View Single Post
Old 07-02-2009, 06:36 PM   #1 (permalink)
stevennashy
Registered User
 
Join Date: Jul 2009
Posts: 18
OS: vista home premium 32bit


all search engines get redirected and i found rootkit problems skynetblabla.dll

please help me avg picks them up but they keep trying to come into my system and my search engine keeps redirecting me here is my dds:
DDS (Ver_09-06-26.01) - NTFSx86
Run by katie at 9:23:02.11 on Fri 03/07/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_14
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.61.1033.18.1013.283 [GMT 10:00]

AV: BP Security Anti-Virus *On-access scanning enabled* (Updated) {2565CEEE-6BDB-4A6D-AD6D-F682F2695014}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k apphost
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Windows\ehome\ehRecvr.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Windows\ehome\ehsched.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Acer\Empowering Technology\eNet\eNet Service.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k iissvcs
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Users\katie\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\katie\AppData\Local\Temp\nspF422.tmp\apa
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Users\katie\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uStart Page = hxxp://www.ninemsn.com.au
uDefault_Page_URL = hxxp://www.ninemsn.com.au
mStart Page = hxxp://www.ninemsn.com.au
mURLSearchHooks: H - No File
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg8\toolbar\IEToolbar.dll
BHO: precisead: {09ee039e-9f62-1a05-9036-c7c90bf512b1} - c:\windows\system32\nsg72E5.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg8\toolbar\IEToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Acer eDataSecurity Management: {5cbe3b7c-1e47-477e-a7dd-396db0476e29} - c:\windows\system32\eDStoolbar.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg8\toolbar\IEToolbar.dll
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
TB: {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe"
mRun: [Apoint] c:\program files\apoint2k\Apoint.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe
mPolicies-explorer: NoResolveTrack = 0 (0x0)
mPolicies-explorer: NoFileAssociate = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: DisableStatusMessages = 1 (0x1)
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://support.microsoft.com/OAS/ActiveX/MSDcode.cab
DPF: {1B4F9DD7-2D7C-44B5-9126-73206DA0AE75} - hxxp://files.authentium.com/bigpond/bin/wizard.exe
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase1140.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1245454421005
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {99FE5072-78AA-4FEE-89BA-69A5FA55343F} - hxxp://download.microsoft.com/download/B/3/A/B3A2EA73-793D-4ABE-992D-C81140384044/igdtoolx.cab
DPF: {A3256902-51FA-45A0-8A97-FC1143C169D9} - hxxp://support.microsoft.com/mats/DiagWebControl.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\Skype4COM.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs: c:\windows\system32\avgrsstx.dll

============= SERVICES / DRIVERS ===============

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2009-6-30 12552]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-6-30 327688]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-6-30 108552]
R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\avg\avg8\avgemc.exe [2009-7-1 906520]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-7-1 298776]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2008-12-10 223232]
R3 enecir;ENE CIR Receiver;c:\windows\system32\drivers\enecir.sys [2001-1-10 32256]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2008-11-17 3668480]
S2 gupdate1c9c0993032ba89;Google Update Service (gupdate1c9c0993032ba89);c:\program files\google\update\GoogleUpdate.exe [2009-4-19 133104]
S3 authfwco;authfwco;c:\windows\system32\drivers\authfwco.sys [2009-5-2 22792]
S3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [2009-4-10 111112]
S3 DfSdkS;Defragmentation-Service;c:\program files\ashampoo\ashampoo winoptimizer 6\DfSdkS.exe [2009-6-21 410976]
S3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2009-3-27 80744]

=============== Created Last 30 ================

2009-07-02 20:10 60,026 a------- c:\windows\system32\yjrkpknvwo.dll-uninst.exe
2009-07-02 20:10 85,733 a------- c:\windows\system32\eca812ea-9d6c-ce94-7017-55171f3209e5.exe
2009-07-02 20:09 48,273 a------- c:\windows\system32\lmtbnwowvs.exe
2009-07-02 19:54 <DIR> --d----- c:\program files\LimeWire
2009-07-02 18:49 <DIR> --d--r-- c:\program files\Skype
2009-07-02 18:41 <DIR> --d----- c:\program files\uTorrent
2009-07-02 10:57 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-02 10:57 <DIR> --d----- c:\programdata\Malwarebytes
2009-07-02 10:57 <DIR> --d----- c:\progra~2\Malwarebytes
2009-07-02 10:57 19,096 a------- c:\windows\system32\drivers\mbam.sys
2009-07-02 10:57 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-07-02 09:50 <DIR> --d----- c:\programdata\DAEMON Tools Lite
2009-07-02 09:50 <DIR> --d----- c:\progra~2\DAEMON Tools Lite
2009-07-02 09:49 <DIR> --d----- c:\program files\DAEMON Tools Toolbar
2009-07-02 09:49 <DIR> --d----- c:\program files\DAEMON Tools Lite
2009-07-02 09:48 <DIR> --d----- c:\users\katie\appdata\roaming\DAEMON Tools Lite
2009-07-01 23:52 <DIR> --dsh--- C:\$RECYCLE.BIN
2009-07-01 22:48 161,792 a------- c:\windows\SWREG.exe
2009-07-01 22:48 155,136 a------- c:\windows\PEV.exe
2009-07-01 22:48 98,816 a------- c:\windows\sed.exe
2009-07-01 21:45 <DIR> --d----- C:\delete
2009-07-01 11:07 <DIR> --d-h--- C:\$AVG8.VAULT$
2009-07-01 08:27 <DIR> --d----- c:\programdata\AVG Security Toolbar
2009-07-01 08:27 <DIR> --d----- c:\progra~2\AVG Security Toolbar
2009-07-01 02:58 <DIR> -cd-h--- c:\programdata\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2009-07-01 02:58 <DIR> -cd-h--- c:\progra~2\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2009-07-01 02:55 <DIR> --d----- c:\program files\Cute CD DVD Burner
2009-07-01 00:10 <DIR> --d----- c:\program files\Trend Micro
2009-06-30 23:13 108,552 a------- c:\windows\system32\drivers\avgtdix.sys
2009-06-30 23:13 12,552 a------- c:\windows\system32\drivers\avgrkx86.sys
2009-06-30 23:13 11,952 a------- c:\windows\system32\avgrsstx.dll
2009-06-30 23:13 327,688 a------- c:\windows\system32\drivers\avgldx86.sys
2009-06-30 23:13 <DIR> --d----- c:\windows\system32\drivers\Avg
2009-06-30 23:13 <DIR> --d----- c:\program files\AVG
2009-06-30 23:13 <DIR> --d----- c:\programdata\avg8
2009-06-30 23:13 <DIR> --d----- c:\progra~2\avg8
2009-06-30 12:04 1,835,008 a------- c:\windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
2009-06-30 12:04 49,152 a------- c:\windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
2009-06-30 12:04 16,384 a------- c:\windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
2009-06-30 11:51 <DIR> --d----- c:\program files\Microsoft ATS
2009-06-29 10:42 38 a------- c:\windows\avisplitter.ini
2009-06-29 10:42 839,680 a------- c:\windows\system32\lameACM.acm
2009-06-29 10:42 414 a------- c:\windows\system32\lame_acm.xml
2009-06-29 10:42 217,088 a------- c:\windows\system32\yv12vfw.dll
2009-06-29 10:42 90,112 a------- c:\windows\system32\dpl100.dll
2009-06-29 10:42 85,504 a------- c:\windows\system32\ff_vfw.dll
2009-06-29 10:42 547 a------- c:\windows\system32\ff_vfw.dll.manifest
2009-06-29 10:42 <DIR> --d----- c:\program files\K-Lite Codec Pack
2009-06-29 08:35 <DIR> --d----- c:\program files\MagicISO
2009-06-29 06:24 <DIR> --d----- c:\program files\common files\NSV
2009-06-28 14:34 <DIR> --d----- c:\users\katie\appdata\roaming\Error Fix
2009-06-27 19:01 <DIR> --d----- c:\programdata\NCH Swift Sound
2009-06-27 19:00 <DIR> --d----- c:\programdata\NCH Software
2009-06-27 18:57 <DIR> --d----- c:\users\katie\appdata\roaming\NCH Software
2009-06-27 18:57 <DIR> --d----- c:\program files\NCH Software
2009-06-27 17:37 <DIR> --d----- c:\program files\ZPP
2009-06-25 12:56 <DIR> --d----- C:\Graboid
2009-06-24 19:31 <DIR> --d----- c:\users\katie\appdata\roaming\Pingus
2009-06-24 19:31 <DIR> --d----- c:\program files\Pingus
2009-06-23 13:09 428,544 a------- c:\windows\system32\EncDec.dll
2009-06-23 13:09 217,088 a------- c:\windows\system32\psisrndr.ax
2009-06-23 13:09 293,376 a------- c:\windows\system32\psisdecd.dll
2009-06-23 13:09 177,664 a------- c:\windows\system32\mpg2splt.ax
2009-06-23 13:09 80,896 a------- c:\windows\system32\MSNP.ax
2009-06-23 13:09 57,856 a------- c:\windows\system32\MSDvbNP.ax
2009-06-23 10:23 636,928 a------- c:\windows\system32\localspl.dll
2009-06-23 10:23 784,896 a------- c:\windows\system32\rpcrt4.dll
2009-06-23 10:02 <DIR> --d----- c:\program files\Microsoft Easy Assist
2009-06-23 10:02 <DIR> --d----- c:\programdata\Applications
2009-06-23 10:02 <DIR> --d----- c:\progra~2\Applications
2009-06-21 19:23 39,776 a------- c:\windows\system32\DfSdkBt64.exe
2009-06-21 19:23 33,632 a------- c:\windows\system32\DfSdkBt.exe
2009-06-21 19:22 <DIR> --d----- c:\programdata\page
2009-06-21 19:22 <DIR> --d----- c:\progra~2\page
2009-06-18 13:44 <DIR> --d----- c:\program files\Easy DVD Maker
2009-06-18 13:34 <DIR> --d----- c:\program files\Astonsoft
2009-06-18 13:25 <DIR> --d----- c:\program files\Alcohol Soft
2009-06-18 13:20 721,904 a------- c:\windows\system32\drivers\sptd.sys
2009-06-18 08:57 <DIR> --d----- c:\program files\Live_TV
2009-06-17 20:03 3,073,320 a------- c:\windows\system32\AdvrCntr2D6E0B790.dll
2009-06-17 20:03 638,976 a------- c:\windows\system32\NEROINSTAEC43759.DB
2009-06-17 20:03 996,648 a------- c:\windows\system32\ShellManager10E2D762.dll
2009-06-17 19:29 69 a------- c:\windows\NeroDigital.ini
2009-06-17 17:31 <DIR> --d----- c:\programdata\Ahead
2009-06-16 15:35 <DIR> --d----- c:\program files\VideoLAN
2009-06-15 21:13 60 a------- c:\windows\mhses.dat
2009-06-15 21:11 148,816 a------- c:\windows\system32\unzip32.dll
2009-06-15 21:11 53,248 a------- c:\windows\system32\quick32.dll
2009-06-15 14:05 <DIR> --d----- c:\program files\WinLemm
2009-06-14 21:32 <DIR> --d----- c:\program files\DOSBox-0.72
2009-06-14 07:58 <DIR> --d----- c:\program files\FrostWire
2009-06-12 19:15 <DIR> --d----- c:\programdata\IObit
2009-06-12 19:15 <DIR> --d----- c:\progra~2\IObit
2009-06-09 13:00 438,272 a------- c:\windows\system32\vp6vfw.dll
2009-06-09 13:00 118,832 a------- c:\windows\system32\SHW32.DLL
2009-06-09 13:00 327,680 a------- c:\windows\system32\vp6dec.ax
2009-06-09 10:54 <DIR> --d----- c:\users\katie\appdata\roaming\CCS64
2009-06-09 10:54 <DIR> --d----- c:\program files\Computerbrains C.C.S
2009-06-09 08:19 <DIR> --d----- c:\programdata\Hiro-Media
2009-06-09 08:19 <DIR> --d----- c:\progra~2\Hiro-Media
2009-06-07 20:47 <DIR> --d----- c:\program files\Toy Story
2009-06-07 20:45 <DIR> --d----- c:\program files\Tiny Toon Adventures - Buster's Hidden Treasure
2009-06-07 20:41 <DIR> --d----- c:\program files\Smurfs
2009-06-07 20:40 <DIR> --d----- c:\program files\Pocahontas
2009-06-07 20:36 <DIR> --d----- c:\program files\Aladdin
2009-06-07 20:33 <DIR> --d----- c:\program files\Lion King
2009-06-06 16:03 <DIR> --d----- C:\hospital
2009-06-06 02:13 <DIR> --d----- c:\program files\Bullfrog
2009-06-06 01:11 <DIR> --d----- c:\users\katie\appdata\roaming\.freeciv
2009-06-04 23:55 <DIR> --d----- c:\program files\Any Video Converter
2009-06-04 22:19 <DIR> --d----- c:\program files\CCleaner
2009-06-04 16:16 3,426,072 a------- c:\windows\system32\d3dx9_32.dll
2009-06-04 16:15 <DIR> --d----- c:\program files\Microsoft SQL Server Compact Edition
2009-06-04 15:14 <DIR> --d----- c:\program files\Windows Live SkyDrive

==================== Find3M ====================

2009-06-23 10:11 174 a--sh--- c:\program files\desktop.ini
2009-06-19 10:02 143,360 a------- c:\windows\inf\infstrng.dat
2009-06-19 10:02 143,360 a------- c:\windows\inf\infstor.dat
2009-06-19 10:02 86,016 a------- c:\windows\inf\infpub.dat
2009-06-18 11:34 2,560 a------- c:\windows\_MSRSTRT.EXE
2009-06-14 07:22 4,608 a------- c:\windows\system32\w95inf32.dll
2009-06-14 07:22 2,272 a------- c:\windows\system32\w95inf16.dll
2009-06-02 00:33 274,224 a------- c:\program files\utorrent.exe
2009-05-31 23:35 410,984 a------- c:\windows\system32\deploytk.dll
2009-05-30 07:37 205,824 a------- c:\windows\system32\xvidvfw.dll
2009-05-30 07:31 881,664 a------- c:\windows\system32\xvidcore.dll
2009-05-14 00:25 152,904 a------- c:\windows\system32\vghd.scr
2009-05-02 07:02 685,056 a------- c:\windows\system32\divx.dll
2009-05-01 01:31 319,456 a------- c:\windows\DIFxAPI.dll
2009-04-27 00:42 457,248 a------- c:\windows\system32\NVUNINST.EXE
2009-04-25 02:05 827,904 a------- c:\windows\system32\wininet.dll
2009-04-25 02:02 78,336 a------- c:\windows\system32\ieencode.dll
2009-04-24 23:44 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-04-21 21:55 2,033,152 a------- c:\windows\system32\win32k.sys
2009-04-21 13:09 499,712 a------- c:\windows\system32\msvcp71.dll
2009-04-21 13:09 348,160 a------- c:\windows\system32\msvcr71.dll
2009-04-21 13:09 106,496 a------- c:\windows\system32\atl71.dll
2009-04-16 17:23 540,672 a------- c:\windows\RtlExUpd.dll
2009-04-15 23:44 81,984 a------- c:\windows\system32\bdod.bin
2009-04-14 16:32 1,784,352 a------- c:\windows\system32\WavesLib.dll
2009-04-14 16:31 1,123,872 a------- c:\windows\system32\RtkPgExt.dll
2009-04-14 16:31 55,840 a------- c:\windows\system32\RtkCoInst.dll
2009-04-14 16:31 2,529,824 a------- c:\windows\system32\RtkAPO.dll
2009-04-14 16:31 326,176 a------- c:\windows\system32\RtkApoApi.dll
2009-04-11 18:49 2,117,632 a------- c:\windows\system32\python25.dll
2009-04-11 18:49 339,968 a------- c:\windows\system32\pythoncom25.dll
2009-04-11 18:49 114,688 a------- c:\windows\system32\pywintypes25.dll
2009-04-10 19:58 711,680 a------- c:\windows\system32\nsg72E5.dll
2009-04-10 14:07 201,311 a------- c:\windows\cxhg15657.exe
2009-04-10 10:43 192,512 a------- c:\windows\system32\txmlutil.dll
2009-04-06 17:09 750,984 a------- c:\windows\system32\Magentic Screensaver.scr
2009-04-06 04:32 50,688 a------- c:\windows\system32\wbhelp2.dll
2009-04-05 21:13 56 a---h--- c:\programdata\ezsidmv.dat
2009-04-05 21:13 56 a---h--- c:\progra~2\ezsidmv.dat
2009-04-04 09:12 665,600 a------- c:\windows\inf\drvindex.dat
2009-03-23 09:15 222 a------- c:\users\katie\appdata\roaming\wklnhst.dat
2006-11-02 22:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 22:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 22:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 22:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 19:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 19:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 19:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 19:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 9:24:44.77 ===============

f
Attached Files
File Type: zip Attach.zip (5.0 KB, 1 views)
stevennashy is offline  
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here