|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
|
|
LinkBack | Thread Tools |
10-07-2008, 04:44 AM
|
#1 (permalink) |
|
Registered User
Join Date: Oct 2008
Posts: 4
OS: vista sp1
|
hijack log IE problems
hello, i have a problem..many adware and spy ware. i think i got most of them with trend micro and combofix, but it seems that there is still something screwing up my IE. The back button doesn't work sometimes and if i go to taskmanager there are like 3 rundll.exe and duplicates of sidebar and explorer. and then i just crash. please help! lol
here is the log. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 6:37:35 AM, on 10/7/2008 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Intel\IntelDH\CCU\CCU_Engine.exe C:\Windows\sttray.exe C:\Windows\System32\rundll32.exe C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\DellSupport\DSAgnt.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Microsoft Office\Office\FINDFAST.EXE C:\Program Files\Microsoft Office\Office\OSA.EXE C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: (no name) - {C815C9FD-5440-0AC4-1871-5D10EF7D2796} - C:\Windows\system32\fkyyli.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [CCUTRAYICON] C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe O4 - HKLM\..\Run: [NMSSupport] "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [BMd38b8363] Rundll32.exe "C:\Windows\system32\cdyvqpve.dll",s O4 - HKLM\..\RunOnce: [TSC] "C:\Program Files\Trend Micro\Internet Security\tsc.exe" /HD O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKCU\..\Run: [Xqflaxyn] "C:\Program Files\Common Files\?icrosoft\e?plorer.exe" O4 - HKCU\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-36124941-2777892650-2886010204-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'IUSR_NMPR') O4 - HKUS\S-1-5-18\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'Default user') O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Radio && MP3 Player - {C461FBFE-C0DE-4757-89DD-A5A833B9AC1F} - C:\Program Files\Crawler\Radio\CRadio.exe O13 - Gopher Prefix: O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: ThreatFire - Unknown owner - C:\Program Files\ThreatFire\TFService.exe (file missing) O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- End of file - 9927 bytes |
|
     |
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
10-11-2008, 01:57 PM
|
#2 (permalink) | |
|
Analyst, Security Team
Join Date: Nov 2007
Location: Manchester, UK
Posts: 1,358
OS: W2K SP4 + XP SP2 + Vista
|
Re: hijack log IE problems
Quote:
My name is Katana and I will be helping you to remove any infection(s) that you may have. Please observe these rules while we work: 1. If you don't know, stop and ask! Don't keep going on. 2. Please reply to this thread. Do not start a new topic. 3. Please continue to respond until I give you the "All Clear" (Just because you can't see a problem doesn't mean it isn't there) If you can do those three things, everything should go smoothly :D Please Note, your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe ---------------------------------------------------------------------------------------- I apologize for the delay in responding, but as you can probably see the forums are quite busy. Unfortunately there are far more people needing help than there are helpers. If you still require help please do the following Download and Run RSIT
__________________
 |
|
|
|
|
|
10-12-2008, 09:24 AM
|
#3 (permalink) |
|
Registered User
Join Date: Oct 2008
Posts: 4
OS: vista sp1
|
Re: hijack log IE problems
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:22:24 AM, on 10/12/2008 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Windows\sttray.exe C:\Program Files\Intel\IntelDH\CCU\CCU_Engine.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\DellSupport\DSAgnt.exe C:\Windows\System32\rundll32.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Microsoft Office\Office\FINDFAST.EXE C:\Program Files\Microsoft Office\Office\OSA.EXE C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Sidebar\sidebar.exe c:\program files\common files\installshield\updateservice\isuspm.exe C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe C:\Windows\Explorer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\anthony-desktop\Desktop\RSIT.exe C:\Program Files\Trend Micro\HijackThis\anthony-desktop.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [CCUTRAYICON] C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe O4 - HKLM\..\Run: [NMSSupport] "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKCU\..\Run: [Xqflaxyn] "C:\Program Files\Common Files\?icrosoft\e?plorer.exe" O4 - HKCU\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-36124941-2777892650-2886010204-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'IUSR_NMPR') O4 - HKUS\S-1-5-18\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'Default user') O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Radio && MP3 Player - {C461FBFE-C0DE-4757-89DD-A5A833B9AC1F} - C:\Program Files\Crawler\Radio\CRadio.exe O13 - Gopher Prefix: O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: ThreatFire - Unknown owner - C:\Program Files\ThreatFire\TFService.exe (file missing) O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- End of file - 9796 bytes ======Scheduled tasks folder====== C:\Windows\tasks\User_Feed_Synchronization-{5A8DED81-B633-46C1-9D3D-E60C3FD2FD1F}.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - c:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-02-19 501384] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - c:\program files\google\googletoolbar3.dll [2007-02-28 2403392] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar3.dll [2007-02-28 2403392] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2006-09-29 151552] "ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2006-10-03 81920] "CCUTRAYICON"=C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe [2006-11-18 182744] "NMSSupport"=C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe [2006-09-26 423424] "ECenter"=c:\dell\E-Center\EULALauncher.exe [2006-11-17 17920] "ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2006-10-03 221184] "dscactivate"=C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe [2007-11-15 16384] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-03-28 413696] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-03-30 267048] "DellSupportCenter"=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2008-08-13 206064] "SigmatelSysTrayApp"=C:\Windows\sttray.exe [2007-01-12 303104] "NvSvc"=C:\Windows\system32\nvsvc.dll [2007-09-17 86016] "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-09-17 8497696] "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-09-17 81920] "UfSeAgnt.exe"=C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe [2008-09-08 970808] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920] "WindowsWelcomeCenter"=C:\Windows\system32\oobefldr.dll [2008-01-19 2153472] "DellSupport"=C:\Program Files\DellSupport\DSAgnt.exe [2006-11-12 446976] "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [2007-02-28 171448] "DellSupportCenter"=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2008-08-13 206064] "Xqflaxyn"=C:\Program Files\Common Files\?icrosoft\e?plorer.exe [] "OE"=C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe [2008-09-08 497008] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Microsoft Find Fast.lnk - C:\Program Files\Microsoft Office\Office\FINDFAST.EXE Office Startup.lnk - C:\Program Files\Microsoft Office\Office\OSA.EXE [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "EnableLUA"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{39e1de03-c534-11db-a474-0019d1310230}] shell\AutoRun\command - F:\autorun.exe ======List of files/folders created in the last 1 months====== 2008-10-12 11:22:18 ----D---- C:\rsit 2008-10-06 09:28:00 ----A---- C:\Windows\DCEBoot.exe 2008-10-05 14:52:54 ----D---- C:\ProgramData\Adobe 2008-10-05 14:52:46 ----D---- C:\Program Files\Common Files\Adobe 2008-10-05 14:52:46 ----D---- C:\Program Files\Adobe 2008-10-05 14:50:03 ----D---- C:\ProgramData\NOS 2008-10-05 14:50:02 ----D---- C:\Program Files\NOS 2008-10-05 13:49:58 ----A---- C:\ComboFix.txt 2008-10-05 13:46:09 ----D---- C:\Windows\system32\Service 2008-09-29 15:44:11 ----D---- C:\Users\anthony-desktop\AppData\Roaming\Mozilla 2008-09-29 15:43:27 ----D---- C:\Program Files\Mozilla Firefox 2008-09-28 21:23:08 ----A---- C:\Windows\swreg.exe 2008-09-28 20:36:40 ----A---- C:\ProgramData\pskt.ini 2008-09-28 20:36:39 ----A---- C:\ProgramData\BMd38b8363.txt 2008-09-28 20:07:55 ----A---- C:\Windows\system32\db9b7481-.txt 2008-09-28 19:56:23 ----D---- C:\Program Files\OINAnalytics 2008-09-28 19:43:40 ----D---- C:\Program Files\YouSendIt 2008-09-25 20:07:15 ----D---- C:\Program Files\VideoLAN 2008-09-23 17:24:33 ----D---- C:\Windows\SendTo 2008-09-23 17:24:27 ----A---- C:\Windows\exchng.ini 2008-09-23 17:24:26 ----A---- C:\Windows\ODBCINST.INI 2008-09-23 17:23:46 ----D---- C:\Windows\forms 2008-09-23 17:23:46 ----D---- C:\Program Files\Windows Messaging 2008-09-23 03:00:43 ----A---- C:\Windows\system32\msshooks.dll 2008-09-23 03:00:42 ----A---- C:\Windows\system32\msscb.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\thawbrkr.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\srchadmin.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\SearchFilterHost.exe 2008-09-23 03:00:38 ----A---- C:\Windows\system32\propsys.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\propdefs.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\msstrc.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\mssprxy.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\mssitlb.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\msshsq.dll 2008-09-23 03:00:38 ----A---- C:\Windows\system32\korwbrkr.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\xmlfilter.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\wsepno.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\tquery.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\SearchProtocolHost.exe 2008-09-23 03:00:37 ----A---- C:\Windows\system32\SearchIndexer.exe 2008-09-23 03:00:37 ----A---- C:\Windows\system32\rtffilt.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\offfilt.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\nlhtml.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\mssvp.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\mssrch.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\msscntrs.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\mimefilt.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\chtbrkr.dll 2008-09-23 03:00:37 ----A---- C:\Windows\system32\chsbrkr.dll 2008-09-23 03:00:36 ----A---- C:\Windows\system32\mssphtb.dll 2008-09-23 03:00:36 ----A---- C:\Windows\system32\mssph.dll 2008-09-22 08:12:22 ----A---- C:\Windows\system32\rpcrt4.dll 2008-09-22 08:12:22 ----A---- C:\Windows\system32\ntoskrnl.exe 2008-09-22 08:12:22 ----A---- C:\Windows\system32\ntkrnlpa.exe 2008-09-22 08:12:21 ----A---- C:\Windows\system32\pacerprf.dll 2008-09-22 08:12:19 ----A---- C:\Windows\system32\emdmgmt.dll 2008-09-22 08:12:19 ----A---- C:\Windows\system32\dataclen.dll 2008-09-22 08:12:18 ----A---- C:\Windows\system32\cdd.dll 2008-09-22 08:12:15 ----A---- C:\Windows\system32\wshext.dll 2008-09-22 08:12:15 ----A---- C:\Windows\system32\vbscript.dll 2008-09-22 08:12:15 ----A---- C:\Windows\system32\jscript.dll 2008-09-22 08:12:14 ----A---- C:\Windows\system32\wscript.exe 2008-09-22 08:12:14 ----A---- C:\Windows\system32\scrrun.dll 2008-09-22 08:12:14 ----A---- C:\Windows\system32\scrobj.dll 2008-09-22 08:12:14 ----A---- C:\Windows\system32\cscript.exe 2008-09-22 03:12:52 ----D---- C:\PerfLogs 2008-09-15 16:01:13 ----A---- C:\Windows\system32\onex.dll 2008-09-15 16:01:12 ----A---- C:\Windows\system32\SLsvc.exe 2008-09-15 16:01:05 ----A---- C:\Windows\system32\PSHED.DLL 2008-09-15 16:01:04 ----A---- C:\Windows\system32\imagesp1.dll 2008-09-15 16:01:03 ----A---- C:\Windows\system32\dfsr.exe 2008-09-15 16:01:02 ----A---- C:\Windows\system32\pidgenx.dll 2008-09-15 16:01:01 ----A---- C:\Windows\system32\sstpsvc.dll 2008-09-15 16:01:01 ----A---- C:\Windows\system32\mstscax.dll 2008-09-15 16:01:00 ----A---- C:\Windows\system32\WsmSvc.dll 2008-09-15 16:01:00 ----A---- C:\Windows\system32\winrscmd.dll 2008-09-15 16:01:00 ----A---- C:\Windows\system32\sysmain.dll 2008-09-15 16:00:59 ----A---- C:\Windows\system32\vssapi.dll 2008-09-15 16:00:59 ----A---- C:\Windows\system32\RMActivate.exe 2008-09-15 16:00:58 ----A---- C:\Windows\system32\VSSVC.exe 2008-09-15 16:00:58 ----A---- C:\Windows\system32\secproc.dll 2008-09-15 16:00:58 ----A---- C:\Windows\system32\PresentationNative_v0300.dll 2008-09-15 16:00:57 ----A---- C:\Windows\system32\RMActivate_isv.exe 2008-09-15 16:00:57 ----A---- C:\Windows\system32\iesetup.dll 2008-09-15 16:00:55 ----A---- C:\Windows\system32\secproc_isv.dll 2008-09-15 16:00:54 ----A---- C:\Windows\system32\drmv2clt.dll 2008-09-15 16:00:53 ----A---- C:\Windows\system32\xpssvcs.dll 2008-09-15 16:00:53 ----A---- C:\Windows\system32\icardres.dll 2008-09-15 16:00:53 ----A---- C:\Windows\system32\icardagt.exe 2008-09-15 16:00:53 ----A---- C:\Windows\system32\blackbox.dll 2008-09-15 16:00:52 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2008-09-15 16:00:52 ----A---- C:\Windows\system32\RacEngn.dll 2008-09-15 16:00:51 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2008-09-15 16:00:51 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL 2008-09-15 16:00:50 ----A---- C:\Windows\system32\spwizimg.dll 2008-09-15 16:00:50 ----A---- C:\Windows\system32\rdpencom.dll 2008-09-15 16:00:50 ----A---- C:\Windows\system32\msxml3.dll 2008-09-15 16:00:50 ----A---- C:\Windows\system32\lpremove.exe 2008-09-15 16:00:50 ----A---- C:\Windows\bfsvc.exe 2008-09-15 16:00:49 ----A---- C:\Windows\system32\qmgr.dll 2008-09-15 16:00:49 ----A---- C:\Windows\system32\ntdll.dll 2008-09-15 16:00:49 ----A---- C:\Windows\system32\msxml6.dll 2008-09-15 16:00:49 ----A---- C:\Windows\system32\msjet40.dll 2008-09-15 16:00:49 ----A---- C:\Windows\system32\lsasrv.dll 2008-09-15 16:00:48 ----A---- C:\Windows\system32\wevtsvc.dll 2008-09-15 16:00:48 ----A---- C:\Windows\system32\localspl.dll 2008-09-15 16:00:48 ----A---- C:\Windows\system32\IKEEXT.DLL 2008-09-15 16:00:47 ----A---- C:\Windows\system32\wcncsvc.dll 2008-09-15 16:00:47 ----A---- C:\Windows\system32\TsWpfWrp.exe 2008-09-15 16:00:47 ----A---- C:\Windows\system32\recdisc.exe 2008-09-15 16:00:47 ----A---- C:\Windows\system32\mscoree.dll 2008-09-15 16:00:47 ----A---- C:\Windows\system32\kernel32.dll 2008-09-15 16:00:46 ----A---- C:\Windows\system32\vds.exe 2008-09-15 16:00:46 ----A---- C:\Windows\system32\CompMgmtLauncher.exe 2008-09-15 16:00:45 ----A---- C:\Windows\system32\wmp.dll 2008-09-15 16:00:45 ----A---- C:\Windows\system32\wcnwiz.dll 2008-09-15 16:00:45 ----A---- C:\Windows\system32\SMBHelperClass.dll 2008-09-15 16:00:45 ----A---- C:\Windows\system32\mstsc.exe 2008-09-15 16:00:44 ----A---- C:\Windows\system32\msvbvm60.dll 2008-09-15 16:00:44 ----A---- C:\Windows\system32\mf.dll 2008-09-15 16:00:43 ----A---- C:\Windows\system32\termsrv.dll 2008-09-15 16:00:43 ----A---- C:\Windows\system32\msdtctm.dll 2008-09-15 16:00:43 ----A---- C:\Windows\system32\kerberos.dll 2008-09-15 16:00:43 ----A---- C:\Windows\system32\IMJP10K.DLL 2008-09-15 16:00:43 ----A---- C:\Windows\system32\advapi32.dll 2008-09-15 16:00:42 ----A---- C:\Windows\system32\mmcndmgr.dll 2008-09-15 16:00:41 ----A---- C:\Windows\system32\MSMPEG2ADEC.DLL 2008-09-15 16:00:41 ----A---- C:\Windows\system32\MPSSVC.dll 2008-09-15 16:00:41 ----A---- C:\Windows\system32\CertEnroll.dll 2008-09-15 16:00:40 ----A---- C:\Windows\system32\xolehlp.dll 2008-09-15 16:00:40 ----A---- C:\Windows\system32\Query.dll 2008-09-15 16:00:40 ----A---- C:\Windows\system32\ole32.dll 2008-09-15 16:00:40 ----A---- C:\Windows\system32\msdtcprx.dll 2008-09-15 16:00:39 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll 2008-09-15 16:00:39 ----A---- C:\Windows\system32\netlogon.dll 2008-09-15 16:00:39 ----A---- C:\Windows\system32\msvcrt.dll 2008-09-15 16:00:38 ----A---- C:\Windows\system32\SSShim.dll 2008-09-15 16:00:38 ----A---- C:\Windows\system32\nlmgp.dll 2008-09-15 16:00:38 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll 2008-09-15 16:00:38 ----A---- C:\Windows\system32\DfsShlEx.dll 2008-09-15 16:00:37 ----A---- C:\Windows\system32\shlwapi.dll 2008-09-15 16:00:37 ----A---- C:\Windows\system32\sdclt.exe 2008-09-15 16:00:37 ----A---- C:\Windows\system32\schedsvc.dll 2008-09-15 16:00:37 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe 2008-09-15 16:00:37 ----A---- C:\Windows\system32\milcore.dll 2008-09-15 16:00:37 ----A---- C:\Windows\system32\IasMigPlugin.dll 2008-09-15 16:00:36 ----A---- C:\Windows\system32\WSDApi.dll 2008-09-15 16:00:36 ----A---- C:\Windows\system32\wer.dll 2008-09-15 16:00:36 ----A---- C:\Windows\system32\vdsdyn.dll 2008-09-15 16:00:36 ----A---- C:\Windows\system32\user32.dll 2008-09-15 16:00:36 ----A---- C:\Windows\system32\d3d9.dll 2008-09-15 16:00:36 ----A---- C:\Windows\system32\clusapi.dll 2008-09-15 16:00:35 ----A---- C:\Windows\system32\winrsmgr.dll 2008-09-15 16:00:35 ----A---- C:\Windows\system32\QAGENTRT.DLL 2008-09-15 16:00:35 ----A---- C:\Windows\system32\diagperf.dll 2008-09-15 16:00:34 ----A---- C:\Windows\system32\mtxclu.dll 2008-09-15 16:00:34 ----A---- C:\Windows\system32\mmc.exe 2008-09-15 16:00:33 ----A---- C:\Windows\system32\vdsbas.dll 2008-09-15 16:00:33 ----A---- C:\Windows\system32\swprv.dll 2008-09-15 16:00:33 ----A---- C:\Windows\system32\SLC.dll 2008-09-15 16:00:33 ----A---- C:\Windows\system32\msi.dll 2008-09-15 16:00:33 ----A---- C:\Windows\system32\comctl32.dll 2008-09-15 16:00:31 ----A---- C:\Windows\system32\XPSSHHDR.dll 2008-09-15 16:00:31 ----A---- C:\Windows\system32\MSVidCtl.dll 2008-09-15 16:00:31 ----A---- C:\Windows\system32\msdtckrm.dll 2008-09-15 16:00:31 ----A---- C:\Windows\system32\gpsvc.dll 2008-09-15 16:00:30 ----A---- C:\Windows\system32\wecutil.exe 2008-09-15 16:00:30 ----A---- C:\Windows\system32\sbe.dll 2008-09-15 16:00:30 ----A---- C:\Windows\system32\samsrv.dll 2008-09-15 16:00:30 ----A---- C:\Windows\system32\mfc42u.dll 2008-09-15 16:00:30 ----A---- C:\Windows\system32\FWPUCLNT.DLL 2008-09-15 16:00:30 ----A---- C:\Windows\system32\esent.dll 2008-09-15 16:00:29 ----A---- C:\Windows\system32\usp10.dll 2008-09-15 16:00:29 ----A---- C:\Windows\system32\sdengin2.dll 2008-09-15 16:00:29 ----A---- C:\Windows\system32\gacinstall.dll 2008-09-15 16:00:29 ----A---- C:\Windows\system32\cmicryptinstall.dll 2008-09-15 16:00:28 ----A---- C:\Windows\system32\mfc42.dll 2008-09-15 16:00:28 ----A---- C:\Windows\system32\comsvcs.dll 2008-09-15 16:00:28 ----A---- C:\Windows\system32\cmipnpinstall.dll 2008-09-15 16:00:27 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll 2008-09-15 16:00:27 ----A---- C:\Windows\system32\crypt32.dll 2008-09-15 16:00:27 ----A---- C:\Windows\system32\certutil.exe 2008-09-15 16:00:26 ----A---- C:\Windows\system32\wmdrmsdk.dll 2008-09-15 16:00:26 ----A---- C:\Windows\system32\oleaut32.dll 2008-09-15 16:00:26 ----A---- C:\Windows\system32\mswsock.dll 2008-09-15 16:00:26 ----A---- C:\Windows\system32\FirewallAPI.dll 2008-09-15 16:00:26 ----A---- C:\Windows\explorer.exe 2008-09-15 16:00:25 ----A---- C:\Windows\system32\sqlceqp30.dll 2008-09-15 16:00:25 ----A---- C:\Windows\system32\setupapi.dll 2008-09-15 16:00:25 ----A---- C:\Windows\system32\lsm.exe 2008-09-15 16:00:25 ----A---- C:\Windows\system32\bcrypt.dll 2008-09-15 16:00:24 ----A---- C:\Windows\system32\wecsvc.dll 2008-09-15 16:00:24 ----A---- C:\Windows\system32\sdohlp.dll 2008-09-15 16:00:24 ----A---- C:\Windows\system32\schannel.dll 2008-09-15 16:00:24 ----A---- C:\Windows\system32\msv1_0.dll 2008-09-15 16:00:24 ----A---- C:\Windows\system32\iphlpsvc.dll 2008-09-15 16:00:24 ----A---- C:\Windows\system32\eapp3hst.dll 2008-09-15 16:00:24 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll 2008-09-15 16:00:23 ----A---- C:\Windows\system32\wmpmde.dll 2008-09-15 16:00:23 ----A---- C:\Windows\system32\thumbcache.dll 2008-09-15 16:00:23 ----A---- C:\Windows\system32\p2psvc.dll 2008-09-15 16:00:23 ----A---- C:\Windows\system32\netapi32.dll 2008-09-15 16:00:23 ----A---- C:\Windows\system32\mcmde.dll 2008-09-15 16:00:22 ----A---- C:\Windows\system32\vdsutil.dll 2008-09-15 16:00:22 ----A---- C:\Windows\system32\riched20.dll 2008-09-15 16:00:22 ----A---- C:\Windows\system32\autofmt.exe 2008-09-15 16:00:22 ----A---- C:\Windows\system32\autoconv.exe 2008-09-15 16:00:22 ----A---- C:\Windows\system32\autochk.exe 2008-09-15 16:00:21 ----A---- C:\Windows\system32\WinSAT.exe 2008-09-15 16:00:21 ----A---- C:\Windows\system32\imapi2fs.dll 2008-09-15 16:00:21 ----A---- C:\Windows\system32\d3d10_1.dll 2008-09-15 16:00:21 ----A---- C:\Windows\system32\authfwcfg.dll 2008-09-15 16:00:20 ----A---- C:\Windows\system32\wevtapi.dll 2008-09-15 16:00:20 ----A---- C:\Windows\system32\dmvdsitf.dll 2008-09-15 16:00:20 ----A---- C:\Windows\system32\d3d10_1core.dll 2008-09-15 16:00:20 ----A---- C:\Windows\system32\browseui.dll 2008-09-15 16:00:20 ----A---- C:\Windows\system32\authui.dll 2008-09-15 16:00:19 ----A---- C:\Windows\system32\WSDMon.dll 2008-09-15 16:00:19 ----A---- C:\Windows\system32\mscories.dll 2008-09-15 16:00:19 ----A---- C:\Windows\system32\comuid.dll 2008-09-15 16:00:19 ----A---- C:\Windows\system32\comdlg32.dll 2008-09-15 16:00:18 ----A---- C:\Windows\system32\wevtfwd.dll 2008-09-15 16:00:18 ----A---- C:\Windows\system32\uexfat.dll 2008-09-15 16:00:18 ----A---- C:\Windows\system32\rasmans.dll 2008-09-15 16:00:18 ----A---- C:\Windows\system32\eapphost.dll 2008-09-15 16:00:17 ----A---- C:\Windows\system32\untfs.dll 2008-09-15 16:00:17 ----A---- C:\Windows\system32\iassam.dll 2008-09-15 16:00:17 ----A---- C:\Windows\system32\eappcfg.dll 2008-09-15 16:00:16 ----A---- C:\Windows\system32\wlansvc.dll 2008-09-15 16:00:16 ----A---- C:\Windows\system32\whealogr.dll 2008-09-15 16:00:16 ----A---- C:\Windows\system32\sqlcese30.dll 2008-09-15 16:00:16 ----A---- C:\Windows\system32\pcaui.dll 2008-09-15 16:00:16 ----A---- C:\Windows\system32\DfrgNtfs.exe 2008-09-15 16:00:14 ----A---- C:\Windows\system32\dot3svc.dll 2008-09-15 16:00:13 ----A---- C:\Windows\system32\rdpwsx.dll 2008-09-15 16:00:12 ----A---- C:\Windows\system32\zipfldr.dll 2008-09-15 16:00:12 ----A---- C:\Windows\system32\winhttp.dll 2008-09-15 16:00:12 ----A---- C:\Windows\system32\mssha.dll 2008-09-15 16:00:12 ----A---- C:\Windows\system32\msdrm.dll 2008-09-15 16:00:12 ----A---- C:\Windows\system32\evr.dll 2008-09-15 16:00:12 ----A---- C:\Windows\system32\dfrgui.exe 2008-09-15 16:00:11 ----A---- C:\Windows\system32\WsmAuto.dll 2008-09-15 16:00:11 ----A---- C:\Windows\system32\nlasvc.dll 2008-09-15 16:00:10 ----A---- C:\Windows\system32\WMVCORE.DLL 2008-09-15 16:00:10 ----A---- C:\Windows\system32\wmdrmdev.dll 2008-09-15 16:00:10 ----A---- C:\Windows\system32\rpcss.dll 2008-09-15 16:00:10 ----A---- C:\Windows\system32\rasppp.dll 2008-09-15 16:00:10 ----A---- C:\Windows\system32\ncrypt.dll 2008-09-15 16:00:10 ----A---- C:\Windows\system32\msrepl40.dll 2008-09-15 16:00:10 ----A---- C:\Windows\system32\BFE.DLL 2008-09-15 16:00:10 ----A---- C:\Windows\system32\audiosrv.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\WsmWmiPl.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\win32spl.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\WebClnt.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\rastls.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\printui.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\objsel.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\dhcpcsvc6.dll 2008-09-15 16:00:09 ----A---- C:\Windows\system32\ddraw.dll 2008-09-15 16:00:08 ----A---- C:\Windows\system32\themecpl.dll 2008-09-15 16:00:07 ----A---- C:\Windows\system32\w32time.dll 2008-09-15 16:00:07 ----A---- C:\Windows\system32\sqlsrv32.dll 2008-09-15 16:00:07 ----A---- C:\Windows\system32\QAGENT.DLL 2008-09-15 16:00:07 ----A---- C:\Windows\system32\iasnap.dll 2008-09-15 16:00:07 ----A---- C:\Windows\system32\dbghelp.dll 2008-09-15 16:00:06 ----A---- C:\Windows\system32\wmdrmnet.dll 2008-09-15 16:00:06 ----A---- C:\Windows\system32\PresentationHost.exe 2008-09-15 16:00:06 ----A---- C:\Windows\system32\ncryptui.dll 2008-09-15 16:00:06 ----A---- C:\Windows\system32\icm32.dll 2008-09-15 16:00:06 ----A---- C:\Windows\system32\azroles.dll 2008-09-15 16:00:05 ----A---- C:\Windows\system32\WerFaultSecure.exe 2008-09-15 16:00:05 ----A---- C:\Windows\system32\iprtrmgr.dll 2008-09-15 16:00:04 ----A---- C:\Windows\system32\winsrv.dll 2008-09-15 16:00:04 ----A---- C:\Windows\system32\taskschd.dll 2008-09-15 16:00:04 ----A---- C:\Windows\system32\spoolss.dll 2008-09-15 16:00:04 ----A---- C:\Windows\system32\msctf.dll 2008-09-15 16:00:04 ----A---- C:\Windows\system32\infocardapi.dll 2008-09-15 16:00:04 ----A---- C:\Windows\system32\bcdedit.exe 2008-09-15 16:00:04 ----A---- C:\Windows\system32\basecsp.dll 2008-09-15 16:00:03 ----A---- C:\Windows\system32\wlangpui.dll 2008-09-15 16:00:03 ----A---- C:\Windows\system32\mstlsapi.dll 2008-09-15 16:00:03 ----A---- C:\Windows\system32\AudioEng.dll 2008-09-15 16:00:02 ----A---- C:\Windows\system32\scksp.dll 2008-09-15 16:00:01 ----A---- C:\Windows\system32\winsta.dll 2008-09-15 16:00:01 ----A---- C:\Windows\system32\rsaenh.dll 2008-09-15 16:00:01 ----A---- C:\Windows\system32\netprofm.dll 2008-09-15 16:00:01 ----A---- C:\Windows\system32\netcfgx.dll 2008-09-15 16:00:01 ----A---- C:\Windows\system32\hcrstco.dll 2008-09-15 16:00:01 ----A---- C:\Windows\system32\dbgeng.dll 2008-09-15 15:59:59 ----A---- C:\Windows\system32\winlogon.exe 2008-09-15 15:59:59 ----A---- C:\Windows\system32\wercon.exe 2008-09-15 15:59:59 ----A---- C:\Windows\system32\taskcomp.dll 2008-09-15 15:59:59 ----A---- C:\Windows\system32\lpksetup.exe 2008-09-15 15:59:59 ----A---- C:\Windows\system32\cdosys.dll 2008-09-15 15:59:58 ----A---- C:\Windows\system32\wlansec.dll 2008-09-15 15:59:58 ----A---- C:\Windows\system32\sqmapi.dll 2008-09-15 15:59:58 ----A---- C:\Windows\system32\msdtcuiu.dll 2008-09-15 15:59:58 ----A---- C:\Windows\system32\dfshim.dll 2008-09-15 15:59:58 ----A---- C:\Windows\system32\apds.dll 2008-09-15 15:59:57 ----A---- C:\Windows\system32\mprddm.dll 2008-09-15 15:59:57 ----A---- C:\Windows\system32\certcli.dll 2008-09-15 15:59:56 ----A---- C:\Windows\system32\tsgqec.dll 2008-09-15 15:59:56 ----A---- C:\Windows\system32\iasrad.dll 2008-09-15 15:59:56 ----A---- C:\Windows\system32\eapsvc.dll 2008-09-15 15:59:56 ----A---- C:\Windows\system32\AUDIOKSE.dll 2008-09-15 15:59:56 ----A---- C:\Windows\system32\aaclient.dll 2008-09-15 15:59:55 ----A---- C:\Windows\system32\uDWM.dll 2008-09-15 15:59:55 ----A---- C:\Windows\system32\shdocvw.dll 2008-09-15 15:59:55 ----A---- C:\Windows\system32\certmgr.dll 2008-09-15 15:59:55 ----A---- C:\Windows\system32\bcdsrv.dll 2008-09-15 15:59:54 ----A---- C:\Windows\system32\Wldap32.dll 2008-09-15 15:59:53 ----A---- C:\Windows\system32\msidcrl30.dll 2008-09-15 15:59:53 ----A---- C:\Windows\system32\dnsapi.dll 2008-09-15 15:59:52 ----A---- C:\Windows\system32\WMVDECOD.DLL 2008-09-15 15:59:52 ----A---- C:\Windows\system32\umpnpmgr.dll 2008-09-15 15:59:52 ----A---- C:\Windows\system32\pla.dll 2008-09-15 15:59:50 ----A---- C:\Windows\system32\netshell.dll 2008-09-15 15:59:50 ----A---- C:\Windows\system32\dxgi.dll 2008-09-15 15:59:50 ----A---- C:\Windows\system32\dot3gpui.dll 2008-09-15 15:59:49 ----A---- C:\Windows\system32\wmicmiplugin.dll 2008-09-15 15:59:48 ----A---- C:\Windows\system32\shsvcs.dll 2008-09-15 15:59:48 ----A---- C:\Windows\system32\ntprint.dll 2008-09-15 15:59:48 ----A---- C:\Windows\system32\MMDevAPI.dll 2008-09-15 15:59:48 ----A---- C:\Windows\system32\cryptnet.dll 2008-09-15 15:59:48 ----A---- C:\Windows\system32\comsnap.dll 2008-09-15 15:59:47 ----A---- C:\Windows\system32\winmm.dll 2008-09-15 15:59:47 ----A---- C:\Windows\system32\services.exe 2008-09-15 15:59:46 ----A---- C:\Windows\system32\wscsvc.dll 2008-09-15 15:59:46 ----A---- C:\Windows\system32\synceng.dll 2008-09-15 15:59:46 ----A---- C:\Windows\system32\pnidui.dll 2008-09-15 15:59:46 ----A---- C:\Windows\system32\cmifw.dll 2008-09-15 15:59:45 ----A---- C:\Windows\system32\wscisvif.dll 2008-09-15 15:59:45 ----A---- C:\Windows\system32\taskeng.exe 2008-09-15 15:59:45 ----A---- C:\Windows\system32\msjtes40.dll 2008-09-15 15:59:45 ----A---- C:\Windows\system32\msconfig.exe 2008-09-15 15:59:45 ----A---- C:\Windows\system32\iassdo.dll 2008-09-15 15:59:45 ----A---- C:\Windows\system32\cipher.exe 2008-09-15 15:59:44 ----A---- C:\Windows\system32\WMVSDECD.DLL 2008-09-15 15:59:44 ----A---- C:\Windows\system32\imapi2.dll 2008-09-15 15:59:43 ----A---- C:\Windows\system32\wersvc.dll 2008-09-15 15:59:43 ----A---- C:\Windows\system32\uxtheme.dll 2008-09-15 15:59:43 ----A---- C:\Windows\system32\tdh.dll 2008-09-15 15:59:43 ----A---- C:\Windows\system32\SessEnv.dll 2008-09-15 15:59:43 ----A---- C:\Windows\system32\rasapi32.dll 2008-09-15 15:59:43 ----A---- C:\Windows\system32\dot3api.dll 2008-09-15 15:59:43 ----A---- C:\Windows\system32\dmdskmgr.dll 2008-09-15 15:59:42 ----A---- C:\Windows\system32\qdvd.dll 2008-09-15 15:59:42 ----A---- C:\Windows\system32\msscp.dll 2008-09-15 15:59:42 ----A---- C:\Windows\system32\cmd.exe 2008-09-15 15:59:42 ----A---- C:\Windows\system32\cbsra.exe 2008-09-15 15:59:42 ----A---- C:\Windows\system32\AuthFWSnapin.dll 2008-09-15 15:59:41 ----A---- C:\Windows\system32\wlanmsm.dll 2008-09-15 15:59:41 ----A---- C:\Windows\system32\wlancfg.dll 2008-09-15 15:59:41 ----A---- C:\Windows\system32\wkssvc.dll 2008-09-15 15:59:41 ----A---- C:\Windows\system32\wevtutil.exe 2008-09-15 15:59:41 ----A---- C:\Windows\system32\srvsvc.dll 2008-09-15 15:59:41 ----A---- C:\Windows\system32\loadperf.dll 2008-09-15 15:59:40 ----A---- C:\Windows\system32\WUDFx.dll 2008-09-15 15:59:40 ----A---- C:\Windows\system32\msdtcVSp1res.dll 2008-09-15 15:59:40 ----A---- C:\Windows\system32\comres.dll 2008-09-15 15:59:39 ----A---- C:\Windows\system32\rpchttp.dll 2008-09-15 15:59:39 ----A---- C:\Windows\system32\rdpdd.dll 2008-09-15 15:59:39 ----A---- C:\Windows\system32\mshtmled.dll 2008-09-15 15:59:39 ----A---- C:\Windows\system32\localsec.dll 2008-09-15 15:59:39 ----A---- C:\Windows\system32\fontext.dll 2008-09-15 15:59:39 ----A---- C:\Windows\system32\diskpart.exe 2008-09-15 15:59:38 ----A---- C:\Windows\system32\wlanapi.dll 2008-09-15 15:59:38 ----A---- C:\Windows\system32\hnetcfg.dll 2008-09-15 15:59:37 ----A---- C:\Windows\system32\wsqmcons.exe 2008-09-15 15:59:37 ----A---- C:\Windows\system32\WMADMOD.DLL 2008-09-15 15:59:37 ----A---- C:\Windows\system32\WinSATAPI.dll 2008-09-15 15:59:37 ----A---- C:\Windows\system32\NAPMONTR.DLL 2008-09-15 15:59:37 ----A---- C:\Windows\system32\dsound.dll 2008-09-15 15:59:36 ----A---- C:\Windows\system32\wlanpref.dll 2008-09-15 15:59:36 ----A---- C:\Windows\system32\WindowsCodecs.dll 2008-09-15 15:59:36 ----A---- C:\Windows\system32\RDPENCDD.dll 2008-09-15 15:59:36 ----A---- C:\Windows\system32\profprov.dll 2008-09-15 15:59:36 ----A---- C:\Windows\system32\filemgmt.dll 2008-09-15 15:59:36 ----A---- C:\Windows\system32\avifil32.dll 2008-09-15 15:59:35 ----A---- C:\Windows\system32\wsecedit.dll 2008-09-15 15:59:35 ----A---- C:\Windows\system32\tracerpt.exe 2008-09-15 15:59:35 ----A---- C:\Windows\system32\PresentationHostProxy.dll 2008-09-15 15:59:35 ----A---- C:\Windows\system32\MuiUnattend.exe 2008-09-15 15:59:35 ----A---- C:\Windows\system32\dnsrslvr.dll 2008-09-15 15:59:34 ----A---- C:\Windows\system32\WMSPDMOD.DLL 2008-09-15 15:59:34 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll 2008-09-15 15:59:34 ----A---- C:\Windows\system32\SLCommDlg.dll 2008-09-15 15:59:34 ----A---- C:\Windows\system32\P2PGraph.dll 2008-09-15 15:59:34 ----A---- C:\Windows\system32\dwmredir.dll 2008-09-15 15:59:34 ----A---- C:\Windows\system32\dhcpcsvc.dll 2008-09-15 15:59:34 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll 2008-09-15 15:59:33 ----A---- C:\Windows\system32\wininit.exe 2008-09-15 15:59:33 ----A---- C:\Windows\system32\spp.dll 2008-09-15 15:59:33 ----A---- C:\Windows\system32\QSHVHOST.DLL 2008-09-15 15:59:33 ----A---- C:\Windows\system32\iassvcs.dll 2008-09-15 15:59:33 ----A---- C:\Windows\system32\gpresult.exe 2008-09-15 15:59:33 ----A---- C:\Windows\system32\dwm.exe 2008-09-15 15:59:33 ----A---- C:\Windows\system32\apphelp.dll 2008-09-15 15:59:32 ----A---- C:\Windows\system32\rasdlg.dll 2008-09-15 15:59:32 ----A---- C:\Windows\system32\iashost.exe 2008-09-15 15:59:32 ----A---- C:\Windows\system32\azroleui.dll 2008-09-15 15:59:31 ----A---- C:\Windows\system32\PortableDeviceApi.dll 2008-09-15 15:59:31 ----A---- C:\Windows\system32\mscorier.dll 2008-09-15 15:59:31 ----A---- C:\Windows\system32\mcbuilder.exe 2008-09-15 15:59:31 ----A---- C:\Windows\HelpPane.exe 2008-09-15 15:59:30 ----A---- C:\Windows\system32\srrstr.dll 2008-09-15 15:59:30 ----A---- C:\Windows\system32\spwizeng.dll 2008-09-15 15:59:30 ----A---- C:\Windows\system32\SLUI.exe 2008-09-15 15:59:30 ----A---- C:\Windows\system32\rasmontr.dll 2008-09-15 15:59:29 ----A---- C:\Windows\system32\wecapi.dll 2008-09-15 15:59:29 ----A---- C:\Windows\system32\unbcl.dll 2008-09-15 15:59:29 ----A---- C:\Windows\system32\tcpmon.dll 2008-09-15 15:59:29 ----A---- C:\Windows\system32\shrink.dll 2008-09-15 15:59:29 ----A---- C:\Windows\system32\msra.exe 2008-09-15 15:59:29 ----A---- C:\Windows\system32\lltdsvc.dll 2008-09-15 15:59:29 ----A---- C:\Windows\system32\IPHLPAPI.DLL 2008-09-15 15:59:28 ----A---- C:\Windows\system32\WMPEncEn.dll 2008-09-15 15:59:28 ----A---- C:\Windows\system32\iashlpr.dll 2008-09-15 15:59:28 ----A---- C:\Windows\system32\gpedit.dll 2008-09-15 15:59:28 ----A---- C:\Windows\system32\brcpl.dll 2008-09-15 15:59:27 ----A---- C:\Windows\system32\oleacc.dll 2008-09-15 15:59:27 ----A---- C:\Windows\system32\msdri.dll 2008-09-15 15:59:27 ----A---- C:\Windows\system32\iertutil.dll 2008-09-15 15:59:26 ----A---- C:\Windows\system32\raschap.dll 2008-09-15 15:59:26 ----A---- C:\Windows\system32\framedynos.dll 2008-09-15 15:59:25 ----A---- C:\Windows\system32\regsvc.dll 2008-09-15 15:59:25 ----A---- C:\Windows\system32\fdWSD.dll 2008-09-15 15:59:25 ----A---- C:\Windows\system32\advpack.dll 2008-09-15 15:59:24 ----A---- C:\Windows\system32\vsstrace.dll 2008-09-15 15:59:24 ----A---- C:\Windows\system32\PerfCenterCPL.dll 2008-09-15 15:59:24 ----A---- C:\Windows\system32\ntvdm.exe 2008-09-15 15:59:24 ----A---- C:\Windows\system32\ipsmsnap.dll 2008-09-15 15:59:24 ----A---- C:\Windows\system32\Faultrep.dll 2008-09-15 15:59:23 ----A---- C:\Windows\system32\wpdshext.dll 2008-09-15 15:59:23 ----A---- C:\Windows\system32\wdc.dll 2008-09-15 15:59:23 ----A---- C:\Windows\system32\ntlanman.dll 2008-09-15 15:59:23 ----A---- C:\Windows\system32\iedkcs32.dll 2008-09-15 15:59:22 ----A---- C:\Windows\system32\Storprop.dll 2008-09-15 15:59:22 ----A---- C:\Windows\system32\NetProjW.dll 2008-09-15 15:59:22 ----A---- C:\Windows\system32\netman.dll 2008-09-15 15:59:22 ----A---- C:\Windows\system32\l2nacp.dll 2008-09-15 15:59:22 ----A---- C:\Windows\system32\ieapfltr.dll 2008-09-15 15:59:22 ----A---- C:\Windows\system32\framedyn.dll 2008-09-15 15:59:22 ----A---- C:\Windows\system32\dssenh.dll 2008-09-15 15:59:20 ----A---- C:\Windows\system32\WlanMM.dll 2008-09-15 15:59:20 ----A---- C:\Windows\system32\tcpipcfg.dll 2008-09-15 15:59:20 ----A---- C:\Windows\system32\certreq.exe 2008-09-15 15:59:20 ----A---- C:\Windows\system32\adsnt.dll 2008-09-15 15:59:19 ----A---- C:\Windows\system32\WsmProv.dll 2008-09-15 15:59:19 ----A---- C:\Windows\system32\WLanConn.dll 2008-09-15 15:59:19 ----A---- C:\Windows\system32\sxs.dll 2008-09-15 15:59:19 ----A---- C:\Windows\system32\profsvc.dll 2008-09-15 15:59:19 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll 2008-09-15 15:59:19 ----A---- C:\Windows\system32\KMSVC.DLL 2008-09-15 15:59:18 ----A---- C:\Windows\system32\wusa.exe 2008-09-15 15:59:18 ----A---- C:\Windows\system32\WUDFHost.exe 2008-09-15 15:59:18 ----A---- C:\Windows\system32\wlanhlp.dll 2008-09-15 15:59:18 ----A---- C:\Windows\system32\VAN.dll 2008-09-15 15:59:18 ----A---- C:\Windows\system32\userenv.dll 2008-09-15 15:59:18 ----A---- C:\Windows\system32\umb.dll 2008-09-15 15:59:18 ----A---- C:\Windows\system32\ncsi.dll 2008-09-15 15:59:18 ----A---- C:\Windows\system32\IPBusEnum.dll 2008-09-15 15:59:17 ----A---- C:\Windows\system32\WerFault.exe 2008-09-15 15:59:17 ----A---- C:\Windows\system32\ie4uinit.exe 2008-09-15 15:59:17 ----A---- C:\Windows\system32\fundisc.dll 2008-09-15 15:59:16 ----A---- C:\Windows\system32\puiobj.dll 2008-09-15 15:59:16 ----A---- C:\Windows\system32\cryptui.dll 2008-09-15 15:59:16 ----A---- C:\Windows\system32\catsrvut.dll 2008-09-15 15:59:15 ----A---- C:\Windows\system32\photowiz.dll 2008-09-15 15:59:15 ----A---- C:\Windows\system32\netid.dll 2008-09-15 15:59:15 ----A---- C:\Windows\system32\netcenter.dll 2008-09-15 15:59:15 ----A---- C:\Windows\system32\MdSched.exe 2008-09-15 15:59:15 ----A---- C:\Windows\system32\InkEd.dll 2008-09-15 15:59:15 ----A---- C:\Windows\system32\dps.dll 2008-09-15 15:59:14 ----A---- C:\Windows\system32\ipsecsnp.dll 2008-09-15 15:59:13 ----A---- C:\Windows\system32\ws2_32.dll 2008-09-15 15:59:13 ----A---- C:\Windows\system32\WinSCard.dll 2008-09-15 15:59:13 ----A---- C:\Windows\system32\tcpmon.ini 2008-09-15 15:59:13 ----A---- C:\Windows\system32\spbcd.dll 2008-09-15 15:59:13 ----A---- C:\Windows\system32\msinfo32.exe 2008-09-15 15:59:12 ----A---- C:\Windows\system32\winrs.exe 2008-09-15 15:59:12 ----A---- C:\Windows\system32\secur32.dll 2008-09-15 15:59:12 ----A---- C:\Windows\system32\odbcjt32.dll 2008-09-15 15:59:12 ----A---- C:\Windows\system32\ntdsapi.dll 2008-09-15 15:59:12 ----A---- C:\Windows\system32\NAPSTAT.EXE 2008-09-15 15:59:11 ----A---- C:\Windows\system32\prnntfy.dll 2008-09-15 15:59:11 ----A---- C:\Windows\system32\mblctr.exe 2008-09-15 15:59:11 ----A---- C:\Windows\system32\cryptsvc.dll 2008-09-15 15:59:09 ----A---- C:\Windows\system32\schtasks.exe 2008-09-15 15:59:09 ----A---- C:\Windows\system32\RelMon.dll 2008-09-15 15:59:09 ----A---- C:\Windows\system32\msfeeds.dll 2008-09-15 15:59:09 ----A---- C:\Windows\system32\iasacct.dll 2008-09-15 15:59:09 ----A---- C:\Windows\system32\dmdlgs.dll 2008-09-15 15:59:09 ----A---- C:\Windows\system32\activeds.dll 2008-09-15 15:59:08 ----A---- C:\Windows\system32\TSpkg.dll 2008-09-15 15:59:08 ----A---- C:\Windows\system32\pdh.dll 2008-09-15 15:59:08 ----A---- C:\Windows\system32\netdiagfx.dll 2008-09-15 15:59:08 ----A---- C:\Windows\system32\FirewallControlPanel.exe 2008-09-15 15:59:08 ----A---- C:\Windows\system32\dhcpsapi.dll 2008-09-15 15:59:08 ----A---- C:\Windows\system32\dfrgfat.exe 2008-09-15 15:59:08 ----A---- C:\Windows\system32\catsrv.dll 2008-09-15 15:59:07 ----A---- C:\Windows\system32\wvc.dll 2008-09-15 15:59:07 ----A---- C:\Windows\system32\winrm.vbs 2008-09-15 15:59:07 ----A---- C:\Windows\system32\qwave.dll 2008-09-15 15:59:07 ----A---- C:\Windows\system32\fdWCN.dll 2008-09-15 15:59:06 ----A---- C:\Windows\system32\netcorehc.dll 2008-09-15 15:59:06 ----A---- C:\Windows\system32\dot3msm.dll 2008-09-15 15:59:06 ----A---- C:\Windows\system32\dot3cfg.dll 2008-09-15 15:59:06 ----A---- C:\Windows\system32\AudioSes.dll 2008-09-15 15:59:05 ----A---- C:\Windows\system32\rastapi.dll 2008-09-15 15:59:05 ----A---- C:\Windows\system32\NAPHLPR.DLL 2008-09-15 15:59:05 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL 2008-09-15 15:59:05 ----A---- C:\Windows\system32\msacm32.dll 2008-09-15 15:59:05 ----A---- C:\Windows\system32\ifmon.dll 2008-09-15 15:59:04 ----A---- C:\Windows\system32\wow32.dll 2008-09-15 15:59:04 ----A---- C:\Windows\system32\adsldp.dll 2008-09-15 15:59:03 ----A---- C:\Windows\system32\shsetup.dll 2008-09-15 15:59:02 ----A---- C:\Windows\system32\ntshrui.dll 2008-09-15 15:59:02 ----A---- C:\Windows\system32\els.dll 2008-09-15 15:59:01 ----A---- C:\Windows\system32\wscntfy.dll 2008-09-15 15:59:01 ----A---- C:\Windows\system32\WMNetMgr.dll 2008-09-15 15:59:01 ----A---- C:\Windows\system32\QUTIL.DLL 2008-09-15 15:59:01 ----A---- C:\Windows\system32\msdt.dll 2008-09-15 15:59:01 ----A---- C:\Windows\system32\iasrecst.dll 2008-09-15 15:59:01 ----A---- C:\Windows\system32\iasdatastore.dll 2008-09-15 15:59:01 ----A---- C:\Windows\system32\clbcatq.dll 2008-09-15 15:59:00 ----A---- C:\Windows\system32\stobject.dll 2008-09-15 15:59:00 ----A---- C:\Windows\system32\sdrsvc.dll 2008-09-15 15:59:00 ----A---- C:\Windows\system32\net1.exe 2008-09-15 15:59:00 ----A---- C:\Windows\system32\ipnathlp.dll 2008-09-15 15:59:00 ----A---- C:\Windows\system32\fdSSDP.dll 2008-09-15 15:58:59 ----A---- C:\Windows\system32\wlanui.dll 2008-09-15 15:58:59 ----A---- C:\Windows\system32\dsprop.dll 2008-09-15 15:58:58 ----A---- C:\Windows\system32\wlgpclnt.dll 2008-09-15 15:58:58 ----A---- C:\Windows\system32\smss.exe 2008-09-15 15:58:58 ----A---- C:\Windows\system32\nci.dll 2008-09-15 15:58:58 ----A---- C:\Windows\system32\Defrag.exe 2008-09-15 15:58:58 ----A---- C:\Windows\system32\adsldpc.dll 2008-09-15 15:58:57 ----A---- C:\Windows\system32\upnphost.dll 2008-09-15 15:58:57 ----A---- C:\Windows\system32\systemcpl.dll 2008-09-15 15:58:57 ----A---- C:\Windows\system32\mprmsg.dll 2008-09-15 15:58:56 ----A---- C:\Windows\system32\rasman.dll 2008-09-15 15:58:56 ----A---- C:\Windows\system32\P2P.dll 2008-09-15 15:58:56 ----A---- C:\Windows\system32\CompatUI.dll 2008-09-15 15:58:56 ----A---- C:\Windows\system32\ActiveContentWizard.dll 2008-09-15 15:58:55 ----A---- C:\Windows\system32\t2embed.dll 2008-09-15 15:58:55 ----A---- C:\Windows\system32\rascfg.dll 2008-09-15 15:58:55 ----A---- C:\Windows\system32\PresentationSettings.exe 2008-09-15 15:58:55 ----A---- C:\Windows\system32\oleprn.dll 2008-09-15 15:58:55 ----A---- C:\Windows\system32\msftedit.dll 2008-09-15 15:58:55 ----A---- C:\Windows\system32\MSAC3ENC.DLL 2008-09-15 15:58:55 ----A---- C:\Windows\system32\loghours.dll 2008-09-15 15:58:55 ----A---- C:\Windows\system32\L2SecHC.dll 2008-09-15 15:58:55 ----A---- C:\Windows\system32\fde.dll 2008-09-15 15:58:54 ----A---- C:\Windows\system32\Wpc.dll 2008-09-15 15:58:54 ----A---- C:\Windows\system32\MigAutoPlay.exe 2008-09-15 15:58:54 ----A---- C:\Windows\system32\dxdiag.exe 2008-09-15 15:58:54 ----A---- C:\Windows\system32\DFDWiz.exe 2008-09-15 15:58:53 ----A---- C:\Windows\system32\wdigest.dll 2008-09-15 15:58:53 ----A---- C:\Windows\system32\setupcl.exe 2008-09-15 15:58:53 ----A---- C:\Windows\system32\mprdim.dll 2008-09-15 15:58:53 ----A---- C:\Windows\system32\gpapi.dll 2008-09-15 15:58:53 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll 2008-09-15 15:58:52 ----A---- C:\Windows\system32\rtm.dll 2008-09-15 15:58:52 ----A---- C:\Windows\system32\msutb.dll 2008-09-15 15:58:51 ----A---- C:\Windows\system32\scansetting.dll 2008-09-15 15:58:51 ----A---- C:\Windows\system32\devmgr.dll 2008-09-15 15:58:50 ----A---- C:\Windows\system32\wiaservc.dll 2008-09-15 15:58:50 ----A---- C:\Windows\system32\NAPCRYPT.DLL 2008-09-15 15:58:49 ----A---- C:\Windows\system32\msihnd.dll 2008-09-15 15:58:49 ----A---- C:\Windows\system32\CertEnrollUI.dll 2008-09-15 15:58:48 ----A---- C:\Windows\system32\ifsutil.dll 2008-09-15 15:58:47 ----A---- C:\Windows\system32\wscapi.dll 2008-09-15 15:58:47 ----A---- C:\Windows\system32\wdi.dll 2008-09-15 15:58:47 ----A---- C:\Windows\system32\kdusb.dll 2008-09-15 15:58:47 ----A---- C:\Windows\system32\dimsroam.dll 2008-09-15 15:58:47 ----A---- C:\Windows\system32\actxprxy.dll 2008-09-15 15:58:46 ----A---- C:\Windows\system32\WinFXDocObj.exe 2008-09-15 15:58:46 ----A---- C:\Windows\system32\usbmon.dll 2008-09-15 15:58:46 ----A---- C:\Windows\system32\spoolsv.exe 2008-09-15 15:58:46 ----A---- C:\Windows\system32\mswmdm.dll 2008-09-15 15:58:46 ----A---- C:\Windows\system32\imagehlp.dll 2008-09-15 15:58:46 ----A---- C:\Windows\system32\BOOTVID.DLL 2008-09-15 15:58:46 ----A---- C:\Windows\system32\audiodg.exe 2008-09-15 15:58:45 ----A---- C:\Windows\system32\wlandlg.dll 2008-09-15 15:58:45 ----A---- C:\Windows\system32\vssadmin.exe 2008-09-15 15:58:45 ----A---- C:\Windows\system32\SyncCenter.dll 2008-09-15 15:58:45 ----A---- C:\Windows\system32\regapi.dll 2008-09-15 15:58:45 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll 2008-09-15 15:58:45 ----A---- C:\Windows\system32\msls31.dll 2008-09-15 15:58:44 ----A---- C:\Windows\system32\uudf.dll 2008-09-15 15:58:44 ----A---- C:\Windows\system32\scecli.dll 2008-09-15 15:58:44 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2008-09-15 15:58:44 ----A---- C:\Windows\system32\mycomput.dll 2008-09-15 15:58:43 ----A---- C:\Windows\system32\SCardSvr.dll 2008-09-15 15:58:43 ----A---- C:\Windows\system32\newdev.dll 2008-09-15 15:58:43 ----A---- C:\Windows\system32\mspaint.exe 2008-09-15 15:58:43 ----A---- C:\Windows\system32\kdcom.dll 2008-09-15 15:58:42 ----A---- C:\Windows\system32\sud.dll 2008-09-15 15:58:42 ----A---- C:\Windows\system32\mstask.dll 2008-09-15 15:58:41 ----A---- C:\Windows\system32\termmgr.dll 2008-09-15 15:58:41 ----A---- C:\Windows\system32\ssdpsrv.dll 2008-09-15 15:58:41 ----A---- C:\Windows\system32\samlib.dll 2008-09-15 15:58:41 ----A---- C:\Windows\system32\puiapi.dll 2008-09-15 15:58:41 ----A---- C:\Windows\system32\mtxoci.dll 2008-09-15 15:58:41 ----A---- C:\Windows\system32\duser.dll 2008-09-15 15:58:41 ----A---- C:\Windows\system32\adtschema.dll 2008-09-15 15:58:40 ----A---- C:\Windows\system32\tapisrv.dll 2008-09-15 15:58:40 ----A---- C:\Windows\system32\inetpp.dll 2008-09-15 15:58:40 ----A---- C:\Windows\system32\cic.dll 2008-09-15 15:58:39 ----A---- C:\Windows\system32\SLUINotify.dll 2008-09-15 15:58:39 ----A---- C:\Windows\system32\Robocopy.exe 2008-09-15 15:58:39 ----A---- C:\Windows\system32\input.dll 2008-09-15 15:58:39 ----A---- C:\Windows\system32\AzSqlExt.dll 2008-09-15 15:58:38 ----A---- C:\Windows\system32\wisptis.exe 2008-09-15 15:58:38 ----A---- C:\Windows\system32\iasads.dll 2008-09-15 15:58:38 ----A---- C:\Windows\system32\cscapi.dll 2008-09-15 15:58:37 ----A---- C:\Windows\system32\authz.dll 2008-09-15 15:58:36 ----A---- C:\Windows\system32\sdshext.dll 2008-09-15 15:58:36 ----A---- C:\Windows\system32\PortableDeviceTypes.dll 2008-09-15 15:58:36 ----A---- C:\Windows\system32\netiohlp.dll 2008-09-15 15:58:35 ----A---- C:\Windows\system32\WUDFPlatform.dll 2008-09-15 15:58:35 ----A---- C:\Windows\system32\webcheck.dll 2008-09-15 15:58:35 ----A---- C:\Windows\system32\verifier.exe 2008-09-15 15:58:35 ----A---- C:\Windows\system32\msdtclog.dll 2008-09-15 15:58:35 ----A---- C:\Windows\system32\msdt.exe 2008-09-15 15:58:35 ----A---- C:\Windows\system32\d3d8.dll 2008-09-15 15:58:35 ----A---- C:\Windows\system32\cmdial32.dll 2008-09-15 15:58:34 ----A---- C:\Windows\system32\themeui.dll 2008-09-15 15:58:34 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll 2008-09-15 15:58:33 ----A---- C:\Windows\system32\wpcsvc.dll 2008-09-15 15:58:33 ----A---- C:\Windows\system32\wintrust.dll 2008-09-15 15:58:33 ----A---- C:\Windows\system32\slcinst.dll 2008-09-15 15:58:33 ----A---- C:\Windows\system32\dxtmsft.dll 2008-09-15 15:58:32 ----A---- C:\Windows\system32\wpccpl.dll 2008-09-15 15:58:32 ----A---- C:\Windows\system32\vdsldr.exe 2008-09-15 15:58:32 ----A---- C:\Windows\system32\SndVol.exe 2008-09-15 15:58:32 ----A---- C:\Windows\system32\rasgcw.dll 2008-09-15 15:58:32 ----A---- C:\Windows\system32\oledlg.dll 2008-09-15 15:58:32 ----A---- C:\Windows\system32\ntmarta.dll 2008-09-15 15:58:32 ----A---- C:\Windows\system32\mmcbase.dll 2008-09-15 15:58:32 ----A---- C:\Windows\system32\icardie.dll 2008-09-15 15:58:32 ----A---- C:\Windows\system32\clfsw32.dll 2008-09-15 15:58:31 ----A---- C:\Windows\system32\WMPhoto.dll 2008-09-15 15:58:31 ----A---- C:\Windows\system32\SnippingTool.exe 2008-09-15 15:58:31 ----A---- C:\Windows\system32\pnpsetup.dll 2008-09-15 15:58:31 ----A---- C:\Windows\system32\icfupgd.dll 2008-09-15 15:58:30 ----A---- C:\Windows\system32\rasqec.dll 2008-09-15 15:58:30 ----A---- C:\Windows\system32\ncobjapi.dll 2008-09-15 15:58:30 ----A---- C:\Windows\system32\msrd3x40.dll 2008-09-15 15:58:30 ----A---- C:\Windows\system32\msaatext.dll 2008-09-15 15:58:30 ----A---- C:\Windows\system32\mpr.dll 2008-09-15 15:58:30 ----A---- C:\Windows\system32\mlang.dll 2008-09-15 15:58:30 ----A---- C:\Windows\system32\diskraid.exe 2008-09-15 15:58:29 ----A---- C:\Windows\system32\wpd_ci.dll 2008-09-15 15:58:29 ----A---- C:\Windows\system32\slmgr.vbs 2008-09-15 15:58:29 ----A---- C:\Windows\system32\nslookup.exe 2008-09-15 15:58:29 ----A---- C:\Windows\system32\accessibilitycpl.dll 2008-09-15 15:58:28 ----A---- C:\Windows\system32\wtsapi32.dll 2008-09-15 15:58:28 ----A---- C:\Windows\system32\unlodctr.exe 2008-09-15 15:58:28 ----A---- C:\Windows\system32\syssetup.dll 2008-09-15 15:58:28 ----A---- C:\Windows\system32\mscms.dll 2008-09-15 15:58:28 ----A---- C:\Windows\system32\lodctr.exe 2008-09-15 15:58:28 ----A---- C:\Windows\system32\extmgr.dll 2008-09-15 15:58:27 ----A---- C:\Windows\system32\ulib.dll 2008-09-15 15:58:27 ----A---- C:\Windows\system32\sethc.exe 2008-09-15 15:58:27 ----A---- C:\Windows\system32\pnpui.dll 2008-09-15 15:58:27 ----A---- C:\Windows\system32\iaspolcy.dll 2008-09-15 15:58:27 ----A---- C:\Windows\system32\fontsub.dll 2008-09-15 15:58:27 ----A---- C:\Windows\system32\dxdiagn.dll 2008-09-15 15:58:27 ----A---- C:\Windows\system32\cabinet.dll 2008-09-15 15:58:26 ----A---- C:\Windows\system32\Utilman.exe 2008-09-15 15:58:26 ----A---- C:\Windows\system32\oobefldr.dll 2008-09-15 15:58:26 ----A---- C:\Windows\system32\Mcx2Svc.dll 2008-09-15 15:58:25 ----A---- C:\Windows\system32\WSManHTTPConfig.exe 2008-09-15 15:58:25 ----A---- C:\Windows\system32\unattend.dll 2008-09-15 15:58:25 ----A---- C:\Windows\system32\trkwks.dll 2008-09-15 15:58:25 ----A---- C:\Windows\system32\scesrv.dll 2008-09-15 15:58:25 ----A---- C:\Windows\system32\occache.dll 2008-09-15 15:58:25 ----A---- C:\Windows\system32\lnkstub.exe 2008-09-15 15:58:24 ----A---- C:\Windows\system32\wermgr.exe 2008-09-15 15:58:24 ----A---- C:\Windows\system32\ogldrv.dll 2008-09-15 15:58:24 ----A---- C:\Windows\system32\dfdts.dll 2008-09-15 15:58:24 ----A---- C:\Windows\system32\cabview.dll 2008-09-15 15:58:23 ----A---- C:\Windows\system32\wpcao.dll 2008-09-15 15:58:23 ----A---- C:\Windows\system32\bthci.dll 2008-09-15 15:58:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll 2008-09-15 15:58:22 ----A---- C:\Windows\system32\p2pcollab.dll 2008-09-15 15:58:22 ----A---- C:\Windows\system32\msnetobj.dll 2008-09-15 15:58:22 ----A---- C:\Windows\system32\iepeers.dll 2008-09-15 15:58:22 ----A---- C:\Windows\system32\ieaksie.dll 2008-09-15 15:58:22 ----A---- C:\Windows\system32\eappgnui.dll 2008-09-15 15:58:22 ----A---- C:\Windows\system32\basesrv.dll 2008-09-15 15:58:21 ----A---- C:\Windows\system32\drvinst.exe 2008-09-15 15:58:21 ----A---- C:\Windows\system32\dispdiag.exe 2008-09-15 15:58:21 ----A---- C:\Windows\system32\DHCPQEC.DLL 2008-09-15 15:58:20 ----A---- C:\Windows\system32\dsquery.dll 2008-09-15 15:58:19 ----A---- C:\Windows\system32\mmcss.dll 2008-09-15 15:58:18 ----A---- C:\Windows\system32\verifier.dll 2008-09-15 15:58:18 ----A---- C:\Windows\system32\RstrtMgr.dll 2008-09-15 15:58:18 ----A---- C:\Windows\system32\efsadu.dll 2008-09-15 15:58:17 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2008-09-15 15:58:17 ----A---- C:\Windows\system32\secproc_ssp.dll 2008-09-15 15:58:17 ----A---- C:\Windows\system32\mprapi.dll 2008-09-15 15:58:16 ----A---- C:\Windows\system32\WMVENCOD.DLL 2008-09-15 15:58:16 ----A---- C:\Windows\system32\wercplsupport.dll 2008-09-15 15:58:16 ----A---- C:\Windows\system32\qedit.dll 2008-09-15 15:58:15 ----A---- C:\Windows\system32\WPDSp.dll 2008-09-15 15:58:15 ----A---- C:\Windows\system32\WPDShServiceObj.dll 2008-09-15 15:58:15 ----A---- C:\Windows\system32\setupugc.exe 2008-09-15 15:58:15 ----A---- C:\Windows\system32\msoeacct.dll 2008-09-15 15:58:15 ----A---- C:\Windows\system32\d3d10core.dll 2008-09-15 15:58:14 ----A---- C:\Windows\system32\wiascanprofiles.dll 2008-09-15 15:58:14 ----A---- C:\Windows\system32\QSVRMGMT.DLL 2008-09-15 15:58:14 ----A---- C:\Windows\system32\pnrpnsp.dll 2008-09-15 15:58:14 ----A---- C:\Windows\system32\pngfilt.dll 2008-09-15 15:58:14 ----A---- C:\Windows\system32\networkmap.dll 2008-09-15 15:58:14 ----A---- C:\Windows\system32\iscsiexe.dll 2008-09-15 15:58:14 ----A---- C:\Windows\system32\icacls.exe 2008-09-15 15:58:14 ----A---- C:\Windows\system32\consent.exe 2008-09-15 15:58:13 ----A---- C:\Windows\system32\wiaaut.dll 2008-09-15 15:58:13 ----A---- C:\Windows\system32\usercpl.dll 2008-09-15 15:58:13 ----A---- C:\Windows\system32\p2pnetsh.dll 2008-09-15 15:58:13 ----A---- C:\Windows\system32\msrdc.dll 2008-09-15 15:58:13 ----A---- C:\Windows\system32\msdmo.dll 2008-09-15 15:58:13 ----A---- C:\Windows\system32\conime.exe 2008-09-15 15:58:12 ----A---- C:\Windows\system32\xactsrv.dll 2008-09-15 15:58:12 ----A---- C:\Windows\system32\PNPXAssocPrx.dll 2008-09-15 15:58:12 ----A---- C:\Windows\system32\PNPXAssoc.dll 2008-09-15 15:58:12 ----A---- C:\Windows\system32\lsass.exe 2008-09-15 15:58:11 ----A---- C:\Windows\system32\autoplay.dll 2008-09-15 15:58:10 ----A---- C:\Windows\system32\eappprxy.dll 2008-09-15 15:58:10 ----A---- C:\Windows\system32\drmmgrtn.dll 2008-09-15 15:58:09 ----A---- C:\Windows\system32\pcadm.dll 2008-09-15 15:58:09 ----A---- C:\Windows\system32\lpk.dll 2008-09-15 15:58:09 ----A---- C:\Windows\system32\findstr.exe 2008-09-15 15:58:09 ----A---- C:\Windows\system32\dpapimig.exe 2008-09-15 15:58:08 ----A---- C:\Windows\system32\xwizards.dll 2008-09-15 15:58:08 ----A---- C:\Windows\system32\systeminfo.exe 2008-09-15 15:58:08 ----A---- C:\Windows\system32\netcfg.exe 2008-09-15 15:58:08 ----A---- C:\Windows\system32\msrating.dll 2008-09-15 15:58:08 ----A---- C:\Windows\system32\mfplat.dll 2008-09-15 15:58:08 ----A---- C:\Windows\system32\cmdl32.exe 2008-09-15 15:58:07 ----A---- C:\Windows\system32\resutils.dll 2008-09-15 15:58:07 ----A---- C:\Windows\system32\DWWIN.EXE 2008-09-15 15:58:07 ----A---- C:\Windows\system32\alg.exe 2008-09-15 15:58:06 ----A---- C:\Windows\system32\dssec.dll 2008-09-15 15:58:06 ----A---- C:\Windows\system32\dot3ui.dll 2008-09-15 15:58:06 ----A---- C:\Windows\system32\dfrgifc.exe 2008-09-15 15:58:05 ----A---- C:\Windows\system32\powercpl.dll 2008-09-15 15:58:05 ----A---- C:\Windows\system32\odbc32.dll 2008-09-15 15:58:05 ----A---- C:\Windows\system32\netprof.dll 2008-09-15 15:58:05 ----A---- C:\Windows\system32\MFWMAAEC.DLL 2008-09-15 15:58:05 ----A---- C:\Windows\system32\imm32.dll 2008-09-15 15:58:05 ----A---- C:\Windows\system32\dbnetlib.dll 2008-09-15 15:58:05 ----A---- C:\Windows\regedit.exe 2008-09-15 15:58:04 ----A---- C:\Windows\system32\txflog.dll 2008-09-15 15:58:04 ----A---- C:\Windows\system32\nshhttp.dll 2008-09-15 15:58:04 ----A---- C:\Windows\system32\feclient.dll 2008-09-15 15:58:04 ----A---- C:\Windows\system32\btpanui.dll 2008-09-15 15:58:04 ----A---- C:\Windows\system32\apircl.dll 2008-09-15 15:58:03 ----A---- C:\Windows\system32\taskkill.exe 2008-09-15 15:58:03 ----A---- C:\Windows\system32\iexpress.exe 2008-09-15 15:58:02 ----A---- C:\Windows\system32\tbssvc.dll 2008-09-15 15:58:02 ----A---- C:\Windows\system32\RASMM.dll 2008-09-15 15:58:02 ----A---- C:\Windows\system32\msieftp.dll 2008-09-15 15:58:02 ----A---- C:\Windows\system32\dxva2.dll 2008-09-15 15:58:02 ----A---- C:\Windows\system32\dwmapi.dll 2008-09-15 15:58:02 ----A---- C:\Windows\system32\d3d10.dll 2008-09-15 15:58:02 ----A---- C:\Windows\system32\bcdprov.dll 2008-09-15 15:58:02 ----A---- C:\Windows\system32\ActionQueue.dll 2008-09-15 15:58:01 ----A---- C:\Windows\system32\svchost.exe 2008-09-15 15:58:01 ----A---- C:\Windows\system32\shwebsvc.dll 2008-09-15 15:58:01 ----A---- C:\Windows\system32\provthrd.dll 2008-09-15 15:58:01 ----A---- C:\Windows\system32\MediaMetadataHandler.dll 2008-09-15 15:58:00 ----A---- C:\Windows\system32\syncui.dll 2008-09-15 15:58:00 ----A---- C:\Windows\system32\slwmi.dll 2008-09-15 15:58:00 ----A---- C:\Windows\system32\EAPQEC.DLL 2008-09-15 15:58:00 ----A---- C:\Windows\system32\dmocx.dll 2008-09-15 15:57:59 ----A---- C:\Windows\system32\SLCExt.dll 2008-09-15 15:57:59 ----A---- C:\Windows\system32\slcc.dll 2008-09-15 15:57:59 ----A---- C:\Windows\system32\networkexplorer.dll 2008-09-15 15:57:59 ----A---- C:\Windows\system32\aclui.dll 2008-09-15 15:57:58 ----A---- C:\Windows\system32\WMASF.DLL 2008-09-15 15:57:58 ----A---- C:\Windows\system32\raserver.exe 2008-09-15 15:57:58 ----A---- C:\Windows\system32\olepro32.dll 2008-09-15 15:57:58 ----A---- C:\Windows\system32\connect.dll 2008-09-15 15:57:57 ----A---- C:\Windows\system32\PnPUnattend.exe 2008-09-15 15:57:57 ----A---- C:\Windows\system32\dnscacheugc.exe 2008-09-15 15:57:57 ----A---- C:\Windows\system32\brcplsdw.dll 2008-09-15 15:57:57 ----A---- C:\Windows\system32\audiodev.dll 2008-09-15 15:57:56 ----A---- C:\Windows\system32\xcopy.exe 2008-09-15 15:57:56 ----A---- C:\Windows\system32\uxsms.dll 2008-09-15 15:57:56 ----A---- C:\Windows\system32\UIHub.dll 2008-09-15 15:57:56 ----A---- C:\Windows\system32\taskmgr.exe 2008-09-15 15:57:56 ----A---- C:\Windows\system32\QCLIPROV.DLL 2008-09-15 15:57:56 ----A---- C:\Windows\system32\ias.dll 2008-09-15 15:57:55 ----A---- C:\Windows\system32\upnp.dll 2008-09-15 15:57:55 ----A---- C:\Windows\system32\reg.exe 2008-09-15 15:57:54 ----A---- C:\Windows\system32\NapiNSP.dll 2008-09-15 15:57:54 ----A---- C:\Windows\system32\msoert2.dll 2008-09-15 15:57:54 ----A---- C:\Windows\system32\icsfiltr.dll 2008-09-15 15:57:54 ----A---- C:\Windows\system32\cmstp.exe 2008-09-15 15:57:54 ----A---- C:\Windows\system32\atl.dll 2008-09-15 15:57:54 ----A---- C:\Windows\system32\appinfo.dll 2008-09-15 15:57:53 ----A---- C:\Windows\system32\wlanext.exe 2008-09-15 15:57:53 ----A---- C:\Windows\system32\perfts.dll 2008-09-15 15:57:53 ----A---- C:\Windows\system32\msjetoledb40.dll 2008-09-15 15:57:53 ----A---- C:\Windows\system32\mountvol.exe 2008-09-15 15:57:53 ----A---- C:\Windows\system32\mmcshext.dll 2008-09-15 15:57:53 ----A---- C:\Windows\system32\browser.dll 2008-09-15 15:57:52 ----A---- C:\Windows\system32\netplwiz.dll 2008-09-15 15:57:52 ----A---- C:\Windows\system32\dskquoui.dll 2008-09-15 15:57:52 ----A---- C:\Windows\system32\certprop.dll 2008-09-15 15:57:52 ----A---- C:\Windows\system32\AuxiliaryDisplayApi.dll 2008-09-15 15:57:51 ----A---- C:\Windows\system32\wmpdxm.dll 2008-09-15 15:57:51 ----A---- C:\Windows\system32\inetmib1.dll 2008-09-15 15:57:50 ----A---- C:\Windows\system32\WpdMtpUS.dll 2008-09-15 15:57:50 ----A---- C:\Windows\system32\WMVXENCD.DLL 2008-09-15 15:57:50 ----A---- C:\Windows\system32\PING.EXE 2008-09-15 15:57:50 ----A---- C:\Windows\system32\httpapi.dll 2008-09-15 15:57:50 ----A---- C:\Windows\system32\cewmdm.dll 2008-09-15 15:57:50 ----A---- C:\Windows\system32\bitsadmin.exe 2008-09-15 15:57:49 ----A---- C:\Windows\system32\WUDFCoinstaller.dll 2008-09-15 15:57:49 ----A---- C:\Windows\system32\SoundRecorder.exe 2008-09-15 15:57:49 ----A---- C:\Windows\system32\qcap.dll 2008-09-15 15:57:49 ----A---- C:\Windows\system32\qasf.dll 2008-09-15 15:57:49 ----A---- C:\Windows\system32\ieakeng.dll 2008-09-15 15:57:49 ----A---- C:\Windows\system32\dmusic.dll 2008-09-15 15:57:48 ----A---- C:\Windows\system32\SysFxUI.dll 2008-09-15 15:57:48 ----A---- C:\Windows\system32\rekeywiz.exe 2008-09-15 15:57:48 ----A---- C:\Windows\system32\dsuiext.dll 2008-09-15 15:57:48 ----A---- C:\Windows\system32\adsmsext.dll 2008-09-15 15:57:47 ----A---- C:\Windows\system32\WUDFSvc.dll 2008-09-15 15:57:47 ----A---- C:\Windows\system32\wmpsrcwp.dll 2008-09-15 15:57:47 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll 2008-09-15 15:57:47 ----A---- C:\Windows\system32\SecEdit.exe 2008-09-15 15:57:47 ----A---- C:\Windows\system32\mtstocom.exe 2008-09-15 15:57:47 ----A---- C:\Windows\system32\mscandui.dll 2008-09-15 15:57:47 ----A---- C:\Windows\system32\auditpol.exe 2008-09-15 15:57:46 ----A---- C:\Windows\system32\WMVSENCD.DLL 2008-09-15 15:57:46 ----A---- C:\Windows\system32\shimgvw.dll 2008-09-15 15:57:46 ----A---- C:\Windows\system32\Sens.dll 2008-09-15 15:57:46 ----A---- C:\Windows\system32\makecab.exe 2008-09-15 15:57:46 ----A---- C:\Windows\system32\lsmproxy.dll 2008-09-15 15:57:46 ----A---- C:\Windows\system32\batt.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\xwtpw32.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\sppnp.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\seclogon.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\sbeio.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\printcom.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\ndfapi.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\msdadiag.dll 2008-09-15 15:57:45 ----A---- C:\Windows\system32\dot3gpclnt.dll 2008-09-15 15:57:44 ----A---- C:\Windows\system32\wzcdlg.dll 2008-09-15 15:57:44 ----A---- C:\Windows\system32\wiashext.dll 2008-09-15 15:57:44 ----A---- C:\Windows\system32\dxtrans.dll 2008-09-15 15:57:43 ----A---- C:\Windows\system32\wscmisetup.dll 2008-09-15 15:57:43 ----A---- C:\Windows\system32\wiadefui.dll 2008-09-15 15:57:43 ----A---- C:\Windows\system32\shacct.dll 2008-09-15 15:57:43 ----A---- C:\Windows\system32\p2phost.exe 2008-09-15 15:57:43 ----A---- C:\Windows\system32\msorcl32.dll 2008-09-15 15:57:43 ----A---- C:\Windows\system32\apss.dll 2008-09-15 15:57:42 ----A---- C:\Windows\system32\wpdwcn.dll 2008-09-15 15:57:42 ----A---- C:\Windows\system32\WMSPDMOE.DLL 2008-09-15 15:57:42 ----A---- C:\Windows\system32\userinit.exe 2008-09-15 15:57:42 ----A---- C:\Windows\system32\sxstrace.exe 2008-09-15 15:57:42 ----A---- C:\Windows\system32\perfmon.exe 2008-09-15 15:57:42 ----A---- C:\Windows\system32\napipsec.dll 2008-09-15 15:57:41 ----A---- C:\Windows\system32\rrinstaller.exe 2008-09-15 15:57:41 ----A---- C:\Windows\system32\ktmutil.exe 2008-09-15 15:57:41 ----A---- C:\Windows\system32\keymgr.dll 2008-09-15 15:57:41 ----A---- C:\Windows\system32\HelpPaneProxy.dll 2008-09-15 15:57:40 ----A---- C:\Windows\system32\winrshost.exe 2008-09-15 15:57:40 ----A---- C:\Windows\system32\tasklist.exe 2008-09-15 15:57:40 ----A---- C:\Windows\system32\TapiMigPlugin.dll 2008-09-15 15:57:40 ----A---- C:\Windows\system32\prntvpt.dll 2008-09-15 15:57:40 ----A---- C:\Windows\system32\csrsrv.dll 2008-09-15 15:57:39 ----A---- C:\Windows\system32\notepad.exe 2008-09-15 15:57:39 ----A---- C:\Windows\system32\MP4SDECD.DLL 2008-09-15 15:57:39 ----A---- C:\Windows\system32\ftp.exe 2008-09-15 15:57:39 ----A---- C:\Windows\system32\fmifs.dll 2008-09-15 15:57:39 ----A---- C:\Windows\system32\d3dim700.dll 2008-09-15 15:57:39 ----A---- C:\Windows\system32\colorui.dll 2008-09-15 15:57:39 ----A---- C:\Windows\notepad.exe 2008-09-15 15:57:38 ----A---- C:\Windows\system32\UIAutomationCore.dll 2008-09-15 15:57:38 ----A---- C:\Windows\system32\msiexec.exe 2008-09-15 15:57:37 ----A---- C:\Windows\system32\netiougc.exe 2008-09-15 15:57:37 ----A---- C:\Windows\system32\cryptdll.dll 2008-09-15 15:57:36 ----A---- C:\Windows\system32\wscproxystub.dll 2008-09-15 15:57:36 ----A---- C:\Windows\system32\winethc.dll 2008-09-15 15:57:36 ----A---- C:\Windows\system32\PnPutil.exe 2008-09-15 15:57:36 ----A---- C:\Windows\system32\pcasvc.dll 2008-09-15 15:57:36 ----A---- C:\Windows\system32\nshipsec.dll 2008-09-15 15:57:36 ----A---- C:\Windows\system32\msimtf.dll 2008-09-15 15:57:36 ----A---- C:\Windows\system32\mfps.dll 2008-09-15 15:57:36 ----A---- C:\Windows\system32\driverquery.exe 2008-09-15 15:57:35 ----A---- C:\Windows\system32\txfw32.dll 2008-09-15 15:57:35 ----A---- C:\Windows\system32\takeown.exe 2008-09-15 15:57:35 ----A---- C:\Windows\system32\pots.dll 2008-09-15 15:57:35 ----A---- C:\Windows\system32\logagent.exe 2008-09-15 15:57:35 ----A---- C:\Windows\system32\inseng.dll 2008-09-15 15:57:34 ----A---- C:\Windows\system32\wpdbusenum.dll 2008-09-15 15:57:34 ----A---- C:\Windows\system32\wmiprop.dll 2008-09-15 15:57:34 ----A---- C:\Windows\system32\WindowsCodecsExt.dll 2008-09-15 15:57:34 ----A---- C:\Windows\system32\powrprof.dll 2008-09-15 15:57:34 ----A---- C:\Windows\system32\findnetprinters.dll 2008-09-15 15:57:33 ----A---- C:\Windows\system32\rasplap.dll 2008-09-15 15:57:33 ----A---- C:\Windows\system32\mfpmp.exe 2008-09-15 15:57:33 ----A---- C:\Windows\system32\capisp.dll 2008-09-15 15:57:32 ----A---- C:\Windows\system32\shrpubw.exe 2008-09-15 15:57:32 ----A---- C:\Windows\system32\sendmail.dll 2008-09-15 15:57:32 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL 2008-09-15 15:57:32 ----A---- C:\Windows\system32\perfnet.dll 2008-09-15 15:57:32 ----A---- C:\Windows\system32\nsisvc.dll 2008-09-15 15:57:32 ----A---- C:\Windows\system32\fsutil.exe 2008-09-15 15:57:32 ----A---- C:\Windows\system32\dnshc.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\WLanHC.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\shgina.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\sfc_os.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\olecli32.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\luainstall.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\imapi.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\fdPHost.dll 2008-09-15 15:57:31 ----A---- C:\Windows\system32\cmmon32.exe 2008-09-15 15:57:30 ----A---- C:\Windows\system32\wextract.exe 2008-09-15 15:57:30 ----A---- C:\Windows\system32\TMM.dll 2008-09-15 15:57:30 ----A---- C:\Windows\system32\rshx32.dll 2008-09-15 15:57:30 ----A---- C:\Windows\system32\RpcPing.exe 2008-09-15 15:57:30 ----A---- C:\Windows\system32\ktmw32.dll 2008-09-15 15:57:30 ----A---- C:\Windows\system32\d3dim.dll 2008-09-15 15:57:29 ----A---- C:\Windows\system32\WMADMOE.DLL 2008-09-15 15:57:29 ----A---- C:\Windows\system32\wiaacmgr.exe 2008-09-15 15:57:29 ----A---- C:\Windows\system32\version.dll 2008-09-15 15:57:29 ----A---- C:\Windows\system32\runonce.exe 2008-09-15 15:57:29 ----A---- C:\Windows\system32\getmac.exe 2008-09-15 15:57:29 ----A---- C:\Windows\system32\dimsjob.dll 2008-09-15 15:57:29 ----A---- C:\Windows\system32\compstui.dll 2008-09-15 15:57:29 ----A---- C:\Windows\system32\cmlua.dll 2008-09-15 15:57:28 ----A---- C:\Windows\system32\unregmp2.exe 2008-09-15 15:57:28 ----A---- C:\Windows\system32\UI0Detect.exe 2008-09-15 15:57:28 ----A---- C:\Windows\system32\mdminst.dll 2008-09-15 15:57:28 ----A---- C:\Windows\system32\dsauth.dll 2008-09-15 15:57:27 ----A---- C:\Windows\system32\net.exe 2008-09-15 15:57:27 ----A---- C:\Windows\system32\msvfw32.dll 2008-09-15 15:57:26 ----A---- C:\Windows\system32\w32tm.exe 2008-09-15 15:57:26 ----A---- C:\Windows\system32\MPG4DECD.DLL 2008-09-15 15:57:26 ----A---- C:\Windows\system32\MP43DECD.DLL 2008-09-15 15:57:26 ----A---- C:\Windows\system32\imgutil.dll 2008-09-15 15:57:25 ----A---- C:\Windows\system32\wmpshell.dll 2008-09-15 15:57:25 ----A---- C:\Windows\system32\tscupgrd.exe 2008-09-15 15:57:24 ----A---- C:\Windows\system32\sdchange.exe 2008-09-15 15:57:24 ----A---- C:\Windows\system32\ipconfig.exe 2008-09-15 15:57:24 ----A---- C:\Windows\system32\credui.dll 2008-09-15 15:57:24 ----A---- C:\Windows\system32\ACW.exe 2008-09-15 15:57:23 ----A---- C:\Windows\system32\PortableDeviceWiaCompat.dll 2008-09-15 15:57:23 ----A---- C:\Windows\system32\pnpts.dll 2008-09-15 15:57:23 ----A---- C:\Windows\system32\migisol.dll 2008-09-15 15:57:23 ----A---- C:\Windows\system32\fdeploy.dll 2008-09-15 15:57:23 ----A---- C:\Windows\system32\dispci.dll 2008-09-15 15:57:23 ----A---- C:\Windows\system32\diantz.exe 2008-09-15 15:57:23 ----A---- C:\Windows\system32\comrepl.dll 2008-09-15 15:57:23 ----A---- C:\Windows\system32\cmutil.dll 2008-09-15 15:57:22 ----A---- C:\Windows\system32\sfc.exe 2008-09-15 15:57:21 ----A---- C:\Windows\system32\dinput8.dll 2008-09-15 15:57:20 ----A---- C:\Windows\system32\TSTheme.exe 2008-09-15 15:57:20 ----A---- C:\Windows\system32\remotepg.dll 2008-09-15 15:57:20 ----A---- C:\Windows\system32\ExplorerFrame.dll 2008-09-15 15:57:19 ----A---- C:\Windows\system32\nlaapi.dll 2008-09-15 15:57:19 ----A---- C:\Windows\system32\EncDump.dll 2008-09-15 15:57:19 ----A---- C:\Windows\system32\cfgbkend.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\WPDShextAutoplay.exe 2008-09-15 15:57:18 ----A---- C:\Windows\system32\wmidx.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\vdmredir.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\utildll.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\softkbd.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\pdhui.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\hlink.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\fwcfg.dll 2008-09-15 15:57:18 ----A---- C:\Windows\system32\expand.exe 2008-09-15 15:57:18 ----A---- C:\Windows\system32\colbact.dll 2008-09-15 15:57:17 ----A---- C:\Windows\system32\TpmInit.exe 2008-09-15 15:57:17 ----A---- C:\Windows\system32\msfeedsbs.dll 2008-09-15 15:57:17 ----A---- C:\Windows\system32\modemui.dll 2008-09-15 15:57:17 ----A---- C:\Windows\system32\McxDriv.dll 2008-09-15 15:57:17 ----A---- C:\Windows\system32\iernonce.dll 2008-09-15 15:57:17 ----A---- C:\Windows\system32\bridgeunattend.exe 2008-09-15 15:57:17 ----A---- C:\Windows\system32\amstream.dll 2008-09-15 15:57:16 ----A---- C:\Windows\system32\wmvdspa.dll 2008-09-15 15:57:16 ----A---- C:\Windows\system32\sti_ci.dll 2008-09-15 15:57:16 ----A---- C:\Windows\system32\bootcfg.exe 2008-09-15 15:57:15 ----A---- C:\Windows\system32\wsnmp32.dll 2008-09-15 15:57:15 ----A---- C:\Windows\system32\vds_ps.dll 2008-09-15 15:57:15 ----A---- C:\Windows\system32\rdrleakdiag.exe 2008-09-15 15:57:15 ----A---- C:\Windows\system32\esentutl.exe 2008-09-15 15:57:14 ----A---- C:\Windows\system32\waitfor.exe 2008-09-15 15:57:14 ----A---- C:\Windows\system32\tabcal.exe 2008-09-15 15:57:14 ----A---- C:\Windows\system32\qdv.dll 2008-09-15 15:57:14 ----A---- C:\Windows\system32\logman.exe 2008-09-15 15:57:14 ----A---- C:\Windows\system32\iscsium.dll 2008-09-15 15:57:14 ----A---- C:\Windows\system32\dpnet.dll 2008-09-15 15:57:14 ----A---- C:\Windows\system32\cmcfg32.dll 2008-09-15 15:57:14 ----A---- C:\Windows\system32\admparse.dll 2008-09-15 15:57:13 ----A---- C:\Windows\system32\osblprov.dll 2008-09-15 15:57:13 ----A---- C:\Windows\system32\odbccp32.dll 2008-09-15 15:57:13 ----A---- C:\Windows\system32\cacls.exe 2008-09-15 15:57:12 ----A---- C:\Windows\system32\WsmCl.dll 2008-09-15 15:57:12 ----A---- C:\Windows\system32\wmpcm.dll 2008-09-15 15:57:12 ----A---- C:\Windows\system32\wfapigp.dll 2008-09-15 15:57:12 ----A---- C:\Windows\system32\shutdown.exe 2008-09-15 15:57:12 ----A---- C:\Windows\system32\msdtc.exe 2008-09-15 15:57:12 ----A---- C:\Windows\system32\DpiScaling.exe 2008-09-15 15:57:11 ----A---- C:\Windows\system32\olesvr32.dll 2008-09-15 15:57:11 ----A---- C:\Windows\system32\dmsynth.dll 2008-09-15 15:57:11 ----A---- C:\Windows\system32\COLORCNV.DLL 2008-09-15 15:57:10 ----A---- C:\Windows\system32\wpnpinst.exe 2008-09-15 15:57:10 ----A---- C:\Windows\system32\werdiagcontroller.dll 2008-09-15 15:57:10 ----A---- C:\Windows\system32\rasauto.dll 2008-09-15 15:57:10 ----A---- C:\Windows\system32\olethk32.dll 2008-09-15 15:57:10 ----A---- C:\Windows\system32\mfvdsp.dll 2008-09-15 15:57:10 ----A---- C:\Windows\system32\iscsiwmi.dll 2008-09-15 15:57:09 ----A---- C:\Windows\system32\mstext40.dll 2008-09-15 15:57:08 ----A---- C:\Windows\system32\wavemsp.dll 2008-09-15 15:57:08 ----A---- C:\Windows\system32\ufat.dll 2008-09-15 15:57:08 ----A---- C:\Windows\system32\SLLUA.exe 2008-09-15 15:57:07 ----A---- C:\Windows\system32\sxproxy.dll 2008-09-15 15:57:07 ----A---- C:\Windows\system32\networkitemfactory.dll 2008-09-15 15:57:07 ----A---- C:\Windows\system32\msctfui.dll 2008-09-15 15:57:07 ----A---- C:\Windows\system32\at.exe 2008-09-15 15:57:06 ----A---- C:\Windows\system32\WpdConns.dll 2008-09-15 15:57:06 ----A---- C:\Windows\system32\ucsvc.exe 2008-09-15 15:57:06 ----A---- C:\Windows\system32\rgb9rast.dll 2008-09-15 15:57:06 ----A---- C:\Windows\system32\odbctrac.dll 2008-09-15 15:57:06 ----A---- C:\Windows\system32\mshta.exe 2008-09-15 15:57:06 ----A---- C:\Windows\system32\convert.exe 2008-09-15 15:57:05 ----A---- C:\Windows\system32\xmlprovi.dll 2008-09-15 15:57:05 ----A---- C:\Windows\system32\RegCtrl.dll 2008-09-15 15:57:05 ----A---- C:\Windows\system32\licmgr10.dll 2008-09-15 15:57:05 ----A---- C:\Windows\system32\itss.dll 2008-09-15 15:57:04 ----A---- C:\Windows\system32\TimeDateMUICallback.dll 2008-09-15 15:57:04 ----A---- C:\Windows\system32\prevhost.exe 2008-09-15 15:57:04 ----A---- C:\Windows\system32\mobsync.exe 2008-09-15 15:57:04 ----A---- C:\Windows\system32\iscsied.dll 2008-09-15 15:57:04 ----A---- C:\Windows\system32\csrstub.exe 2008-09-15 15:57:04 ----A---- C:\Windows\system32\bitsigd.dll 2008-09-15 15:57:04 ----A---- C:\Windows\system32\AuthFWGP.dll 2008-09-15 15:57:03 ----A---- C:\Windows\system32\tbs.dll 2008-09-15 15:57:03 ----A---- C:\Windows\system32\rasdiag.dll 2008-09-15 15:57:03 ----A---- C:\Windows\system32\netbtugc.exe 2008-09-15 15:57:03 ----A---- C:\Windows\system32\dskquota.dll 2008-09-15 15:57:02 ----A---- C:\Windows\system32\ocsetup.exe 2008-09-15 15:57:02 ----A---- C:\Windows\system32\GuidedHelp.dll 2008-09-15 15:57:02 ----A---- C:\Windows\system32\cscdll.dll 2008-09-15 15:57:02 ----A---- C:\Windows\system32\AtBroker.exe 2008-09-15 15:57:01 ----A---- C:\Windows\system32\winnsi.dll 2008-09-15 15:57:01 ----A---- C:\Windows\system32\unattendedjoin.exe 2008-09-15 15:57:01 ----A---- C:\Windows\system32\setupcln.dll 2008-09-15 15:57:01 ----A---- C:\Windows\system32\mydocs.dll 2008-09-15 15:57:01 ----A---- C:\Windows\system32\l2gpstore.dll 2008-09-15 15:57:01 ----A---- C:\Windows\system32\fphc.dll 2008-09-15 15:57:01 ----A---- C:\Windows\system32\dmime.dll 2008-09-15 15:57:01 ----A---- C:\Windows\system32\cmpbk32.dll 2008-09-15 15:57:00 ----A---- C:\Windows\system32\dsdmo.dll 2008-09-15 15:56:59 ----A---- C:\Windows\system32\regini.exe 2008-09-15 15:56:59 ----A---- C:\Windows\system32\odbccr32.dll 2008-09-15 15:56:59 ----A---- C:\Windows\system32\napdsnap.dll 2008-09-15 15:56:59 ----A---- C:\Windows\system32\msdart.dll 2008-09-15 15:56:59 ----A---- C:\Windows\system32\dot3dlg.dll 2008-09-15 15:56:59 ----A---- C:\Windows\system32\devenum.dll 2008-09-15 15:56:59 ----A---- C:\Windows\system32\apilogen.dll 2008-09-15 15:56:59 ----A---- C:\Windows\system32\amxread.dll 2008-09-15 15:56:58 ----A---- C:\Windows\system32\VIDRESZR.DLL 2008-09-15 15:56:58 ----A---- C:\Windows\system32\usbui.dll 2008-09-15 15:56:58 ----A---- C:\Windows\system32\odbccu32.dll 2008-09-15 15:56:58 ----A---- C:\Windows\system32\msident.dll 2008-09-15 15:56:58 ----A---- C:\Windows\system32\MsCtfMonitor.dll 2008-09-15 15:56:58 ----A---- C:\Windows\system32\cmstplua.dll 2008-09-15 15:56:57 ----A---- C:\Windows\system32\wpclsp.dll 2008-09-15 15:56:57 ----A---- C:\Windows\system32\RacAgent.exe 2008-09-15 15:56:57 ----A---- C:\Windows\system32\gpupdate.exe 2008-09-15 15:56:56 ----A---- C:\Windows\system32\WINSRPC.DLL 2008-09-15 15:56:56 ----A---- C:\Windows\system32\vss_ps.dll 2008-09-15 15:56:56 ----A---- C:\Windows\system32\upnpcont.exe 2008-09-15 15:56:56 ----A---- C:\Windows\system32\nsi.dll 2008-09-15 15:56:56 ----A---- C:\Windows\system32\nbtstat.exe 2008-09-15 15:56:56 ----A---- C:\Windows\system32\mtxlegih.dll 2008-09-15 15:56:56 ----A---- C:\Windows\system32\mtxdm.dll 2008-09-15 15:56:56 ----A---- C:\Windows\system32\avrt.dll 2008-09-15 15:56:55 ----A---- C:\Windows\system32\srwmi.dll 2008-09-15 15:56:55 ----A---- C:\Windows\system32\mfcsubs.dll 2008-09-15 15:56:55 ----A---- C:\Windows\system32\graftabl.com 2008-09-15 15:56:53 ----A---- C:\Windows\system32\wsock32.dll 2008-09-15 15:56:53 ----A---- C:\Windows\system32\vfwwdm32.dll 2008-09-15 15:56:53 ----A---- C:\Windows\system32\syskey.exe 2008-09-15 15:56:53 ----A---- C:\Windows\system32\rasphone.exe 2008-09-15 15:56:53 ----A---- C:\Windows\system32\netevent.dll 2008-09-15 15:56:52 ----A---- C:\Windows\system32\wiarpc.dll 2008-09-15 15:56:52 ----A---- C:\Windows\system32\WavDest.dll 2008-09-15 15:56:52 ----A---- C:\Windows\system32\odbcbcp.dll 2008-09-15 15:56:52 ----A---- C:\Windows\system32\ndfetw.dll 2008-09-15 15:56:52 ----A---- C:\Windows\system32\msexcl40.dll 2008-09-15 15:56:52 ----A---- C:\Windows\system32\extrac32.exe 2008-09-15 15:56:51 ----A---- C:\Windows\system32\ROUTE.EXE 2008-09-15 15:56:50 ----A---- C:\Windows\system32\procinst.dll 2008-09-15 15:56:50 ----A---- C:\Windows\system32\MP3DMOD.DLL 2008-09-15 15:56:50 ----A---- C:\Windows\system32\eventcls.dll 2008-09-15 15:56:49 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe 2008-09-15 15:56:49 ----A---- C:\Windows\system32\wiadss.dll 2008-09-15 15:56:49 ----A---- C:\Windows\system32\TabbtnEx.dll 2008-09-15 15:56:49 ----A---- C:\Windows\system32\inetppui.dll 2008-09-15 15:56:49 ----A---- C:\Windows\system32\d3dxof.dll 2008-09-15 15:56:49 ----A---- C:\Windows\system32\csrss.exe 2008-09-15 15:56:49 ----A---- C:\Windows\system32\atmfd.dll 2008-09-15 15:56:48 ----A---- C:\Windows\system32\WlanMmHC.dll 2008-09-15 15:56:48 ----A---- C:\Windows\system32\psbase.dll 2008-09-15 15:56:48 ----A---- C:\Windows\system32\dmscript.dll 2008-09-15 15:56:47 ----A---- C:\Windows\system32\Tabbtn.dll 2008-09-15 15:56:47 ----A---- C:\Windows\system32\CertEnrollCtrl.exe 2008-09-15 15:56:46 ----A---- C:\Windows\system32\msxbde40.dll 2008-09-15 15:56:46 ----A---- C:\Windows\system32\dmloader.dll 2008-09-15 15:56:46 ----A---- C:\Windows\fveupdate.exe 2008-09-15 15:56:44 ----A---- C:\Windows\system32\wshcon.dll 2008-09-15 15:56:44 ----A---- C:\Windows\system32\Netplwiz.exe 2008-09-15 15:56:44 ----A---- C:\Windows\system32\msltus40.dll 2008-09-15 15:56:44 ----A---- C:\Windows\system32\credssp.dll 2008-09-15 15:56:43 ----A---- C:\Windows\system32\mspbde40.dll 2008-09-15 15:56:43 ----A---- C:\Windows\system32\icsunattend.exe 2008-09-15 15:56:42 ----A---- C:\Windows\system32\PlaySndSrv.dll 2008-09-15 15:56:41 ----A---- C:\Windows\system32\WsmRes.dll 2008-09-15 15:56:41 ----A---- C:\Windows\system32\WSHTCPIP.DLL 2008-09-15 15:56:41 ----A---- C:\Windows\system32\wship6.dll 2008-09-15 15:56:41 ----A---- C:\Windows\system32\sxsstore.dll 2008-09-15 15:56:41 ----A---- C:\Windows\system32\lltdapi.dll 2008-09-15 15:56:41 ----A---- C:\Windows\system32\HotStartUserAgent.dll 2008-09-15 15:56:40 ----A---- C:\Windows\system32\setupSNK.exe 2008-09-15 15:56:40 ----A---- C:\Windows\system32\msvidc32.dll 2008-09-15 15:56:40 ----A---- C:\Windows\system32\localui.dll 2008-09-15 15:56:40 ----A---- C:\Windows\system32\ComputerDefaults.exe 2008-09-15 15:56:39 ----A---- C:\Windows\system32\LangCleanupSysprepAction.dll 2008-09-15 15:56:39 ----A---- C:\Windows\system32\icaapi.dll 2008-09-15 15:56:38 ----A---- C:\Windows\system32\slwga.dll 2008-09-15 15:56:38 ----A---- C:\Windows\system32\OptionalFeatures.exe 2008-09-15 15:56:37 ----A---- C:\Windows\system32\sbunattend.exe 2008-09-15 15:56:36 ----A---- C:\Windows\system32\dmutil.dll 2008-09-15 15:56:35 ----A---- C:\Windows\system32\usbperf.dll 2008-09-15 15:56:35 ----A---- C:\Windows\system32\spopk.dll 2008-09-15 15:56:35 ----A---- C:\Windows\system32\serialui.dll 2008-09-15 15:56:35 ----A---- C:\Windows\system32\NcdProp.dll 2008-09-15 15:56:33 ----A---- C:\Windows\system32\cofiredm.dll 2008-09-15 15:56:32 ----A---- C:\Windows\system32\odbcconf.dll 2008-09-15 15:56:32 ----A---- C:\Windows\system32\msfeedssync.exe 2008-09-15 15:56:32 ----A---- C:\Windows\system32\hbaapi.dll 2008-09-15 15:56:30 ----A---- C:\Windows\system32\ieencode.dll 2008-09-15 15:56:29 ----A---- C:\Windows\system32\rasctrs.dll 2008-09-15 15:56:29 ----A---- C:\Windows\system32\msobjs.dll 2008-09-15 15:56:29 ----A---- C:\Windows\system32\corpol.dll 2008-09-15 15:56:27 ----A---- C:\Windows\system32\midimap.dll 2008-09-15 15:56:27 ----A---- C:\Windows\system32\hnetmon.dll 2008-09-15 15:56:26 ----A---- C:\Windows\system32\vdmdbg.dll 2008-09-15 15:56:26 ----A---- C:\Windows\system32\InfDefaultInstall.exe 2008-09-15 15:56:25 ----A---- C:\Windows\system32\nlsbres.dll 2008-09-15 15:56:25 ----A---- C:\Windows\system32\esentprf.dll 2008-09-15 15:56:24 ----A---- C:\Windows\system32\url.dll 2008-09-15 15:56:24 ----A---- C:\Windows\system32\LogonUI.exe 2008-09-15 15:56:24 ----A---- C:\Windows\system32\iprtprio.dll 2008-09-15 15:56:19 ----A---- C:\Windows\system32\sdspres.dll 2008-09-15 15:56:16 ----A---- C:\Windows\system32\osbaseln.dll 2008-09-15 15:56:16 ----A---- C:\Windows\system32\cfgmgr32.dll 2008-09-15 15:56:13 ----A---- C:\Windows\system32\msisip.dll 2008-09-15 15:56:11 ----A---- C:\Windows\system32\msmmsp.dll 2008-09-15 15:56:08 ----A---- C:\Windows\system32\dispex.dll 2008-09-15 15:56:07 ----A---- C:\Windows\system32\winusb.dll 2008-09-15 15:56:06 ----A---- C:\Windows\system32\rdpcfgex.dll 2008-09-15 15:55:58 ----A---- C:\Windows\system32\Nlsdl.dll 2008-09-15 15:55:56 ----A---- C:\Windows\system32\riched32.dll 2008-09-15 15:55:56 ----A---- C:\Windows\system32\msidle.dll 2008-09-15 15:55:55 ----A---- C:\Windows\system32\spwmp.dll 2008-09-15 15:55:55 ----A---- C:\Windows\system32\idndl.dll 2008-09-15 15:55:52 ----A---- C:\Windows\system32\KBDKOR.DLL 2008-09-15 15:55:52 ----A---- C:\Windows\system32\KBDJPN.DLL 2008-09-15 15:55:49 ----A---- C:\Windows\system32\iscsilog.dll 2008-09-15 15:55:45 ----A---- C:\Windows\system32\wmploc.DLL 2008-09-15 15:55:45 ----A---- C:\Windows\system32\vga256.dll 2008-09-15 15:55:45 ----A---- C:\Windows\system32\tsddd.dll 2008-09-15 15:55:45 ----A---- C:\Windows\system32\framebuf.dll 2008-09-15 15:55:45 ----A---- C:\Windows\system32\dxmasf.dll 2008-09-15 15:55:43 ----A---- C:\Windows\system32\vga64k.dll 2008-09-15 15:55:43 ----A---- C:\Windows\system32\vga.dll 2008-09-15 15:55:42 ----A---- C:\Windows\system32\bootstr.dll 2008-09-15 15:55:40 ----A---- C:\Windows\system32\dmdskres2.dll 2008-09-15 15:55:39 ----A---- C:\Windows\system32\spwizres.dll 2008-09-15 15:55:39 ----A---- C:\Windows\system32\f3ahvoas.dll 2008-09-15 15:55:32 ----A---- C:\Windows\system32\gatherWiredInfo.vbs 2008-09-15 15:55:31 ----A---- C:\Windows\system32\gatherWirelessInfo.vbs 2008-09-15 15:55:29 ----A---- C:\Windows\system32\fsmgmt.msc 2008-09-15 15:55:13 ----A---- C:\Windows\system32\perfmon.msc 2008-09-15 15:55:12 ----A---- C:\Windows\system32\vsp1cln.exe 2008-09-15 15:54:03 ----A---- C:\Windows\system32\xmllite.dll 2008-09-15 15:54:02 ----A---- C:\Windows\system32\wbemcomn.dll 2008-09-15 15:53:56 ----A---- C:\Windows\system32\SmiInstaller.dll 2008-09-15 15:53:56 ----A---- C:\Windows\system32\SmiEngine.dll 2008-09-15 15:53:47 ----A---- C:\Windows\system32\wdscore.dll 2008-09-15 15:53:47 ----A---- C:\Windows\system32\PkgMgr.exe 2008-09-15 15:53:29 ----A---- C:\Windows\system32\drvstore.dll 2008-09-15 15:53:28 ----A---- C:\Windows\system32\mspatcha.dll 2008-09-15 15:53:28 ----A---- C:\Windows\system32\msdelta.dll 2008-09-15 15:53:28 ----A---- C:\Windows\system32\dpx.dll ======List of files/folders modified in the last 1 months====== 2008-10-12 11:22:24 ----D---- C:\Windows\Prefetch 2008-10-12 11:03:55 ----D---- C:\Windows\Temp 2008-10-12 09:22:57 ----AH---- C:\Windows\system32\FFASTLOG.TXT 2008-10-12 09:22:13 ----D---- C:\Windows\System32 2008-10-12 00:00:08 ----SHD---- C:\System Volume Information 2008-10-11 19:05:43 ----D---- C:\Windows 2008-10-06 09:27:10 ----SD---- C:\Windows\Downloaded Program Files 2008-10-06 09:26:56 ----D---- C:\Windows\system32\Macromed 2008-10-05 14:53:53 ----SHD---- C:\Windows\Installer 2008-10-05 14:52:54 ----HD---- C:\ProgramData 2008-10-05 14:52:46 ----RD---- C:\Program Files 2008-10-05 14:52:46 ----HD---- C:\Program Files\Common Files 2008-10-05 14:49:22 ----D---- C:\Windows\inf 2008-10-05 14:37:23 ----D---- C:\Users\anthony-desktop\AppData\Roaming\.mudmagic 2008-10-05 13:50:02 ----D---- C:\Windows\system32\drivers 2008-10-05 13:49:58 ----D---- C:\QooBox 2008-10-05 13:45:55 ----N---- C:\Windows\system.ini 2008-10-05 13:44:38 ----D---- C:\Windows\system32\config 2008-10-05 13:44:27 ----D---- C:\Windows\erdnt 2008-10-05 13:42:55 ----D---- C:\Windows\AppPatch 2008-10-05 13:38:50 ----D---- C:\Windows\system32\en-US 2008-10-03 15:46:21 ----D---- C:\Program Files\World of Warcraft 2008-09-28 22:37:05 ----HD---- C:\Program Files\InstallShield Installation Information 2008-09-28 22:36:06 ----HD---- C:\Program Files\Common Files\InstallShield 2008-09-28 21:34:59 ----A---- C:\Windows\system32\PerfStringBackup.INI 2008-09-28 19:53:22 ----D---- C:\Program Files\Replay AV 8 2008-09-28 19:42:45 ----D---- C:\Program Files\WinPcap 2008-09-28 19:41:59 ----D---- C:\ProgramData\WinZip 2008-09-28 19:39:19 ----A---- C:\Windows\iun6002.exe 2008-09-24 00:00:17 ----D---- C:\Windows\system32\catroot2 2008-09-23 17:24:37 ----D---- C:\Program Files\Microsoft Office 2008-09-23 17:24:37 ----D---- C:\Program Files\Common Files\microsoft shared 2008-09-23 17:24:27 ----A---- C:\Windows\win.ini 2008-09-23 17:24:26 ----A---- C:\Windows\ODBC.INI 2008-09-23 17:24:14 ----RSD---- C:\Windows\Fonts 2008-09-23 17:24:09 ----RSD---- C:\Windows\Media 2008-09-23 17:23:49 ----D---- C:\Windows\Help 2008-09-23 17:23:48 ----D---- C:\Windows\system 2008-09-23 06:36:34 ----D---- C:\Windows\system32\WDI 2008-09-23 03:24:22 ----D---- C:\Windows\rescache 2008-09-23 03:07:01 ----D---- C:\Windows\PolicyDefinitions 2008-09-23 03:01:38 ----D---- C:\Windows\winsxs 2008-09-22 04:09:15 ----D---- C:\Windows\Logs 2008-09-22 03:32:17 ----D---- C:\Windows\Microsoft.NET 2008-09-22 03:32:13 ----RSD---- C:\Windows\assembly 2008-09-22 03:27:28 ----D---- C:\ProgramData\NVIDIA 2008-09-22 03:24:49 ----SHD---- C:\Boot 2008-09-22 03:24:31 ----ASH---- C:\Program Files\desktop.ini 2008-09-22 03:16:28 ----D---- C:\Program Files\Windows Sidebar 2008-09-22 03:16:28 ----D---- C:\Program Files\Windows Calendar 2008-09-22 03:16:28 ----D---- C:\Program Files\Movie Maker 2008-09-22 03:16:26 ----D---- C:\Program Files\Windows Mail 2008-09-22 03:16:25 ----D---- C:\Program Files\Windows Media Player 2008-09-22 03:16:24 ----D---- C:\Program Files\Windows Collaboration 2008-09-22 03:16:23 ----D---- C:\Program Files\Windows Journal 2008-09-22 03:16:22 ----D---- C:\Program Files\Windows Photo Gallery 2008-09-22 03:16:15 ----D---- C:\Program Files\Windows Defender 2008-09-22 03:16:15 ----D---- C:\Program Files\Common Files\System 2008-09-22 03:16:14 ----D---- C:\Windows\servicing 2008-09-22 03:16:13 ----D---- C:\Windows\ehome 2008-09-22 03:15:58 ----D---- C:\Windows\MSAgent 2008-09-22 03:15:55 ----D---- C:\Windows\L2Schemas 2008-09-22 03:15:55 ----D---- C:\Windows\IME 2008-09-22 03:15:55 ----D---- C:\Windows\DigitalLocker 2008-09-22 03:15:53 ----D---- C:\Windows\system32\XPSViewer 2008-09-22 03:15:53 ----D---- C:\Windows\system32\ko-KR 2008-09-22 03:15:53 ----D---- C:\Windows\system32\da-DK 2008-09-22 03:15:53 ----D---- C:\Windows\system32\com 2008-09-22 03:15:40 ----D---- C:\Windows\system32\it-IT 2008-09-22 03:15:40 ----D---- C:\Windows\system32\el-GR 2008-09-22 03:15:40 ----D---- C:\Windows\system32\de-DE 2008-09-22 03:15:39 ----D---- C:\Windows\system32\oobe 2008-09-22 03:15:38 ----D---- C:\Windows\system32\sysprep 2008-09-22 03:15:38 ----D---- C:\Windows\system32\migration 2008-09-22 03:15:32 ----D---- C:\Windows\system32\ru-RU 2008-09-22 03:15:32 ----D---- C:\Windows\system32\AdvancedInstallers 2008-09-22 03:15:31 ----D---- C:\Windows\system32\sv-SE 2008-09-22 03:15:31 ----D---- C:\Windows\system32\setup 2008-09-22 03:15:31 ----D---- C:\Windows\system32\ias 2008-09-22 03:15:31 ----D---- C:\Windows\system32\hu-HU 2008-09-22 03:15:31 ----D---- C:\Windows\system32\he-IL 2008-09-22 03:15:31 ----D---- C:\Windows\system32\fr-FR 2008-09-22 03:15:31 ----D---- C:\Windows\system32\fi-FI 2008-09-22 03:15:31 ----D---- C:\Windows\system32\cs-CZ 2008-09-22 03:15:30 ----D---- C:\Windows\system32\SLUI 2008-09-22 03:15:30 ----D---- C:\Windows\system32\pt-PT 2008-09-22 03:15:27 ----D---- C:\Windows\system32\zh-CN 2008-09-22 03:15:27 ----D---- C:\Windows\system32\manifeststore 2008-09-22 03:15:27 ----D---- C:\Windows\system32\es-ES 2008-09-22 03:15:27 ----D---- C:\Windows\system32\en 2008-09-22 03:15:26 ----D---- C:\Windows\system32\zh-TW 2008-09-22 03:15:26 ----D---- C:\Windows\system32\ro-RO 2008-09-22 03:15:26 ----D---- C:\Windows\system32\pl-PL 2008-09-22 03:15:26 ----D---- C:\Windows\system32\ja-JP 2008-09-22 03:15:20 ----D---- C:\Windows\system32\tr-TR 2008-09-22 03:15:19 ----D---- C:\Windows\system32\wbem 2008-09-22 03:15:15 ----D---- C:\Windows\system32\nl-NL 2008-09-22 03:15:15 ----D---- C:\Windows\system32\nb-NO 2008-09-22 03:15:15 ----D---- C:\Windows\system32\ar-SA 2008-09-22 03:15:10 ----D---- C:\Windows\system32\migwiz 2008-09-22 03:15:09 ----D---- C:\Windows\system32\pt-BR 2008-09-22 03:13:02 ----D---- C:\Windows\Boot 2008-09-22 03:12:57 ----D---- C:\Windows\system32\Boot 2008-09-21 20:19:25 ----A---- C:\Windows\system32\ifxcardm.dll 2008-09-21 20:19:23 ----A---- C:\Windows\system32\axaltocm.dll |
|
|
|
|
10-12-2008, 09:25 AM
|
#4 (permalink) |
|
Registered User
Join Date: Oct 2008
Posts: 4
OS: vista sp1
|
Re: hijack log IE problems
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 DLARTL_M;DLARTL_M; C:\Windows\System32\Drivers\DLARTL_M.SYS [2006-08-11 28184] R1 tmlwf;Trend Micro NDIS 6.0 Filter Driver; C:\Windows\system32\DRIVERS\tmlwf.sys [2008-09-08 145424] R1 tmtdi;Trend Micro TDI Driver; C:\Windows\system32\DRIVERS\tmtdi.sys [2008-09-08 80400] R2 DLABMFSM;DLABMFSM; C:\Windows\System32\DLA\DLABMFSM.SYS [2006-08-18 35096] R2 DLABOIOM;DLABOIOM; C:\Windows\System32\DLA\DLABOIOM.SYS [2006-08-18 32472] R2 DLADResM;DLADResM; C:\Windows\System32\DLA\DLADResM.SYS [2006-08-18 9400] R2 DLAIFS_M;DLAIFS_M; C:\Windows\System32\DLA\DLAIFS_M.SYS [2006-08-18 104472] R2 DLAOPIOM;DLAOPIOM; C:\Windows\System32\DLA\DLAOPIOM.SYS [2006-08-18 26008] R2 DLAPoolM;DLAPoolM; C:\Windows\System32\DLA\DLAPoolM.SYS [2006-08-18 14520] R2 DLAUDF_M;DLAUDF_M; C:\Windows\System32\DLA\DLAUDF_M.SYS [2006-08-18 97848] R2 DLAUDFAM;DLAUDFAM; C:\Windows\System32\DLA\DLAUDFAM.SYS [2006-08-18 94648] R2 DRVNDDM;DRVNDDM; C:\Windows\System32\Drivers\DRVNDDM.SYS [2006-08-11 51768] R2 dsunidrv;dsunidrv; \??\C:\Program Files\DellSupport\Drivers\dsunidrv.sys [2006-08-17 7424] R2 nmsgopro;GoProto Protocol Driver for NMS; C:\Windows\system32\DRIVERS\nmsgopro.sys [2006-09-27 28672] R2 nmsunidr;UniDriver for NMS; C:\Windows\system32\DRIVERS\nmsunidr.sys [2006-10-19 7424] R2 tmcomm;tmcomm; C:\Windows\system32\DRIVERS\tmcomm.sys [2008-09-08 144912] R2 tmpreflt;tmpreflt; C:\Windows\system32\DRIVERS\tmpreflt.sys [2008-09-08 36368] R2 tmwfp;Trend Micro WFP Callout Driver; C:\Windows\system32\DRIVERS\tmwfp.sys [2008-09-08 256528] R2 tmxpflt;tmxpflt; C:\Windows\system32\DRIVERS\tmxpflt.sys [2008-09-08 205328] R2 vsapint;vsapint; C:\Windows\system32\DRIVERS\vsapint.sys [2008-09-08 1195448] R3 DSproct;DSproct; \??\C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys [2006-10-05 4736] R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-01-19 220672] R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168] R3 IntelDH;IntelDH Driver; C:\Windows\System32\Drivers\IntelDH.sys [2007-02-19 5504] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-09-17 7624192] R3 STHDA;SigmaTel High Definition Audio CODEC; C:\Windows\system32\drivers\stwrt.sys [2007-01-12 647680] S1 DLACDBHM;DLACDBHM; C:\Windows\System32\Drivers\DLACDBHM.SYS [2006-08-11 12920] S2 EZWRIT3;EZWRIT3; C:\Windows\System32\Drivers\ezwrit3.sys [2006-01-12 12672] S2 tmactmon;tmactmon; C:\Windows\system32\DRIVERS\tmactmon.sys [2008-09-08 50192] S2 tmevtmgr;tmevtmgr; C:\Windows\system32\DRIVERS\tmevtmgr.sys [2008-09-08 49680] S3 Alpham;Ideazon Merc Composite Keyboard Driver; C:\Windows\system32\DRIVERS\Alpham.sys [2005-12-04 34944] S3 Alpham1;Ideazon ZBoard USB Human Interface Device; C:\Windows\system32\DRIVERS\Alpham1.sys [2007-07-23 42624] S3 Alpham2;Ideazon ZBoard MM USB Human Interface Device; C:\Windows\system32\DRIVERS\Alpham2.sys [2007-03-20 18432] S3 APLOADER;APLOADER; C:\Windows\system32\drivers\ApLoader.sys [2005-10-18 21376] S3 catchme;catchme; \??\C:\ComboFix\catchme.sys [] S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632] S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192] S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888] S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016] S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032] S3 SDDMI2;SDDMI2; \??\C:\Windows\system32\DDMI2.sys [] S3 TfNetMon;TfNetMon; \??\C:\Windows\system32\drivers\TfNetMon.sys [] S3 TSHWMDTCP;TSHWMDTCP; \??\C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.sys [2006-11-18 18904] S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2007-10-31 30464] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328] S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 aawservice;Ad-Aware 2007 Service; C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [2008-03-19 607576] R2 AlertService;Intel(R) Alert Service; C:\Program Files\Intel\IntelDH\CCU\AlertService.exe [2006-11-18 195032] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2007-10-31 110592] R2 DQLWinService;DQLWinService; C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe [2006-10-29 208896] R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2006-09-29 81920] R2 ISSM;Intel(R) Software Services Manager; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe [2006-11-18 81880] R2 M1 Server;Intel(R) Viiv(TM) Media Server; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe [2006-11-18 32216] R2 MCLServiceATL;Intel(R) Application Tracker; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe [2006-11-18 174552] R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120] R2 Remote UI Service;Intel(R) Remoting Service; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe [2006-11-18 550872] R2 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [2006-11-05 159744] R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter); C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2008-08-13 201968] R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-03-30 504104] S2 SfCtlCom;Trend Micro Central Control Component; C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe [2008-09-08 707128] S2 ThreatFire;ThreatFire; C:\Program Files\ThreatFire\TFService.exe service [] S2 TMBMServer;Trend Micro Unauthorized Change Prevention Service; C:\Program Files\Trend Micro\BM\TMBMSRV.exe [2008-09-18 337160] S2 TmPfw;Trend Micro Personal Firewall; C:\Program Files\Trend Micro\Internet Security\TmPfw.exe [2008-09-08 492888] S2 TmProxy;Trend Micro Proxy Service; C:\Program Files\Trend Micro\Internet Security\TmProxy.exe [2008-09-08 677128] S3 DSBrokerService;DSBrokerService; C:\Program Files\DellSupport\brkrsvc.exe [2006-11-07 70656] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-27 138168] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-05 880640] S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-01-25 93048] S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-09-14 73728] -----------------EOF----------------- |
|
|
|
|
10-12-2008, 09:26 AM
|
#5 (permalink) |
|
Registered User
Join Date: Oct 2008
Posts: 4
OS: vista sp1
|
Re: hijack log IE problems
info.txt logfile of random's system information tool 1.04 2008-10-12 11:22:29
======Uninstall list====== Acrobat.com-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe -uninstall com.adobe.mauby 4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07} Ad-Aware 2007-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} Adobe AIR-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E} Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe Adobe Media Player-->msiexec /qb /x {1EBB57D4-63FF-87CC-A0F0-D73982CF6008} Adobe Media Player-->MsiExec.exe /I{1EBB57D4-63FF-87CC-A0F0-D73982CF6008} Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A90000000001} AOL Install-->MsiExec.exe /I{2357B8BC-88C9-4A72-818C-050CC4EB0778} Apple Mobile Device Support-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543} Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F} Console Classix 4.05-->"C:\Program Files\ConsoleClassix.com\unins000.exe" Crawler Radio & MP3 Player-->"C:\Program Files\Crawler\Radio\unins000.exe" Dell Support Center (Support Software)-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1} Dell System Customization Wizard-->MsiExec.exe /I{13BA7B44-B712-4DEE-A7B8-1DD564F37AE5} DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D} Documentation & Support Launcher-->MsiExec.exe /I{89CEAE14-DD0F-448E-9554-15781EC9DB24} EarthLink Setup Files-->MsiExec.exe /X{5E68BB65-4059-4FE5-AAC4-0CD1D79BBDE2} Free Mp3 Wma Converter V 1.6.3-->"C:\Program Files\Free Audio Pack\unins000.exe" Games, Music, & Photos Launcher-->MsiExec.exe /I{3E25E350-949F-4DB7-8288-2A60E018B4C1} Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29} Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar3.dll" HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall Intel(R) Matrix Storage Manager-->C:\Windows\System32\Imsmudlg.exe Intel(R) Viiv(TM) Software-->MsiExec.exe /X{26C610BF-761B-4209-BD6A-A0F1B73D6DDE} /qb! iTunes-->MsiExec.exe /I{585776BC-4BD6-4BD2-A19A-1D6CB44A403B} Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000} LimeWire 4.14.10-->"C:\Program Files\LimeWire\uninstall.exe" LIVE gaming on Windows Runtime Version 1.0.6027-->MsiExec.exe /X{839916F4-D8B5-4407-BE6D-6D4EB9D96AF4} MediaMonkey 3.0-->"C:\Program Files\MediaMonkey\unins000.exe" Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft Office 97, Professional Edition-->C:\Program Files\Microsoft Office\Office\Setup\Acme.exe /w Off97Pro.STF Microsoft Office Small Business Edition 2003-->MsiExec.exe /I{91CA0409-6000-11D3-8CFE-0150048383C9} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Works-->MsiExec.exe /I{6D52C408-B09A-4520-9B18-475B81D393F1} MiShell*Budget (remove only)-->"C:\Program Files\MiShellSoft\Budget\uninstall.exe" MobMap 1.58-->"C:\Program Files\MobMapUpdater\unins000.exe" Mozilla Firefox (3.0.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF} MudMagic (remove only)-->C:\Program Files\MudMagic\mudmagic-uninst.exe NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI OIN Analytics-->C:\Program Files\OINAnalytics\Uninstall.exe QuickTime-->MsiExec.exe /I{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD} Replay AV 8-->C:\Windows\iun6002.exe "C:\Program Files\Replay AV 8\uninstallRAV8.ini" Replay Converter 2.8-->C:\Windows\iun6002.exe "C:\Program Files\Replay AV 8\iruninRCV.ini" Roxio Creator Audio-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82} Roxio Creator BDAV Plugin-->MsiExec.exe /I{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC} Roxio Creator Copy-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048} Roxio Creator Data-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87} Roxio Creator DE-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C} Roxio Creator Tools-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF} Roxio Drag-to-Disc-->MsiExec.exe /I{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668} Roxio Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA} Roxio MyDVD DE-->MsiExec.exe /I{D639085F-4B6E-4105-9F37-A0DBB023E2FB} Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E} Safari-->MsiExec.exe /I{F0E8F94D-6E68-4B35-92DF-3AA6DC6A6768} SigmaTel Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x9 -remove -removeonly Sonic Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0} Trend Micro Internet Security-->C:\Program Files\Trend Micro\Internet Security\remove.exe Trend Micro Internet Security-->MsiExec.exe /X{40E12A55-C504-4223-AFAC-7672DBF1ACDE} URL Snooper v2.22.01-->"C:\Program Files\URLSnooper2\unins000.exe" Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u VuePrint-->c:\windows\vuepro32.exe /Remove WinPcap 4.0-->C:\Program Files\WinPcap\uninstall.exe WinZip 11.2-->MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240B6} World of Warcraft-->C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft (2)\Uninstall.exe YouSendIt Express-->C:\Program Files\InstallShield Installation Information\{1193600A-134F-40F9-9F71-FEF54C93C629}\setup.exe -runfromtemp -l0x0409 =====HijackThis Backups===== O1 - Hosts: ::1 localhost ======Security center information====== AV: ThreatFire (disabled) AV: Trend Micro Internet Security (disabled) AS: Windows Defender (disabled) AS: ThreatFire (disabled) ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared;C:\Program Files\QuickTime\QTSystem "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=x86 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel "PROCESSOR_REVISION"=0f06 "NUMBER_OF_PROCESSORS"=2 "RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\ "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip -----------------EOF----------------- |
|
|
|
|
10-12-2008, 10:13 AM
|
#6 (permalink) | |
|
Analyst, Security Team
Join Date: Nov 2007
Location: Manchester, UK
Posts: 1,358
OS: W2K SP4 + XP SP2 + Vista
|
Re: hijack log IE problems
Information
IMPORTANT I notice there are signs of one or more P2P (Person to Person) File Sharing Programs on your computer. LimeWire 4.14.10 I'd like you to read the Guidelines for P2P Programs where we explain why it's not a good idea to have them. Also available here. My recommendation is you go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red). Please note: you must NOT use this whilst we are cleaning your machine. ----------------------------------------------------------- ----------------------------------------------------------- Step 1 Fix With HJT Close all other windows and then start HiJack This Click Do A System Scan Only When it has finished scanning put a check next to the following lines IF still present Quote:
Now click Fix checked Click yes to any prompts Close HijackThis ----------------------------------------------------------- ----------------------------------------------------------- Step 2 Malwarebytes' Anti-Malware Please download Malwarebytes' Anti-Malware to your desktop.
----------------------------------------------------------- ----------------------------------------------------------- Step 3 Logs/Information to Post in Reply Please post the following logs/Information in your reply
----------------------------------------------------------- ----------------------------------------------------------- Additional Notes Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please download JavaRa and unzip it to your desktop. ***Please close any instances of Internet Explorer (or other web browser) before continuing!***
Now download and install Java Runtime Environment (JRE) 6 Update 7.
__________________
|
|
|
|
|
|
10-21-2008, 10:55 AM
|
#7 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2007
Location: Manchester, UK
Posts: 1,358
OS: W2K SP4 + XP SP2 + Vista
|
Re: hijack log IE problems
Due to lack of response, this topic will now be closed. If you need continued support, please begin a new thread, and provide a link to this topic. This applies only to the original topic starter. Everyone else please begin a New Topic, after following the steps outlined here:
IMPORTANT - Read This Before Posting For Malware Removal Help
__________________
|
|
|
|
| Thread Tools | |
|
|
