system32\pl-PL
2008-10-12 21:28:28 —-D—- C:\Windows\system32\manifeststore
2008-10-12 21:28:28 —-D—- C:\Windows\system32\ja-JP
2008-10-12 21:28:28 —-D—- C:\Windows\system32\es-ES
2008-10-12 21:28:28 —-D—- C:\Windows\system32\en
2008-10-12 21:28:27 —-D—- C:\Windows\system32\wbem
2008-10-12 21:28:27 —-D—- C:\Windows\system32\tr-TR
2008-10-12 21:28:24 —-D—- C:\Windows\system32\nl-NL
2008-10-12 21:28:24 —-D—- C:\Windows\system32\nb-NO
2008-10-12 21:28:24 —-D—- C:\Windows\system32\ar-SA
2008-10-12 21:28:23 —-D—- C:\Windows\system32\pt-BR
2008-10-12 21:28:23 —-D—- C:\Windows\system32\migwiz
2008-10-12 21:28:02 —-D—- C:\Windows\AppPatch
2008-10-12 21:27:56 —-D—- C:\Windows\Boot
2008-10-12 21:27:55 —-D—- C:\Windows\system32\Boot
2008-10-12 21:20:29 —-A—- C:\Windows\system32\ifxcardm.dll
2008-10-12 21:20:28 —-A—- C:\Windows\system32\axaltocm.dll
2008-10-07 15:19:40 —-A—- C:\Windows\system32\mrt.exe
2008-10-02 22:29:20 —-D—- C:\Windows\system32\NDF
2008-09-30 14:37:08 —-D—- C:\Program Files\Common Files
2008-09-28 21:49:26 —-D—- C:\ProgramData\WildTangent
2008-09-27 10:59:57 —-D—- C:\Program Files\CONEXANT
2008-09-26 15:51:15 —-SD—- C:\ProgramData\Microsoft
2008-09-23 15:36:52 —-HD—- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2008-10-12 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2008-10-12 26824]
R1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-11-30 8192]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2007-01-10 387384]
R1 SRTSPX;SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [2007-01-12 25400]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2007-04-18 141312]
R3 AvgWfpX;AVG Free8 Firewall Driver x86; C:\Windows\System32\Drivers\avgwfpx.sys [2008-10-12 69128]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT32.sys [2008-03-04 188416]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-03-30 1671680]
R3 NETw4v32;Intel® Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-03-01 2216448]
R3 NWADI;NWADI Bus Enumerator; C:\Windows\system32\DRIVERS\NWADIenum.sys [2007-04-19 194048]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-19 88576]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-02-07 196096]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 E100B;Intel® PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-04-30 160768]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-03-30 1671680]
S3 IDSvix86;Symantec Intrusion Prevention Driver; \??\C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20070108.003\IDSvix86.sys [2006-12-28 212280]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NAVENG;NAVENG; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20070430.018\NAVENG.SYS [2007-04-30 77688]
S3 NAVEX15;NAVEX15; \??\C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20070430.018\NAVEX15.SYS [2007-04-30 852824]
S3 NETw3v32;Intel® PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 NWUSBModem;Novatel Wireless USB Modem Driver; C:\Windows\system32\DRIVERS\nwusbmdm.sys [2007-04-19 99200]
S3 NWUSBPort;Novatel Wireless USB Status Port Driver; C:\Windows\system32\DRIVERS\nwusbser.sys [2007-04-19 99200]
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [2007-01-03 417592]
S3 SRTSP;SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [2007-01-12 247608]
S3 SRTSPL;SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [2007-01-12 276792]
S3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2007-08-16 115000]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2007-01-06 554616]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-10-12 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-10-12 231704]
R2 ccEvtMgr;Symantec Event Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 ccSetMgr;Symantec Settings Manager; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2007-04-23 262243]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2007-04-23 106593]
R2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-02-12 355096]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 SymAppCore;Symantec AppCore Service; c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe [2007-01-05 47712]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560]
S2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-03-14 62984]
S3 comHost;COM Host; c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [2007-01-13 49248]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ISPwdSvc;Symantec IS Password Validation; c:\Program Files\Norton Internet Security\isPwdSvc.exe [2007-01-14 80504]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-01-06 2918008]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656]
S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-08-16 1174664]

—————–EOF—————–

jpshortstuff

Post #8October 17, 2008, 6:45 PM UTC

Please right click Internet Explorer on your desktop and then select "Run As Administrator". Next, go to Kaspersky website and perform an online antivirus scan.

NOTE: Internet Explorer will temporarily have administrator privileges, this is required for the scan but dangerous for normal surfing so do NOT open any other websites in IE until after the scan has finished and this window has been closed.

Read through the requirements and privacy statement and click on Accept button.
It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
When the downloads have finished, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
- Spyware, Adware, Dialers, and other potentially dangerous programs
  Archives
  Mail databases
Click on My Computer under Scan.
Once the scan is complete, it will display the results. Click on View Scan Report.
You will see a list of infected items there. Click on Save Report As….
Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
Please post this log in your next reply, along with a new HijackThis log (no need to go through RSIT again).

Also, please give a detailed description of how your computer is running and behaving at the moment, listing any remaining problems.

Thanks.

jfinner1

Post #9October 18, 2008, 12:41 AM UTC

Ok, here are the two logs. The computer seems to be working fine. AVG is running normally, I'm not seeing any popups… I think it might even be a bit faster, but I'm not sure since it's not mine. So all in all it looks good.

——————————————————————————–
KASPERSKY ONLINE SCANNER 7 REPORT
Friday, October 17, 2008
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Friday, October 17, 2008 20:09:21
Records in database: 1319598
——————————————————————————–

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\

Scan statistics:
Files scanned: 136870
Threat name: 2
Infected objects: 2
Suspicious objects: 0
Duration of the scan: 01:35:50

File name / Threat name / Threats count
C:\_OTMoveIt\MovedFiles\10172008_112331\Users\HP\AppData\Local\Temp\ropotok.cc Infected: Trojan-Downloader.Win32.Agent.ahqz 1
C:\_OTMoveIt\MovedFiles\10172008_112331\Users\HP\AppData\Local\Temp\video0.cfg Infected: Trojan-Downloader.Win32.Agent.aifs 1

The selected area was scanned.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:33:49 PM, on 10/17/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Windows\System32\wsqmcons.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [PhilipsDM] C:\Program Files\Philips\SA44xx\Philips Device Manager\Bin\LaunchDM.exe OS_STARTUP
O4 - HKLM\..\Run: [LanzarP2006] "C:\Users\HP\AppData\Local\Temp\P2006tmp\Install.exe" /SETUP:"/l0x0009"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

–
End of file - 9648 bytes

jpshortstuff

Post #10October 18, 2008, 6:27 AM UTC

Hi jfinner1

Log looks good

Clean up with OTMoveIt3

Right-click OTMoveIt3.exe and select Run As Administrator…
Click the CleanUp! button.
Select Yes when the "Begin cleanup Process?" prompt appears.
If you are prompted to Reboot during the cleanup, select Yes.
The tool will delete itself once it finishes, if not delete it by yourself.

You can now delete any other tools I had you download and use, unless you wish to keep them.

You don't appear to be running any third party Firewall software.

Install a firewall! Without a firewall you are very susceptible to being hacked, and people could gain access to your computer. If you don't have a firewall I strongly recommend you download ONE of the following:
1) Comodo
2) Agnitum
3) Sunbelt/Kerio

Set correct settings for files that should be hidden in Windows Vista

Click Start.
Open My Computer.
Select Folder and Search Options
Select the View Tab.
Under the Hidden files and folders heading select Hide hidden files and folders.
Check Hide file extensions for known file types
Check the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.

Now that your system appears to be clean, theres just a few steps I'd like you to take to prevent any future infections.

System restore:
We will now clear your existing system restore points and establish a new clean restore point:
- Click on the Start button to open your Start Menu.
- Click on the Control Panel menu option.
- Click on the System and Maintenance menu option.
- Click on the System menu option.
- Click on System Protection in the left-hand task list.
- Create the manual restore point you should click on the Create button. When you press this button a prompt will appear asking you to provide a title for this manual restore point.
- Type in a title for the manual restore point and press the Create button.
- Close the System window after you have been advised that the procedure has been successfully completed.
.
- Next, go to Start > Run and type in cleanmgr
- Select the More options tab
- Choose the option to clean up system restore and OK it.
  
  This will remove all restore points except the new one you just created.
Make sure you do this now, as your System Restore currently has infected files in it.
Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (using Internet Explorer) and download and install all critical updates on a regular basis.
Make sure you update your Anti-Virus software regularly, new viruses are being developed all the time.
Some more programs that it would be useful to have [OPTIONAL but RECOMMENDED]:

Download Spybot Search and Destroy 1.5 from here
Check for Updates/ Immunize and run a Full System Scan on a regular basis.

SpywareBlaster is another real-time scanner that prevents most spyware from even being installed.
Freely available: Download SpywareBlaster

Download and install the free version of WinPatrol. This program protects your computer in a variety of ways and will work well with your existing security software. Have a look at this tutorial to help you get started with the program.

Also, please read this great article by Tony Klein: So How Did I Get Infected In First Place

Glad we could be of assistance.

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.

Stay Clean!

jpshortstuff

jfinner1

Post #11October 18, 2008, 7:07 PM UTC

Awesome!

Thanks so much for helping me out. This computer is runing great, and my friend is going to be really happy about it! I would say that my problem has been totaly resolved. You guys should so get paid for this, lol.

Thank you one hundred times over.

jpshortstuff

Post #12October 19, 2008, 6:41 PM UTC

No problem - glad I could help

jpshortstuff

Post #13October 19, 2008, 6:41 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Something Blocking AVG Free

✨ Ask AI

Ask AI