What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Laptop infected with Trojan Virtumonde

15 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hello there, I hope someone can help, I have a laptop running on Microsoft Windows XP about a week ago when using the internet, my brower just started loading up new brower tabs on its own and loading up gambling pages, some foreign pages etc etc. I have PC Tools spyware and antivirus protection so ran a full scan and it picked up this trojan virus called trojan virtumonde. When it tried to remove it, the computer got half way through the process of removing it and stopped altogether. The computer then wouldnt respond to anything I did. I had to restart (it does the usual disc check when you restart without shutting down properly) and that was fine, but then when I went through the process of re-scanning using my anti-virus, it did the same thing, picked up the trojan virtumonde but couldn't get rid of it. Since then I tried a different antivirus (downloaded AVG) which did a full scan and picked it up. This time it said it had deleated it so I thought I had solved the problem. Only to find, when I used the internet again, the same thing continued to happen, loading up new pages. The worst one being a warning sign that comes up saying I need to scan my computer for spyware from 'http://antivirus-comupter-scan.com/2009/1/en/freescan.php?id=770522169011 - Mic' (obviously nothing to do with my PC Tools protection) and it doesnt matter whether you click 'ok' 'cancel' or the 'x' it starts to load up more pages claiming to be scanning my computer. I can exit these once they have loaded up but I cant help thinking in those few seconds it has just uploaded another virus… funnily enough, when I then go to do another scan, I find there are more viruses and spyware as well as the same trojan virtumonde so it is blatantly uploading more viruses to my computer. I don't know what else I can do…..I would call myself a bit of a novice so any help would be greatly appreciated I have attached a 'print screen' (in microsoft word format) of the log that i get from my PC Tools antivirus when it picks up the trojan and where it is located. This is only half the log though, it goes on for quite a bit more but it wouldn't let me upload anymore due to the size restriction on the upload tool Thank you for any help in advance Tom Waterston

Attachments:

Post #2
Hi tomwaterston, welcome to the forum.

Please be advised, as I'm still in training, all my replies will have to be approved by a teacher or expert before I can post them. This may cause some delays, but I will do my best to keep them as short as possible.

To make cleaning this machine easier
  • Please do not uninstall/install any programs unless asked to
    It is more difficult when files/programs are appearing in/disappearing from the logs.
  • Please do not run any scans other than those requested
  • Please follow all instructions in the order posted
  • If you have problems with or do not understand the instructions, Please ask before continuing.
I will post back soon with additional instructions.

Thanks
Post #3
Hi tomwaterston,

1. In future, all logs/reports, etc.. must be posted in Notepad

2. Do not attach any logs/reports, etc.. unless specifically requested to do so.

Sorry but I am unable to view the file you attached. No matter, this program will give us a view as to what's going on.

Download and save to your desktop, RSIT by random/random
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open. Please post the contents of both log.txt (will be maximized) and info.txt (will be minimized)
Note: These logs will open in notepad. Please ensure that word wrap is unchecked. In notepad click format, uncheck word wrap if it is checked.

Thanks
Post #4
hello, thank you i really appreciate your help.

I have downloaded RSIT to my desktop as requested and ran it. I have posted the contents of log.txt below (which was maximised) but the info.txt log (minimised) did not open so I can't post those contents! It only opened one log! Is there anything you would like me to do to get 'info.txt'??

log.txt

Logfile of random's system information tool 1.04 (written by random/random)
Run by [removed] at 2008-12-08 20:18:07
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 11 GB (39%) free of 27 GB
Total RAM: 502 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:18:25, on 08/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\Arcade\PCMService.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\My Book\WD Backup\uBBMonitor.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Tom\Desktop\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Tom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Tiscali
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;;*.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [CPM313e2b3d] Rundll32.exe "c:\windows\system32\gulobimu.dll",a
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [rirawapola] Rundll32.exe "C:\WINDOWS\system32\nivunaso.dll",s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKUS\S-1-5-19\..\Run: [rirawapola] Rundll32.exe "C:\WINDOWS\system32\nivunaso.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [rirawapola] Rundll32.exe "C:\WINDOWS\system32\nivunaso.dll",s (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WD Backup Monitor.lnk = C:\Program Files\My Book\WD Backup\uBBMonitor.exe
O8 - Extra context menu item: &Search; - http://edits.mywebsearch.com/toolbaredits/…?p=ZNxmk311CTGB
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.co.uk
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo…toUploader5.cab
O16 - DPF: {2A493D5F-8914-4D3E-8BF3-767F281862F4} (TraderMediaImgX Control) - http://sell.autotrader.co.uk/uk-ola/common/TraderMediaX.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://tommyw1986.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase6662.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1130160263281
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Facebo…Uploader4_5.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\wenunuve.dll,c:\windows\system32\gulobimu.dll,avgrsstx.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\gulobimu.dll (file missing)
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\gulobimu.dll (file missing)
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

–
End of file - 12147 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-09-29 1082880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-12-03 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java™ Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-26 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-04-07 323904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-26 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-26 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-02-08 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-02-08 126976]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-10-07 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-10-07 688218]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2005-03-28 188416]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2005-03-24 2880512]
"LManager"=C:\Program Files\Launch Manager\QtZgAcer.EXE [2005-03-28 319488]
"eRecoveryService"=C:\Windows\System32\Check.exe [2005-03-23 245760]
"EPSON Stylus DX3800 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE [2005-02-08 98304]
"PCMService"=C:\Program Files\Arcade\PCMService.exe [2005-03-09 49152]
"WD Button Manager"=C:\WINDOWS\system32\WDBtnMgr.exe [2006-12-19 339968]
"4oD"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2008-08-25 1168264]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-26 136600]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2005-07-19 221184]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2005-06-08 458752]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2005-06-08 217088]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"CPM313e2b3d"=c:\windows\system32\gulobimu.dll []
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-12-03 1261336]
"rirawapola"=C:\WINDOWS\system32\nivunaso.dll []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"kdx"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2005-06-08 196608]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
WD Backup Monitor.lnk - C:\Program Files\My Book\WD Backup\uBBMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\WINDOWS\system32\wenunuve.dll,c:\windows\system32\gulobimu.dll,avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-02-08 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\gulobimu.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\gulobimu.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\WINDOWS\system32\wenunuve.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcoreservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Enabled:Windows Messenger"
"C:\Program Files\myTunes Redux\mDNSResponder.exe"="C:\Program Files\myTunes Redux\mDNSResponder.exe:*:Disabled:mDNSResponder"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Real\RealPlayer\RealPlay.exe"="C:\Program Files\Real\RealPlayer\RealPlay.exe:*:Enabled:RealPlayer"
"C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe"="C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe:*:Enabled:MessengerDiscovery Live the Windows Live Messenger addon"
"C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE"="C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE:*:Enabled:RealPlayer"
"C:\Program Files\My Kazaa Gold\giFT\giFTl.exe"="C:\Program Files\My Kazaa Gold\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\Program Files\MessengerDiscovery\Loader.exe"="C:\Program Files\MessengerDiscovery\Loader.exe:*:Enabled:Loader"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QuickTime\QuickTimePlayer.exe"="C:\Program Files\QuickTime\QuickTimePlayer.exe:*:Enabled:QuickTime Player"
"C:\WINDOWS\System32\rtcshare.exe"="C:\WINDOWS\System32\rtcshare.exe:*:Disabled:RTC App Sharing"
"G:\giFT\giFTl.exe"="G:\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"C:\Program Files\Kontiki\KService.exe"="C:\Program Files\Kontiki\KService.exe:*:Enabled:Delivery Manager Service"
"G:\Kazaa Gold\giFT\giFTl.exe"="G:\Kazaa Gold\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\EXPLORER.EXE"="C:\WINDOWS\EXPLORER.EXE:*:Enabled:Explorer"
"C:\WINDOWS\System32\logonui.exe"="C:\WINDOWS\System32\logonui.exe:*:Enabled:logonui"
"C:\WINDOWS\System32\WINLOGON.EXE"="C:\WINDOWS\System32\WINLOGON.EXE:*:Enabled:winlogon"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2008-12-08 19:45:45 —-D—- C:\Program Files\trend micro
2008-12-08 19:44:22 —-D—- C:\rsit
2008-12-05 17:47:29 —-D—- C:\VundoFix Backups
2008-12-05 17:47:29 —-A—- C:\VundoFix.txt
2008-12-03 14:48:56 —-HD—- C:\$AVG8.VAULT$
2008-12-03 14:44:33 —-A—- C:\WINDOWS\system32\avgrsstx.dll
2008-12-03 14:43:52 —-D—- C:\Program Files\AVG
2008-12-03 14:43:50 —-D—- C:\Documents and Settings\All Users\Application Data\avg8
2008-12-03 14:03:33 —-SH—- C:\WINDOWS\system32\ewifujad.ini
2008-12-03 01:16:24 —-SH—- C:\WINDOWS\system32\idurafus.ini
2008-12-02 13:18:45 —-SH—- C:\WINDOWS\system32\opokezoh.ini
2008-12-02 01:17:23 —-SH—- C:\WINDOWS\system32\ebejolok.ini
2008-12-01 12:54:19 —-SH—- C:\WINDOWS\system32\umabufav.ini
2008-11-30 14:47:14 —-SH—- C:\WINDOWS\system32\efigureh.ini
2008-11-29 22:34:03 —-SH—- C:\WINDOWS\system32\owujedis.ini
2008-11-29 17:42:27 —-D—- C:\Program Files\iTunes
2008-11-29 17:42:27 —-D—- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-29 17:39:31 —-D—- C:\Program Files\Bonjour
2008-11-29 17:38:24 —-D—- C:\Program Files\QuickTime
2008-11-29 10:34:49 —-SH—- C:\WINDOWS\system32\opofimat.ini
2008-11-28 21:06:47 —-SH—- C:\WINDOWS\system32\apogupef.ini
2008-11-28 08:14:33 —-SH—- C:\WINDOWS\system32\opivider.ini
2008-11-27 18:21:13 —-D—- C:\Program Files\Windows Live Safety Center
2008-11-27 16:41:06 —-SH—- C:\WINDOWS\system32\etajuram.ini
2008-11-27 03:57:05 —-SH—- C:\WINDOWS\system32\ojapuwuv.ini
2008-11-26 15:56:43 —-SH—- C:\WINDOWS\system32\ifobabiy.ini
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaws.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaw.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\java.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\deploytk.dll
2008-11-12 11:29:01 —-HD—- C:\WINDOWS\$NtUninstallKB957097$
2008-11-12 11:28:53 —-HD—- C:\WINDOWS\$NtUninstallKB954459$
2008-11-12 11:28:23 —-HD—- C:\WINDOWS\$NtUninstallKB955069$

======List of files/folders modified in the last 1 months======

2008-12-08 20:06:44 —-A—- C:\WINDOWS\system32\eRLog.ini
2008-12-08 20:02:42 —-A—- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt
2008-12-08 20:00:12 —-A—- C:\WINDOWS\SchedLgU.Txt
2008-11-15 01:31:16 —-A—- C:\WINDOWS\win.ini
2008-11-12 11:28:58 —-A—- C:\WINDOWS\imsins.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-12-03 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-12-03 26824]
R1 IKSysFlt;System Filter Driver; C:\WINDOWS\system32\drivers\iksysflt.sys [2008-08-25 66952]
R1 IKSysSec;System Security Driver; C:\WINDOWS\system32\drivers\iksyssec.sys [2008-08-25 81288]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 pctfw2;pctfw2; \??\C:\WINDOWS\system32\drivers\pctfw2.sys []
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-12-03 76040]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2004-10-15 11354]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2003-05-21 175360]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-06-25 34048]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-06-25 276480]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2004-12-08 16896]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-01-24 1038208]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2005-01-24 207616]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-02-08 804572]
R3 int15.sys;int15.sys; \??\C:\Program Files\acer\eRecovery\int15.sys []
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-05-27 22016]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-03-30 6144]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2005-05-27 1317152]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-07 185824]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-02-10 157056]
R3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel® PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-10-29 3222784]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-01-24 703616]
S1 TDSSserv.sys;TDSSserv.sys; C:\WINDOWS\system32\drivers\TDSSserv.sys.sys []
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-01-10 449888]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 BCM42RLY;BCM42RLY; \??\C:\WINDOWS\System32\BCM42RLY.SYS []
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-25 44032]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GTNDIS5;GTNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\GTNDIS5.SYS []
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2003-04-04 30336]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USB_RNDIS;Linksys Wireless-G USB Network Adapter with SpeedBooster Driver v2; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2007-10-31 30464]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2004-08-16 1287168]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-12-03 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-12-03 231704]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 EvtEng;EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2004-10-15 86016]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-26 152984]
R2 KService;KService; C:\Program Files\Kontiki\KService.exe [2007-04-23 3068352]
R2 RegSrvc;RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2004-10-15 139264]
R2 S24EventMonitor;Spectrum24 Event Monitor; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2004-10-15 360521]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2008-06-13 356920]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2008-10-09 1079176]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2003-04-04 77824]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

—————–EOF—————–
Post #6
Hi tomwaterston,

There is evidence that a P2P program is or was used on this computer, C:\Program Files\My Kazaa Gold. The use of this program may be the cause of your problems. Please do not use this program or similar while we are cleaning this machine.

Please Back up your registry with ERUNT
  • Download ERUNT from Here and save it to your desktop.
  • Double click erunt-setup.exe to install the program
  • Follow the prompts and install using the default configuration (setup language, install location, shortcuts…).
  • Click No when you are prompted about creating an ERUNT entry in the startup folder.
  • At the next screen, uncheck Show documentation and check Launch ERUNT
  • If ERUNT doesn't start by itself, launch it from the desktop shortcut.
  • Choose a location for the backup

    The default location C:\WINDOWS\ERDNT\[today's date] is preferred
  • At the configuration screen, make sure all 3 checkboxes are checked
  • Click Ok to run the backup process
  • When prompted, click YES to create a new folder.
  • Progress bars will show backup status.
  • A confirmation window will popup when complete. Click OK to close.

Download and save to your desktop Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.
If you use Firefox browser
  • Click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser
  • Click Opera at the top and choose: Select All
  • Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.

Note your computer may boot a little slower the first couple of times.

Next double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Please post the malwarebytes log in your next reply.

Finally for now, please obtain a new RSIT log. There will be only a log.txt this time.

Please post the MBAM log and the RSIT log.txt in your next reply. Don't forget to include the RSIT info.txt from the previous run.

Please tell me how your computer is at the moment.

Thanks
Post #7
Thanks, OK all done, followed your advice. MBAM did find some malware and says it has deleted them which is good.

Please find the logs below. First the MBAM log, then the new RSIT log.txt and then the other RSIT info.txt log which I couldnt find before.

MBAM log:

Malwarebytes' Anti-Malware 1.31
Database version: 1456
Windows 5.1.2600 Service Pack 3

11/12/2008 16:54:42
mbam-log-2008-12-11 (16-54-42).txt

Scan type: Quick Scan
Objects scanned: 54477
Time elapsed: 5 minute(s), 58 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 13
Registry Values Infected: 5
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm313e2b3d (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rirawapola (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search;\ (Adware.Hotbar) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


RSIT log.txt:

Logfile of random's system information tool 1.04 (written by random/random)
Run by [removed] at 2008-12-11 17:22:25
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 11 GB (40%) free of 27 GB
Total RAM: 502 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:25:23, on 11/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\My Book\WD Backup\uBBMonitor.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Documents and Settings\Tom\Desktop\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Tom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Tiscali
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;;*.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKUS\S-1-5-19\..\Run: [rirawapola] Rundll32.exe "C:\WINDOWS\system32\nivunaso.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [rirawapola] Rundll32.exe "C:\WINDOWS\system32\nivunaso.dll",s (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WD Backup Monitor.lnk = C:\Program Files\My Book\WD Backup\uBBMonitor.exe
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.co.uk
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo…toUploader5.cab
O16 - DPF: {2A493D5F-8914-4D3E-8BF3-767F281862F4} (TraderMediaImgX Control) - http://sell.autotrader.co.uk/uk-ola/common/TraderMediaX.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://tommyw1986.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase6662.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1130160263281
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Facebo…Uploader4_5.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\wenunuve.dll,c:\windows\system32\gulobimu.dll,avgrsstx.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

–
End of file - 11714 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-09-29 1082880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-12-03 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java™ Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-26 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-04-07 323904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-26 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-26 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-02-08 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-02-08 126976]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-10-07 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-10-07 688218]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2005-03-28 188416]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2005-03-24 2880512]
"LManager"=C:\Program Files\Launch Manager\QtZgAcer.EXE [2005-03-28 319488]
"eRecoveryService"=C:\Windows\System32\Check.exe [2005-03-23 245760]
"EPSON Stylus DX3800 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE [2005-02-08 98304]
"PCMService"=C:\Program Files\Arcade\PCMService.exe [2005-03-09 49152]
"WD Button Manager"=C:\WINDOWS\system32\WDBtnMgr.exe [2006-12-19 339968]
"4oD"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2008-08-25 1168264]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-26 136600]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2005-07-19 221184]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2005-06-08 458752]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2005-06-08 217088]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-12-03 1261336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2008-12-03 399504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"kdx"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2005-06-08 196608]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
WD Backup Monitor.lnk - C:\Program Files\My Book\WD Backup\uBBMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\WINDOWS\system32\wenunuve.dll,c:\windows\system32\gulobimu.dll,avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-02-08 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\WINDOWS\system32\wenunuve.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcoreservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Enabled:Windows Messenger"
"C:\Program Files\myTunes Redux\mDNSResponder.exe"="C:\Program Files\myTunes Redux\mDNSResponder.exe:*:Disabled:mDNSResponder"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Real\RealPlayer\RealPlay.exe"="C:\Program Files\Real\RealPlayer\RealPlay.exe:*:Enabled:RealPlayer"
"C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe"="C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe:*:Enabled:MessengerDiscovery Live the Windows Live Messenger addon"
"C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE"="C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE:*:Enabled:RealPlayer"
"C:\Program Files\My Kazaa Gold\giFT\giFTl.exe"="C:\Program Files\My Kazaa Gold\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\Program Files\MessengerDiscovery\Loader.exe"="C:\Program Files\MessengerDiscovery\Loader.exe:*:Enabled:Loader"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QuickTime\QuickTimePlayer.exe"="C:\Program Files\QuickTime\QuickTimePlayer.exe:*:Enabled:QuickTime Player"
"C:\WINDOWS\System32\rtcshare.exe"="C:\WINDOWS\System32\rtcshare.exe:*:Disabled:RTC App Sharing"
"G:\giFT\giFTl.exe"="G:\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"C:\Program Files\Kontiki\KService.exe"="C:\Program Files\Kontiki\KService.exe:*:Enabled:Delivery Manager Service"
"G:\Kazaa Gold\giFT\giFTl.exe"="G:\Kazaa Gold\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\EXPLORER.EXE"="C:\WINDOWS\EXPLORER.EXE:*:Enabled:Explorer"
"C:\WINDOWS\System32\logonui.exe"="C:\WINDOWS\System32\logonui.exe:*:Enabled:logonui"
"C:\WINDOWS\System32\WINLOGON.EXE"="C:\WINDOWS\System32\WINLOGON.EXE:*:Enabled:winlogon"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2008-12-11 16:44:29 —-D—- C:\Documents and Settings\Tom\Application Data\Malwarebytes
2008-12-11 16:44:04 —-D—- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-11 16:44:04 —-D—- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-11 16:32:28 —-D—- C:\WINDOWS\ERDNT
2008-12-11 16:31:07 —-D—- C:\Program Files\ERUNT
2008-12-08 19:45:45 —-D—- C:\Program Files\trend micro
2008-12-08 19:44:22 —-D—- C:\rsit
2008-12-05 17:47:29 —-D—- C:\VundoFix Backups
2008-12-05 17:47:29 —-A—- C:\VundoFix.txt
2008-12-03 14:48:56 —-HD—- C:\$AVG8.VAULT$
2008-12-03 14:44:33 —-A—- C:\WINDOWS\system32\avgrsstx.dll
2008-12-03 14:43:52 —-D—- C:\Program Files\AVG
2008-12-03 14:43:50 —-D—- C:\Documents and Settings\All Users\Application Data\avg8
2008-12-03 14:03:33 —-SH—- C:\WINDOWS\system32\ewifujad.ini
2008-12-03 01:16:24 —-SH—- C:\WINDOWS\system32\idurafus.ini
2008-12-02 13:18:45 —-SH—- C:\WINDOWS\system32\opokezoh.ini
2008-12-02 01:17:23 —-SH—- C:\WINDOWS\system32\ebejolok.ini
2008-12-01 12:54:19 —-SH—- C:\WINDOWS\system32\umabufav.ini
2008-11-30 14:47:14 —-SH—- C:\WINDOWS\system32\efigureh.ini
2008-11-29 22:34:03 —-SH—- C:\WINDOWS\system32\owujedis.ini
2008-11-29 17:42:27 —-D—- C:\Program Files\iTunes
2008-11-29 17:42:27 —-D—- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-29 17:39:31 —-D—- C:\Program Files\Bonjour
2008-11-29 17:38:24 —-D—- C:\Program Files\QuickTime
2008-11-29 10:34:49 —-SH—- C:\WINDOWS\system32\opofimat.ini
2008-11-28 21:06:47 —-SH—- C:\WINDOWS\system32\apogupef.ini
2008-11-28 08:14:33 —-SH—- C:\WINDOWS\system32\opivider.ini
2008-11-27 18:21:13 —-D—- C:\Program Files\Windows Live Safety Center
2008-11-27 16:41:06 —-SH—- C:\WINDOWS\system32\etajuram.ini
2008-11-27 03:57:05 —-SH—- C:\WINDOWS\system32\ojapuwuv.ini
2008-11-26 15:56:43 —-SH—- C:\WINDOWS\system32\ifobabiy.ini
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaws.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaw.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\java.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\deploytk.dll
2008-11-12 11:29:01 —-HD—- C:\WINDOWS\$NtUninstallKB957097$
2008-11-12 11:28:53 —-HD—- C:\WINDOWS\$NtUninstallKB954459$
2008-11-12 11:28:23 —-HD—- C:\WINDOWS\$NtUninstallKB955069$

======List of files/folders modified in the last 1 months======

2008-12-11 16:26:16 —-A—- C:\WINDOWS\system32\eRLog.ini
2008-12-11 16:24:48 —-A—- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt
2008-12-11 16:21:40 —-A—- C:\WINDOWS\SchedLgU.Txt
2008-11-15 01:31:16 —-A—- C:\WINDOWS\win.ini
2008-11-12 11:28:58 —-A—- C:\WINDOWS\imsins.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-12-03 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-12-03 26824]
R1 IKSysFlt;System Filter Driver; C:\WINDOWS\system32\drivers\iksysflt.sys [2008-08-25 66952]
R1 IKSysSec;System Security Driver; C:\WINDOWS\system32\drivers\iksyssec.sys [2008-08-25 81288]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 pctfw2;pctfw2; \??\C:\WINDOWS\system32\drivers\pctfw2.sys []
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-12-03 76040]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2004-10-15 11354]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2003-05-21 175360]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-06-25 34048]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-06-25 276480]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2004-12-08 16896]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-01-24 1038208]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2005-01-24 207616]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-02-08 804572]
R3 int15.sys;int15.sys; \??\C:\Program Files\acer\eRecovery\int15.sys []
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-05-27 22016]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-03-30 6144]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2005-05-27 1317152]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-07 185824]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-02-10 157056]
R3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel® PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-10-29 3222784]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-01-24 703616]
S1 TDSSserv.sys;TDSSserv.sys; C:\WINDOWS\system32\drivers\TDSSserv.sys.sys []
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-01-10 449888]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 BCM42RLY;BCM42RLY; \??\C:\WINDOWS\System32\BCM42RLY.SYS []
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-25 44032]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GTNDIS5;GTNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\GTNDIS5.SYS []
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2003-04-04 30336]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USB_RNDIS;Linksys Wireless-G USB Network Adapter with SpeedBooster Driver v2; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2007-10-31 30464]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2004-08-16 1287168]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-12-03 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-12-03 231704]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 EvtEng;EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2004-10-15 86016]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-26 152984]
R2 KService;KService; C:\Program Files\Kontiki\KService.exe [2007-04-23 3068352]
R2 RegSrvc;RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2004-10-15 139264]
R2 S24EventMonitor;Spectrum24 Event Monitor; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2004-10-15 360521]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2008-06-13 356920]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2008-10-09 1079176]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2003-04-04 77824]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

—————–EOF—————–



RSIT info.txt

info.txt logfile of random's system information tool 1.04 2008-12-08 19:46:27

======Uninstall list======

–>C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
–>C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Acer Inc.\Acer English Online Help Creator\Uninst.isu"
–>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
4oD–>MsiExec.exe /I {8B7443F5-E141-42A0-AB61-ED2331AAD606}
Acer eManager for Notebook–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{827289F5-B44F-4E49-9993-840741585A62}
Acer eNetManagement–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C06554A1-2C1E-4D20-B613-EE62C79927CC}\Setup.exe" -l0x9
Acer ePowerManagement–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\Setup.exe" -l0x9
Acer GridVista–>C:\WINDOWS\UnInst32.exe GridV.UNI
Adobe Flash Player 10 ActiveX–>C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin–>C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.3–>MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81300000003}
Adobe® Photoshop® Album Starter Edition 3.2–>MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Apple Mobile Device Support–>MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update–>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Arcade 3.0–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
AVG Free 8.0–>C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Bonjour–>MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Compatibility Pack for the 2007 Office system–>MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
Conexant AC-Link Audio–>CIAunwdm.exe
EPSON Copy Utility 3–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x9 -UnInstall
EPSON Printer Software–>C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /r
EPSON Scan–>C:\Program Files\epson\escndv\setup\setup.exe /r
HijackThis 2.0.2–>"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Internet Explorer 7 (KB947864)–>"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Hotfix for Windows Media Format 11 SDK (KB929399)–>"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)–>"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)–>"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Intel® Graphics Media Accelerator Driver for Mobile–>RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV;_2792 PCI\VEN_8086&DEV;_2592
Intel® PROSet/Wireless Software–>C:\WINDOWS\Installer\iProInst.exe
iPod for Windows 2005-09-23–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /l1033
iPod for Windows 2006-01-10–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{3D047C15-C859-45F7-81CE-F2681778069B} /l1033
iTunes–>MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
Java™ 6 Update 10–>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java™ 6 Update 7–>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Launch Manager–>C:\WINDOWS\UnInst32.exe QtZgAcer.UNI
Linksys Wireless-G USB Network Adapter–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C7EEF2B9-8C16-4A04-B98D-B1A952A47E55}\setup.exe" -l0x9
LiveReg (Symantec Corporation)–>C:\Program Files\Common Files\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
Logitech QuickCam Software–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe" -l0x9
Logitech® Camera Driver–>"C:\Program Files\Common Files\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
Macromedia Shockwave Player–>C:\WINDOWS\system32\MACROMED\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\MACROMED\SHOCKW~1\INSTALL.LOG
mCore–>MsiExec.exe /I{6DE14BE4-6F04-4935-8ABD-A0A19FE2E55A}
Microsoft .NET Framework 2.0 Service Pack 1–>MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP–>"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs–>"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs–>"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Visio Viewer 2007–>MsiExec.exe /I{95120000-0052-0409-0000-0000000FF1CE}
Microsoft Office XP Standard–>MsiExec.exe /I{91120409-6000-11D3-8CFE-0050048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0–>"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works 7.0–>MsiExec.exe /I{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}
mMHouse–>MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
mPfMgr–>MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
mProSafe–>MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
MSXML 4.0 SP2 (KB927978)–>MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)–>MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)–>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
mWlsSafe–>MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
My Kazaa Gold–>MsiExec.exe /X{21329DB6-ACC2-48AC-BE6E-BDDBCEB667D7}
NTI Backup NOW! 4–>C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1033 BUN4
NTI CD & DVD-Maker–>C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1033 CDM7
QuickTime–>MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
RealPlayer–>C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Rhapsody Player Engine–>MsiExec.exe /I{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}
Safari–>MsiExec.exe /I{582D2A53-F426-4C5E-A2E6-43C1AB36B907}
Security Update for CAPICOM (KB931906)–>MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)–>MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Windows Internet Explorer 7 (KB928090)–>"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB929969)–>"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB931768)–>"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB933566)–>"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB937143)–>"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127)–>"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB939653)–>"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB942615)–>"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB944533)–>"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB950759)–>"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB953838)–>"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB956390)–>"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Security Update for Windows Media Player 10 (KB911565)–>"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Security Update for Windows Media Player 10 (KB917734)–>"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB936782)–>"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)–>"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464)–>"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)–>"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)–>"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950760)–>"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)–>"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)–>"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)–>"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376)–>"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)–>"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)–>"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)–>"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)–>"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953839)–>"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)–>"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954459)–>"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)–>"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)–>"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)–>"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)–>"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)–>"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)–>"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)–>"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Skype™ 3.8–>MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SoftV92 Data Fax Modem with SmartCP–>C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV;_266D&SUBSYS;_00661025\HXFSETUP.EXE -U -Iqta00665.inf
Spyware Doctor 6.0–>C:\Program Files\Spyware Doctor\unins000.exe /LOG
Synaptics Pointing Device Driver–>rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Texas Instruments PCIxx21/x515 drivers.–>C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8E50332B-772C-4AEA-BF56-94DE6A1D5F10} /l1033
TomTom HOME–>C:\Program Files\TomTom HOME 2\Uninstall TomTom HOME.exe
Update for Windows XP (KB951072-v2)–>"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)–>"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
VC_MergeModuleToMSI–>MsiExec.exe /I{900A92BA-19EF-4A34-86CF-7B6C85BDD971}
WD Backup–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A351224F-533A-4EED-89F4-0BF3417FD31D}\setup.exe" -l0x9
WD Diagnostics–>MsiExec.exe /X{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}
WD Firewire HID Driver–>MsiExec.exe /X{FD6C6B7F-5696-48C5-A601-2EE9E50C3D46}
Windows Defender Signatures–>MsiExec.exe /I{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}
Windows Imaging Component–>"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Messenger–>MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Windows Live OneCare safety scanner–>RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Live Sign-in Assistant–>MsiExec.exe /I{F652D238-5F29-42D5-BAF3-0115EF977EC2}
Windows Media Format 11 runtime–>"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime–>"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11–>"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11–>"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3–>"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver–>C:\Program Files\WinRAR\uninstall.exe

======Security center information======

AV: Spyware Doctor with AntiVirus
AV: AVG Anti-Virus Free

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Intel\Wireless\Bin\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

—————–EOF—————–


If it does help with the diagnostic, you mentioned previosly it might be to do with the program My Kazza Gold. I have had this on my computer for a few years now for my music and not had any problems like this before. However Ive not used it for over a year now so im asuming it is unlikely that this is the cause but im not an expert so it could be. I know I got this trojan while I was on the internet. I cannot remember any specific sites but I remember all of this suddenly happening (getting loads of internet pages starting up on their own) while I was on the internet. I assume this when I got the trojan.


To be honest, after following your instructions, I haven't had any of the same symptoms which is very good.

Does this mean that we have got rid of it or could i still be infected??

regards
Tom
Post #8
Hi tomwaterston,

Unfortunately it's still there. I see you also have Spyware Doctor's antivirus enabled. This means you have 2 antivirus programs and you should only have one. When you disable it for this next tool, leave it disabled.

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Please post the combofix log and a new HJT (hijackthis) log in your next reply.

Thanks
Post #9
Ok, downloaded Combofix from Link 1. followed your instructions step by step, below are the logs from comboFix and the new Hijackthis log:

ComboFix log:

ComboFix 08-12-14.01 - Tom 2008-12-14 19:01:17.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.267 [GMT 0:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\IE4 Error Log.txt
c:\windows\system32\apogupef.ini
c:\windows\system32\drivers\npf.sys
c:\windows\system32\ebejolok.ini
c:\windows\system32\efigureh.ini
c:\windows\system32\etajuram.ini
c:\windows\system32\ewifujad.ini
c:\windows\system32\idurafus.ini
c:\windows\system32\ifobabiy.ini
c:\windows\system32\ojapuwuv.ini
c:\windows\system32\opivider.ini
c:\windows\system32\opofimat.ini
c:\windows\system32\opokezoh.ini
c:\windows\system32\owujedis.ini
c:\windows\system32\packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\umabufav.ini
c:\windows\system32\wpcap.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Service_NPF
——-\Service_TDSSserv.sys


((((((((((((((((((((((((( Files Created from 2008-11-14 to 2008-12-14 )))))))))))))))))))))))))))))))
.

2008-12-11 22:10 . 2008-12-11 22:10 d——– c:\documents and settings\All Users\Application Data\Avg8
2008-12-11 16:44 . 2008-12-11 16:44 d——– c:\program files\Malwarebytes' Anti-Malware
2008-12-11 16:44 . 2008-12-11 16:44 d——– c:\documents and settings\Tom\Application Data\Malwarebytes
2008-12-11 16:44 . 2008-12-11 16:44 d——– c:\documents and settings\All Users\Application Data\Malwarebytes
2008-12-11 16:44 . 2008-12-03 19:54 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-11 16:44 . 2008-12-03 19:54 15,504 –a—— c:\windows\system32\drivers\mbam.sys
2008-12-11 16:31 . 2008-12-11 16:31 d——– c:\program files\ERUNT
2008-12-08 19:45 . 2008-12-08 19:45 d——– c:\program files\trend micro
2008-12-08 19:44 . 2008-12-08 19:44 d——– C:\rsit
2008-12-05 17:47 . 2008-12-05 17:47 d——– C:\VundoFix Backups
2008-11-29 17:42 . 2008-11-29 17:42 d——– c:\program files\iTunes
2008-11-29 17:42 . 2008-11-29 17:42 d——– c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-29 17:39 . 2008-11-29 17:39 d——– c:\program files\Bonjour
2008-11-29 17:38 . 2008-11-29 17:38 d——– c:\program files\QuickTime
2008-11-27 18:21 . 2008-11-27 18:21 d——– c:\program files\Windows Live Safety Center
2008-11-26 10:46 . 2008-11-26 10:46 410,976 –a—— c:\windows\system32\deploytk.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-05 23:32 ——— d—–w c:\documents and settings\Tom\Application Data\Uniblue
2008-10-24 11:21 455,296 ——w c:\windows\system32\drivers\mrxsmb.sys
2008-10-24 11:21 455,296 ——w c:\windows\system32\dllcache\mrxsmb.sys
2008-10-17 21:44 ——— d—–w c:\program files\Logitech
2008-10-17 21:33 ——— d—–w c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
2008-10-15 17:34 337,408 ——w c:\windows\system32\dllcache\netapi32.dll
2008-10-03 18:41 6,066,176 ——w c:\windows\system32\dllcache\ieframe.dll
2008-09-30 16:43 1,286,152 —-a-w c:\windows\system32\msxml4.dll
2008-09-15 13:12 1,846,400 ——w c:\windows\system32\win32k.sys
2008-09-15 13:12 1,846,400 ——w c:\windows\system32\dllcache\win32k.sys
2008-04-13 12:06 55,376 —-a-w c:\documents and settings\Tom\Application Data\GDIPFONTCACHEV1.DAT
2008-08-26 12:19 32,768 –sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008082620080827\index.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"kdx"="c:\program files\Kontiki\KHost.exe" [2007-04-23 1032640]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2005-06-08 196608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-02-08 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-02-08 126976]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-07 98394]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-07 688218]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"EPM-DM"="c:\acer\epm\epm-dm.exe" [2005-03-28 188416]
"ePowerManagement"="c:\acer\ePM\ePM.exe" [2005-03-24 2880512]
"LManager"="c:\program files\Launch Manager\QtZgAcer.EXE" [2005-03-28 319488]
"eRecoveryService"="c:\windows\System32\Check.exe" [2005-03-23 245760]
"EPSON Stylus DX3800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE" [2005-02-08 98304]
"PCMService"="c:\program files\Arcade\PCMService.exe" [2005-03-09 49152]
"4oD"="c:\program files\Kontiki\KHost.exe" [2007-04-23 1032640]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2008-08-25 1168264]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-26 136600]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-06-08 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-06-08 217088]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"WD Button Manager"="WDBtnMgr.exe" [2006-12-19 c:\windows\system32\WDBtnMgr.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 39264]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
WD Backup Monitor.lnk - c:\program files\My Book\WD Backup\uBBMonitor.exe [2006-12-19 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\MSMSGS.EXE"=
"c:\\Program Files\\Real\\RealPlayer\\RealPlay.exe"=
"c:\\Program Files\\Real\\RealPlayer\\TRUEPLAY.EXE"=
"c:\\Program Files\\My Kazaa Gold\\giFT\\giFTl.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QuickTime\\QuickTimePlayer.exe"=
"c:\\WINDOWS\\System32\\rtcshare.exe"=
"c:\\Program Files\\Kontiki\\KService.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3689:TCP"= 3689:TCP:Haz

R1 pctfw2;pctfw2;\??\c:\windows\system32\drivers\pctfw2.sys [2008-02-10 160792]
R2 EpmPsd;Acer EPM Power Scheme Driver;\??\c:\windows\system32\drivers\epm-psd.sys [2005-09-25 4096]
R2 EpmShd;Acer EPM System Hardware Driver;\??\c:\windows\system32\drivers\epm-shd.sys [2005-09-25 78208]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2008-02-10 356920]
.
Contents of the 'Scheduled Tasks' folder

2008-12-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
.
——- Supplementary Scan ——-
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid;=ie7&rls;=com.microsoft:en-US&ie;=utf8&oe;=utf8
mSearch Bar = hxxp://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
uInternet Settings,ProxyOverride = localhost;;*.local
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: &Search;
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
LSP: c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll

c:\windows\Downloaded Program Files\TraderMediaX.ocx - O16 -: {2A493D5F-8914-4D3E-8BF3-767F281862F4}
hxxp://sell.autotrader.co.uk/uk-ola/common/TraderMediaX.cab
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-14 19:07:32
Windows 5.1.2600 Service Pack 3 FAT NTAPI

detected NTDLL code modification:
ZwClose

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'lsass.exe'(876)
c:\program files\Common Files\PC Tools\LSP\PCTLsp.dll
.
———————— Other Running Processes ————————
.
c:\program files\INTEL\WIRELESS\BIN\EVTENG.EXE
c:\program files\INTEL\WIRELESS\BIN\S24EVMON.EXE
c:\acer\EMANAGER\ANBMSERV.EXE
c:\program files\COMMON FILES\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
c:\program files\BONJOUR\MDNSRESPONDER.EXE
c:\program files\JAVA\JRE6\BIN\JQS.EXE
c:\program files\KONTIKI\KSERVICE.EXE
c:\program files\INTEL\WIRELESS\BIN\REGSRVC.EXE
c:\program files\SPYWARE DOCTOR\PCTSSVC.EXE
c:\program files\Logitech\Video\FxSvr2.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\acer\eRecovery\Monitor.exe
c:\program files\Internet Explorer\IEXPLORE.EXE
.
**************************************************************************
.
Completion time: 2008-12-14 19:16:58 - machine was rebooted
ComboFix-quarantined-files.txt 2008-12-14 19:16:42

Pre-Run: 11,858,329,600 bytes free
Post-Run: 11,835,686,912 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

194 — E O F — 2008-11-12 11:31:06


New Hijackthis RSIT log:


Logfile of random's system information tool 1.04 (written by random/random)
Run by [removed] at 2008-12-14 19:39:47
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 11 GB (42%) free of 27 GB
Total RAM: 502 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:39:56, on 14/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\svchost.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\Arcade\PCMService.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\My Book\WD Backup\uBBMonitor.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Tom\Desktop\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Tom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;;*.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WD Backup Monitor.lnk = C:\Program Files\My Book\WD Backup\uBBMonitor.exe
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.co.uk
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo…toUploader5.cab
O16 - DPF: {2A493D5F-8914-4D3E-8BF3-767F281862F4} (TraderMediaImgX Control) - http://sell.autotrader.co.uk/uk-ola/common/TraderMediaX.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://tommyw1986.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase6662.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1130160263281
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Facebo…Uploader4_5.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

–
End of file - 10739 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-09-29 1082880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java™ Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-26 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-04-07 323904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-26 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-26 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-02-08 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-02-08 126976]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-10-07 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-10-07 688218]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2005-03-28 188416]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2005-03-24 2880512]
"LManager"=C:\Program Files\Launch Manager\QtZgAcer.EXE [2005-03-28 319488]
"eRecoveryService"=C:\Windows\System32\Check.exe [2005-03-23 245760]
"EPSON Stylus DX3800 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE [2005-02-08 98304]
"PCMService"=C:\Program Files\Arcade\PCMService.exe [2005-03-09 49152]
"WD Button Manager"=C:\WINDOWS\system32\WDBtnMgr.exe [2006-12-19 339968]
"4oD"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2008-08-25 1168264]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-26 136600]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2005-07-19 221184]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2005-06-08 458752]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2005-06-08 217088]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"kdx"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2005-06-08 196608]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
WD Backup Monitor.lnk - C:\Program Files\My Book\WD Backup\uBBMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-02-08 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcoreservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Enabled:Windows Messenger"
"C:\Program Files\Real\RealPlayer\RealPlay.exe"="C:\Program Files\Real\RealPlayer\RealPlay.exe:*:Enabled:RealPlayer"
"C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE"="C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE:*:Enabled:RealPlayer"
"C:\Program Files\My Kazaa Gold\giFT\giFTl.exe"="C:\Program Files\My Kazaa Gold\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QuickTime\QuickTimePlayer.exe"="C:\Program Files\QuickTime\QuickTimePlayer.exe:*:Enabled:QuickTime Player"
"C:\WINDOWS\System32\rtcshare.exe"="C:\WINDOWS\System32\rtcshare.exe:*:Disabled:RTC App Sharing"
"C:\Program Files\Kontiki\KService.exe"="C:\Program Files\Kontiki\KService.exe:*:Enabled:Delivery Manager Service"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2008-12-14 19:17:07 —-A—- C:\ComboFix.txt
2008-12-14 19:10:31 —-D—- C:\WINDOWS\LastGood
2008-12-14 19:00:33 —-A—- C:\Boot.bak
2008-12-14 19:00:30 —-RASHD—- C:\cmdcons
2008-12-14 18:50:58 —-A—- C:\WINDOWS\zip.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\VFIND.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\SWXCACLS.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\SWSC.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\SWREG.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\sed.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\NIRCMD.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\grep.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\fdsv.exe
2008-12-14 18:50:52 —-D—- C:\Qoobox
2008-12-11 22:10:03 —-D—- C:\Documents and Settings\All Users\Application Data\Avg8
2008-12-11 16:44:29 —-D—- C:\Documents and Settings\Tom\Application Data\Malwarebytes
2008-12-11 16:44:04 —-D—- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-11 16:44:04 —-D—- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-11 16:32:28 —-D—- C:\WINDOWS\ERDNT
2008-12-11 16:31:07 —-D—- C:\Program Files\ERUNT
2008-12-08 19:45:45 —-D—- C:\Program Files\trend micro
2008-12-08 19:44:22 —-D—- C:\rsit
2008-12-05 17:47:29 —-D—- C:\VundoFix Backups
2008-12-05 17:47:29 —-A—- C:\VundoFix.txt
2008-11-29 17:42:27 —-D—- C:\Program Files\iTunes
2008-11-29 17:42:27 —-D—- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-29 17:39:31 —-D—- C:\Program Files\Bonjour
2008-11-29 17:38:24 —-D—- C:\Program Files\QuickTime
2008-11-27 18:21:13 —-D—- C:\Program Files\Windows Live Safety Center
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaws.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaw.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\java.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\deploytk.dll

======List of files/folders modified in the last 1 months======

2008-12-14 19:09:32 —-A—- C:\WINDOWS\system32\eRLog.ini
2008-12-14 19:08:44 —-A—- C:\WINDOWS\system.ini
2008-12-14 19:06:50 —-A—- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt
2008-12-14 19:00:34 —-RASH—- C:\boot.ini
2008-12-14 18:52:18 —-A—- C:\WINDOWS\SchedLgU.Txt
2008-11-15 01:31:16 —-A—- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 IKSysFlt;System Filter Driver; C:\WINDOWS\system32\drivers\iksysflt.sys [2008-08-25 66952]
R1 IKSysSec;System Security Driver; C:\WINDOWS\system32\drivers\iksyssec.sys [2008-08-25 81288]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 pctfw2;pctfw2; \??\C:\WINDOWS\system32\drivers\pctfw2.sys []
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2004-10-15 11354]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2003-05-21 175360]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-06-25 34048]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-06-25 276480]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2004-12-08 16896]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-01-24 1038208]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2005-01-24 207616]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-02-08 804572]
R3 int15.sys;int15.sys; \??\C:\Program Files\acer\eRecovery\int15.sys []
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-03-30 6144]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-07 185824]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-02-10 157056]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel® PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-10-29 3222784]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-01-24 703616]
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-01-10 449888]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 BCM42RLY;BCM42RLY; \??\C:\WINDOWS\System32\BCM42RLY.SYS []
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-25 44032]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GTNDIS5;GTNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\GTNDIS5.SYS []
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-05-27 22016]
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2005-05-27 1317152]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USB_RNDIS;Linksys Wireless-G USB Network Adapter with SpeedBooster Driver v2; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2007-10-31 30464]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2004-08-16 1287168]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 EvtEng;EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2004-10-15 86016]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-26 152984]
R2 KService;KService; C:\Program Files\Kontiki\KService.exe [2007-04-23 3068352]
R2 RegSrvc;RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2004-10-15 139264]
R2 S24EventMonitor;Spectrum24 Event Monitor; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2004-10-15 360521]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2008-06-13 356920]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2008-10-09 1079176]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2003-04-04 77824]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

—————–EOF—————–


I hope that's what you need. Has the combofix worked? let me know if you need me to do anything else

Regards
Tom
Post #10
Hi tomwaterston,

This looks a lot better.

A comment regarding your antivirus program. I should have been a little clearer in my instructions regarding having 2 antivirus programs at the same time. I simply meant that yous should leave the antivirus portion of Spyware Doctor disabled. This way you would have 1 antivirus program, AVG, and an antispyware program, Spyware Doctor. Since it looks like you uninstalled AVG, please re-enable Spyware Doctor's antvirus.

Are you experiencing any problem with any applications or tools such as Acer Launch tool utility? RSIT reports several files missing, we'll check to see if they are there.

Please download DirLook by jpshortstuff from one of the following mirrors:
Link 1
Link 2
Link 3
  • Double-click DirLook.exe to run it
  • Ensure that Show Hidden Files/Folders and BBCode Ouput are both checked.
  • Copy the content of the following codebox into the main textfield, (Do not copy the word CODE)

    C:\WINDOWS\system32\drivers
C:\Program Files\acer\eRecovery 
C:\WINDOWS\system32
  • Click the DirLook button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please attach this log in your next reply. (Note: The log can also be found at C:\DirLook.txt)

To attach a file, do the following:
  • Click Add Reply
  • Under the reply panel is the Attachments Panel
  • Browse for the attachment file you want to upload, then click the green Upload button
  • Once it has uploaded, click the Manage Current Attachments drop down box
  • Click on [external image: Posted Image] to insert the attachment into your post.
Then, Please go to Kaspersky website and perform an online antivirus scan.

  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, Adware, Dialers, and other potentially dangerous programs
  • Archives
  • Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As….
  • Change the Files of type to Text file (.txt) then click the Save button.
  • Please post this log in your next reply along with a new HijackThis log.
Note:Disable your antivirus before running the scan and re-enable once the scan is complete.

Let me know how things are now.

Thanks
Post #11
Hi,

Right I understand. Yes I have deleted the AVG antivirus. Reason being is it was only a basic free download which I downloaded when PC Tools wouldnt delete this original trojan. However, after the AVG antivirus wouldnt delete it either, I though it would be best to stick with the full PC Tools antivirus and spyware system, afterall, I did pay for it.

In answer to your question, I haven't noticed any problems with any applications as such. The only occasional problem I have noticed is when I start my computer. There is the odd occasion when i switch my laptop on and an error message comes up on a blue screen saying "system error" and doesnt go any futher. Does that have anything to do with the "Acer Launch tool facility" you have just mentioned?? This doesnt happen all the time, only occasionally, and when it does happen it usualy works as normal after a restart. Wierd. This started to happen before i got this virus though. Don't know if you can help with this or not.

Below is the DirLook log: (I couldnt attach it as your instructions because the file was too large i.e. 576kb and your attachments can only upload 250kb! I assume posting it on here will sufice)

DirLook.exe v2.0 by jpshortstuff
Log created at 14:33 on 16/12/2008
==================================
Contents of "C:\WINDOWS\system32\drivers"

—FOLDERS—

disdn (Created on 30/03/2005 at 11:40) d—–
etc (Created on 30/03/2005 at 11:40) d—–
UMDF (Created on 01/01/2007 at 22:26) d—–

—FILES—

1394bus.sys (53376 bytes - created on 03/08/2004 at 23:10, modified on 13/04/2008 at 19:46) ——
ACER_Crane2_XPH.MRK (2 bytes - created on 30/03/2005 at 11:59, modified on 19/12/2002 at 02:44) ——
acpi.sys (187776 bytes - created on 03/08/2004 at 23:07, modified on 13/04/2008 at 19:36) ——
acpiec.sys (11648 bytes - created on 17/08/2001 at 13:57, modified on 04/08/2004 at 05:00) ——
adv01nt5.dll (4255 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
adv02nt5.dll (3967 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
adv05nt5.dll (3615 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
adv07nt5.dll (3647 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
adv08nt5.dll (3135 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
adv09nt5.dll (3711 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
adv11nt5.dll (3775 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
aec.sys (142592 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 17:39) ——
afc.sys (11776 bytes - created on 19/12/2006 at 11:01, modified on 23/02/2005 at 14:58) ——
afd.sys (138496 bytes - created on 30/03/2005 at 11:37, modified on 14/08/2008 at 11:04) ——
agp440.sys (42368 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
agpcpq.sys (44928 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
alim1541.sys (42752 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
amdagp.sys (43008 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
amdk6.sys (37376 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:31) ——
amdk7.sys (37760 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:31) ——
ar5211.sys (449888 bytes - created on 30/03/2005 at 11:39, modified on 10/01/2005 at 00:47) ——
arp1394.sys (60800 bytes - created on 03/08/2004 at 22:58, modified on 13/04/2008 at 19:51) ——
asyncmac.sys (14336 bytes - created on 30/03/2005 at 11:37, modified on 13/04/2008 at 19:57) ——
atapi.sys (96512 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
ati1btxx.sys (56623 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1mdxx.sys (11615 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1pdxx.sys (12047 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1raxx.sys (30671 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1rvxx.sys (63663 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1snxx.sys (26367 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1ttxx.sys (21343 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1tuxx.sys (36463 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1xbxx.sys (29455 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati1xsxx.sys (34735 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati2mtaa.sys (327040 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ati2mtag.sys (701440 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinbtxx.sys (57856 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinmdxx.sys (13824 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinpdxx.sys (14336 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinraxx.sys (52224 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinrvxx.sys (104960 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinsnxx.sys (28672 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinttxx.sys (13824 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atintuxx.sys (73216 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinxbxx.sys (31744 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
atinxsxx.sys (63488 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
ativmc20.cod (64352 bytes - created on 26/08/2008 at 10:42, modified on 17/07/2004 at 11:36) ——
atmarpc.sys (59904 bytes - created on 30/03/2005 at 11:37, modified on 13/04/2008 at 19:51) ——
atmepvc.sys (31360 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
atmlane.sys (55808 bytes - created on 30/03/2005 at 11:37, modified on 13/04/2008 at 19:51) ——
atmuni.sys (352256 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
atv01nt5.dll (21183 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
atv02nt5.dll (11359 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
atv04nt5.dll (25471 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
atv06nt5.dll (14143 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
atv10nt5.dll (17279 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
audstub.sys (3072 bytes - created on 30/03/2005 at 11:49, modified on 17/08/2001 at 13:59) ——
b57xp32.sys (175360 bytes - created on 30/03/2005 at 11:39, modified on 21/05/2003 at 19:47) ——
battc.sys (14208 bytes - created on 30/03/2005 at 11:47, modified on 13/04/2008 at 19:36) ——
bcm4sbxp.sys (44032 bytes - created on 30/03/2005 at 11:39, modified on 25/09/2003 at 19:41) ——
beep.sys (4224 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
bridge.sys (71552 bytes - created on 30/03/2005 at 11:37, modified on 13/04/2008 at 19:53) ——
bthenum.sys (17024 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:46) ——
bthmodem.sys (37888 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:46) ——
bthpan.sys (101120 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:51) ——
bthport.sys (272128 bytes - created on 10/06/2008 at 22:14, modified on 13/06/2008 at 12:05) ——
bthprint.sys (36480 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:46) ——
bthusb.sys (18944 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:46) ——
camcaud.sys (34048 bytes - created on 30/03/2005 at 11:31, modified on 25/06/2004 at 14:29) ——
camchal.sys (276480 bytes - created on 30/03/2005 at 11:31, modified on 25/06/2004 at 14:31) ——
cbidf2k.sys (13952 bytes - created on 17/08/2001 at 13:52, modified on 04/08/2004 at 05:00) ——
ccdecode.sys (17024 bytes - created on 26/12/2005 at 21:22, modified on 13/04/2008 at 19:46) ——
cdaudio.sys (18688 bytes - created on 17/08/2001 at 13:52, modified on 04/08/2004 at 05:00) ——
cdfs.sys (63744 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:14) ——
cdrom.sys (62976 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
ch7xxnt5.dll (15423 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
cinemst2.sys (262528 bytes - created on 17/08/2001 at 14:02, modified on 04/08/2004 at 05:00) ——
classpnp.sys (49536 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:16) ——
CmBatt.sys (13952 bytes - created on 30/03/2005 at 11:47, modified on 13/04/2008 at 19:36) ——
compbatt.sys (10240 bytes - created on 30/03/2005 at 11:47, modified on 13/04/2008 at 19:36) ——
cpqdap01.sys (11776 bytes - created on 17/08/2001 at 13:24, modified on 04/08/2004 at 05:00) ——
crusoe.sys (36736 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:31) ——
cxthsfs2.cty (129045 bytes - created on 26/08/2008 at 10:42, modified on 17/07/2004 at 22:55) ——
disk.sys (36352 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
diskdump.sys (14208 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:40) ——
DKbFltr.SYS (16896 bytes - created on 25/09/2005 at 07:49, modified on 08/12/2004 at 14:10) ——
dmboot.sys (799744 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:44) ——
dmio.sys (153344 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:44) ——
dmload.sys (5888 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
DMusic.sys (52864 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:45) ——
DriverLanguageMap.xml (434 bytes - created on 30/08/2004 at 12:55, modified on 30/08/2004 at 12:55) ——
drmk.sys (60160 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:45) ——
drmkaud.sys (2944 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:45) ——
dxapi.sys (10496 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dxg.sys (71168 bytes - created on 03/08/2004 at 23:00, modified on 13/04/2008 at 19:38) ——
dxgthk.sys (3328 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
enum1394.sys (6400 bytes - created on 30/03/2005 at 11:48, modified on 17/08/2001 at 13:46) ——
epm-psd.sys (4096 bytes - created on 25/09/2005 at 07:44, modified on 19/07/2004 at 13:10) ——
epm-shd.sys (78208 bytes - created on 25/09/2005 at 07:44, modified on 24/03/2005 at 16:54) ——
fastfat.sys (143744 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:14) ——
fdc.sys (27392 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
fips.sys (44544 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:33) ——
flpydisk.sys (20480 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
fltMgr.sys (129792 bytes - created on 30/03/2005 at 11:52, modified on 13/04/2008 at 19:33) ——
fsvga.sys (12160 bytes - created on 17/08/2001 at 13:57, modified on 04/08/2004 at 05:00) ——
fs_rec.sys (7936 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ftdisk.sys (125056 bytes - created on 17/08/2001 at 13:52, modified on 04/08/2004 at 05:00) ——
gagp30kx.sys (46464 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
GEARAspiWDM.sys (15464 bytes - created on 29/01/2008 at 12:01, modified on 17/04/2008 at 13:12) –a—
gm.dls (3440660 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
gmreadme.txt (646 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
hdaudbus.sys (144384 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 17:36) ——
hidbth.sys (25600 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:46) ——
hidclass.sys (36864 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
hidir.sys (19200 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:45) ——
hidparse.sys (24960 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
hidusb.sys (10368 bytes - created on 15/10/2005 at 15:47, modified on 13/04/2008 at 19:45) ——
hsfbs2s2.sys (220032 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
hsfcxts2.sys (685056 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
hsfdpsp2.sys (1041536 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
HSFHWICH.sys (207616 bytes - created on 30/03/2005 at 11:39, modified on 24/01/2005 at 23:26) ——
HSFProf.cty (129045 bytes - created on 30/03/2005 at 11:39, modified on 24/01/2005 at 17:15) ——
HSF_CNXT.sys (703616 bytes - created on 30/03/2005 at 11:39, modified on 24/01/2005 at 23:26) ——
HSF_DPV.sys (1038208 bytes - created on 30/03/2005 at 11:39, modified on 24/01/2005 at 23:27) ——
http.sys (264832 bytes - created on 03/08/2004 at 23:00, modified on 13/04/2008 at 19:53) ——
i8042prt.sys (52480 bytes - created on 03/08/2004 at 23:14, modified on 13/04/2008 at 20:18) ——
ialmnt5.sys (804572 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 11:00) ——
ikfilesec.sys (40840 bytes - created on 10/02/2008 at 16:47, modified on 25/08/2008 at 12:36) –a—
iksysflt.sys (66952 bytes - created on 10/02/2008 at 16:47, modified on 25/08/2008 at 12:36) –a—
iksyssec.sys (81288 bytes - created on 10/02/2008 at 16:47, modified on 25/08/2008 at 12:36) –a—
imapi.sys (42112 bytes - created on 03/08/2004 at 23:00, modified on 13/04/2008 at 19:40) ——
intelide.sys (5504 bytes - created on 30/03/2005 at 11:48, modified on 13/04/2008 at 19:40) ——
intelppm.sys (36352 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:31) ——
ip6fw.sys (36608 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:53) ——
ipfltdrv.sys (32896 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipinip.sys (20864 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:57) ——
ipnat.sys (152832 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:57) ——
ipsec.sys (75264 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:19) ——
irda.sys (88192 bytes - created on 30/03/2005 at 11:48, modified on 13/04/2008 at 19:54) ——
irenum.sys (11264 bytes - created on 30/03/2005 at 11:46, modified on 13/04/2008 at 19:54) ——
isapnp.sys (37248 bytes - created on 17/08/2001 at 13:58, modified on 13/04/2008 at 19:36) ——
kbdclass.sys (24576 bytes - created on 03/08/2004 at 22:58, modified on 13/04/2008 at 19:39) ——
kcom.sys (29576 bytes - created on 10/02/2008 at 16:47, modified on 02/06/2008 at 16:19) –a—
kmixer.sys (172416 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:45) ——
ks.sys (141056 bytes - created on 03/08/2004 at 23:15, modified on 13/04/2008 at 20:16) ——
ksecdd.sys (92288 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:31) ——
lvcm.sys (1317152 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:32) –a—
lvsvf2.sys (2180096 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:23) –a—
LVUSBSta.sys (22016 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:31) –a—
mbam.sys (15504 bytes - created on 11/12/2008 at 16:44, modified on 03/12/2008 at 19:54) –a—
mbamswissarmy.sys (38496 bytes - created on 11/12/2008 at 16:44, modified on 03/12/2008 at 19:54) –a—
mcd.sys (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mdmxsdk.sys (11868 bytes - created on 30/03/2005 at 11:39, modified on 03/08/2004 at 22:41) ——
mf.sys (63744 bytes - created on 03/08/2004 at 23:07, modified on 13/04/2008 at 19:36) ——
mnmdd.sys (4224 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
modem.sys (30080 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 20:00) ——
mouclass.sys (23040 bytes - created on 03/08/2004 at 22:58, modified on 13/04/2008 at 19:39) ——
mouhid.sys (12160 bytes - created on 15/10/2005 at 15:47, modified on 17/08/2001 at 13:48) ——
mountmgr.sys (42368 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:39) ——
mrxdav.sys (180608 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:32) ——
mrxsmb.sys (455296 bytes - created on 30/03/2005 at 11:38, modified on 24/10/2008 at 11:21) ——
msfs.sys (19072 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:32) ——
msgpc.sys (35072 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:56) ——
msircomm.sys (22016 bytes - created on 20/10/2005 at 11:00, modified on 13/04/2008 at 19:54) ——
mskssrv.sys (7552 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:39) ——
mspclock.sys (5376 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:39) ——
mspqm.sys (4992 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:39) ——
mssmbios.sys (15488 bytes - created on 03/08/2004 at 23:07, modified on 13/04/2008 at 19:36) ——
mstee.sys (5504 bytes - created on 26/12/2005 at 21:23, modified on 13/04/2008 at 19:39) ——
mtlmnt5.sys (126686 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
mtlstrm.sys (1309184 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
mtxparhm.sys (452736 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
mup.sys (105344 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:17) ——
mutohpen.sys (12672 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:43) ——
nabtsfec.sys (85248 bytes - created on 26/12/2005 at 21:22, modified on 13/04/2008 at 19:46) ——
ndis.sys (182656 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:20) ——
NdisIP.sys (10880 bytes - created on 26/12/2005 at 21:22, modified on 13/04/2008 at 19:46) ——
ndistapi.sys (10112 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:57) ——
ndisuio.sys (14592 bytes - created on 03/08/2004 at 23:03, modified on 13/04/2008 at 19:55) ——
ndiswan.sys (91520 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:20) ——
ndproxy.sys (40576 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:57) ——
netbios.sys (34688 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:56) ——
netbt.sys (162816 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:21) ——
netwlan5.img (67866 bytes - created on 26/08/2008 at 10:42, modified on 17/07/2004 at 11:35) ——
nic1394.sys (61824 bytes - created on 03/08/2004 at 22:58, modified on 13/04/2008 at 19:51) ——
nikedrv.sys (12032 bytes - created on 17/08/2001 at 13:24, modified on 04/08/2004 at 05:00) ——
nmnt.sys (40320 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:53) ——
npfs.sys (30848 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:32) ——
nscirda.sys (28672 bytes - created on 30/03/2005 at 11:48, modified on 13/04/2008 at 19:54) ——
ntfs.sys (574976 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:15) ——
NTIDrvr.sys (6144 bytes - created on 30/03/2005 at 12:22, modified on 30/03/2005 at 12:23) ——
ntmtlfax.sys (180360 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
null.sys (2944 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
nv4_mini.sys (1897408 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
nwlnkflt.sys (12416 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
nwlnkfwd.sys (32512 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
nwlnkipx.sys (88320 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:56) ——
nwlnknb.sys (63232 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
nwlnkspx.sys (55936 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ohci1394.sys (61696 bytes - created on 03/08/2004 at 23:10, modified on 13/04/2008 at 19:46) ——
oprghdlr.sys (3456 bytes - created on 17/08/2001 at 13:57, modified on 04/08/2004 at 05:00) ——
OsaFsLoc.sys (10890 bytes - created on 24/02/2005 at 10:16, modified on 24/02/2005 at 10:16) ——
osaio.sys (8704 bytes - created on 04/03/2005 at 16:37, modified on 04/03/2005 at 16:37) ——
osanbm.sys (4010 bytes - created on 14/01/2005 at 15:57, modified on 14/01/2005 at 15:57) ——
p3.sys (42752 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:31) ——
parport.sys (80128 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
partmgr.sys (19712 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:40) ——
parvdm.sys (6784 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pci.sys (68224 bytes - created on 03/08/2004 at 23:07, modified on 13/04/2008 at 19:36) ——
pciide.sys (3328 bytes - created on 17/08/2001 at 13:51, modified on 04/08/2004 at 05:00) ——
pciidex.sys (24960 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
pcmcia.sys (120192 bytes - created on 03/08/2004 at 23:07, modified on 13/04/2008 at 19:36) ——
pctfw2.sys (160792 bytes - created on 10/02/2008 at 16:47, modified on 06/08/2008 at 15:01) –a—
pfc.sys (10368 bytes - created on 30/03/2005 at 12:20, modified on 05/12/2003 at 03:46) ——
portcls.sys (146048 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 20:19) ——
processr.sys (35840 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:31) ——
psched.sys (69120 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:56) ——
ptilink.sys (17792 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasacd.sys (8832 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasirda.sys (19584 bytes - created on 30/03/2005 at 11:48, modified on 17/08/2001 at 13:51) ——
rasl2tp.sys (51328 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:19) ——
raspppoe.sys (41472 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:57) ——
raspptp.sys (48384 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:19) ——
raspti.sys (16512 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rawwan.sys (34432 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rdbss.sys (175744 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:28) ——
rdpcdd.sys (4224 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rdpdr.sys (196224 bytes - created on 30/03/2005 at 11:50, modified on 13/04/2008 at 19:32) ——
rdpwd.sys (139656 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:13) ——
recagent.sys (13776 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
redbook.sys (57600 bytes - created on 30/03/2005 at 11:48, modified on 13/04/2008 at 19:40) ——
rfcomm.sys (59136 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:46) ——
rio8drv.sys (12032 bytes - created on 17/08/2001 at 13:24, modified on 04/08/2004 at 05:00) ——
riodrv.sys (12032 bytes - created on 17/08/2001 at 13:24, modified on 04/08/2004 at 05:00) ——
RMCast.sys (203136 bytes - created on 30/03/2005 at 11:38, modified on 08/05/2008 at 15:02) ——
rndismp.sys (30592 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:56) ——
rndismpx.sys (30592 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:56) ——
rootmdm.sys (5888 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
s24trans.sys (11354 bytes - created on 15/10/2004 at 11:20, modified on 15/10/2004 at 11:20) ——
s3gnbm.sys (166912 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
sbp2port.sys (43904 bytes - created on 06/01/2006 at 22:25, modified on 13/04/2008 at 19:40) ——
scsiport.sys (96384 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
sdbus.sys (79232 bytes - created on 03/08/2004 at 23:07, modified on 13/04/2008 at 19:36) ——
secdrv.sys (20480 bytes - created on 30/03/2005 at 11:38, modified on 13/11/2007 at 10:25) ——
serenum.sys (15744 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
serial.sys (64512 bytes - created on 03/08/2004 at 23:15, modified on 13/04/2008 at 20:15) ——
sffdisk.sys (11904 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
sffp_mmc.sys (10240 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:40) ——
sffp_sd.sys (11008 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
sfloppy.sys (11392 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:40) ——
siint5.dll (3901 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
sisagp.sys (40960 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
slip.sys (11136 bytes - created on 26/12/2005 at 21:22, modified on 13/04/2008 at 19:46) ——
slnt7554.sys (129535 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
slntamr.sys (404990 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
slnthal.sys (95424 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
slwdmsup.sys (13240 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:41) ——
smbali.sys (5888 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
smclib.sys (14592 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sonydcam.sys (25344 bytes - created on 03/08/2004 at 23:09, modified on 13/04/2008 at 19:46) ——
splitter.sys (6272 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:45) ——
sr.sys (73472 bytes - created on 30/03/2005 at 11:52, modified on 13/04/2008 at 19:36) ——
srv.sys (333824 bytes - created on 30/03/2005 at 11:38, modified on 08/09/2008 at 11:41) ——
StMp3Rec.sys (38229 bytes - created on 06/01/2006 at 12:39, modified on 18/12/2004 at 20:32) ——
stream.sys (49408 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
StreamIP.sys (15232 bytes - created on 26/12/2005 at 21:22, modified on 13/04/2008 at 19:46) ——
swenum.sys (4352 bytes - created on 03/08/2004 at 22:58, modified on 13/04/2008 at 19:39) ——
swmidi.sys (56576 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 19:45) ——
SynTP.sys (185824 bytes - created on 30/03/2005 at 12:11, modified on 07/10/2004 at 23:33) ——
sysaudio.sys (60800 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 20:15) ——
tape.sys (14976 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:40) ——
tcpip.sys (361600 bytes - created on 30/03/2005 at 11:38, modified on 20/06/2008 at 12:51) ——
tcpip6.sys (225856 bytes - created on 30/03/2005 at 11:38, modified on 20/06/2008 at 12:08) ——
tdi.sys (19072 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 20:00) ——
tdpipe.sys (12040 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:13) ——
tdtcp.sys (21896 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:13) ——
termdd.sys (40840 bytes - created on 30/03/2005 at 11:50, modified on 14/04/2008 at 01:13) ——
tifm21.sys (157056 bytes - created on 10/02/2005 at 09:52, modified on 10/02/2005 at 09:52) ——
tosdvd.sys (51712 bytes - created on 17/08/2001 at 14:01, modified on 04/08/2004 at 05:00) ——
tsbvcap.sys (21376 bytes - created on 17/08/2001 at 14:06, modified on 04/08/2004 at 05:00) ——
tunmp.sys (12288 bytes - created on 03/08/2004 at 23:03, modified on 13/04/2008 at 19:56) ——
uagp35.sys (44672 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
UBHelper.sys (13952 bytes - created on 17/12/2004 at 17:14, modified on 17/12/2004 at 17:14) ——
udfs.sys (66048 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:32) ——
update.sys (384768 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:39) ——
usb8023.sys (12800 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:56) ——
usb8023x.sys (12800 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:56) ——
usbaapl.sys (30464 bytes - created on 11/11/2007 at 12:22, modified on 31/10/2007 at 14:09) –a—
usbaudio.sys (60032 bytes - created on 26/12/2005 at 21:22, modified on 13/04/2008 at 19:45) ——
usbcamd.sys (25600 bytes - created on 17/08/2001 at 14:03, modified on 13/04/2008 at 19:45) ——
usbcamd2.sys (25728 bytes - created on 17/08/2001 at 14:03, modified on 13/04/2008 at 19:45) ——
usbccgp.sys (32128 bytes - created on 15/10/2005 at 15:56, modified on 13/04/2008 at 19:45) ——
usbd.sys (4736 bytes - created on 17/08/2001 at 14:03, modified on 04/08/2004 at 05:00) ——
usbehci.sys (30208 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
usbhub.sys (59520 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
usbintel.sys (15872 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
usbport.sys (143872 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
usbprint.sys (25856 bytes - created on 15/10/2005 at 15:57, modified on 13/04/2008 at 19:47) ——
usbstor.sys (26368 bytes - created on 29/09/2005 at 12:41, modified on 13/04/2008 at 19:45) ——
usbuhci.sys (20608 bytes - created on 03/08/2004 at 23:08, modified on 13/04/2008 at 19:45) ——
usbvideo.sys (121984 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:46) ——
vchnt5.dll (11325 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
vdmindvd.sys (58112 bytes - created on 17/08/2001 at 14:02, modified on 04/08/2004 at 05:00) ——
verfile.tic (13 bytes - created on 25/09/2005 at 07:47, modified on 10/11/2004 at 11:06) ——
vga.sys (20992 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:44) ——
viaagp.sys (42240 bytes - created on 26/08/2008 at 10:42, modified on 13/04/2008 at 19:36) ——
videoprt.sys (81664 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:44) ——
volsnap.sys (52352 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:41) ——
w29n51.sys (3222784 bytes - created on 25/09/2005 at 07:47, modified on 29/10/2004 at 18:48) ——
wacompen.sys (14208 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:43) ——
wadv07nt.sys (11807 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
wadv08nt.sys (11295 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
wadv09nt.sys (11871 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
wadv11nt.sys (11935 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
wanarp.sys (34560 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:57) ——
watv06nt.sys (22271 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
watv10nt.sys (25471 bytes - created on 26/08/2008 at 10:42, modified on 03/08/2004 at 22:29) ——
wdfwhid.sys (17408 bytes - created on 22/03/2006 at 11:37, modified on 22/03/2006 at 11:37) ——
wdmaud.sys (83072 bytes - created on 30/03/2005 at 12:04, modified on 13/04/2008 at 20:17) ——
wmilib.sys (4352 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wpdusb.sys (38528 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 20:00) ——
ws2ifsl.sys (12032 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wstcodec.sys (19200 bytes - created on 26/12/2005 at 21:22, modified on 13/04/2008 at 19:46) ——
WudfPf.sys (77568 bytes - created on 28/09/2006 at 18:55, modified on 28/09/2006 at 18:55) ——
WudfRd.sys (82944 bytes - created on 28/09/2006 at 19:00, modified on 28/09/2006 at 19:00) ——

==================================
Contents of "C:\Program Files\acer\eRecovery"

—FOLDERS—

HelpFiles (Created on 25/09/2005 at 07:50) d—–

—FILES—

AboutNTISDK.dll (45056 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 15:53) –a—
BlockDll.dll (15360 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 10:42) –a—
catply.exe (49152 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
CdrMmc32.dll (159744 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 14:51) –a—
Cdrw32.bdb (432419 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
Cdrw32.dll (196608 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 14:51) –a—
CdrwEx32.dll (65536 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 15:41) –a—
CloseProcessWindow.dll (159744 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
cximage.dll (786432 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
cximagecrt.dll (778240 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
cximaged.dll (1351680 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
Data32.dll (139264 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 16:19) –a—
DataEx32.dll (65536 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 17:37) –a—
eRecovery.cab (22573 bytes - created on 25/09/2005 at 07:50, modified on 23/03/2005 at 10:09) –a—
eRecovery.exe (458752 bytes - created on 25/09/2005 at 07:50, modified on 28/03/2005 at 13:51) –a—
eRecovery_EN.ini (11182 bytes - created on 25/09/2005 at 07:54, modified on 15/12/2008 at 11:22) –a—
extResource.dll (65536 bytes - created on 25/09/2005 at 07:50, modified on 18/03/2005 at 10:56) –a—
ImagFile.dll (14848 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 16:19) –a—
int15.sys (69632 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
LogFile.dll (15360 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 15:56) –a—
MBRwrWin.exe (69632 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
MFC71.dll (1060864 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
MFC71u.dll (1047552 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
Monitor.exe (360448 bytes - created on 25/09/2005 at 07:50, modified on 28/03/2005 at 13:52) –a—
Mpeg2Dec.dll (40960 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 16:19) –a—
mscoree.dll (155648 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
msvcp71.dll (499712 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
msvcr71.dll (348160 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
NtiAspi.dll (49152 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 11:42) –a—
SysInfo.dll (24576 bytes - created on 25/09/2005 at 07:50, modified on 13/01/2005 at 14:46) –a—
Video32.dll (126976 bytes - created on 25/09/2005 at 07:50, modified on 02/02/2005 at 17:37) –a—

==================================
Contents of "C:\WINDOWS\system32"

—FOLDERS—

1025 (Created on 30/03/2005 at 11:40) d—–
1028 (Created on 30/03/2005 at 11:40) d—–
1031 (Created on 30/03/2005 at 11:40) d—–
1033 (Created on 30/03/2005 at 11:40) d—–
1037 (Created on 30/03/2005 at 11:40) d—–
1041 (Created on 30/03/2005 at 11:40) d—–
1042 (Created on 30/03/2005 at 11:40) d—–
1054 (Created on 30/03/2005 at 11:40) d—–
2052 (Created on 30/03/2005 at 11:40) d—–
3076 (Created on 30/03/2005 at 11:40) d—–
3com_dmi (Created on 30/03/2005 at 11:40) d—–
autorun (Created on 25/09/2005 at 08:01) d—–
bits (Created on 26/08/2008 at 12:05) d—–
CatRoot (Created on 30/03/2005 at 11:45) d—–
CatRoot2 (Created on 30/03/2005 at 11:45) d—–
Com (Created on 30/03/2005 at 11:51) d—–
config (Created on 30/03/2005 at 11:40) d—–
dhcp (Created on 30/03/2005 at 11:40) d—–
DirectX (Created on 30/03/2005 at 11:53) d—–
dllcache (Created on 30/03/2005 at 11:40) dr-hs-
drivers (Created on 30/03/2005 at 11:40) d-a—
DRVSTORE (Created on 09/05/2006 at 09:53) d—–
en (Created on 26/08/2008 at 12:05) d—–
en-US (Created on 28/11/2006 at 15:49) d—–
export (Created on 30/03/2005 at 11:40) d—–
FxsTmp (Created on 30/03/2005 at 11:51) d—–
hywztkmk (Created on 21/03/2007 at 15:44) d–hs-
ias (Created on 30/03/2005 at 11:40) d—–
icsxml (Created on 30/03/2005 at 11:40) d—–
IME (Created on 30/03/2005 at 11:40) d—–
inetsrv (Created on 30/03/2005 at 11:40) d—–
LogFiles (Created on 04/01/2006 at 20:50) d—–
Macromed (Created on 30/03/2005 at 11:52) d—–
Microsoft (Created on 30/03/2005 at 11:59) d—s-
MsDtc (Created on 30/03/2005 at 11:51) d—–
mui (Created on 30/03/2005 at 11:40) d—–
npp (Created on 30/03/2005 at 11:40) d—–
oobe (Created on 30/03/2005 at 11:40) d-a—
PreInstall (Created on 30/09/2005 at 07:50) d—–
ras (Created on 30/03/2005 at 11:40) d—–
ReinstallBackups (Created on 30/03/2005 at 12:01) d—–
Restore (Created on 30/03/2005 at 11:52) d—–
scripting (Created on 26/08/2008 at 12:05) d—–
Setup (Created on 30/03/2005 at 11:40) d—–
ShellExt (Created on 30/03/2005 at 11:40) d—–
SoftwareDistribution (Created on 26/09/2005 at 08:00) d—–
spool (Created on 30/03/2005 at 11:40) d—–
URTTemp (Created on 24/10/2005 at 01:19) d—–
usmt (Created on 30/03/2005 at 11:40) d—–
wbem (Created on 30/03/2005 at 11:40) d—–
wins (Created on 30/03/2005 at 11:40) d—–
xircom (Created on 30/03/2005 at 11:54) d—–

—FILES—

$winnt$.inf (856 bytes - created on 30/03/2005 at 11:45, modified on 25/09/2005 at 07:42) ——
12520437.cpx (2151 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
12520850.cpx (2233 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
6to4svc.dll (100352 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
a15.tbl (1460 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
a234.tbl (44370 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
aaaamon.dll (25600 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
aaclient.dll (136192 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
access.cpl (68608 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
acctres.dll (64512 bytes - created on 30/03/2005 at 11:52, modified on 04/08/2004 at 05:00) ——
accwiz.exe (184320 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
acelpdec.ax (61952 bytes - created on 30/03/2005 at 11:39, modified on 04/08/2004 at 05:00) ——
ACERBACKUPCDLog.TXT (513 bytes - created on 25/09/2005 at 08:05, modified on 25/09/2005 at 09:42) ——
acledit.dll (129536 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
aclui.dll (115712 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
acode.tbl (44370 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
activeds.dll (193536 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
activeds.tlb (111104 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
actmovie.exe (4096 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
actxprxy.dll (98304 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
admparse.dll (71680 bytes - created on 30/03/2005 at 11:37, modified on 07/11/2006 at 03:26) ——
adptif.dll (26112 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
adsldp.dll (175616 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
adsldpc.dll (143360 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
adsmsext.dll (68096 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
adsnt.dll (263680 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
advapi32.dll (617472 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
advpack.dll (124928 bytes - created on 30/03/2005 at 11:37, modified on 16/10/2008 at 20:38) –a—
advpack.dll.mui (10240 bytes - created on 07/11/2006 at 03:25, modified on 07/11/2006 at 03:25) ——
AegisE5.dll (1396831 bytes - created on 05/01/2006 at 11:23, modified on 19/01/2005 at 11:01) ——
ahui.exe (98304 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
alg.exe (44544 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) –a—
alrsvc.dll (17408 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
amcompat.tlb (16832 bytes - created on 30/03/2005 at 11:54, modified on 01/01/2007 at 22:33) ——
amstream.dll (70656 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
ansi.sys (9029 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
apcups.dll (102912 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
append.exe (12498 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
apphelp.dll (125952 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
appwiz.cpl (549888 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
arp.exe (19456 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
arphr.tbl (110566 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
arptr.tbl (16312 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
array30.tab (146126 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
arrayhw.tab (18600 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
asctrls.ocx (114688 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:08) ——
asferror.dll (7168 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
asycfilt.dll (65024 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
at.exe (25088 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
ATHPRXY.DLL (32768 bytes - created on 29/01/2004 at 14:08, modified on 29/01/2004 at 14:08) ——
ati2cqag.dll (229376 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
ati2dvaa.dll (377984 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
ati2dvag.dll (201728 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
ati3d1ag.dll (870784 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
ati3duag.dll (1888992 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
ativdaxx.ax (9728 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
ativmvxx.ax (23040 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
ativtmxx.dll (32768 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
ativvaxx.dll (516768 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
atkctrs.dll (13312 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
atl.dll (58880 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
atl70.dll (84992 bytes - created on 05/01/2002 at 03:18, modified on 05/01/2002 at 03:18) ——
atl71.dll (89088 bytes - created on 18/03/2003 at 21:05, modified on 18/03/2003 at 20:05) –a—
atmadm.exe (11264 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
atmfd.dll (285696 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:09) ——
atmlib.dll (30208 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
atmpvcno.dll (34816 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
atrace.dll (11264 bytes - created on 30/03/2005 at 11:52, modified on 04/08/2004 at 05:00) ——
attrib.exe (12288 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
Audiodev.dll (276992 bytes - created on 22/09/2004 at 18:45, modified on 18/10/2006 at 21:47) ——
audiosrv.dll (42496 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
auditusr.exe (14336 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
authz.dll (62464 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
autochk.exe (588800 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
autoconv.exe (602624 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
autodisc.dll (80384 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
AUTOEXEC.NT (1688 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
autofmt.exe (580608 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
autolfn.exe (11264 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
avicap.dll (69584 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
avicap32.dll (64000 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
avifil32.dll (84992 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
avifile.dll (109456 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
avmeter.dll (16384 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
avtapi.dll (227840 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
avwav.dll (73216 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
azroles.dll (233472 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
basesrv.dll (52736 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
batmeter.dll (29184 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
batt.dll (8704 bytes - created on 30/03/2005 at 11:46, modified on 14/04/2008 at 01:11) ——
bcm42rly.sys (17992 bytes - created on 05/01/2006 at 11:23, modified on 01/02/2005 at 18:18) ——
bidispl.dll (17408 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
big5.nls (66728 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
bios1.rom (28420 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
bios4.rom (8191 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
bitsprx2.dll (8192 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
bitsprx3.dll (7168 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
bitsprx4.dll (7168 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
blackbox.dll (542720 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
blastcln.exe (71680 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
bootok.exe (4608 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
bootvid.dll (12288 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
bootvrfy.exe (5120 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
bopomofo.nls (82172 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
bopomofo.uce (22984 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
browselc.dll (63488 bytes - created on 30/03/2005 at 11:37, modified on 13/04/2008 at 18:03) –a—
browser.dll (77824 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
browseui.dll (1025024 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
browsewm.dll (78336 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
bthci.dll (20992 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:11) ——
bthprops.cpl (110592 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
bthserv.dll (30208 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:11) ——
btpanui.dll (50688 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
cabinet.dll (60416 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) –a—
cabview.dll (84480 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:11) ——
cacls.exe (19968 bytes - created on 30/03/2005 at 11:37, modified on 14/04/2008 at 01:12) ——
calc.exe (114688 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
camcpl.cpl (282624 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 15:13) –a—
camocx.dll (50688 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
capesnpn.dll (150016 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
capicom.dll (466944 bytes - created on 26/09/2005 at 07:41, modified on 02/05/2003 at 14:14) –a—
cards.dll (359936 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
catsrv.dll (226304 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
catsrvps.dll (85504 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
catsrvut.dll (625664 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
CAUDINST.dll (32248 bytes - created on 30/03/2005 at 11:31, modified on 28/04/2004 at 23:07) ——
ccfgnt.dll (27648 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cdfview.dll (151040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cdm.dll (92696 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 14:09) –a—
cdmodem.dll (15872 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
cdosys.dll (2091520 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cdplayer.exe.manifest (749 bytes - created on 30/03/2005 at 11:53, modified on 30/03/2005 at 11:53) ——
certcli.dll (194560 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
certmgr.dll (457728 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
certmgr.msc (42339 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cewmdm.dll (229376 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
cfgbkend.dll (38912 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
cfgmgr32.dll (16896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) –a—
chajei.ime (78336 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
charmap.exe (80384 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
chcp.com (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
Check.exe (245760 bytes - created on 25/09/2005 at 07:50, modified on 23/03/2005 at 10:01) ——
chkdsk.exe (11776 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
chkntfs.exe (11264 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
chsbrkr.dll (1677824 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
chtbrkr.dll (838144 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
ciadmin.dll (163328 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ciadv.msc (41762 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cic.dll (148480 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cidaemon.exe (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cintlgnt.ime (21504 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
ciodm.dll (69120 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cisvc.exe (5632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ckcnv.exe (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
clb.dll (10752 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
clbcatex.dll (110592 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
clbcatq.dll (498688 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
cleanmgr.exe (64000 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
cliconf.chm (71859 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cliconfg.dll (77824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cliconfg.exe (20480 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
cliconfg.rll (24576 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:26) ——
clipbrd.exe (102912 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
clipsrv.exe (33280 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
clusapi.dll (58368 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
cmcfg32.dll (15872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cmd.exe (389120 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
cmdial32.dll (344064 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cmdl32.exe (25600 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
cmmgr32.hlp (61172 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cmmon32.exe (39936 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
cmos.ram (64 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cmpbk32.dll (14336 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cmprops.dll (185344 bytes - created on 30/03/2005 at 11:50, modified on 14/04/2008 at 01:11) ——
cmsetACL.dll (13312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cmstp.exe (63488 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
cmutil.dll (39424 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cnbjmon.dll (47104 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:11) –a—
cnetcfg.dll (32768 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
cnvfat.dll (26624 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
colbact.dll (60416 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
comaddin.dll (28160 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
comcat.dll (3584 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
comctl32.dll (617472 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
comctl32.ocx (608448 bytes - created on 22/05/2000 at 17:58, modified on 22/05/2000 at 17:58) ——
comdlg32.dll (276992 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
comdlg32.OCX (152848 bytes - created on 22/05/2000 at 16:58, modified on 09/03/2004 at 01:00) ——
comm.drv (10544 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
command.com (50620 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
commdlg.dll (32816 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
comp.exe (15872 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
compact.exe (17408 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
compatUI.dll (252928 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
compmgmt.msc (38302 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
compobj.dll (30160 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
compstui.dll (229376 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
comrepl.dll (97792 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
comres.dll (792064 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
comsnap.dll (167424 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
comsvcs.dll (1267200 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
comuid.dll (539648 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
CONFIG.NT (2577 bytes - created on 30/03/2005 at 11:54, modified on 30/03/2005 at 11:54) ——
CONFIG.TMP (2577 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
confmsp.dll (357888 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
conime.exe (27648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
console.dll (66560 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
control.exe (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
convert.exe (13824 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
corpol.dll (35328 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
country.sys (27097 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
credssp.dll (12800 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
credui.dll (163840 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
crtdll.dll (149019 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
crypt32.dll (599040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
cryptdlg.dll (74752 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cryptdll.dll (33280 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
cryptext.dll (53760 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
cryptnet.dll (64512 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
cryptsvc.dll (62464 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
cryptui.dll (512512 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
cscdll.dll (101888 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
cscript.exe (135168 bytes - created on 30/03/2005 at 11:38, modified on 07/05/2008 at 10:07) ——
cscui.dll (326656 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
csrsrv.dll (32256 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
csrss.exe (6144 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
csseqchk.dll (73728 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ctfmon.exe (15360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ctl3d32.dll (27136 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ctl3dv2.dll (27200 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ctype.nls (8386 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
c_037.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_10000.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_10001.nls (162850 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_10002.nls (195618 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_10003.nls (177698 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_10004.nls (66082 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_10005.nls (66082 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_10006.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_10007.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_10008.nls (173602 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_10010.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_10017.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_10021.nls (66082 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_10029.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_10079.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_10081.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_10082.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_1026.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1250.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1251.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1252.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1253.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1254.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1255.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1256.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1257.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1258.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_1361.nls (189986 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_20000.nls (180258 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_20127.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_20261.nls (139810 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_20290.nls (66082 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_20866.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_20905.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_20932.nls (180770 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_20936.nls (173602 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_20949.nls (177698 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_21027.nls (66082 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_21866.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_28591.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_28592.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_28593.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
C_28594.NLS (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
C_28595.NLS (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
C_28596.NLS (66082 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
C_28597.NLS (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_28598.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_28599.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_28603.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_28605.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_437.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_500.nls (66082 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_708.nls (66082 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_720.nls (66594 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_737.nls (66594 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_775.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_850.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_852.nls (66594 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_855.nls (66594 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_857.nls (66594 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_860.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_861.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_862.nls (66594 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_863.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_864.nls (66594 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_865.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_866.nls (66594 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_869.nls (66594 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_874.nls (66594 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_875.nls (66082 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
c_932.nls (162850 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_936.nls (196642 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_949.nls (196642 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_950.nls (196642 bytes - created on 30/03/2005 at 11:37, modified on 04/08/2004 at 05:00) ——
c_g18030.dll (218112 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
c_is2022.dll (6656 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
c_iscii.dll (10752 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
d3d8.dll (1179648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
d3d8thk.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
d3d9.dll (1689088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
d3dim.dll (436224 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
d3dim700.dll (824320 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
d3dpmesh.dll (34816 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
d3dramp.dll (590336 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
d3drm.dll (350208 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
d3dx9_27.dll (2319568 bytes - created on 01/01/2007 at 18:57, modified on 22/07/2005 at 19:59) ——
d3dxof.dll (47616 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
danim.dll (1054208 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dataclen.dll (54272 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
datime.dll (165376 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
davclnt.dll (25088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
daxctle.ocx (153088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
dayi.ime (78848 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
dayiphr.tbl (520 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
dayiptr.tbl (700 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
dbgeng.dll (847872 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dbghelp.dll (640000 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dbmsrpcn.dll (24576 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dbnetlib.dll (110592 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dbnmpntw.dll (28672 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
Dcache.bin (1804 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:25) ——
dciman32.dll (8704 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
dcomcnfg.exe (6144 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
ddeml.dll (39424 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ddeshare.exe (30208 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ddraw.dll (279552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
ddrawex.dll (27136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
debug.exe (20634 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
defrag.exe (25088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
deploytk.dll (410976 bytes - created on 26/11/2008 at 10:46, modified on 26/11/2008 at 10:46) –a—
desk.cpl (135168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
deskadp.dll (16384 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
deskmon.dll (16896 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
deskperf.dll (18432 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
desktop.ini (2 bytes - created on 30/03/2005 at 11:52, modified on 04/08/2004 at 05:00) ——
devenum.dll (59904 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
devmgmt.msc (33079 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
devmgr.dll (282624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
DevMngr.vxd (6345 bytes - created on 26/08/2006 at 14:10, modified on 30/10/2002 at 11:00) ——
dfrg.msc (41397 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dfrgfat.exe (82944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dfrgntfs.exe (105472 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dfrgres.dll (51200 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dfrgsnap.dll (39424 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dfrgui.dll (124416 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dfshim.dll (96760 bytes - created on 24/10/2007 at 01:47, modified on 24/10/2007 at 01:47) –a—
dfsshlex.dll (28672 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dgnet.dll (111104 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dgrpsetu.dll (176157 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
dgsetup.dll (85020 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
dhcpcsvc.dll (126976 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dhcpmon.dll (379904 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dhcpqec.dll (48640 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dhcpsapi.dll (74240 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
diactfrm.dll (394240 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
diantz.exe (87040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
digest.dll (68608 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dimap.dll (44032 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dimsntfy.dll (19456 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dimsroam.dll (39936 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dinput.dll (158720 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dinput8.dll (181760 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
diskcomp.com (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
diskcopy.com (7168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
diskcopy.dll (1504256 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
diskmgmt.msc (33673 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
diskpart.exe (163840 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
diskperf.exe (17920 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dispex.dll (32768 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
Divxdec.ax (221215 bytes - created on 30/03/2005 at 12:17, modified on 23/04/2003 at 18:29) ——
dllhost.exe (5120 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dllhst3g.exe (4608 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dmadmin.exe (224768 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dmband.dll (28672 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmcompos.dll (61440 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmconfig.dll (330752 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dmdlgs.dll (285184 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmdskmgr.dll (200704 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmdskres.dll (118784 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dmime.dll (181248 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmintf.dll (18432 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dmloader.dll (35840 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmocx.dll (19456 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dmremote.exe (15872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dmscript.dll (82432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmserver.dll (23552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmstyle.dll (105984 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmsynth.dll (103424 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dmusic.dll (104448 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
dmutil.dll (52224 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:11) ——
dmview.ocx (61440 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dns-sd.exe (87336 bytes - created on 29/08/2008 at 10:18, modified on 29/08/2008 at 10:18) –a—
dnsapi.dll (147968 bytes - created on 30/03/2005 at 11:38, modified on 20/06/2008 at 18:46) –a—
dnsrslvr.dll (45568 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
dnssd.dll (61440 bytes - created on 29/08/2008 at 09:53, modified on 29/08/2008 at 09:53) –a—
docprop.dll (46080 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
docprop2.dll (48128 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
doskey.exe (10752 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dosx.exe (53840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dot3api.dll (26112 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dot3cfg.dll (57856 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dot3dlg.dll (9216 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dot3gpclnt.dll (39936 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dot3msm.dll (56320 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dot3svc.dll (132096 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dot3ui.dll (650752 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
dpcdll.dll (103424 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 22:00) ——
dplay.dll (33040 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dplaysvr.exe (29696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dplayx.dll (229888 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpmodemx.dll (23552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpnaddr.dll (3072 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
dpnet.dll (375296 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpnhpast.dll (35328 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpnhupnp.dll (60928 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpnlobby.dll (3072 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
dpnmodem.dll (62464 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dpnsvr.exe (17920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dpnwsock.dll (61952 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dpserial.dll (53520 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dpvacm.dll (21504 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpvoice.dll (212480 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpvsetup.exe (83456 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dpvvox.dll (116736 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dpwsock.dll (42768 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dpwsockx.dll (57344 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
drmclien.dll (253688 bytes - created on 30/03/2005 at 11:39, modified on 22/09/2004 at 18:45) ——
drmstor.dll (95232 bytes - created on 30/03/2005 at 11:39, modified on 22/09/2004 at 18:45) ——
drmupgds.exe (249856 bytes - created on 18/10/2006 at 20:00, modified on 18/10/2006 at 20:00) ——
drmv2clt.dll (991744 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
drprov.dll (14336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
drwatson.exe (28112 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
drwtsn32.exe (45568 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ds16gt.dLL (4656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ds32gt.dll (16384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dsauth.dll (62976 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dsdmo.dll (181248 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dsdmoprp.dll (71680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dskquota.dll (92672 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dskquoui.dll (155648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dsound.dll (367616 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
dsound.vxd (81 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dsound3d.dll (1293824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dsprop.dll (142848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dsprpres.dll (4096 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:09) ——
dsquery.dll (239104 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dssec.dat (218003 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
dssec.dll (51200 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dssenh.dll (138752 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:37) –a—
dsuiext.dll (113152 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dswave.dll (19456 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dumprep.exe (10752 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
duser.dll (304128 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dvdplay.exe (55296 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
dvdupgrd.exe (17920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dwwin.exe (180224 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dx7vb.dll (619008 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dx8vb.dll (1227264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dxdiag.exe (1298432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
dxdiagn.dll (2113536 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
dxmasf.dll (498742 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:11) ——
dxtmsft.dll (347136 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
dxtrans.dll (214528 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
eapolqec.dll (30720 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
eapp3hst.dll (184832 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
eappcfg.dll (126976 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
eappgnui.dll (94208 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
eapphost.dll (180224 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
eappprxy.dll (40960 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
eapqec.dll (59392 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
eapsvc.dll (33792 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
edit.com (69886 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
edit.hlp (10790 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
edlin.exe (12642 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ega.cpi (127213 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
els.dll (183296 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
emptyregdb.dat (21640 bytes - created on 30/03/2005 at 11:52, modified on 30/03/2005 at 11:52) ——
encapi.dll (20480 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
encdec.dll (186880 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
Epm-Po.dll (221258 bytes - created on 25/09/2005 at 07:44, modified on 01/09/2004 at 23:57) ——
EPPICLocal_BP.cfg (6347 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_CF.cfg (6195 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_DU.cfg (6122 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_EN.cfg (13732 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_ES.cfg (6103 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_FR.cfg (6195 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_GE.cfg (6335 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_IT.cfg (6442 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_KO.cfg (5817 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_PT.cfg (6347 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_RU.cfg (2889 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_SC.cfg (5436 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICLocal_TC.cfg (2426 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPicMgr.dll (65536 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPattern1.dat (26154 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPattern2.dat (20148 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPattern3.dat (24903 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPattern4.dat (11811 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPattern5.dat (21390 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPattern6.dat (4943 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_BP.dat (1139 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_CF.dat (1129 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_DU.dat (1146 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_EN.dat (1104 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_ES.dat (1136 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_FR.dat (1129 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_GE.dat (1107 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_IT.dat (1120 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPresetData_PT.dat (1139 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICPrinterDB.dat (92240 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EpPicPrt.dll (114688 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
EPPICResdb (117 bytes - created on 08/11/2005 at 21:05, modified on 22/05/2006 at 20:51) ——
EPPICResdb0000 (5991 bytes - created on 08/11/2005 at 21:05, modified on 22/05/2006 at 20:51) ——
EqnClass.Dll (103424 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
eRLog.ini (692 bytes - created on 25/09/2005 at 07:54, modified on 15/12/2008 at 11:22) –a—
ersvc.dll (23040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
es.dll (253952 bytes - created on 30/03/2005 at 11:38, modified on 07/07/2008 at 21:26) –a—
esccmd.dll (22016 bytes - created on 28/09/2008 at 13:53, modified on 25/02/2005 at 00:00) –a—
escimgd.dll (46080 bytes - created on 28/09/2008 at 13:53, modified on 25/02/2005 at 00:00) –a—
escwiad.dll (29696 bytes - created on 28/09/2008 at 13:53, modified on 25/02/2005 at 00:00) –a—
esent.dll (1082368 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
esent97.dll (1114896 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
esentprf.dll (17408 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
esentprf.hxx (6708 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
esentprf.ini (1015477 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
esentutl.exe (39424 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
eudcedit.exe (193024 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
eula.txt (47723 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
eventcls.dll (33280 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
eventlog.dll (56320 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
eventvwr.exe (8704 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
eventvwr.msc (56678 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
exe2bin.exe (8424 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
expand.exe (15872 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
expsrv.dll (380445 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
extmgr.dll (133120 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
extrac32.exe (24064 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
exts.dll (125952 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ezsidmv.dat (56 bytes - created on 06/10/2008 at 19:19, modified on 06/10/2008 at 19:19) –ah–
E_DCINST.DLL (49152 bytes - created on 15/10/2005 at 16:03, modified on 10/09/2004 at 21:12) ——
E_FBCBACE.DLL (64000 bytes - created on 15/10/2005 at 16:03, modified on 21/05/2003 at 03:27) ——
E_FBCHACE.DLL (34304 bytes - created on 15/10/2005 at 16:03, modified on 07/06/2000 at 02:01) ——
E_FLMACE.DLL (79679 bytes - created on 15/10/2005 at 16:03, modified on 25/11/2004 at 06:07) ——
f3ahvoas.dll (7168 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
fastopen.exe (882 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
faultrep.dll (80384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
faxpatch.exe (20992 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
fc.exe (14848 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
feclient.dll (21504 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
filemgmt.dll (337920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
find.exe (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
findstr.exe (27136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
finger.exe (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
firewall.cpl (80896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
fixmapi.exe (3072 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
fldrclnr.dll (87552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
fltlib.dll (16896 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
fltMc.exe (23040 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
FM20.DLL (1139472 bytes - created on 25/09/2003 at 12:07, modified on 25/09/2003 at 12:07) ——
FM20ENU.DLL (25872 bytes - created on 18/08/2003 at 14:26, modified on 18/08/2003 at 14:26) ——
fmifs.dll (16384 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
FNTCACHE.DAT (231184 bytes - created on 30/03/2005 at 11:45, modified on 26/10/2008 at 23:20) –a—
fontext.dll (382976 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
fontsub.dll (80896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
fontview.exe (20992 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
forcedos.exe (7680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
format.com (29696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
framebuf.dll (9344 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
freecell.exe (55296 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
fsmgmt.msc (32760 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
fsquirt.exe (193024 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
fsusd.dll (81408 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
fsutil.exe (56320 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ftlx041e.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
ftp.exe (42496 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ftsrch.dll (176128 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
fwcfg.dll (60416 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
fxsapi.dll (451584 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
fxscfgwz.dll (111104 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
fxsclnt.exe (142848 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
fxsclntR.dll (132608 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
fxscom.dll (72192 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxscomex.dll (285184 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxscount.h (1361 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
fxscover.exe (229376 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
fxsdrv.dll (26624 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxsevent.dll (55296 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
fxsext32.dll (23552 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxsmon.dll (23552 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
fxsperf.dll (8704 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxsperf.ini (1793 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
fxsres.dll (6656 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:09) ——
fxsroute.dll (31744 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
fxssend.exe (11264 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
fxsst.dll (562176 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
fxssvc.exe (267776 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
fxst30.dll (246272 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxstiff.dll (397312 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxsui.dll (154112 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxswzrd.dll (192512 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
fxsxp32.dll (400384 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
g711codc.ax (41472 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
gb2312.uce (24006 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
GCCollection.dll (126680 bytes - created on 15/11/2005 at 12:12, modified on 15/11/2005 at 12:12) ——
gcdef.dll (76800 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
gcTypLibA.tlb (328128 bytes - created on 22/04/2005 at 11:58, modified on 22/04/2005 at 11:58) ——
gcUnCompress.dll (95448 bytes - created on 15/11/2005 at 12:12, modified on 15/11/2005 at 12:12) ——
gdi.exe (24576 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
gdi32.dll (286720 bytes - created on 30/03/2005 at 11:38, modified on 23/10/2008 at 12:36) –a—
GEARAspi.dll (107368 bytes - created on 29/01/2008 at 12:02, modified on 17/04/2008 at 13:12) –a—
geo.nls (24772 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
getuname.dll (605696 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
glmf32.dll (285184 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
glu32.dll (122880 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
gpkcsp.dll (101888 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
gpkrsrc.dll (9728 bytes - created on 30/03/2005 at 11:38, modified on 31/12/2006 at 02:26) ——
graftabl.com (26112 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
graphics.com (19694 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
graphics.pro (21232 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
grpconv.exe (39424 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
GTNDIS3.VXD (31930 bytes - created on 05/01/2006 at 11:23, modified on 25/09/2003 at 23:28) ——
GTNDIS5.sys (15872 bytes - created on 05/01/2006 at 11:23, modified on 25/09/2003 at 22:15) ——
GTW32N50.dll (94208 bytes - created on 05/01/2006 at 11:23, modified on 13/10/2003 at 15:30) ——
GWFSPidGen.DLL (23304 bytes - created on 29/08/2005 at 13:27, modified on 29/08/2005 at 13:27) ——
h323.tsp (265728 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
h323log.txt (0 bytes - created on 30/03/2005 at 11:49, modified on 30/03/2005 at 11:49) ——
h323msp.dll (614912 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
HAL.DLL (131840 bytes - created on 03/08/2004 at 22:59, modified on 13/04/2008 at 19:31) ——
hashlib.dll (117976 bytes - created on 15/11/2005 at 12:12, modified on 15/11/2005 at 12:12) ——
hccoin.dll (7168 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:11) ——
hccutils.dll (118784 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:31) ——
hdwwiz.cpl (155136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
help.exe (15872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
hhctrl.ocx (545280 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
hhsetup.dll (41472 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
hid.dll (20992 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:11) –a—
hidphone.tsp (29696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
himem.sys (4768 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
hkcmd.exe (126976 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:32) ——
hlink.dll (72704 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
hlp95en.dll (31744 bytes - created on 20/06/2002 at 18:22, modified on 20/06/2002 at 18:22) ——
Hmpg12.dll (110592 bytes - created on 03/09/2001 at 23:46, modified on 03/09/2001 at 23:46) ——
HMPV2_ENC.dll (118784 bytes - created on 30/07/2001 at 16:33, modified on 30/07/2001 at 16:33) ——
HMPV2_ENC_MMX.dll (118784 bytes - created on 23/07/2001 at 22:04, modified on 23/07/2001 at 22:04) ——
hnetcfg.dll (344064 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
hnetmon.dll (14848 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
hnetwiz.dll (330752 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
homepage.inf (929 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
hostname.exe (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
hotplug.dll (144896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
hsfci012.dll (39018 bytes - created on 30/03/2005 at 11:39, modified on 28/10/2004 at 00:29) ——
hsfcisp2.dll (32285 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:11) ——
hticons.dll (44544 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
html.iec (369664 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:37) ——
httpapi.dll (24576 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
htui.dll (41984 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
htvcdsvcd.ax (226816 bytes - created on 30/03/2005 at 12:23, modified on 25/04/2002 at 21:39) ——
hypertrm.dll (347136 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
iac25_32.ax (199680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
Iacenc.dll (144384 bytes - created on 18/11/1998 at 15:33, modified on 18/11/1998 at 15:33) ——
iAlmCoIn_v4250.dll (61440 bytes - created on 30/03/2005 at 11:32, modified on 07/02/2005 at 19:52) ——
ialmdd5.dll (879226 bytes - created on 30/03/2005 at 11:32, modified on 07/02/2005 at 19:59) ——
ialmdev5.dll (178842 bytes - created on 30/03/2005 at 11:32, modified on 07/02/2005 at 19:52) ——
ialmdnt5.dll (108155 bytes - created on 30/03/2005 at 11:32, modified on 07/02/2005 at 19:52) ——
ialmgdev.dll (516096 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:45) ——
ialmgicd.dll (2289664 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:43) ——
ialmrem.dll (49152 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:52) ——
ialmrnt5.dll (38014 bytes - created on 30/03/2005 at 11:32, modified on 07/02/2005 at 19:52) ——
iasacct.dll (23552 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iasads.dll (41472 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iashlpr.dll (32256 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iasnap.dll (62464 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iaspolcy.dll (17920 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iasrad.dll (119808 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
iasrecst.dll (141312 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iassam.dll (86528 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iassdo.dll (247808 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iassvcs.dll (59392 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
icaapi.dll (11264 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) –a—
icardie.dll (63488 bytes - created on 17/10/2006 at 11:58, modified on 16/10/2008 at 20:38) –a—
iccvid.dll (80384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
icfgnt5.dll (16384 bytes - created on 30/03/2005 at 11:52, modified on 04/08/2004 at 05:00) ——
icm32.dll (254976 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
icmp.dll (3584 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) –a—
icmui.dll (54784 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
icrav03.rat (8798 bytes - created on 01/09/2006 at 07:44, modified on 01/09/2006 at 07:44) ——
icwdial.dll (73728 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
icwphbk.dll (65536 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
ideograf.uce (60458 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
idndl.dll (26112 bytes - created on 29/06/2006 at 08:05, modified on 29/06/2006 at 08:05) ——
idq.dll (120832 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ie4uinit.exe (70656 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 13:11) ——
IE7Eula.rtf (74715 bytes - created on 23/09/2006 at 12:12, modified on 23/09/2006 at 12:12) ——
ieakeng.dll (153088 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
ieaksie.dll (230400 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
ieakui.dll (161792 bytes - created on 30/03/2005 at 11:38, modified on 15/10/2008 at 07:04) ——
ieapfltr.dat (2455488 bytes - created on 05/09/2006 at 23:01, modified on 17/04/2007 at 10:28) ——
ieapfltr.dll (383488 bytes - created on 17/10/2006 at 11:27, modified on 16/10/2008 at 20:38) –a—
iedkcs32.dll (384512 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
ieencode.dll (81920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ieframe.dll (6066176 bytes - created on 07/11/2006 at 21:03, modified on 16/10/2008 at 20:38) –a—
ieframe.dll.mui (991232 bytes - created on 17/10/2006 at 12:02, modified on 08/01/2007 at 19:07) ——
iepeers.dll (191488 bytes - created on 30/03/2005 at 11:38, modified on 07/11/2006 at 21:03) ——
iernonce.dll (44544 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
iertutil.dll (267776 bytes - created on 17/10/2006 at 11:57, modified on 16/10/2008 at 20:38) –a—
iesetup.dll (55296 bytes - created on 30/03/2005 at 11:38, modified on 07/11/2006 at 03:26) ——
ieudinit.exe (13824 bytes - created on 07/11/2006 at 03:26, modified on 16/10/2008 at 13:11) ——
ieui.dll (180736 bytes - created on 07/11/2006 at 21:03, modified on 07/11/2006 at 21:03) ——
ieuinit.inf (56483 bytes - created on 30/03/2005 at 11:38, modified on 07/11/2006 at 03:24) ——
iexpress.exe (114688 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ifmon.dll (135680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ifsutil.dll (70656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
igfxcfg.exe (503808 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:34) ——
igfxcpl.cpl (94208 bytes - created on 01/01/1980 at 00:00, modified on 08/02/2005 at 10:34) ——
igfxdev.dll (139264 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:31) ——
igfxdgps.dll (45056 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:34) ——
igfxdiag.exe (151552 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:34) ——
igfxdo.dll (86016 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:31) ——
igfxeud.dll (225280 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:35) ——
igfxexps.dll (36864 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:36) ——
igfxext.exe (106496 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:36) ——
igfxhara.lhp (59200 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxharb.lhp (59200 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhchs.lhp (58430 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhcht.lhp (59354 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhcsy.lhp (60659 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhdan.lhp (60244 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhdeu.lhp (62339 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhell.lhp (61831 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxheng.lhp (58623 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhenu.lhp (57801 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhesp.lhp (60786 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhfin.lhp (62770 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhfra.lhp (62454 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhfrc.lhp (62740 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhheb.lhp (59471 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhhun.lhp (68112 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhita.lhp (59687 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhjpn.lhp (62578 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhk.dll (126976 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:32) ——
igfxhkor.lhp (66013 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhnld.lhp (60141 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhnor.lhp (60085 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhplk.lhp (63208 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhptb.lhp (61839 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhptg.lhp (62465 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhrus.lhp (61414 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhsve.lhp (63269 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhtha.lhp (62836 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxhtrk.lhp (64513 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxpph.dll (225280 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:35) ——
igfxrara.lrc (159744 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrarb.lrc (159744 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrchs.lrc (143360 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrcht.lrc (143360 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrcsy.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrdan.lrc (163840 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrdeu.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrell.lrc (172032 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxreng.lrc (159744 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrenu.lrc (163840 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:31) ——
igfxres.dll (163840 bytes - created on 25/09/2005 at 07:44, modified on 08/02/2005 at 10:31) ——
igfxresp.lrc (172032 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxress.dll (1245184 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:31) ——
igfxrfin.lrc (163840 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrfra.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrfrc.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrheb.lrc (159744 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrhun.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrita.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrjpn.lrc (151552 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrkor.lrc (147456 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrnld.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrnor.lrc (163840 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrplk.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrptb.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrptg.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrrus.lrc (167936 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrsve.lrc (163840 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrtha.lrc (163840 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxrtrk.lrc (163840 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
igfxsrvc.dll (348160 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:32) ——
igfxtray.exe (155648 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:36) ——
igfxzoom.exe (114688 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:36) ——
igmpagnt.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ils.dll (81920 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
imaadp32.acm (16384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
imagehlp.dll (144384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
imapi.exe (150528 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
imekr61.ime (94720 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
imeshare.dll (36921 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
imgutil.dll (36352 bytes - created on 30/03/2005 at 11:38, modified on 17/10/2006 at 11:57) ——
imjp81.ime (340023 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
imjp81k.dll (811064 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
imm32.dll (110080 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
indounin.dll (65024 bytes - created on 27/01/1999 at 13:39, modified on 27/01/1999 at 13:39) ——
inetcfg.dll (274432 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
inetcomm.dll (691712 bytes - created on 30/03/2005 at 11:52, modified on 11/04/2008 at 20:04) ——
inetcpl.cpl (1831424 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
inetcplc.dll (110592 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
inetmib1.dll (32768 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
inetpp.dll (75264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
inetppui.dll (15872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
inetres.dll (48128 bytes - created on 30/03/2005 at 11:52, modified on 13/04/2008 at 17:22) ——
infosoft.dll (450560 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
initpki.dll (147456 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
INKED.DLL (207360 bytes - created on 26/10/2006 at 13:45, modified on 26/10/2006 at 13:45) ——
input.dll (123392 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
inseng.dll (92672 bytes - created on 30/03/2005 at 11:38, modified on 07/11/2006 at 03:26) ——
Installer.log (491 bytes - created on 17/10/2008 at 21:47, modified on 17/10/2008 at 21:47) –a—
instcat.sql (956990 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
InstMed.exe (53248 bytes - created on 17/10/2008 at 21:45, modified on 19/07/2005 at 17:31) -ra—
intl.cpl (129536 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
iologmsg.dll (30720 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipconf.tsp (17408 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ipconfig.exe (55808 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
iphlpapi.dll (94720 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
ipmontr.dll (161280 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ipnathlp.dll (331264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
ippromon.dll (330752 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
iprop.dll (3584 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iprtprio.dll (4096 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
iprtrmgr.dll (177152 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ipsec6.exe (44032 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipsecsnp.dll (349696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ipsecsvc.dll (183808 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
ipsink.ax (16384 bytes - created on 26/12/2005 at 21:22, modified on 14/04/2008 at 01:12) ——
ipsmsnap.dll (384000 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ipv6.exe (53248 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ipv6mon.dll (59904 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ipxmontr.dll (83968 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipxpromn.dll (69120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipxrip.dll (21504 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipxroute.exe (23552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ipxrtmgr.dll (39936 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipxsap.dll (66560 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ipxwan.dll (22016 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ir32_32.dll (199168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ir41_32.ax (848384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ir41_qc.dll (120320 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ir41_qcx.dll (338432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ir50_32.dll (755200 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ir50_qc.dll (200192 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ir50_qcx.dll (183808 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
irclass.dll (13312 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
irftp.exe (151552 bytes - created on 30/03/2005 at 11:48, modified on 14/04/2008 at 01:12) ——
irmon.dll (28160 bytes - created on 30/03/2005 at 11:48, modified on 14/04/2008 at 01:11) –a—
irprops.cpl (380416 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
isign32.dll (81920 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
isrdbg32.dll (32768 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
ITIG726.acm (29795 bytes - created on 17/10/2008 at 21:45, modified on 09/06/2003 at 20:39) –a—
itircl.dll (155136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
itss.dll (138240 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
iuengine.dll (198424 bytes - created on 30/03/2005 at 11:38, modified on 26/05/2005 at 04:16) ——
ivfsrc.ax (154624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ixsso.dll (54272 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
iyuv_32.dll (47616 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:11) ——
Iyvu9_32.dll (56832 bytes - created on 13/06/1997 at 07:56, modified on 13/06/1997 at 07:56) ——
java.exe (144792 bytes - created on 26/11/2008 at 10:46, modified on 26/11/2008 at 10:46) –a—
javacpl.cpl (73728 bytes - created on 26/04/2007 at 22:40, modified on 26/11/2008 at 10:46) –a—
javaw.exe (144792 bytes - created on 26/11/2008 at 10:46, modified on 26/11/2008 at 10:46) –a—
javaws.exe (148888 bytes - created on 26/11/2008 at 10:46, modified on 26/11/2008 at 10:46) –a—
jet500.dll (362496 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
jgaw400.dll (44544 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
jgdw400.dll (163840 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
jgmd400.dll (35840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
jgpl400.dll (27648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
jgsd400.dll (45568 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
jgsh400.dll (65536 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
jobexec.dll (47952 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
joy.cpl (68608 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
jscript.dll (512000 bytes - created on 30/03/2005 at 11:38, modified on 09/05/2008 at 11:53) –a—
jsproxy.dll (27648 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
jupdate-1.5.0_04-b05.log (3570 bytes - created on 05/10/2005 at 11:10, modified on 05/10/2005 at 11:11) ——
jupdate-1.5.0_06-b05.log (6617 bytes - created on 26/01/2006 at 23:50, modified on 26/01/2006 at 23:51) ——
jupdate-1.5.0_09-b03.log (8370 bytes - created on 26/10/2006 at 13:01, modified on 26/10/2006 at 13:02) ——
jupdate-1.5.0_10-b03.log (8599 bytes - created on 26/12/2006 at 10:27, modified on 26/12/2006 at 10:28) ——
jupdate-1.5.0_11-b03.log (9296 bytes - created on 26/02/2007 at 11:20, modified on 26/02/2007 at 11:21) ——
jupdate-1.6.0_01-b06.log (3969 bytes - created on 26/04/2007 at 22:38, modified on 26/04/2007 at 22:40) ——
jupdate-1.6.0_02-b06.log (4879 bytes - created on 26/07/2007 at 22:15, modified on 26/07/2007 at 22:16) ——
jupdate-1.6.0_03-b05.log (5329 bytes - created on 27/01/2008 at 13:02, modified on 27/01/2008 at 13:03) –a—
jupdate-1.6.0_05-b13.log (6242 bytes - created on 29/06/2008 at 16:45, modified on 29/06/2008 at 16:45) –a—
jupdate-1.6.0_07-b06.log (6529 bytes - created on 26/08/2008 at 11:31, modified on 26/08/2008 at 11:32) –a—
kanji_1.uce (6948 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
kanji_2.uce (8484 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
kb16.com (14710 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbd101.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
kbd101a.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
kbd101b.dll (6144 bytes - created on 30/03/2005 at 12:25, modified on 17/08/2001 at 14:55) ——
kbd101c.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 17/08/2001 at 14:55) ——
kbd103.dll (5632 bytes - created on 30/03/2005 at 12:26, modified on 17/08/2001 at 14:55) ——
kbd106.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
kbd106n.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
kbda1.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbda2.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbda3.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
KBDAL.DLL (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdarme.dll (5120 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdarmw.dll (5120 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdax2.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
kbdaze.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdazel.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdbe.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdbene.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdbhc.dll (6144 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:09) ——
kbdblr.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdbr.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdbu.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdca.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdcan.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdcr.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdcz.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdcz1.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdcz2.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdda.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbddiv1.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbddiv2.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbddv.dll (5120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdes.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdest.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdfa.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdfc.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdfi.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdfi1.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdfo.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdfr.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdgae.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdgeo.dll (5120 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdgkl.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdgr.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdgr1.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdhe.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdhe220.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdhe319.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdheb.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdhela2.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdhela3.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdhept.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdhu.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdhu1.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdibm02.dll (7168 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
kbdic.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdinbe1.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdinben.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdindev.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdinguj.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdinhin.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdinkan.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdinmal.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdinmar.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdinpun.dll (6144 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdintam.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdintel.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdir.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdit.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdit142.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdiultn.dll (6144 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:09) ——
kbdjpn.dll (8704 bytes - created on 30/03/2005 at 12:26, modified on 17/08/2001 at 22:36) ——
kbdkaz.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdkor.dll (8192 bytes - created on 30/03/2005 at 12:26, modified on 17/08/2001 at 22:36) ——
kbdkyr.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdla.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdlk41a.dll (6656 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
kbdlk41j.dll (6144 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:09) ——
kbdlt.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdlt1.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdlv.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdlv1.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdmac.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdmaori.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdmlt47.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdmlt48.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdmon.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdne.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdnec.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdnec95.dll (7168 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
kbdnecAT.dll (9216 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
kbdnecNT.dll (7680 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
kbdnepr.dll (6144 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:09) ——
kbdno.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdno1.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdpash.dll (6144 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:09) ——
kbdpl.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdpl1.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdpo.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdro.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdru.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdru1.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdsf.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdsg.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdsl.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdsl1.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdsmsfi.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdsmsno.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdsp.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdsw.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdsyr1.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdsyr2.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdtat.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdth0.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdth1.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdth2.dll (6144 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdth3.dll (6144 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdtuf.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdtuq.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbduk.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdukx.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:09) ——
kbdur.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdurdu.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdus.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdusa.dll (5632 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
kbdusl.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdusr.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdusx.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbduzb.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdvntc.dll (5632 bytes - created on 13/08/2004 at 18:18, modified on 04/08/2004 at 05:00) ——
kbdycc.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kbdycl.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kd1394.dll (7424 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:31) ——
kdcom.dll (7040 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
kerberos.dll (299520 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
kernel32.dll (989696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
key01.sys (42809 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
keyboard.drv (2000 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
keyboard.sys (42537 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
keymgr.dll (150528 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
kmddsp.tsp (33280 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
kmsvc.dll (61440 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
korean.uce (12876 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
korwbrkr.dll (70656 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
korwbrkr.lex (1158818 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
krnl386.exe (92224 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ksc.nls (47066 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
ksproxy.ax (129536 bytes - created on 30/03/2005 at 12:04, modified on 14/04/2008 at 01:12) ——
kstvtune.ax (61952 bytes - created on 26/12/2005 at 21:22, modified on 14/04/2008 at 01:12) ——
ksuser.dll (4096 bytes - created on 30/03/2005 at 12:04, modified on 14/04/2008 at 01:11) ——
kswdmcap.ax (91136 bytes - created on 26/12/2005 at 21:22, modified on 14/04/2008 at 01:12) ——
ksxbar.ax (43008 bytes - created on 26/12/2005 at 21:22, modified on 14/04/2008 at 01:12) ——
l2gpstore.dll (37376 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
l3codeca.acm (290816 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:09) ——
l3codecp.acm (232448 bytes - created on 22/09/2004 at 18:45, modified on 18/10/2006 at 20:05) ——
l3codecx.ax (83456 bytes - created on 30/03/2005 at 11:39, modified on 04/08/2004 at 05:00) ——
label.exe (9728 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
langwrbk.dll (89600 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
lanman.drv (221600 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
LAPRXY.dll (11264 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
LCamCpl.dll (462848 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 15:12) –a—
lcphrase.tbl (211938 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
lcptr.tbl (24114 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
LegitCheckControl.dll (1476992 bytes - created on 29/08/2005 at 13:27, modified on 15/03/2007 at 18:19) ——
lfbmp11n.dll (36864 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lfbmp12n.dll (30720 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
lfbmp13n.dll (57344 bytes - created on 06/10/2005 at 14:20, modified on 14/05/2004 at 16:53) ——
LFCMP11n.DLL (285184 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
LFCMP12n.DLL (328704 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
lfcmp13n.dll (401408 bytes - created on 06/10/2005 at 14:20, modified on 14/05/2004 at 16:53) ——
lfeps11n.dll (31232 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lffax11n.dll (81408 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lffax12n.dll (78336 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
lfgif11n.dll (41472 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lfgif13n.dll (69632 bytes - created on 06/10/2005 at 14:20, modified on 04/11/2003 at 15:10) ——
lfpcd11n.dll (26112 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lfpcx11n.dll (33280 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
Lfpng11n.dll (172032 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lfpsd11n.dll (56320 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lftga11n.dll (27648 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lftif11n.dll (152064 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
lftif12n.dll (141312 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
lfwmf11n.dll (59392 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
libdivx.dll (1044480 bytes - created on 23/04/2007 at 01:15, modified on 23/04/2007 at 01:15) ——
libeay32.dll (651264 bytes - created on 05/01/2006 at 11:23, modified on 20/11/2003 at 22:03) ——
licdll.dll (423936 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 05:41) ——
licmgr10.dll (40960 bytes - created on 30/03/2005 at 11:38, modified on 17/10/2006 at 12:05) ——
licwmi.dll (58880 bytes - created on 30/03/2005 at 11:50, modified on 14/04/2008 at 01:11) ——
lights.exe (29696 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
linkinfo.dll (19968 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
lmhsvc.dll (13824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
lmrt.dll (399872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
lnkstub.exe (25088 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
loadfix.com (1131 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
loadperf.dll (97280 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
locale.nls (265948 bytes - created on 30/03/2005 at 11:38, modified on 29/02/2008 at 10:09) ——
localsec.dll (221696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
localspl.dll (343040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
localui.dll (11776 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
locator.exe (75264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
lodctr.exe (5120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
logagent.exe (100864 bytes - created on 30/03/2005 at 11:39, modified on 18/06/2008 at 01:09) ——
loghours.dll (50176 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
logman.exe (59392 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
logoff.exe (15360 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
logon.scr (220672 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
logonui.exe (514560 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
logonui.exe.manifest (488 bytes - created on 30/03/2005 at 11:53, modified on 30/03/2005 at 11:53) ——
lpk.dll (22016 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
lpq.exe (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
lpr.exe (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
lprhelp.dll (10240 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
lprmonui.dll (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
LQCUI2.dll (90112 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:38) –a—
lsasrv.dll (728064 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
lsass.exe (13312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
LTDIS11n.dll (262656 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
LTDIS12n.dll (259072 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
ltdis13n.dll (299008 bytes - created on 06/10/2005 at 14:20, modified on 14/05/2004 at 16:53) ——
ltefx12n.dll (207872 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
ltefx13n.dll (206336 bytes - created on 06/10/2005 at 14:20, modified on 12/01/2004 at 02:09) ——
ltfil11n.DLL (118784 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
ltfil12n.DLL (131072 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
ltfil13n.dll (163840 bytes - created on 06/10/2005 at 14:20, modified on 14/05/2004 at 16:53) ——
ltimg11n.dll (127488 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
ltimg12n.dll (164864 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
ltimg13n.dll (450560 bytes - created on 06/10/2005 at 14:20, modified on 14/05/2004 at 16:53) ——
ltkrn11n.dll (392192 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
ltkrn12n.dll (406016 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
ltkrn13n.dll (462848 bytes - created on 06/10/2005 at 14:20, modified on 14/05/2004 at 16:53) ——
ltocx12n.ocx (628736 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
ltscr12n.ocx (192512 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
Ltwvc11n.dll (716288 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
Ltwvc12n.dll (856064 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
lusrmgr.msc (42166 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
lvcodec2.dll (204800 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:26) –a—
lvcoinst.dll (106496 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:19) –a—
lvcoinst.ini (9255 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:10) –a—
lvcoinst.log (1205 bytes - created on 17/10/2008 at 22:01, modified on 17/10/2008 at 22:19) –a—
LVCOMCX.dll (77824 bytes - created on 19/07/2005 at 17:32, modified on 19/07/2005 at 17:32) –a—
LVCOMSX.EXE (221184 bytes - created on 19/07/2005 at 17:32, modified on 19/07/2005 at 17:32) –a—
Lvkrn12n.dll (215552 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:31) –a—
LVMAENUM.dll (258048 bytes - created on 19/07/2005 at 17:32, modified on 19/07/2005 at 17:32) –a—
LVUI2.dll (204800 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:29) –a—
LVUI2RC.dll (372736 bytes - created on 17/10/2008 at 21:45, modified on 27/05/2005 at 09:36) –a—
lz32.dll (2560 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
lzexpand.dll (9936 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
l_except.nls (168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
l_intl.nls (7046 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
magnify.exe (72704 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mag_hook.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
main.cpl (187904 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
makecab.exe (57344 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
MAPI.DLL (520128 bytes - created on 01/10/1998 at 12:00, modified on 01/10/1998 at 12:00) ——
mapi32.dll (112128 bytes - created on 30/03/2005 at 11:54, modified on 04/08/2004 at 05:00) –a—
MAPISRVR.EXE (38160 bytes - created on 26/03/1998 at 00:00, modified on 26/03/1998 at 00:00) ——
mapistub.dll (112128 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mapisvc.inf (535 bytes - created on 30/03/2005 at 11:51, modified on 30/03/2005 at 11:51) ——
mcastmib.dll (14336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mcd32.dll (10240 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mcdsrv32.dll (10496 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mchgrcoi.dll (4608 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mciavi.drv (73376 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mciavi32.dll (84480 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mcicda.dll (17408 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mciole16.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mciole32.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mciqtz32.dll (35328 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mciseq.dll (23040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mciseq.drv (25264 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mciwave.dll (23552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mciwave.drv (28160 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mdhcp.dll (50176 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mdminst.dll (118272 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
mdmxsdk.dll (86016 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:11) ——
mdwmdmsp.dll (147968 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
mem.exe (39274 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mf3216.dll (40960 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mfc40.dll (924432 bytes - created on 30/03/2005 at 11:38, modified on 23/08/2001 at 05:00) –a—
mfc40u.dll (927504 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mfc42.dll (1028096 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
MFC42D.DLL (929844 bytes - created on 30/03/2005 at 11:59, modified on 14/07/2000 at 09:00) ——
MFC42ENU.DLL (53248 bytes - created on 17/06/1998 at 18:08, modified on 17/06/1998 at 18:08) ——
mfc42u.dll (981760 bytes - created on 30/03/2005 at 11:38, modified on 14/10/2006 at 08:13) ——
mfc70.dll (974848 bytes - created on 05/01/2002 at 05:48, modified on 05/01/2002 at 05:48) ——
mfc70u.dll (964608 bytes - created on 05/01/2002 at 05:36, modified on 05/01/2002 at 05:36) ——
MFC71.dll (1060864 bytes - created on 18/03/2003 at 22:20, modified on 18/03/2003 at 22:20) –a—
MFC71CHS.DLL (40960 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
MFC71CHT.DLL (45056 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
mfc71d.dll (2179072 bytes - created on 18/03/2003 at 20:28, modified on 18/03/2003 at 20:28) ——
MFC71DEU.DLL (65536 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
MFC71ENU.DLL (57344 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
MFC71ESP.DLL (61440 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
MFC71ITA.DLL (61440 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
MFC71JPN.DLL (49152 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
MFC71KOR.DLL (49152 bytes - created on 26/12/2005 at 21:00, modified on 18/03/2003 at 21:44) –a—
MFC71u.dll (1047552 bytes - created on 18/03/2003 at 22:12, modified on 18/03/2003 at 22:12) –a—
mfcans32.dll (133904 bytes - created on 20/06/2002 at 18:22, modified on 20/06/2002 at 18:22) ——
MFCO42D.DLL (798773 bytes - created on 30/03/2005 at 11:59, modified on 14/07/2000 at 09:00) ——
mfcsubs.dll (22528 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
mfcuia32.dll (5632 bytes - created on 20/06/2002 at 18:22, modified on 20/06/2002 at 18:22) ——
MFPLAT.dll (212992 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
mgmtapi.dll (14848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mib.bin (46258 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
microsoft.managementconsole.dll (184320 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
midimap.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
miglibnt.dll (60928 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
migpwd.exe (51712 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mimefilt.dll (29696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
miniime.tpl (11776 bytes - created on 30/03/2005 at 12:26, modified on 13/04/2008 at 19:40) ——
mlang.dat (673088 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mlang.dll (586240 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
mlfcache.dat (49984 bytes - created on 17/10/2008 at 00:37, modified on 17/10/2008 at 00:37) –ah–
mll_hp.dll (3584 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mll_mtf.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mll_qic.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mmc.exe (1414656 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mmcbase.dll (163328 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mmcex.dll (397312 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
mmcfxcommon.dll (106496 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:11) ——
mmcndmgr.dll (1872896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mmcperf.exe (33792 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
mmcshext.dll (61440 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mmdriver.inf (1490 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mmdrv.dll (12288 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mmfutil.dll (17408 bytes - created on 30/03/2005 at 11:50, modified on 14/04/2008 at 01:11) ——
mmsys.cpl (618496 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mmsystem.dll (68768 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mmtask.tsk (1152 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mmutilse.dll (119808 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mnmdd.dll (34560 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
mnmsrvc.exe (32768 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
mobsync.dll (207360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mobsync.exe (143360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mode.com (19456 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
modemui.dll (153600 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
modex.dll (10112 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
more.com (16896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
moricons.dll (216064 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 17:45) ——
mountvol.exe (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mouse.drv (2032 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
MP43DECD.dll (259072 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
MP43DMOD.dll (4096 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
MP4SDECD.dll (317440 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
MP4SDMOD.dll (4096 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
mpeg2data.ax (118272 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mpg2splt.ax (148992 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
MPG4DECD.dll (259072 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
MPG4DMOD.dll (4096 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
mpg4ds32.ax (262144 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
mplay32.exe (123392 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
mpnotify.exe (22016 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mpr.dll (59904 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
mprapi.dll (87040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
mprddm.dll (69120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mprdim.dll (53248 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
mprmsg.dll (99840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mprui.dll (47104 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mrinfo.exe (12800 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
MRT.exe (17593280 bytes - created on 15/12/2008 at 10:40, modified on 09/12/2008 at 15:24) –a—
msaatext.dll (102912 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msacm.dll (61168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msacm32.dll (71680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
msacm32.drv (20480 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msadds32.ax (221184 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
msadp32.acm (14848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:10) ——
msafd.dll (3584 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:10) ——
msapsspc.dll (86016 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
msasn1.dll (57344 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
msaud32.acm (294912 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:10) ——
msaudite.dll (65024 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mscat32.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mscdexnt.exe (817 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mscms.dll (74240 bytes - created on 30/03/2005 at 11:38, modified on 24/06/2008 at 17:43) –a—
mscomct2.ocx (647872 bytes - created on 22/05/2000 at 16:58, modified on 22/05/2000 at 16:58) ——
MSCOMCTL.OCX (1081616 bytes - created on 08/03/2004 at 23:00, modified on 08/03/2004 at 23:00) ——
msconf.dll (69632 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:11) ——
mscoree.dll (282112 bytes - created on 24/10/2007 at 01:47, modified on 24/10/2007 at 01:47) –a—
mscorier.dll (158720 bytes - created on 24/10/2007 at 01:47, modified on 24/10/2007 at 01:47) –a—
mscories.dll (84480 bytes - created on 24/10/2007 at 01:47, modified on 24/10/2007 at 01:47) –a—
mscpx32r.dLL (12288 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:26) –a—
mscpxl32.dLL (36864 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
msctf.dll (297984 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
msctfime.ime (177152 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:10) –a—
msctfp.dll (68608 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
msdadiag.dll (118784 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
msdart.dll (151552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msdatsrc.tlb (12288 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:24) ——
msdayi.tbl (116285 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
msdelta.dll (312128 bytes - created on 02/10/2006 at 15:28, modified on 02/10/2006 at 15:28) ——
msdmo.dll (14336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msdtc.exe (6144 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
msdtclog.dll (58880 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
msdtcprf.h (768 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
msdtcprf.ini (1931 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
msdtcprx.dll (427008 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
msdtctm.dll (956928 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
msdtcuiu.dll (161792 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
msdxm.ocx (844314 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:10) ——
msdxmlc.dll (4126 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:10) ——
msencode.dll (94282 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msexch40.dll (518944 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
msexcl40.dll (326432 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
msfeeds.dll (459264 bytes - created on 07/11/2006 at 21:03, modified on 16/10/2008 at 20:38) –a—
msfeedsbs.dll (52224 bytes - created on 07/11/2006 at 21:03, modified on 16/10/2008 at 20:38) –a—
msfeedssync.exe (12288 bytes - created on 17/10/2006 at 11:58, modified on 17/10/2006 at 11:58) ——
msftedit.dll (539136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msg.exe (20992 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
msg711.acm (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msg723.acm (118784 bytes - created on 30/03/2005 at 11:52, modified on 04/08/2004 at 05:00) ——
msgina.dll (997376 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msgsm32.acm (19968 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msgsvc.dll (33792 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msh261.drv (188416 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
msh263.drv (294912 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
mshearts.exe (126976 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
mshta.exe (45568 bytes - created on 30/03/2005 at 11:38, modified on 17/10/2006 at 11:56) ——
mshtml.dll (3593216 bytes - created on 30/03/2005 at 11:38, modified on 17/10/2008 at 02:08) –a—
mshtml.tlb (1383424 bytes - created on 30/03/2005 at 11:38, modified on 17/10/2006 at 11:19) ——
mshtmled.dll (477696 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
mshtmler.dll (48128 bytes - created on 30/03/2005 at 11:38, modified on 17/10/2006 at 11:28) ——
msi.dll (2843136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msident.dll (51712 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msidle.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msidntld.dll (14848 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msieftp.dll (248832 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msiexec.exe (78848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msihnd.dll (271360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msimg32.dll (4608 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msimsg.dll (884736 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 16:39) –a—
msimtf.dll (159232 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msir3jp.dll (98304 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
msir3jp.lex (1875968 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
msisip.dll (15360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msjet40.dll (1516568 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) –a—
msjetoledb40.dll (355112 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
msjint40.dll (151583 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msjter40.dll (60192 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) –a—
msjtes40.dll (248608 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
mslbui.dll (25088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msls2.dll (91136 bytes - created on 20/06/2002 at 18:19, modified on 20/06/2002 at 18:19) ——
msls31.dll (156160 bytes - created on 30/03/2005 at 11:38, modified on 07/11/2006 at 21:03) ——
msltus40.dll (219936 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
msnetobj.dll (179712 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
msnsspc.dll (290816 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msobjs.dll (33280 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msoeacct.dll (252928 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
msoert2.dll (105984 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
msorc32r.dll (20480 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:24) –a—
msorcl32.dll (143360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
mspaint.exe (343040 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
mspatcha.dll (29696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
mspbde40.dll (355104 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
MsPMSNSv.dll (27136 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
MsPMSP.dll (175616 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
msports.dll (41984 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msprivs.dll (48128 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 17:23) –a—
msr2c.dll (69632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msr2cenu.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msratelc.dll (60416 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msrating.dll (193024 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
msrclr40.dll (73802 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msrd2x40.dll (432928 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
msrd3x40.dll (322336 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
MSRDO20.DLL (397312 bytes - created on 11/05/2000 at 13:06, modified on 11/05/2000 at 13:06) ——
msrecr40.dll (28746 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msrepl40.dll (559904 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
msrle32.dll (11264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mssap.dll (134656 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msscds32.ax (69632 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
msscp.dll (414720 bytes - created on 30/03/2005 at 11:39, modified on 04/12/2006 at 15:21) ——
msscript.ocx (110592 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:10) ——
mssha.dll (155136 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
msshavmsg.dll (76800 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 19:14) ——
mssign32.dll (35840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mssip32.dll (4608 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
MSSTDFMT.DLL (119808 bytes - created on 22/02/2004 at 23:00, modified on 22/02/2004 at 23:00) ——
MSSTKPRP.DLL (94208 bytes - created on 09/08/1998 at 10:07, modified on 09/08/1998 at 10:07) ——
msswch.dll (13312 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msswchx.exe (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mstask.dll (274944 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
mstext40.dll (264992 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
mstime.dll (671232 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
mstinit.exe (12288 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
mstlsapi.dll (116224 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
mstsc.exe (677888 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
mstscax.dll (2061824 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:11) ——
msutb.dll (195072 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msv1_0.dll (132608 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msvbvm50.dll (1355776 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msvbvm60.dll (1384479 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msvci70.dll (54784 bytes - created on 05/01/2002 at 04:38, modified on 05/01/2002 at 04:38) ——
msvcirt.dll (57344 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msvcp50.dll (565760 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msvcp60.dll (413696 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msvcp70.dll (487424 bytes - created on 05/01/2002 at 04:40, modified on 05/01/2002 at 04:40) ——
msvcp71.dll (499712 bytes - created on 18/03/2003 at 20:14, modified on 18/03/2003 at 21:14) –a—
msvcr70.dll (344064 bytes - created on 05/01/2002 at 04:37, modified on 05/01/2002 at 04:37) ——
msvcr71.dll (348160 bytes - created on 21/02/2003 at 05:42, modified on 21/02/2003 at 05:42) –a—
msvcrt.dll (343040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
msvcrt20.dll (253952 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msvcrt40.dll (61440 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:30) ——
MSVCRTD.DLL (434252 bytes - created on 30/03/2005 at 11:59, modified on 14/07/2000 at 09:00) ——
msvfw32.dll (121344 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msvidc32.dll (25600 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msvidctl.dll (1428992 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msvideo.dll (126912 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msw3prt.dll (72704 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mswdat10.dll (838432 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
mswebdvd.dll (203776 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
mswmdm.dll (321536 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
mswsock.dll (245248 bytes - created on 30/03/2005 at 11:38, modified on 20/06/2008 at 18:46) –a—
mswstr10.dll (621344 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) –a—
msxbde40.dll (355104 bytes - created on 30/03/2005 at 11:38, modified on 25/03/2008 at 05:50) ——
msxml.dll (506368 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msxml2.dll (701440 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
msxml2r.dll (37916 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msxml3.dll (1106944 bytes - created on 30/03/2005 at 11:38, modified on 04/09/2008 at 17:15) –a—
msxml3r.dll (44032 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msxml4.dll (1286152 bytes - created on 30/09/2008 at 16:43, modified on 30/09/2008 at 16:43) –a—
msxml4a.dll (30720 bytes - created on 30/03/2005 at 12:17, modified on 27/08/2004 at 16:42) ——
msxml4r.dll (82432 bytes - created on 04/11/2006 at 14:10, modified on 04/11/2006 at 14:10) ——
msxml6.dll (1307648 bytes - created on 26/08/2008 at 10:43, modified on 10/09/2008 at 01:14) ——
msxml6r.dll (79872 bytes - created on 26/08/2008 at 10:43, modified on 13/04/2008 at 18:27) ——
msxmlr.dll (26624 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
msyuv.dll (16896 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
mtxclu.dll (66560 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
mtxdm.dll (30720 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
mtxex.dll (4096 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
mtxlegih.dll (34304 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
mtxoci.dll (91648 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
mtxparhd.dll (1737856 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
mucltui.dll (268648 bytes - created on 24/10/2005 at 15:17, modified on 16/10/2008 at 14:06) –a—
mucltui.dll.mui (27496 bytes - created on 22/06/2007 at 11:58, modified on 16/10/2008 at 14:06) –a—
multiplex_vcd.dll (65536 bytes - created on 26/12/2001 at 16:12, modified on 26/12/2001 at 16:12) ——
muweb.dll (208744 bytes - created on 26/05/2005 at 04:19, modified on 16/10/2008 at 14:06) –a—
mycomput.dll (90112 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
mydocs.dll (90624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
napipsec.dll (30208 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
napmontr.dll (193024 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
napstat.exe (176640 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
narrator.exe (53760 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
narrhook.dll (35840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
nbtstat.exe (20480 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ncobjapi.dll (36352 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ncpa.cpl (35840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ncpa.cpl.manifest (749 bytes - created on 30/03/2005 at 11:53, modified on 30/03/2005 at 11:53) ——
ncxpnt.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
nddeapi.dll (17920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
nddeapir.exe (4096 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
nddenb32.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ndptsp.tsp (56832 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
net.exe (42496 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
net.hlp (102446 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
net1.exe (124928 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
netapi.dll (108464 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
netapi32.dll (337408 bytes - created on 30/03/2005 at 11:38, modified on 15/10/2008 at 17:34) –a—
netcfgx.dll (622592 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
netdde.exe (111104 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
netevent.dll (214016 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
netfxperf.dll (32768 bytes - created on 23/09/2005 at 07:28, modified on 23/09/2005 at 07:28) ——
neth.dll (253952 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
netid.dll (139264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
netlogon.dll (407040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
netman.dll (198144 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
netmsg.dll (171008 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
netplwiz.dll (875008 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
netrap.dll (11776 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
netsetup.cpl (25600 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
netsetup.exe (329728 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:16) ——
netsh.exe (86016 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
netshell.dll (1703936 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
netstat.exe (36864 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
netui0.dll (80896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
netui1.dll (245760 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
netui2.dll (308224 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
newdev.dll (247808 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
nlhtml.dll (98304 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
nlsdl.dll (24576 bytes - created on 28/06/2006 at 17:59, modified on 28/06/2006 at 17:59) ——
nlsfunc.exe (7052 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
nmevtmsg.dll (12288 bytes - created on 30/03/2005 at 11:52, modified on 04/08/2004 at 05:00) ——
nmmkcert.dll (28672 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
noise.chs (1696 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.cht (1696 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.dat (741 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.deu (149848 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.eng (751 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.enu (751 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.esn (19684 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.fra (49196 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.ita (19618 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.jpn (2060 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
noise.kor (1486 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
noise.nld (13256 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.sve (13730 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
noise.tha (697 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
normaliz.dll (23552 bytes - created on 29/06/2006 at 08:05, modified on 29/06/2006 at 08:05) ——
normidna.nls (59342 bytes - created on 08/06/2006 at 12:06, modified on 08/06/2006 at 12:06) ——
normnfc.nls (45794 bytes - created on 08/06/2006 at 12:06, modified on 08/06/2006 at 12:06) ——
normnfd.nls (39284 bytes - created on 08/06/2006 at 12:06, modified on 08/06/2006 at 12:06) ——
normnfkc.nls (66384 bytes - created on 08/06/2006 at 12:06, modified on 08/06/2006 at 12:06) ——
normnfkd.nls (60294 bytes - created on 08/06/2006 at 12:06, modified on 08/06/2006 at 12:06) ——
notepad.exe (69120 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
Npindeo.dll (151552 bytes - created on 20/11/1998 at 13:38, modified on 20/11/1998 at 13:38) ——
npptools.dll (54784 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
npwmsdrm.dll (8704 bytes - created on 02/03/2001 at 20:52, modified on 02/03/2001 at 20:52) ——
nscompat.tlb (23392 bytes - created on 30/03/2005 at 11:54, modified on 01/01/2007 at 22:33) ——
nslookup.exe (76800 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntdll.dll (706048 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
ntdos.sys (27866 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntdos404.sys (29146 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntdos411.sys (29370 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntdos412.sys (29274 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntdos804.sys (29146 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntdsapi.dll (67072 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
NTIBUN4.dll (1024 bytes - created on 30/03/2005 at 12:23, modified on 30/03/2005 at 12:23) ——
NTICDMK7.dll (1024 bytes - created on 30/03/2005 at 12:22, modified on 30/03/2005 at 12:22) ——
NTIFCD3.dll (1024 bytes - created on 30/03/2005 at 12:22, modified on 30/03/2005 at 12:22) ——
ntimage.gif (48794 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
NTIMP3.dll (1024 bytes - created on 30/03/2005 at 12:22, modified on 30/03/2005 at 12:22) ——
NTIMPEG2.dll (1024 bytes - created on 30/03/2005 at 12:22, modified on 30/03/2005 at 12:22) ——
ntio.sys (33840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntio404.sys (34560 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntio411.sys (35648 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntio412.sys (35424 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntio804.sys (34560 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntkrnlpa.exe (2066048 bytes - created on 03/08/2004 at 22:59, modified on 14/08/2008 at 10:33) ——
ntlanman.dll (44032 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ntlanui.dll (57856 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntlanui2.dll (14336 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntlsapi.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntmarta.dll (118784 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ntmsapi.dll (40960 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntmsdba.dll (179200 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntmsevt.dll (36864 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntmsmgr.dll (488448 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntmsmgr.msc (26209 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntmsoprq.msc (32968 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntmssvc.dll (435200 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntoskrnl.exe (2189184 bytes - created on 30/03/2005 at 11:38, modified on 14/08/2008 at 11:11) ——
ntprint.dll (91136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntsd.exe (31744 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntsdexts.dll (36864 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ntshrui.dll (143360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ntvdm.exe (420864 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ntvdmd.dll (15360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
nusrmgr.cpl (257024 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
nv4_disp.dll (4274816 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
nwc.cpl.manifest (749 bytes - created on 30/03/2005 at 11:53, modified on 30/03/2005 at 11:53) ——
nwprovau.dll (142336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
oakley.dll (270336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
objsel.dll (286208 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
occache.dll (102912 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) ——
ochlp30e.dll (37888 bytes - created on 20/06/2002 at 18:19, modified on 20/06/2002 at 18:19) ——
ocmanage.dll (67584 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbc16gt.dll (26224 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
odbc32.dll (249856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbc32gt.dll (16384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbcad32.exe (32768 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
odbcbcp.dll (24576 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbcconf.dll (135168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbcconf.exe (69632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbcconf.rsp (4310 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:26) ——
odbccp32.cpl (32768 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbccp32.dll (106496 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbccr32.dll (65536 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbccu32.dll (65536 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbcint.dll (94208 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:26) –a—
odbcji32.dll (53279 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:10) –a—
odbcjt32.dll (278559 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
odbcp32r.dll (12288 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:26) –a—
odbctrac.dll (147456 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
oddbse32.dll (20511 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
odexl32.dll (20510 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
odfox32.dll (20510 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
odpdx32.dll (20510 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
odtext32.dll (20511 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
oembios.bin (13107200 bytes - created on 30/03/2005 at 11:38, modified on 26/08/2001 at 17:04) ——
oembios.dat (4524 bytes - created on 30/03/2005 at 11:38, modified on 26/08/2001 at 17:02) ——
oembios.sig (6788 bytes - created on 30/03/2005 at 11:38, modified on 26/08/2001 at 17:02) ——
oemdspif.dll (69632 bytes - created on 30/03/2005 at 11:32, modified on 08/02/2005 at 10:37) ——
oeminfo.ini (37776 bytes - created on 30/03/2005 at 11:59, modified on 02/02/2005 at 19:35) ——
OEMLOGO.bmp (12054 bytes - created on 30/03/2005 at 11:59, modified on 31/07/2001 at 00:51) ——
offfilt.dll (192000 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ole2.dll (39744 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ole2disp.dll (169520 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ole2nls.dll (153008 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ole32.dll (1287168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
oleacc.dll (163328 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
oleaccrc.dll (16896 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
oleaut32.dll (551936 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
olecli.dll (82944 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
olecli32.dll (74752 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
olecnv32.dll (37376 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
oledlg.dll (122880 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
oleprn.dll (107008 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
olepro32.dll (84992 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
olesvr.dll (24064 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
olesvr32.dll (22016 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
olethk32.dll (69120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
onex.dll (144384 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
opengl32.dll (713728 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
osk.exe (215552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
osuninst.dll (67584 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
osuninst.exe (40448 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
p2p.dll (153600 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
p2pgasvc.dll (105472 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
p2pgraph.dll (313856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
p2pnetsh.dll (115712 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
p2psvc.dll (554496 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
packager.exe (58368 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
panmap.dll (10240 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
paqsp.dll (157696 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
pathping.exe (21504 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pautoenr.dll (67584 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
PCDLIB32.DLL (212480 bytes - created on 07/06/2002 at 18:02, modified on 07/06/2002 at 18:02) ——
pcl.sep (114 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pdh.dll (284160 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
pentnt.exe (15360 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfc009.dat (74144 bytes - created on 30/03/2005 at 11:38, modified on 28/09/2008 at 11:20) –a—
perfci.h (427 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfci.ini (2891 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfctrs.dll (39936 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
perfd009.dat (28626 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfdisk.dll (26624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
perffilt.h (140 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perffilt.ini (1152 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfh009.dat (469092 bytes - created on 30/03/2005 at 11:38, modified on 28/09/2008 at 11:20) –a—
perfi009.dat (272128 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfmon.exe (15872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
perfmon.msc (58273 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfnet.dll (17920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
perfos.dll (25088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
perfproc.dll (34816 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
PerfStringBackup.INI (550846 bytes - created on 30/03/2005 at 11:46, modified on 28/09/2008 at 11:20) –a—
perfts.dll (12288 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfwci.h (435 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
perfwci.ini (2732 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
phon.ime (79360 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
phon.tbl (4071 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
phoncode.tbl (43242 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
phonptr.tbl (2714 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
photometadatahandler.dll (412160 bytes - created on 24/10/2006 at 12:30, modified on 14/04/2008 at 01:12) ——
photowiz.dll (176128 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
PICSDK.dll (479232 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
PICSDK.ini (99 bytes - created on 15/10/2005 at 16:04, modified on 02/03/2004 at 12:10) ——
pid.dll (35328 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
pid.inf (1261 bytes - created on 26/08/2008 at 10:42, modified on 17/09/2007 at 09:48) ——
pidgen.dll (24064 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:35) ——
pifmgr.dll (35328 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ping.exe (17920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ping6.exe (33280 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pintlgnt.ime (482304 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
PINTLPAD.HLP (14821 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
PINTLPAE.HLP (16254 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
pjlmon.dll (15360 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) –a—
plustab.dll (30720 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pmspl.dll (46592 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pncrt.dll (278528 bytes - created on 15/11/2005 at 10:04, modified on 11/07/2006 at 13:36) ——
pndx5016.dll (6656 bytes - created on 15/11/2005 at 10:04, modified on 11/07/2006 at 13:36) ——
pndx5032.dll (5632 bytes - created on 15/11/2005 at 10:04, modified on 11/07/2006 at 13:36) ——
pngfilt.dll (44544 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
pnrpnsp.dll (58880 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
polstore.dll (105472 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ponihiti (8812 bytes - created on 26/08/2008 at 15:48, modified on 03/12/2008 at 16:05) –ah–
PortableDeviceApi.dll (284160 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
PortableDeviceClassExtension.dll (101888 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
PortableDeviceTypes.dll (166912 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
PortableDeviceWiaCompat.dll (132096 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
PortableDeviceWMDRM.dll (199168 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
powercfg.cpl (114688 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
powercfg.exe (49152 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
powrprof.dll (17408 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
prc.nls (83748 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
prcp.nls (83748 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
prflbmsg.dll (16384 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
print.exe (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
printui.dll (560640 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
proctexe.ocx (81920 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:10) ——
prodspec.ini (343 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
profmap.dll (27648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
progman.exe (109568 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
proquota.exe (50176 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
proxycfg.exe (9216 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
psapi.dll (23040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
psbase.dll (96768 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
pschdcnt.h (3010 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pschdprf.dll (10752 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pschdprf.ini (6877 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pscript.sep (51 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
psnppagn.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
pstorec.dll (43520 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
pstorsvc.dll (34304 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
Pubole32.dll (76288 bytes - created on 20/06/2002 at 18:25, modified on 20/06/2002 at 18:25) ——
pubprn.vbs (3708 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
qagent.dll (150528 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
qagentrt.dll (291328 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
qappsrv.exe (16896 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
qasf.dll (211456 bytes - created on 30/03/2005 at 11:38, modified on 18/10/2006 at 21:47) ——
qcap.dll (192512 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
qcliprov.dll (62464 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
QCUI2.dll (466944 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:41) –a—
qdv.dll (279040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
qdvd.dll (386048 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
qedit.dll (562176 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
qedwipes.dll (733696 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:21) ——
qmgr.dll (409088 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
qmgrprxy.dll (18944 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) –a—
qosname.dll (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
qprocess.exe (19968 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
QtBtLib.dll (49152 bytes - created on 25/09/2005 at 07:49, modified on 19/12/2002 at 15:58) ——
quartz.dll (1288192 bytes - created on 30/03/2005 at 11:38, modified on 07/05/2008 at 06:12) ——
query.dll (1435648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
quick.ime (77824 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
QuickTime.qts (57344 bytes - created on 04/11/2008 at 10:30, modified on 04/11/2008 at 10:30) –a—
QuickTimeVR.qtx (90112 bytes - created on 04/11/2008 at 10:30, modified on 04/11/2008 at 10:30) –a—
qutil.dll (76800 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
qwinsta.exe (22016 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
racpldlg.dll (43520 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
rasadhlp.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rasapi32.dll (237056 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rasauto.dll (88576 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rasautou.exe (11776 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
raschap.dll (79872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rasctrnm.h (1818 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasctrs.dll (11776 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasctrs.ini (3458 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasdial.exe (11264 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasdlg.dll (658432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rasman.dll (61440 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rasmans.dll (186368 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rasmontr.dll (143360 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasmxs.dll (22528 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rasphone.exe (56832 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rasppp.dll (210944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rasqec.dll (61952 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
rasrad.dll (23552 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rassapi.dll (16384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rasser.dll (12800 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rastapi.dll (58368 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rastls.dll (150016 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rcbdyctl.dll (102400 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rcimlby.exe (35840 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rcp.exe (21504 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rdchost.dll (147968 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
RDOCURS.DLL (151552 bytes - created on 03/04/2000 at 17:52, modified on 03/04/2000 at 17:52) ——
rdpcfgex.dll (4096 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
rdpclip.exe (62976 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
rdpdd.dll (92424 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:13) ——
rdpsnd.dll (19968 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
rdpwsx.dll (87176 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:13) ——
rdsaddin.exe (13824 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
rdshost.exe (67072 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
recover.exe (7168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
redir.exe (3338 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
reg.exe (50176 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
regapi.dll (49664 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
regedt32.exe (3584 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
regini.exe (33792 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
regsvc.dll (59904 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
regsvr32.exe (11776 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
regwiz.exe (4608 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
regwizc.dll (397824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
remotepg.dll (60416 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
remotesp.tsp (76800 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rend.dll (107520 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
replace.exe (12800 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
reset.exe (9728 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
results.txt (472 bytes - created on 25/09/2005 at 07:47, modified on 05/01/2006 at 11:23) ——
resutils.dll (58880 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rexec.exe (13824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rhttpaa.dll (290304 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
riched20.dll (433664 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
riched32.dll (3584 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
RICHTX32.OCX (212240 bytes - created on 09/03/2004 at 16:45, modified on 09/03/2004 at 16:45) ——
rmoc3260.dll (176167 bytes - created on 15/11/2005 at 10:04, modified on 11/07/2006 at 13:37) ——
rmocx.dll (176167 bytes - created on 04/07/2006 at 22:05, modified on 04/07/2006 at 22:05) ——
rnr20.dll (3072 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
romanime.ime (26112 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
route.exe (19968 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
routemon.exe (25600 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
routetab.dll (6656 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rpcns4.dll (22016 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rpcrt4.dll (584704 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rpcss.dll (399360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
rsaci.rat (3167 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsaenh.dll (208384 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:37) –a—
rsh.exe (14848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rshx32.dll (39936 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rsm.exe (49152 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsmps.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rsmsink.exe (24576 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsmui.exe (49152 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsvp.exe (132608 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsvp.ini (12082 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsvpcnts.h (3178 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsvpmsg.dll (23552 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsvpperf.dll (9728 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rsvpsp.dll (92672 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rtcshare.exe (77312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rtipxmib.dll (31744 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rtm.dll (98304 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rtutils.dll (44032 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
runas.exe (16384 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
rundll32.exe (33280 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
runonce.exe (14336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
rwinsta.exe (15872 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
s24NCfg.dll (30938 bytes - created on 15/12/2002 at 01:43, modified on 15/12/2002 at 01:43) ——
s3gnb.dll (397056 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
safrcdlg.dll (43520 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
safrdm.dll (29696 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
safrslv.dll (45568 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
samlib.dll (64000 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
samsrv.dll (415744 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sapi.cpl.manifest (749 bytes - created on 30/03/2005 at 11:53, modified on 30/03/2005 at 11:53) ——
savedump.exe (13312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sbe.dll (270848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sbeio.dll (159232 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sc.exe (31232 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
scarddlg.dll (69632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
scardssp.dll (118784 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
scardsvr.exe (95744 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sccbase.dll (169984 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sccsccp.dll (171008 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
scecli.dll (181248 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
scesrv.dll (314880 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
schannel.dll (144384 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
schedsvc.dll (192512 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) –a—
sclgntfy.dll (20480 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
SCP32.DLL (15872 bytes - created on 24/03/1998 at 20:54, modified on 24/03/1998 at 20:54) ——
scredir.dll (26624 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
scrnsave.scr (9216 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
scrobj.dll (180224 bytes - created on 30/03/2005 at 11:38, modified on 09/05/2008 at 11:53) ——
scrrun.dll (172032 bytes - created on 30/03/2005 at 11:38, modified on 09/05/2008 at 11:53) ——
sdbinst.exe (77312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sdhcinst.dll (29184 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
sdpblb.dll (130048 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
seclogon.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
secupd.dat (4569 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
secupd.sig (7208 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
secur32.dll (56320 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
security.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sendcmsg.dll (29184 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sendmail.dll (54784 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sens.dll (39424 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
sensapi.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
senscfg.dll (13824 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
serialui.dll (14336 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
servdeps.dll (56320 bytes - created on 30/03/2005 at 11:50, modified on 14/04/2008 at 01:12) ——
services.exe (108544 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
services.msc (33464 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
serwvdrv.dll (14848 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sessmgr.exe (141312 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
SET276.tmp (10834432 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
SET278.tmp (314880 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
SET27B.tmp (8231936 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
sethc.exe (31232 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
setup.bmp (240120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
setup.exe (23040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
setupapi.dll (985088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 05:42) ——
setupdll.dll (414208 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
setupn.exe (32768 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
setver.exe (11753 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sfc.dll (5120 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
sfc.exe (9728 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sfcfiles.dll (1614848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sfc_os.dll (140288 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
sfmapi.dll (23552 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
shadow.exe (14848 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
share.exe (882 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
shdoclc.dll (549376 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:03) ——
shdocvw.dll (1499136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
shell.dll (5120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
shell32.dll (8461312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
shellstyle.dll (435712 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
shfolder.dll (25088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
shgina.dll (68096 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
shiftjis.uce (16740 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
shimeng.dll (65024 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
shimgvw.dll (438272 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
shlwapi.dll (474112 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
shmedia.dll (152064 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
shmgrate.exe (45056 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
shrpubw.exe (77824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
shscrap.dll (27648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
shsvcs.dll (135168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
shutdown.exe (19456 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sigtab.dll (13312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sigverif.exe (70144 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
simpdata.tlb (16384 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:24) ——
sirenacm.dll (51056 bytes - created on 19/01/2007 at 12:53, modified on 19/01/2007 at 12:53) ——
sisbkup.dll (13824 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
skdll.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
skeys.exe (26112 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
slayerxp.dll (25088 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
slbcsp.dll (306176 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
slbiop.dll (98304 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
slbrccsp.dll (14848 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
slcoinst.dll (73832 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
slextspk.dll (286792 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
slgen.dll (188508 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
slrundll.exe (32866 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
slserv.exe (73796 bytes - created on 26/08/2008 at 10:42, modified on 14/04/2008 at 01:12) ——
sl_anet.acm (86016 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:10) ——
smbinst.exe (8192 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
smlogcfg.dll (362496 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
smlogsvc.exe (89600 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
smss.exe (50688 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
SMSUnins.dll (53248 bytes - created on 15/12/2002 at 01:43, modified on 15/12/2002 at 01:43) ——
sndrec32.exe (131584 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
sndvol32.exe (138752 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
snmpapi.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
snmpsnap.dll (182272 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
softpub.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sol.exe (56832 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
sort.exe (24576 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sortkey.nls (262148 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sorttbls.nls (23044 bytes - created on 30/03/2005 at 11:38, modified on 29/12/2006 at 19:08) ——
sound.drv (1744 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
spdwnwxp.exe (7680 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) –a—
spider.exe (538624 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
spmsg.dll (17272 bytes - created on 01/01/2007 at 22:30, modified on 30/11/2007 at 12:39) ——
spnike.dll (69632 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
spnpinst.exe (11264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 05:42) ——
spoolss.dll (75264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
spoolsv.exe (57856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
sprestrt.exe (9728 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sprio600.dll (70656 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
sprio800.dll (72192 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
spupdsvc.exe (26488 bytes - created on 30/09/2005 at 07:50, modified on 10/08/2007 at 20:46) –a—
spupdwxp.exe (20992 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
spupdwxp.log (265 bytes - created on 26/08/2008 at 12:19, modified on 26/08/2008 at 12:19) –a—
spxcoins.dll (24661 bytes - created on 30/03/2005 at 11:46, modified on 04/08/2004 at 05:00) ——
sqlsodbc.chm (46133 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sqlsrv32.dll (442368 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
sqlsrv32.rll (90112 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:26) –a—
sqlunirl.dll (180800 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
sqlwid.dll (24603 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sqlwoa.dll (49179 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
srclient.dll (67584 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) –a—
srrstr.dll (239104 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) ——
srsvc.dll (171008 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) –a—
srvsvc.dll (96768 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ss3dfo.scr (704512 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ssbezier.scr (19968 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ssdpapi.dll (34816 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ssdpsrv.dll (71680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ssflwbox.scr (393216 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ssldivx.dll (200704 bytes - created on 23/04/2007 at 01:15, modified on 23/04/2007 at 01:15) ——
ssleay32.dll (147456 bytes - created on 05/01/2006 at 11:23, modified on 20/11/2003 at 22:03) ——
ssmarque.scr (20992 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ssmypics.scr (47104 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ssmyst.scr (18944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sspipes.scr (610304 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ssstars.scr (14336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sstext3d.scr (679936 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
stclient.dll (59392 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
stdole2.tlb (16896 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 16:42) –a—
stdole32.tlb (7168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sti.dll (68096 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
stimon.exe (14848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sti_ci.dll (136704 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
stobject.dll (121856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
storage.dll (4208 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
storprop.dll (74752 bytes - created on 30/03/2005 at 11:46, modified on 14/04/2008 at 01:12) ——
streamci.dll (8192 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
strmdll.dll (247326 bytes - created on 30/03/2005 at 11:39, modified on 03/10/2008 at 10:02) ——
strmfilt.dll (75776 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
subrange.uce (93702 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
subst.exe (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
svchost.exe (14336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
svcpack.dll (6144 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
swprv.dll (138752 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sxs.dll (713216 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
syncapp.exe (51200 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
synceng.dll (57856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
SynCOM.dll (77917 bytes - created on 30/03/2005 at 12:11, modified on 07/10/2004 at 23:35) ——
SynCtrl.dll (114688 bytes - created on 30/03/2005 at 12:11, modified on 07/10/2004 at 23:36) ——
syncui.dll (191488 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
SynTPAPI.dll (90202 bytes - created on 30/03/2005 at 12:11, modified on 07/10/2004 at 23:36) ——
SynTPCo2.dll (81920 bytes - created on 30/03/2005 at 12:11, modified on 07/10/2004 at 23:46) ——
SynTPFcs.dll (69722 bytes - created on 30/03/2005 at 12:11, modified on 07/10/2004 at 23:44) ——
sysdm.cpl (300544 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sysedit.exe (18896 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sysinv.dll (15872 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
syskey.exe (36864 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sysmon.ocx (218624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:10) ——
sysocmgr.exe (106496 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
sysprint.sep (3214 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
sysprtj.sep (3577 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
syssetup.dll (990208 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
system.drv (3360 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
systray.exe (3072 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
t2embed.dll (117760 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
tapi.dll (19200 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tapi3.dll (858624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
tapi32.dll (181760 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
tapiperf.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tapisrv.dll (249856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
tapiui.dll (78848 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
taskman.exe (15360 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
taskmgr.exe (135680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
tcmsetup.exe (12288 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tcpmib.dll (14848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
tcpmon.dll (45568 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
tcpmon.ini (53478 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tcpmonui.dll (45568 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
tcpsvcs.exe (19456 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tdc.ocx (66560 bytes - created on 30/03/2005 at 11:38, modified on 17/10/2006 at 11:55) ——
telephon.cpl (28160 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
telnet.exe (75776 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
termmgr.dll (358400 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
termsrv.dll (295424 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) –a—
tftp.exe (16896 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
Thawbrkr.dll (185344 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
themeui.dll (385536 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ticrf.rat (1988 bytes - created on 01/09/2006 at 07:44, modified on 01/09/2006 at 07:44) ——
timedate.cpl (94208 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
timer.drv (4048 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tintlgnt.ime (571392 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
toolhelp.dll (13888 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tourstart.exe (347136 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
tracert.exe (12288 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
tracert6.exe (31744 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
traffic.dll (31232 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tree.com (12800 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
trkwks.dll (90112 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
tsappcmp.dll (52224 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tsbyuv.dll (8192 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
tscfgwmi.dll (93696 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
tscon.exe (14848 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
tscupgrd.exe (44544 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
tsd32.dll (15360 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tsddd.dll (12168 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:13) ——
tsdiscon.exe (14848 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
tsgqec.dll (53248 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
tskill.exe (16384 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
tslabels.h (3286 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
tslabels.ini (13223 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
tspkg.dll (50688 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
tsshutdn.exe (16896 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
tssoft32.acm (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
twext.dll (57856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
txflog.dll (101376 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
typelib.dll (177856 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
tzchange.exe (62976 bytes - created on 29/01/2007 at 08:58, modified on 23/10/2008 at 10:07) ——
TZLog.log (836644 bytes - created on 16/02/2007 at 17:48, modified on 15/12/2008 at 10:46) –a—
udhisapi.dll (26624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ufat.dll (82432 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
ulib.dll (275456 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
umandlg.dll (35840 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
umdmxfrm.dll (13312 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
umpnpmgr.dll (123392 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
unicdime.ime (65024 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
unicode.nls (89588 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
unicows.dll (245408 bytes - created on 01/03/2005 at 11:27, modified on 01/03/2005 at 11:27) ——
uniime.dll (76288 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
unimdm.tsp (206848 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
unimdmat.dll (74240 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
uniplat.dll (13824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
unlodctr.exe (4096 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
untfs.dll (316416 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
upnp.dll (133632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
upnpcont.exe (16896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
upnphost.dll (185856 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
upnpui.dll (239616 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ups.exe (18432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
ureg.dll (17920 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
url.dll (105984 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
urlmon.dll (1160192 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
usbmon.dll (16896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
usbui.dll (74240 bytes - created on 30/03/2005 at 11:47, modified on 14/04/2008 at 01:12) ——
user.exe (47872 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
user32.dll (578560 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
userenv.dll (727040 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
userinit.exe (26112 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
usp10.dll (406016 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
usrcntra.dll (61500 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrcoina.dll (69699 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrdpa.dll (77890 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrdtea.dll (323641 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrfaxa.dll (86073 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrlbva.dll (53305 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrlogon.cmd (1161 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
usrmlnka.exe (77891 bytes - created on 17/08/2001 at 22:37, modified on 04/08/2004 at 05:00) ——
usrprbda.exe (61508 bytes - created on 17/08/2001 at 22:37, modified on 04/08/2004 at 05:00) ——
usrrtosa.dll (77883 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrsdpia.dll (49211 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrshuta.exe (69700 bytes - created on 17/08/2001 at 22:37, modified on 04/08/2004 at 05:00) ——
usrsvpia.dll (41019 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrv42a.dll (102457 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrv80a.dll (49209 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrvoica.dll (45116 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
usrvpa.dll (49211 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
utildll.dll (25600 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
utilman.exe (50176 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
uwdf.exe (8704 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:58) ——
uxtheme.dll (218624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
v7vga.rom (18832 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vatee.ax (86016 bytes - created on 17/10/2008 at 21:45, modified on 08/06/2005 at 14:45) –a—
VB6STKIT.DLL (101888 bytes - created on 14/07/2000 at 23:00, modified on 14/07/2000 at 23:00) ——
VBAEN32.OLB (24848 bytes - created on 24/03/1998 at 12:44, modified on 24/03/1998 at 12:44) ——
VBAEND32.OLB (24848 bytes - created on 24/03/1998 at 12:44, modified on 24/03/1998 at 12:44) ——
vbajet32.dll (30749 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
VBAME.DLL (40960 bytes - created on 24/11/1999 at 17:40, modified on 24/11/1999 at 17:40) ——
vbisurf.ax (30208 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
vbscript.dll (430080 bytes - created on 30/03/2005 at 11:38, modified on 09/05/2008 at 11:53) ——
vcdex.dll (7680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vdmdbg.dll (26112 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
vdmredir.dll (51712 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
VEN2232.OLB (37376 bytes - created on 03/12/1996 at 13:50, modified on 03/12/1996 at 13:50) ——
ver.dll (9008 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
verclsid.exe (28672 bytes - created on 17/03/2006 at 01:38, modified on 14/04/2008 at 01:12) ——
verifier.dll (26624 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
verifier.exe (98304 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
version.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
vfpodbc.dll (20535 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vfwwdm32.dll (53760 bytes - created on 26/12/2005 at 21:22, modified on 14/04/2008 at 01:12) ——
vga.dll (9344 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vga.drv (2176 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vga256.dll (51456 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vga64k.dll (18176 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vidcap.ax (28672 bytes - created on 26/12/2005 at 21:22, modified on 14/04/2008 at 01:12) ——
View Channels.scf (75 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vjoy.dll (4608 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
VSFLEX3.OCX (225280 bytes - created on 05/01/1999 at 16:30, modified on 05/01/1999 at 16:30) ——
vssadmin.exe (33792 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
vssapi.dll (430592 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
vssvc.exe (289792 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
vss_ps.dll (16896 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
W29MLRES.DLL (1654784 bytes - created on 24/09/2005 at 22:51, modified on 14/10/2004 at 19:20) ——
w29NCPA.dll (458752 bytes - created on 25/09/2005 at 07:47, modified on 15/10/2004 at 10:20) ——
w32time.dll (175104 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
w32tm.exe (49664 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
w32topl.dll (22016 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
w3ssl.dll (15872 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
watchdog.sys (17664 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 19:45) ——
wavemsp.dll (215552 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wbcache.deu (65489 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbcache.enu (65489 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbcache.esn (65489 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbcache.fra (65489 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbcache.ita (65489 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbcache.nld (65489 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbcache.sve (65489 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbdbase.deu (1309184 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbdbase.enu (957440 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbdbase.esn (750080 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbdbase.fra (786944 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbdbase.ita (867840 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbdbase.nld (1095680 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wbdbase.sve (937984 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
WDBtnMgr.exe (339968 bytes - created on 19/12/2006 at 11:01, modified on 19/12/2006 at 11:01) ——
wdfapi.dll (4096 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
wdfmgr.exe (8704 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:58) ——
wdigest.dll (49152 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wdl.trm (4096 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wdmaud.drv (23552 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) –a—
webcheck.dll (233472 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
webclnt.dll (68096 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
webfldrs.msi (1326080 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
webhits.dll (40448 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
webvw.dll (135680 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wextract.exe (65024 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wfwnet.drv (13600 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
WgaLogon.dll (236928 bytes - created on 10/04/2006 at 13:00, modified on 15/03/2007 at 18:16) ——
WgaTray.exe (336768 bytes - created on 10/04/2006 at 13:00, modified on 15/03/2007 at 18:17) ——
wiaacmgr.exe (433664 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wiadefui.dll (463360 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wiadss.dll (124416 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wiascr.dll (75776 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wiaservc.dll (333824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wiasf.ax (40448 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wiashext.dll (589312 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wiavideo.dll (111104 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wiavusd.dll (145408 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wifeman.dll (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
win.com (18432 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
win32k.sys (1846400 bytes - created on 30/03/2005 at 11:38, modified on 15/09/2008 at 13:12) ——
win32spl.dll (102400 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
win87em.dll (13312 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winar30.ime (79360 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
winbrand.dll (1647616 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 17:48) ——
winchat.exe (35328 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
windowscodecs.dll (712704 bytes - created on 24/10/2006 at 12:30, modified on 14/04/2008 at 01:12) ——
windowscodecsext.dll (346112 bytes - created on 24/10/2006 at 12:29, modified on 14/04/2008 at 01:12) ——
WindowsLogon.manifest (488 bytes - created on 30/03/2005 at 11:53, modified on 30/03/2005 at 11:53) ——
winfax.dll (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
WinFXDocObj.exe (206336 bytes - created on 17/10/2006 at 12:05, modified on 17/10/2006 at 12:05) ——
wingb.ime (72704 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
winhelp.hlp (32674 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winhlp32.exe (8192 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winhttp.dll (354304 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winime.ime (65536 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
wininet.dll (826368 bytes - created on 30/03/2005 at 11:38, modified on 16/10/2008 at 20:38) –a—
winipsec.dll (32256 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winlogon.exe (507904 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winmine.exe (119808 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
winmm.dll (176128 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winmsd.exe (11776 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winnls.dll (5120 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winntbbu.dll (756224 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) ——
winoldap.mod (2080 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winpy.ime (156672 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
WINPY.MB (1783864 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
winrnr.dll (16896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winscard.dll (99328 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winshfhc.dll (17408 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
winsock.dll (2864 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winsp.ime (156672 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
WINSP.MB (1564868 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
winspool.drv (146432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
winspool.exe (2112 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
winsrv.dll (293376 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winsta.dll (53760 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winstrm.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wintrust.dll (176640 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
winver.exe (5632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
winzm.ime (156672 bytes - created on 30/03/2005 at 12:26, modified on 14/04/2008 at 01:11) ——
WINZM.MB (1223500 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
WISPTIS.EXE (293376 bytes - created on 26/10/2006 at 13:45, modified on 26/10/2006 at 13:45) ——
wkssvc.dll (132096 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
WLAN.INI (1413 bytes - created on 05/01/2006 at 11:22, modified on 05/01/2006 at 11:22) ——
wlanapi.dll (69120 bytes - created on 26/08/2008 at 10:43, modified on 14/04/2008 at 01:12) ——
wldap32.dll (172032 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wlnotify.dll (92672 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
WMADMOD.dll (757248 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
WMADMOE.dll (1117696 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmasf.dll (222720 bytes - created on 30/03/2005 at 11:39, modified on 27/10/2007 at 17:40) ——
wmdmlog.dll (33792 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmdmps.dll (37376 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
WMDRMdev.dll (429056 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
WMDRMNet.dll (348672 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
wmdrmsdk.dll (535040 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
wmerrenu.dll (51200 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wmerror.dll (227328 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmi.dll (5632 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:11) –a—
wmidx.dll (157184 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmidx.ocx (89088 bytes - created on 01/05/2001 at 17:06, modified on 01/05/2001 at 17:06) ——
wmimgmt.msc (63488 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
wmiprop.dll (18944 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
WMNetmgr.dll (938496 bytes - created on 30/03/2005 at 11:39, modified on 18/06/2008 at 05:03) ——
wmp.dll (10834944 bytes - created on 30/03/2005 at 11:39, modified on 11/06/2007 at 23:51) ——
wmp.ocx (20480 bytes - created on 30/03/2005 at 11:39, modified on 22/09/2004 at 18:46) ——
wmpasf.dll (242688 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmpcd.dll (20480 bytes - created on 30/03/2005 at 11:39, modified on 22/09/2004 at 18:46) ——
wmpcore.dll (20480 bytes - created on 30/03/2005 at 11:39, modified on 22/09/2004 at 18:46) ——
wmpdxm.dll (314880 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmpeffects.dll (295936 bytes - created on 18/10/2006 at 21:47, modified on 24/06/2008 at 18:12) ——
wmpencen.dll (1661440 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
WMPhoto.dll (276992 bytes - created on 24/10/2006 at 12:30, modified on 14/04/2008 at 01:12) ——
wmploc.dll (8231936 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmpmde.dll (613376 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
wmpns.dll (221184 bytes - created on 06/10/2005 at 13:01, modified on 04/08/2004 at 05:00) ——
wmpps.dll (130048 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
wmpshell.dll (99840 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmpsrcwp.dll (204288 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
wmpui.dll (20480 bytes - created on 30/03/2005 at 11:39, modified on 22/09/2004 at 18:46) ——
wmsdmod.dll (4096 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmsdmoe.dll (115200 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
wmsdmoe2.dll (4096 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
WMSPDMOD.dll (603648 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
WMSPDMOE.dll (1329152 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmstream.dll (303616 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
wmv8dmod.dll (309584 bytes - created on 09/05/2001 at 17:40, modified on 09/05/2001 at 17:40) ——
wmv8dmoe.dll (466944 bytes - created on 09/05/2001 at 16:47, modified on 09/05/2001 at 16:47) ——
wmv8ds32.ax (278559 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
WMVADVD.dll (4096 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
WMVADVE.DLL (4096 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
WMVCore.dll (2458112 bytes - created on 30/03/2005 at 11:39, modified on 18/06/2008 at 05:03) ——
WMVDECOD.dll (1543680 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
wmvdmod.dll (4096 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmvdmoe.dll (446464 bytes - created on 09/05/2001 at 16:50, modified on 09/05/2001 at 16:50) ——
wmvdmoe2.dll (4096 bytes - created on 30/03/2005 at 11:39, modified on 18/10/2006 at 21:47) ——
wmvds32.ax (258048 bytes - created on 30/03/2005 at 11:39, modified on 14/04/2008 at 01:12) ——
WMVENCOD.dll (1574912 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
WMVSDECD.dll (1382912 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
WMVSENCD.dll (767488 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
WMVXENCD.dll (656896 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
wow32.dll (264192 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wowdeb.exe (2736 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wowexec.exe (10368 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wowfax.dll (3200 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
wowfaxui.dll (13824 bytes - created on 17/08/2001 at 22:36, modified on 04/08/2004 at 05:00) ——
wpa.dbl (1158 bytes - created on 30/03/2005 at 11:38, modified on 15/12/2008 at 11:22) –a—
wpabaln.exe (32256 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wpdconns.dll (35840 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
wpdmtp.dll (154624 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
wpdmtpdr.dll (331776 bytes - created on 22/09/2004 at 18:46, modified on 22/09/2004 at 18:46) ——
wpdmtpus.dll (63488 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
WpdShext.dll (2603008 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
wpdshextautoplay.exe (17408 bytes - created on 18/10/2006 at 20:00, modified on 18/10/2006 at 20:00) ——
wpdshextres.dll (38400 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
WPDShServiceObj.dll (133632 bytes - created on 18/10/2006 at 21:47, modified on 18/10/2006 at 21:47) ——
wpdsp.dll (356352 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
wpdtrace.dll (10752 bytes - created on 22/09/2004 at 18:46, modified on 22/09/2004 at 18:46) ——
wpd_ci.dll (629760 bytes - created on 22/09/2004 at 18:46, modified on 18/10/2006 at 21:47) ——
wpnpinst.exe (11264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
write.exe (5632 bytes - created on 30/03/2005 at 11:51, modified on 04/08/2004 at 05:00) ——
ws2help.dll (19968 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
ws2_32.dll (82432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wscntfy.exe (13824 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wscript.exe (155648 bytes - created on 30/03/2005 at 11:38, modified on 08/05/2008 at 12:24) ——
wscsvc.dll (80896 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wscui.cpl (148480 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wshatm.dll (9216 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wshbth.dll (108032 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) ——
wshcon.dll (36864 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wshext.dll (90112 bytes - created on 30/03/2005 at 11:38, modified on 09/05/2008 at 11:53) ——
wship6.dll (14336 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wshirda.dll (8192 bytes - created on 30/03/2005 at 11:48, modified on 14/04/2008 at 01:12) –a—
wshisn.dll (11776 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wshnetbs.dll (7168 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wshom.ocx (135168 bytes - created on 30/03/2005 at 11:38, modified on 10/05/2008 at 00:23) ——
WshRm.dll (11264 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wshtcpip.dll (19456 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wsnmp32.dll (41984 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wsock32.dll (22528 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wstdecod.dll (50688 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
wtsapi32.dll (18432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wuapi.dll (561688 bytes - created on 30/03/2005 at 11:52, modified on 16/10/2008 at 14:12) –a—
wuapi.dll.mui (23576 bytes - created on 21/06/2007 at 12:14, modified on 16/10/2008 at 14:07) –a—
wuauclt.exe (51224 bytes - created on 30/03/2005 at 11:52, modified on 16/10/2008 at 14:09) –a—
wuauclt1.exe (172312 bytes - created on 30/03/2005 at 11:52, modified on 26/05/2005 at 04:16) ——
wuaucpl.cpl (213528 bytes - created on 30/03/2005 at 11:52, modified on 16/10/2008 at 14:12) –a—
wuaucpl.cpl.manifest (749 bytes - created on 30/03/2005 at 11:53, modified on 30/03/2005 at 11:53) ——
wuaucpl.cpl.mui (23576 bytes - created on 21/06/2007 at 12:14, modified on 16/10/2008 at 14:07) –a—
wuaueng.dll (1809944 bytes - created on 30/03/2005 at 11:52, modified on 16/10/2008 at 14:13) –a—
wuaueng.dll.mui (18456 bytes - created on 21/06/2007 at 12:14, modified on 16/10/2008 at 14:07) –a—
wuaueng1.dll (194328 bytes - created on 30/03/2005 at 11:52, modified on 26/05/2005 at 04:16) ——
wuauserv.dll (6656 bytes - created on 30/03/2005 at 11:52, modified on 14/04/2008 at 01:12) –a—
wucltui.dll (323608 bytes - created on 30/03/2005 at 11:52, modified on 16/10/2008 at 14:12) –a—
wucltui.dll.mui (31768 bytes - created on 21/06/2007 at 12:14, modified on 16/10/2008 at 14:09) –a—
WUDFCoinstaller.dll (95344 bytes - created on 28/09/2006 at 20:13, modified on 28/09/2006 at 20:13) ——
WudfHost.exe (146432 bytes - created on 28/09/2006 at 18:56, modified on 28/09/2006 at 18:56) ——
WudfPlatform.dll (165376 bytes - created on 28/09/2006 at 18:56, modified on 28/09/2006 at 18:56) ——
WudfSvc.dll (55808 bytes - created on 28/09/2006 at 18:56, modified on 28/09/2006 at 18:56) ——
WUDFx.dll (316416 bytes - created on 28/09/2006 at 18:56, modified on 28/09/2006 at 18:56) ——
wupdmgr.exe (32256 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
wups.dll (34328 bytes - created on 30/03/2005 at 11:52, modified on 16/10/2008 at 14:08) –a—
wups2.dll (43544 bytes - created on 26/05/2005 at 04:16, modified on 16/10/2008 at 14:09) –a—
WUSB54GS.cat (7419 bytes - created on 05/01/2006 at 11:23, modified on 04/10/2004 at 12:20) ——
WUSB54GSv2.cat (7423 bytes - created on 05/01/2006 at 11:23, modified on 18/03/2005 at 17:40) ——
wuweb.dll (202776 bytes - created on 30/03/2005 at 11:52, modified on 16/10/2008 at 14:13) –a—
wzcdlg.dll (383488 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
wzcsapi.dll (52736 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) –a—
wzcsvc.dll (483840 bytes - created on 04/08/2004 at 00:56, modified on 14/04/2008 at 01:12) –a—
xactsrv.dll (91648 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
XceedCry.dll (516656 bytes - created on 02/02/2003 at 12:01, modified on 02/02/2003 at 12:01) ——
XceedSco.dll (266952 bytes - created on 19/05/2003 at 11:37, modified on 19/05/2003 at 11:37) ——
xcopy.exe (30720 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
xenroll.dll (174200 bytes - created on 30/03/2005 at 11:38, modified on 04/08/2004 at 05:00) ——
xjis.nls (28288 bytes - created on 30/03/2005 at 12:26, modified on 04/08/2004 at 05:00) ——
xmllite.dll (121856 bytes - created on 28/11/2006 at 15:46, modified on 14/04/2008 at 01:12) ——
xmlprov.dll (129024 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——
xmlprovi.dll (50176 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) –a—
xolehlp.dll (11776 bytes - created on 30/03/2005 at 11:51, modified on 14/04/2008 at 01:12) ——
xpob2res.dll (438784 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:39) –a—
xpsp1res.dll (187392 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:39) ——
xpsp2res.dll (2897920 bytes - created on 30/03/2005 at 11:38, modified on 13/04/2008 at 18:39) ——
xpsp3res.dll (689152 bytes - created on 17/05/2005 at 01:25, modified on 13/04/2008 at 18:39) ——
zipfldr.dll (338432 bytes - created on 30/03/2005 at 11:38, modified on 14/04/2008 at 01:12) ——

==================================
=EOF=


Here is the Kaspersky antiviruse scan log:


KASPERSKY ONLINE SCANNER 7 REPORT
Tuesday, December 16, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Tuesday, December 16, 2008 12:55:25
Records in database: 1465606
——————————————————————————–

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\

Scan statistics:
Files scanned: 60197
Threat name: 1
Infected objects: 2
Suspicious objects: 0
Duration of the scan: 01:21:55


File name / Threat name / Threats count
C:\WINDOWS\Downloaded Installations\{F0E5FAD3-859E-457C-BEBE-779A607E7BF3}\My Kazaa Gold.msi Infected: not-a-virus:Porn-Tool.Win32.Porn2Peer.b 1
C:\Program Files\My Kazaa Gold\MyGoldKazaa.exe Infected: not-a-virus:Porn-Tool.Win32.Porn2Peer.b 1

The selected area was scanned.


Here is the new RSIT Hijackthis log:


Logfile of random's system information tool 1.04 (written by random/random)
Run by [removed] at 2008-12-16 18:12:36
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 11 GB (40%) free of 27 GB
Total RAM: 502 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:12:45, on 16/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Arcade\PCMService.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\My Book\WD Backup\uBBMonitor.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\PROGRA~1\MSNMES~2\msnmsgr.exe
C:\Documents and Settings\Tom\Desktop\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Tom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;;*.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WD Backup Monitor.lnk = C:\Program Files\My Book\WD Backup\uBBMonitor.exe
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tiscali.co.uk
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo…toUploader5.cab
O16 - DPF: {2A493D5F-8914-4D3E-8BF3-767F281862F4} (TraderMediaImgX Control) - http://sell.autotrader.co.uk/uk-ola/common/TraderMediaX.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://tommyw1986.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase6662.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1130160263281
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Facebo…Uploader4_5.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

–
End of file - 10707 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-09-29 1082880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java™ Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-26 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-04-07 323904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-26 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-26 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-02-08 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-02-08 126976]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-10-07 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-10-07 688218]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2005-03-28 188416]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2005-03-24 2880512]
"LManager"=C:\Program Files\Launch Manager\QtZgAcer.EXE [2005-03-28 319488]
"eRecoveryService"=C:\Windows\System32\Check.exe [2005-03-23 245760]
"EPSON Stylus DX3800 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE [2005-02-08 98304]
"PCMService"=C:\Program Files\Arcade\PCMService.exe [2005-03-09 49152]
"WD Button Manager"=C:\WINDOWS\system32\WDBtnMgr.exe [2006-12-19 339968]
"4oD"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2008-08-25 1168264]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-26 136600]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2005-07-19 221184]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2005-06-08 458752]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2005-06-08 217088]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"kdx"=C:\Program Files\Kontiki\KHost.exe [2007-04-23 1032640]
"LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2005-06-08 196608]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
WD Backup Monitor.lnk - C:\Program Files\My Book\WD Backup\uBBMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-02-08 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcoreservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Enabled:Windows Messenger"
"C:\Program Files\Real\RealPlayer\RealPlay.exe"="C:\Program Files\Real\RealPlayer\RealPlay.exe:*:Enabled:RealPlayer"
"C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE"="C:\Program Files\Real\RealPlayer\TRUEPLAY.EXE:*:Enabled:RealPlayer"
"C:\Program Files\My Kazaa Gold\giFT\giFTl.exe"="C:\Program Files\My Kazaa Gold\giFT\giFTl.exe:*:Enabled:giFT Loader for My Kazaa Gold(http://www.MyKazaaGold.com)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QuickTime\QuickTimePlayer.exe"="C:\Program Files\QuickTime\QuickTimePlayer.exe:*:Enabled:QuickTime Player"
"C:\WINDOWS\System32\rtcshare.exe"="C:\WINDOWS\System32\rtcshare.exe:*:Disabled:RTC App Sharing"
"C:\Program Files\Kontiki\KService.exe"="C:\Program Files\Kontiki\KService.exe:*:Enabled:Delivery Manager Service"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2008-12-16 14:33:31 —-A—- C:\DirLook.txt
2008-12-15 10:45:59 —-HD—- C:\WINDOWS\$NtUninstallKB955839$
2008-12-15 10:40:44 —-A—- C:\WINDOWS\system32\MRT.exe
2008-12-15 10:40:18 —-HD—- C:\WINDOWS\$NtUninstallKB952069_WM9$
2008-12-15 10:34:04 —-HD—- C:\WINDOWS\$NtUninstallKB954600$
2008-12-15 10:32:23 —-HD—- C:\WINDOWS\$NtUninstallKB956802$
2008-12-14 19:17:07 —-A—- C:\ComboFix.txt
2008-12-14 19:00:33 —-A—- C:\Boot.bak
2008-12-14 19:00:30 —-RASHD—- C:\cmdcons
2008-12-14 18:50:58 —-A—- C:\WINDOWS\zip.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\VFIND.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\SWXCACLS.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\SWSC.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\SWREG.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\sed.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\NIRCMD.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\grep.exe
2008-12-14 18:50:58 —-A—- C:\WINDOWS\fdsv.exe
2008-12-14 18:50:52 —-D—- C:\Qoobox
2008-12-11 22:10:03 —-D—- C:\Documents and Settings\All Users\Application Data\Avg8
2008-12-11 16:44:29 —-D—- C:\Documents and Settings\Tom\Application Data\Malwarebytes
2008-12-11 16:44:04 —-D—- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-11 16:44:04 —-D—- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-11 16:32:28 —-D—- C:\WINDOWS\ERDNT
2008-12-11 16:31:07 —-D—- C:\Program Files\ERUNT
2008-12-08 19:45:45 —-D—- C:\Program Files\trend micro
2008-12-08 19:44:22 —-D—- C:\rsit
2008-12-05 17:47:29 —-D—- C:\VundoFix Backups
2008-12-05 17:47:29 —-A—- C:\VundoFix.txt
2008-11-29 17:42:27 —-D—- C:\Program Files\iTunes
2008-11-29 17:42:27 —-D—- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-29 17:39:31 —-D—- C:\Program Files\Bonjour
2008-11-29 17:38:24 —-D—- C:\Program Files\QuickTime
2008-11-27 18:21:13 —-D—- C:\Program Files\Windows Live Safety Center
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaws.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\javaw.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\java.exe
2008-11-26 10:46:57 —-A—- C:\WINDOWS\system32\deploytk.dll

======List of files/folders modified in the last 1 months======

2008-12-15 11:22:58 —-A—- C:\WINDOWS\system32\eRLog.ini
2008-12-15 11:19:58 —-A—- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt
2008-12-15 10:45:42 —-A—- C:\WINDOWS\imsins.BAK
2008-12-14 19:08:44 —-A—- C:\WINDOWS\system.ini
2008-12-14 19:00:34 —-RASH—- C:\boot.ini
2008-12-14 18:52:18 —-A—- C:\WINDOWS\SchedLgU.Txt

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 IKSysFlt;System Filter Driver; C:\WINDOWS\system32\drivers\iksysflt.sys [2008-08-25 66952]
R1 IKSysSec;System Security Driver; C:\WINDOWS\system32\drivers\iksyssec.sys [2008-08-25 81288]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 pctfw2;pctfw2; \??\C:\WINDOWS\system32\drivers\pctfw2.sys []
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2004-10-15 11354]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2003-05-21 175360]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-06-25 34048]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-06-25 276480]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2004-12-08 16896]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-01-24 1038208]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2005-01-24 207616]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-02-08 804572]
R3 int15.sys;int15.sys; \??\C:\Program Files\acer\eRecovery\int15.sys []
R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-03-30 6144]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-07 185824]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-02-10 157056]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel® PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-10-29 3222784]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-01-24 703616]
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-01-10 449888]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 BCM42RLY;BCM42RLY; \??\C:\WINDOWS\System32\BCM42RLY.SYS []
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-25 44032]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 GTNDIS5;GTNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\GTNDIS5.SYS []
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-05-27 22016]
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2005-05-27 1317152]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USB_RNDIS;Linksys Wireless-G USB Network Adapter with SpeedBooster Driver v2; C:\WINDOWS\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2007-10-31 30464]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2004-08-16 1287168]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 EvtEng;EvtEng; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2004-10-15 86016]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-26 152984]
R2 KService;KService; C:\Program Files\Kontiki\KService.exe [2007-04-23 3068352]
R2 RegSrvc;RegSrvc; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2004-10-15 139264]
R2 S24EventMonitor;Spectrum24 Event Monitor; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2004-10-15 360521]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2008-06-13 356920]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2008-10-09 1079176]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2003-04-04 77824]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

—————–EOF—————–

My computer does seem to be working ok, like I said, with the occasional error coming up upon start up but I don't have the same symptoms of that virus that I had originally. Does that mean it is now clean? of that trojan virtumonde? Let me know if you need anything else done.

Thanks again
Tom
Post #12
Hi Tomwaterston,

Yes there is something else you need to do……………

I strongly recommend that you uninstall My Kazaa Gold . See here for more infromation My Kazaa Gold
Should you decide you need to use this type of program, see here for "safe" programs.
http://malwareremoval.com/p2pindex.php

Since you paid for PCTools, it's the right one to keep. You should remove this AVG related folder though
C:\Documents and Settings\All Users\Application Data\Avg8

As for the error, if you can get an error code, the folks in the Windows forum may be able help you once we are done.

You have old vulnerable java installed.
  • Go to http://java.sun.com/javase/downloads/index.jsp
  • Scroll down to "Java Runtime Environment (JRE) 6 Update 11
  • Click the download button on the right.
If Information Bar pop-ups up, right-click on it and say it's OK to display the blocked content.
  • Select the platform (Windows, in your case), mutli language.
  • Accept the license agreement, click continue.
You do not have to install the Java Web Start ActiveX Control
  • Scroll down and click on Windows Offline Installation,
  • Save the file jre-6u11-windows-i586-p.exe to your desktop;
Do not select Run . Do not install it yet.

When the download is complete, close your browser.

Open Control Panel > Add/Remove Programs:
  • Uninstall the old versions of Sun Java, Java JRE, or similar. (In your case, Java™ 6 Update 7 and Java™ 6 Update 10)
  • Do not uninstall Java TM 6 Update 11 if found! :yeah:
Reboot your computer.

  • Double-click on the saved file to install the update.
  • Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.

Take care of these remaining items and post back. We'll then finish up.

Thanks
Post #13
Hi, I have uninstalled kazaa gold as sugested, and deleted that avg8 file you mentioned in your last post, so that should all be sorted. I have also updated my java application as sugested by your instructions. All complete. You mention I should talk to someone on the windows forum for the error code I sometimes get? I take it that is a different forum? could you point me in the right direction as to where I might find it please? Thanks again for all your help. You're a credit to society.
Post #14
Hi Tomwaterston,

You're more than welcome. Please post a reply to this thread once you are finished so we'll know when to close this thread.

I included a link to the Windows forum and some info for when you post at the end of this reply.

Let's clean up the tools we used and I'll give you some prevention tips.

From your desktop, please delete
  • RSIT.exe
  • DirLook
And any notepads/logs that may have been created.

From within windows explorer, you can also delete C:\RSIT

Next, click the Start button, click Run. Copy and paste the following line into the run box and click OK
Combofix /u

Please download OTCleanIt by OldTimer. Save it to your desktop and double-click OTCleanIt.exe to run it, then click the Clean Up button. You may get prompted by your firewall that OTCleanIt wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will do some clean up tasks and remove some tools you used plus itself.

I suggest you keep ERUNT, ATF and MBAM. Keep MBAM updated and use it as an on demand scanner.

Now that your system has been cleaned, we'll remove all old infected System Restore points.

You must be logged on to an administrator account
  • Go to Start - All Programs - Accessories - System Tools - System Restore.
  • Click Create a restore point, and then click Next.
  • In the text box labeled Restore Point Description, type a name for this restore point
  • click create
* Remove old restore points

  • Go to Start - All Programs - Accessories - system tools.
  • Launch the Disk Cleanup tool and let it run.
  • When it finishes a box with tabs will appear, select the more options tab.
  • On this tab you will find a section for System Restore.
  • If you press the Clean Up button for that section, Windows will delete all restore points except for the most recent one.
* Updates and Upgrades

* If you are running Microsoft Office, or any portion thereof, go to the Microsoft's Office Update site and make sure you have at least all the cirtical updates installed (Free) Microsoft Office Update

Some Recommendations and prevention tips

You should also use Spyware Blaster to help immunize your computer.

- SpywareBlaster will add a large list of programs and sites into your Internet Explorer
settings that will protect you from running and downloading known malicious programs.

OR

A guide to understanding and using the hosts file.

Learn how your Hosts file can protect you and how you can protect it.
Besides the Hosts file information, there are links to a very good updated hosts file, a host file manager. and some programs that can protect your hosts file.
HOSTS

Please read the info on disabling the DNS Client before installing a custom hosts file.

* If you are behind a router Windows firewall should be fine. Otherwise a 3rd party firewall with outbound monitoring is recommended.

Click FIREWALL for tips, reviews and links to good, free and paid for firewalls. (Note: Zone Alarm is becoming bloatware)

-Secure your Internet Explorer

From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Next press the Apply button and then the OK to exit the Internet Properties page.
- Ensure that Automatic Update is turned on so you get all the latest patches.
Click start, control panel, click Security Center.

- Keep your antivirus program updated, as well as any other security programs you have.

- You may also want to read this article By Tony Klein
http://www.freedomlist.com/forum/viewtopic.php?t=22879

Link to the Windows forum
http://forums.whatthetech.com/Microsoft_Windows_f119.html

You should also include a link to this thread so they can see what we have done and that you've been given the all clear here. In Internet Explorer, right click the link below and click "copy shortcut". In Firefox, right click the link and click "Copy link location", then paste it into your post.
http://forums.whatthetech.com/Laptop_infec…nde_t97596.html

Take care :adios:
Post #15
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI