|
Registered User
Join Date: Jul 2009
Posts: 12
OS: win xp
|
Browser rendered useless, svchost.exe problems.
(I'm posting for a friend since his browser now completely refuses to work. He keeps losing connection while playing games, his system gets very sluggish/laggy. He told me at one point he had several svchost.exe's that were at massive usage. If there is any specific information we could include to help, we would be more than pleased. Thank you for your time.)
So here is my story, One day the internet is working just fine, browser, modem, and everything else. The next day I come in, I get the 2 following errors over, and over again non-stop.
Error #1
svc.host.exe - Application Error
The instruction at "0x100021d7" referenced memory at "0x30de6000". The Memory could not be "written".
Click on OK to terminate the program
Click on CANCEL to debug the program
Error #2
Generic Host Process for Win32 Services
Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience.
Error Signature
szAppName : svchost.exe szAppVer : 5.1.2600.5512 szModName : podmena.dll
szModVer : 0.0.0.0 offset : 000021d7
Logfile of HijackThis v1.99.1
Scan saved at 6:21:34 PM, on 7/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Well, I get on the internet and my browser is dead pretty much. It takes 15-30 minutes to load a single webpage, such as Google, if it even loads it at all. I figured it had something to do with the modem because my modem is extremely old, so off to bestbuy I go and order a new one. I install it and get the same errors and problems. I decide to keep the modem anyway and take it to a bestbuy geek squader. I pay him $30.00 to fix my problem and when I get home I find out he just disabled some svchost.exes and the problems are still there the next day including my browser being awful. I had a friend google my problem and found you guys. College starts in a few weeks and I need this computer to work, ANY advice or help you can give me will be tremendously appreciated.
DDS (Ver_09-06-26.01) - NTFSx86
Run by Compaq_Administrator at 14:42:21.65 on Thu 07/09/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.633 [GMT -5:00]
AV: Trend Micro PC-cillin Internet Security 2006 *On-access scanning disabled* (Outdated) {7D2296BC-32CC-4519-917E-52E652474AF5}
FW: Trend Micro PC-cillin Internet Security (Firewall) *enabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\system32\srvany.exe
C:\pvsw\bin\w3dbsmgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
C:\windows\ld11.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe -k sys
C:\Documents and Settings\Compaq_Administrator\My Documents\download\ferdinkledink\dds.scr
============== Pseudo HJT Report ===============
uWindow Title = Microsoft Internet Explorer provided by Bellsouth® Internet Service
uStart Page = hxxp://www.my.att.net/
uDefault_Page_URL = hxxp://home.bellsouth.net
uSearch Bar = hxxp://home.bellsouth.net/brw_minisearch
mDefault_Page_URL = hxxp://home.bellsouth.net
mStart Page = hxxp://home.bellsouth.net
uInternet Connection Wizard,ShellNext = hxxp://accelerator.bellsouth.net/
BHO: MRI_DISABLED - No File
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: BHO: {5b1d95a2-f547-4e5e-8902-622b08354622} - c:\windows\system32\iehelper.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [AIM] c:\program files\aim\aim.exe -cnetwait.odl
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
mRun: [WordPerfect Office 1215] c:\program files\wordperfect office 12\programs\Registration.exe /title="WordPerfect Office 12" /date=071109 serial=wa12wrx-0000002-hmd lang=EN
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Monitor] "c:\program files\leapfrog\leapfrog connect\Monitor.exe"
mRun: [sysldtray] c:\windows\ld11.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [Nikon Transfer Monitor] c:\program files\common files\nikon\monitor\NkMonitor.exe
mRun: [Logitech Utility] Logi_MwX.Exe
mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
IE: {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - c:\program files\aim\aim.exe
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_05\bin\npjpi150_05.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
LSP: c:\windows\system32\lsp.dll
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxp://echat.bellsouth.net/sdccommon/download/tgctlcm.cab
DPF: {2CA2C9B8-E4F6-4BE9-8601-52ED0AFBA79D} - hxxp://asp.mathxl.com/books/_Players/AccountingPlayer.cab
DPF: {4FE89055-5300-469E-AFAD-DEB3181EDE76} - hxxp://asp.mathxl.com/applets/PearsonInstallAsst.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {95D88B35-A521-472B-A182-BB1A98356421} - hxxp://asp.mathxl.com/books/_Players/PearsonInstallAsst2.cab
DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} - hxxp://games.myspace.com/Gameshell/GameHost/1.0/OberonGameHost.cab
DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} - hxxp://asp.mathxl.com/books/_Players/MathPlayer.cab
Filter: text/html - {3eb98e83-1610-459f-8de8-946e5099c64e} - c:\windows\system32\mst123.dll
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: MRI_DISABLED - c:\windows\system32\__c00E3C7D.dat
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\compaq~1\applic~1\mozilla\firefox\profiles\nkj9z70n.default\
FF - prefs.js: browser.startup.homepage - hxxp://doc.hostingdelivered.com/
FF - plugin: c:\program files\java\jre1.5.0_05\bin\NPJava11.dll
FF - plugin: c:\program files\java\jre1.5.0_05\bin\NPJava12.dll
FF - plugin: c:\program files\java\jre1.5.0_05\bin\NPJava13.dll
FF - plugin: c:\program files\java\jre1.5.0_05\bin\NPJava14.dll
FF - plugin: c:\program files\java\jre1.5.0_05\bin\NPJava32.dll
FF - plugin: c:\program files\java\jre1.5.0_05\bin\NPJPI150_05.dll
FF - plugin: c:\program files\java\jre1.5.0_05\bin\NPOJI610.dll
---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
============= SERVICES / DRIVERS ===============
R1 driverdrv;driverdrv;c:\program files\driver\driver.sys [2009-6-18 9472]
R1 podmenadrv;podmenadrv;c:\program files\podmena\podmena.sys [2009-6-9 9472]
R1 sysdrv;sysdrv;c:\program files\sys\sys.sys [2009-6-25 9344]
R2 LeapFrog Connect Device Service;LeapFrog Connect Device Service;c:\program files\leapfrog\leapfrog connect\CommandService.exe [2009-2-4 991232]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 Pervasive.SQL Workgroup Engine;Pervasive.SQL Workgroup Engine;c:\windows\system32\srvany.exe [2008-8-30 13864]
R2 sys;sys;c:\windows\system32\svchost.exe -k sys [2004-8-10 14336]
R2 Tmfilter;Tmfilter;c:\windows\system32\drivers\tmxpflt.sys [2005-9-26 190480]
R2 Tmpreflt;Tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [2005-9-26 31248]
R3 acfva;acfva;c:\windows\system32\drivers\ACFVA32.sys [2009-6-23 86656]
R3 dgcfltr;DGC Filter Driver;c:\windows\system32\drivers\ACFDCP32.sys [2009-6-23 28928]
S2 podmena;podmena;c:\windows\system32\svchost.exe -k podmena [2004-8-10 14336]
S2 Tmntsrv;Trend Micro Real-time Service;c:\progra~1\trendm~1\intern~1\Tmntsrv.exe [2005-9-28 340037]
S2 TmPfw;Trend Micro Personal Firewall;c:\progra~1\trendm~1\intern~1\TmPfw.exe [2005-9-12 630845]
S2 tmproxy;Trend Micro Proxy Service;c:\progra~1\trendm~1\intern~1\tmproxy.exe [2005-9-12 286788]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2009-4-13 18560]
S3 HSFHWCD2;HSFHWCD2;c:\windows\system32\drivers\HSFHWCD2.sys [2009-6-18 201728]
S3 papycpu;papycpu; [x]
S4 Ca533av;Icatch(IV) Video Camera Device;c:\windows\system32\drivers\ca533av.sys --> c:\windows\system32\drivers\Ca533av.sys [?]
S4 dump_wmimmc;dump_wmimmc;\??\c:\nexon\maplestory\gameguard\dump_wmimmc.sys --> c:\nexon\maplestory\gameguard\dump_wmimmc.sys [?]
S4 USBCamera;Icatch(IV) Still Camera Device;c:\windows\system32\drivers\bulk533.sys --> c:\windows\system32\drivers\Bulk533.sys [?]
=============== Created Last 30 ================
2009-07-01 16:56 33,792 a------- c:\windows\freddy49.exe
2009-06-28 04:08 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Symantec
2009-06-28 04:02 <DIR> --d----- c:\docume~1\alluse~1\applic~1\PCSettings
2009-06-28 04:02 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Norton
2009-06-28 03:59 <DIR> --d----- c:\docume~1\alluse~1\applic~1\NortonInstaller
2009-06-26 23:56 77,161 a------- c:\windows\War3Unin.dat
2009-06-26 23:56 139,264 a------- c:\windows\War3Unin.exe
2009-06-26 23:56 2,829 a------- c:\windows\War3Unin.pif
2009-06-25 18:42 <DIR> --d----- c:\program files\sys
2009-06-25 18:42 2 a------- c:\windows\010112010146118114.dat
2009-06-25 18:42 15,360 ----h--- c:\windows\ld11.exe
2009-06-24 18:49 <DIR> --d----- c:\windows\Options
2009-06-24 16:50 139 a------- C:\d45.bat
2009-06-24 16:44 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Geek Squad
2009-06-24 01:49 <DIR> --d----- c:\program files\CONEXANT
2009-06-24 01:49 <DIR> --d----- c:\program files\common files\muvee Technologies
2009-06-23 21:47 <DIR> --d----- c:\windows\system32\wbem\Repository
2009-06-23 21:18 <DIR> --d----- c:\program files\driver
2009-06-23 17:51 16,128 a------- c:\windows\system32\drivers\MODEMCSA.sys
2009-06-23 17:51 16,128 a------- c:\windows\system32\dllcache\modemcsa.sys
2009-06-23 17:50 26,112 a------- c:\windows\system32\drivers\usbser.sys
2009-06-23 17:50 26,112 a------- c:\windows\system32\dllcache\usbser.sys
2009-06-23 17:45 <DIR> --d----- c:\program files\NetWaiting
2009-06-23 17:44 212,992 a------- c:\windows\system32\UCI32C19.dll
2009-06-23 17:44 147,456 a------- c:\windows\system32\TAP32C03.dll
2009-06-23 17:44 94,208 a------- c:\windows\system32\ACFSDK32.dll
2009-06-23 17:44 86,656 a------- c:\windows\system32\drivers\ACFVA32.sys
2009-06-23 17:44 28,928 a------- c:\windows\system32\drivers\ACFDCP32.sys
2009-06-23 17:44 12,672 a------- c:\windows\system32\drivers\ACFSDK32.sys
2009-06-22 02:11 <DIR> --d----- c:\program files\MirageBot
2009-06-22 02:11 <DIR> --d----- c:\docume~1\compaq~1\applic~1\MirageBot
2009-06-22 00:09 2 ----h--- c:\windows\ro122621.dat
2009-06-20 23:22 2 ----h--- c:\windows\ro122597.dat
2009-06-18 18:58 2 ----h--- c:\windows\ro122689.dat
2009-06-18 17:59 201,728 a------- c:\windows\system32\drivers\HSFHWCD2.sys
2009-06-18 17:59 129,012 a------- c:\windows\system32\drivers\HSFProf.cty
2009-06-18 17:59 86,016 a------- c:\windows\system32\mdmxsdk.dll
2009-06-18 17:59 32,218 a------- c:\windows\system32\HSFCI009.dll
2009-06-18 17:59 13,059 a------- c:\windows\system32\drivers\mdmxsdk.sys
2009-06-18 17:59 1,041,536 a------- c:\windows\system32\drivers\HSF_DP.sys
2009-06-18 17:59 682,752 a------- c:\windows\system32\drivers\HSF_CNXT.sys
2009-06-18 17:53 14,848 a------- c:\windows\system32\mpnatapi.dll
2009-06-18 17:51 296 a------- c:\windows\artera.usr
2009-06-18 17:48 494 a------- c:\windows\EReg206.dat
2009-06-18 17:45 552,960 -------- c:\windows\system32\FAST2003.ocx
2009-06-18 17:45 204,800 -------- c:\windows\system32\FAST2006.ocx
2009-06-18 17:45 126,976 -------- c:\windows\system32\FAST2004.dll
2009-06-18 17:45 103,744 -------- c:\windows\system32\MSCOMM32.OCX
2009-06-17 18:40 21,504 a------- c:\windows\system32\hidserv.dll
2009-06-17 18:40 21,504 a------- c:\windows\system32\dllcache\hidserv.dll
2009-06-17 18:40 14,592 a------- c:\windows\system32\drivers\kbdhid.sys
2009-06-17 18:40 14,592 a------- c:\windows\system32\dllcache\kbdhid.sys
2009-06-16 19:50 5,632 a------- c:\windows\system32\ptpusb.dll
2009-06-16 19:50 159,232 a------- c:\windows\system32\ptpusd.dll
2009-06-16 18:16 <DIR> --d----- c:\program files\common files\Nikon
2009-06-16 18:16 <DIR> --d----- c:\program files\Nikon
2009-06-16 18:16 20 ----h--- c:\docume~1\alluse~1\applic~1\PKP_DLdu.DAT
2009-06-12 20:52 2 ----h--- c:\windows\ro123198.dat
2009-06-12 20:52 1 ----h--- c:\windows\bf23567.dat
2009-06-12 19:53 2 ----h--- c:\windows\ro123222.dat
2009-06-12 19:52 2 ----h--- c:\windows\ro123290.dat
2009-06-12 19:48 183,296 a------- c:\windows\system32\lsp.dll
2009-06-12 19:48 96,768 a------- c:\windows\syssvc.exe
2009-06-09 18:17 1 ----h--- c:\windows\f23567.dat
2009-06-09 18:17 2 ----h--- c:\windows\ro122366.dat
2009-06-09 17:57 10,752 a------- c:\windows\system32\iehelper.dll
2009-06-09 17:49 1 ----h--- c:\windows\msmark2.dat
2009-06-09 17:49 2 ----h--- c:\windows\ro122390.dat
2009-06-09 17:49 <DIR> --d----- c:\program files\podmena
2009-06-09 17:49 2 ----h--- c:\windows\ro122458.dat
2009-06-09 17:48 262,672 a------- c:\windows\sysguard.exe
2009-06-09 17:47 43,008 ----h--- c:\windows\ld09.exe
==================== Find3M ====================
2009-06-16 18:16 106,496 a------- c:\windows\system32\ATL71.DLL
2009-05-07 10:32 345,600 a------- c:\windows\system32\localspl.dll
2009-05-07 10:32 345,600 -------- c:\windows\system32\dllcache\localspl.dll
2009-05-02 11:54 92,947 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2009-05-02 11:54 341,048 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\HPBasicDetection3.dll
2009-05-02 11:54 163,840 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\modemcheck.dll
2009-05-02 11:54 61,440 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\modemutil.dll
2009-05-02 11:54 45,056 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\uninstallui\eHelpSetup.exe
2009-05-02 11:54 44,032 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\scripts\devcon.exe
2009-05-02 11:54 40,960 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\ScDmi.dll
2009-05-02 11:54 32,768 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\uploadHSC.dll
2009-05-02 11:54 32,768 a------- c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\Scom.dll
2009-04-22 00:18 95,232 a------- c:\windows\system32\msscript.ocx.tmp
2009-04-17 07:26 1,847,168 a------- c:\windows\system32\win32k.sys
2009-04-17 07:26 1,847,168 -------- c:\windows\system32\dllcache\win32k.sys
2009-04-15 09:51 585,216 a------- c:\windows\system32\rpcrt4.dll
2009-04-15 09:51 585,216 -------- c:\windows\system32\dllcache\rpcrt4.dll
2006-06-02 15:17 0 ac------ c:\docume~1\compaq~1\applic~1\wklnhst.dat
============= FINISH: 14:42:54.93 ===============
|