Prosim o kontrolu logu
Napsal: 09 zář 2010 13:00
Logfile of random's system information tool 1.08 (written by random/random)
Run by EDC at 2010-09-09 13:55:33
Microsoft Windows XP Professional Service Pack 2
System drive C: has 8 GB (55%) free of 15 GB
Total RAM: 1014 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:56:27, on 9.9.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\ESET\nod32kui.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\EDC\My Documents\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\EDC.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe /WAITSERVICE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Unknown owner - C:\Program Files\Eset\nod32krn.exe
--
End of file - 4031 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-04-05 94208]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-04-05 77824]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2005-04-05 114688]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2004-10-14 1404928]
"SunJavaUpdateSched"=C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe [2003-11-19 32881]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2010-09-09 778240]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"amva"=C:\WINDOWS\system32\amvo.exe []
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-04-05 131072]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-09-09 13:55:36 ----D---- C:\Program Files\trend micro
2010-09-09 13:55:32 ----D---- C:\rsit
2010-09-09 13:20:59 ----A---- C:\WINDOWS\system32\nms32.dll
2010-09-09 13:20:59 ----A---- C:\WINDOWS\system32\imon.dll
2010-09-09 13:20:59 ----A---- C:\WINDOWS\system32\drivers\amon.sys
2010-09-09 13:19:22 ----D---- C:\Program Files\ESET
2010-09-09 13:03:35 ----A---- C:\WINDOWS\system32\muweb.dll
2010-09-09 13:03:35 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-09-09 13:03:35 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-09-09 12:42:18 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-09-09 12:42:18 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-09-09 12:35:48 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-09-09 12:34:35 ----D---- C:\Program Files\Microsoft Works
2010-09-09 12:34:29 ----D---- C:\Program Files\MSBuild
2010-09-09 12:34:14 ----D---- C:\Program Files\Microsoft Visual Studio
2010-09-09 12:34:14 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-09 12:33:07 ----SHD---- C:\Config.Msi
2010-09-09 12:31:03 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-09-09 12:30:29 ----RHD---- C:\MSOCache
2010-09-09 11:52:25 ----N---- C:\WINDOWS\system32\kav320.dll
2010-09-09 11:52:16 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbdkor.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbd106.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbd103.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbd101c.dll
2010-09-09 10:29:23 ----A---- C:\WINDOWS\system32\kbd101b.dll
2010-09-09 10:22:54 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-09-09 10:15:40 ----A---- C:\WINDOWS\ODBC.INI
2010-09-09 10:15:38 ----A---- C:\WINDOWS\system32\mdimon.dll
2010-09-09 10:15:02 ----D---- C:\WINDOWS\SHELLNEW
2010-09-09 10:14:08 ----D---- C:\Program Files\Microsoft Office
2010-09-09 09:31:38 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-09-09 08:47:40 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-09-09 08:47:24 ----D---- C:\WINDOWS\system32\PreInstall
2010-09-09 08:47:24 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-09 08:47:23 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-09-09 08:47:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-09-09 08:47:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-09-09 08:47:09 ----D---- C:\WINDOWS\ServicePackFiles
2010-09-09 08:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-09-09 08:47:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-09-09 08:46:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-09 08:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-09-09 08:46:34 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-09 00:40:04 ----D---- C:\LFS
2010-09-09 00:19:33 ----D---- C:\Documents and Settings\EDC\Application Data\Macromedia
2010-09-09 00:19:33 ----D---- C:\Documents and Settings\EDC\Application Data\Adobe
2010-09-09 00:18:23 ----D---- C:\Documents and Settings\EDC\Application Data\Mozilla
2010-09-09 00:18:19 ----D---- C:\Program Files\Mozilla Firefox
2010-09-08 21:14:25 ----A---- C:\WINDOWS\system32\h323log.txt
2010-09-08 21:13:47 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-09-08 21:13:15 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-09-08 21:12:28 ----A---- C:\WINDOWS\system32\usbui.dll
2010-09-08 21:11:15 ----A---- C:\WINDOWS\imsins.BAK
2010-09-08 21:11:12 ----SHD---- C:\WINDOWS\Installer
2010-09-08 21:11:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-08 21:11:11 ----D---- C:\Program Files\Common Files\ODBC
2010-09-08 21:11:11 ----A---- C:\WINDOWS\ODBCINST.INI
2010-09-08 21:11:08 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-09-08 21:11:07 ----RD---- C:\Program Files
2010-09-08 21:11:07 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-08 21:11:07 ----D---- C:\Program Files\Common Files
2010-09-08 21:11:04 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-09-08 21:11:04 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-09-08 21:11:04 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-09-08 21:10:57 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-09-08 21:10:57 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-09-08 21:10:57 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-09-08 21:10:54 ----A---- C:\WINDOWS\system32\irclass.dll
2010-09-08 21:10:54 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-09-08 21:10:54 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-09-08 21:10:53 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-09-08 21:10:53 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-09-08 21:10:51 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-09-08 21:10:51 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-09-08 21:10:51 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-09-08 21:10:51 ----A---- C:\WINDOWS\system32\batt.dll
2010-09-08 21:10:50 ----A---- C:\WINDOWS\system32\storprop.dll
2010-09-08 21:10:50 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-09-08 21:10:42 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-09-08 21:10:37 ----RA---- C:\WINDOWS\SET8.tmp
2010-09-08 21:10:35 ----RA---- C:\WINDOWS\SET4.tmp
2010-09-08 21:10:33 ----RA---- C:\WINDOWS\SET3.tmp
2010-09-08 21:10:29 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-08 21:10:29 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-08 21:10:23 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-09-08 21:09:38 ----A---- C:\WINDOWS\setuplog.txt
2010-09-08 21:09:35 ----D---- C:\Documents and Settings
2010-09-08 21:09:34 ----SHD---- C:\System Volume Information
2010-09-08 21:08:47 ----SH---- C:\boot.ini
2010-09-08 21:02:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-08 21:02:54 ----RSD---- C:\WINDOWS\Fonts
2010-09-08 21:02:54 ----RD---- C:\WINDOWS\Web
2010-09-08 21:02:54 ----HD---- C:\WINDOWS\inf
2010-09-08 21:02:54 ----D---- C:\WINDOWS\WinSxS
2010-09-08 21:02:54 ----D---- C:\WINDOWS\twain_32
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Temp
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\wins
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\wbem
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\usmt
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\spool
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\ShellExt
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\Setup
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\ras
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\oobe
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\npp
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\mui
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\inetsrv
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\IME
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\icsxml
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\ias
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\export
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\drivers
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\dhcp
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\config
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\3com_dmi
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\3076
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\2052
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1054
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1042
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1041
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1037
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1033
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1031
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1028
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1025
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system
2010-09-08 21:02:54 ----D---- C:\WINDOWS\security
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Resources
2010-09-08 21:02:54 ----D---- C:\WINDOWS\repair
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Provisioning
2010-09-08 21:02:54 ----D---- C:\WINDOWS\pchealth
2010-09-08 21:02:54 ----D---- C:\WINDOWS\PeerNet
2010-09-08 21:02:54 ----D---- C:\WINDOWS\mui
2010-09-08 21:02:54 ----D---- C:\WINDOWS\msapps
2010-09-08 21:02:54 ----D---- C:\WINDOWS\msagent
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Media
2010-09-08 21:02:54 ----D---- C:\WINDOWS\java
2010-09-08 21:02:54 ----D---- C:\WINDOWS\ime
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Help
2010-09-08 21:02:54 ----D---- C:\WINDOWS\ehome
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Driver Cache
2010-09-08 21:02:54 ----D---- C:\WINDOWS\dell
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Debug
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Cursors
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Connection Wizard
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Config
2010-09-08 21:02:54 ----D---- C:\WINDOWS\AppPatch
2010-09-08 21:02:54 ----D---- C:\WINDOWS\addins
2010-09-08 21:02:54 ----D---- C:\WINDOWS
2010-09-08 21:02:53 ----ASH---- C:\pagefile.sys
2010-09-08 19:42:33 ----SHD---- C:\RECYCLER
2010-09-08 19:41:17 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2010-09-08 19:38:14 ----D---- C:\Program Files\Modem Helper
2010-09-08 19:37:47 ----D---- C:\Documents and Settings\EDC\Application Data\Sun
2010-09-08 19:37:46 ----A---- C:\WINDOWS\system32\javaw.exe
2010-09-08 19:37:46 ----A---- C:\WINDOWS\system32\java.exe
2010-09-08 19:37:37 ----D---- C:\Program Files\Java
2010-09-08 19:37:36 ----D---- C:\Program Files\Common Files\Java
2010-09-08 19:34:48 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-09-08 19:34:47 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-09-08 19:34:45 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-09-08 19:34:41 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-09-08 19:34:40 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-09-08 19:34:39 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-09-08 19:34:38 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-09-08 19:34:37 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-09-08 19:34:35 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-09-08 19:34:34 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-09-08 19:34:32 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-09-08 19:34:27 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-09-08 19:34:27 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-09-08 19:34:27 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-09-08 19:34:24 ----D---- C:\WINDOWS\VirtualEar
2010-09-08 19:34:24 ----D---- C:\Program Files\Analog Devices
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\virtear.dll
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\DSndUp.exe
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\CleanUp.exe
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\Audio3d.dll
2010-09-08 19:34:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-08 19:34:20 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\PostProc.dll
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\Edcrypt.dll
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\drivers\smwdm.sys
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\drivers\senfilt.sys
2010-09-08 19:33:32 ----RA---- C:\WINDOWS\system32\drivers\b57xp32.sys
2010-09-08 19:33:27 ----D---- C:\Program Files\Broadcom
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxtray.exe
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxress.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxpph.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxpers.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxext.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxexps.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxdo.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxdev.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmrnt5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmrem.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmgicd.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmgdev.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmdnt5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmdev5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmdd5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\iAlmCoIn_v4299.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\hkcmd.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\hccutils.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\drivers\ialmnt5.sys
2010-09-08 19:26:52 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-09-08 19:26:51 ----D---- C:\Program Files\Intel
2010-09-08 19:25:37 ----D---- C:\WINDOWS\system32\vmm32
2010-09-08 19:25:37 ----D---- C:\Program Files\Dell
2010-09-08 19:25:24 ----D---- C:\Program Files\Common Files\InstallShield
2010-09-08 19:24:20 ----D---- C:\Documents and Settings\EDC\Application Data\Identities
2010-09-08 19:24:19 ----HD---- C:\Program Files\Uninstall Information
2010-09-08 19:24:12 ----SD---- C:\Documents and Settings\EDC\Application Data\Microsoft
2010-09-08 19:24:12 ----ASH---- C:\Documents and Settings\EDC\Application Data\desktop.ini
2010-09-08 19:23:12 ----D---- C:\WINDOWS\SoftwareDistribution
2010-09-08 19:23:10 ----SD---- C:\WINDOWS\system32\Microsoft
2010-09-08 19:23:10 ----D---- C:\WINDOWS\Prefetch
2010-09-08 19:23:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-09-08 19:20:05 ----D---- C:\WINDOWS\system32\xircom
2010-09-08 19:20:05 ----D---- C:\Program Files\xerox
2010-09-08 19:20:05 ----D---- C:\Program Files\microsoft frontpage
2010-09-08 19:19:54 ----D---- C:\DELL
2010-09-08 19:19:47 ----RASH---- C:\MSDOS.SYS
2010-09-08 19:19:47 ----RASH---- C:\IO.SYS
2010-09-08 19:19:47 ----A---- C:\WINDOWS\control.ini
2010-09-08 19:19:47 ----A---- C:\CONFIG.SYS
2010-09-08 19:19:47 ----A---- C:\AUTOEXEC.BAT
2010-09-08 19:19:37 ----A---- C:\WINDOWS\OEWABLog.txt
2010-09-08 19:19:34 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-09-08 19:18:42 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-09-08 19:18:42 ----RD---- C:\WINDOWS\Offline Web Pages
2010-09-08 19:18:42 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-09-08 19:18:36 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-09-08 19:18:32 ----HD---- C:\Program Files\WindowsUpdate
2010-09-08 19:18:14 ----D---- C:\WINDOWS\system32\DirectX
2010-09-08 19:17:53 ----A---- C:\WINDOWS\system32\atrace.dll
2010-09-08 19:17:50 ----A---- C:\WINDOWS\system32\desktop.ini
2010-09-08 19:17:50 ----A---- C:\WINDOWS\desktop.ini
2010-09-08 19:17:43 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-09-08 19:17:42 ----A---- C:\WINDOWS\system32\acctres.dll
2010-09-08 19:17:41 ----D---- C:\Program Files\Common Files\Services
2010-09-08 19:17:39 ----SD---- C:\WINDOWS\Tasks
2010-09-08 19:17:39 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-09-08 19:17:37 ----D---- C:\Program Files\Common Files\MSSoap
2010-09-08 19:17:34 ----D---- C:\WINDOWS\srchasst
2010-09-08 19:17:33 ----D---- C:\WINDOWS\system32\Macromed
2010-09-08 19:17:30 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-09-08 19:17:30 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-09-08 19:17:30 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wups.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-09-08 19:17:28 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-09-08 19:17:28 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-09-08 19:17:25 ----D---- C:\Program Files\Movie Maker
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-09-08 19:17:17 ----D---- C:\WINDOWS\system32\Restore
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\srclient.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-09-08 19:17:16 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-09-08 19:17:16 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-09-08 19:17:16 ----A---- C:\WINDOWS\system32\ils.dll
2010-09-08 19:17:15 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-09-08 19:17:15 ----A---- C:\WINDOWS\system32\msconf.dll
2010-09-08 19:17:15 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-09-08 19:17:12 ----D---- C:\Program Files\NetMeeting
2010-09-08 19:17:12 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-09-08 19:17:12 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-09-08 19:17:11 ----A---- C:\WINDOWS\system32\inetres.dll
2010-09-08 19:17:11 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-09-08 19:17:09 ----D---- C:\Program Files\Outlook Express
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\mstask.dll
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-09-08 19:17:08 ----A---- C:\WINDOWS\system32\isign32.dll
2010-09-08 19:17:08 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-09-08 19:17:03 ----D---- C:\Program Files\Common Files\System
2010-09-08 19:17:02 ----D---- C:\Program Files\Internet Explorer
2010-09-08 19:16:32 ----D---- C:\Program Files\ComPlus Applications
2010-09-08 19:16:30 ----A---- C:\WINDOWS\vbaddin.ini
2010-09-08 19:16:30 ----A---- C:\WINDOWS\vb.ini
2010-09-08 19:16:26 ----D---- C:\WINDOWS\Registration
2010-09-08 19:16:20 ----D---- C:\Program Files\Windows Media Player
2010-09-08 19:16:20 ----D---- C:\Program Files\Online Services
2010-09-08 19:16:15 ----D---- C:\Program Files\Messenger
2010-09-08 19:16:11 ----D---- C:\Program Files\MSN Gaming Zone
2010-09-08 19:16:11 ----A---- C:\WINDOWS\system32\write.exe
2010-09-08 19:16:02 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\winchat.exe
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\hticons.dll
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\avwav.dll
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-09-08 19:15:54 ----A---- C:\WINDOWS\system32\charmap.exe
2010-09-08 19:15:54 ----A---- C:\WINDOWS\system32\getuname.dll
2010-09-08 19:15:54 ----A---- C:\WINDOWS\system32\calc.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\winmine.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\sol.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\freecell.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tskill.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tscon.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\shadow.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\reset.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\regini.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\msg.exe
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\logoff.exe
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\stclient.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-09-08 19:15:49 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-09-08 19:15:44 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-09-08 19:15:34 ----D---- C:\Program Files\MSN
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-09-08 19:15:32 ----D---- C:\Program Files\Windows NT
2010-09-08 19:15:32 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-09-08 19:15:32 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\spider.exe
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-09-08 19:15:29 ----D---- C:\WINDOWS\system32\MsDtc
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-09-08 19:15:27 ----D---- C:\WINDOWS\system32\Com
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\colbact.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-09-08 19:15:26 ----A---- C:\WINDOWS\system32\comuid.dll
2010-09-08 19:15:26 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-09-08 19:15:26 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-09-08 19:15:17 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-09-08 19:15:17 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
======List of files/folders modified in the last 1 months======
2010-09-09 12:38:10 ----A---- C:\WINDOWS\win.ini
2010-09-08 21:11:06 ----A---- C:\WINDOWS\system.ini
2010-09-08 19:19:23 ----ASH---- C:\WINDOWS\fonts\desktop.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 36096]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R3 b57w2k;Broadcom NetXtreme 57xx Gigabit Controller; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-03-17 132608]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-04 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-04-05 830684]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12160]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-09-17 732928]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-01-27 260352]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S0 cercsr6;cercsr6; C:\WINDOWS\system32\drivers\cercsr6.sys [2005-03-22 39904]
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2010-09-09 331776]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
-----------------EOF-----------------
Run by EDC at 2010-09-09 13:55:33
Microsoft Windows XP Professional Service Pack 2
System drive C: has 8 GB (55%) free of 15 GB
Total RAM: 1014 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:56:27, on 9.9.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\ESET\nod32kui.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\EDC\My Documents\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\EDC.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe /WAITSERVICE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Unknown owner - C:\Program Files\Eset\nod32krn.exe
--
End of file - 4031 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-04-05 94208]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-04-05 77824]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2005-04-05 114688]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2004-10-14 1404928]
"SunJavaUpdateSched"=C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe [2003-11-19 32881]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2010-09-09 778240]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"amva"=C:\WINDOWS\system32\amvo.exe []
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-04-05 131072]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-09-09 13:55:36 ----D---- C:\Program Files\trend micro
2010-09-09 13:55:32 ----D---- C:\rsit
2010-09-09 13:20:59 ----A---- C:\WINDOWS\system32\nms32.dll
2010-09-09 13:20:59 ----A---- C:\WINDOWS\system32\imon.dll
2010-09-09 13:20:59 ----A---- C:\WINDOWS\system32\drivers\amon.sys
2010-09-09 13:19:22 ----D---- C:\Program Files\ESET
2010-09-09 13:03:35 ----A---- C:\WINDOWS\system32\muweb.dll
2010-09-09 13:03:35 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-09-09 13:03:35 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-09-09 12:42:18 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-09-09 12:42:18 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-09-09 12:35:48 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-09-09 12:34:35 ----D---- C:\Program Files\Microsoft Works
2010-09-09 12:34:29 ----D---- C:\Program Files\MSBuild
2010-09-09 12:34:14 ----D---- C:\Program Files\Microsoft Visual Studio
2010-09-09 12:34:14 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-09 12:33:07 ----SHD---- C:\Config.Msi
2010-09-09 12:31:03 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-09-09 12:30:29 ----RHD---- C:\MSOCache
2010-09-09 11:52:25 ----N---- C:\WINDOWS\system32\kav320.dll
2010-09-09 11:52:16 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbdkor.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbd106.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbd103.dll
2010-09-09 10:29:25 ----A---- C:\WINDOWS\system32\kbd101c.dll
2010-09-09 10:29:23 ----A---- C:\WINDOWS\system32\kbd101b.dll
2010-09-09 10:22:54 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-09-09 10:15:40 ----A---- C:\WINDOWS\ODBC.INI
2010-09-09 10:15:38 ----A---- C:\WINDOWS\system32\mdimon.dll
2010-09-09 10:15:02 ----D---- C:\WINDOWS\SHELLNEW
2010-09-09 10:14:08 ----D---- C:\Program Files\Microsoft Office
2010-09-09 09:31:38 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-09-09 08:47:40 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-09-09 08:47:24 ----D---- C:\WINDOWS\system32\PreInstall
2010-09-09 08:47:24 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-09 08:47:23 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-09-09 08:47:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-09-09 08:47:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-09-09 08:47:09 ----D---- C:\WINDOWS\ServicePackFiles
2010-09-09 08:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-09-09 08:47:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-09-09 08:46:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-09 08:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-09-09 08:46:34 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-09 00:40:04 ----D---- C:\LFS
2010-09-09 00:19:33 ----D---- C:\Documents and Settings\EDC\Application Data\Macromedia
2010-09-09 00:19:33 ----D---- C:\Documents and Settings\EDC\Application Data\Adobe
2010-09-09 00:18:23 ----D---- C:\Documents and Settings\EDC\Application Data\Mozilla
2010-09-09 00:18:19 ----D---- C:\Program Files\Mozilla Firefox
2010-09-08 21:14:25 ----A---- C:\WINDOWS\system32\h323log.txt
2010-09-08 21:13:47 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-09-08 21:13:15 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-09-08 21:12:28 ----A---- C:\WINDOWS\system32\usbui.dll
2010-09-08 21:11:15 ----A---- C:\WINDOWS\imsins.BAK
2010-09-08 21:11:12 ----SHD---- C:\WINDOWS\Installer
2010-09-08 21:11:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-08 21:11:11 ----D---- C:\Program Files\Common Files\ODBC
2010-09-08 21:11:11 ----A---- C:\WINDOWS\ODBCINST.INI
2010-09-08 21:11:08 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-09-08 21:11:07 ----RD---- C:\Program Files
2010-09-08 21:11:07 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-08 21:11:07 ----D---- C:\Program Files\Common Files
2010-09-08 21:11:04 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-09-08 21:11:04 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-09-08 21:11:04 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-09-08 21:11:02 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-09-08 21:11:00 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-09-08 21:10:58 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-09-08 21:10:57 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-09-08 21:10:57 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-09-08 21:10:57 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-09-08 21:10:56 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-09-08 21:10:54 ----A---- C:\WINDOWS\system32\irclass.dll
2010-09-08 21:10:54 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-09-08 21:10:54 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-09-08 21:10:53 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-09-08 21:10:53 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-09-08 21:10:51 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-09-08 21:10:51 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-09-08 21:10:51 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-09-08 21:10:51 ----A---- C:\WINDOWS\system32\batt.dll
2010-09-08 21:10:50 ----A---- C:\WINDOWS\system32\storprop.dll
2010-09-08 21:10:50 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-09-08 21:10:42 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-09-08 21:10:37 ----RA---- C:\WINDOWS\SET8.tmp
2010-09-08 21:10:35 ----RA---- C:\WINDOWS\SET4.tmp
2010-09-08 21:10:33 ----RA---- C:\WINDOWS\SET3.tmp
2010-09-08 21:10:29 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-08 21:10:29 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-08 21:10:23 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-09-08 21:09:38 ----A---- C:\WINDOWS\setuplog.txt
2010-09-08 21:09:35 ----D---- C:\Documents and Settings
2010-09-08 21:09:34 ----SHD---- C:\System Volume Information
2010-09-08 21:08:47 ----SH---- C:\boot.ini
2010-09-08 21:02:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-08 21:02:54 ----RSD---- C:\WINDOWS\Fonts
2010-09-08 21:02:54 ----RD---- C:\WINDOWS\Web
2010-09-08 21:02:54 ----HD---- C:\WINDOWS\inf
2010-09-08 21:02:54 ----D---- C:\WINDOWS\WinSxS
2010-09-08 21:02:54 ----D---- C:\WINDOWS\twain_32
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Temp
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\wins
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\wbem
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\usmt
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\spool
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\ShellExt
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\Setup
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\ras
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\oobe
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\npp
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\mui
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\inetsrv
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\IME
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\icsxml
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\ias
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\export
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\drivers
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\dhcp
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\config
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\3com_dmi
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\3076
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\2052
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1054
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1042
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1041
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1037
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1033
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1031
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1028
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32\1025
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system32
2010-09-08 21:02:54 ----D---- C:\WINDOWS\system
2010-09-08 21:02:54 ----D---- C:\WINDOWS\security
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Resources
2010-09-08 21:02:54 ----D---- C:\WINDOWS\repair
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Provisioning
2010-09-08 21:02:54 ----D---- C:\WINDOWS\pchealth
2010-09-08 21:02:54 ----D---- C:\WINDOWS\PeerNet
2010-09-08 21:02:54 ----D---- C:\WINDOWS\mui
2010-09-08 21:02:54 ----D---- C:\WINDOWS\msapps
2010-09-08 21:02:54 ----D---- C:\WINDOWS\msagent
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Media
2010-09-08 21:02:54 ----D---- C:\WINDOWS\java
2010-09-08 21:02:54 ----D---- C:\WINDOWS\ime
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Help
2010-09-08 21:02:54 ----D---- C:\WINDOWS\ehome
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Driver Cache
2010-09-08 21:02:54 ----D---- C:\WINDOWS\dell
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Debug
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Cursors
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Connection Wizard
2010-09-08 21:02:54 ----D---- C:\WINDOWS\Config
2010-09-08 21:02:54 ----D---- C:\WINDOWS\AppPatch
2010-09-08 21:02:54 ----D---- C:\WINDOWS\addins
2010-09-08 21:02:54 ----D---- C:\WINDOWS
2010-09-08 21:02:53 ----ASH---- C:\pagefile.sys
2010-09-08 19:42:33 ----SHD---- C:\RECYCLER
2010-09-08 19:41:17 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2010-09-08 19:38:14 ----D---- C:\Program Files\Modem Helper
2010-09-08 19:37:47 ----D---- C:\Documents and Settings\EDC\Application Data\Sun
2010-09-08 19:37:46 ----A---- C:\WINDOWS\system32\javaw.exe
2010-09-08 19:37:46 ----A---- C:\WINDOWS\system32\java.exe
2010-09-08 19:37:37 ----D---- C:\Program Files\Java
2010-09-08 19:37:36 ----D---- C:\Program Files\Common Files\Java
2010-09-08 19:34:48 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-09-08 19:34:47 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-09-08 19:34:45 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-09-08 19:34:41 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-09-08 19:34:40 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-09-08 19:34:39 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-09-08 19:34:38 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-09-08 19:34:37 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-09-08 19:34:35 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-09-08 19:34:34 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-09-08 19:34:32 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-09-08 19:34:27 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-09-08 19:34:27 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-09-08 19:34:27 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-09-08 19:34:24 ----D---- C:\WINDOWS\VirtualEar
2010-09-08 19:34:24 ----D---- C:\Program Files\Analog Devices
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\virtear.dll
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\DSndUp.exe
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\CleanUp.exe
2010-09-08 19:34:24 ----A---- C:\WINDOWS\system32\Audio3d.dll
2010-09-08 19:34:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-08 19:34:20 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\PostProc.dll
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\Edcrypt.dll
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\drivers\smwdm.sys
2010-09-08 19:34:04 ----A---- C:\WINDOWS\system32\drivers\senfilt.sys
2010-09-08 19:33:32 ----RA---- C:\WINDOWS\system32\drivers\b57xp32.sys
2010-09-08 19:33:27 ----D---- C:\Program Files\Broadcom
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxtray.exe
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2010-09-08 19:30:11 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxress.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxpph.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxpers.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxext.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxexps.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxdo.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxdev.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmrnt5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmrem.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmgicd.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmgdev.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmdnt5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmdev5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\ialmdd5.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\iAlmCoIn_v4299.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\hkcmd.exe
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\hccutils.dll
2010-09-08 19:30:10 ----A---- C:\WINDOWS\system32\drivers\ialmnt5.sys
2010-09-08 19:26:52 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-09-08 19:26:51 ----D---- C:\Program Files\Intel
2010-09-08 19:25:37 ----D---- C:\WINDOWS\system32\vmm32
2010-09-08 19:25:37 ----D---- C:\Program Files\Dell
2010-09-08 19:25:24 ----D---- C:\Program Files\Common Files\InstallShield
2010-09-08 19:24:20 ----D---- C:\Documents and Settings\EDC\Application Data\Identities
2010-09-08 19:24:19 ----HD---- C:\Program Files\Uninstall Information
2010-09-08 19:24:12 ----SD---- C:\Documents and Settings\EDC\Application Data\Microsoft
2010-09-08 19:24:12 ----ASH---- C:\Documents and Settings\EDC\Application Data\desktop.ini
2010-09-08 19:23:12 ----D---- C:\WINDOWS\SoftwareDistribution
2010-09-08 19:23:10 ----SD---- C:\WINDOWS\system32\Microsoft
2010-09-08 19:23:10 ----D---- C:\WINDOWS\Prefetch
2010-09-08 19:23:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-09-08 19:20:05 ----D---- C:\WINDOWS\system32\xircom
2010-09-08 19:20:05 ----D---- C:\Program Files\xerox
2010-09-08 19:20:05 ----D---- C:\Program Files\microsoft frontpage
2010-09-08 19:19:54 ----D---- C:\DELL
2010-09-08 19:19:47 ----RASH---- C:\MSDOS.SYS
2010-09-08 19:19:47 ----RASH---- C:\IO.SYS
2010-09-08 19:19:47 ----A---- C:\WINDOWS\control.ini
2010-09-08 19:19:47 ----A---- C:\CONFIG.SYS
2010-09-08 19:19:47 ----A---- C:\AUTOEXEC.BAT
2010-09-08 19:19:37 ----A---- C:\WINDOWS\OEWABLog.txt
2010-09-08 19:19:34 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-09-08 19:18:42 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-09-08 19:18:42 ----RD---- C:\WINDOWS\Offline Web Pages
2010-09-08 19:18:42 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-09-08 19:18:36 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-09-08 19:18:32 ----HD---- C:\Program Files\WindowsUpdate
2010-09-08 19:18:14 ----D---- C:\WINDOWS\system32\DirectX
2010-09-08 19:17:53 ----A---- C:\WINDOWS\system32\atrace.dll
2010-09-08 19:17:50 ----A---- C:\WINDOWS\system32\desktop.ini
2010-09-08 19:17:50 ----A---- C:\WINDOWS\desktop.ini
2010-09-08 19:17:43 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-09-08 19:17:42 ----A---- C:\WINDOWS\system32\acctres.dll
2010-09-08 19:17:41 ----D---- C:\Program Files\Common Files\Services
2010-09-08 19:17:39 ----SD---- C:\WINDOWS\Tasks
2010-09-08 19:17:39 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-09-08 19:17:37 ----D---- C:\Program Files\Common Files\MSSoap
2010-09-08 19:17:34 ----D---- C:\WINDOWS\srchasst
2010-09-08 19:17:33 ----D---- C:\WINDOWS\system32\Macromed
2010-09-08 19:17:30 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-09-08 19:17:30 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-09-08 19:17:30 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wups.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-09-08 19:17:29 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-09-08 19:17:28 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-09-08 19:17:28 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-09-08 19:17:25 ----D---- C:\Program Files\Movie Maker
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-09-08 19:17:21 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-09-08 19:17:17 ----D---- C:\WINDOWS\system32\Restore
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\srclient.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-09-08 19:17:17 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-09-08 19:17:16 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-09-08 19:17:16 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-09-08 19:17:16 ----A---- C:\WINDOWS\system32\ils.dll
2010-09-08 19:17:15 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-09-08 19:17:15 ----A---- C:\WINDOWS\system32\msconf.dll
2010-09-08 19:17:15 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-09-08 19:17:12 ----D---- C:\Program Files\NetMeeting
2010-09-08 19:17:12 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-09-08 19:17:12 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-09-08 19:17:11 ----A---- C:\WINDOWS\system32\inetres.dll
2010-09-08 19:17:11 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-09-08 19:17:09 ----D---- C:\Program Files\Outlook Express
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\mstask.dll
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-09-08 19:17:09 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-09-08 19:17:08 ----A---- C:\WINDOWS\system32\isign32.dll
2010-09-08 19:17:08 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-09-08 19:17:03 ----D---- C:\Program Files\Common Files\System
2010-09-08 19:17:02 ----D---- C:\Program Files\Internet Explorer
2010-09-08 19:16:32 ----D---- C:\Program Files\ComPlus Applications
2010-09-08 19:16:30 ----A---- C:\WINDOWS\vbaddin.ini
2010-09-08 19:16:30 ----A---- C:\WINDOWS\vb.ini
2010-09-08 19:16:26 ----D---- C:\WINDOWS\Registration
2010-09-08 19:16:20 ----D---- C:\Program Files\Windows Media Player
2010-09-08 19:16:20 ----D---- C:\Program Files\Online Services
2010-09-08 19:16:15 ----D---- C:\Program Files\Messenger
2010-09-08 19:16:11 ----D---- C:\Program Files\MSN Gaming Zone
2010-09-08 19:16:11 ----A---- C:\WINDOWS\system32\write.exe
2010-09-08 19:16:02 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\winchat.exe
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\hticons.dll
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\avwav.dll
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-09-08 19:16:01 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-09-08 19:15:54 ----A---- C:\WINDOWS\system32\charmap.exe
2010-09-08 19:15:54 ----A---- C:\WINDOWS\system32\getuname.dll
2010-09-08 19:15:54 ----A---- C:\WINDOWS\system32\calc.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\winmine.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\sol.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-09-08 19:15:53 ----A---- C:\WINDOWS\system32\freecell.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tskill.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\tscon.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\shadow.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\reset.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\regini.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-09-08 19:15:52 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\msg.exe
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\logoff.exe
2010-09-08 19:15:51 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\stclient.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-09-08 19:15:50 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-09-08 19:15:49 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-09-08 19:15:44 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-09-08 19:15:34 ----D---- C:\Program Files\MSN
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-09-08 19:15:33 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-09-08 19:15:32 ----D---- C:\Program Files\Windows NT
2010-09-08 19:15:32 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-09-08 19:15:32 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\spider.exe
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-09-08 19:15:31 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-09-08 19:15:30 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-09-08 19:15:29 ----D---- C:\WINDOWS\system32\MsDtc
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-09-08 19:15:29 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-09-08 19:15:28 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-09-08 19:15:27 ----D---- C:\WINDOWS\system32\Com
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\colbact.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-09-08 19:15:27 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-09-08 19:15:26 ----A---- C:\WINDOWS\system32\comuid.dll
2010-09-08 19:15:26 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-09-08 19:15:26 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-09-08 19:15:20 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-09-08 19:15:17 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-09-08 19:15:17 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
======List of files/folders modified in the last 1 months======
2010-09-09 12:38:10 ----A---- C:\WINDOWS\win.ini
2010-09-08 21:11:06 ----A---- C:\WINDOWS\system.ini
2010-09-08 19:19:23 ----ASH---- C:\WINDOWS\fonts\desktop.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 36096]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R3 b57w2k;Broadcom NetXtreme 57xx Gigabit Controller; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-03-17 132608]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-04 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-04-05 830684]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12160]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-09-17 732928]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-01-27 260352]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S0 cercsr6;cercsr6; C:\WINDOWS\system32\drivers\cercsr6.sys [2005-03-22 39904]
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2010-09-09 331776]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
-----------------EOF-----------------