Malware on PC is playing audio commercials at random times

**GTO67** · 13-04-2011

I don't know where this came from, but I have "Advanced Performance Platform Revenuestreaming" Cashtitan Malware on my PC and I would like to know how to remove it. Every so often, a voice ad will break in and it sounds like a radio station is playing in the backround. Also, when I go to the "add/remove" area of the PC, I cannot delete this. It asks for a code to remove the program.

Please help!

Thank you in advance.

B Mullen

**broni** · 13-04-2011

Welcome aboard

Please, complete all steps listed here: HERE

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running tools or applying updates other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

**GTO67** · 15-04-2011

The following posts are the results of the scans that "broni" asked me to perform, to help diagnose/clean my PC of the "Advanced Performance Platform Revenustreaming" malware. I completed these and so far, the audio ads have not returned. I have not checked the "add/remove" area to see if this malware was removed. Thank you so much for your help!

GTO67

Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes

Database version: 6355

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4/13/2011 8:33:38 PM
mbam-log-2011-04-13 (20-33-38).txt

Scan type: Quick scan
Objects scanned: 183914
Time elapsed: 5 minute(s), 31 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 5
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
c:\WINDOWS\system32\sphnhmoznriqkl.dll (Trojan.Agent) -> Delete on reboot.

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{D8267796-E9C7-095C-1EC5-0E4DF5C32A05} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{D8267796-E9C7-095C-1EC5-0E4DF5C32A05} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Settings\{D8267796-E9C7-095C-1EC5-0E4DF5C32A05} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{D8267796-E9C7-095C-1EC5-0E4DF5C32A05} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\rvidiopclmrz (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\andlknovbkdrqhmm (Trojan.Agent) -> Value: andlknovbkdrqhmm -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Session Manager\AppCertDlls\AppSecDll (Trojan.Agent) -> Value: AppSecDll -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
c:\documents and settings\all users\application data\00977225 (Rogue.Multiple) -> Quarantined and deleted successfully.

Files Infected:
c:\WINDOWS\system32\sphnhmoznriqkl.dll (Trojan.Agent) -> Delete on reboot.

GMER 1.0.15.15570 - GMER - Rootkit Detector and Remover
Rootkit scan 2011-04-14 01:00:02
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-17 WDC_WD1001FALS-40U9B0 rev.20.04F20
Running: y3c3dcoj.exe; Driver: C:\DOCUME~1\Bob\LOCALS~1\Temp\uxtdypod.sys

.text ...

---- System - GMER 1.0.15 ----

SSDT 8995D0A0 ZwOpenThread
SSDT 8995D170 ZwOpenProcess
SSDT 89960F80 ZwSetInformationProcess
SSDT 899632A0 ZwCreateMutant
SSDT 8996D650 ZwCreateThread
SSDT 899AF3C0 ZwDuplicateObject
SSDT 899E1A28 ZwMapViewOfSection
SSDT 899E1E60 ZwFreeVirtualMemory
SSDT 899E1F30 ZwWriteVirtualMemory
SSDT 899E1FC0 ZwAllocateVirtualMemory
SSDT 89A13050 ZwOpenSection
SSDT 89A14050 ZwImpersonateThread
SSDT 89A2B050 ZwImpersonateAnonymousToken
SSDT 89A31050 ZwSuspendProcess
SSDT 89A38050 ZwOpenEvent
SSDT 89A4A050 ZwSetSystemInformation
SSDT 89A54050 ZwResumeThread
SSDT 89A63050 ZwUnmapViewOfSection
SSDT 89A66050 ZwOpenProcessToken
SSDT 89A67050 ZwSetContextThread
SSDT 89A6D050 ZwDebugActiveProcess
SSDT 89A81050 ZwAssignProcessToJobObject
SSDT 89A85050 ZwAlertThread
SSDT 89A86050 ZwTerminateThread
SSDT 89A8FBC8 ZwCreateSymbolicLinkObject
SSDT 89A8FC98 ZwProtectVirtualMemory
SSDT 8A116358 ZwSuspendThread
SSDT 8A13A8A8 ZwTerminateProcess
SSDT 8A27A870 ZwAlertResumeThread
SSDT 8A2DC1A0 ZwLoadDriver
SSDT 8AE816A0 ZwConnectPort

INT 0x62 ? 8AF16BF8
INT 0x63 ? 8AF86BF8
INT 0x73 ? 8AF16BF8
INT 0x73 ? 8AF16BF8
INT 0x73 ? 8AF16BF8
INT 0x84 ? 8AF86BF8
INT 0xA4 ? 8AF86BF8
INT 0xB4 ? 8AF86BF8

SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwCreateKey [0xB0935130]
SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwDeleteKey [0xB09353B0]
SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwDeleteValueKey [0xB0935910]
SSDT \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) ZwSetValueKey [0xB0935B60]

---- Devices - GMER 1.0.15 ----

Device \Driver\arlh2i54 \Device\Scsi\arlh2i541 8AD59500
Device \Driver\arlh2i54 \Device\Scsi\arlh2i541Port3Path0Target0Lun0 8AD59500
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 [B9E09B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c [B9E09B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 [B9E09B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort0 [B9E09B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort1 [B9E09B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort2 [B9E09B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\Cdrom \Device\CdRom0 8AD5D500
Device \Driver\Cdrom \Device\CdRom1 8AD5D500
Device \Driver\Cdrom \Device\CdRom2 8AD5D500
Device \Driver\dmio \Device\DmControl\DmConfig 8AF871F8
Device \Driver\dmio \Device\DmControl\DmInfo 8AF871F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 8AF871F8
Device \Driver\dmio \Device\DmControl\DmPnP 8AF871F8
Device \Driver\Ftdisk \Device\FtControl 8AF171F8
Device \Driver\Ftdisk \Device\HarddiskVolume1 8AF171F8
Device \Driver\NetBT \Device\NetbiosSmb 8A170500
Device \Driver\NetBT \Device\NetBT_Tcpip_{A845BCB5-4312-42BD-BB0B-4785311EA475} 8A170500
Device \Driver\NetBT \Device\NetBt_Wins_Export 8A170500
Device \Driver\PCI_PNP7136 \Device\0000005e spsm.sys
Device \Driver\sptd \Device\30295886 spsm.sys

AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

Device \Driver\usbehci \Device\USBFDO-4 8ADC31F8
Device \Driver\usbehci \Device\USBPDO-4 8ADC31F8
Device \Driver\USBSTOR \Device\0000008b 8A2A0500
Device \Driver\USBSTOR \Device\00000092 8A2A0500
Device \Driver\USBSTOR \Device\00000093 8A2A0500
Device \Driver\USBSTOR \Device\00000094 8A2A0500
Device \Driver\USBSTOR \Device\00000095 8A2A0500
Device \Driver\USBSTOR \Device\00000096 8A2A0500
Device \Driver\USBSTOR \Device\0000009a 8A2A0500
Device \Driver\usbuhci \Device\USBFDO-0 8ADC2500
Device \Driver\usbuhci \Device\USBFDO-1 8ADC2500
Device \Driver\usbuhci \Device\USBFDO-2 8ADC2500
Device \Driver\usbuhci \Device\USBFDO-3 8ADC2500
Device \Driver\usbuhci \Device\USBPDO-0 8ADC2500
Device \Driver\usbuhci \Device\USBPDO-1 8ADC2500
Device \Driver\usbuhci \Device\USBPDO-2 8ADC2500
Device \Driver\usbuhci \Device\USBPDO-3 8ADC2500
Device \FileSystem\Cdfs \Cdfs 89929500
Device \FileSystem\Cdfs \Cdfs DLAIFS_M.SYS (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 8A145500
Device \FileSystem\MRxSmb \Device\LanmanRedirector 8A145500
Device \FileSystem\Ntfs \Ntfs 8AF851F8

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!HalGetInterruptVector] 74AAB000
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!HalTranslateBusAddress] 8986C636
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!KeGetCurrentIrql] 9E880000
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!KeStallExecutionProcessor] 1A00001C
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!KfAcquireSpinLock] 18C4830E
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!KfLowerIrql] 0E798366
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!KfRaiseIrql] 00001CB1
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!KfReleaseSpinLock] 1C8B86C6
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!READ_PORT_BUFFER_USHORT] C6020000
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!READ_PORT_UCHAR] 1C959E88
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!READ_PORT_USHORT] 001C9686
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT] 86C60200
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[HAL.dll!WRITE_PORT_UCHAR] 00001CB2
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[WMILIB.SYS!WmiCompleteRequest] 001CB99E
IAT \SystemRoot\System32\Drivers\arlh2i54.SYS[WMILIB.SYS!WmiSystemControl] 8800001C

---- Kernel code sections - GMER 1.0.15 ----

.text arlh2i54.SYS B8F95386 35 Bytes [00, 00, 00, 00, 00, 00, 20, ...]
.text arlh2i54.SYS B8F953AA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text arlh2i54.SYS B8F953C4 3 Bytes [00, 80, 02]
.text arlh2i54.SYS B8F953C9 1 Byte [30]
.text arlh2i54.SYS B8F953C9 11 Bytes [30, 00, 00, 00, 5E, 02, 00, ...] {XOR [EAX], AL; ADD [EAX], AL; POP ESI; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL}

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [B9EB613E] spsm.sys
IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [B9EB6042] spsm.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [B9EB60C0] spsm.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [B9EB6800] spsm.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [B9EB66D6] spsm.sys

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@hdf12 0xEC 0xBC 0x4F 0x0B ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xE7 0xDB 0x8A 0x71 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919E A49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xD4 0x1E 0xCA 0xD6 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x41 0x99 0x65 0x3C ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xE7 0xDB 0x8A 0x71 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14 919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xD4 0x1E 0xCA 0xD6 ...

---- Kernel code sections - GMER 1.0.15 ----

? spsm.sys The system cannot find the file specified. !

SSDT spsm.sys ZwEnumerateKey [0xB9ECDDA4]
SSDT spsm.sys ZwEnumerateValueKey [0xB9ECE132]
SSDT spsm.sys ZwOpenKey [0xB9EB50C0]
SSDT spsm.sys ZwQueryKey [0xB9ECE20A]
SSDT spsm.sys ZwQueryValueKey [0xB9ECE08A]

---- Kernel code sections - GMER 1.0.15 ----

? SYMEFA.SYS The system cannot find the file specified. !
.text USBPORT.SYS!DllUnload B91648AC 5 Bytes JMP 8AF861D8
? vocdmu.sys The system cannot find the file specified. !

---- EOF - GMER 1.0.15 ----

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x00000fbc

Kernel Drivers (total 172):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E5000 \WINDOWS\system32\hal.dll
0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
0xBA0A8000 vocdmu.sys
0xB9EB4000 spsm.sys
0xBA5AA000 \WINDOWS\System32\Drivers\WMILIB.SYS
0xB9E9C000 \WINDOWS\System32\Drivers\SCSIPORT.SYS
0xB9E6E000 ACPI.sys
0xB9E5D000 pci.sys
0xBA0B8000 ohci1394.sys
0xBA0C8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xBA0D8000 isapnp.sys
0xBA670000 pciide.sys
0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xBA0E8000 MountMgr.sys
0xB9E3E000 ftdisk.sys
0xBA5AC000 dmload.sys
0xB9E18000 dmio.sys
0xBA330000 PartMgr.sys
0xBA0F8000 VolSnap.sys
0xB9E00000 atapi.sys
0xBA338000 cercsr6.sys
0xBA108000 disk.sys
0xBA118000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xB9DE0000 fltmgr.sys
0xB9DCE000 sr.sys
0xB9D7F000 SYMEFA.SYS
0xB9D69000 DRVMCDB.SYS
0xBA340000 PxHelp20.sys
0xB9D52000 KSecDD.sys
0xB9CC5000 Ntfs.sys
0xB9C98000 NDIS.sys
0xB9C7E000 Mup.sys
0xBA288000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xB9184000 \SystemRoot\system32\DRIVERS\ati2mtag.sys
0xB9170000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xBA3E8000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xB914C000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xBA3F0000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xB90EF000 \SystemRoot\system32\DRIVERS\Angel2.sys
0xB90CC000 \SystemRoot\system32\DRIVERS\ks.sys
0xBA5C4000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xB904C000 \SystemRoot\system32\drivers\ctaud2k.sys
0xB9028000 \SystemRoot\system32\drivers\portcls.sys
0xBA298000 \SystemRoot\system32\drivers\drmk.sys
0xB8FF4000 \SystemRoot\system32\drivers\ctoss2k.sys
0xBA410000 \SystemRoot\system32\drivers\ctprxy2k.sys
0xBA590000 \SystemRoot\system32\DRIVERS\gameenum.sys
0xBA2A8000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xB8FCE000 \SystemRoot\system32\DRIVERS\e100b325.sys
0xBA5CA000 \SystemRoot\System32\Drivers\DLACDBHM.SYS
0xBA2B8000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xBA2C8000 \SystemRoot\system32\DRIVERS\redbook.sys
0xBA430000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
0xBA2D8000 \SystemRoot\system32\DRIVERS\imapi.sys
0xB8F95000 \SystemRoot\System32\Drivers\arlh2i54.SYS
0xBA6E4000 \SystemRoot\system32\DRIVERS\audstub.sys
0xBA2E8000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xB9C41000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB8F7E000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xBA2F8000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xBA308000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xBA4B0000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xB8F6D000 \SystemRoot\system32\DRIVERS\psched.sys
0xBA318000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xBA358000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xBA380000 \SystemRoot\system32\DRIVERS\raspti.sys
0xB8F3D000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xBA138000 \SystemRoot\system32\DRIVERS\termdd.sys
0xBA390000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xBA398000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xBA3A0000 \SystemRoot\system32\DRIVERS\SymIM.sys
0xBA5D4000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB8EDF000 \SystemRoot\system32\DRIVERS\update.sys
0xBA558000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xBA148000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xBA178000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xB0E6C000 \SystemRoot\system32\drivers\hap16v2k.sys
0xB0D62000 \SystemRoot\system32\drivers\ha10kx2k.sys
0xB0D33000 \SystemRoot\system32\drivers\emupia2k.sys
0xB0D0A000 \SystemRoot\system32\drivers\ctsfm2k.sys
0xB0C6E000 \SystemRoot\system32\drivers\ctac32k.sys
0xB0C53000 \SystemRoot\System32\drivers\COMMONFX.SYS
0xB0BC5000 \SystemRoot\System32\drivers\CTSBLFX.SYS
0xB0B3A000 \SystemRoot\System32\drivers\CTAUDFX.SYS
0xB0A97000 \SystemRoot\System32\Drivers\N360\0308000.029\SRTS P.SYS
0xB091F000 \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
0xBA450000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xBA198000 \SystemRoot\system32\DRIVERS\IrBus.sys
0xB9C45000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xBA1A8000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xBA460000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xBA470000 \SystemRoot\system32\DRIVERS\hidir.sys
0xBA550000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xB8ED7000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xBA1B8000 \SystemRoot\system32\drivers\N360\0308000.029\SRTS PX.SYS
0xBA5F0000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xBA799000 \SystemRoot\System32\Drivers\Null.SYS
0xBA5F4000 \SystemRoot\System32\Drivers\Beep.SYS
0xBA4A0000 \SystemRoot\System32\Drivers\DLARTL_N.SYS
0xBA350000 \SystemRoot\System32\drivers\vga.sys
0xBA604000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xBA608000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xBA388000 \SystemRoot\System32\Drivers\Msfs.SYS
0xBA3B8000 \SystemRoot\System32\Drivers\Npfs.SYS
0xB0B36000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xB08D8000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xB087F000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xB0823000 \SystemRoot\System32\Drivers\N360\0308000.029\SYMT DI.SYS
0xB07FD000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xB9371000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xBA3D8000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xB9361000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xB0B1A000 \SystemRoot\system32\DRIVERS\usbscan.sys
0xBA400000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xBA418000 \SystemRoot\system32\DRIVERS\HPZius12.sys
0xBA420000 \SystemRoot\System32\Drivers\N360\0308000.029\SYMN DIS.SYS
0xB0798000 \SystemRoot\System32\Drivers\N360\0308000.029\SYMF W.SYS
0xB9351000 \SystemRoot\system32\DRIVERS\HPZid412.sys
0xB9341000 \SystemRoot\system32\drivers\usbaudio.sys
0xBA440000 \SystemRoot\System32\Drivers\N360\0308000.029\SYMI DS.SYS
0xB0B16000 \SystemRoot\system32\DRIVERS\HPZipr12.sys
0xB06A0000 \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20110412. 001\IDSxpx86.sys
0xB0678000 \SystemRoot\system32\DRIVERS\netbt.sys
0xB0656000 \SystemRoot\System32\drivers\afd.sys
0xB9331000 \SystemRoot\system32\DRIVERS\netbios.sys
0xB062B000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xB0B0A000 \SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS
0xB05BB000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xB9311000 \SystemRoot\System32\Drivers\Fips.SYS
0xB055D000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
0xB0540000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
0xB04C5000 \SystemRoot\System32\Drivers\N360\0308000.029\ccHP x86.sys
0xB0483000 \SystemRoot\System32\Drivers\N360\0308000.029\BHDr vx86.sys
0xBA1D8000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xB0443000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xBA620000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xB9C39000 \SystemRoot\System32\drivers\Dxapi.sys
0xBA3C8000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xBA7FE000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF012000 \SystemRoot\System32\ati2dvag.dll
0xBF054000 \SystemRoot\System32\ati2cqag.dll
0xBF093000 \SystemRoot\System32\atikvmag.dll
0xBF0C9000 \SystemRoot\System32\ati3duag.dll
0xBF34D000 \SystemRoot\System32\ativvaxx.dll
0xBF420000 \SystemRoot\System32\ATMFD.DLL
0xBA208000 \SystemRoot\System32\Drivers\DRVNDDM.SYS
0xBA75C000 \SystemRoot\System32\DLA\DLADResN.SYS
0xAE2ED000 \SystemRoot\System32\DLA\DLAIFS_M.SYS
0xB047B000 \SystemRoot\System32\DLA\DLAOPIOM.SYS
0xBA662000 \SystemRoot\System32\DLA\DLAPoolM.SYS
0xBA3A8000 \SystemRoot\System32\DLA\DLABOIOM.SYS
0xAE2D5000 \SystemRoot\System32\DLA\DLAUDFAM.SYS
0xAE2BF000 \SystemRoot\System32\DLA\DLAUDF_M.SYS
0xAE307000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xAE062000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xADE69000 \SystemRoot\System32\Drivers\HTTP.sys
0xBA606000 \SystemRoot\System32\Drivers\MASPINT.SYS
0xADCFE000 \SystemRoot\system32\DRIVERS\srv.sys
0xADB2F000 \??\C:\WINDOWS\system32\drivers\PfModNT.sys
0xADB1A000 \SystemRoot\system32\drivers\wdmaud.sys
0xADCB6000 \SystemRoot\system32\drivers\sysaudio.sys
0xBA668000 \SystemRoot\system32\drivers\MSPQM.sys
0xAC8D9000 \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2011041 3.018\NAVEX15.SYS
0xAC8C5000 \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2011041 3.018\NAVENG.SYS
0xAC8AC000 \??\C:\DOCUME~1\Bob\LOCALS~1\Temp\uxtdypod.sys
0xAC881000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll
0x10000000 \Program Files\DAEMON Tools Lite\Engine.dll

Processes (total 53):
0 System Idle Process
4 System
944 C:\WINDOWS\system32\smss.exe
1000 csrss.exe
1044 C:\WINDOWS\system32\winlogon.exe
1092 C:\WINDOWS\system32\services.exe
1104 C:\WINDOWS\system32\lsass.exe
1324 C:\WINDOWS\system32\ati2evxx.exe
1344 C:\WINDOWS\system32\svchost.exe
1436 svchost.exe
1584 C:\WINDOWS\system32\svchost.exe
1692 svchost.exe
1808 svchost.exe
2012 C:\WINDOWS\system32\spoolsv.exe
128 C:\Program Files\Creative\Shared Files\CTAudSvc.exe
704 svchost.exe
736 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
772 C:\Program Files\Bonjour\mDNSResponder.exe
800 C:\WINDOWS\system32\CTSVCCDA.EXE
100 C:\WINDOWS\ehome\ehrecvr.exe
1284 C:\WINDOWS\ehome\ehSched.exe
1664 C:\Program Files\Java\jre6\bin\jqs.exe
1772 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
1948 C:\Program Files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe
436 C:\WINDOWS\system32\HPZipm12.exe
476 svchost.exe
588 C:\WINDOWS\system32\svchost.exe
628 C:\WINDOWS\system32\StkASv2K.exe
1732 C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
1932 mcrdsvc.exe
3424 C:\WINDOWS\system32\dllhost.exe
3936 alg.exe
2660 C:\Program Files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe
3676 C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
3684 C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.exe
3708 C:\WINDOWS\system32\DLA\DLACTRLW.EXE
3756 C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
1548 C:\Program Files\Dell\Media Experience\DMXLauncher.exe
3808 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
3816 C:\WINDOWS\system32\CtHelper.exe
1156 C:\WINDOWS\system32\svchost.exe
240 C:\Program Files\Common Files\Java\Java Update\jusched.exe
3924 C:\WINDOWS\system32\ctfmon.exe
2396 C:\Program Files\Creative\MediaSource5\CTDetctu.exe
1508 C:\WINDOWS\V0410Mon.exe
3720 C:\Program Files\HP\HP Software Update\hpwuschd2.exe
232 C:\Program Files\iTunes\iTunesHelper.exe
716 C:\Program Files\iPod\bin\iPodService.exe
3460 C:\WINDOWS\explorer.exe
2504 C:\Program Files\Internet Explorer\iexplore.exe
2976 C:\Program Files\Internet Explorer\iexplore.exe
3508 C:\Program Files\Internet Explorer\iexplore.exe
2204 C:\Documents and Settings\Bob\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

PhysicalDrive0 Model Number: WDCWD1001FALS-40U9B0, Rev: 20.04F20

Size Device Name MBR Status
--------------------------------------------
931 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A

Done!

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Bob at 23:23:12.38 on Thu 04/14/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.2149 [GMT -4:00]
.
AV: Norton Security Suite *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Security Suite *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe
C:\WINDOWS\system32\HPZipm12.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\StkASv2K.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource5\CTDetctu.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe
C:\WINDOWS\V0410Mon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Bob\Desktop\dds.scr
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: H - No File
uURLSearchHooks: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\tbBitT.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton security suite\engine\3.8.0.41\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton security suite\engine\3.8.0.41\IPSBHO.DLL
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\tbBitT.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: MSN Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.1203.0\msneshellx.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: MSN Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.1203.0\msneshellx.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton security suite\engine\3.8.0.41\coIEPlg.dll
TB: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\tbBitT.dll
TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Creative Detector U] "c:\program files\creative\mediasource5\CTDetctu.exe" /R
mRun: [CTSysVol] c:\program files\creative\sbaudigy2zs\surround mixer\CTSysVol.exe /r
mRun: [CTDVDDET] "c:\program files\creative\sbaudigy2zs\dvdaudio\CTDVDDET.EXE"
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [DMXLauncher] c:\program files\dell\media experience\DMXLauncher.exe
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [CTHelper] CTHELPER.EXE
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} - hxxp://srtest-cdn.systemrequirementslab.com.s3.amazonaws.com/bin/sysreqlabdetect.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1263523646468
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15111/CTPID.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - c:\program files\norton security suite\engine\3.8.0.41\CoIEPlg.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
.
============= SERVICES / DRIVERS ===============
.
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\030800 0.029\SymEFA.sys [2010-2-25 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\n360\0308000.02 9\BHDrvx86.sys [2010-2-25 259632]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\n360\0308000. 029\cchpx86.sys [2010-2-25 482432]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20110412. 001\IDSXpx86.sys [2011-4-12 341944]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 N360;Norton Security Suite;c:\program files\norton security suite\engine\3.8.0.41\ccSvcHst.exe [2010-2-25 117640]
R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\driv ers\COMMONFX.sys [2009-6-23 99352]
R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\driver s\CTAUDFX.sys [2009-6-23 555032]
R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\driver s\CTSBLFX.sys [2009-6-23 566296]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-6-8 102448]
R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\2011041 4.025\NAVENG.SYS [2011-4-14 86136]
R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\2011041 4.025\NAVEX15.SYS [2011-4-14 1393144]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-7-19 136176]
S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMM ONFX.sys [2009-6-23 99352]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2010-2-16 79360]
S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDF X.sys [2009-6-23 555032]
S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\driv ers\CTERFXFX.sys [2009-6-23 100888]
S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTER FXFX.sys [2009-6-23 100888]
S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLF X.sys [2009-6-23 566296]
S3 V0410Afx;Creative Camera VF0410 Audio Effects Driver;c:\windows\system32\drivers\V0410AFX.sys [2010-2-16 142656]
S3 V0410Aud;Creative Camera VF0410 Noise Cancellation APO;c:\windows\system32\drivers\V0410Aud.sys [2010-2-16 94720]
S3 V0410Dev;Creative Camera VF0410 Driver;c:\windows\system32\drivers\V0410Dev.sys [2010-2-16 244704]
S3 V0410Vfx;Creative Camera VF0410 Video VFX Driver;c:\windows\system32\drivers\V0410Vfx.sys [2010-2-16 7168]
.
=============== Created Last 30 ================
.
2011-04-14 00:27:04 -------- d-----w- c:\docume~1\bob\applic~1\Malwarebytes
2011-04-14 00:26:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-14 00:26:54 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-04-14 00:26:51 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-14 00:26:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-13 02:48:11 -------- d-----w- c:\program files\Sierra
2011-04-13 02:42:14 54457 ----a-w- c:\windows\system32\rvidiopclmrz.exe
2011-04-10 04:39:10 -------- d-----w- c:\docume~1\alluse~1\applic~1\Trymedia
2011-04-10 04:38:48 -------- d-----w- c:\program files\Bejeweled 3
2011-04-10 04:29:01 -------- d-----w- c:\docume~1\bob\applic~1\Rovio
2011-04-08 18:37:21 -------- d-----w- c:\program files\EA GAMES
2011-03-27 05:06:03 -------- d-----w- c:\docume~1\bob\applic~1\Dying for Daylight Shared
2011-03-27 05:06:03 -------- d-----w- c:\docume~1\bob\applic~1\Dying for Daylight
2011-03-27 05:05:13 -------- d-----w- c:\docume~1\alluse~1\applic~1\Dying for Daylight
2011-03-27 05:04:46 -------- d-----w- c:\program files\Charlaine Harris - Dying for Daylight
2011-03-19 19:45:56 -------- d-----w- c:\program files\OpenAL
2011-03-19 19:44:02 -------- d-----w- C:\Alien Arena 7_51
.
==================== Find3M ====================
.
2011-04-03 20:26:47 89680 ----a-w- c:\documents and settings\bob\MSSSerif120.fon
2011-03-19 19:45:56 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-03-19 19:45:55 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2011-03-07 05:33:50 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-04 06:37:06 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-03-03 13

11 1857920 ----a-w- c:\windows\system32\win32k.sys
2011-02-22 23:06:29 916480 ----a-w- c:\windows\system32\wininet.dll
2011-02-22 23:06:29 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-02-22 23:06:29 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-02-22 11:41:59 385024 ----a-w- c:\windows\system32\html.iec
2011-02-17 12:32:12 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2011-02-15 12

39 290432 ----a-w- c:\windows\system32\atmfd.dll
2011-02-08 13:33:55 978944 ----a-w- c:\windows\system32\mfc42.dll
2011-02-08 13:33:55 974848 ----a-w- c:\windows\system32\mfc42u.dll
2011-02-04 22:48:32 456192 ----a-w- c:\windows\system32\encdec.dll
2011-02-04 22:48:30 291840 ----a-w- c:\windows\system32\sbe.dll
2011-02-03 01:40:23 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-02 23:19:39 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-02-02 07:58:35 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57:06 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44:37 439296 ----a-w- c:\windows\system32\shimgvw.dll
2010-06-02 09:22:02 89944 ----a-w- c:\program files\DSETUP.dll
2010-06-02 09:22:02 537432 ----a-w- c:\program files\DXSETUP.exe
2010-06-02 09:22:02 1801048 ----a-w- c:\program files\dsetup32.dll
.
============= FINISH: 23:24:27.52 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 1/13/2010 8:34:46 AM
System Uptime: 4/14/2011 1:08:19 AM (22 hours ago)
.
Motherboard: Dell Inc. | | 0WG261
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 932 GiB total, 693.303 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is CDROM ()
H: is Removable
I: is Removable
J: is Removable
K: is Removable
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: TI Technologies Inc.
Description: RADEON X600 256MB HyperMemory Secondary
Device ID: PCI\VEN_1002&DEV_5B72&SUBSYS_06031002&REV_00\4&160 3E009&0&0108
Manufacturer: ATI Technologies Inc.
Name: RADEON X600 256MB HyperMemory Secondary
PNP Device ID: PCI\VEN_1002&DEV_5B72&SUBSYS_06031002&REV_00\4&160 3E009&0&0108
Service: ati2mtag
.
==== System Restore Points ===================
.
RP191: 1/15/2011 3:55:54 AM - System Checkpoint
RP192: 1/16/2011 4:43:13 AM - System Checkpoint
RP193: 1/17/2011 4:43:51 AM - System Checkpoint
RP194: 1/18/2011 5:07:50 AM - System Checkpoint
RP195: 1/19/2011 5:11:30 AM - System Checkpoint
RP196: 1/19/2011 7:46:40 PM - Norton 360 Registry Clean
RP197: 1/20/2011 9:50:28 PM - System Checkpoint
RP198: 1/22/2011 1:04:50 AM - System Checkpoint
RP199: 1/23/2011 1:43:56 AM - System Checkpoint
RP200: 1/24/2011 1:55:54 AM - System Checkpoint
RP201: 1/25/2011 2:19:54 AM - System Checkpoint
RP202: 1/26/2011 2:43:52 AM - System Checkpoint
RP203: 1/27/2011 3:20:50 AM - System Checkpoint
RP204: 1/28/2011 3:43:50 AM - System Checkpoint
RP205: 1/29/2011 4:07:48 AM - System Checkpoint
RP206: 1/30/2011 4:19:47 AM - System Checkpoint
RP207: 1/31/2011 4:55:46 AM - System Checkpoint
RP208: 2/1/2011 5:19:46 AM - System Checkpoint
RP209: 2/2/2011 5:31:44 AM - System Checkpoint
RP210: 2/3/2011 5:55:43 AM - System Checkpoint
RP211: 2/4/2011 6:13:17 AM - System Checkpoint
RP212: 2/5/2011 6:31:41 AM - System Checkpoint
RP213: 2/6/2011 6:55:40 AM - System Checkpoint
RP214: 2/7/2011 7:19:38 AM - System Checkpoint
RP215: 2/8/2011 7:42:25 AM - System Checkpoint
RP216: 2/9/2011 3:00:17 AM - Software Distribution Service 3.0
RP217: 2/10/2011 3:39:08 AM - System Checkpoint
RP218: 2/11/2011 3:51:07 AM - System Checkpoint
RP219: 2/12/2011 4:27:06 AM - System Checkpoint
RP220: 2/13/2011 4:51:04 AM - System Checkpoint
RP221: 2/14/2011 5:15:04 AM - System Checkpoint
RP222: 2/15/2011 5:39:03 AM - System Checkpoint
RP223: 2/16/2011 6:38:40 AM - System Checkpoint
RP224: 2/17/2011 6:39:01 AM - System Checkpoint
RP225: 2/18/2011 7:01:45 AM - System Checkpoint
RP226: 2/19/2011 7:26:58 AM - System Checkpoint
RP227: 2/20/2011 8:10:42 AM - System Checkpoint
RP228: 2/21/2011 8:28:02 AM - System Checkpoint
RP229: 2/22/2011 8:30:42 AM - System Checkpoint
RP230: 2/23/2011 9:28:00 AM - System Checkpoint
RP231: 2/24/2011 9:50:53 AM - System Checkpoint
RP232: 2/25/2011 10:26:53 AM - System Checkpoint
RP233: 2/26/2011 10:28:40 AM - System Checkpoint
RP234: 2/27/2011 10:38:52 AM - System Checkpoint
RP235: 2/28/2011 10:47:59 AM - System Checkpoint
RP236: 3/1/2011 10:50:50 AM - System Checkpoint
RP237: 3/2/2011 11:26:52 AM - System Checkpoint
RP238: 3/3/2011 12:50:52 PM - System Checkpoint
RP239: 3/4/2011 1:02:51 PM - System Checkpoint
RP240: 3/5/2011 1:50:52 PM - System Checkpoint
RP241: 3/6/2011 3:14:48 PM - System Checkpoint
RP242: 3/7/2011 3:24:53 PM - System Checkpoint
RP243: 3/8/2011 3:00:16 AM - Software Distribution Service 3.0
RP244: 3/9/2011 3:00:19 AM - Software Distribution Service 3.0
RP245: 3/10/2011 4:42:03 AM - System Checkpoint
RP246: 3/11/2011 5:27:32 AM - System Checkpoint
RP247: 3/12/2011 10:42:00 AM - System Checkpoint
RP248: 3/13/2011 12:28:01 PM - System Checkpoint
RP249: 3/14/2011 12:55:37 PM - System Checkpoint
RP250: 3/15/2011 1:19:36 PM - System Checkpoint
RP251: 3/15/2011 8:25:14 PM - Software Distribution Service 3.0
RP252: 3/16/2011 9:33:37 PM - System Checkpoint
RP253: 3/17/2011 9:58:17 PM - System Checkpoint
RP254: 3/18/2011 10:29:57 PM - System Checkpoint
RP255: 3/19/2011 11:38:43 PM - System Checkpoint
RP256: 3/21/2011 12:50:42 AM - System Checkpoint
RP257: 3/22/2011 1:14:42 AM - System Checkpoint
RP258: 3/23/2011 2:02:42 AM - System Checkpoint
RP259: 3/24/2011 2:14:41 AM - System Checkpoint
RP260: 3/24/2011 3:00:15 AM - Software Distribution Service 3.0
RP261: 3/25/2011 3:50:37 AM - System Checkpoint
RP262: 3/26/2011 4:14:36 AM - System Checkpoint
RP263: 3/27/2011 4:38:36 AM - System Checkpoint
RP264: 3/28/2011 5:14:36 AM - System Checkpoint
RP265: 3/29/2011 5:26:35 AM - System Checkpoint
RP266: 3/30/2011 5:50:32 AM - System Checkpoint
RP267: 3/31/2011 6:26:32 AM - System Checkpoint
RP268: 4/1/2011 7:02:32 AM - System Checkpoint
RP269: 4/2/2011 7:37:13 AM - System Checkpoint
RP270: 4/3/2011 8:07:28 AM - System Checkpoint
RP271: 4/4/2011 9:02:26 AM - System Checkpoint
RP272: 4/5/2011 9:26:26 AM - System Checkpoint
RP273: 4/6/2011 10:14:26 AM - System Checkpoint
RP274: 4/7/2011 10:50:24 AM - System Checkpoint
RP275: 4/8/2011 8:26:10 AM - Norton 360 Registry Clean
RP276: 4/8/2011 8:49:39 AM - Installed Java(TM) 6 Update 24
RP277: 4/9/2011 9:20:58 AM - System Checkpoint
RP278: 4/10/2011 10:06:42 AM - System Checkpoint
RP279: 4/11/2011 11:00:31 AM - System Checkpoint
RP280: 4/12/2011 11:36:29 AM - System Checkpoint
RP281: 4/13/2011 3:02:37 AM - Software Distribution Service 3.0
RP282: 4/14/2011 3:24:50 AM - System Checkpoint
.
==== Installed Programs ======================
.
.
7-Zip 4.65
Acrobat.com
Adobe AIR
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Default Language CS3
Adobe Device Central CS3
Adobe ExtendScript Toolkit 2
Adobe Flash Player 10 ActiveX
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Illustrator CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Reader 9.4.3
Adobe Setup
Adobe Shockwave Player 11.5
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
Advanced Video FX Engine
AiO_Scan_CDA
AiOSoftwareNPI
Alien Arena 2011
American McGee's Alice(tm)
Anatomy Atlas LR2i
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ATI - Software Uninstall Utility
ATI Control Panel
ATI Display Driver
Audacity 1.2.6
Bejeweled 3
Bing Maps 3D
biohazard 4
BitTorrent
Bonjour
BufferChm
C3100
c3100_Help
CCleaner
Charlaine Harris - Dying for Daylight
Conduit Engine
Creative Audio Console
Creative Live! Cam Center
Creative Live! Cam Manager
Creative Live! Cam User's Guide
Creative Live! Cam Video IM Pro (VF0410) (1.01.01.00)
Creative MediaSource
Creative MediaSource 5
Creative Photo Manager
Creative Software AutoUpdate
Creative System Information
Creative WaveStudio 7
CSI-3 Dimensions of Murder 1.1
CustomerResearchQFolder
Defraggler
Dell CinePlayer
Dell ResourceCD
Destinations
DeviceManagementQFolder
DocProc
DocProcQFolder
Doom 3
Escape Rosecliff Island 1.00
ESPNMotion
eSupportQFolder
ExamView ActiveX Control v2
ExamView Assessment Suite
EZ Vinyl/Tape Converter 1.5.2.0 by MixMeister
Fallout
Far Cry
Fax_CDA
FinePixViewer Ver.4.2
FUJIFILM USB Driver
Gardenscapes 1.00
gBurner
GemMaster Mystic
Google Chrome
Google Earth
Google Update Helper
Half-Life
Half-Life: Blue Shift
Half-Life: Opposing Force
Halo CE Cracked Setup
Hidden in Time - Mirror Mirror 1.00
Hitman 2 Silent Assassin
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB954708)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Customer Participation Program 7.0
HP Imaging Device Functions 7.0
HP Photosmart Essential
HP Photosmart, Officejet and Deskjet 7.0.A
HP Product Assistant
HP Product Detection
HP Solution Center 7.0
HP Update
HPPhotoSmartExpress
HPProductAssistant
Human 3D LR2i
ImageMixer VCD2 for FinePix
InstantShareDevicesMFC
Intel(R) PRO Network Connections Drivers
iTunes
Java Auto Updater
Java(TM) 6 Update 24
Junk Mail filter update
Luxor 4 Quest For The Afterlife 1.00
Machinarium
Malwarebytes' Anti-Malware
MarketResearch
McDougal Littell EasyPlanner
Medical Dictionary M7
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Live Add-in 1.3
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
MicroStaff WINASPI
MobileMe Control Panel
MSN Toolbar
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NewCopy_CDA
NOOK for PC
Norton Security Suite
NVIDIA Drivers
OCR Software by I.R.I.S 7.0
OpenAL
Otto
PanoStandAlone
PDF Settings
PowerDVD
ProductContextNPI
Quake 4(TM)
Quake III Arena
QuickTime
RAW FILE CONVERTER LE
Readme
Roxio DLA
Roxio MyDVD LE
Roxio RecordNow Audio
Roxio RecordNow Copy
Roxio RecordNow Data
Safari
Scan
ScannerCopy
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB2466156)
Security Update for 2007 Microsoft Office System (KB2509488)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2464583)
Security Update for Microsoft Office Groove 2007 (KB2494047)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB2464594)
Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
Security Update for Microsoft Office Publisher 2007 (KB2284697)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Encoder (KB2447961)
Security Update for Windows Media Encoder (KB954156)
Security Update for Windows Media Encoder (KB979332)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB976325)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Segoe UI
Serif PhotoPlus 9.0
Serif PhotoPlus Association File Formats
Skype Toolbars
Skype™ 4.2
SolutionCenter
Sonic Encoders
Sonic Update Manager
Sound Blaster Audigy 2 ZS
Speccy
Status
System Requirements Lab
Tahiti Hidden Pearl 1.00
TmNationsForever Update 2010-03-15
Toolbox
TrayApp
Ulead VideoStudio SE DVD
Unload
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office Outlook 2007 (KB2509470)
Update for Outlook 2007 Junk Email Filter (KB2522999)
Update for Windows Internet Explorer 8 (KB975364)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
USB2.0 Capture Device
VoiceOver Kit
WebFldrs XP
WebReg
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
Windows Media Encoder 9 Series
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB925766
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
.
==== Event Viewer Messages From Past Week ========
.
4/13/2011 8:11:52 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:51 PM, error: Service Control Manager [7034] - The Ulead Burning Helper service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:51 PM, error: Service Control Manager [7034] - The Syntek STK1160 Service service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:51 PM, error: Service Control Manager [7034] - The Pml Driver HPZ12 service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:51 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:50 PM, error: Service Control Manager [7034] - The Creative Service for CDROM Access service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:50 PM, error: Service Control Manager [7034] - The Creative Audio Service service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:50 PM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:50 PM, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s).
4/13/2011 8:11:50 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/13/2011 7:36:43 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: Insufficient system resources exist to complete the requested service. .
4/13/2011 7:36:43 PM, error: SideBySide [59] - Generate Activation Context failed for C:\WINDOWS\WindowsShell.manifest. Reference error message: The operation completed successfully. .
.
==== End Of File ===========================

Thank you again for your help.

**broni** · 15-04-2011

Please, don't create new topic to post required logs.
Always continue in very same topic.
This time, I merged both topics.

================================================== ====================

We'll run couple more checks to make sure nothing is hiding there.

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Please, never rename Combofix unless instructed.
Close any open browsers.
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
- Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
- Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
NOTE1. If Combofix asks you to install Recovery Console, please allow it.
NOTE 2. If Combofix asks you to update the program, always do so.
- Close any open browsers.
- WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
- Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
- If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt"

**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG users: ComboFix will not run until AVG is uninstalled as a protective measure against the anti-virus. This is because AVG "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first.
Use AppRemover to uninstall it: Uninstall & Remove McAfee, Symantec, Norton, AVG, Avast & More Antivirus and Security Applications and Programs
We can reinstall it when we're done with CF.
**Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.

Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try one of the following:

1. Run Combofix from Safe Mode.

2. Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.

Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

There are 4 different versions. If one of them won't run then download and try to run the other one.

Vista and Win7 users need to right click Rkill and choose Run as Administrator

You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

Rkill.com
Rkill.scr
Rkill.exe

Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

If normal mode still doesn't work, run BOTH tools from safe mode.

In case #2, please post BOTH logs, rKill and Combofix.

DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!

**GTO67** · 15-04-2011

ComboFix 11-04-14.03 - Bob 04/15/2011 16

00.3.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.2517 [GMT -4:00]
Running from: c:\documents and settings\Bob\Desktop\ComboFix.exe
AV: Norton Security Suite *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Security Suite *Disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\1.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\a.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\b.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\c.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\d.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\e.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\f.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\g.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\h.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\i.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\J.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\k.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\l.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\m.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\mru.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\n.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\o.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\p.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\q.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\r.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\s.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\t.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\u.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\v.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\w.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\x.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\y.xml
c:\documents and settings\Berni.MULLEN\Application Data\PriceGong\Data\z.xml
c:\documents and settings\Bob\Application Data\PriceGong
c:\documents and settings\Bob\Application Data\PriceGong\Data\1.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\a.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\b.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\c.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\d.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\e.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\f.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\g.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\h.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\i.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\J.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\k.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\l.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\m.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\mru.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\n.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\o.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\p.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\q.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\r.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\s.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\t.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\u.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\v.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\w.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\x.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\y.xml
c:\documents and settings\Bob\Application Data\PriceGong\Data\z.xml
.
.
((((((((((((((((((((((((( Files Created from 2011-03-15 to 2011-04-15 )))))))))))))))))))))))))))))))
.
.
2011-04-14 00:27 . 2011-04-14 00:27 -------- d-----w- c:\documents and settings\Bob\Application Data\Malwarebytes
2011-04-14 00:26 . 2011-04-14 00:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-04-14 00:26 . 2010-12-20 22:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-14 00:26 . 2010-12-20 22:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-14 00:26 . 2011-04-14 00:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-13 02:48 . 2011-04-13 02:48 -------- d-----w- c:\program files\Sierra
2011-04-13 02:42 . 2011-04-13 02:42 54457 ----a-w- c:\windows\system32\rvidiopclmrz.exe
2011-04-10 04:39 . 2011-04-10 04:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Trymedia
2011-04-10 04:38 . 2011-04-10 04:39 -------- d-----w- c:\program files\Bejeweled 3
2011-04-10 04:29 . 2011-04-10 04:29 -------- d-----w- c:\documents and settings\Bob\Application Data\Rovio
2011-04-08 18:37 . 2011-04-08 18:37 -------- d-----w- c:\program files\EA GAMES
2011-04-08 12:53 . 2011-04-08 12:53 -------- d-----w- c:\program files\Common Files\Java
2011-03-27 05:06 . 2011-03-30 02:28 -------- d-----w- c:\documents and settings\Bob\Application Data\Dying for Daylight
2011-03-27 05:06 . 2011-03-27 05:06 -------- d-----w- c:\documents and settings\Bob\Application Data\Dying for Daylight Shared
2011-03-27 05:05 . 2011-03-27 05:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Dying for Daylight
2011-03-27 05:04 . 2011-03-27 05:05 -------- d-----w- c:\program files\Charlaine Harris - Dying for Daylight
2011-03-19 19:45 . 2011-03-19 19:45 -------- d-----w- c:\program files\OpenAL
2011-03-19 19:44 . 2011-03-23 02:18 -------- d-----w- C:\Alien Arena 7_51
2011-03-17 00:42 . 2011-03-17 00:42 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\Identities
2011-03-17 00:03 . 2011-03-17 00:03 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\Google
2011-03-16 23:59 . 2011-03-16 23:59 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\Conduit
2011-03-16 23:58 . 2011-03-16 23:59 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\BitTorrentBar
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2011-04-03 20:26 . 2010-01-14 13:59 89680 ----a-w- c:\documents and settings\Bob\MSSSerif120.fon
2011-03-19 19:45 . 2010-02-17 02:23 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-03-19 19:45 . 2010-01-13 17:07 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2011-03-07 05:33 . 2010-01-13 13:29 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-04 06:37 . 2004-08-10 11:00 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-03-03 13:21 . 2004-08-10 11:00 1857920 ----a-w- c:\windows\system32\win32k.sys
2011-02-22 23:06 . 2006-03-04 03:33 916480 ----a-w- c:\windows\system32\wininet.dll
2011-02-22 23:06 . 2004-08-10 11:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-02-22 23:06 . 2004-08-10 11:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-02-22 11:41 . 2004-08-10 11:00 385024 ----a-w- c:\windows\system32\html.iec
2011-02-17 13:18 . 2004-08-10 11:00 455936 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-17 13:18 . 2004-08-10 11:00 357888 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-17 12:32 . 2010-01-13 15:37 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2011-02-15 12:56 . 2004-08-10 11:00 290432 ----a-w- c:\windows\system32\atmfd.dll
2011-02-08 13:33 . 2004-08-10 11:00 978944 ----a-w- c:\windows\system32\mfc42.dll
2011-02-08 13:33 . 2004-08-10 11:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2011-02-04 22:48 . 2004-08-10 11:00 456192 ----a-w- c:\windows\system32\encdec.dll
2011-02-04 22:48 . 2004-08-10 11:00 291840 ----a-w- c:\windows\system32\sbe.dll
2011-02-03 01:40 . 2010-07-10 18:46 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-02 23:19 . 2010-01-18 00:15 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-02-02 07:58 . 2010-01-13 13:26 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57 . 2010-01-13 13:26 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44 . 2004-08-10 11:00 439296 ----a-w- c:\windows\system32\shimgvw.dll
2010-06-02 09:22 . 2010-06-02 09:22 89944 ----a-w- c:\program files\DSETUP.dll
2010-06-02 09:22 . 2010-06-02 09:22 537432 ----a-w- c:\program files\DXSETUP.exe
2010-06-02 09:22 . 2010-06-02 09:22 1801048 ----a-w- c:\program files\dsetup32.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2010-07-08_05.48.24 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-01-11 03:03 . 2011-01-11 03:03 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_189d6662\vcomp.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80KOR.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80JPN.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80ITA.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80FRA.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80ESP.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80ENU.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80DEU.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80CHT.dll
+ 2011-01-11 02:32 . 2011-01-11 02:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3 b9a1e18e3b_8.0.50727.5592_x-ww_3dcd24cb\mfc80CHS.dll
+ 2006-03-23 16:44 . 2006-03-23 16:44 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80u.dll
+ 2006-03-23 16:44 . 2006-03-23 16:44 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfcm80.dll
+ 2011-01-11 08:05 . 2011-01-11 08:05 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfcm80u.dll
+ 2011-01-11 08:23 . 2011-01-11 08:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfcm80.dll
+ 2006-03-23 15:15 . 2006-03-23 15:15 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_6e85597b\ATL80.dll
+ 2011-01-11 01:21 . 2011-01-11 01:21 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_7837863c\ATL80.dll
+ 2011-04-15 20:11 . 2011-04-15 20:11 16384 c:\windows\Temp\Perflib_Perfdata_3c0.dat
+ 2011-04-15 20:09 . 2011-04-15 20:09 16384 c:\windows\Temp\Perflib_Perfdata_304.dat
+ 2010-01-13 15:43 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
- 2010-01-13 15:43 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
+ 2004-08-10 11:00 . 2010-08-27 05:57 99840 c:\windows\system32\srvsvc.dll
+ 2004-08-10 11:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
- 2010-02-19 02:16 . 2009-05-26 11:40 17272 c:\windows\system32\spmsg.dll
+ 2010-02-19 02:16 . 2010-07-05 13:15 17272 c:\windows\system32\spmsg.dll
+ 2010-11-20 13:53 . 2010-04-20 00:47 41984 c:\windows\system32\ReinstallBackups\0019\DriverFi les\usbaapl.sys
+ 2004-08-10 11:00 . 2011-04-13 07:21 71904 c:\windows\system32\perfc009.dat
- 2004-08-10 11:00 . 2010-06-24 07:03 71904 c:\windows\system32\perfc009.dat
+ 2006-03-04 03:33 . 2011-02-22 23:06 66560 c:\windows\system32\mshtmled.dll
- 2006-03-04 03:33 . 2009-03-08 09:31 66560 c:\windows\system32\mshtmled.dll
+ 2009-03-08 09:31 . 2011-02-22 23:06 55296 c:\windows\system32\msfeedsbs.dll
- 2009-03-08 09:31 . 2010-05-06 10:41 55296 c:\windows\system32\msfeedsbs.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 98304 c:\windows\system32\Macromed\Shockwave 10\SwOnce.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 86016 c:\windows\system32\Macromed\Shockwave 10\SwMenuX.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 77824 c:\windows\system32\Macromed\Shockwave 10\SwInit.exe
+ 2011-02-02 13:35 . 2011-02-02 13:35 24576 c:\windows\system32\Macromed\Shockwave 10\DynaPlayer.dll
- 2004-08-10 11:00 . 2010-05-06 10:41 25600 c:\windows\system32\jsproxy.dll
+ 2004-08-10 11:00 . 2011-02-22 23:06 25600 c:\windows\system32\jsproxy.dll
- 2010-01-13 13:29 . 2008-04-14 00:11 81920 c:\windows\system32\isign32.dll
+ 2010-01-13 13:29 . 2010-11-18 18:12 81920 c:\windows\system32\isign32.dll
+ 2004-08-10 11:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
- 2004-08-10 11:00 . 2008-04-14 00:11 80384 c:\windows\system32\iccvid.dll
+ 2011-02-19 21:38 . 2010-09-28 20:44 41984 c:\windows\system32\DRVSTORE\usbaapl_A4C70B47551C2 629A145AE032C4D1823570ADB7B\usbaapl.sys
+ 2011-02-19 21:38 . 2010-04-20 00:29 18432 c:\windows\system32\DRVSTORE\netaapl_8A27A03003759 CB01567E831096473C330131D64\netaapl.sys
+ 2010-01-17 15:35 . 2010-09-28 20:44 41984 c:\windows\system32\drivers\usbaapl.sys
+ 2004-08-10 11:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
- 2010-04-08 17:20 . 2010-04-08 17:20 91424 c:\windows\system32\dnssd.dll
+ 2010-07-27 22:44 . 2010-07-27 22:44 91424 c:\windows\system32\dnssd.dll
- 2004-08-10 11:00 . 2008-04-14 00:11 45568 c:\windows\system32\dnsrslvr.dll
+ 2004-08-10 11:00 . 2009-04-20 17:17 45568 c:\windows\system32\dnsrslvr.dll
+ 2010-01-15 03:56 . 2011-02-22 23:06 12800 c:\windows\system32\dllcache\xpshims.dll
- 2010-01-15 03:56 . 2010-05-06 10:41 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2010-12-16 03:45 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
+ 2010-08-27 05:57 . 2010-08-27 05:57 99840 c:\windows\system32\dllcache\srvsvc.dll
+ 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
+ 2010-12-16 03:47 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
- 2009-03-08 09:31 . 2009-03-08 09:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-03-08 09:31 . 2011-02-22 23:06 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2010-01-15 03:56 . 2011-02-22 23:06 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2010-01-15 03:56 . 2010-05-06 10:41 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2004-08-10 11:00 . 2011-02-22 23:06 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2009-03-08 09:33 . 2011-02-22 23:06 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-08 09:33 . 2010-05-06 10:41 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2010-01-13 13:29 . 2008-04-14 00:11 81920 c:\windows\system32\dllcache\isign32.dll
+ 2010-01-13 13:29 . 2010-11-18 18:12 81920 c:\windows\system32\dllcache\isign32.dll
+ 2009-04-20 17:17 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll
- 2009-12-14 07:08 . 2009-12-14 07:08 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2009-12-14 07:08 . 2010-12-09 14:30 33280 c:\windows\system32\dllcache\csrsrv.dll
- 2004-08-10 11:00 . 2009-12-14 07:08 33280 c:\windows\system32\csrsrv.dll
+ 2004-08-10 11:00 . 2010-12-09 14:30 33280 c:\windows\system32\csrsrv.dll
+ 2010-11-03 00:40 . 2011-04-08 12:21 87695 c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
+ 2011-03-30 13:35 . 2011-03-30 13:35 98304 c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2011-03-24 10:34 . 2011-03-24 10:34 73408 c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
+ 2011-03-24 10:34 . 2011-03-24 10:34 64512 c:\windows\system32\Adobe\Shockwave 11\gcapi_dll.dll
+ 2011-03-31 06:35 . 2011-03-31 06:35 68536 c:\windows\system32\Adobe\Director\SWDNLD.EXE
+ 2010-09-22 13:43 . 2010-09-22 13:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_wp.exe
- 2010-03-23 09:31 . 2010-03-23 09:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspn et_wp.exe
+ 2010-09-23 19:55 . 2010-09-23 19:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Security.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Security.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor sn.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor sn.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ie.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ie.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPe rfMonExt.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPe rfMonExt.dll
+ 2010-09-23 07:17 . 2010-09-23 07:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_wp.exe
- 2010-03-31 19:32 . 2010-03-31 19:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_wp.exe
+ 2010-09-23 07:17 . 2010-09-23 07:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_filter.dll
- 2010-03-31 19:32 . 2010-03-31 19:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_filter.dll
+ 2010-10-10 20:22 . 2010-10-10 20:22 24576 c:\windows\Installer\1999be.msi
+ 2010-10-10 20:21 . 2010-10-10 20:21 28160 c:\windows\Installer\19997a.msi
+ 2010-10-18 17:15 . 2010-10-18 17:15 21504 c:\windows\Installer\1190b55d.msi
+ 2010-01-15 02:45 . 2011-04-13 07:37 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-06-04 04:07 . 2011-03-08 08:01 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2010-06-04 04:07 . 2010-06-04 04:07 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-12-01 22:15 . 2010-12-01 22:15 25214 c:\windows\Installer\{6DB7AD00-F781-11DF-9EEF-001279CD8240}\UNINST_Uninstall_G_F6A848FB884248E6A 4CDCBDCF41F6A74_1.exe
+ 2010-12-01 22:15 . 2010-12-01 22:15 25214 c:\windows\Installer\{6DB7AD00-F781-11DF-9EEF-001279CD8240}\UNINST_Uninstall_G_F6A848FB884248E6A 4CDCBDCF41F6A74.exe
+ 2010-12-01 22:15 . 2010-12-01 22:15 25214 c:\windows\Installer\{6DB7AD00-F781-11DF-9EEF-001279CD8240}\ShortcutOGL_EB071909B9884F8CBF3D6115 D4ADEE5E.exe
+ 2010-12-01 22:15 . 2010-12-01 22:15 25214 c:\windows\Installer\{6DB7AD00-F781-11DF-9EEF-001279CD8240}\ShortcutDX_EB071909B9884F8CBF3D6115D 4ADEE5E.exe
+ 2010-12-01 22:15 . 2010-12-01 22:15 25214 c:\windows\Installer\{6DB7AD00-F781-11DF-9EEF-001279CD8240}\googleearth.exe1_F6A848FB884248E6A4C DCBDCF41F6A74.exe
+ 2010-12-01 22:15 . 2010-12-01 22:15 25214 c:\windows\Installer\{6DB7AD00-F781-11DF-9EEF-001279CD8240}\googleearth.exe_F6A848FB884248E6A4CD CBDCF41F6A74.exe
+ 2010-12-01 22:15 . 2010-12-01 22:15 25214 c:\windows\Installer\{6DB7AD00-F781-11DF-9EEF-001279CD8240}\ARPPRODUCTICON.exe
+ 2010-09-07 21:18 . 2010-09-07 21:18 10134 c:\windows\Installer\{36FDBE6E-6684-462B-AE98-9A39A1B200CC}\ARPPRODUCTICON.exe
+ 2010-09-23 09:47 . 2010-09-23 09:47 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\reader_sl.exe
+ 2010-09-23 08:03 . 2010-09-23 08:03 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\eula.exe
+ 2010-09-23 07:52 . 2010-09-23 07:52 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\acrotextextractor.e xe
+ 2010-09-22 23:12 . 2010-09-22 23:12 15800 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\AcroRd32Info.exe
+ 2011-04-13 07:24 . 2010-12-20 23:59 12800 c:\windows\ie8updates\KB2497640-IE8\xpshims.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 66560 c:\windows\ie8updates\KB2497640-IE8\mshtmled.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 55296 c:\windows\ie8updates\KB2497640-IE8\msfeedsbs.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 43520 c:\windows\ie8updates\KB2497640-IE8\licmgr10.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 25600 c:\windows\ie8updates\KB2497640-IE8\jsproxy.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 12800 c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 66560 c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 55296 c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 43520 c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 25600 c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 12800 c:\windows\ie8updates\KB2416400-IE8\xpshims.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 66560 c:\windows\ie8updates\KB2416400-IE8\mshtmled.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 55296 c:\windows\ie8updates\KB2416400-IE8\msfeedsbs.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 43520 c:\windows\ie8updates\KB2416400-IE8\licmgr10.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 25600 c:\windows\ie8updates\KB2416400-IE8\jsproxy.dll
+ 2010-10-15 07:04 . 2010-06-24 12:22 12800 c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
+ 2010-10-15 07:04 . 2009-03-08 09:31 66560 c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 55296 c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
+ 2010-10-15 07:04 . 2009-03-08 09:34 43008 c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 25600 c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_aba51 fe7\System.Drawing.Design.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 61440 c:\windows\assembly\NativeImages1_v1.1.4322\Custom Marshalers\1.0.5000.0__b03f5f7f11d50a3a_fe2969ca\C ustomMarshalers.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveWriter\e7011899210fffe6c581aedc2a4f56af\Wi ndowsLiveWriter.ni.exe
+ 2011-04-13 07:47 . 2011-04-13 07:47 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\83a67ede72b011c0d5933896ac124abd \WindowsLive.Writer.Api.ni.dll
+ 2011-04-13 07:38 . 2011-04-13 07:38 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationProvider\368187bcb570d202a019fc7c53b1df4c \UIAutomationProvider.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Pres#\3f621b90371e67197bd4d0b86aa6f21d \System.Windows.Presentation.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\577b049541803541e6b00e2c36c00852 \System.Web.DynamicData.Design.ni.dll
+ 2011-04-13 07:51 . 2011-04-13 07:51 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ComponentMod#\636ed65b7e5481320e3010b78a5e6cfa \System.ComponentModel.DataAnnotations.ni.dll
+ 2011-04-13 07:51 . 2011-04-13 07:51 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn.Contra#\f83b1e8dd8c90490c8d924826c8b107d \System.AddIn.Contract.ni.dll
+ 2011-04-13 07:26 . 2011-04-13 07:26 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFontCac#\2740ba673b1040f1995f13c6044da64c \PresentationFontCache.ni.exe
+ 2011-04-13 07:25 . 2011-04-13 07:25 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCFFRast#\8514e7de63d46b6f8232ef70d93a1650 \PresentationCFFRasterizer.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Vsa\108426b4dc654100c9a99bfa71f69886\Micros oft.Vsa.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualC\61ae638a8173b053fc3e6dde41df25a3\Mi crosoft.VisualC.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\8905268997c77a27c7f9c54aeba37f24 \Microsoft.Build.Framework.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Fra#\11bb8ef375848eb1c074da1afd5cecdc \Microsoft.Build.Framework.ni.dll
+ 2011-04-13 07:48 . 2011-04-13 07:48 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfs vc\6d74b9308a1517bfe959e597c3dd2427\dfsvc.ni.exe
+ 2011-04-13 07:40 . 2011-04-13 07:40 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Acc essibility\fdf7f1404f4a5c7f5a0463d8e7a442e4\Access ibility.ni.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExp ressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.Regu larExpressions.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExp ressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.Regu larExpressions.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design \2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.d ll
+ 2011-04-13 07:20 . 2011-04-13 07:20 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design \2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.d ll
- 2010-06-24 07:02 . 2010-06-24 07:02 81920 c:\windows\assembly\GAC_MSIL\System.Configuration. Install\2.0.0.0__b03f5f7f11d50a3a\System.Configura tion.Install.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 81920 c:\windows\assembly\GAC_MSIL\System.Configuration. Install\2.0.0.0__b03f5f7f11d50a3a\System.Configura tion.Install.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0 __b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0 __b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.Code DOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.V sa.Vb.CodeDOMProcessor.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.Code DOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.V sa.Vb.CodeDOMProcessor.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBas ic.Vsa.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBas ic.Vsa.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utili ties\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Uti lities.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utili ties\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Uti lities.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Frame work\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Fra mework.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Frame work\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Fra mework.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5 f7f11d50a3a\IEHost.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5 f7f11d50a3a\IEHost.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b0 3f5f7f11d50a3a\cscompmgd.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b0 3f5f7f11d50a3a\cscompmgd.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0 __b03f5f7f11d50a3a\Accessibility.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0 __b03f5f7f11d50a3a\Accessibility.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b0 3f5f7f11d50a3a\ISymWrapper.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b0 3f5f7f11d50a3a\ISymWrapper.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0. 0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0. 0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-06-09 13:01 . 2010-06-09 13:01 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0 __b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0 __b03f5f7f11d50a3a\System.Security.dll
+ 2010-08-12 07:01 . 2008-04-14 00:11 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll
+ 2011-02-09 08:01 . 2009-12-14 07:08 33280 c:\windows\$NtUninstallKB2476687$\csrsrv.dll
+ 2010-12-16 08:03 . 2002-12-12 00:38 49152 c:\windows\$NtUninstallKB2447961_WM9L$\wmencagt.ex e
+ 2010-12-16 08:05 . 2010-06-21 14:46 46080 c:\windows\$NtUninstallKB2443685$\tzchange.exe
+ 2010-12-16 08:05 . 2010-11-05 05:57 16896 c:\windows\$NtUninstallKB2443685$\spuninst\tzchang e.dll
+ 2010-12-16 08:06 . 2008-04-14 00:11 81920 c:\windows\$NtUninstallKB2443105$\isign32.dll
+ 2010-12-16 08:05 . 2008-04-13 18:57 40576 c:\windows\$NtUninstallKB2440591$\ndproxy.sys
+ 2010-12-16 08:00 . 2008-04-14 00:12 46080 c:\windows\$NtUninstallKB2423089$\wab.exe
+ 2010-09-16 01:40 . 2008-04-14 00:12 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe
+ 2010-10-15 07:07 . 2008-04-14 00:12 96768 c:\windows\$NtUninstallKB2345886$\srvsvc.dll
+ 2010-09-28 21:30 . 2010-04-21 13:28 46080 c:\windows\$NtUninstallKB2158563$\tzchange.exe
+ 2010-09-28 21:30 . 2010-06-23 00:54 16896 c:\windows\$NtUninstallKB2158563$\spuninst\tzchang e.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB982802\spmsg.dll
+ 2010-08-12 07:01 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll
+ 2010-08-12 07:01 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB982665\spmsg.dll
+ 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB982214\spmsg.dll
+ 2010-10-15 07:06 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982132\update\spcustom.dll
+ 2010-10-15 07:06 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB982132\spmsg.dll
+ 2010-08-12 07:02 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll
+ 2010-08-12 07:02 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981997\spmsg.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB981957\update\spcustom.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB981957\spmsg.dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll
+ 2010-08-11 17:50 . 2010-06-18 06:28 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB981852\spmsg.dll
+ 2010-09-16 01:39 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
+ 2010-09-16 01:39 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981322\spmsg.dll
+ 2010-08-12 07:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll
+ 2010-08-12 07:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980436\spmsg.dll
+ 2010-10-15 07:05 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979687\update\spcustom.dll
+ 2010-10-15 07:05 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB979687\spmsg.dll
+ 2011-03-16 00:25 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971029\update\spcustom.dll
+ 2011-03-16 00:25 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971029\spmsg.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2485376\update\spcustom.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2485376\spmsg.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2483185\update\spcustom.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2483185\spmsg.dll
+ 2011-02-09 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2482017-IE8\update\spcustom.dll
+ 2011-02-09 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2482017-IE8\spmsg.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 12800 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\xpshims.dll
+ 2011-02-09 04:07 . 2010-12-20 23:58 66560 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtmled.dll
+ 2011-02-09 04:07 . 2010-12-20 23:58 55296 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeedsbs.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 43520 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\licmgr10.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 25600 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\jsproxy.dll
+ 2011-03-09 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2481109\update\spcustom.dll
+ 2011-03-09 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2481109\spmsg.dll
+ 2011-02-02 07:57 . 2011-02-02 07:57 53248 c:\windows\$hf_mig$\KB2481109\SP3QFE\tsgqec.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2479628\update\spcustom.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2479628\spmsg.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2478971\update\spcustom.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2478971\spmsg.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2478960\update\spcustom.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2478960\spmsg.dll
+ 2011-02-09 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2476687\update\spcustom.dll
+ 2011-02-09 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2476687\spmsg.dll
+ 2010-12-09 14:29 . 2010-12-09 14:29 33280 c:\windows\$hf_mig$\KB2476687\SP3QFE\csrsrv.dll
+ 2010-12-16 08:05 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2467659\update\spcustom.dll
+ 2010-12-16 08:05 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2467659\spmsg.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2443105\update\spcustom.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2443105\spmsg.dll
+ 2010-11-18 18:12 . 2010-11-18 18:12 81920 c:\windows\$hf_mig$\KB2443105\SP3QFE\isign32.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2440591\update\spcustom.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2440591\spmsg.dll
+ 2010-12-16 03:47 . 2010-11-03 05:55 40960 c:\windows\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys
+ 2010-12-16 08:05 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2436673\update\spcustom.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2436673\spmsg.dll
+ 2010-12-16 08:00 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2423089\update\spcustom.dll
+ 2010-12-16 08:00 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2423089\spmsg.dll
+ 2010-12-16 03:45 . 2010-10-11 14:55 45568 c:\windows\$hf_mig$\KB2423089\SP3QFE\wab.exe
+ 2011-01-12 08:00 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2419632\update\spcustom.dll
+ 2011-01-12 08:00 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2419632\spmsg.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2416400-IE8\update\spcustom.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2416400-IE8\spmsg.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 12800 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\xpshims.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 66560 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtmled.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 55296 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeedsbs.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 43520 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\licmgr10.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 25600 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\jsproxy.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2393802\update\spcustom.dll
+ 2011-02-09 04:06 . 2010-12-09 15:15 16896 c:\windows\$hf_mig$\KB2393802\update\mpsyschk.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2393802\spmsg.dll
+ 2010-10-15 07:08 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2387149\update\spcustom.dll
+ 2010-10-15 07:08 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2387149\spmsg.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2360937\update\spcustom.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2360937\spmsg.dll
+ 2010-10-15 07:04 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2360131-IE8\update\spcustom.dll
+ 2010-10-15 07:04 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2360131-IE8\spmsg.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 12800 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\xpshims.dll
+ 2010-10-14 21:05 . 2010-09-10 05:57 66560 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtmled.dll
+ 2010-10-14 21:05 . 2010-09-10 05:57 55296 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeedsbs.dll
+ 2010-10-14 21:05 . 2010-09-10 05:57 43520 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\licmgr10.dll
+ 2010-10-14 21:05 . 2010-09-10 05:57 25600 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\jsproxy.dll
+ 2010-09-16 01:40 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
+ 2010-09-16 01:40 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2347290\spmsg.dll
+ 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
+ 2010-10-15 07:07 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2345886\update\spcustom.dll
+ 2010-10-15 07:07 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2345886\spmsg.dll
+ 2010-08-27 06:05 . 2010-08-27 06:05 99840 c:\windows\$hf_mig$\KB2345886\SP3QFE\srvsvc.dll
+ 2010-12-16 08:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2296199\update\spcustom.dll
+ 2010-12-16 08:07 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2296199\spmsg.dll
+ 2010-08-03 07:00 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2286198\update\spcustom.dll
+ 2010-08-03 07:00 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2286198\spmsg.dll
+ 2010-10-15 07:07 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2279986\update\spcustom.dll
+ 2010-10-15 07:07 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2279986\spmsg.dll
+ 2010-09-16 01:42 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2259922\update\spcustom.dll
+ 2010-09-16 01:42 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2259922\spmsg.dll
+ 2010-07-14 07:05 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
+ 2010-07-14 07:05 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2229593\spmsg.dll
+ 2010-08-12 07:05 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB2183461-IE8\update\spcustom.dll
+ 2010-08-12 07:05 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB2183461-IE8\spmsg.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 12800 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\xpshims.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 55296 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeedsbs.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 25600 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\jsproxy.dll
+ 2010-08-12 07:04 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2160329\update\spcustom.dll
+ 2010-08-12 07:04 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2160329\spmsg.dll
+ 2010-09-16 01:36 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
+ 2010-09-16 01:36 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2141007\spmsg.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2121546\spmsg.dll
+ 2010-08-12 07:10 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll
+ 2010-08-12 07:10 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2115168\spmsg.dll
+ 2010-08-12 07:09 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2079403\update\spcustom.dll
+ 2010-08-12 07:09 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2079403\spmsg.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a 3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a 3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-08-22 05:41 . 2001-08-18 02:36 5632 c:\windows\system32\ptpusb.dll
+ 2011-03-30 13:36 . 2011-03-30 13:36 9216 c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0 .0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0 .0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-24 07:02 . 2010-06-24 07:02 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-24 07:02 . 2010-06-24 07:02 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f 5f7f11d50a3a\IIEHost.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f 5f7f11d50a3a\IIEHost.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0_ _b03f5f7f11d50a3a\IEExecRemote.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0_ _b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-09-16 01:40 . 2008-05-03 11:55 2560 c:\windows\$NtUninstallKB982802$\xpsp4res.dll
+ 2010-10-15 07:00 . 2010-07-22 05:57 5120 c:\windows\$NtUninstallKB2360937$\xpsp4res.dll
+ 2010-10-15 07:07 . 2010-08-13 12:53 5120 c:\windows\$NtUninstallKB2345886$\xpsp4res.dll
+ 2010-07-22 05:57 . 2010-07-22 05:57 5120 c:\windows\$hf_mig$\KB982802\SP3QFE\xpsp4res.dll
+ 2010-07-12 12:53 . 2010-07-12 12:53 5120 c:\windows\$hf_mig$\KB979687\SP3QFE\xpsp4res.dll
+ 2010-10-14 21:04 . 2010-08-13 12:53 5120 c:\windows\$hf_mig$\KB2360937\SP3QFE\xpsp4res.dll
+ 2010-08-26 12:52 . 2010-08-26 12:52 5120 c:\windows\$hf_mig$\KB2345886\SP3QFE\xpsp4res.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b0 3f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2006-03-23 15:14 . 2006-03-23 15:14 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcr80.dll
+ 2006-03-23 15:14 . 2006-03-23 15:14 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcp80.dll
+ 2006-03-23 15:14 . 2006-03-23 15:14 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_0de56c07\msvcm80.dll
+ 2011-01-11 08:27 . 2011-01-11 08:27 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcr80.dll
+ 2011-01-11 08:24 . 2011-01-11 08:24 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcp80.dll
+ 2011-01-11 08:08 . 2011-01-11 08:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_179798c8\msvcm80.dll
+ 2004-08-10 11:00 . 2010-06-18 17:45 293376 c:\windows\system32\winsrv.dll
- 2004-08-10 11:00 . 2008-04-14 00:12 293376 c:\windows\system32\winsrv.dll
+ 2004-08-10 11:00 . 2010-04-16 15:36 406016 c:\windows\system32\usp10.dll
- 2004-08-10 11:00 . 2008-04-14 00:12 406016 c:\windows\system32\usp10.dll
+ 2004-08-10 11:00 . 2010-08-27 08:02 119808 c:\windows\system32\t2embed.dll
- 2004-08-10 11:00 . 2009-10-15 16:28 119808 c:\windows\system32\t2embed.dll
- 2004-08-10 11:00 . 2008-04-14 00:12 135168 c:\windows\system32\shsvcs.dll
+ 2004-08-10 11:00 . 2009-07-27 23:17 135168 c:\windows\system32\shsvcs.dll
+ 2004-08-10 11:00 . 2010-06-30 12:31 149504 c:\windows\system32\schannel.dll
+ 2004-08-10 11:00 . 2010-08-16 08:45 590848 c:\windows\system32\rpcrt4.dll
+ 2010-08-22 05:41 . 2008-04-13 23:12 159232 c:\windows\system32\ptpusd.dll
+ 2004-08-10 11:00 . 2011-04-13 07:21 444028 c:\windows\system32\perfh009.dat
- 2004-08-10 11:00 . 2010-06-24 07:03 444028 c:\windows\system32\perfh009.dat
+ 2004-08-10 11:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll
- 2004-08-10 11:00 . 2008-04-14 00:12 249856 c:\windows\system32\odbc32.dll
- 2004-08-10 11:00 . 2010-05-06 10:41 206848 c:\windows\system32\occache.dll
+ 2004-08-10 11:00 . 2011-02-22 23:06 206848 c:\windows\system32\occache.dll
+ 2004-08-10 11:00 . 2010-12-09 15:15 718336 c:\windows\system32\ntdll.dll
- 2004-08-10 11:00 . 2008-06-20 17:46 245248 c:\windows\system32\mswsock.dll
+ 2004-08-10 11:00 . 2008-06-20 16:02 245248 c:\windows\system32\mswsock.dll
- 2006-03-04 03:33 . 2010-05-06 10:41 611840 c:\windows\system32\mstime.dll
+ 2006-03-04 03:33 . 2011-02-22 23:06 611840 c:\windows\system32\mstime.dll
+ 2009-03-08 09:32 . 2011-02-22 23:06 602112 c:\windows\system32\msfeeds.dll
+ 2006-10-19 02:47 . 2010-03-30 16:24 317440 c:\windows\system32\mp4sdecd.dll
- 2006-10-19 02:47 . 2006-10-19 02:47 317440 c:\windows\system32\MP4SDECD.dll
+ 2004-08-10 11:00 . 2010-09-18 06:53 953856 c:\windows\system32\mfc40u.dll
+ 2004-08-10 11:00 . 2010-09-18 06:53 954368 c:\windows\system32\mfc40.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 136568 c:\windows\system32\Macromed\Shockwave 10\SCC.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 180224 c:\windows\system32\Macromed\Shockwave 10\Proj.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 475136 c:\windows\system32\Macromed\Shockwave 10\PluginPing.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 339968 c:\windows\system32\Macromed\Shockwave 10\Plugin.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 606208 c:\windows\system32\Macromed\Shockwave 10\iml32X.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 471040 c:\windows\system32\Macromed\Shockwave 10\Control.dll
+ 2011-04-08 12:19 . 2011-04-08 12:19 235168 c:\windows\system32\Macromed\Flash\FlashUtil10o_Ac tiveX.exe
+ 2011-04-08 12:19 . 2011-04-08 12:19 311456 c:\windows\system32\Macromed\Flash\FlashUtil10o_Ac tiveX.dll
- 2004-08-10 11:00 . 2009-06-25 08:25 730112 c:\windows\system32\lsasrv.dll
+ 2004-08-10 11:00 . 2010-12-20 17:26 730112 c:\windows\system32\lsasrv.dll
- 2004-08-10 11:00 . 2009-06-25 08:25 301568 c:\windows\system32\kerberos.dll
+ 2004-08-10 11:00 . 2010-12-22 12:34 301568 c:\windows\system32\kerberos.dll
- 2004-08-10 11:00 . 2009-12-09 05:53 726528 c:\windows\system32\jscript.dll
+ 2004-08-10 11:00 . 2011-03-04 06:37 726528 c:\windows\system32\jscript.dll
+ 2011-04-08 12:50 . 2011-02-03 01:40 157472 c:\windows\system32\javaws.exe
+ 2011-04-08 12:50 . 2011-02-03 01:40 145184 c:\windows\system32\javaw.exe
- 2010-03-30 22:21 . 2010-03-09 08:28 145184 c:\windows\system32\javaw.exe
- 2010-03-30 22:21 . 2010-03-09 08:28 145184 c:\windows\system32\java.exe
+ 2011-04-08 12:50 . 2011-02-03 01:40 145184 c:\windows\system32\java.exe
- 2006-03-04 03:33 . 2010-05-06 10:41 184320 c:\windows\system32\iepeers.dll
+ 2006-03-04 03:33 . 2011-02-22 23:06 184320 c:\windows\system32\iepeers.dll
+ 2004-08-10 11:00 . 2011-02-22 23:06 387584 c:\windows\system32\iedkcs32.dll
- 2004-08-10 11:00 . 2010-05-06 10:41 387584 c:\windows\system32\iedkcs32.dll
+ 2004-08-10 11:00 . 2011-02-18 11:49 173568 c:\windows\system32\ie4uinit.exe
+ 2004-08-10 11:00 . 2008-10-16 14:43 138496 c:\windows\system32\drivers\afd.sys
- 2004-08-10 11:00 . 2008-08-14 10:04 138496 c:\windows\system32\drivers\afd.sys
+ 2004-08-10 11:00 . 2011-03-03 06:55 149504 c:\windows\system32\dnsapi.dll
+ 2010-07-27 22:44 . 2010-07-27 22:44 107808 c:\windows\system32\dns-sd.exe
- 2010-04-08 17:20 . 2010-04-08 17:20 107808 c:\windows\system32\dns-sd.exe
+ 2010-01-13 15:37 . 2010-07-12 12:55 218112 c:\windows\system32\dllcache\wordpad.exe
+ 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\system32\dllcache\winsrv.dll
- 2009-10-29 05:38 . 2010-05-06 10:41 916480 c:\windows\system32\dllcache\wininet.dll
+ 2009-10-29 05:38 . 2011-02-22 23:06 916480 c:\windows\system32\dllcache\wininet.dll
+ 2009-03-08 09:33 . 2011-03-04 06:37 420864 c:\windows\system32\dllcache\vbscript.dll
+ 2010-04-16 15:36 . 2010-04-16 15:36 406016 c:\windows\system32\dllcache\usp10.dll
- 2010-01-13 15:42 . 2009-10-15 16:28 119808 c:\windows\system32\dllcache\t2embed.dll
+ 2010-01-13 15:42 . 2010-08-27 08:02 119808 c:\windows\system32\dllcache\t2embed.dll
+ 2010-01-13 15:38 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
+ 2009-07-27 23:17 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll
+ 2011-01-21 14:44 . 2011-01-21 14:44 439296 c:\windows\system32\dllcache\shimgvw.dll
+ 2008-12-05 06:54 . 2010-06-30 12:31 149504 c:\windows\system32\dllcache\schannel.dll
+ 2004-08-10 11:00 . 2011-02-04 22:48 291840 c:\windows\system32\dllcache\sbe.dll
- 2004-08-10 11:00 . 2006-10-09 21:12 291840 c:\windows\system32\dllcache\sbe.dll
+ 2010-01-13 14:58 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
- 2009-03-08 09:34 . 2010-05-06 10:41 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-03-08 09:34 . 2011-02-22 23:06 206848 c:\windows\system32\dllcache\occache.dll
+ 2010-01-13 15:42 . 2010-12-09 15:15 718336 c:\windows\system32\dllcache\ntdll.dll
+ 2008-06-20 17:46 . 2008-06-20 16:02 245248 c:\windows\system32\dllcache\mswsock.dll
- 2008-06-20 17:46 . 2008-06-20 17:46 245248 c:\windows\system32\dllcache\mswsock.dll
- 2009-03-08 09:32 . 2010-05-06 10:41 611840 c:\windows\system32\dllcache\mstime.dll
+ 2009-03-08 09:32 . 2011-02-22 23:06 611840 c:\windows\system32\dllcache\mstime.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
+ 2010-01-15 03:56 . 2011-02-22 23:06 602112 c:\windows\system32\dllcache\msfeeds.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
- 2010-01-13 13:29 . 2008-04-14 00:11 180224 c:\windows\system32\dllcache\msadomd.dll
+ 2010-01-13 13:29 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
- 2010-01-13 13:29 . 2008-04-14 00:11 143360 c:\windows\system32\dllcache\msadco.dll
+ 2010-01-13 13:29 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
+ 2010-01-13 15:38 . 2011-02-17 13:18 455936 c:\windows\system32\dllcache\mrxsmb.sys
+ 2010-03-30 16:24 . 2010-03-30 16:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
+ 2010-09-18 16:23 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
+ 2010-10-14 21:05 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll
+ 2004-08-10 11:00 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll
+ 2004-08-10 11:00 . 2010-09-18 06:53 954368 c:\windows\system32\dllcache\mfc40.dll
+ 2010-01-13 15:42 . 2010-12-20 17:26 730112 c:\windows\system32\dllcache\lsasrv.dll
- 2010-01-13 15:42 . 2009-06-25 08:25 730112 c:\windows\system32\dllcache\lsasrv.dll
+ 2010-01-13 13:26 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
- 2010-01-13 13:26 . 2008-04-14 00:12 677888 c:\windows\system32\dllcache\lhmstsc.exe
+ 2009-06-25 08:25 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
- 2009-06-25 08:25 . 2009-06-25 08:25 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2009-03-08 09:33 . 2011-03-04 06:37 726528 c:\windows\system32\dllcache\jscript.dll
- 2009-03-08 09:33 . 2009-12-09 05:53 726528 c:\windows\system32\dllcache\jscript.dll
+ 2010-01-13 15:38 . 2011-03-07 05:33 692736 c:\windows\system32\dllcache\inetcomm.dll
- 2010-01-15 03:56 . 2010-05-06 10:41 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2010-01-15 03:56 . 2011-02-22 23:06 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2009-03-08 09:31 . 2011-02-22 23:06 184320 c:\windows\system32\dllcache\iepeers.dll
- 2009-03-08 09:31 . 2010-05-06 10:41 184320 c:\windows\system32\dllcache\iepeers.dll
- 2010-06-09 12:29 . 2010-05-06 10:41 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2010-06-09 12:29 . 2011-02-22 23:06 743424 c:\windows\system32\dllcache\iedvtool.dll
+ 2009-03-08 19:09 . 2011-02-22 23:06 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 2009-03-08 19:09 . 2010-05-06 10:41 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-03-08 09:32 . 2011-02-18 11:49 173568 c:\windows\system32\dllcache\ie4uinit.exe
+ 2010-07-14 04:51 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
+ 2004-08-10 11:00 . 2011-02-04 22:48 456192 c:\windows\system32\dllcache\encdec.dll
- 2004-08-10 11:00 . 2006-10-09 21:12 456192 c:\windows\system32\dllcache\encdec.dll
+ 2008-06-20 17:46 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll
+ 2010-10-14 21:05 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
+ 2010-04-20 05:30 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll
+ 2008-06-20 11:40 . 2008-10-16 14:43 138496 c:\windows\system32\dllcache\afd.sys
- 2008-06-20 11:40 . 2008-08-14 10:04 138496 c:\windows\system32\dllcache\afd.sys
+ 2004-08-10 11:00 . 2010-08-23 16:12 617472 c:\windows\system32\comctl32.dll
- 2004-08-10 11:00 . 2008-04-14 00:11 617472 c:\windows\system32\comctl32.dll
+ 2011-03-30 13:35 . 2011-03-30 13:35 114688 c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
+ 2011-03-31 06:34 . 2011-03-31 06:34 469944 c:\windows\system32\Adobe\Shockwave 11\SwHelper_1159620.exe
+ 2010-10-22 12:05 . 2010-10-22 12:05 467224 c:\windows\system32\Adobe\Shockwave 11\SwHelper_1159615.exe
+ 2011-02-02 13:35 . 2011-02-02 13:35 136568 c:\windows\system32\Adobe\Shockwave 11\SCC.dll
+ 2011-03-30 13:36 . 2011-03-30 13:36 446464 c:\windows\system32\Adobe\Shockwave 11\Proj.dll
+ 2011-03-30 13:35 . 2011-03-30 13:35 372736 c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
+ 2011-03-30 08:49 . 2011-03-30 08:49 869888 c:\windows\system32\Adobe\Shockwave 11\gi.dll
+ 2011-03-30 13:35 . 2011-03-30 13:35 503808 c:\windows\system32\Adobe\Shockwave 11\Control.dll
+ 2011-03-31 06:34 . 2011-03-31 06:34 215992 c:\windows\system32\Adobe\Director\SwDir.dll
+ 2011-03-30 13:36 . 2011-03-30 13:36 135168 c:\windows\system32\Adobe\Director\np32dsw.dll
+ 2010-01-13 13:30 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
- 2010-01-13 13:30 . 2008-04-14 00:12 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
- 2010-03-23 09:31 . 2010-03-23 09:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webe ngine.dll
+ 2010-09-22 13:43 . 2010-09-22 13:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webe ngine.dll
+ 2011-01-18 08:39 . 2011-01-18 08:39 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS. dll
+ 2011-01-18 08:39 . 2011-01-18 08:39 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rjit.dll
- 2009-08-08 04:51 . 2009-08-08 04:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rdacwks.dll
+ 2011-01-18 08:39 . 2011-01-18 08:39 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rdacwks.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ld.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor ld.dll
- 2010-03-31 18:49 . 2010-03-31 18:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor jit.dll
+ 2010-09-23 06:25 . 2010-09-23 06:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor jit.dll
+ 2010-09-23 07:17 . 2010-09-23 07:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_isapi.dll
- 2010-03-31 19:32 . 2010-03-31 19:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspne t_isapi.dll
+ 2010-07-23 06:03 . 2010-07-23 06:03 338432 c:\windows\Installer\f3aaf6.msp
+ 2011-04-13 07:30 . 2011-04-13 07:30 459264 c:\windows\Installer\d1672f.msi
+ 2010-09-24 01:02 . 2010-09-24 01:02 798208 c:\windows\Installer\bb63df3.msp
+ 2010-11-20 13:51 . 2010-11-20 13:51 811008 c:\windows\Installer\54edd12e.msi
+ 2010-09-07 21:18 . 2010-09-07 21:18 348672 c:\windows\Installer\4f0319a9.msi
+ 2011-04-08 12:53 . 2011-04-08 12:53 180224 c:\windows\Installer\212d50.msi
+ 2010-08-04 19:13 . 2010-08-04 19:13 686080 c:\windows\Installer\14f8be47.msp
+ 2010-08-07 20:25 . 2010-08-07 20:25 897024 c:\windows\Installer\{EAFEF30E-3789-49C7-A6D9-77C12E005BAC}\SafariIco.exe
+ 2010-07-10 20:42 . 2010-07-10 20:42 897024 c:\windows\Installer\{AFAC914D-9E83-4A89-8ABE-427521C82CCF}\SafariIco.exe
+ 2011-02-19 21:43 . 2011-02-19 21:43 380928 c:\windows\Installer\{AAD47011-8518-4608-9656-951DA35B587B}\iTunesIco.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.D7F1C16B.8DAD.449D.BDD0.EBC095B 0BD25.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.D7F1C16B.8DAD.449D.BDD0.EBC095B 0BD25.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.9718727B.8B4C.4267.89D7.72C7D5B 3B32C.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.9718727B.8B4C.4267.89D7.72C7D5B 3B32C.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.5D59AED1.7573.4431.B733.B138D6E 1CAEC.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.5D59AED1.7573.4431.B733.B138D6E 1CAEC.exe
+ 2010-11-20 13:50 . 2010-11-20 13:50 897024 c:\windows\Installer\{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}\SafariIco.exe
+ 2010-09-18 23:23 . 2010-09-18 23:23 897024 c:\windows\Installer\{20ACB2F8-3BCA-45A8-80A2-9D3CB5C25F43}\SafariIco.exe
+ 2010-09-22 23:10 . 2010-09-22 23:10 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\nppdf32.dll
+ 2010-09-10 23:17 . 2010-09-10 23:17 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\JP2KLib.dll
+ 2010-09-23 01:41 . 2010-09-23 01:41 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\AdobeCollabSync.exe
+ 2010-09-23 09:47 . 2010-09-23 09:47 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\AcroRd32.exe
+ 2010-09-22 23:04 . 2010-09-22 23:04 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\AcroPDF.dll
+ 2010-09-23 00:39 . 2010-09-23 00:39 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\acrobroker.exe
+ 2010-09-22 23:50 . 2010-09-22 23:50 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\a3dutility.exe
+ 2009-03-06 07:37 . 2009-03-06 07:37 501640 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\SOA.DLL
+ 2008-11-04 09:13 . 2008-11-04 09:13 118128 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\MSCONV97.DLL
+ 2009-02-14 11:04 . 2009-02-14 11:04 625520 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\GROOVEWEBSERVIC ES.DLL
+ 2009-02-12 20:19 . 2009-02-12 20:19 688512 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\GROOVEWEBPLATFO RMSERVICES.DLL
+ 2009-03-06 09:33 . 2009-03-06 09:33 961888 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\GROOVEUTIL.DLL
+ 2009-02-14 11:03 . 2009-02-14 11:03 337264 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\GROOVE.EXE
+ 2008-10-26 11:26 . 2008-10-26 11:26 162680 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\ACCWIZ.DLL
+ 2011-04-13 07:04 . 2010-03-10 06:15 420352 c:\windows\ie8updates\KB2510531-IE8\vbscript.dll
+ 2011-04-13 07:04 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2510531-IE8\spuninst\updspapi.dll
+ 2011-04-13 07:04 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2510531-IE8\spuninst\spuninst.exe
+ 2011-04-13 07:04 . 2009-12-09 05:53 726528 c:\windows\ie8updates\KB2510531-IE8\jscript.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 916480 c:\windows\ie8updates\KB2497640-IE8\wininet.dll
+ 2011-04-13 07:24 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2497640-IE8\spuninst\updspapi.dll
+ 2011-04-13 07:24 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2497640-IE8\spuninst\spuninst.exe
+ 2011-04-13 07:24 . 2010-12-20 23:59 206848 c:\windows\ie8updates\KB2497640-IE8\occache.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 611840 c:\windows\ie8updates\KB2497640-IE8\mstime.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 602112 c:\windows\ie8updates\KB2497640-IE8\msfeeds.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 247808 c:\windows\ie8updates\KB2497640-IE8\ieproxy.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 184320 c:\windows\ie8updates\KB2497640-IE8\iepeers.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 743424 c:\windows\ie8updates\KB2497640-IE8\iedvtool.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 387584 c:\windows\ie8updates\KB2497640-IE8\iedkcs32.dll
+ 2011-04-13 07:24 . 2010-12-20 12:55 173568 c:\windows\ie8updates\KB2497640-IE8\ie4uinit.exe
+ 2011-02-09 08:02 . 2010-11-06 00:26 916480 c:\windows\ie8updates\KB2482017-IE8\wininet.dll
+ 2011-02-09 08:02 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2482017-IE8\spuninst\updspapi.dll
+ 2011-02-09 08:02 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2482017-IE8\spuninst\spuninst.exe
+ 2011-02-09 08:02 . 2010-11-06 00:26 206848 c:\windows\ie8updates\KB2482017-IE8\occache.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 611840 c:\windows\ie8updates\KB2482017-IE8\mstime.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 602112 c:\windows\ie8updates\KB2482017-IE8\msfeeds.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 247808 c:\windows\ie8updates\KB2482017-IE8\ieproxy.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 184320 c:\windows\ie8updates\KB2482017-IE8\iepeers.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 743424 c:\windows\ie8updates\KB2482017-IE8\iedvtool.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 387584 c:\windows\ie8updates\KB2482017-IE8\iedkcs32.dll
+ 2011-02-09 08:02 . 2010-11-03 12:26 173568 c:\windows\ie8updates\KB2482017-IE8\ie4uinit.exe
+ 2010-12-16 08:06 . 2010-09-10 05:58 916480 c:\windows\ie8updates\KB2416400-IE8\wininet.dll
+ 2010-12-16 08:06 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2416400-IE8\spuninst\updspapi.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 231288 c:\windows\ie8updates\KB2416400-IE8\spuninst\spuninst.exe
+ 2010-12-16 08:06 . 2010-09-10 05:58 206848 c:\windows\ie8updates\KB2416400-IE8\occache.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 611840 c:\windows\ie8updates\KB2416400-IE8\mstime.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 602112 c:\windows\ie8updates\KB2416400-IE8\msfeeds.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 247808 c:\windows\ie8updates\KB2416400-IE8\ieproxy.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 184320 c:\windows\ie8updates\KB2416400-IE8\iepeers.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 743424 c:\windows\ie8updates\KB2416400-IE8\iedvtool.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 387584 c:\windows\ie8updates\KB2416400-IE8\iedkcs32.dll
+ 2010-12-16 08:06 . 2010-08-26 12:22 173056 c:\windows\ie8updates\KB2416400-IE8\ie4uinit.exe
+ 2010-10-15 07:04 . 2010-06-24 12:22 916480 c:\windows\ie8updates\KB2360131-IE8\wininet.dll
+ 2010-10-15 07:04 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll
+ 2010-10-15 07:04 . 2009-05-26 09:01 231288 c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe
+ 2010-10-15 07:04 . 2010-06-24 12:22 206848 c:\windows\ie8updates\KB2360131-IE8\occache.dll
+ 2010-10-15 07:04 . 2010-06-24 12:22 611840 c:\windows\ie8updates\KB2360131-IE8\mstime.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 599040 c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 247808 c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 184320 c:\windows\ie8updates\KB2360131-IE8\iepeers.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 743424 c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 387584 c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll
+ 2010-10-15 07:04 . 2010-06-23 12:08 173056 c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe
+ 2010-08-12 07:05 . 2010-05-06 10:41 916480 c:\windows\ie8updates\KB2183461-IE8\wininet.dll
+ 2010-08-12 07:05 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll
+ 2010-08-12 07:05 . 2009-05-26 09:01 231288 c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe
+ 2010-08-12 07:05 . 2010-05-06 10:41 206848 c:\windows\ie8updates\KB2183461-IE8\occache.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 611840 c:\windows\ie8updates\KB2183461-IE8\mstime.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 599040 c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 247808 c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 184320 c:\windows\ie8updates\KB2183461-IE8\iepeers.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 743424 c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 387584 c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll
+ 2010-08-12 07:05 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe
+ 2010-01-13 15:38 . 2011-02-17 13:18 455936 c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2010-10-08 07:01 . 2010-10-08 07:01 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing\1.0.5000.0__b03f5f7f11d50a3a_f076509b\Sys tem.Drawing.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_bb27d 097\System.Drawing.Design.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 118784 c:\windows\assembly\NativeImages1_v1.1.4322\Custom Marshalers\1.0.5000.0__b03f5f7f11d50a3a_14d46a79\C ustomMarshalers.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\Wsa tConfig\95de80b860252231b46014f58226e473\WsatConfi g.ni.exe
+ 2011-04-13 07:48 . 2011-04-13 07:48 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveLocal.Wr#\5cf37d9f9093dde68040b0c5bb1cfcee \WindowsLiveLocal.WriterPlugin.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\ec67941b90dae5d83c9f07ef4eb76d0f \WindowsLive.Writer.BlogClient.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\e7963a721bbdde3a85eb60f433ecdcf6 \WindowsLive.Writer.Interop.Mshtml.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\cde9e70b835d2c0793a730d9b1133a74 \WindowsLive.Writer.Interop.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\b48b669fe73b2a507cd63da279cb8c0c \WindowsLive.Writer.FileDestinations.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\aa6a2966e5e5b66e655524bdc20bdda9 \WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\9fe9f927e7261c2b8b9fe8beb7f55f3c \WindowsLive.Writer.Passport.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\8583f74057e06196c730254eb6175fe6 \WindowsLive.Writer.Extensibility.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\84c846479457aecc420ec3fa96bbd0ea \WindowsLive.Writer.HtmlParser.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\6ad2d2fa593fdab2994f3a28bc062904 \WindowsLive.Writer.BrowserControl.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\44c24056e778be36c9f8ed822ba7d175 \WindowsLive.Writer.Controls.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\3c735419e4f07e6c2f53b15022a17f01 \WindowsLive.Writer.HtmlEditor.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\3a35107bc70604c615b533bbdbd8dbc7 \WindowsLive.Writer.Localization.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\2dfead1290e37be1443a894d74c77403 \WindowsLive.Writer.SpellChecker.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\15d7ad1328907b52dfba4b9eaa17917a \WindowsLive.Writer.Mshtml.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\0bffcd5f109e0958379648df04caaf9a \WindowsLive.Writer.Instrumentation.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Client\2facc5c45b44a9442103fe1fde63019d\W indowsLive.Client.ni.dll
+ 2011-04-13 07:38 . 2011-04-13 07:38 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsFormsIntegra#\715710f5a31a494ed5c0ec0874dafe3e \WindowsFormsIntegration.ni.dll
+ 2011-04-13 07:38 . 2011-04-13 07:38 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationTypes\017be0e6c5f1810f15a696157cd5e2c2\UI AutomationTypes.ni.dll
+ 2011-04-13 07:37 . 2011-04-13 07:37 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClient\bec5b0a93df12eb26c02c877a4eae678\U IAutomationClient.ni.dll
+ 2011-04-13 08:00 . 2011-04-13 08:00 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml.Linq\3d8f787002439f4942c33f376cfd8555\Syst em.Xml.Linq.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Routing\4b746fea8062a10ccc6e5331914e7dad\S ystem.Web.Routing.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.RegularE#\103956fdb019bce8a173fe9cb9da3e02 \System.Web.RegularExpressions.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Extensio#\c0a156fbf46ad272ac262e45eaa998f4 \System.Web.Extensions.Design.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity\e3651e13567ce4e3fa7bb2fbab737d9a\Sy stem.Web.Entity.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Entity.D#\834d7769f39e4d937eda1ad3707d4716 \System.Web.Entity.Design.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.DynamicD#\032c96c6206b53bca122d1fbaf5f8ca2 \System.Web.DynamicData.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Abstract#\6ce0e4fb33afcfcce43c427e82b987db \System.Web.Abstractions.ni.dll
+ 2011-04-13 07:44 . 2011-04-13 07:44 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Transactions\990d96810a21e0fa95f916ffc66f3a94\ System.Transactions.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceProce#\e0d56c0582316e9ecb4c18186e37217c \System.ServiceProcess.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Security\9e91cca51a5ed6fb13b67558109d2726\Syst em.Security.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\fa6a58394a1f162eecce4cd8af0875c3 \System.Runtime.Serialization.Formatters.Soap.ni.d ll
+ 2011-04-13 07:44 . 2011-04-13 07:44 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Remo#\1d03df7f7548613e8beab2cc21e57910 \System.Runtime.Remoting.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Net\6194eb4bc1e0133d0183d086b747f512\System.Ne t.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management\042658de519bb1e22ec5925092061892\Sy stem.Management.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Management.I#\d6ae8171ae6fd4fe83add34e6d70e5b5 \System.Management.Instrumentation.ni.dll
+ 2011-04-13 07:40 . 2011-04-13 07:40 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IO.Log\abd5a61d39e474f12b30ccbbe6277667\System .IO.Log.ni.dll
+ 2011-04-13 07:40 . 2011-04-13 07:40 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityMode#\12c4dba6d4ff0278d208c283d9ed7670 \System.IdentityModel.Selectors.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\ff5c7a52497d892f3a3206384d46b5e7 \System.EnterpriseServices.Wrapper.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.EnterpriseSe#\ff5c7a52497d892f3a3206384d46b5e7 \System.EnterpriseServices.ni.dll
+ 2011-04-13 07:35 . 2011-04-13 07:35 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing.Desi#\e6b7128278d8c0e8382a5685f5b196c6 \System.Drawing.Design.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\8ef56bf47fc2fc4204e0fcc1f32bab01 \System.DirectoryServices.AccountManagement.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\447d7b4a7d0add13f8d2086088bcc41c \System.DirectoryServices.Protocols.ni.dll
+ 2011-04-13 07:53 . 2011-04-13 07:53 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\ce2afe8854ee9cdc834b6f392348c882 \System.Data.Services.Design.ni.dll
+ 2011-04-13 07:53 . 2011-04-13 07:53 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Service#\03d4658290e300e437e745ef4a613b59 \System.Data.Services.Client.ni.dll
+ 2011-04-13 07:52 . 2011-04-13 07:52 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity.#\7ce21a2855bb7731de4dab797e69f3f6 \System.Data.Entity.Design.ni.dll
+ 2011-04-13 07:51 . 2011-04-13 07:51 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.DataSet#\ea57694aea47c05853516c9bb2ad54b4 \System.Data.DataSetExtensions.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuration\3d6b4509225efde2a4e3db77205f8a51 \System.Configuration.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuratio#\f312bb844670ebc7458fec9e6b2568b3 \System.Configuration.Install.ni.dll
+ 2011-04-13 07:50 . 2011-04-13 07:50 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.AddIn\afd9595f07a8c68b26e81cf995957f56\System. AddIn.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMS vcHost\3a42b2fbafe93d7b9395e328bea35afa\SMSvcHost. ni.exe
+ 2011-04-13 07:48 . 2011-04-13 07:48 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMD iagnostics\97ff96d3fc8d0b10ea294f320acf821e\SMDiag nostics.ni.dll
+ 2011-04-13 07:48 . 2011-04-13 07:48 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\Ser viceModelReg\28ed0e9efd938b05b4f53e0d90046701\Serv iceModelReg.ni.exe
+ 2011-04-13 07:28 . 2011-04-13 07:28 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\ffe13679e6b3e36e5cb6c47f8c4faf9c \PresentationFramework.Aero.ni.dll
+ 2011-04-13 07:28 . 2011-04-13 07:28 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\dbb40299379f2009c140ddadb04231b4 \PresentationFramework.Classic.ni.dll
+ 2011-04-13 07:29 . 2011-04-13 07:29 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\a34cd33cec1bdfebe4a3910bceb8723b \PresentationFramework.Royale.ni.dll
+ 2011-04-13 07:29 . 2011-04-13 07:29 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\689bb394bcb437ed085c22a43aba30c6 \PresentationFramework.Luna.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSB uild\5670e74887ef1025c6a8c056ffe86b38\MSBuild.ni.e xe
+ 2011-04-13 07:48 . 2011-04-13 07:48 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\653732002ebf5c68f69150a60e145e6a \Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 840192 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\e5711a5352b9a63f121ac1d4c711f12e \Microsoft.MapPoint.Geometry.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 344064 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\d3f7ddb617bc749889c458c42db6f3a1 \Microsoft.MapPoint.Utility.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 434176 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\5d606ec57de59ac9aa7b84c6700c9450 \Microsoft.MapPoint.Data.CompactMapFile.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 472064 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\5117a69b3a1b8329a8188869ae71007d \Microsoft.MapPoint.Rendering3D.Utility.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 766976 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\3176bf0ba280c8cb3a281a14e51d5f40 \Microsoft.MapPoint.Data.VirtualEarthTileDataSourc e.ni.dll
+ 2011-04-13 07:44 . 2011-04-13 07:44 411648 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\2936c65d09a5930fd0efb8ec31b66968 \Microsoft.MapPoint.Network.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 340992 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\26ee9a8902c1469220349fd514859d6b \Microsoft.MapPoint.UtilityPartialTrust.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 438272 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\1d88b25ff5b3db36ddf5dc2d886b1747 \Microsoft.MapPoint.MapControl3D.ni.dll
+ 2011-04-13 07:50 . 2011-04-13 07:50 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\cc62770393640302bd4d7e442b1e49a4 \Microsoft.Build.Utilities.v3.5.ni.dll
+ 2011-04-13 07:50 . 2011-04-13 07:50 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Uti#\352bff1ee71ce114e225f849038dc48d \Microsoft.Build.Utilities.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\7345f4d2d7157bf49de4158e8f2b6847 \Microsoft.Build.Engine.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Con#\d7dba901ddd410ca1a0156d0f2a27533 \Microsoft.Build.Conversion.v3.5.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\Cus tomMarshalers\010552e529d130ce914765b0801e2367\Cus tomMarshalers.ni.dll
+ 2011-04-13 07:48 . 2011-04-13 07:48 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\Com SvcConfig\6861f639b13967e9b014b44bbb7c5d4c\ComSvcC onfig.ni.exe
+ 2011-04-13 07:40 . 2011-04-13 07:40 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\Asp NetMMCExt\800da7dec567fadf3392091e9f01ecb9\AspNetM MCExt.ni.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2 .0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2 .0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0 .0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0 .0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess \2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.d ll
- 2010-06-24 07:02 . 2010-06-24 07:02 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess \2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.d ll
- 2010-06-24 07:02 . 2010-06-24 07:02 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0 .0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0 .0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serial ization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\ System.Runtime.Serialization.Formatters.Soap.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serial ization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\ System.Runtime.Serialization.Formatters.Soap.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoti ng\2.0.0.0__b77a5c561934e089\System.Runtime.Remoti ng.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoti ng\2.0.0.0__b77a5c561934e089\System.Runtime.Remoti ng.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0. 0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0. 0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0 .0.0__b03f5f7f11d50a3a\System.Management.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0 .0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0. 0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0. 0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServ ices.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServ ices.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.Dir ectoryServices.Protocols.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServi ces.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.Dir ectoryServices.Protocols.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0 .0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0 .0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2. 0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2. 0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\ 2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\ 2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03 f5f7f11d50a3a\sysglobl.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03 f5f7f11d50a3a\sysglobl.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic \8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.d ll
+ 2011-04-13 07:20 . 2011-04-13 07:20 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic \8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.d ll
- 2010-06-24 07:02 . 2010-06-24 07:02 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft .VisualBasic.Compatibility.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft .VisualBasic.Compatibility.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Micr osoft.VisualBasic.Compatibility.Data.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic .Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Micr osoft.VisualBasic.Compatibility.Data.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0 .0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks \2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.d ll
- 2010-06-24 07:02 . 2010-06-24 07:02 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks \2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.d ll
- 2010-06-24 07:02 . 2010-06-24 07:02 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engin e\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine .dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engin e\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine .dll
- 2010-06-24 07:02 . 2010-06-24 07:02 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0_ _b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0_ _b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0 .0.0__b77a5c561934e089\System.Transactions.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0 .0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 113664 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.Wrapper.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 113664 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.Wrapper.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 258048 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 258048 c:\windows\assembly\GAC_32\System.EnterpriseServic es\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServ ices.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 486400 c:\windows\assembly\GAC_32\System.Data.OracleClien t\2.0.0.0__b77a5c561934e089\System.Data.OracleClie nt.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 486400 c:\windows\assembly\GAC_32\System.Data.OracleClien t\2.0.0.0__b77a5c561934e089\System.Data.OracleClie nt.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB982802$\spuninst\updspapi .dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB982802$\spuninst\spuninst .exe
+ 2010-09-16 01:40 . 2009-04-15 14:51 585216 c:\windows\$NtUninstallKB982802$\rpcrt4.dll
+ 2010-08-12 07:01 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB982665$\spuninst\updspapi .dll
+ 2010-08-12 07:01 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB982665$\spuninst\spuninst .exe
+ 2010-08-12 07:10 . 2009-12-31 16:50 353792 c:\windows\$NtUninstallKB982214$\srv.sys
+ 2010-08-12 07:10 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB982214$\spuninst\updspapi .dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB982214$\spuninst\spuninst .exe
+ 2010-10-15 07:06 . 2009-10-15 16:28 119808 c:\windows\$NtUninstallKB982132$\t2embed.dll
+ 2010-10-15 07:06 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB982132$\spuninst\updspapi .dll
+ 2010-10-15 07:06 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB982132$\spuninst\spuninst .exe
+ 2010-08-12 07:02 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB981997$\spuninst\updspapi .dll
+ 2010-08-12 07:02 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB981997$\spuninst\spuninst .exe
+ 2010-10-15 07:00 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB981957$\spuninst\updspapi .dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB981957$\spuninst\spuninst .exe
+ 2010-08-12 07:10 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB981852$\spuninst\updspapi .dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB981852$\spuninst\spuninst .exe
+ 2010-09-16 01:39 . 2008-04-14 00:12 406016 c:\windows\$NtUninstallKB981322$\usp10.dll
+ 2010-09-16 01:39 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB981322$\spuninst\updspapi .dll
+ 2010-09-16 01:39 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB981322$\spuninst\spuninst .exe
+ 2010-08-12 07:04 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB980436$\spuninst\updspapi .dll
+ 2010-08-12 07:04 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB980436$\spuninst\spuninst .exe
+ 2010-08-12 07:04 . 2009-06-25 08:25 147456 c:\windows\$NtUninstallKB980436$\schannel.dll
+ 2010-10-15 07:05 . 2008-04-21 12:08 215552 c:\windows\$NtUninstallKB979687$\wordpad.exe
+ 2010-10-15 07:05 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979687$\spuninst\updspapi .dll
+ 2010-10-15 07:05 . 2009-05-26 09:01 231288 c:\windows\$NtUninstallKB979687$\spuninst\spuninst .exe
+ 2010-09-16 01:41 . 2007-07-28 03:11 382840 c:\windows\$NtUninstallKB975558_WM8$\spuninst\upds papi.dll
+ 2010-09-16 01:41 . 2007-07-28 03:11 231288 c:\windows\$NtUninstallKB975558_WM8$\spuninst\spun inst.exe
+ 2010-09-16 01:41 . 2006-10-19 02:47 317440 c:\windows\$NtUninstallKB975558_WM8$\mp4sdecd.dll
+ 2011-03-16 00:25 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB971029$\spuninst\updspapi .dll
+ 2011-03-16 00:25 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971029$\spuninst\spuninst .exe
+ 2011-03-16 00:25 . 2008-04-14 00:12 135168 c:\windows\$NtUninstallKB971029$\shsvcs.dll
+ 2011-03-09 08:02 . 2010-12-21 15:36 382840 c:\windows\$NtUninstallKB2502898$\spuninst\updspap i.dll
+ 2011-03-09 08:02 . 2010-12-21 15:36 231288 c:\windows\$NtUninstallKB2502898$\spuninst\spunins t.exe
+ 2011-03-09 08:02 . 2006-10-09 21:12 291840 c:\windows\$NtUninstallKB2502898$\sbe.dll
+ 2011-03-09 08:02 . 2006-10-09 21:12 456192 c:\windows\$NtUninstallKB2502898$\encdec.dll
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2485376$\spuninst\updspap i.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2485376$\spuninst\spunins t.exe
+ 2011-02-09 08:05 . 2010-10-28 13:13 290048 c:\windows\$NtUninstallKB2485376$\atmfd.dll
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2483185$\spuninst\updspap i.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2483185$\spuninst\spunins t.exe
+ 2011-02-09 08:05 . 2008-04-14 00:12 438272 c:\windows\$NtUninstallKB2483185$\shimgvw.dll
+ 2011-03-09 08:02 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2481109$\spuninst\updspap i.dll
+ 2011-03-09 08:02 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2481109$\spuninst\spunins t.exe
+ 2011-03-09 08:02 . 2008-04-14 00:12 677888 c:\windows\$NtUninstallKB2481109$\mstsc.exe
+ 2011-03-09 08:02 . 2008-04-14 00:12 677888 c:\windows\$NtUninstallKB2481109$\lhmstsc.exe
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2479628$\spuninst\updspap i.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2479628$\spuninst\spunins t.exe
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2478971$\spuninst\updspap i.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2478971$\spuninst\spunins t.exe
+ 2011-02-09 08:05 . 2009-06-25 08:25 301568 c:\windows\$NtUninstallKB2478971$\kerberos.dll
+ 2011-02-09 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2478960$\spuninst\updspap i.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2478960$\spuninst\spunins t.exe
+ 2011-02-09 08:00 . 2009-06-25 08:25 730112 c:\windows\$NtUninstallKB2478960$\lsasrv.dll
+ 2011-02-09 08:01 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2476687$\spuninst\updspap i.dll
+ 2011-02-09 08:01 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2476687$\spuninst\spunins t.exe
+ 2010-12-16 08:05 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2467659$\spuninst\updspap i.dll
+ 2010-12-16 08:05 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2467659$\spuninst\spunins t.exe
+ 2010-12-16 08:03 . 2008-06-24 07:25 949760 c:\windows\$NtUninstallKB2447961_WM9L$\wmex.dll
+ 2010-12-16 08:03 . 2002-12-12 00:38 613888 c:\windows\$NtUninstallKB2447961_WM9L$\wmenc.exe
+ 2010-12-16 08:03 . 2002-12-12 00:38 163328 c:\windows\$NtUninstallKB2447961_WM9L$\wmdevctl.dl l
+ 2010-12-16 08:03 . 2007-07-28 04:11 382840 c:\windows\$NtUninstallKB2447961_WM9L$\spuninst\up dspapi.dll
+ 2010-12-16 08:03 . 2007-07-28 04:11 231288 c:\windows\$NtUninstallKB2447961_WM9L$\spuninst\sp uninst.exe
+ 2010-12-16 08:05 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2443685$\spuninst\updspap i.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2443685$\spuninst\spunins t.exe
+ 2010-12-16 08:06 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2443105$\spuninst\updspap i.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2443105$\spuninst\spunins t.exe
+ 2010-12-16 08:05 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2440591$\spuninst\updspap i.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2440591$\spuninst\spunins t.exe
+ 2010-12-16 08:05 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2436673$\spuninst\updspap i.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2436673$\spuninst\spunins t.exe
+ 2010-12-16 08:00 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2423089$\spuninst\updspap i.dll
+ 2010-12-16 08:00 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2423089$\spuninst\spunins t.exe
+ 2011-01-12 08:00 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2419632$\spuninst\updspap i.dll
+ 2011-01-12 08:00 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2419632$\spuninst\spunins t.exe
+ 2011-01-12 08:00 . 2008-04-14 00:12 249856 c:\windows\$NtUninstallKB2419632$\odbc32.dll
+ 2011-01-12 08:00 . 2008-04-14 00:12 102400 c:\windows\$NtUninstallKB2419632$\msjro.dll
+ 2011-01-12 08:00 . 2008-04-14 00:11 200704 c:\windows\$NtUninstallKB2419632$\msadox.dll
+ 2011-01-12 08:00 . 2008-04-14 00:11 180224 c:\windows\$NtUninstallKB2419632$\msadomd.dll
+ 2011-01-12 08:00 . 2008-04-14 00:11 536576 c:\windows\$NtUninstallKB2419632$\msado15.dll
+ 2011-01-12 08:00 . 2008-04-14 00:11 143360 c:\windows\$NtUninstallKB2419632$\msadco.dll
+ 2011-02-09 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2393802$\spuninst\updspap i.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2393802$\spuninst\spunins t.exe
+ 2011-02-09 08:00 . 2009-02-09 12:10 714752 c:\windows\$NtUninstallKB2393802$\ntdll.dll
+ 2010-10-15 07:08 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2387149$\spuninst\updspap i.dll
+ 2010-10-15 07:08 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2387149$\spuninst\spunins t.exe
+ 2010-10-15 07:08 . 2007-04-03 03:14 981760 c:\windows\$NtUninstallKB2387149$\mfc42u.dll
+ 2010-10-15 07:08 . 2008-04-14 00:11 927504 c:\windows\$NtUninstallKB2387149$\mfc40u.dll
+ 2010-10-15 07:08 . 2004-08-10 11:00 924432 c:\windows\$NtUninstallKB2387149$\mfc40.dll
+ 2010-10-15 07:07 . 2007-07-28 03:11 382840 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\upd spapi.dll
+ 2010-10-15 07:07 . 2007-07-28 03:11 231288 c:\windows\$NtUninstallKB2378111_WM9$\spuninst\spu ninst.exe
+ 2010-10-15 07:00 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2360937$\spuninst\updspap i.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2360937$\spuninst\spunins t.exe
+ 2010-10-15 07:00 . 2010-07-22 15:49 590848 c:\windows\$NtUninstallKB2360937$\rpcrt4.dll
+ 2010-09-16 01:40 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2347290$\spuninst\updspap i.dll
+ 2010-09-16 01:40 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2347290$\spuninst\spunins t.exe
+ 2010-10-15 07:07 . 2010-06-21 15:27 354304 c:\windows\$NtUninstallKB2345886$\srv.sys
+ 2010-10-15 07:07 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2345886$\spuninst\updspap i.dll
+ 2010-10-15 07:07 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2345886$\spuninst\spunins t.exe
+ 2010-12-16 08:07 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2296199$\spuninst\updspap i.dll
+ 2010-12-16 08:07 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2296199$\spuninst\spunins t.exe
+ 2010-12-16 08:07 . 2010-09-01 11:51 285824 c:\windows\$NtUninstallKB2296199$\atmfd.dll
+ 2010-10-15 07:07 . 2009-05-26 09:01 382840 c:\windows\$NtUninstallKB2296011$\spuninst\updspap i.dll
+ 2010-10-15 07:07 . 2009-05-26 09:01 231288 c:\windows\$NtUninstallKB2296011$\spuninst\spunins t.exe
+ 2010-10-15 07:07 . 2008-04-14 00:11 617472 c:\windows\$NtUninstallKB2296011$\comctl32.dll
+ 2010-08-03 07:00 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2286198$\spuninst\updspap i.dll
+ 2010-08-03 07:00 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2286198$\spuninst\spunins t.exe
+ 2010-10-15 07:07 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2279986$\spuninst\updspap i.dll
+ 2010-10-15 07:07 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2279986$\spuninst\spunins t.exe
+ 2010-10-15 07:07 . 2010-04-20 05:30 285696 c:\windows\$NtUninstallKB2279986$\atmfd.dll
+ 2010-09-16 01:42 . 2009-05-26 09:01 382840 c:\windows\$NtUninstallKB2259922$\spuninst\updspap i.dll
+ 2010-09-16 01:42 . 2009-05-26 09:01 231288 c:\windows\$NtUninstallKB2259922$\spuninst\spunins t.exe
+ 2010-07-14 07:05 . 2010-02-22 23:53 382840 c:\windows\$NtUninstallKB2229593$\spuninst\updspap i.dll
+ 2010-07-14 07:05 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2229593$\spuninst\spunins t.exe
+ 2010-07-14 07:05 . 2008-04-14 00:12 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe
+ 2010-08-12 07:04 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2160329$\spuninst\updspap i.dll
+ 2010-08-12 07:04 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2160329$\spuninst\spunins t.exe
+ 2010-09-28 21:30 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2158563$\spuninst\updspap i.dll
+ 2010-09-28 21:30 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2158563$\spuninst\spunins t.exe
+ 2010-09-16 01:36 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2141007$\spuninst\updspap i.dll
+ 2010-09-16 01:36 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2141007$\spuninst\spunins t.exe
+ 2010-09-16 01:36 . 2010-01-29 15:01 691712 c:\windows\$NtUninstallKB2141007$\inetcomm.dll
+ 2010-09-16 01:40 . 2008-04-14 00:12 293376 c:\windows\$NtUninstallKB2121546$\winsrv.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 382840 c:\windows\$NtUninstallKB2121546$\spuninst\updspap i.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 231288 c:\windows\$NtUninstallKB2121546$\spuninst\spunins t.exe
+ 2010-08-12 07:10 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2115168$\spuninst\updspap i.dll
+ 2010-08-12 07:10 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2115168$\spuninst\spunins t.exe
+ 2010-08-12 07:09 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB2079403$\spuninst\updspap i.dll
+ 2010-08-12 07:09 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2079403$\spuninst\spunins t.exe
+ 2010-09-16 01:40 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982802\update\updspapi.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB982802\update\update.exe
+ 2010-09-16 01:40 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB982802\spuninst.exe
+ 2010-07-23 06:13 . 2010-07-23 06:13 590848 c:\windows\$hf_mig$\KB982802\SP3QFE\rpcrt4.dll
+ 2010-08-12 07:01 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982665\update\updspapi.dll
+ 2010-08-12 07:01 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB982665\update\update.exe
+ 2010-08-12 07:01 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB982665\spuninst.exe
+ 2010-08-12 07:10 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982214\update\updspapi.dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB982214\update\update.exe
+ 2010-08-12 07:10 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB982214\spuninst.exe
+ 2010-08-11 17:50 . 2010-06-21 14:18 354304 c:\windows\$hf_mig$\KB982214\SP3QFE\srv.sys
+ 2010-10-15 07:06 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB982132\update\updspapi.dll
+ 2010-10-15 07:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB982132\update\update.exe
+ 2010-10-15 07:06 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB982132\spuninst.exe
+ 2010-08-27 08:01 . 2010-08-27 08:01 119808 c:\windows\$hf_mig$\KB982132\SP3QFE\t2embed.dll
+ 2010-08-12 07:02 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981997\update\updspapi.dll
+ 2010-08-12 07:02 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981997\update\update.exe
+ 2010-08-12 07:02 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981997\spuninst.exe
+ 2010-10-15 07:00 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB981957\update\updspapi.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB981957\update\update.exe
+ 2010-10-15 07:00 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB981957\spuninst.exe
+ 2010-08-12 07:10 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB981852\update\updspapi.dll
+ 2010-08-12 07:10 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB981852\update\update.exe
+ 2010-08-12 07:10 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB981852\spuninst.exe
+ 2010-09-16 01:39 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
+ 2010-09-16 01:39 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981322\update\update.exe
+ 2010-09-16 01:39 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981322\spuninst.exe
+ 2010-04-16 15:29 . 2010-04-16 15:29 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
+ 2010-08-12 07:04 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB980436\update\updspapi.dll
+ 2010-08-12 07:04 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB980436\update\update.exe
+ 2010-08-12 07:04 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB980436\spuninst.exe
+ 2010-06-30 12:23 . 2010-06-30 12:23 149504 c:\windows\$hf_mig$\KB980436\SP3QFE\schannel.dll
+ 2010-10-15 07:05 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979687\update\updspapi.dll
+ 2010-10-15 07:05 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979687\update\update.exe
+ 2010-10-15 07:05 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB979687\spuninst.exe
+ 2010-07-12 13:02 . 2010-07-12 13:02 218112 c:\windows\$hf_mig$\KB979687\SP3QFE\wordpad.exe
+ 2011-03-16 00:25 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971029\update\updspapi.dll
+ 2011-03-16 00:25 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971029\update\update.exe
+ 2011-03-16 00:25 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971029\spuninst.exe
+ 2009-07-27 22:13 . 2009-07-27 22:13 135168 c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2485376\update\updspapi.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2485376\update\update.exe
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2485376\spuninst.exe
+ 2011-01-07 14:09 . 2011-01-07 14:09 290048 c:\windows\$hf_mig$\KB2485376\SP3QFE\atmfd.dll
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2483185\update\updspapi.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2483185\update\update.exe
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2483185\spuninst.exe
+ 2011-01-21 14:42 . 2011-01-21 14:42 439808 c:\windows\$hf_mig$\KB2483185\SP3QFE\shimgvw.dll
+ 2011-02-09 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2482017-IE8\update\updspapi.dll
+ 2011-02-09 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2482017-IE8\update\update.exe
+ 2011-02-09 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2482017-IE8\spuninst.exe
+ 2011-02-09 04:06 . 2010-12-20 23:58 919552 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 206848 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\occache.dll
+ 2011-02-09 04:07 . 2010-12-20 23:58 611840 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mstime.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 602112 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeeds.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 247808 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieproxy.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 184320 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iepeers.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 743424 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedvtool.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 387584 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedkcs32.dll
+ 2011-02-09 04:06 . 2010-12-20 12:48 173568 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ie4uinit.exe
+ 2011-03-09 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2481109\update\updspapi.dll
+ 2011-03-09 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2481109\update\update.exe
+ 2011-03-09 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2481109\spuninst.exe
+ 2011-01-27 11:41 . 2011-01-27 11:41 677888 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstsc.exe
+ 2011-02-02 07:57 . 2011-02-02 07:57 136192 c:\windows\$hf_mig$\KB2481109\SP3QFE\aaclient.dll
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2479628\update\updspapi.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2479628\update\update.exe
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2479628\spuninst.exe
+ 2011-02-09 08:05 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2478971\update\updspapi.dll
+ 2011-02-09 08:05 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2478971\update\update.exe
+ 2011-02-09 08:05 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2478971\spuninst.exe
+ 2010-12-22 12:32 . 2010-12-22 12:32 301568 c:\windows\$hf_mig$\KB2478971\SP3QFE\kerberos.dll
+ 2011-02-09 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2478960\update\updspapi.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2478960\update\update.exe
+ 2011-02-09 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2478960\spuninst.exe
+ 2010-12-20 17:24 . 2010-12-20 17:24 730112 c:\windows\$hf_mig$\KB2478960\SP3QFE\lsasrv.dll
+ 2011-02-09 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2476687\update\updspapi.dll
+ 2011-02-09 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2476687\update\update.exe
+ 2011-02-09 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2476687\spuninst.exe
+ 2010-12-16 08:05 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2467659\update\updspapi.dll
+ 2010-12-16 08:05 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2467659\update\update.exe
+ 2010-12-16 08:05 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2467659\spuninst.exe
+ 2010-12-16 08:06 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2443105\update\updspapi.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2443105\update\update.exe
+ 2010-12-16 08:06 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2443105\spuninst.exe
+ 2010-12-16 08:05 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2440591\update\updspapi.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2440591\update\update.exe
+ 2010-12-16 08:05 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2440591\spuninst.exe
+ 2010-12-16 08:05 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2436673\update\updspapi.dll
+ 2010-12-16 08:05 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2436673\update\update.exe
+ 2010-12-16 08:05 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2436673\spuninst.exe
+ 2010-12-16 08:00 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2423089\update\updspapi.dll
+ 2010-12-16 08:00 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2423089\update\update.exe
+ 2010-12-16 08:00 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2423089\spuninst.exe
+ 2011-01-12 08:00 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2419632\update\updspapi.dll
+ 2011-01-12 08:00 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2419632\update\update.exe
+ 2011-01-12 08:00 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2419632\spuninst.exe
+ 2010-11-09 14:50 . 2010-11-09 14:50 253952 c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 102400 c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 200704 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 180224 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 565248 c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 143360 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll
+ 2010-12-16 08:06 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2416400-IE8\update\updspapi.dll
+ 2010-12-16 08:06 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2416400-IE8\update\update.exe
+ 2010-12-16 08:06 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2416400-IE8\spuninst.exe
+ 2010-12-16 03:47 . 2010-11-06 00:27 919552 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 206848 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\occache.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 611840 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mstime.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 602112 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeeds.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 247808 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieproxy.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 184320 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iepeers.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 743424 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedvtool.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 387584 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedkcs32.dll
+ 2010-12-16 03:47 . 2010-11-03 12:01 173568 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ie4uinit.exe
+ 2011-02-09 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2393802\update\updspapi.dll
+ 2011-02-09 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2393802\update\update.exe
+ 2011-02-09 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2393802\spuninst.exe
+ 2011-02-09 04:06 . 2010-12-09 15:15 718336 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntdll.dll
+ 2010-10-15 07:08 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2387149\update\updspapi.dll
+ 2010-10-15 07:08 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2387149\update\update.exe
+ 2010-10-15 07:08 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2387149\spuninst.exe
+ 2010-10-14 21:05 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42u.dll
+ 2010-10-14 21:05 . 2010-09-18 07:18 974848 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc42.dll
+ 2010-10-14 21:05 . 2010-09-18 07:18 953856 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
+ 2010-10-14 21:05 . 2010-09-18 07:18 954368 c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2360937\update\updspapi.dll
+ 2010-10-15 07:00 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2360937\update\update.exe
+ 2010-10-15 07:00 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2360937\spuninst.exe
+ 2010-10-14 21:04 . 2010-08-16 08:43 590848 c:\windows\$hf_mig$\KB2360937\SP3QFE\rpcrt4.dll
+ 2010-10-15 07:04 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2360131-IE8\update\updspapi.dll
+ 2010-10-15 07:04 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB2360131-IE8\update\update.exe
+ 2010-10-15 07:04 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB2360131-IE8\spuninst.exe
+ 2010-10-14 21:04 . 2010-09-10 05:57 919552 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 206848 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\occache.dll
+ 2010-10-14 21:05 . 2010-09-10 05:57 611840 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mstime.dll
+ 2010-10-14 21:05 . 2010-09-10 05:57 602112 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\msfeeds.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 247808 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieproxy.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 184320 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iepeers.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 743424 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedvtool.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 387584 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iedkcs32.dll
+ 2010-10-14 21:04 . 2010-09-08 15:48 173056 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ie4uinit.exe
+ 2010-09-16 01:40 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
+ 2010-09-16 01:40 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2347290\update\update.exe
+ 2010-09-16 01:40 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2347290\spuninst.exe
+ 2010-10-15 07:07 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2345886\update\updspapi.dll
+ 2010-10-15 07:07 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2345886\update\update.exe
+ 2010-10-15 07:07 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2345886\spuninst.exe
+ 2010-08-26 13:37 . 2010-08-26 13:37 357248 c:\windows\$hf_mig$\KB2345886\SP3QFE\srv.sys
+ 2010-12-16 08:07 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2296199\update\updspapi.dll
+ 2010-12-16 08:07 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2296199\update\update.exe
+ 2010-12-16 08:07 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2296199\spuninst.exe
+ 2010-10-28 13:08 . 2010-10-28 13:08 290048 c:\windows\$hf_mig$\KB2296199\SP3QFE\atmfd.dll
+ 2010-08-03 07:00 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2286198\update\updspapi.dll
+ 2010-08-03 07:00 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2286198\update\update.exe
+ 2010-08-03 07:00 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2286198\spuninst.exe
+ 2010-10-15 07:07 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2279986\update\updspapi.dll
+ 2010-10-15 07:07 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2279986\update\update.exe
+ 2010-10-15 07:07 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2279986\spuninst.exe
+ 2010-09-01 11:48 . 2010-09-01 11:48 285824 c:\windows\$hf_mig$\KB2279986\SP3QFE\atmfd.dll
+ 2010-09-16 01:42 . 2009-05-26 09:01 382840 c:\windows\$hf_mig$\KB2259922\update\updspapi.dll
+ 2010-09-16 01:42 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB2259922\update\update.exe
+ 2010-09-16 01:42 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB2259922\spuninst.exe
+ 2010-07-14 07:05 . 2010-02-22 23:53 382840 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
+ 2010-07-14 07:05 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2229593\update\update.exe
+ 2010-07-14 07:05 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2229593\spuninst.exe
+ 2010-07-14 04:51 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
+ 2010-08-12 07:05 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2183461-IE8\update\updspapi.dll
+ 2010-08-12 07:05 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB2183461-IE8\update\update.exe
+ 2010-08-12 07:05 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB2183461-IE8\spuninst.exe
+ 2010-08-11 17:50 . 2010-06-24 12:24 919040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 206848 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\occache.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 611840 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mstime.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 599040 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\msfeeds.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 247808 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieproxy.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 184320 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iepeers.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 743424 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedvtool.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 387584 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iedkcs32.dll
+ 2010-08-11 17:50 . 2010-06-23 11:30 173056 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ie4uinit.exe
+ 2010-08-12 07:04 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2160329\update\updspapi.dll
+ 2010-08-12 07:04 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2160329\update\update.exe
+ 2010-08-12 07:04 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2160329\spuninst.exe
+ 2010-09-16 01:36 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
+ 2010-09-16 01:36 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2141007\update\update.exe
+ 2010-09-16 01:36 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2141007\spuninst.exe
+ 2010-06-09 07:41 . 2010-06-09 07:41 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
+ 2010-09-16 01:40 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2121546\update\update.exe
+ 2010-09-16 01:40 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2121546\spuninst.exe
+ 2010-06-18 17:43 . 2010-06-18 17:43 293376 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
+ 2010-08-12 07:10 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll
+ 2010-08-12 07:10 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2115168\update\update.exe
+ 2010-08-12 07:10 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2115168\spuninst.exe
+ 2010-08-12 07:09 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2079403\update\updspapi.dll
+ 2010-08-12 07:09 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2079403\update\update.exe
+ 2010-08-12 07:09 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2079403\spuninst.exe
+ 2011-04-13 04:57 . 2010-10-23 00:51 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll
+ 2010-10-14 21:05 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
+ 2006-03-23 16:44 . 2006-03-23 16:44 1079808 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80u.dll
+ 2006-03-23 16:44 . 2006-03-23 16:44 1093632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_decbdf0c\mfc80.dll
+ 2011-01-11 02:50 . 2011-01-11 02:50 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfc80u.dll
+ 2011-01-11 02:50 . 2011-01-11 02:50 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.5592_x-ww_e87e0bcd\mfc80.dll
+ 2010-01-17 15:35 . 2010-09-28 20:44 4184352 c:\windows\system32\usbaaplrc.dll
+ 2006-03-18 11:09 . 2011-02-22 23:06 1210880 c:\windows\system32\urlmon.dll
+ 2004-08-10 11:00 . 2011-01-21 14:44 8462336 c:\windows\system32\shell32.dll
+ 2010-11-20 13:53 . 2010-04-20 00:47 3062048 c:\windows\system32\ReinstallBackups\0019\DriverFi les\usbaaplrc.dll
+ 2004-08-10 11:00 . 2010-07-16 12:05 1288192 c:\windows\system32\ole32.dll
+ 2005-03-30 01:21 . 2010-12-09 13:42 2148864 c:\windows\system32\ntoskrnl.exe
+ 2005-03-30 01:01 . 2010-12-09 13:07 2027008 c:\windows\system32\ntkrnlpa.exe
- 2004-08-10 11:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 2004-08-10 11:00 . 2010-06-14 07:41 1172480 c:\windows\system32\msxml3.dll
+ 2006-03-23 17:32 . 2011-02-22 23:06 5962240 c:\windows\system32\mshtml.dll
+ 2011-02-02 13:35 . 2011-02-02 13:35 1495040 c:\windows\system32\Macromed\Shockwave 10\dirapiX.dll
+ 2009-03-08 09:32 . 2011-02-22 23:06 1991680 c:\windows\system32\iertutil.dll
+ 2010-01-13 07:44 . 2011-04-13 07:55 1622560 c:\windows\system32\FNTCACHE.DAT
+ 2011-02-19 21:38 . 2010-09-28 20:44 4184352 c:\windows\system32\DRVSTORE\usbaapl_A4C70B47551C2 629A145AE032C4D1823570ADB7B\usbaaplrc.dll
+ 2011-02-19 21:38 . 2010-04-20 00:29 1461992 c:\windows\system32\DRVSTORE\netaapl_8A27A03003759 CB01567E831096473C330131D64\wdfcoinstaller01009.dl l
+ 2009-08-14 13:21 . 2011-03-03 13:21 1857920 c:\windows\system32\dllcache\win32k.sys
+ 2009-10-29 05:38 . 2011-02-22 23:06 1210880 c:\windows\system32\dllcache\urlmon.dll
+ 2008-06-17 19:02 . 2011-01-21 14:44 8462336 c:\windows\system32\dllcache\shell32.dll
+ 2010-07-16 12:05 . 2010-07-16 12:05 1288192 c:\windows\system32\dllcache\ole32.dll
+ 2010-01-13 15:42 . 2010-12-09 13:38 2192768 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2010-01-13 15:42 . 2010-12-09 13:07 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-02-08 00:02 . 2010-12-09 13:07 2069376 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2010-01-13 15:42 . 2010-12-09 13:42 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2004-08-10 11:00 . 2010-06-14 07:41 1172480 c:\windows\system32\dllcache\msxml3.dll
- 2004-08-10 11:00 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2009-10-29 19:08 . 2011-02-22 23:06 5962240 c:\windows\system32\dllcache\mshtml.dll
+ 2010-03-11 04:44 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
- 2010-03-11 04:44 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2011-02-02 07:58 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
+ 2010-01-15 03:56 . 2011-02-22 23:06 1991680 c:\windows\system32\dllcache\iertutil.dll
+ 2011-03-30 13:27 . 2011-03-30 13:27 1019904 c:\windows\system32\Adobe\Shockwave 11\iml32.dll
+ 2011-03-24 10:34 . 2011-03-24 10:34 2314416 c:\windows\system32\Adobe\Shockwave 11\gt.exe
+ 2011-03-30 13:29 . 2011-03-30 13:29 1802240 c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
+ 2010-09-22 13:44 . 2010-09-22 13:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Web.dll
- 2010-03-23 09:32 . 2010-03-23 09:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\Syst em.Web.dll
+ 2011-01-18 08:39 . 2011-01-18 08:39 5813072 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rwks.dll
+ 2011-01-18 08:39 . 2011-01-18 08:39 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\msco rlib.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Web.dll
+ 2010-09-23 19:55 . 2010-09-23 19:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.Web.dll
+ 2010-09-23 19:55 . 2010-09-23 19:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Syste m.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor wks.dll
- 2010-03-31 18:50 . 2010-03-31 18:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor wks.dll
+ 2010-09-23 06:25 . 2010-09-23 06:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor svr.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor lib.dll
+ 2010-09-23 19:55 . 2010-09-23 19:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscor lib.dll
+ 2010-10-21 23:10 . 2010-10-21 23:10 3995136 c:\windows\Installer\f3ab30.msp
+ 2010-11-21 04:35 . 2010-11-21 04:35 3359744 c:\windows\Installer\f3ab11.msp
+ 2010-11-08 07:14 . 2010-11-08 07:14 3402752 c:\windows\Installer\e995f.msp
+ 2010-12-16 03:55 . 2010-12-16 03:55 3940864 c:\windows\Installer\e994c.msi
+ 2011-03-18 00:05 . 2011-03-18 00:05 4989440 c:\windows\Installer\d16764.msp
+ 2011-01-11 21:49 . 2011-01-11 21:49 9003008 c:\windows\Installer\d16749.msp
+ 2010-11-21 03:32 . 2010-11-21 03:32 4165120 c:\windows\Installer\d16728.msp
+ 2011-03-18 00:01 . 2011-03-18 00:01 9563648 c:\windows\Installer\d16701.msp
+ 2011-01-11 21:50 . 2011-01-11 21:50 8177152 c:\windows\Installer\d166e6.msp
+ 2010-11-21 03:33 . 2010-11-21 03:33 1980928 c:\windows\Installer\d166cb.msp
+ 2010-12-01 22:15 . 2010-12-01 22:15 1164288 c:\windows\Installer\ccaecac.msi
+ 2010-09-23 11:39 . 2010-09-23 11:39 4265472 c:\windows\Installer\bb63dec.msp
+ 2010-12-17 05:17 . 2010-12-17 05:17 3362304 c:\windows\Installer\b07b907.msp
+ 2011-02-16 18:54 . 2011-02-16 18:54 4992000 c:\windows\Installer\901ebd80.msp
+ 2011-01-11 22:53 . 2011-01-11 22:53 1763328 c:\windows\Installer\901ebd65.msp
+ 2010-05-20 23:57 . 2010-05-20 23:57 4989952 c:\windows\Installer\702af77.msp
+ 2010-05-20 23:57 . 2010-05-20 23:57 5907456 c:\windows\Installer\702af76.msp
+ 2010-06-11 15:03 . 2010-06-11 15:03 5021184 c:\windows\Installer\702af52.msp
+ 2011-01-11 22:52 . 2011-01-11 22:52 3360768 c:\windows\Installer\5ee72c1.msp
+ 2010-11-20 13:50 . 2010-11-20 13:50 3140608 c:\windows\Installer\54edd108.msi
+ 2010-07-26 20:00 . 2010-07-26 20:00 5010944 c:\windows\Installer\3aa84aa.msp
+ 2010-07-11 00:14 . 2010-07-11 00:14 2850816 c:\windows\Installer\3aa8485.msp
+ 2011-02-19 21:43 . 2011-02-19 21:43 6596096 c:\windows\Installer\36586348.msi
+ 2011-02-19 21:38 . 2011-02-19 21:38 3085312 c:\windows\Installer\36585aa5.msi
+ 2010-09-17 11:04 . 2010-09-17 11:04 9401856 c:\windows\Installer\25589f88.msp
+ 2010-10-21 23:12 . 2010-10-21 23:12 3359744 c:\windows\Installer\25589f6d.msp
+ 2010-10-07 23:43 . 2010-10-07 23:43 1980416 c:\windows\Installer\25589f52.msp
+ 2010-10-22 11:54 . 2010-10-22 11:54 1984000 c:\windows\Installer\250390e5.msi
+ 2010-12-25 22:13 . 2010-12-25 22:13 1680384 c:\windows\Installer\1927f70b.msi
+ 2010-12-25 22:12 . 2010-12-25 22:12 1710592 c:\windows\Installer\1927f702.msi
+ 2010-12-25 22:12 . 2010-12-25 22:12 9472000 c:\windows\Installer\1927f6e8.msi
+ 2010-08-13 22:01 . 2010-08-13 22:01 8993280 c:\windows\Installer\16fff674.msp
+ 2010-08-13 21:59 . 2010-08-13 21:59 8182272 c:\windows\Installer\16fff659.msp
+ 2010-08-13 22:02 . 2010-08-13 22:02 2545664 c:\windows\Installer\16fff63e.msp
+ 2010-08-13 22:00 . 2010-08-13 22:00 9404928 c:\windows\Installer\16fff623.msp
+ 2010-09-17 10:06 . 2010-09-17 10:06 3355648 c:\windows\Installer\16fff607.msp
+ 2010-08-19 21:57 . 2010-08-19 21:57 3395584 c:\windows\Installer\14f8be2c.msp
- 2010-01-15 02:45 . 2010-06-09 13:00 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.CA74C6A7.8A27.4943.BD71.8911BD2 8976B.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.CA74C6A7.8A27.4943.BD71.8911BD2 8976B.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.A0C7BCDF.1276.47E8.9BA2.2155003 89857.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\Icon.A0C7BCDF.1276.47E8.9BA2.2155003 89857.exe
+ 2010-01-15 02:45 . 2011-04-13 07:37 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2010-01-15 02:45 . 2010-06-09 13:00 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-09-22 23:05 . 2010-09-22 23:05 2405784 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\rt3d.dll
+ 2010-09-16 08:08 . 2010-09-16 08:08 6210560 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\authplay.dll
+ 2010-06-19 22:51 . 2010-06-19 22:51 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\AGM.dll
+ 2008-11-10 07:41 . 2008-11-10 07:41 2014584 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\PPTVIEW.EXE
+ 2009-02-14 11:03 . 2009-02-14 11:03 3070832 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\GROOVEDOCUMENTS HARETOOL.DLL
+ 2011-04-13 07:24 . 2010-12-20 23:59 1210880 c:\windows\ie8updates\KB2497640-IE8\urlmon.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 5961216 c:\windows\ie8updates\KB2497640-IE8\mshtml.dll
+ 2011-04-13 07:24 . 2010-12-20 23:59 1991680 c:\windows\ie8updates\KB2497640-IE8\iertutil.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 1210880 c:\windows\ie8updates\KB2482017-IE8\urlmon.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 5959168 c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 1991680 c:\windows\ie8updates\KB2482017-IE8\iertutil.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 1210880 c:\windows\ie8updates\KB2416400-IE8\urlmon.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 5957120 c:\windows\ie8updates\KB2416400-IE8\mshtml.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 1986560 c:\windows\ie8updates\KB2416400-IE8\iertutil.dll
+ 2010-10-15 07:04 . 2010-06-24 12:22 1210368 c:\windows\ie8updates\KB2360131-IE8\urlmon.dll
+ 2010-10-15 07:04 . 2010-06-24 12:22 5951488 c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
+ 2010-10-15 07:04 . 2010-06-24 12:21 1986560 c:\windows\ie8updates\KB2360131-IE8\iertutil.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 1209344 c:\windows\ie8updates\KB2183461-IE8\urlmon.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 5950976 c:\windows\ie8updates\KB2183461-IE8\mshtml.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 1985536 c:\windows\ie8updates\KB2183461-IE8\iertutil.dll
+ 2010-01-13 15:42 . 2010-12-09 13:38 2192768 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2010-01-13 15:42 . 2010-12-09 13:07 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-02-08 00:02 . 2010-12-09 13:07 2069376 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2010-01-13 15:42 . 2010-12-09 13:42 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2010-10-08 07:01 . 2010-10-08 07:01 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System \1.0.5000.0__b77a5c561934e089_8a64f13c\System.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System \1.0.5000.0__b77a5c561934e089_838e1d36\System.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System .Xml\1.0.5000.0__b77a5c561934e089_ab7cdac6\System. Xml.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System .Xml\1.0.5000.0__b77a5c561934e089_12d27e76\System. Xml.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System .Windows.Forms\1.0.5000.0__b77a5c561934e089_afc7b8 9d\System.Windows.Forms.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System .Windows.Forms\1.0.5000.0__b77a5c561934e089_45bc1e 79\System.Windows.Forms.dll
+ 2010-10-08 07:02 . 2010-10-08 07:02 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System .Drawing\1.0.5000.0__b03f5f7f11d50a3a_105012dd\Sys tem.Drawing.dll
+ 2010-10-08 07:02 . 2010-10-08 07:02 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System .Design\1.0.5000.0__b03f5f7f11d50a3a_bbb36db4\Syst em.Design.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System .Design\1.0.5000.0__b03f5f7f11d50a3a_64166990\Syst em.Design.dll
+ 2010-10-08 07:02 . 2010-10-08 07:02 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorl ib\1.0.5000.0__b77a5c561934e089_ff50fdce\mscorlib. dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorl ib\1.0.5000.0__b77a5c561934e089_53f59b80\mscorlib. dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\f0d8c0a0781bbdb5514914d6ec0f3a0c \WindowsLive.Writer.PostEditor.ni.dll
+ 2011-04-13 07:46 . 2011-04-13 07:46 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\8838a946789a32502371924d135fabbb \WindowsLive.Writer.CoreServices.ni.dll
+ 2011-04-13 07:47 . 2011-04-13 07:47 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\67355ef89c82ff3bb9a5430fee9b1f14 \WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2011-04-13 07:25 . 2011-04-13 07:25 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsBase\76e431fde1b252312b331f7108259fda\WindowsB ase.ni.dll
+ 2011-04-13 07:37 . 2011-04-13 07:37 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIA utomationClients#\9e022c95e79f2b6f383a501ad99f08a9 \UIAutomationClientsideProviders.ni.dll
+ 2011-04-13 07:24 . 2011-04-13 07:24 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem\f02cf6430a9fc77908a74ab6925cb73c\System.ni.dll
+ 2011-04-13 07:36 . 2011-04-13 07:36 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Xml\b06e49ed8cbe07dbb90e313fa634b27b\System.Xm l.ni.dll
+ 2011-04-13 08:00 . 2011-04-13 08:00 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.WorkflowServ#\6346221cecf631e5c0b754d842aad102 \System.WorkflowServices.ni.dll
+ 2011-04-13 08:00 . 2011-04-13 08:00 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Run#\1fbcd203ff8d77d561df8bf806417ab6 \System.Workflow.Runtime.ni.dll
+ 2011-04-13 08:00 . 2011-04-13 08:00 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Com#\efbaf3696c44fd7d4b3cd925e0437b36 \System.Workflow.ComponentModel.ni.dll
+ 2011-04-13 08:00 . 2011-04-13 08:00 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Workflow.Act#\52a9bc5dd1fa497af7c7f4600bd8e6d1 \System.Workflow.Activities.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Services\f5ebeeb0a8aaba9db15ec3df591339ba\ System.Web.Services.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Mobile\92d6b75e3b63b528d4069bf4ee01983a\Sy stem.Web.Mobile.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web.Extensio#\02d53154634c8000382942e0f43ead41 \System.Web.Extensions.ni.dll
+ 2011-04-13 07:35 . 2011-04-13 07:35 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Speech\dd128c8e21e7fa14c12b71df9892d046\System .Speech.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel#\8b0bb430bb6af96c18b43e3c54cfafe8 \System.ServiceModel.Web.ni.dll
+ 2011-04-13 07:41 . 2011-04-13 07:41 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\85090bd451617e204ffda625b8d9fc30 \System.Runtime.Serialization.ni.dll
+ 2011-04-13 07:35 . 2011-04-13 07:35 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Printing\85a7a7aace114e78fc6c9b219bcd5551\Syst em.Printing.ni.dll
+ 2011-04-13 07:40 . 2011-04-13 07:40 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.IdentityModel\86c59378e9a43bf101a10ad452a4bb8e \System.IdentityModel.ni.dll
+ 2011-04-13 07:34 . 2011-04-13 07:34 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Drawing\d912066086a59f09424c7c69f95e2c55\Syste m.Drawing.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.DirectorySer#\c05d9332116964104c721e97f7ce1058 \System.DirectoryServices.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Deployment\0118c0c73ea5c77bda7b10b188102ab6\Sy stem.Deployment.ni.dll
+ 2011-04-13 07:32 . 2011-04-13 07:32 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data\1337829e3df6888464a17aab78bb9b8f\System.D ata.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.SqlXml\ba3ca7a93e227c32ce7b50d0a7ba935f\S ystem.Data.SqlXml.ni.dll
+ 2011-04-13 07:52 . 2011-04-13 07:52 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Services\2de52be5da96059651b5bec800cb4605 \System.Data.Services.ni.dll
+ 2011-04-13 07:45 . 2011-04-13 07:45 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.OracleC#\5018d7d39ee99a18c2c17d68837a7a6d \System.Data.OracleClient.ni.dll
+ 2011-04-13 07:33 . 2011-04-13 07:33 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Linq\11f1306e0e311a0d0cbd139fb2fa4c36\Sys tem.Data.Linq.ni.dll
+ 2011-04-13 07:52 . 2011-04-13 07:52 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.Entity\c91e83e85c030bc914ecc302fa9b2c60\S ystem.Data.Entity.ni.dll
+ 2011-04-13 07:31 . 2011-04-13 07:31 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Core\684fe21837d3cf3e5935bbd0a7f53141\System.C ore.ni.dll
+ 2011-04-13 07:31 . 2011-04-13 07:31 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\Rea chFramework\12efddabe6fe35be21246c88ed9bf8ab\Reach Framework.ni.dll
+ 2011-04-13 07:30 . 2011-04-13 07:30 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationUI\257c9327ba9cc5cd87f58de224aa2e0d\Prese ntationUI.ni.dll
+ 2011-04-13 07:24 . 2011-04-13 07:24 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationBuildTa#\b117bf63daa7e587f1bb2d975dccb4af \PresentationBuildTasks.ni.dll
+ 2011-04-13 07:50 . 2011-04-13 07:50 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualBas#\269103939243ec6929739c8b9a645c0d \Microsoft.VisualBasic.ni.dll
+ 2011-04-13 07:48 . 2011-04-13 07:48 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Transacti#\bf7bd26d2828e35156814018939ce4f6 \Microsoft.Transactions.Bridge.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 1217024 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\fbbc7838b2cbef5f05bc946369defdf9 \Microsoft.MapPoint.Data.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 1524224 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\b9bc8fd1dbda7d3dc5152b4820abcb57 \Microsoft.MapPoint.GraphicsAPI.ni.dll
+ 2011-04-13 07:44 . 2011-04-13 07:44 1524736 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\ad42cb3cecf8839ce7fc136b595cbeb0 \Microsoft.MapPoint.Rendering3D.WorldMemoryDataSou rce.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 2766336 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\83c0ef68152e789d0d0bc65e9be22809 \Microsoft.MapPoint.Graphics3D.ni.dll
+ 2011-04-13 07:42 . 2011-04-13 07:42 4094976 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\37c6d2f333f5747afc0863b337b3ddbe \Microsoft.MapPoint.Rendering3D.ni.dll
+ 2011-04-13 07:43 . 2011-04-13 07:43 1949184 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.MapPoint.#\325c56209dd732ff96dd6df1050aef03 \Microsoft.MapPoint.Modeling.ni.dll
+ 2011-04-13 07:59 . 2011-04-13 07:59 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.JScript\6594c17d7e112b0507b701d5b8a67bba\Mi crosoft.JScript.ni.dll
+ 2011-04-13 07:50 . 2011-04-13 07:50 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\f5eb1e42ccd0f67f7496b94a31949cd0 \Microsoft.Build.Tasks.ni.dll
+ 2011-04-13 07:50 . 2011-04-13 07:50 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Tas#\cc7f05675a5cd8014222be1483d6beaf \Microsoft.Build.Tasks.v3.5.ni.dll
+ 2011-04-13 07:49 . 2011-04-13 07:49 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Build.Eng#\41cf95aa4ff5765b515d3252abc6353b \Microsoft.Build.Engine.ni.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5 c561934e089\System.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5 c561934e089\System.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b 77a5c561934e089\System.XML.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b 77a5c561934e089\System.XML.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\ 2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\ 2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-10-08 07:04 . 2010-10-08 07:04 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions \3.5.0.0__31bf3856ad364e35\System.Web.Extensions.d ll
- 2010-01-16 04:49 . 2010-01-16 04:49 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions \3.5.0.0__31bf3856ad364e35\System.Web.Extensions.d ll
+ 2011-04-13 07:20 . 2011-04-13 07:20 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0 __b03f5f7f11d50a3a\System.Design.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0 __b03f5f7f11d50a3a\System.Design.dll
+ 2011-04-13 07:20 . 2011-04-13 07:20 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03 f5f7f11d50a3a\System.Web.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03 f5f7f11d50a3a\System.Web.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b7 7a5c561934e089\System.Data.dll
- 2010-06-24 07:02 . 2010-06-24 07:02 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b7 7a5c561934e089\System.Data.dll
+ 2011-04-13 07:21 . 2011-04-13 07:21 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5 c561934e089\mscorlib.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c5 61934e089\System.dll
- 2010-06-09 13:01 . 2010-06-09 13:01 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c5 61934e089\System.dll
- 2010-06-09 13:01 . 2010-06-09 13:01 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03 f5f7f11d50a3a\System.Web.dll
+ 2010-10-08 07:01 . 2010-10-08 07:01 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03 f5f7f11d50a3a\System.Web.dll
+ 2010-08-12 07:02 . 2009-10-23 15:28 3558912 c:\windows\$NtUninstallKB981997$\moviemk.exe
+ 2010-10-15 07:00 . 2010-06-23 13:44 1851904 c:\windows\$NtUninstallKB981957$\win32k.sys
+ 2010-08-12 07:10 . 2010-02-16 14:08 2146304 c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
+ 2010-08-12 07:10 . 2010-02-16 13:25 2024448 c:\windows\$NtUninstallKB981852$\ntkrpamp.exe
+ 2010-08-12 07:10 . 2010-02-16 13:25 2024448 c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
+ 2010-08-12 07:10 . 2010-02-16 14:08 2146304 c:\windows\$NtUninstallKB981852$\ntkrnlmp.exe
+ 2010-10-15 07:05 . 2008-04-14 00:12 1287168 c:\windows\$NtUninstallKB979687$\ole32.dll
+ 2011-02-09 08:05 . 2010-07-27 06:30 8462336 c:\windows\$NtUninstallKB2483185$\shell32.dll
+ 2011-03-09 08:02 . 2009-06-10 14:19 2066432 c:\windows\$NtUninstallKB2481109$\mstscax.dll
+ 2011-02-09 08:05 . 2010-10-26 13:25 1853312 c:\windows\$NtUninstallKB2479628$\win32k.sys
+ 2010-12-16 08:03 . 2010-04-03 10:43 1560064 c:\windows\$NtUninstallKB2447961_WM9L$\wmenceng.dl l
+ 2010-12-16 08:05 . 2010-08-31 13:42 1852800 c:\windows\$NtUninstallKB2436673$\win32k.sys
+ 2011-02-09 08:00 . 2010-04-27 13:59 2146304 c:\windows\$NtUninstallKB2393802$\ntoskrnl.exe
+ 2011-02-09 08:00 . 2010-04-27 13:05 2024448 c:\windows\$NtUninstallKB2393802$\ntkrpamp.exe
+ 2011-02-09 08:00 . 2010-04-27 13:05 2024448 c:\windows\$NtUninstallKB2393802$\ntkrnlpa.exe
+ 2011-02-09 08:00 . 2010-04-27 13:59 2146304 c:\windows\$NtUninstallKB2393802$\ntkrnlmp.exe
+ 2010-10-15 07:08 . 2008-04-14 00:11 1028096 c:\windows\$NtUninstallKB2387149$\mfc42.dll
+ 2010-08-03 07:00 . 2008-06-17 19:02 8461312 c:\windows\$NtUninstallKB2286198$\shell32.dll
+ 2010-08-12 07:04 . 2010-05-02 05:22 1851264 c:\windows\$NtUninstallKB2160329$\win32k.sys
+ 2010-08-12 07:09 . 2009-07-31 04:35 1172480 c:\windows\$NtUninstallKB2079403$\msxml3.dll
+ 2010-08-11 17:49 . 2010-06-18 13:43 3558912 c:\windows\$hf_mig$\KB981997\SP3QFE\moviemk.exe
+ 2010-08-31 13:38 . 2010-08-31 13:38 1861888 c:\windows\$hf_mig$\KB981957\SP3QFE\win32k.sys
+ 2010-08-11 17:50 . 2010-04-27 13:50 2190080 c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
+ 2010-08-11 17:50 . 2010-04-27 13:14 2024448 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrpamp.exe
+ 2010-04-28 11:14 . 2010-04-28 11:14 2066944 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
+ 2010-08-11 17:50 . 2010-04-27 13:54 2146304 c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlmp.exe
+ 2010-07-16 12:04 . 2010-07-16 12:04 1289216 c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
+ 2009-07-27 22:13 . 2009-07-27 22:13 8462848 c:\windows\$hf_mig$\KB971029\SP3QFE\shell32.dll
+ 2011-01-21 14:42 . 2011-01-21 14:42 8463360 c:\windows\$hf_mig$\KB2483185\SP3QFE\shell32.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 1211904 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\urlmon.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 5962240 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 1992192 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iertutil.dll
+ 2011-02-02 07:57 . 2011-02-02 07:57 2069504 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstscx.dll
+ 2010-12-31 13:14 . 2010-12-31 13:14 1864064 c:\windows\$hf_mig$\KB2479628\SP3QFE\win32k.sys
+ 2010-10-26 13:27 . 2010-10-26 13:27 1862272 c:\windows\$hf_mig$\KB2436673\SP3QFE\win32k.sys
+ 2010-12-16 03:47 . 2010-11-06 00:27 1211904 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\urlmon.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 5960704 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
+ 2010-12-16 03:47 . 2010-11-06 00:27 1992192 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iertutil.dll
+ 2011-02-09 04:06 . 2010-12-09 13:43 2192768 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
+ 2011-02-09 04:06 . 2010-12-09 13:09 2027008 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrpamp.exe
+ 2010-12-09 23:39 . 2010-12-09 23:39 2069376 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
+ 2011-02-09 04:06 . 2010-12-09 13:47 2148864 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlmp.exe
+ 2010-10-14 21:04 . 2010-09-10 05:57 1211904 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\urlmon.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 5958656 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll
+ 2010-10-14 21:04 . 2010-09-10 05:57 1987072 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\iertutil.dll
+ 2010-07-27 06:28 . 2010-07-27 06:28 8463360 c:\windows\$hf_mig$\KB2286198\SP3QFE\shell32.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 1211904 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\urlmon.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 5954560 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 1987072 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\iertutil.dll
+ 2010-06-24 02:14 . 2010-06-24 02:14 1861120 c:\windows\$hf_mig$\KB2160329\SP3QFE\win32k.sys
+ 2010-06-14 07:39 . 2010-06-14 07:39 1172480 c:\windows\$hf_mig$\KB2079403\SP3QFE\msxml3.dll
+ 2004-08-10 11:00 . 2010-08-26 03:36 10841088 c:\windows\system32\wmp.dll
- 2004-08-10 11:00 . 2009-07-14 04:43 10841088 c:\windows\system32\wmp.dll
+ 2010-01-15 03:57 . 2011-04-13 07:06 39828936 c:\windows\system32\MRT.exe
+ 2009-03-08 09:39 . 2011-02-22 23:06 11080704 c:\windows\system32\ieframe.dll
+ 2004-08-10 11:00 . 2010-08-26 03:36 10841088 c:\windows\system32\dllcache\wmp.dll
- 2004-08-10 11:00 . 2009-07-14 04:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2010-01-15 03:56 . 2011-02-22 23:06 11080704 c:\windows\system32\dllcache\ieframe.dll
+ 2010-09-24 18:08 . 2010-09-24 18:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updat es\M2416447\M2416447Uninstall.msp
+ 2010-10-09 03:07 . 2010-10-09 03:07 11559424 c:\windows\Installer\f3aadb.msp
+ 2011-02-12 00:47 . 2011-02-12 00:47 12028928 c:\windows\Installer\d1670c.msp
+ 2011-02-24 19:15 . 2011-02-24 19:15 11551232 c:\windows\Installer\d166b0.msp
+ 2010-09-24 11:08 . 2010-09-24 11:08 17518080 c:\windows\Installer\bb63de3.msp
+ 2010-12-21 18:06 . 2010-12-21 18:06 11570688 c:\windows\Installer\b07b8ec.msp
+ 2010-09-28 21:30 . 2010-09-28 21:30 20303872 c:\windows\Installer\983042b.msp
+ 2011-03-08 08:00 . 2011-03-08 08:00 20308992 c:\windows\Installer\8af85f1f.msp
+ 2010-05-20 23:58 . 2010-05-20 23:58 12114432 c:\windows\Installer\702af37.msp
+ 2010-09-08 07:00 . 2010-09-08 07:00 20303872 c:\windows\Installer\5117eb76.msp
+ 2011-03-13 01:02 . 2011-03-13 01:02 15139328 c:\windows\Installer\3bdf7c50.msp
+ 2010-05-19 17:08 . 2010-05-19 17:08 11408896 c:\windows\Installer\3aa848f.msp
+ 2010-07-11 00:06 . 2010-07-11 00:06 10120192 c:\windows\Installer\3aa846a.msp
+ 2011-01-06 08:00 . 2011-01-06 08:00 20304384 c:\windows\Installer\2cdfa4b4.msp
+ 2010-07-23 05:04 . 2010-07-23 05:04 11395072 c:\windows\Installer\14f8be11.msp
+ 2011-01-31 10:45 . 2011-01-31 10:45 11135488 c:\windows\Installer\126ff2d6.msp
+ 2010-09-23 08:03 . 2010-09-23 08:03 20460984 c:\windows\Installer\$PatchCache$\Managed\68AB67CA 7DA73301B7449A0400000010\9.4.0\AcroRd32.dll
+ 2009-03-06 07:37 . 2009-03-06 07:37 10222432 c:\windows\Installer\$PatchCache$\Managed\00002109 030000000000000000F01FEC\12.0.6425\MSACCESS.EXE
+ 2011-04-13 07:24 . 2010-12-21 10:29 11080704 c:\windows\ie8updates\KB2497640-IE8\ieframe.dll
+ 2011-02-09 08:02 . 2010-11-06 00:26 11080704 c:\windows\ie8updates\KB2482017-IE8\ieframe.dll
+ 2010-12-16 08:06 . 2010-09-10 05:58 11080192 c:\windows\ie8updates\KB2416400-IE8\ieframe.dll
+ 2010-10-15 07:04 . 2010-06-24 21:51 11077120 c:\windows\ie8updates\KB2360131-IE8\ieframe.dll
+ 2010-08-12 07:05 . 2010-05-06 10:41 11076096 c:\windows\ie8updates\KB2183461-IE8\ieframe.dll
+ 2011-04-13 07:36 . 2011-04-13 07:36 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Windows.Forms\ed2bf0d86229128c194a872f70fe15ee \System.Windows.Forms.ni.dll
+ 2011-04-13 07:44 . 2011-04-13 07:44 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Web\d7b7ee04166212533ae21eaeb584fb0d\System.We b.ni.dll
+ 2011-04-13 07:41 . 2011-04-13 07:41 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.ServiceModel\b5f24d96334ea08b99350421450d3ba4\ System.ServiceModel.ni.dll
+ 2011-04-13 07:34 . 2011-04-13 07:34 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Design\5aeadb9ff9a86f49130de5976a9f1744\System .Design.ni.dll
+ 2011-04-13 07:27 . 2011-04-13 07:27 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationFramewo#\1a5d89d569e2e12842daf4d87c57361a \PresentationFramework.ni.dll
+ 2011-04-13 07:26 . 2011-04-13 07:26 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\Pre sentationCore\46c57d845e55232a89e98101075cd455\Pre sentationCore.ni.dll
+ 2011-04-13 07:23 . 2011-04-13 07:23 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\msc orlib\62d5f089dd51f18472a7caf1593d9f6b\mscorlib.ni .dll
+ 2010-10-15 07:07 . 2009-07-14 04:43 10841088 c:\windows\$NtUninstallKB2378111_WM9$\wmp.dll
+ 2011-02-09 04:06 . 2010-12-20 23:58 11082752 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieframe.dll
+ 2010-11-06 10:57 . 2010-11-06 10:57 11082752 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieframe.dll
+ 2010-09-10 15:27 . 2010-09-10 15:27 11082240 c:\windows\$hf_mig$\KB2360131-IE8\SP3QFE\ieframe.dll
+ 2010-08-11 17:50 . 2010-06-24 12:24 11079168 c:\windows\$hf_mig$\KB2183461-IE8\SP3QFE\ieframe.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 17:51 3911776 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"Creative Detector U"="c:\program files\Creative\MediaSource5\CTDetctu.exe" [2009-04-29 188416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"CTSysVol"="c:\program files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]
"CTDVDDET"="c:\program files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" [2003-06-18 45056]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-11-07 122940]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\I SUSPM.exe" [2004-07-27 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-10-05 94208]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2006-02-10 344064]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"CTHelper"="CTHELPER.EXE" [2009-06-23 19456]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-09-22 47904]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\documents and settings\Berni.MULLEN\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\TmNationsForever\\TmForever.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [4/17/2010 12:24 AM 691696]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\030800 0.029\SymEFA.sys [2/25/2010 6:49 PM 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\N360\0308000.02 9\BHDrvx86.sys [2/25/2010 6:49 PM 259632]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0308000. 029\cchpx86.sys [2/25/2010 6:49 PM 482432]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20110412. 001\IDSXpx86.sys [4/12/2011 10:04 PM 341944]
R2 N360;Norton Security Suite;c:\program files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe [2/25/2010 6:49 PM 117640]
R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\driv ers\COMMONFX.sys [6/23/2009 2:34 PM 99352]
R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\driver s\CTAUDFX.sys [6/23/2009 2:34 PM 555032]
R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\driver s\CTSBLFX.sys [6/23/2009 2:34 PM 566296]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [6/8/2010 12:23 PM 102448]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/19/2010 12:10 AM 136176]
S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMM ONFX.sys [6/23/2009 2:34 PM 99352]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2/16/2010 10:23 PM 79360]
S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDF X.sys [6/23/2009 2:34 PM 555032]
S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\driv ers\CTERFXFX.sys [6/23/2009 2:35 PM 100888]
S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTER FXFX.sys [6/23/2009 2:35 PM 100888]
S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLF X.sys [6/23/2009 2:34 PM 566296]
S3 V0410Afx;Creative Camera VF0410 Audio Effects Driver;c:\windows\system32\drivers\V0410AFX.sys [2/16/2010 10:15 PM 142656]
S3 V0410Aud;Creative Camera VF0410 Noise Cancellation APO;c:\windows\system32\drivers\V0410Aud.sys [2/16/2010 10:15 PM 94720]
S3 V0410Dev;Creative Camera VF0410 Driver;c:\windows\system32\drivers\V0410Dev.sys [2/16/2010 10:15 PM 244704]
S3 V0410Vfx;Creative Camera VF0410 Video VFX Driver;c:\windows\system32\drivers\V0410Vfx.sys [2/16/2010 10:15 PM 7168]
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]
.
2011-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-19 04:10]
.
2011-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-19 04:10]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\BitTorrentBar\tbBitT.dll
BHO-{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\BitTorrentBar\tbBitT.dll
Toolbar-{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\BitTorrentBar\tbBitT.dll
WebBrowser-{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - (no file)
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - c:\program files\BitTorrentBar\tbBitT.dll
.
.
.
************************************************** ************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2011-04-15 16:27
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
************************************************** ************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\N 360]
"ImagePath"="\"c:\program files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton Security Suite\Engine\3.8.0.41\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macrome d\\Flash\\FlashUtil10o_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUt il10o_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F 2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F 2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F 2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Completion time: 2011-04-15 16:29:49
ComboFix-quarantined-files.txt 2011-04-15 20:29
ComboFix2.txt 2010-07-08 06:45
ComboFix3.txt 2010-07-08 05:52
ComboFix4.txt 2009-04-25 21:15
.
Pre-Run: 744,343,040,000 bytes free
Post-Run: 744,311,271,424 bytes free
.
- - End Of File - - 23FF15123F92ECEA32E7541BB6621891

**broni** · 15-04-2011

1. Please open Notepad

Click Start , then Run
Type notepad .exe in the Run Box.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code:

File::
c:\windows\system32\rvidiopclmrz.exe


Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000000
"FirewallOverride"=dword:00000000

3. Save the above as CFScript.txt

4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:

Combofix.txt

**GTO67** · 15-04-2011

ComboFix 11-04-14.03 - Bob 04/15/2011 17:24:01.4.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.2482 [GMT -4:00]
Running from: c:\documents and settings\Bob\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Bob\Desktop\CFScript.txt
AV: Norton Security Suite *Disabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Security Suite *Disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.
FILE ::
"c:\windows\system32\rvidiopclmrz.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\rvidiopclmrz.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-03-15 to 2011-04-15 )))))))))))))))))))))))))))))))
.
.
2011-04-14 00:27 . 2011-04-14 00:27 -------- d-----w- c:\documents and settings\Bob\Application Data\Malwarebytes
2011-04-14 00:26 . 2011-04-14 00:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-04-14 00:26 . 2010-12-20 22:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-14 00:26 . 2010-12-20 22:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-14 00:26 . 2011-04-14 00:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-13 02:48 . 2011-04-13 02:48 -------- d-----w- c:\program files\Sierra
2011-04-10 04:39 . 2011-04-10 04:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Trymedia
2011-04-10 04:38 . 2011-04-10 04:39 -------- d-----w- c:\program files\Bejeweled 3
2011-04-10 04:29 . 2011-04-10 04:29 -------- d-----w- c:\documents and settings\Bob\Application Data\Rovio
2011-04-08 18:37 . 2011-04-08 18:37 -------- d-----w- c:\program files\EA GAMES
2011-04-08 12:53 . 2011-04-08 12:53 -------- d-----w- c:\program files\Common Files\Java
2011-03-27 05:06 . 2011-03-30 02:28 -------- d-----w- c:\documents and settings\Bob\Application Data\Dying for Daylight
2011-03-27 05:06 . 2011-03-27 05:06 -------- d-----w- c:\documents and settings\Bob\Application Data\Dying for Daylight Shared
2011-03-27 05:05 . 2011-03-27 05:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Dying for Daylight
2011-03-27 05:04 . 2011-03-27 05:05 -------- d-----w- c:\program files\Charlaine Harris - Dying for Daylight
2011-03-19 19:45 . 2011-03-19 19:45 -------- d-----w- c:\program files\OpenAL
2011-03-19 19:44 . 2011-03-23 02:18 -------- d-----w- C:\Alien Arena 7_51
2011-03-17 00:42 . 2011-03-17 00:42 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\Identities
2011-03-17 00:03 . 2011-03-17 00:03 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\Google
2011-03-16 23:59 . 2011-03-16 23:59 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\Conduit
2011-03-16 23:58 . 2011-03-16 23:59 -------- d-----w- c:\documents and settings\Berni.MULLEN\Local Settings\Application Data\BitTorrentBar
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2011-04-03 20:26 . 2010-01-14 13:59 89680 ----a-w- c:\documents and settings\Bob\MSSSerif120.fon
2011-03-19 19:45 . 2010-02-17 02:23 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-03-19 19:45 . 2010-01-13 17:07 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2011-03-07 05:33 . 2010-01-13 13:29 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-04 06:37 . 2004-08-10 11:00 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-03-03 13:21 . 2004-08-10 11:00 1857920 ----a-w- c:\windows\system32\win32k.sys
2011-02-22 23:06 . 2006-03-04 03:33 916480 ----a-w- c:\windows\system32\wininet.dll
2011-02-22 23:06 . 2004-08-10 11:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-02-22 23:06 . 2004-08-10 11:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-02-22 11:41 . 2004-08-10 11:00 385024 ----a-w- c:\windows\system32\html.iec
2011-02-17 13:18 . 2004-08-10 11:00 455936 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-17 13:18 . 2004-08-10 11:00 357888 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-17 12:32 . 2010-01-13 15:37 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2011-02-15 12:56 . 2004-08-10 11:00 290432 ----a-w- c:\windows\system32\atmfd.dll
2011-02-08 13:33 . 2004-08-10 11:00 978944 ----a-w- c:\windows\system32\mfc42.dll
2011-02-08 13:33 . 2004-08-10 11:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2011-02-04 22:48 . 2004-08-10 11:00 456192 ----a-w- c:\windows\system32\encdec.dll
2011-02-04 22:48 . 2004-08-10 11:00 291840 ----a-w- c:\windows\system32\sbe.dll
2011-02-03 01:40 . 2010-07-10 18:46 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-02 23:19 . 2010-01-18 00:15 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-02-02 07:58 . 2010-01-13 13:26 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57 . 2010-01-13 13:26 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44 . 2004-08-10 11:00 439296 ----a-w- c:\windows\system32\shimgvw.dll
2010-06-02 09:22 . 2010-06-02 09:22 89944 ----a-w- c:\program files\DSETUP.dll
2010-06-02 09:22 . 2010-06-02 09:22 537432 ----a-w- c:\program files\DXSETUP.exe
2010-06-02 09:22 . 2010-06-02 09:22 1801048 ----a-w- c:\program files\dsetup32.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-04-15_20.27.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-04-15 20:54 . 2011-04-15 20:54 16384 c:\windows\Temp\Perflib_Perfdata_6a0.dat
+ 2011-04-15 20:52 . 2011-04-15 20:52 16384 c:\windows\Temp\Perflib_Perfdata_5c0.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 17:51 3911776 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"Creative Detector U"="c:\program files\Creative\MediaSource5\CTDetctu.exe" [2009-04-29 188416]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"CTSysVol"="c:\program files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]
"CTDVDDET"="c:\program files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" [2003-06-18 45056]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-11-07 122940]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\I SUSPM.exe" [2004-07-27 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-10-05 94208]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2006-02-10 344064]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"CTHelper"="CTHELPER.EXE" [2009-06-23 19456]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-09-22 47904]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\documents and settings\Berni.MULLEN\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"
.
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\TmNationsForever\\TmForever.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [4/17/2010 12:24 AM 691696]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\030800 0.029\SymEFA.sys [2/25/2010 6:49 PM 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\N360\0308000.02 9\BHDrvx86.sys [2/25/2010 6:49 PM 259632]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\0308000. 029\cchpx86.sys [2/25/2010 6:49 PM 482432]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20110412. 001\IDSXpx86.sys [4/12/2011 10:04 PM 341944]
R2 N360;Norton Security Suite;c:\program files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe [2/25/2010 6:49 PM 117640]
R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\driv ers\COMMONFX.sys [6/23/2009 2:34 PM 99352]
R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\driver s\CTAUDFX.sys [6/23/2009 2:34 PM 555032]
R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\driver s\CTSBLFX.sys [6/23/2009 2:34 PM 566296]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [6/8/2010 12:23 PM 102448]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/19/2010 12:10 AM 136176]
S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMM ONFX.sys [6/23/2009 2:34 PM 99352]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2/16/2010 10:23 PM 79360]
S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDF X.sys [6/23/2009 2:34 PM 555032]
S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\driv ers\CTERFXFX.sys [6/23/2009 2:35 PM 100888]
S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTER FXFX.sys [6/23/2009 2:35 PM 100888]
S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLF X.sys [6/23/2009 2:34 PM 566296]
S3 V0410Afx;Creative Camera VF0410 Audio Effects Driver;c:\windows\system32\drivers\V0410AFX.sys [2/16/2010 10:15 PM 142656]
S3 V0410Aud;Creative Camera VF0410 Noise Cancellation APO;c:\windows\system32\drivers\V0410Aud.sys [2/16/2010 10:15 PM 94720]
S3 V0410Dev;Creative Camera VF0410 Driver;c:\windows\system32\drivers\V0410Dev.sys [2/16/2010 10:15 PM 244704]
S3 V0410Vfx;Creative Camera VF0410 Video VFX Driver;c:\windows\system32\drivers\V0410Vfx.sys [2/16/2010 10:15 PM 7168]
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]
.
2011-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-19 04:10]
.
2011-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-19 04:10]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab
.
.
************************************************** ************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2011-04-15 17:31
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
************************************************** ************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\N 360]
"ImagePath"="\"c:\program files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton Security Suite\Engine\3.8.0.41\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macrome d\\Flash\\FlashUtil10o_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUt il10o_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63 A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F 2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F 2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F 2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Completion time: 2011-04-15 17:34:00
ComboFix-quarantined-files.txt 2011-04-15 21:33
ComboFix2.txt 2011-04-15 20:29
ComboFix3.txt 2010-07-08 06:45
ComboFix4.txt 2010-07-08 05:52
ComboFix5.txt 2011-04-15 21:23
.
Pre-Run: 744,329,801,728 bytes free
Post-Run: 744,356,986,880 bytes free
.
- - End Of File - - 4D68E18E0DF5481FBC74A6B50231CCB8

**broni** · 15-04-2011

Good

How is computer doing?

Download OTL to your Desktop.

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Click the Scan All Users checkbox.
Under the Custom Scan box paste this in:

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
%APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
%PROGRAMFILES%\PC-Doctor\Downloads\*.*
%PROGRAMFILES%\Internet Explorer\*.tmp
%PROGRAMFILES%\Internet Explorer\*.dat
%USERPROFILE%\My Documents\*.exe
%USERPROFILE%\*.exe
%systemroot%\ADDINS\*.*
%systemroot%\assembly\*.bak2
%systemroot%\Config\*.*
%systemroot%\REPAIR\*.bak2
%systemroot%\SECURITY\Database\*.sdb /x
%systemroot%\SYSTEM\*.bak2
%systemroot%\Web\*.bak2
%systemroot%\Driver Cache\*.*
%PROGRAMFILES%\Mozilla Firefox\0*.exe
%ProgramFiles%\Microsoft Common\*.*
%ProgramFiles%\TinyProxy.
%USERPROFILE%\Favorites\*.url /x
%systemroot%\system32\*.bk
%systemroot%\*.te
%systemroot%\system32\system32\*.*
%ALLUSERSPROFILE%\*.dat /x
%systemroot%\system32\drivers\*.rmv
dir /b "%systemroot%\system32\*.exe" | find /i " " /c
dir /b "%systemroot%\*.exe" | find /i " " /c
%PROGRAMFILES%\Microsoft\*.*
%systemroot%\System32\Wbem\proquota.exe
%PROGRAMFILES%\Mozilla Firefox\*.dat
%USERPROFILE%\Cookies\*.txt /x
%SystemRoot%\system32\fonts\*.*
%systemroot%\system32\winlog\*.*
%systemroot%\system32\Language\*.*
%systemroot%\system32\Settings\*.*
%systemroot%\system32\*.quo
%SYSTEMROOT%\AppPatch\*.exe
%SYSTEMROOT%\inf\*.exe
%SYSTEMROOT%\Installer\*.exe
%systemroot%\system32\config\*.bak2
%systemroot%\system32\Computers\*.*
%SystemRoot%\system32\Sound\*.*
%SystemRoot%\system32\SpecialImg\*.*
%SystemRoot%\system32\code\*.*
%SystemRoot%\system32\draft\*.*
%SystemRoot%\system32\MSSSys\*.*
%ProgramFiles%\Javascript\*.*
%systemroot%\pchealth\helpctr\System\*.exe /s
%systemroot%\Web\*.exe
%systemroot%\system32\msn\*.*
%systemroot%\system32\*.tro
%AppData%\Microsoft\Installer\msupdates\*.*
%ProgramFiles%\Messenger\*.*
%systemroot%\system32\systhem32\*.*
%systemroot%\system\*.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
/md5start
/md5stop

Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them back here.

**GTO67** · 16-04-2011

OTL logfile created on: 4/15/2011 6:07:39 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Bob\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 80.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 931.50 Gb Total Space | 693.27 Gb Free Space | 74.42% Space Free | Partition Type: NTFS

Computer Name: MULLEN | User Name: Bob | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/04/15 18:02:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\OTL.exe
PRC - [2010/04/01 05:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2010/02/25 17:17:44 | 000,117,640 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe
PRC - [2009/04/29 18:44:30 | 000,188,416 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\MediaSource5\CTDetctu.exe
PRC - [2009/02/14 17:29:14 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/08/09 03:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2007/06/07 15:01:38 | 000,155,648 | ---- | M] (Creative Technology Ltd.) -- C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
PRC - [2007/06/06 21:00:00 | 000,032,768 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\V0410Mon.exe
PRC - [2006/09/28 05:20:00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2006/05/24 00:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) -- C:\WINDOWS\system32\StkASv2K.exe
PRC - [2005/11/07 06:20:00 | 000,122,940 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\DLA\DLACTRLW.EXE
PRC - [2003/09/17 11:43:36 | 000,057,344 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe

========== Modules (SafeList) ==========

MOD - [2011/04/15 18:02:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\OTL.exe
MOD - [2010/08/23 12:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010/02/25 17:17:36 | 000,419,696 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Security Suite\Engine\3.8.0.41\asOEHook.dll

========== Win32 Services (SafeList) ==========

SRV - [2010/02/28 12:14:09 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/02/25 17:17:44 | 000,117,640 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe -- (N360)
SRV - [2010/02/16 22:23:32 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2009/02/14 17:29:14 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2007/08/09 03:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2006/09/28 05:20:00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2006/05/24 00:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) [Auto | Running] -- C:\WINDOWS\system32\StkASv2K.exe -- (StkASSrv)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Running] -- -- (catchme)
DRV - [2011/03/30 04:00:00 | 001,393,144 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2011041 5.002\NAVEX15.SYS -- (NAVEX15)
DRV - [2011/03/30 04:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2011041 5.002\NAVENG.SYS -- (NAVENG)
DRV - [2011/03/14 14:58:34 | 000,341,944 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20110412. 001\IDSXpx86.sys -- (IDSxpx86)
DRV - [2010/05/26 04:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/26 04:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/04/17 00:24:10 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010/02/25 17:46:53 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2010/02/25 17:17:46 | 000,310,320 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\N360\0308000.029\SYMEF A.SYS -- (SymEFA)
DRV - [2010/02/25 17:17:46 | 000,308,272 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\N360\0308000.029\SRTSP .SYS -- (SRTSP)
DRV - [2010/02/25 17:17:46 | 000,217,136 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\N360\0308000.029\SYMTD I.SYS -- (SYMTDI)
DRV - [2010/02/25 17:17:46 | 000,089,904 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\N360\0308000.029\SYMFW .SYS -- (SYMFW)
DRV - [2010/02/25 17:17:46 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\0308000.029\SRTSP X.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2010/02/25 17:17:46 | 000,036,400 | R--- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SymIM.sys -- (SymIMMP)
DRV - [2010/02/25 17:17:46 | 000,036,400 | R--- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SymIM.sys -- (SymIM)
DRV - [2010/02/25 17:17:46 | 000,036,400 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\N360\0308000.029\SYMND IS.SYS -- (SYMNDIS)
DRV - [2010/02/25 17:17:46 | 000,033,072 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\N360\0308000.029\SYMID S.SYS -- (SYMIDS)
DRV - [2010/02/25 17:17:45 | 000,482,432 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\N360\0308000.029\ccHPx 86.sys -- (ccHP)
DRV - [2010/02/25 17:17:45 | 000,259,632 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\N360\0308000.029\BHDrv x86.sys -- (BHDrvx86)
DRV - [2009/08/19 17:49:22 | 000,049,904 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS -- (BVRPMPR5)
DRV - [2009/06/23 14:38:36 | 000,015,896 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\pfmodnt.sys -- (PfModNT)
DRV - [2009/06/23 14:38:26 | 000,189,464 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\haP17v2k.sys -- (hap17v2k)
DRV - [2009/06/23 14:38:16 | 000,162,840 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\haP16v2k.sys -- (hap16v2k)
DRV - [2009/06/23 14:38:06 | 000,798,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2009/06/23 14:37:54 | 000,092,696 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2009/06/23 14:37:32 | 000,157,208 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2009/06/23 14:37:22 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2009/06/23 14:37:10 | 000,127,512 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2009/06/23 14:36:36 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2009/06/23 14:36:24 | 000,528,408 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2009/06/23 14:36:14 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2009/06/23 14:35:04 | 000,100,888 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\CTERFXFX.SYS -- (CTERFXFX.SYS)
DRV - [2009/06/23 14:35:04 | 000,100,888 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTERFXFX.sys -- (CTERFXFX)
DRV - [2009/06/23 14:34:52 | 000,566,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\CTSBLFX.SYS -- (CTSBLFX.SYS)
DRV - [2009/06/23 14:34:52 | 000,566,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTSBLFX.sys -- (CTSBLFX)
DRV - [2009/06/23 14:34:40 | 000,555,032 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\CTAUDFX.SYS -- (CTAUDFX.SYS)
DRV - [2009/06/23 14:34:40 | 000,555,032 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTAUDFX.sys -- (CTAUDFX)
DRV - [2009/06/23 14:34:30 | 000,099,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\COMMONFX.SYS -- (COMMONFX.SYS)
DRV - [2009/06/23 14:34:30 | 000,099,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COMMONFX.sys -- (COMMONFX)
DRV - [2008/04/13 14:45:34 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irbus.sys -- (IrBus)
DRV - [2008/04/13 14:45:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007/08/21 02:00:00 | 000,244,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0410Dev.sys -- (V0410Dev)
DRV - [2007/06/11 02:01:02 | 000,142,656 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0410AFX.sys -- (V0410Afx)
DRV - [2007/02/14 19:14:20 | 000,094,720 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0410Aud.sys -- (V0410Aud)
DRV - [2006/12/05 14:37:46 | 000,007,168 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0410Vfx.sys -- (V0410Vfx)
DRV - [2006/11/15 18:32:44 | 000,242,139 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\StkAMini.sys -- (StkAMini)
DRV - [2006/06/27 19:27:18 | 000,004,772 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\StkScan.sys -- (StkScan)
DRV - [2006/02/09 21:57:46 | 001,502,208 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006/02/04 16:09:06 | 000,380,800 | ---- | M] (Lumanate, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Angel2.sys -- (Angel2)
DRV - [2005/11/18 13:02:50 | 000,005,660 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2005/11/18 13:02:10 | 000,022,684 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_N.SYS -- (DLARTL_N)
DRV - [2005/11/07 06:20:00 | 000,094,332 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2005/11/07 06:20:00 | 000,087,036 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2005/11/07 06:20:00 | 000,086,652 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2005/11/07 06:20:00 | 000,025,628 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2005/11/07 06:20:00 | 000,014,684 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2005/11/07 06:20:00 | 000,006,364 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2005/11/07 06:20:00 | 000,002,496 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLADResN.SYS -- (DLADResN)
DRV - [2001/05/14 19:15:40 | 000,010,368 | ---- | M] (Dell Computer Corporation) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS -- (OMCI)
DRV - [2000/03/29 18:11:20 | 000,008,096 | ---- | M] (MicroStaff Co.,Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\MASPINT.SYS -- (MASPINT)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVer sion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = Bing [binary data]
IE - HKU\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKU\S-1-5-21-1644491937-861567501-725345543-1003\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1644491937-861567501-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1644491937-861567501-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\{7BA5269 1-1876-45ce-9EE6-54BCB3B04BBC}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\ [2010/04/24 23:51:59 | 000,000,000 | ---D | M]

O1 HOSTS File: ([2011/04/15 17:31:49 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Security Suite\Engine\3.8.0.41\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-1644491937-861567501-725345543-1003\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1644491937-861567501-725345543-1003\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\WINDOWS\System32\CtHelper.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe ()
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKU\S-1-5-21-1644491937-861567501-725345543-1003..\Run: [Creative Detector U] C:\Program Files\Creative\MediaSource5\CTDetctu.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-1644491937-861567501-725345543-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVer sion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVer sion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1644491937-861567501-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDrives = 0
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} http://content.systemrequirementslab...i_4.1.71.0.cab (SysInfo Class)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/s...irector/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} http://srtest-cdn.systemrequirements...qlabdetect.cab (Reg Error: Key error.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/micr...?1263523646468 (MUWebControl Class)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/de...e/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn...Detection2.cab (GMNRev Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail.com/mail/w4/pr01...l/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/soft...5111/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\Program Files\ContMedia\AnatomyAtlas\MSDXM.OCX (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Bob\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Bob\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/01/13 09:32:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\VIO\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.MPEGacm - C:\Program Files\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.ulmp3acm - C:\Program Files\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2011/04/15 18:02:41 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\OTL.exe
[2011/04/13 20:27:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob\Application Data\Malwarebytes
[2011/04/13 20:26:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/04/13 20:26:54 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/04/13 20:26:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/04/13 20:26:51 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/04/13 20:26:50 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/04/13 20:25:41 | 007,734,240 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Bob\Desktop\mbam-setup.exe
[2011/04/13 20:11:34 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\TFC.exe
[2011/04/12 22:48:11 | 000,000,000 | ---D | C] -- C:\Program Files\Sierra
[2011/04/12 22:48:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\Monolith Productions
[2011/04/10 00:39:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Trymedia
[2011/04/10 00:38:48 | 000,000,000 | ---D | C] -- C:\Program Files\Bejeweled 3
[2011/04/10 00:29:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob\Application Data\Rovio
[2011/04/08 22:39:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob\My Documents\Harry Potter
[2011/04/08 14:37:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\EA GAMES
[2011/04/08 14:37:21 | 000,000,000 | ---D | C] -- C:\Program Files\EA GAMES
[2011/04/08 08:53:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011/03/27 01:06:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob\Application Data\Dying for Daylight Shared
[2011/03/27 01:06:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob\Application Data\Dying for Daylight
[2011/03/27 01:05:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Dying for Daylight
[2011/03/27 01:05:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob\Start Menu\Programs\Charlaine Harris - Dying for Daylight
[2011/03/27 01:04:46 | 000,000,000 | ---D | C] -- C:\Program Files\Charlaine Harris - Dying for Daylight
[2011/03/20 14:23:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bob\My Documents\Bio. Visual Concerpts
[2011/03/19 15:45:56 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2011/03/19 15:45:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Alien Arena 2011
[2011/03/19 15:44:02 | 000,000,000 | ---D | C] -- C:\Alien Arena 7_51
[2010/06/02 05:22:02 | 001,801,048 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll
[2010/06/02 05:22:02 | 000,537,432 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DXSETUP.exe
[2010/06/02 05:22:02 | 000,089,944 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll
[2009/06/23 12:49:14 | 000,010,752 | ---- | C] ( ) -- C:\WINDOWS\System32\a3d.dll
[2009/06/23 12:20:00 | 000,010,240 | ---- | C] ( ) -- C:\WINDOWS\System32\killapps.exe

========== Files - Modified Within 30 Days ==========

[2011/04/15 18:02:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\OTL.exe
[2011/04/15 17:31:49 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011/04/15 17:22:46 | 004,931,715 | ---- | M] () -- C:\WINDOWS\{00000003-00000000-00000003-00001102-00000004-20061102}.CDF
[2011/04/15 17:22:46 | 004,931,715 | ---- | M] () -- C:\WINDOWS\{00000003-00000000-00000003-00001102-00000004-20061102}.BAK
[2011/04/15 17:20:00 | 000,000,880 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/15 16:52:32 | 000,000,876 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/15 16:52:15 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/15 16:51:14 | 000,032,592 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000003-00000000-00000003-00001102-00000004-20061102}.rfx
[2011/04/15 16:51:14 | 000,032,592 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000003-00000000-00000003-00001102-00000004-20061102}.rfx
[2011/04/15 16:51:14 | 000,032,088 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000003-00000000-00000003-00001102-00000004-20061102}.rfx
[2011/04/15 16:51:14 | 000,032,088 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000003-00000000-00000003-00001102-00000004-20061102}.rfx
[2011/04/15 16:51:14 | 000,011,564 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000003-00000000-00000003-00001102-00000004-20061102}.rfx
[2011/04/15 16:14:00 | 004,321,723 | R--- | M] () -- C:\Documents and Settings\Bob\Desktop\ComboFix.exe
[2011/04/14 23:23:08 | 000,625,664 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\dds.scr
[2011/04/14 01:03:30 | 000,080,384 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\MBRCheck.exe
[2011/04/13 20:48:46 | 000,301,568 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\y3c3dcoj.exe
[2011/04/13 20:26:55 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/13 20:26:07 | 007,734,240 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Bob\Desktop\mbam-setup.exe
[2011/04/13 20:11:43 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\TFC.exe
[2011/04/13 03:55:42 | 001,622,560 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/13 03:29:01 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/04/13 03

56 | 000,444,028 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/13 03

56 | 000,071,904 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/04/12 23:07:34 | 000,001,080 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2011/04/12 23:07:34 | 000,001,080 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm
[2011/04/11 20:54:18 | 000,004,132 | ---- | M] () -- C:\Documents and Settings\Bob\Application Data\evpro32.prf
[2011/04/11 16:46:21 | 000,002,329 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Microsoft Office Word 2007.lnk
[2011/04/10 00:39:03 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\Bejeweled 3.lnk
[2011/04/10 00:33:50 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\Shortcut to AngryBirds.exe.lnk
[2011/04/09 16:23:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/04/08 23:09:00 | 000,001,279 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\Shortcut to HP.exe.lnk
[2011/04/08 14:38:42 | 000,001,700 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\American McGee's Alice(tm).lnk
[2011/04/06 21:08:18 | 000,000,143 | ---- | M] () -- C:\Documents and Settings\Bob\My Documents\thelesliemarshallshow.asx
[2011/04/02 13:55:11 | 000,000,208 | ---- | M] () -- C:\Documents and Settings\Bob\My Documents\wgbh.asx
[2011/03/30 23:01:54 | 000,000,779 | ---- | M] () -- C:\Documents and Settings\Bob\My Documents\KITZ.asx
[2011/03/27 17:22:45 | 000,000,301 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\Setting up PIP..url
[2011/03/27 01:05:07 | 000,000,937 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\Charlaine Harris - Dying for Daylight.lnk
[2011/03/26 11:27:21 | 000,000,668 | ---- | M] () -- C:\Documents and Settings\Bob\Application Data\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk
[2011/03/26 11:27:21 | 000,000,650 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\BitTorrent.lnk
[2011/03/20 14:37:24 | 000,000,905 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\Bio Visual Concepts.lnk
[2011/03/19 15:45:56 | 000,444,952 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2011/03/19 15:45:55 | 000,000,088 | ---- | M] () -- C:\WINDOWS\galaxy.ini

========== Files Created - No Company Name ==========

[2011/04/15 16:13:58 | 004,321,723 | R--- | C] () -- C:\Documents and Settings\Bob\Desktop\ComboFix.exe
[2011/04/14 23:22:56 | 000,625,664 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\dds.scr
[2011/04/14 01:03:20 | 000,080,384 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\MBRCheck.exe
[2011/04/13 20:48:44 | 000,301,568 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\y3c3dcoj.exe
[2011/04/13 20:26:55 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/10 00:39:03 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\Bejeweled 3.lnk
[2011/04/10 00:33:50 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\Shortcut to AngryBirds.exe.lnk
[2011/04/08 23:08:59 | 000,001,279 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\Shortcut to HP.exe.lnk
[2011/04/08 14:38:42 | 000,001,700 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\American McGee's Alice(tm).lnk
[2011/04/02 13:55:08 | 000,000,208 | ---- | C] () -- C:\Documents and Settings\Bob\My Documents\wgbh.asx
[2011/03/30 23:01:49 | 000,000,779 | ---- | C] () -- C:\Documents and Settings\Bob\My Documents\KITZ.asx
[2011/03/27 17:22:45 | 000,000,301 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\Setting up PIP..url
[2011/03/27 01:05:07 | 000,000,937 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\Charlaine Harris - Dying for Daylight.lnk
[2011/03/26 11:27:21 | 000,000,668 | ---- | C] () -- C:\Documents and Settings\Bob\Application Data\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk
[2011/03/26 11:27:21 | 000,000,650 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\BitTorrent.lnk
[2011/03/20 14:37:24 | 000,000,905 | ---- | C] () -- C:\Documents and Settings\Bob\Desktop\Bio Visual Concepts.lnk
[2011/03/19 15:45:55 | 000,000,088 | ---- | C] () -- C:\WINDOWS\galaxy.ini
[2010/07/08 01:37:20 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/07/08 01:37:19 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/07/08 01:37:19 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/07/08 01:37:19 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/07/08 01:37:19 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/07/07 12:24:37 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/06/07 23:34:36 | 000,000,040 | ---- | C] () -- C:\WINDOWS\MixBUda.INI
[2010/06/02 05:22:54 | 001,412,902 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x64.cab
[2010/06/02 05:22:54 | 001,127,217 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x86.cab
[2010/06/02 05:22:54 | 000,273,960 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x64.cab
[2010/06/02 05:22:54 | 000,272,611 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x86.cab
[2010/06/02 05:22:54 | 000,182,361 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x64.cab
[2010/06/02 05:22:54 | 000,138,017 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x86.cab
[2010/06/02 05:22:54 | 000,086,037 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x64.cab
[2010/06/02 05:22:54 | 000,045,359 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x86.cab
[2010/06/02 05:22:52 | 001,906,878 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x64.cab
[2010/06/02 05:22:52 | 001,550,796 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x86.cab
[2010/06/02 05:22:52 | 000,965,421 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x86.cab
[2010/06/02 05:22:52 | 000,121,794 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x64.cab
[2010/06/02 05:22:52 | 000,092,684 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x86.cab
[2010/06/02 05:22:52 | 000,054,522 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x64.cab
[2010/06/02 05:22:52 | 000,021,851 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x86.cab
[2010/06/02 05:22:50 | 000,994,154 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x64.cab
[2010/06/02 05:22:50 | 000,196,762 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x64.cab
[2010/06/02 05:22:50 | 000,148,264 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x86.cab
[2010/06/02 05:22:50 | 000,046,144 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x64.cab
[2010/06/02 05:22:50 | 000,018,496 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x86.cab
[2010/06/02 05:22:48 | 001,802,058 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x64.cab
[2010/06/02 05:22:48 | 001,709,360 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x86.cab
[2010/06/02 05:22:48 | 000,864,600 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x64.cab
[2010/06/02 05:22:48 | 000,803,884 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x86.cab
[2010/06/02 05:22:48 | 000,273,018 | ---- | C] () -- C:\Program Files\Mar2009_XAudio_x86.cab
[2010/06/02 05:22:46 | 000,275,044 | ---- | C] () -- C:\Program Files\Mar2009_XAudio_x64.cab
[2010/06/02 05:22:46 | 000,121,506 | ---- | C] () -- C:\Program Files\Mar2009_XACT_x64.cab
[2010/06/02 05:22:46 | 000,092,740 | ---- | C] () -- C:\Program Files\Mar2009_XACT_x86.cab
[2010/06/02 05:22:38 | 000,054,600 | ---- | C] () -- C:\Program Files\Mar2009_X3DAudio_x64.cab
[2010/06/02 05:22:38 | 000,021,298 | ---- | C] () -- C:\Program Files\Mar2009_X3DAudio_x86.cab
[2010/06/02 05:22:36 | 001,973,702 | ---- | C] () -- C:\Program Files\Mar2009_d3dx9_41_x64.cab
[2010/06/02 05:22:36 | 001,612,446 | ---- | C] () -- C:\Program Files\Mar2009_d3dx9_41_x86.cab
[2010/06/02 05:22:36 | 001,067,160 | ---- | C] () -- C:\Program Files\Mar2009_d3dx10_41_x64.cab
[2010/06/02 05:22:36 | 001,040,745 | ---- | C] () -- C:\Program Files\Mar2009_d3dx10_41_x86.cab
[2010/06/02 05:22:36 | 000,251,194 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x64.cab
[2010/06/02 05:22:36 | 000,226,250 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x86.cab
[2010/06/02 05:22:36 | 000,122,336 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x64.cab
[2010/06/02 05:22:36 | 000,093,734 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x86.cab
[2010/06/02 05:22:34 | 001,769,862 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x64.cab
[2010/06/02 05:22:34 | 001,443,282 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x86.cab
[2010/06/02 05:22:34 | 000,818,260 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x86.cab
[2010/06/02 05:22:34 | 000,055,058 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x64.cab
[2010/06/02 05:22:34 | 000,021,867 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x86.cab
[2010/06/02 05:22:32 | 000,937,246 | ---- | C] () -- C:\Program Files\Jun2010_d3dx9_43_x64.cab
[2010/06/02 05:22:32 | 000,844,884 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x64.cab
[2010/06/02 05:22:32 | 000,768,036 | ---- | C] () -- C:\Program Files\Jun2010_d3dx9_43_x86.cab
[2010/06/02 05:22:32 | 000,278,060 | ---- | C] () -- C:\Program Files\Jun2010_XAudio_x86.cab
[2010/06/02 05:22:32 | 000,277,338 | ---- | C] () -- C:\Program Files\Jun2010_XAudio_x64.cab
[2010/06/02 05:22:32 | 000,124,596 | ---- | C] () -- C:\Program Files\Jun2010_XACT_x64.cab
[2010/06/02 05:22:32 | 000,093,686 | ---- | C] () -- C:\Program Files\Jun2010_XACT_x86.cab
[2010/06/02 05:22:30 | 000,762,188 | ---- | C] () -- C:\Program Files\Jun2010_d3dcsx_43_x86.cab
[2010/06/02 05:22:30 | 000,235,955 | ---- | C] () -- C:\Program Files\Jun2010_d3dx10_43_x64.cab
[2010/06/02 05:22:30 | 000,197,283 | ---- | C] () -- C:\Program Files\Jun2010_d3dx10_43_x86.cab
[2010/06/02 05:22:30 | 000,138,205 | ---- | C] () -- C:\Program Files\Jun2010_d3dx11_43_x64.cab
[2010/06/02 05:22:30 | 000,109,445 | ---- | C] () -- C:\Program Files\Jun2010_d3dx11_43_x86.cab
[2010/06/02 05:22:28 | 000,944,460 | ---- | C] () -- C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
[2010/06/02 05:22:28 | 000,931,471 | ---- | C] () -- C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
[2010/06/02 05:22:28 | 000,752,783 | ---- | C] () -- C:\Program Files\Jun2010_d3dcsx_43_x64.cab
[2010/06/02 05:22:20 | 000,269,024 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x86.cab
[2010/06/02 05:22:18 | 001,792,608 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x64.cab
[2010/06/02 05:22:18 | 001,463,878 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x86.cab
[2010/06/02 05:22:18 | 000,867,828 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x64.cab
[2010/06/02 05:22:18 | 000,849,919 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x86.cab
[2010/06/02 05:22:18 | 000,269,628 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x64.cab
[2010/06/02 05:22:18 | 000,152,909 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x86.cab
[2010/06/02 05:22:18 | 000,121,054 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x64.cab
[2010/06/02 05:22:18 | 000,093,128 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x86.cab
[2010/06/02 05:22:18 | 000,055,154 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x64.cab
[2010/06/02 05:22:18 | 000,021,905 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x86.cab
[2010/06/02 05:22:16 | 001,607,774 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x64.cab
[2010/06/02 05:22:16 | 001,607,286 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x86.cab
[2010/06/02 05:22:16 | 001,064,925 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab
[2010/06/02 05:22:16 | 000,699,044 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x64.cab
[2010/06/02 05:22:16 | 000,698,472 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x86.cab
[2010/06/02 05:22:16 | 000,197,122 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x64.cab
[2010/06/02 05:22:16 | 000,180,785 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x64.cab
[2010/06/02 05:22:16 | 000,133,671 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x86.cab
[2010/06/02 05:22:14 | 001,336,002 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab
[2010/06/02 05:22:14 | 000,277,191 | ---- | C] () -- C:\Program Files\Feb2010_XAudio_x86.cab
[2010/06/02 05:22:14 | 000,276,960 | ---- | C] () -- C:\Program Files\Feb2010_XAudio_x64.cab
[2010/06/02 05:22:14 | 000,122,446 | ---- | C] () -- C:\Program Files\Feb2010_XACT_x64.cab
[2010/06/02 05:22:14 | 000,093,180 | ---- | C] () -- C:\Program Files\Feb2010_XACT_x86.cab
[2010/06/02 05:22:12 | 000,194,675 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x64.cab
[2010/06/02 05:22:12 | 000,147,983 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x86.cab
[2010/06/02 05:22:12 | 000,054,678 | ---- | C] () -- C:\Program Files\Feb2010_X3DAudio_x64.cab
[2010/06/02 05:22:12 | 000,020,713 | ---- | C] () -- C:\Program Files\Feb2010_X3DAudio_x86.cab
[2010/06/02 05:22:10 | 000,178,359 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x64.cab
[2010/06/02 05:22:10 | 000,132,409 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x86.cab
[2010/06/02 05:22:04 | 001,084,720 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab
[2010/06/02 05:22:02 | 001,574,376 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x86.cab
[2010/06/02 05:22:02 | 001,362,796 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab
[2010/06/02 05:22:02 | 001,247,499 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab
[2010/06/02 05:22:02 | 001,013,225 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab
[2010/06/02 05:22:02 | 000,192,475 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x64.cab
[2010/06/02 05:22:02 | 000,145,599 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x86.cab
[2010/06/02 05:22:02 | 000,094,011 | ---- | C] () -- C:\Program Files\dxupdate.cab
[2010/06/02 05:22:02 | 000,042,410 | ---- | C] () -- C:\Program Files\dxdllreg_x86.cab
[2010/06/02 05:22:00 | 001,571,154 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x64.cab
[2010/06/02 05:22:00 | 001,357,976 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab
[2010/06/02 05:22:00 | 001,079,456 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab
[2010/06/02 05:22:00 | 000,273,264 | ---- | C] () -- C:\Program Files\Aug2009_XAudio_x64.cab
[2010/06/02 05:22:00 | 000,272,642 | ---- | C] () -- C:\Program Files\Aug2009_XAudio_x86.cab
[2010/06/02 05:22:00 | 000,212,807 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x64.cab
[2010/06/02 05:22:00 | 000,191,720 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x86.cab
[2010/06/02 05:22:00 | 000,122,408 | ---- | C] () -- C:\Program Files\Aug2009_XACT_x64.cab
[2010/06/02 05:22:00 | 000,093,106 | ---- | C] () -- C:\Program Files\Aug2009_XACT_x86.cab
[2010/06/02 05

58 | 000,930,116 | ---- | C] () -- C:\Program Files\Aug2009_d3dx9_42_x64.cab
[2010/06/02 05

58 | 000,728,456 | ---- | C] () -- C:\Program Files\Aug2009_d3dx9_42_x86.cab
[2010/06/02 05

58 | 000,232,635 | ---- | C] () -- C:\Program Files\Aug2009_d3dx10_42_x64.cab
[2010/06/02 05

58 | 000,192,131 | ---- | C] () -- C:\Program Files\Aug2009_d3dx10_42_x86.cab
[2010/06/02 05

58 | 000,136,301 | ---- | C] () -- C:\Program Files\Aug2009_d3dx11_42_x64.cab
[2010/06/02 05

58 | 000,105,044 | ---- | C] () -- C:\Program Files\Aug2009_d3dx11_42_x86.cab
[2010/06/02 05

56 | 003,319,740 | ---- | C] () -- C:\Program Files\Aug2009_d3dcsx_42_x86.cab
[2010/06/02 05

56 | 003,112,111 | ---- | C] () -- C:\Program Files\Aug2009_d3dcsx_42_x64.cab
[2010/06/02 05

56 | 000,900,598 | ---- | C] () -- C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
[2010/06/02 05

46 | 000,919,044 | ---- | C] () -- C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
[2010/06/02 05

46 | 000,271,412 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x64.cab
[2010/06/02 05

46 | 000,271,038 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x86.cab
[2010/06/02 05

44 | 001,794,084 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x64.cab
[2010/06/02 05

44 | 001,464,672 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x86.cab
[2010/06/02 05

44 | 000,849,167 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x86.cab
[2010/06/02 05

44 | 000,198,096 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x64.cab
[2010/06/02 05

44 | 000,153,012 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x86.cab
[2010/06/02 05

44 | 000,121,772 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x64.cab
[2010/06/02 05

44 | 000,092,996 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x86.cab
[2010/06/02 05

42 | 001,800,160 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x64.cab
[2010/06/02 05

42 | 001,708,152 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x86.cab
[2010/06/02 05

42 | 000,867,612 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x64.cab
[2010/06/02 05

42 | 000,852,286 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x64.cab
[2010/06/02 05

42 | 000,796,867 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x86.cab
[2010/06/02 05

40 | 001,350,542 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab
[2010/06/02 05

40 | 001,077,644 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab
[2010/06/02 05

40 | 000,182,903 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x64.cab
[2010/06/02 05

40 | 000,137,235 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x86.cab
[2010/06/02 05

40 | 000,087,142 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x64.cab
[2010/06/02 05

40 | 000,053,302 | ---- | C] () -- C:\Program Files\APR2007_xinput_x86.cab
[2010/06/02 05

40 | 000,046,058 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x86.cab
[2010/06/02 05

38 | 001,606,039 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x86.cab
[2010/06/02 05

38 | 000,195,766 | ---- | C] () -- C:\Program Files\APR2007_XACT_x64.cab
[2010/06/02 05

38 | 000,151,225 | ---- | C] () -- C:\Program Files\APR2007_XACT_x86.cab
[2010/06/02 05

38 | 000,096,817 | ---- | C] () -- C:\Program Files\APR2007_xinput_x64.cab
[2010/06/02 05

36 | 001,607,358 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x64.cab
[2010/06/02 05

36 | 000,698,612 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x64.cab
[2010/06/02 05

36 | 000,695,865 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x86.cab
[2010/06/02 05

34 | 000,046,010 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x86.cab
[2010/06/02 05

20 | 000,087,101 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x64.cab
[2010/06/02 05

18 | 004,162,630 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab
[2010/06/02 05

18 | 000,916,430 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86.cab
[2010/06/02 05

18 | 000,179,133 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x64.cab
[2010/06/02 05

18 | 000,133,103 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x86.cab
[2010/06/02 05

16 | 001,397,830 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab
[2010/06/02 05

16 | 001,347,354 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab
[2010/06/02 05

16 | 001,115,221 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab
[2010/06/02 05

16 | 001,078,962 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab
[2010/04/23 21:24:01 | 000,000,871 | ---- | C] () -- C:\WINDOWS\QIII.INI
[2010/04/18 23:15:27 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2010/04/18 23:15:26 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2010/04/18 23:15:26 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2010/04/17 15:47:19 | 000,000,444 | ---- | C] () -- C:\WINDOWS\sierra.ini
[2010/04/15 18:38:04 | 000,003,072 | ---- | C] () -- C:\Documents and Settings\Bob\Application Data\dvd.bmk
[2010/04/14 17:34:35 | 000,015,430 | -HS- | C] () -- C:\Documents and Settings\Bob\Local Settings\Application Data\TcP0eIPn2W
[2010/04/14 17:34:35 | 000,015,430 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\TcP0eIPn2W
[2010/02/20 15:25:58 | 000,073,492 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/02/19 20:44:02 | 000,000,020 | ---- | C] () -- C:\WINDOWS\gkmensch.ini
[2010/02/19 20:28:57 | 000,375,296 | ---- | C] () -- C:\WINDOWS\System32\tx32.dll
[2010/02/19 20:28:56 | 000,000,202 | ---- | C] () -- C:\WINDOWS\System32\IC32.INI
[2010/02/19 20:26:17 | 000,000,111 | ---- | C] () -- C:\WINDOWS\anat3d.ini
[2010/02/19 20:26:03 | 000,000,084 | ---- | C] () -- C:\WINDOWS\CMAdvDVD.ini
[2010/02/07 18:26:07 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\Bob\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/31 19:47:23 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/01/25 21:59:44 | 000,004,132 | ---- | C] () -- C:\Documents and Settings\Bob\Application Data\evpro32.prf
[2010/01/25 21:38:21 | 000,000,074 | ---- | C] () -- C:\Documents and Settings\Bob\Application Data\examview.tlx
[2010/01/18 21:17:00 | 000,030,208 | ---- | C] () -- C:\WINDOWS\System32\WNASPI32.DLL
[2010/01/18 21:17:00 | 000,000,291 | ---- | C] () -- C:\WINDOWS\msfsetup.ini
[2010/01/18 16:17:51 | 000,000,331 | ---- | C] () -- C:\WINDOWS\doom3.ini
[2010/01/16 16:29:48 | 000,117,158 | ---- | C] () -- C:\WINDOWS\hpoins11.dat
[2010/01/16 16:29:48 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat.temp
[2010/01/16 16:25:53 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
[2010/01/16 09:23:12 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2010/01/13 15:10:39 | 000,102,480 | ---- | C] () -- C:\WINDOWS\System32\EzRating.dll
[2010/01/13 15:10:39 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\EzdCoIns.dll
[2010/01/13 15:08:17 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2010/01/13 15:07:52 | 000,114,630 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2010/01/13 13:19:38 | 000,000,384 | ---- | C] () -- C:\WINDOWS\System32\DVCStateBkp-{00000003-00000000-00000003-00001102-00000004-20061102}.dat
[2010/01/13 13:16:19 | 000,000,214 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2010/01/13 13:08:10 | 001,247,400 | ---- | C] () -- C:\WINDOWS\System32\CTAA1.DAT
[2010/01/13 13:08:08 | 000,000,231 | ---- | C] () -- C:\WINDOWS\AC3API.INI
[2010/01/13 13:08:07 | 001,048,576 | ---- | C] () -- C:\WINDOWS\System32\SFMAN.DAT
[2010/01/13 13:07:24 | 000,014,424 | ---- | C] () -- C:\WINDOWS\System32\Aud2_Del.ini
[2010/01/13 13:07:19 | 000,184,320 | ---- | C] () -- C:\WINDOWS\PSCONV.EXE
[2010/01/13 13:07:14 | 000,000,184 | ---- | C] () -- C:\WINDOWS\System32\e000001.dat
[2010/01/13 13:06:08 | 000,000,136 | ---- | C] () -- C:\WINDOWS\SBWIN.INI
[2010/01/13 10:11:45 | 000,000,126 | ---- | C] () -- C:\Documents and Settings\Bob\Local Settings\Application Data\fusioncache.dat
[2010/01/13 09:34:53 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/01/13 09:28:54 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/01/13 03:45:49 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/01/13 03:44:53 | 001,622,560 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/07/14 18:15:00 | 000,178,432 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2009/06/23 13:29:50 | 000,049,719 | ---- | C] () -- C:\WINDOWS\System32\instwdm.ini
[2009/06/23 13:29:48 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2009/06/23 12:51:00 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CTBurst.dll
[2009/06/23 12:48:16 | 000,037,888 | ---- | C] () -- C:\WINDOWS\System32\psconv.exe
[2009/06/23 12:28:48 | 000,386,852 | ---- | C] () -- C:\WINDOWS\System32\ctdnlstr.dat
[2009/06/23 12:28:48 | 000,051,787 | ---- | C] () -- C:\WINDOWS\System32\ctdlang.dat
[2009/06/23 12:23:20 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\regplib.exe
[2009/06/23 12:22:36 | 000,149,838 | ---- | C] () -- C:\WINDOWS\System32\ctbas2w.dat
[2009/06/23 12:20:44 | 000,274,587 | ---- | C] () -- C:\WINDOWS\System32\ctsbas2w.dat
[2009/06/23 12:20:34 | 000,241,084 | ---- | C] () -- C:\WINDOWS\System32\CTSBASW.DAT
[2009/06/23 12:20:34 | 000,115,166 | ---- | C] () -- C:\WINDOWS\System32\CTBASICW.DAT
[2009/06/23 12:20:08 | 000,313,207 | ---- | C] () -- C:\WINDOWS\System32\ctstatic.dat
[2009/06/23 12:20:08 | 000,053,932 | ---- | C] () -- C:\WINDOWS\System32\ctdaught.dat
[2009/06/23 12:20:06 | 000,005,120 | ---- | C] () -- C:\WINDOWS\System32\enlocstr.exe
[2007/08/13 21:45:02 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\ctmmactl.dll
[2006/12/06 14:39:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2006/10/02 18:25:18 | 000,000,307 | ---- | C] () -- C:\WINDOWS\System32\kill.ini
[2005/08/05 15:01:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005/03/22 18:38:24 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2005/03/22 18:38:24 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/10 07:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/10 07:00:00 | 000,444,028 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/10 07:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/10 07:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/10 07:00:00 | 000,071,904 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/10 07:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/10 07:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/10 07:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/10 07:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/10 07:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001/07/07 04:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini

========== LOP Check ==========

[2010/04/17 00:22:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010/01/13 10:11:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DIGStream
[2011/03/27 01:05:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Dying for Daylight
[2010/02/28 13:03:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2011/03/16 20:45:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\OfficeGuardian
[2010/01/16 08:58:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2011/03/20 10:01:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/03/02 19:04:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TmForever
[2010/02/27 12:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ubisoft
[2010/02/18 21:24:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2010/04/02 11:44:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/01/17 11:36:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010/02/07 10:59:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Berni.MULLEN\Application Data\FCTB000061107
[2010/01/18 21:22:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Berni.MULLEN\Application Data\FUJIFILM
[2010/01/17 17:16:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Berni.MULLEN\Application Data\Hoyle FaceCreator
[2010/01/17 17:30:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Berni.MULLEN\Application Data\Hoyle Puzzle and Board Games
[2010/01/19 20:30:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Berni.MULLEN\Application Data\Image Zone Express
[2010/01/18 21:39:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Berni.MULLEN\Application Data\Serif
[2010/02/18 21:24:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Berni.MULLEN\Application Data\Ulead Systems
[2010/07/09 11:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Barnes & Noble
[2011/04/12 23:06:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\BitTorrent
[2010/02/18 21:33:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B 320485DF8CE.1
[2010/04/17 00:30:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\DAEMON Tools Lite
[2011/03/29 22:28:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Dying for Daylight
[2011/03/27 01:06:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Dying for Daylight Shared
[2010/02/11 12:49:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\FUJIFILM
[2011/03/20 09:48:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\HiT-MM
[2010/11/11 22:53:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Image Zone Express
[2010/02/26 16:06:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Inductel
[2010/02/27 23:31:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\iWin
[2010/01/14 09:59:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Leadertech
[2010/02/27 12:09:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Playrix Entertainment
[2011/04/10 00:29:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Rovio
[2010/02/28 15:06:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\SpinTop Games
[2010/02/27 12:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Ubisoft
[2010/02/18 21:52:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bob\Application Data\Ulead Systems

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2010/01/13 09:32:14 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/01/13 09:26:05 | 000,000,209 | ---- | M] () -- C:\Boot.bak
[2010/07/08 01:40:25 | 000,000,279 | RHS- | M] () -- C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2010/07/08 02:59:42 | 000,014,398 | ---- | M] () -- C:\ComboFix 2.txt
[2011/04/15 17:34:01 | 000,016,007 | ---- | M] () -- C:\ComboFix.txt
[2010/01/13 09:32:14 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/04/24 23:40:23 | 000,000,060 | RH-- | M] () -- C:\dhnp.ist
[2010/04/14 19:11:45 | 000,011,676 | ---- | M] () -- C:\gear.log
[2007/07/27 21:06:31 | 002,568,612 | ---- | M] () -- C:\harrypotter_ss.zip
[2010/01/13 09:32:14 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/01/13 09:32:14 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2004/08/10 07:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2010/01/14 23:00:42 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/04/18 23:08:12 | 000,000,279 | ---- | M] () -- C:\OPFOR.LOG
[2011/04/15 16:52:03 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
[2010/07/08 01:10:57 | 000,048,214 | ---- | M] () -- C:\TDSSKiller.2.3.2.2_08.07.2010_01.10.42_log.txt
[2010/07/08 01:14:33 | 000,047,730 | ---- | M] () -- C:\TDSSKiller.txt
[2008/02/14 22:47:05 | 000,000,000 | ---- | M] () -- C:\temp.dat
[2007/03/17 19:52:23 | 000,001,981 | ---- | M] () -- C:\VETlog.txt

< %systemroot%\Fonts\*.com >
[2006/04/18 16:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 15:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 16:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 15:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/01/13 09:31:45 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 08:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpi pelineprintproc.dll
[2006/04/10 15:02:32 | 000,074,240 | ---- | M] (Hewlett-Packard Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp054 .dll
[2006/10/26 20:58:12 | 000,030,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.d ll
[2006/10/26 20

12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr .dll
[2008/07/06 06:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfil terpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2009/07/10 13:15:46 | 000,306,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2010/06/02 05

16 | 001,347,354 | ---- | M] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab
[2010/06/02 05

16 | 001,078,962 | ---- | M] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab
[2010/06/02 05

16 | 001,397,830 | ---- | M] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab
[2010/06/02 05

16 | 001,115,221 | ---- | M] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab
[2010/06/02 05

18 | 000,916,430 | ---- | M] () -- C:\Program Files\Apr2006_MDX1_x86.cab
[2010/06/02 05

18 | 004,162,630 | ---- | M] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab
[2010/06/02 05

18 | 000,179,133 | ---- | M] () -- C:\Program Files\Apr2006_XACT_x64.cab
[2010/06/02 05

18 | 000,133,103 | ---- | M] () -- C:\Program Files\Apr2006_XACT_x86.cab
[2010/06/02 05

20 | 000,087,101 | ---- | M] () -- C:\Program Files\Apr2006_xinput_x64.cab
[2010/06/02 05

34 | 000,046,010 | ---- | M] () -- C:\Program Files\Apr2006_xinput_x86.cab
[2010/06/02 05

36 | 000,698,612 | ---- | M] () -- C:\Program Files\APR2007_d3dx10_33_x64.cab
[2010/06/02 05

36 | 000,695,865 | ---- | M] () -- C:\Program Files\APR2007_d3dx10_33_x86.cab
[2010/06/02 05

36 | 001,607,358 | ---- | M] () -- C:\Program Files\APR2007_d3dx9_33_x64.cab
[2010/06/02 05

38 | 001,606,039 | ---- | M] () -- C:\Program Files\APR2007_d3dx9_33_x86.cab
[2010/06/02 05

38 | 000,195,766 | ---- | M] () -- C:\Program Files\APR2007_XACT_x64.cab
[2010/06/02 05

38 | 000,151,225 | ---- | M] () -- C:\Program Files\APR2007_XACT_x86.cab
[2010/06/02 05

38 | 000,096,817 | ---- | M] () -- C:\Program Files\APR2007_xinput_x64.cab
[2010/06/02 05

40 | 000,053,302 | ---- | M] () -- C:\Program Files\APR2007_xinput_x86.cab
[2010/06/02 05

40 | 001,350,542 | ---- | M] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab
[2010/06/02 05

40 | 001,077,644 | ---- | M] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab
[2010/06/02 05

40 | 000,182,903 | ---- | M] () -- C:\Program Files\AUG2006_XACT_x64.cab
[2010/06/02 05

40 | 000,137,235 | ---- | M] () -- C:\Program Files\AUG2006_XACT_x86.cab
[2010/06/02 05

40 | 000,087,142 | ---- | M] () -- C:\Program Files\AUG2006_xinput_x64.cab
[2010/06/02 05

40 | 000,046,058 | ---- | M] () -- C:\Program Files\AUG2006_xinput_x86.cab
[2010/06/02 05

42 | 000,852,286 | ---- | M] () -- C:\Program Files\AUG2007_d3dx10_35_x64.cab
[2010/06/02 05

42 | 000,796,867 | ---- | M] () -- C:\Program Files\AUG2007_d3dx10_35_x86.cab
[2010/06/02 05

42 | 001,800,160 | ---- | M] () -- C:\Program Files\AUG2007_d3dx9_35_x64.cab
[2010/06/02 05

42 | 001,708,152 | ---- | M] () -- C:\Program Files\AUG2007_d3dx9_35_x86.cab
[2010/06/02 05

44 | 000,198,096 | ---- | M] () -- C:\Program Files\AUG2007_XACT_x64.cab
[2010/06/02 05

44 | 000,153,012 | ---- | M] () -- C:\Program Files\AUG2007_XACT_x86.cab
[2010/06/02 05

42 | 000,867,612 | ---- | M] () -- C:\Program Files\Aug2008_d3dx10_39_x64.cab
[2010/06/02 05

44 | 000,849,167 | ---- | M] () -- C:\Program Files\Aug2008_d3dx10_39_x86.cab
[2010/06/02 05

44 | 001,794,084 | ---- | M] () -- C:\Program Files\Aug2008_d3dx9_39_x64.cab
[2010/06/02 05

44 | 001,464,672 | ---- | M] () -- C:\Program Files\Aug2008_d3dx9_39_x86.cab
[2010/06/02 05

44 | 000,121,772 | ---- | M] () -- C:\Program Files\Aug2008_XACT_x64.cab
[2010/06/02 05

44 | 000,092,996 | ---- | M] () -- C:\Program Files\Aug2008_XACT_x86.cab
[2010/06/02 05

46 | 000,271,412 | ---- | M] () -- C:\Program Files\Aug2008_XAudio_x64.cab
[2010/06/02 05

46 | 000,271,038 | ---- | M] () -- C:\Program Files\Aug2008_XAudio_x86.cab
[2010/06/02 05

46 | 000,919,044 | ---- | M] () -- C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
[2010/06/02 05

56 | 000,900,598 | ---- | M] () -- C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
[2010/06/02 05

56 | 003,112,111 | ---- | M] () -- C:\Program Files\Aug2009_d3dcsx_42_x64.cab
[2010/06/02 05

56 | 003,319,740 | ---- | M] () -- C:\Program Files\Aug2009_d3dcsx_42_x86.cab
[2010/06/02 05

58 | 000,232,635 | ---- | M] () -- C:\Program Files\Aug2009_d3dx10_42_x64.cab
[2010/06/02 05

58 | 000,192,131 | ---- | M] () -- C:\Program Files\Aug2009_d3dx10_42_x86.cab
[2010/06/02 05

58 | 000,136,301 | ---- | M] () -- C:\Program Files\Aug2009_d3dx11_42_x64.cab
[2010/06/02 05

58 | 000,105,044 | ---- | M] () -- C:\Program Files\Aug2009_d3dx11_42_x86.cab
[2010/06/02 05

58 | 000,930,116 | ---- | M] () -- C:\Program Files\Aug2009_d3dx9_42_x64.cab
[2010/06/02 05

58 | 000,728,456 | ---- | M] () -- C:\Program Files\Aug2009_d3dx9_42_x86.cab
[2010/06/02 05:22:00 | 000,122,408 | ---- | M] () -- C:\Program Files\Aug2009_XACT_x64.cab
[2010/06/02 05:22:00 | 000,093,106 | ---- | M] () -- C:\Program Files\Aug2009_XACT_x86.cab
[2010/06/02 05:22:00 | 000,273,264 | ---- | M] () -- C:\Program Files\Aug2009_XAudio_x64.cab
[2010/06/02 05:22:00 | 000,272,642 | ---- | M] () -- C:\Program Files\Aug2009_XAudio_x86.cab
[2010/06/02 05:22:00 | 001,357,976 | ---- | M] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab
[2010/06/02 05:22:00 | 001,079,456 | ---- | M] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab
[2010/06/02 05:22:00 | 000,212,807 | ---- | M] () -- C:\Program Files\DEC2006_d3dx10_00_x64.cab
[2010/06/02 05:22:00 | 000,191,720 | ---- | M] () -- C:\Program Files\DEC2006_d3dx10_00_x86.cab
[2010/06/02 05:22:00 | 001,571,154 | ---- | M] () -- C:\Program Files\DEC2006_d3dx9_32_x64.cab
[2010/06/02 05:22:02 | 001,574,376 | ---- | M] () -- C:\Program Files\DEC2006_d3dx9_32_x86.cab
[2010/06/02 05:22:02 | 000,192,475 | ---- | M] () -- C:\Program Files\DEC2006_XACT_x64.cab
[2010/06/02 05:22:02 | 000,145,599 | ---- | M] () -- C:\Program Files\DEC2006_XACT_x86.cab
[2010/06/02 05:22:02 | 000,089,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll
[2010/06/02 05:22:02 | 001,801,048 | ---- | M] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll
[2010/06/02 05:22:02 | 000,042,410 | ---- | M] () -- C:\Program Files\dxdllreg_x86.cab
[2010/06/02 05:22:02 | 000,537,432 | ---- | M] (Microsoft Corporation) -- C:\Program Files\DXSETUP.exe
[2010/06/02 05:22:02 | 000,094,011 | ---- | M] () -- C:\Program Files\dxupdate.cab
[2010/06/02 05:22:02 | 001,247,499 | ---- | M] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab
[2010/06/02 05:22:02 | 001,013,225 | ---- | M] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab
[2010/06/02 05:22:02 | 001,362,796 | ---- | M] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab
[2010/06/02 05:22:04 | 001,084,720 | ---- | M] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab
[2010/06/02 05:22:10 | 000,178,359 | ---- | M] () -- C:\Program Files\Feb2006_XACT_x64.cab
[2010/06/02 05:22:10 | 000,132,409 | ---- | M] () -- C:\Program Files\Feb2006_XACT_x86.cab
[2010/06/02 05:22:12 | 000,194,675 | ---- | M] () -- C:\Program Files\FEB2007_XACT_x64.cab
[2010/06/02 05:22:12 | 000,147,983 | ---- | M] () -- C:\Program Files\FEB2007_XACT_x86.cab
[2010/06/02 05:22:12 | 000,054,678 | ---- | M] () -- C:\Program Files\Feb2010_X3DAudio_x64.cab
[2010/06/02 05:22:12 | 000,020,713 | ---- | M] () -- C:\Program Files\Feb2010_X3DAudio_x86.cab
[2010/06/02 05:22:14 | 000,122,446 | ---- | M] () -- C:\Program Files\Feb2010_XACT_x64.cab
[2010/06/02 05:22:14 | 000,093,180 | ---- | M] () -- C:\Program Files\Feb2010_XACT_x86.cab
[2010/06/02 05:22:14 | 000,276,960 | ---- | M] () -- C:\Program Files\Feb2010_XAudio_x64.cab
[2010/06/02 05:22:14 | 000,277,191 | ---- | M] () -- C:\Program Files\Feb2010_XAudio_x86.cab
[2010/06/02 05:22:14 | 001,336,002 | ---- | M] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab
[2010/06/02 05:22:16 | 001,064,925 | ---- | M] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab
[2010/06/02 05:22:16 | 000,180,785 | ---- | M] () -- C:\Program Files\JUN2006_XACT_x64.cab
[2010/06/02 05:22:16 | 000,133,671 | ---- | M] () -- C:\Program Files\JUN2006_XACT_x86.cab
[2010/06/02 05:22:16 | 000,699,044 | ---- | M] () -- C:\Program Files\JUN2007_d3dx10_34_x64.cab
[2010/06/02 05:22:16 | 000,698,472 | ---- | M] () -- C:\Program Files\JUN2007_d3dx10_34_x86.cab
[2010/06/02 05:22:16 | 001,607,774 | ---- | M] () -- C:\Program Files\JUN2007_d3dx9_34_x64.cab
[2010/06/02 05:22:16 | 001,607,286 | ---- | M] () -- C:\Program Files\JUN2007_d3dx9_34_x86.cab
[2010/06/02 05:22:16 | 000,197,122 | ---- | M] () -- C:\Program Files\JUN2007_XACT_x64.cab
[2010/06/02 05:22:18 | 000,152,909 | ---- | M] () -- C:\Program Files\JUN2007_XACT_x86.cab
[2010/06/02 05:22:18 | 000,867,828 | ---- | M] () -- C:\Program Files\JUN2008_d3dx10_38_x64.cab
[2010/06/02 05:22:18 | 000,849,919 | ---- | M] () -- C:\Program Files\JUN2008_d3dx10_38_x86.cab
[2010/06/02 05:22:18 | 001,792,608 | ---- | M] () -- C:\Program Files\JUN2008_d3dx9_38_x64.cab
[2010/06/02 05:22:18 | 001,463,878 | ---- | M] () -- C:\Program Files\JUN2008_d3dx9_38_x86.cab
[2010/06/02 05:22:18 | 000,055,154 | ---- | M] () -- C:\Program Files\JUN2008_X3DAudio_x64.cab
[2010/06/02 05:22:18 | 000,021,905 | ---- | M] () -- C:\Program Files\JUN2008_X3DAudio_x86.cab
[2010/06/02 05:22:18 | 000,121,054 | ---- | M] () -- C:\Program Files\JUN2008_XACT_x64.cab
[2010/06/02 05:22:18 | 000,093,128 | ---- | M] () -- C:\Program Files\JUN2008_XACT_x86.cab
[2010/06/02 05:22:18 | 000,269,628 | ---- | M] () -- C:\Program Files\JUN2008_XAudio_x64.cab
[2010/06/02 05:22:20 | 000,269,024 | ---- | M] () -- C:\Program Files\JUN2008_XAudio_x86.cab
[2010/06/02 05:22:28 | 000,944,460 | ---- | M] () -- C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
[2010/06/02 05:22:28 | 000,931,471 | ---- | M] () -- C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
[2010/06/02 05:22:28 | 000,752,783 | ---- | M] () -- C:\Program Files\Jun2010_d3dcsx_43_x64.cab
[2010/06/02 05:22:30 | 000,762,188 | ---- | M] () -- C:\Program Files\Jun2010_d3dcsx_43_x86.cab
[2010/06/02 05:22:30 | 000,235,955 | ---- | M] () -- C:\Program Files\Jun2010_d3dx10_43_x64.cab
[2010/06/02 05:22:30 | 000,197,283 | ---- | M] () -- C:\Program Files\Jun2010_d3dx10_43_x86.cab
[2010/06/02 05:22:30 | 000,138,205 | ---- | M] () -- C:\Program Files\Jun2010_d3dx11_43_x64.cab
[2010/06/02 05:22:30 | 000,109,445 | ---- | M] () -- C:\Program Files\Jun2010_d3dx11_43_x86.cab
[2010/06/02 05:22:32 | 000,937,246 | ---- | M] () -- C:\Program Files\Jun2010_d3dx9_43_x64.cab
[2010/06/02 05:22:32 | 000,768,036 | ---- | M] () -- C:\Program Files\Jun2010_d3dx9_43_x86.cab
[2010/06/02 05:22:32 | 000,124,596 | ---- | M] () -- C:\Program Files\Jun2010_XACT_x64.cab
[2010/06/02 05:22:32 | 000,093,686 | ---- | M] () -- C:\Program Files\Jun2010_XACT_x86.cab
[2010/06/02 05:22:32 | 000,277,338 | ---- | M] () -- C:\Program Files\Jun2010_XAudio_x64.cab
[2010/06/02 05:22:32 | 000,278,060 | ---- | M] () -- C:\Program Files\Jun2010_XAudio_x86.cab
[2010/06/02 05:22:32 | 000,844,884 | ---- | M] () -- C:\Program Files\Mar2008_d3dx10_37_x64.cab
[2010/06/02 05:22:34 | 000,818,260 | ---- | M] () -- C:\Program Files\Mar2008_d3dx10_37_x86.cab
[2010/06/02 05:22:34 | 001,769,862 | ---- | M] () -- C:\Program Files\Mar2008_d3dx9_37_x64.cab
[2010/06/02 05:22:34 | 001,443,282 | ---- | M] () -- C:\Program Files\Mar2008_d3dx9_37_x86.cab
[2010/06/02 05:22:34 | 000,055,058 | ---- | M] () -- C:\Program Files\Mar2008_X3DAudio_x64.cab
[2010/06/02 05:22:34 | 000,021,867 | ---- | M] () -- C:\Program Files\Mar2008_X3DAudio_x86.cab
[2010/06/02 05:22:36 | 000,122,336 | ---- | M] () -- C:\Program Files\Mar2008_XACT_x64.cab
[2010/06/02 05:22:36 | 000,093,734 | ---- | M] () -- C:\Program Files\Mar2008_XACT_x86.cab
[2010/06/02 05:22:36 | 000,251,194 | ---- | M] () -- C:\Program Files\Mar2008_XAudio_x64.cab
[2010/06/02 05:22:36 | 000,226,250 | ---- | M] () -- C:\Program Files\Mar2008_XAudio_x86.cab
[2010/06/02 05:22:36 | 001,067,160 | ---- | M] () -- C:\Program Files\Mar2009_d3dx10_41_x64.cab
[2010/06/02 05:22:36 | 001,040,745 | ---- | M] () -- C:\Program Files\Mar2009_d3dx10_41_x86.cab
[2010/06/02 05:22:36 | 001,973,702 | ---- | M] () -- C:\Program Files\Mar2009_d3dx9_41_x64.cab
[2010/06/02 05:22:36 | 001,612,446 | ---- | M] () -- C:\Program Files\Mar2009_d3dx9_41_x86.cab
[2010/06/02 05:22:38 | 000,054,600 | ---- | M] () -- C:\Program Files\Mar2009_X3DAudio_x64.cab
[2010/06/02 05:22:38 | 000,021,298 | ---- | M] () -- C:\Program Files\Mar2009_X3DAudio_x86.cab
[2010/06/02 05:22:46 | 000,121,506 | ---- | M] () -- C:\Program Files\Mar2009_XACT_x64.cab
[2010/06/02 05:22:46 | 000,092,740 | ---- | M] () -- C:\Program Files\Mar2009_XACT_x86.cab
[2010/06/02 05:22:46 | 000,275,044 | ---- | M] () -- C:\Program Files\Mar2009_XAudio_x64.cab
[2010/06/02 05:22:48 | 000,273,018 | ---- | M] () -- C:\Program Files\Mar2009_XAudio_x86.cab
[2010/06/02 05:22:48 | 000,864,600 | ---- | M] () -- C:\Program Files\Nov2007_d3dx10_36_x64.cab
[2010/06/02 05:22:48 | 000,803,884 | ---- | M] () -- C:\Program Files\Nov2007_d3dx10_36_x86.cab
[2010/06/02 05:22:48 | 001,802,058 | ---- | M] () -- C:\Program Files\Nov2007_d3dx9_36_x64.cab
[2010/06/02 05:22:48 | 001,709,360 | ---- | M] () -- C:\Program Files\Nov2007_d3dx9_36_x86.cab
[2010/06/02 05:22:50 | 000,046,144 | ---- | M] () -- C:\Program Files\NOV2007_X3DAudio_x64.cab
[2010/06/02 05:22:50 | 000,018,496 | ---- | M] () -- C:\Program Files\NOV2007_X3DAudio_x86.cab
[2010/06/02 05:22:50 | 000,196,762 | ---- | M] () -- C:\Program Files\NOV2007_XACT_x64.cab
[2010/06/02 05:22:50 | 000,148,264 | ---- | M] () -- C:\Program Files\NOV2007_XACT_x86.cab
[2010/06/02 05:22:50 | 000,994,154 | ---- | M] () -- C:\Program Files\Nov2008_d3dx10_40_x64.cab
[2010/06/02 05:22:52 | 000,965,421 | ---- | M] () -- C:\Program Files\Nov2008_d3dx10_40_x86.cab
[2010/06/02 05:22:52 | 001,906,878 | ---- | M] () -- C:\Program Files\Nov2008_d3dx9_40_x64.cab
[2010/06/02 05:22:52 | 001,550,796 | ---- | M] () -- C:\Program Files\Nov2008_d3dx9_40_x86.cab
[2010/06/02 05:22:52 | 000,054,522 | ---- | M] () -- C:\Program Files\Nov2008_X3DAudio_x64.cab
[2010/06/02 05:22:52 | 000,021,851 | ---- | M] () -- C:\Program Files\Nov2008_X3DAudio_x86.cab
[2010/06/02 05:22:52 | 000,121,794 | ---- | M] () -- C:\Program Files\Nov2008_XACT_x64.cab
[2010/06/02 05:22:52 | 000,092,684 | ---- | M] () -- C:\Program Files\Nov2008_XACT_x86.cab
[2010/06/02 05:22:54 | 000,273,960 | ---- | M] () -- C:\Program Files\Nov2008_XAudio_x64.cab
[2010/06/02 05:22:54 | 000,272,611 | ---- | M] () -- C:\Program Files\Nov2008_XAudio_x86.cab
[2010/06/02 05:22:54 | 000,086,037 | ---- | M] () -- C:\Program Files\Oct2005_xinput_x64.cab
[2010/06/02 05:22:54 | 000,045,359 | ---- | M] () -- C:\Program Files\Oct2005_xinput_x86.cab
[2010/06/02 05:22:54 | 001,412,902 | ---- | M] () -- C:\Program Files\OCT2006_d3dx9_31_x64.cab
[2010/06/02 05:22:54 | 001,127,217 | ---- | M] () -- C:\Program Files\OCT2006_d3dx9_31_x86.cab
[2010/06/02 05:22:54 | 000,182,361 | ---- | M] () -- C:\Program Files\OCT2006_XACT_x64.cab
[2010/06/02 05:22:54 | 000,138,017 | ---- | M] () -- C:\Program Files\OCT2006_XACT_x86.cab

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/01/13 03:44:04 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/01/13 03:44:04 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/01/13 03:44:03 | 000,897,024 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/01/14 23:03:41 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/01/14 23:20:03 | 000,000,170 | -HS- | M] () -- C:\Documents and Settings\Bob\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2010/01/13 10:18:24 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Bob\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2011/04/15 16:14:00 | 004,321,723 | R--- | M] () -- C:\Documents and Settings\Bob\Desktop\ComboFix.exe
[2011/04/13 20:26:07 | 007,734,240 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Bob\Desktop\mbam-setup.exe
[2011/04/14 01:03:30 | 000,080,384 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\MBRCheck.exe
[2011/04/15 18:02:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\OTL.exe
[2011/04/13 20:11:43 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bob\Desktop\TFC.exe
[2011/04/13 20:48:46 | 000,301,568 | ---- | M] () -- C:\Documents and Settings\Bob\Desktop\y3c3dcoj.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2010/01/14 23:20:03 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\Bob\Favorites\Desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >
[2011/04/15 17:42:50 | 000,245,760 | -HS- | M] () -- C:\Documents and Settings\Bob\Cookies\index.dat

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >
[2007/06/26 23:10:26 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\inf\unregmp2.exe

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.* >
[2008/04/13 20:11:51 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\custsat.dll
[2004/08/04 02:06:34 | 000,004,821 | ---- | M] () -- C:\Program Files\Messenger\logowin.gif
[2004/08/04 02:06:34 | 000,007,047 | ---- | M] () -- C:\Program Files\Messenger\lvback.gif
[2008/05/02 10:01:49 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgsc.dll
[2008/04/13 13:30:28 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgslang.dll
[2008/04/13 20:12:28 | 001,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe
[2007/04/02 14:07:23 | 000,002,882 | ---- | M] () -- C:\Program Files\Messenger\newalert.wav
[2007/04/02 14:07:23 | 000,006,156 | ---- | M] () -- C:\Program Files\Messenger\newemail.wav
[2007/04/02 14:07:24 | 000,006,160 | ---- | M] () -- C:\Program Files\Messenger\online.wav
[2004/08/04 02:06:36 | 000,004,454 | ---- | M] () -- C:\Program Files\Messenger\type.wav
[2004/08/04 02:06:36 | 000,115,981 | ---- | M] () -- C:\Program Files\Messenger\xpmsgr.chm

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< >

========== Alternate Data Streams ==========

@Alternate Data Stream - 96 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C07A6A6B
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2D7D575C
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7C60A173

< End of report >

**GTO67** · 16-04-2011

OTL Extras logfile created on: 4/15/2011 6:07:39 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Bob\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 80.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 931.50 Gb Total Space | 693.27 Gb Free Space | 74.42% Space Free | Partition Type: NTFS

Computer Name: MULLEN | User Name: Bob | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [FinePix] -- "C:\Program Files\FinePixViewer\FinePixViewer.exe" "%1" (FUJI PHOTO FILM CO.,LTD.)
Directory [FinePixPrint] -- "C:\Program Files\FinePixViewer\FinePixViewer.exe" /p "%1" (FUJI PHOTO FILM CO.,LTD.)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List]
"C:\Program Files\TmNationsForever\TmForever.exe" = C:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmF orever -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorre nt -- (BitTorrent, Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall]
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{075473F5-846A-448B-BCB3-104AA1760205}" = Roxio RecordNow Data
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = Roxio DLA
"{152B782A-05F3-48EC-9AAC-4D3EB68D9E20}" = Quake 4(TM)
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{1E99F5D7-4262-4C7C-9135-F066E7485811}" = System Requirements Lab
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Roxio MyDVD LE
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
"{24ED4D80-8294-11D5-96CD-0040266301AD}" = FinePixViewer Ver.4.2
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 24
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2D87E961-577B-492B-AD54-1368680FB9A7}" = Bing Maps 3D
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3560CE5A-C4EF-4DB0-9ECC-BA035FE309C5}" = MSN Toolbar
"{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{41A3E90A-F944-4ED0-9A84-D64EBADDA0D3}" = Medical Dictionary M7
"{43CAC9A1-1993-4F65-9096-7C9AFC2BBF54}" = Dell CinePlayer
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{4F3E17F8-F1C8-4A4B-9EB8-1EE2D190CDA9}" = Adobe Setup
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{5490882C-6961-11D5-BAE5-00E0188E010B}" = FUJIFILM USB Driver
"{56F3E1FF-54FE-4384-A153-6CCABA097814}" = Creative MediaSource
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5BF5F9C5-E95B-4AFA-94BE-F2A9CA73B61D}" = Apple Mobile Device Support
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6994491D-D491-48F1-AE1F-E179C1FFFC2F}" = HP Photosmart Essential
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari
"{6DB7AD00-F781-11DF-9EEF-001279CD8240}" = Google Earth
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{7399656A-A683-41F9-8B81-B49A5138B76C}" = Serif PhotoPlus 9.0
"{77B5AD60-8F14-11D4-9BC9-0050041A1090}" = American McGee's Alice(tm)
"{7C5B4583-7CBF-4289-B195-03B553959DEA}" = VoiceOver Kit
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc
"{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8F8D9297-FDD2-405A-97E7-E52C7B2F97B3}" = Ulead VideoStudio SE DVD
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{FB00DFCA-0DDF-4390-A3A9-4D77732DE715}" =
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{934E9442-D305-4ACF-AD87-A6C11D677CB9}" = ImageMixer VCD2 for FinePix
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9941F0AA-B903-4AF4-A055-83A9815CC011}" = Sonic Encoders
"{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab
"{9E2514D9-DC24-4634-B348-61F3EF0F1628}" = Sound Blaster Audigy 2 ZS
"{9FC8D8F8-AF3A-4488-98AF-51C6DEC732F2}" = c3100_Help
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA105E81-23A3-4C77-A0E0-BA7FF008C156}" = Human 3D LR2i
"{AAD47011-8518-4608-9656-951DA35B587B}" = iTunes
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Roxio RecordNow Audio
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.3
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Roxio RecordNow Copy
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B45FABE7-D101-4D99-A671-E16DA40AF7F0}" = Microsoft Games for Windows - LIVE
"{B578C85A-A84C-4230-A177-C5B2AF565B8C}" = Microsoft Games for Windows - LIVE Redistributable
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D680C913-5955-469D-9D88-C1940F7506D6}" = RAW FILE CONVERTER LE
"{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
"{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry
"{D78653C3-A8FF-415F-92E6-D774E634FF2D}" = Dell ResourceCD
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp
"{DC525714-3134-4749-A39F-E3216A4FF9BD}" = Halo CE Cracked Setup
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{DFFCDB41-C2DA-47D6-96FF-03C05C0BEA22}" = biohazard 4
"{E1B80DEE-A795-4258-8445-074C06AE3AB8}" = MarketResearch
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E337B156-DF81-48D8-8977-B1574EE87BCF}" = USB2.0 Capture Device
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E7C97E98-4C2D-BEAF-5D2F-CC45A2F95D90}" = Acrobat.com
"{E9BBC8B2-0D3F-40CA-9E68-EEF1B9E32DAA}" = Anatomy Atlas LR2i
"{EB8C9964-09AC-48bf-8B98-027609C78251}" = C3100
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EEFB15EB-FE8B-47DF-A496-1C4D1420294A}" = Doom 3
"{F08E8D2E-F132-4742-9C87-D5FF223A016A}" = Adobe Illustrator CS3
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC
"{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan
"{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F8650CB3-89F1-4AE0-81AC-917423C58DB8}" = Serif PhotoPlus Association File Formats
"{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations
"{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"12133444-BF36-4d4e-B7FB-A3424C645DE4" = GemMaster Mystic
"7-Zip" = 7-Zip 4.65
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Adobe_a04a925a57548091300ada368235fc6" = Adobe Illustrator CS3
"Advanced Video FX Engine" = Advanced Video FX Engine
"Alien Arena 2011_is1" = Alien Arena 2011
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"Audacity_is1" = Audacity 1.2.6
"AudioCS" = Creative Audio Console
"B3EE3001-DC24-4cd1-8743-5692C716659F" = Otto
"Bejeweled 3" = Bejeweled 3
"BitTorrent" = BitTorrent
"BN_DesktopReader" = NOOK for PC
"CCleaner" = CCleaner
"Charlaine Harris - Dying for Daylight" = Charlaine Harris - Dying for Daylight
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B3204 85DF8CE.1" = Acrobat.com
"conduitEngine" = Conduit Engine
"Creative Live! Cam Center" = Creative Live! Cam Center
"Creative Live! Cam Manager" = Creative Live! Cam Manager
"Creative Live! Cam User's Guide" = Creative Live! Cam User's Guide
"Creative Photo Manager" = Creative Photo Manager
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"Creative VF0410" = Creative Live! Cam Video IM Pro (VF0410) (1.01.01.00)
"CSI-3 Dimensions of Murder" = CSI-3 Dimensions of Murder 1.1
"Defraggler" = Defraggler
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Escape Rosecliff Island 1.00" = Escape Rosecliff Island 1.00
"ESPNMotion" = ESPNMotion
"ExamView ActiveX Control v2" = ExamView ActiveX Control v2
"ExamView Pro" = ExamView Assessment Suite
"EZ Vinyl/Tape Converter by MixMeister_is1" = EZ Vinyl/Tape Converter 1.5.2.0 by MixMeister
"Fallout" = Fallout
"Gardenscapes 1.00" = Gardenscapes 1.00
"gBurner" = gBurner
"Google Chrome" = Google Chrome
"Half-Life" = Half-Life
"Half-Life: Blue Shift" = Half-Life: Blue Shift
"Half-Life: Opposing Force" = Half-Life: Opposing Force
"Hidden in Time - Mirror Mirror 1.00" = Hidden in Time - Mirror Mirror 1.00
"Hitman 2 Silent Assassin" = Hitman 2 Silent Assassin
"HP Imaging Device Functions" = HP Imaging Device Functions 7.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
"HPExtendedCapabilities" = HP Customer Participation Program 7.0
"HPOCR" = OCR Software by I.R.I.S 7.0
"ie8" = Windows Internet Explorer 8
"InstallShield_{152B782A-05F3-48EC-9AAC-4D3EB68D9E20}" = Quake 4(TM)
"InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry
"InstallShield_{EEFB15EB-FE8B-47DF-A496-1C4D1420294A}" = Doom 3
"Luxor 4 Quest For The Afterlife 1.00" = Luxor 4 Quest For The Afterlife 1.00
"Machinarium" = Machinarium
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McDougal Littell EasyPlanner" = McDougal Littell EasyPlanner
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MWASPI" = MicroStaff WINASPI
"N360" = Norton Security Suite
"NVIDIA Drivers" = NVIDIA Drivers
"OpenAL" = OpenAL
"PROSet" = Intel(R) PRO Network Connections Drivers
"Quake III Arena" = Quake III Arena
"Speccy" = Speccy
"SysInfo" = Creative System Information
"Tahiti Hidden Pearl 1.00" = Tahiti Hidden Pearl 1.00
"TmNationsForever_is1" = TmNationsForever Update 2010-03-15
"WaveStudio 7" = Creative WaveStudio 7
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1644491937-861567501-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall]

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4/3/2011 5:04:57 PM | Computer Name = MULLEN | Source = Application Hang | ID = 1001
Description = Fault bucket 734562961.

Error - 4/3/2011 5:05:11 PM | Computer Name = MULLEN | Source = Application Hang | ID = 1001
Description = Fault bucket 734562961.

Error - 4/13/2011 7

49 PM | Computer Name = MULLEN | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module , version 0.0.0.0, fault address 0x00000000.

Error - 4/14/2011 12:42:09 AM | Computer Name = MULLEN | Source = Application Hang | ID = 1002
Description = Hanging application explorer.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 4/14/2011 12:55:44 AM | Computer Name = MULLEN | Source = Application Hang | ID = 1002
Description = Hanging application explorer.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 4/14/2011 12:57:39 AM | Computer Name = MULLEN | Source = Application Hang | ID = 1002
Description = Hanging application explorer.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 4/15/2011 4:25:27 PM | Computer Name = MULLEN | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: A connection with the server could not be established

Error - 4/15/2011 4:25:27 PM | Computer Name = MULLEN | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

Error - 4/15/2011 5:29:58 PM | Computer Name = MULLEN | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: A connection with the server could not be established

Error - 4/15/2011 5:29:58 PM | Computer Name = MULLEN | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This network connection does not exist.

[ System Events ]
Error - 4/13/2011 8:11:50 PM | Computer Name = MULLEN | Source = Service Control Manager | ID = 7034
Description = The Bonjour Service service terminated unexpectedly. It has done
this 1 time(s).

Error - 4/13/2011 8:11:51 PM | Computer Name = MULLEN | Source = Service Control Manager | ID = 7034
Description = The Java Quick Starter service terminated unexpectedly. It has done
this 1 time(s).

Error - 4/13/2011 8:11:51 PM | Computer Name = MULLEN | Source = Service Control Manager | ID = 7034
Description = The Syntek STK1160 Service service terminated unexpectedly. It has
done this 1 time(s).

Error - 4/13/2011 8:11:51 PM | Computer Name = MULLEN | Source = Service Control Manager | ID = 7034
Description = The Pml Driver HPZ12 service terminated unexpectedly. It has done
this 1 time(s).

Error - 4/13/2011 8:11:51 PM | Computer Name = MULLEN | Source = Service Control Manager | ID = 7034
Description = The Ulead Burning Helper service terminated unexpectedly. It has
done this 1 time(s).

Error - 4/13/2011 8:11:52 PM | Computer Name = MULLEN | Source = Service Control Manager | ID = 7034
Description = The iPod Service service terminated unexpectedly. It has done this
1 time(s).

Error - 4/14/2011 12:22:49 AM | Computer Name = MULLEN | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom1, has a bad block.

Error - 4/14/2011 12:24:10 AM | Computer Name = MULLEN | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom1, has a bad block.

Error - 4/14/2011 12:24:18 AM | Computer Name = MULLEN | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom1, has a bad block.

Error - 4/14/2011 12:24:41 AM | Computer Name = MULLEN | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom1, has a bad block.

< End of report >

Malware on PC is playing audio commercials at random times

Malware on PC is playing audio commercials at random times

Similar Threads

Malware popping up porn sites at random

Malware Attacks: IE Laucnhes random ad popups

Playing my audio CD.

No audio when playing DVD RW

Audio CD not playing in Win Media Player