stranky na meno+heslo-nejde sa prihlasit a nejde ani zvuk
Napsal: 01 črc 2011 10:51
Logfile of random's system information tool 1.08 (written by random/random)
Run by Owner at 2002-01-01 01:52:07
Microsoft Windows XP Professional Service Pack 3
System drive C: has 514 MB (5%) free of 10 GB
Total RAM: 511 MB (24% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:53:20 AM, on 1/1/2002
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\SNDVOL32.EXE
D:\download\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: free-downloads.net - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: Odoslat do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslat do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP Infium\infium.exe (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate1cabadb82b0f11e) (gupdate1cabadb82b0f11e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
--
End of file - 6877 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\qipsearchbar.dll [2010-03-21 149968]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files\free-downloads.net\prxtbfre2.dll [2011-01-17 175912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\prxtbfre2.dll [2011-01-17 175912]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2008-04-14 208952]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-10-04 8491008]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-10-04 81920]
"NVMixerTray"=C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe [2004-06-04 131072]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-03-29 2145000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ose"=3
"odserv"=3
"Microsoft Office Groove Audit Service"=3
"gupdate1cabadb82b0f11e"=2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-04-20 239496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-04-20 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDesktopCleanupWizard"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"D:\EA GAMES\The Battle for Middle-earth (tm)\game.dat"="D:\EA GAMES\The Battle for Middle-earth (tm)\game.dat:*:Enabled:The Battle for Middle-earth (tm)"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Quake 3\quake3.exe"="D:\Quake 3\quake3.exe:*:Enabled:quake3"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2011-05-07 19:32:29 ----D---- C:\Program Files\ConduitEngine
2011-05-07 19:32:29 ----A---- C:\WINDOWS\system32\ConduitEngine.tmp
2011-03-06 11:10:44 ----A---- C:\WINDOWS\sierra.ini
2011-03-06 10:56:32 ----D---- C:\Program Files\Mplayer
2011-03-06 10:53:04 ----A---- C:\WINDOWS\QIII.INI
2011-03-06 10:29:39 ----D---- C:\WINDOWS\RegisteredPackages
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-03-06 10:29:17 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-03-06 10:29:15 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-03-06 10:29:08 ----D---- C:\WINDOWS\system32\DirectX
2011-03-06 10:06:48 ----D---- C:\Program Files\DAEMON Tools Toolbar
2011-03-06 10:05:50 ----D---- C:\Program Files\DAEMON Tools Lite
2011-03-06 10:05:13 ----D---- C:\Documents and Settings\Owner\Application Data\DAEMON Tools Lite
2011-03-06 10:05:10 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2011-01-02 18:35:38 ----D---- C:\Documents and Settings\Owner\Application Data\Media Player Classic
2011-01-02 17:32:13 ----A---- C:\WINDOWS\system32\unrar.dll
2011-01-02 17:32:12 ----A---- C:\WINDOWS\avisplitter.ini
2011-01-02 17:32:08 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\xvidcore.dll
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2011-01-02 17:32:00 ----D---- C:\Program Files\K-Lite Codec Pack
2010-12-22 18:28:39 ----D---- C:\WINDOWS\system32\xircom
2010-12-22 18:28:39 ----D---- C:\WINDOWS\system32\oobe
2010-12-22 18:28:39 ----D---- C:\Program Files\xerox
2010-12-22 18:28:39 ----D---- C:\Program Files\windows nt
2010-12-22 18:28:39 ----D---- C:\Program Files\outlook express
2010-12-22 18:28:39 ----D---- C:\Program Files\netmeeting
2010-12-22 18:28:39 ----D---- C:\Program Files\msn gaming zone
2010-12-22 18:28:39 ----D---- C:\Program Files\movie maker
2010-12-22 18:28:39 ----D---- C:\Program Files\microsoft frontpage
2010-12-22 18:28:38 ----D---- C:\WINDOWS\system32\inetsrv
2010-12-22 18:25:08 ----D---- C:\Program Files\ESET
2010-12-22 18:25:08 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-12-22 18:23:15 ----D---- C:\Documents and Settings\Owner\Application Data\Symantec
2010-12-22 18:21:04 ----D---- C:\WINDOWS\temp
2010-12-22 18:21:02 ----A---- C:\ComboFix.txt
2010-12-22 18:13:22 ----A---- C:\Boot.bak
2010-12-22 18:13:18 ----RASHD---- C:\cmdcons
2010-12-22 18:11:41 ----A---- C:\WINDOWS\zip.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\SWSC.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\SWREG.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\sed.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\PEV.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\NIRCMD.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\MBR.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\grep.exe
2010-12-22 18:08:13 ----D---- C:\WINDOWS\ERDNT
2010-12-22 18:01:27 ----D---- C:\Qoobox
2010-12-22 17:50:34 ----D---- C:\WINDOWS\pss
2010-11-03 12:02:53 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-10-05 15:00:52 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-10-05 15:00:52 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-07-24 08:50:00 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2010-07-10 16:41:42 ----D---- C:\WINDOWS\Minidump
2010-07-08 14:44:12 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2010-07-08 14:44:11 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2010-07-08 14:43:58 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2010-07-07 19:15:32 ----D---- C:\Program Files\Yahoo!
2010-07-07 19:14:55 ----D---- C:\Program Files\CCleaner
2010-07-07 18:19:44 ----D---- C:\Documents and Settings\All Users\Application Data\DivX
2010-05-31 13:04:49 ----D---- C:\Documents and Settings\Owner\Application Data\WinRAR
2010-05-30 19:36:01 ----D---- C:\Program Files\WinRAR
2010-04-11 15:58:49 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-04-11 15:56:15 ----D---- C:\Program Files\Microsoft Works
2010-04-11 15:54:25 ----D---- C:\Program Files\Microsoft.NET
2010-04-11 15:49:04 ----D---- C:\WINDOWS\SHELLNEW
2010-04-11 15:48:33 ----D---- C:\Program Files\Microsoft Office
2010-04-11 15:48:32 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-04-11 15:48:05 ----RD---- C:\MSOCache
2010-04-05 14:23:18 ----D---- C:\Documents and Settings\Owner\Application Data\Hamachi
2010-04-05 14:23:02 ----A---- C:\WINDOWS\system32\drivers\hamachi.sys
2010-04-05 14:22:56 ----D---- C:\Program Files\Hamachi
2010-04-05 14:04:18 ----D---- C:\Program Files\Conduit
2010-04-05 14:04:11 ----D---- C:\Program Files\free-downloads.net
2010-04-05 13:58:50 ----D---- C:\Program Files\Alcohol Soft
2010-04-05 13:55:33 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2010-03-29 17:13:44 ----A---- C:\WINDOWS\system32\drivers\epfwtdir.sys
2010-03-29 17:12:00 ----A---- C:\WINDOWS\system32\drivers\ehdrv.sys
2010-03-29 17:07:30 ----A---- C:\WINDOWS\system32\drivers\eamon.sys
2010-03-22 19:20:09 ----D---- C:\Documents and Settings\Owner\Application Data\QIP
2010-03-22 19:18:53 ----D---- C:\Program Files\QIP Infium
2010-03-13 20:14:56 ----D---- C:\Program Files\Garena
2010-03-08 05:44:06 ----D---- C:\Documents and Settings\Owner\Application Data\ESET
2010-03-08 05:37:38 ----D---- C:\Documents and Settings\Owner\Application Data\Macromedia
2010-03-08 05:37:10 ----D---- C:\Documents and Settings\Owner\Application Data\Adobe
2010-03-08 05:28:12 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-03-08 05:28:11 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-03-08 05:28:09 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-03-08 05:28:07 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-03-08 05:28:06 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-03-08 05:28:04 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-03-08 05:28:03 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-03-08 05:28:02 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-03-08 05:28:00 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-03-08 05:27:59 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-03-08 05:27:58 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\UDAPROP3.DLL
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\drivers\cmuda3.sys
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\CMUDA3.DLL
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\CMRMDRV3.exe
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\CMRMDRV3.DLL
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\AUDIO3D3.DLL
2010-03-08 05:27:55 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-03-08 05:27:55 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-03-08 05:27:55 ----A---- C:\WINDOWS\system32\a3d.dll
2010-03-08 05:27:54 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-03-08 05:27:51 ----R---- C:\WINDOWS\CmiPCIUninstall.exe
2010-03-08 05:27:41 ----D---- C:\Program Files\C-Media PCI Audio
2010-03-08 05:27:01 ----D---- C:\Program Files\Common Files\InstallShield
2010-03-08 05:24:47 ----A---- C:\WINDOWS\system32\msrating.dll.mui
2010-03-08 05:24:47 ----A---- C:\WINDOWS\system32\mshta.exe.mui
2010-03-08 05:24:47 ----A---- C:\WINDOWS\system32\ieframe.dll.mui
2010-03-08 05:24:46 ----A---- C:\WINDOWS\system32\iedkcs32.dll.mui
2010-03-08 05:24:46 ----A---- C:\WINDOWS\system32\ie4uinit.exe.mui
2010-03-08 05:24:21 ----HD---- C:\Program Files\Uninstall Information
2010-03-08 05:23:31 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2010-03-08 05:23:31 ----ASH---- C:\Documents and Settings\Owner\Application Data\desktop.ini
2010-03-08 05:23:15 ----SD---- C:\WINDOWS\system32\Microsoft
2010-03-08 05:23:15 ----D---- C:\WINDOWS\Prefetch
2010-03-08 05:23:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-08 05:21:20 ----RASH---- C:\MSDOS.SYS
2010-03-08 05:21:20 ----RASH---- C:\IO.SYS
2010-03-08 05:21:20 ----A---- C:\WINDOWS\control.ini
2010-03-08 05:21:20 ----A---- C:\CONFIG.SYS
2010-03-08 05:21:20 ----A---- C:\AUTOEXEC.BAT
2010-03-08 05:20:57 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-03-08 05:20:48 ----D---- C:\WINDOWS\system32\dllcache
2010-03-08 05:19:18 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-03-08 05:19:14 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-03-08 05:19:05 ----HD---- C:\Program Files\WindowsUpdate
2010-03-08 05:18:42 ----D---- C:\Program Files\Windows Media Connect 2
2010-03-08 05:18:25 ----A---- C:\WINDOWS\system32\atrace.dll
2010-03-08 05:18:24 ----A---- C:\WINDOWS\system32\desktop.ini
2010-03-08 05:18:24 ----A---- C:\WINDOWS\desktop.ini
2010-03-08 05:18:20 ----SD---- C:\WINDOWS\Tasks
2010-03-08 05:18:20 ----D---- C:\Program Files\Common Files\MSSoap
2010-03-08 05:18:20 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-03-08 05:18:12 ----D---- C:\WINDOWS\srchasst
2010-03-08 05:18:10 ----D---- C:\WINDOWS\system32\Macromed
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wups.dll
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-03-08 05:17:59 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-03-08 05:17:59 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-03-08 05:17:59 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-03-08 05:17:58 ----D---- C:\WINDOWS\system32\Restore
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\srclient.dll
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-03-08 05:17:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-03-08 05:17:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-03-08 05:17:57 ----A---- C:\WINDOWS\system32\mstask.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\isign32.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-03-08 05:17:51 ----D---- C:\Program Files\Common Files\System
2010-03-08 05:17:02 ----RSD---- C:\WINDOWS\assembly
2010-03-08 05:16:52 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-03-08 05:16:29 ----D---- C:\Program Files\ComPlus Applications
2010-03-08 05:16:26 ----A---- C:\WINDOWS\vbaddin.ini
2010-03-08 05:16:26 ----A---- C:\WINDOWS\vb.ini
2010-03-08 05:16:20 ----D---- C:\WINDOWS\Registration
2010-03-08 05:15:39 ----D---- C:\Program Files\Windows Media Player
2010-03-08 05:15:31 ----A---- C:\WINDOWS\system32\xpssvcs.dll
2010-03-08 05:15:26 ----A---- C:\WINDOWS\system32\winUsbCoinstaller.dll
2010-03-08 05:15:25 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2010-03-08 05:15:24 ----A---- C:\WINDOWS\system32\WUDFUpdate_01007.dll
2010-03-08 05:15:23 ----A---- C:\WINDOWS\system32\imapi2fs.dll
2010-03-08 05:15:23 ----A---- C:\WINDOWS\system32\imapi2.dll
2010-03-08 05:15:22 ----D---- C:\WINDOWS\system32\DRM
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\SecProc_ssp_isv.dll
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\SecProc_ssp.dll
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\RmActivate_ssp_isv.exe
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\RmActivate_ssp.exe
2010-03-08 05:15:21 ----A---- C:\WINDOWS\system32\SecProc_isv.dll
2010-03-08 05:15:21 ----A---- C:\WINDOWS\system32\RmActivate_isv.exe
2010-03-08 05:15:21 ----A---- C:\WINDOWS\system32\RmActivate.exe
2010-03-08 05:15:20 ----A---- C:\WINDOWS\system32\SecProc.dll
2010-03-08 05:15:20 ----A---- C:\WINDOWS\system32\msdrm.dll
2010-03-08 05:15:19 ----A---- C:\WINDOWS\system32\msxml4r.dll
2010-03-08 05:15:19 ----A---- C:\WINDOWS\system32\msxml4.dll
2010-03-08 05:15:18 ----D---- C:\Program Files\MSXML 4.0
2010-03-08 05:15:09 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2010-03-08 05:15:03 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-03-08 05:15:03 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-03-08 05:15:02 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-03-08 05:15:01 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2010-03-08 05:15:00 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-03-08 05:14:59 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-03-08 05:14:58 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-03-08 05:14:57 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-03-08 05:14:56 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-03-08 05:14:55 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-03-08 05:14:54 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-03-08 05:14:53 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-03-08 05:14:52 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-03-08 05:14:51 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-03-08 05:14:50 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-03-08 05:14:50 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-03-08 05:14:49 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-03-08 05:14:48 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-03-08 05:14:47 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-03-08 05:14:44 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-03-08 05:14:44 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-03-08 05:14:43 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2010-03-08 05:14:43 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-03-08 05:14:42 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-03-08 05:14:42 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-03-08 05:14:41 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-03-08 05:14:40 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-03-08 05:14:40 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-03-08 05:14:39 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-03-08 05:14:30 ----D---- C:\WINDOWS\SoftwareDistribution
2010-03-08 05:14:30 ----D---- C:\Program Files\Microsoft Silverlight
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\muweb.dll
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2010-03-08 05:14:28 ----A---- C:\WINDOWS\system32\WgaTray.exe
2010-03-08 05:14:28 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2010-03-08 05:14:28 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-03-08 05:14:27 ----D---- C:\WINDOWS\system32\PreInstall
2010-03-08 05:14:15 ----A---- C:\WINDOWS\system32\netfxperf.dll
2010-03-08 05:14:11 ----A---- C:\WINDOWS\system32\mscories.dll
2010-03-08 05:14:10 ----D---- C:\Program Files\Internet Explorer
2010-03-08 05:14:10 ----A---- C:\WINDOWS\system32\mscorier.dll
2010-03-08 05:14:10 ----A---- C:\WINDOWS\system32\mscoree.dll
2010-03-08 05:13:55 ----D---- C:\WINDOWS\Microsoft.NET
2010-03-08 05:13:49 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-03-08 05:13:44 ----A---- C:\WINDOWS\system32\getuname.dll
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tskill.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tscon.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\reset.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\charmap.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\calc.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\shadow.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\regini.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\msg.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\logoff.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-03-08 05:13:36 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-03-08 05:13:35 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-03-08 05:13:35 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-03-08 05:13:30 ----D---- C:\WINDOWS\system32\MsDtc
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-03-08 05:13:29 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-03-08 05:13:29 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-03-08 05:13:28 ----D---- C:\WINDOWS\system32\Com
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\colbact.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\stclient.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\comuid.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-03-08 05:13:19 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-03-08 05:13:19 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-03-08 05:13:19 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-03-08 05:13:18 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-03-08 05:13:13 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-03-08 05:13:13 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2010-03-07 23:11:56 ----A---- C:\WINDOWS\system32\h323log.txt
2010-03-07 23:11:48 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-03-07 23:11:01 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-03-07 23:10:10 ----A---- C:\WINDOWS\system32\nvuenet.exe
2010-03-07 23:10:09 ----D---- C:\WINDOWS\NV6281192.TMP
2010-03-07 23:10:04 ----A---- C:\WINDOWS\system32\usbui.dll
2010-03-07 23:07:46 ----SHD---- C:\WINDOWS\Installer
2010-03-07 23:07:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-07 23:07:45 ----D---- C:\Program Files\Common Files\ODBC
2010-03-07 23:07:45 ----A---- C:\WINDOWS\ODBCINST.INI
2010-03-07 23:07:41 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-03-07 23:07:40 ----RD---- C:\Program Files
2010-03-07 23:07:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-03-07 23:07:40 ----D---- C:\Program Files\Common Files
2010-03-07 23:07:31 ----A---- C:\WINDOWS\system32\uniime.dll
2010-03-07 23:07:18 ----A---- C:\WINDOWS\system32\c_g18030.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdlk41j.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdlk41a.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdibm02.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdax2.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbd106n.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbd101.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
2010-03-07 23:07:15 ----A---- C:\WINDOWS\system32\imjp81k.dll
2010-03-07 23:07:07 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
2010-03-07 23:07:07 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
2010-03-07 23:07:07 ----RA---- C:\WINDOWS\system32\kbdarme.dll
2010-03-07 23:07:07 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2010-03-07 23:07:06 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdintel.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdintam.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdindev.dll
2010-03-07 23:07:05 ----A---- C:\WINDOWS\system32\c_iscii.dll
2010-03-07 23:07:02 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbdfa.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbda3.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbda2.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbda1.dll
2010-03-07 23:07:01 ----A---- C:\WINDOWS\system32\kbdusa.dll
2010-03-07 23:06:57 ----RA---- C:\WINDOWS\system32\kbdheb.dll
2010-03-07 23:06:49 ----RA---- C:\WINDOWS\system32\kbdth3.dll
2010-03-07 23:06:49 ----RA---- C:\WINDOWS\system32\kbdth2.dll
2010-03-07 23:06:49 ----RA---- C:\WINDOWS\system32\kbdth1.dll
2010-03-07 23:06:48 ----RA---- C:\WINDOWS\system32\kbdth0.dll
2010-03-07 23:06:48 ----A---- C:\WINDOWS\system32\ftlx041e.dll
2010-03-07 23:06:48 ----A---- C:\WINDOWS\system32\chsbrkr.dll
2010-03-07 23:06:47 ----A---- C:\WINDOWS\system32\chtbrkr.dll
2010-03-07 23:06:46 ----A---- C:\WINDOWS\system32\korwbrkr.dll
2010-03-07 23:06:45 ----A---- C:\WINDOWS\system32\msir3jp.dll
2010-03-07 23:06:23 ----A---- C:\WINDOWS\system32\kbd101a.dll
2010-03-07 23:06:09 ----A---- C:\WINDOWS\system32\kbdnecNT.dll
2010-03-07 23:06:09 ----A---- C:\WINDOWS\system32\kbdnecAT.dll
2010-03-07 23:06:09 ----A---- C:\WINDOWS\system32\kbdnec95.dll
2010-03-07 23:05:42 ----A---- C:\WINDOWS\system32\c_is2022.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbdkor.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbd106.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbd103.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbd101c.dll
2010-03-07 23:05:40 ----A---- C:\WINDOWS\system32\kbd101b.dll
2010-03-07 23:05:37 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-03-07 23:05:37 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-03-07 23:05:37 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-03-07 23:05:25 ----A---- C:\WINDOWS\system32\irclass.dll
2010-03-07 23:05:25 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-03-07 23:05:24 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-03-07 23:05:24 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-03-07 23:05:24 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-03-07 23:05:22 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-03-07 23:05:22 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-03-07 23:05:22 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-03-07 23:05:22 ----A---- C:\WINDOWS\system32\batt.dll
2010-03-07 23:05:22 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-03-07 23:05:21 ----A---- C:\WINDOWS\system32\storprop.dll
2010-03-07 23:05:11 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-03-07 23:03:35 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-07 23:03:35 ----D---- C:\WINDOWS\system32\CatRoot
2010-03-07 23:03:30 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-03-07 23:02:30 ----A---- C:\WINDOWS\system32\drivers\nvcchflt.sys
2010-03-07 23:02:30 ----A---- C:\WINDOWS\system32\drivers\nvatabus.sys
2010-03-07 23:02:29 ----A---- C:\WINDOWS\system32\idecoi.dll
2010-03-07 23:02:22 ----A---- C:\WINDOWS\system32\drivers\Rtnicxp.sys
2010-03-07 23:02:22 ----A---- C:\WINDOWS\system32\drivers\NVENET.sys
2010-03-07 23:02:20 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2010-03-07 23:02:20 ----A---- C:\WINDOWS\system32\NVCOE.DLL
2010-03-07 23:02:02 ----D---- C:\Documents and Settings
2010-03-07 23:02:01 ----SHD---- C:\System Volume Information
2010-03-07 23:00:59 ----RASH---- C:\boot.ini
2010-03-07 22:59:28 ----D---- C:\Program Files\Driver Magician Lite
2010-03-07 22:57:09 ----SD---- C:\WINDOWS\Offline Web Pages
2010-03-07 22:57:09 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-03-07 22:57:09 ----RSD---- C:\WINDOWS\Fonts
2010-03-07 22:57:09 ----RD---- C:\WINDOWS\Web
2010-03-07 22:57:09 ----HD---- C:\WINDOWS\inf
2010-03-07 22:57:09 ----D---- C:\WINDOWS\WinSxS
2010-03-07 22:57:09 ----D---- C:\WINDOWS\WBEM
2010-03-07 22:57:09 ----D---- C:\WINDOWS\twain_32
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\wins
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\wbem
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\usmt
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\spool
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\ShellExt
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\Setup
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\scripting
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\ras
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\npp
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\mui
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\IME
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\icsxml
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\ias
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\export
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\en-US
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\en
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers\etc
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\dhcp
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\config
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\3com_dmi
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\3076
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\2052
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1054
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1042
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1041
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1037
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1033
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1031
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1028
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1025
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system
2010-03-07 22:57:09 ----D---- C:\WINDOWS\security
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Resources
2010-03-07 22:57:09 ----D---- C:\WINDOWS\repair
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Provisioning
2010-03-07 22:57:09 ----D---- C:\WINDOWS\PeerNet
2010-03-07 22:57:09 ----D---- C:\WINDOWS\pchealth
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Network Diagnostic
2010-03-07 22:57:09 ----D---- C:\WINDOWS\mui
2010-03-07 22:57:09 ----D---- C:\WINDOWS\msapps
2010-03-07 22:57:09 ----D---- C:\WINDOWS\msagent
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Media
2010-03-07 22:57:09 ----D---- C:\WINDOWS\L2Schemas
2010-03-07 22:57:09 ----D---- C:\WINDOWS\java
2010-03-07 22:57:09 ----D---- C:\WINDOWS\ime
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Help
2010-03-07 22:57:09 ----D---- C:\WINDOWS\ehome
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Driver Cache
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Debug
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Cursors
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Connection Wizard
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Config
2010-03-07 22:57:09 ----D---- C:\WINDOWS\AppPatch
2010-03-07 22:57:09 ----D---- C:\WINDOWS\addins
2010-03-07 22:57:09 ----D---- C:\WINDOWS
2010-03-07 22:57:09 ----ASH---- C:\pagefile.sys
2010-03-07 22:54:11 ----D---- C:\Documents and Settings\Owner\Application Data\Uniblue
2010-03-07 22:54:11 ----D---- C:\Documents and Settings\All Users\Application Data\DriverScanner
2010-03-07 22:49:12 ----D---- C:\Program Files\Silicon Image, Inc
2010-03-07 22:49:04 ----A---- C:\WINDOWS\IsUninst.exe
2010-03-07 22:42:14 ----D---- C:\Documents and Settings\Owner\Application Data\Opera
2010-03-07 22:42:04 ----D---- C:\Program Files\Opera
2010-03-03 15:15:53 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2010-03-03 15:15:53 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2010-03-03 15:11:34 ----D---- C:\Program Files\Google
2010-03-01 20:31:52 ----D---- C:\Documents and Settings\Owner\Application Data\DivX
2010-03-01 20:28:48 ----D---- C:\Program Files\Common Files\DivX Shared
2010-03-01 20:28:36 ----D---- C:\Program Files\DivX
2009-11-14 22:31:58 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-11-14 01:47:28 ----A---- C:\WINDOWS\system32\divx_xx16.dll
2009-11-14 01:47:28 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2009-11-14 01:47:28 ----A---- C:\WINDOWS\system32\DivX.dll
2009-04-20 19:32:44 ----A---- C:\WINDOWS\system32\setupold.exe
2009-04-20 19:32:44 ----A---- C:\WINDOWS\system32\setup.exe
2009-04-20 19:32:44 ----A---- C:\WINDOWS\system32\presetup.cmd
2009-04-20 19:25:35 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2009-04-20 19:25:34 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-04-20 19:25:34 ----A---- C:\WINDOWS\system32\sfc_os.dll
2009-04-20 19:25:16 ----A---- C:\WINDOWS\system32\msvcrt10.dll
2009-04-20 19:25:16 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-04-20 19:25:15 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-04-20 19:25:15 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-04-20 19:25:15 ----A---- C:\WINDOWS\system32\msvcp70.dll
Run by Owner at 2002-01-01 01:52:07
Microsoft Windows XP Professional Service Pack 3
System drive C: has 514 MB (5%) free of 10 GB
Total RAM: 511 MB (24% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:53:20 AM, on 1/1/2002
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\SNDVOL32.EXE
D:\download\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: free-downloads.net - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: Odoslat do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslat do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP Infium\infium.exe (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate1cabadb82b0f11e) (gupdate1cabadb82b0f11e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
--
End of file - 6877 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\qipsearchbar.dll [2010-03-21 149968]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files\free-downloads.net\prxtbfre2.dll [2011-01-17 175912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\prxtbfre2.dll [2011-01-17 175912]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2008-04-14 208952]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-10-04 8491008]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-10-04 81920]
"NVMixerTray"=C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe [2004-06-04 131072]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-03-29 2145000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ose"=3
"odserv"=3
"Microsoft Office Groove Audit Service"=3
"gupdate1cabadb82b0f11e"=2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-04-20 239496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-04-20 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDesktopCleanupWizard"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"D:\EA GAMES\The Battle for Middle-earth (tm)\game.dat"="D:\EA GAMES\The Battle for Middle-earth (tm)\game.dat:*:Enabled:The Battle for Middle-earth (tm)"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Quake 3\quake3.exe"="D:\Quake 3\quake3.exe:*:Enabled:quake3"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2011-05-07 19:32:29 ----D---- C:\Program Files\ConduitEngine
2011-05-07 19:32:29 ----A---- C:\WINDOWS\system32\ConduitEngine.tmp
2011-03-06 11:10:44 ----A---- C:\WINDOWS\sierra.ini
2011-03-06 10:56:32 ----D---- C:\Program Files\Mplayer
2011-03-06 10:53:04 ----A---- C:\WINDOWS\QIII.INI
2011-03-06 10:29:39 ----D---- C:\WINDOWS\RegisteredPackages
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-03-06 10:29:18 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-03-06 10:29:17 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-03-06 10:29:15 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-03-06 10:29:08 ----D---- C:\WINDOWS\system32\DirectX
2011-03-06 10:06:48 ----D---- C:\Program Files\DAEMON Tools Toolbar
2011-03-06 10:05:50 ----D---- C:\Program Files\DAEMON Tools Lite
2011-03-06 10:05:13 ----D---- C:\Documents and Settings\Owner\Application Data\DAEMON Tools Lite
2011-03-06 10:05:10 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2011-01-02 18:35:38 ----D---- C:\Documents and Settings\Owner\Application Data\Media Player Classic
2011-01-02 17:32:13 ----A---- C:\WINDOWS\system32\unrar.dll
2011-01-02 17:32:12 ----A---- C:\WINDOWS\avisplitter.ini
2011-01-02 17:32:08 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\xvidcore.dll
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2011-01-02 17:32:07 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2011-01-02 17:32:00 ----D---- C:\Program Files\K-Lite Codec Pack
2010-12-22 18:28:39 ----D---- C:\WINDOWS\system32\xircom
2010-12-22 18:28:39 ----D---- C:\WINDOWS\system32\oobe
2010-12-22 18:28:39 ----D---- C:\Program Files\xerox
2010-12-22 18:28:39 ----D---- C:\Program Files\windows nt
2010-12-22 18:28:39 ----D---- C:\Program Files\outlook express
2010-12-22 18:28:39 ----D---- C:\Program Files\netmeeting
2010-12-22 18:28:39 ----D---- C:\Program Files\msn gaming zone
2010-12-22 18:28:39 ----D---- C:\Program Files\movie maker
2010-12-22 18:28:39 ----D---- C:\Program Files\microsoft frontpage
2010-12-22 18:28:38 ----D---- C:\WINDOWS\system32\inetsrv
2010-12-22 18:25:08 ----D---- C:\Program Files\ESET
2010-12-22 18:25:08 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2010-12-22 18:23:15 ----D---- C:\Documents and Settings\Owner\Application Data\Symantec
2010-12-22 18:21:04 ----D---- C:\WINDOWS\temp
2010-12-22 18:21:02 ----A---- C:\ComboFix.txt
2010-12-22 18:13:22 ----A---- C:\Boot.bak
2010-12-22 18:13:18 ----RASHD---- C:\cmdcons
2010-12-22 18:11:41 ----A---- C:\WINDOWS\zip.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\SWSC.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\SWREG.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\sed.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\PEV.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\NIRCMD.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\MBR.exe
2010-12-22 18:11:41 ----A---- C:\WINDOWS\grep.exe
2010-12-22 18:08:13 ----D---- C:\WINDOWS\ERDNT
2010-12-22 18:01:27 ----D---- C:\Qoobox
2010-12-22 17:50:34 ----D---- C:\WINDOWS\pss
2010-11-03 12:02:53 ----D---- C:\Documents and Settings\Owner\Application Data\skypePM
2010-10-05 15:00:52 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-10-05 15:00:52 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-07-24 08:50:00 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2010-07-10 16:41:42 ----D---- C:\WINDOWS\Minidump
2010-07-08 14:44:12 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2010-07-08 14:44:11 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2010-07-08 14:43:58 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2010-07-07 19:15:32 ----D---- C:\Program Files\Yahoo!
2010-07-07 19:14:55 ----D---- C:\Program Files\CCleaner
2010-07-07 18:19:44 ----D---- C:\Documents and Settings\All Users\Application Data\DivX
2010-05-31 13:04:49 ----D---- C:\Documents and Settings\Owner\Application Data\WinRAR
2010-05-30 19:36:01 ----D---- C:\Program Files\WinRAR
2010-04-11 15:58:49 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-04-11 15:56:15 ----D---- C:\Program Files\Microsoft Works
2010-04-11 15:54:25 ----D---- C:\Program Files\Microsoft.NET
2010-04-11 15:49:04 ----D---- C:\WINDOWS\SHELLNEW
2010-04-11 15:48:33 ----D---- C:\Program Files\Microsoft Office
2010-04-11 15:48:32 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-04-11 15:48:05 ----RD---- C:\MSOCache
2010-04-05 14:23:18 ----D---- C:\Documents and Settings\Owner\Application Data\Hamachi
2010-04-05 14:23:02 ----A---- C:\WINDOWS\system32\drivers\hamachi.sys
2010-04-05 14:22:56 ----D---- C:\Program Files\Hamachi
2010-04-05 14:04:18 ----D---- C:\Program Files\Conduit
2010-04-05 14:04:11 ----D---- C:\Program Files\free-downloads.net
2010-04-05 13:58:50 ----D---- C:\Program Files\Alcohol Soft
2010-04-05 13:55:33 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2010-03-29 17:13:44 ----A---- C:\WINDOWS\system32\drivers\epfwtdir.sys
2010-03-29 17:12:00 ----A---- C:\WINDOWS\system32\drivers\ehdrv.sys
2010-03-29 17:07:30 ----A---- C:\WINDOWS\system32\drivers\eamon.sys
2010-03-22 19:20:09 ----D---- C:\Documents and Settings\Owner\Application Data\QIP
2010-03-22 19:18:53 ----D---- C:\Program Files\QIP Infium
2010-03-13 20:14:56 ----D---- C:\Program Files\Garena
2010-03-08 05:44:06 ----D---- C:\Documents and Settings\Owner\Application Data\ESET
2010-03-08 05:37:38 ----D---- C:\Documents and Settings\Owner\Application Data\Macromedia
2010-03-08 05:37:10 ----D---- C:\Documents and Settings\Owner\Application Data\Adobe
2010-03-08 05:28:12 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-03-08 05:28:11 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-03-08 05:28:09 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-03-08 05:28:07 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-03-08 05:28:06 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-03-08 05:28:04 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-03-08 05:28:03 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-03-08 05:28:02 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-03-08 05:28:00 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-03-08 05:27:59 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-03-08 05:27:58 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\UDAPROP3.DLL
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\drivers\cmuda3.sys
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\CMUDA3.DLL
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\CMRMDRV3.exe
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\CMRMDRV3.DLL
2010-03-08 05:27:55 ----RA---- C:\WINDOWS\system32\AUDIO3D3.DLL
2010-03-08 05:27:55 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-03-08 05:27:55 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-03-08 05:27:55 ----A---- C:\WINDOWS\system32\a3d.dll
2010-03-08 05:27:54 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-03-08 05:27:51 ----R---- C:\WINDOWS\CmiPCIUninstall.exe
2010-03-08 05:27:41 ----D---- C:\Program Files\C-Media PCI Audio
2010-03-08 05:27:01 ----D---- C:\Program Files\Common Files\InstallShield
2010-03-08 05:24:47 ----A---- C:\WINDOWS\system32\msrating.dll.mui
2010-03-08 05:24:47 ----A---- C:\WINDOWS\system32\mshta.exe.mui
2010-03-08 05:24:47 ----A---- C:\WINDOWS\system32\ieframe.dll.mui
2010-03-08 05:24:46 ----A---- C:\WINDOWS\system32\iedkcs32.dll.mui
2010-03-08 05:24:46 ----A---- C:\WINDOWS\system32\ie4uinit.exe.mui
2010-03-08 05:24:21 ----HD---- C:\Program Files\Uninstall Information
2010-03-08 05:23:31 ----SD---- C:\Documents and Settings\Owner\Application Data\Microsoft
2010-03-08 05:23:31 ----ASH---- C:\Documents and Settings\Owner\Application Data\desktop.ini
2010-03-08 05:23:15 ----SD---- C:\WINDOWS\system32\Microsoft
2010-03-08 05:23:15 ----D---- C:\WINDOWS\Prefetch
2010-03-08 05:23:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-08 05:21:20 ----RASH---- C:\MSDOS.SYS
2010-03-08 05:21:20 ----RASH---- C:\IO.SYS
2010-03-08 05:21:20 ----A---- C:\WINDOWS\control.ini
2010-03-08 05:21:20 ----A---- C:\CONFIG.SYS
2010-03-08 05:21:20 ----A---- C:\AUTOEXEC.BAT
2010-03-08 05:20:57 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-03-08 05:20:48 ----D---- C:\WINDOWS\system32\dllcache
2010-03-08 05:19:18 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-03-08 05:19:14 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-03-08 05:19:05 ----HD---- C:\Program Files\WindowsUpdate
2010-03-08 05:18:42 ----D---- C:\Program Files\Windows Media Connect 2
2010-03-08 05:18:25 ----A---- C:\WINDOWS\system32\atrace.dll
2010-03-08 05:18:24 ----A---- C:\WINDOWS\system32\desktop.ini
2010-03-08 05:18:24 ----A---- C:\WINDOWS\desktop.ini
2010-03-08 05:18:20 ----SD---- C:\WINDOWS\Tasks
2010-03-08 05:18:20 ----D---- C:\Program Files\Common Files\MSSoap
2010-03-08 05:18:20 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-03-08 05:18:12 ----D---- C:\WINDOWS\srchasst
2010-03-08 05:18:10 ----D---- C:\WINDOWS\system32\Macromed
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-03-08 05:18:07 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wups.dll
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-03-08 05:18:06 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-03-08 05:18:05 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-03-08 05:18:04 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-03-08 05:17:59 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-03-08 05:17:59 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-03-08 05:17:59 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-03-08 05:17:58 ----D---- C:\WINDOWS\system32\Restore
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\srclient.dll
2010-03-08 05:17:58 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-03-08 05:17:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-03-08 05:17:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-03-08 05:17:57 ----A---- C:\WINDOWS\system32\mstask.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\isign32.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-03-08 05:17:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-03-08 05:17:51 ----D---- C:\Program Files\Common Files\System
2010-03-08 05:17:02 ----RSD---- C:\WINDOWS\assembly
2010-03-08 05:16:52 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-03-08 05:16:29 ----D---- C:\Program Files\ComPlus Applications
2010-03-08 05:16:26 ----A---- C:\WINDOWS\vbaddin.ini
2010-03-08 05:16:26 ----A---- C:\WINDOWS\vb.ini
2010-03-08 05:16:20 ----D---- C:\WINDOWS\Registration
2010-03-08 05:15:39 ----D---- C:\Program Files\Windows Media Player
2010-03-08 05:15:31 ----A---- C:\WINDOWS\system32\xpssvcs.dll
2010-03-08 05:15:26 ----A---- C:\WINDOWS\system32\winUsbCoinstaller.dll
2010-03-08 05:15:25 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2010-03-08 05:15:24 ----A---- C:\WINDOWS\system32\WUDFUpdate_01007.dll
2010-03-08 05:15:23 ----A---- C:\WINDOWS\system32\imapi2fs.dll
2010-03-08 05:15:23 ----A---- C:\WINDOWS\system32\imapi2.dll
2010-03-08 05:15:22 ----D---- C:\WINDOWS\system32\DRM
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\SecProc_ssp_isv.dll
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\SecProc_ssp.dll
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\RmActivate_ssp_isv.exe
2010-03-08 05:15:22 ----A---- C:\WINDOWS\system32\RmActivate_ssp.exe
2010-03-08 05:15:21 ----A---- C:\WINDOWS\system32\SecProc_isv.dll
2010-03-08 05:15:21 ----A---- C:\WINDOWS\system32\RmActivate_isv.exe
2010-03-08 05:15:21 ----A---- C:\WINDOWS\system32\RmActivate.exe
2010-03-08 05:15:20 ----A---- C:\WINDOWS\system32\SecProc.dll
2010-03-08 05:15:20 ----A---- C:\WINDOWS\system32\msdrm.dll
2010-03-08 05:15:19 ----A---- C:\WINDOWS\system32\msxml4r.dll
2010-03-08 05:15:19 ----A---- C:\WINDOWS\system32\msxml4.dll
2010-03-08 05:15:18 ----D---- C:\Program Files\MSXML 4.0
2010-03-08 05:15:09 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-03-08 05:15:08 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2010-03-08 05:15:07 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-03-08 05:15:06 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-03-08 05:15:05 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-03-08 05:15:04 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2010-03-08 05:15:03 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-03-08 05:15:03 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-03-08 05:15:02 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-03-08 05:15:01 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2010-03-08 05:15:00 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-03-08 05:14:59 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-03-08 05:14:58 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-03-08 05:14:57 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-03-08 05:14:56 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-03-08 05:14:55 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-03-08 05:14:54 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-03-08 05:14:53 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-03-08 05:14:52 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-03-08 05:14:51 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-03-08 05:14:50 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-03-08 05:14:50 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-03-08 05:14:49 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-03-08 05:14:48 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-03-08 05:14:47 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-03-08 05:14:46 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-03-08 05:14:45 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-03-08 05:14:44 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-03-08 05:14:44 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-03-08 05:14:43 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2010-03-08 05:14:43 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-03-08 05:14:42 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-03-08 05:14:42 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-03-08 05:14:41 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-03-08 05:14:40 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-03-08 05:14:40 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-03-08 05:14:39 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-03-08 05:14:30 ----D---- C:\WINDOWS\SoftwareDistribution
2010-03-08 05:14:30 ----D---- C:\Program Files\Microsoft Silverlight
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\muweb.dll
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-03-08 05:14:29 ----A---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2010-03-08 05:14:28 ----A---- C:\WINDOWS\system32\WgaTray.exe
2010-03-08 05:14:28 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2010-03-08 05:14:28 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-03-08 05:14:27 ----D---- C:\WINDOWS\system32\PreInstall
2010-03-08 05:14:15 ----A---- C:\WINDOWS\system32\netfxperf.dll
2010-03-08 05:14:11 ----A---- C:\WINDOWS\system32\mscories.dll
2010-03-08 05:14:10 ----D---- C:\Program Files\Internet Explorer
2010-03-08 05:14:10 ----A---- C:\WINDOWS\system32\mscorier.dll
2010-03-08 05:14:10 ----A---- C:\WINDOWS\system32\mscoree.dll
2010-03-08 05:13:55 ----D---- C:\WINDOWS\Microsoft.NET
2010-03-08 05:13:49 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-03-08 05:13:44 ----A---- C:\WINDOWS\system32\getuname.dll
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tskill.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\tscon.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\reset.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\charmap.exe
2010-03-08 05:13:43 ----A---- C:\WINDOWS\system32\calc.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\shadow.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\regini.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\msg.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\logoff.exe
2010-03-08 05:13:42 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-03-08 05:13:36 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-03-08 05:13:35 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-03-08 05:13:35 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-03-08 05:13:34 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-03-08 05:13:33 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-03-08 05:13:32 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-03-08 05:13:31 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-03-08 05:13:30 ----D---- C:\WINDOWS\system32\MsDtc
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-03-08 05:13:30 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-03-08 05:13:29 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-03-08 05:13:29 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-03-08 05:13:28 ----D---- C:\WINDOWS\system32\Com
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-03-08 05:13:28 ----A---- C:\WINDOWS\system32\colbact.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\stclient.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-03-08 05:13:27 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\comuid.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-03-08 05:13:26 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-03-08 05:13:19 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-03-08 05:13:19 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-03-08 05:13:19 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-03-08 05:13:18 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-03-08 05:13:13 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-03-08 05:13:13 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2010-03-07 23:11:56 ----A---- C:\WINDOWS\system32\h323log.txt
2010-03-07 23:11:48 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-03-07 23:11:01 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-03-07 23:10:10 ----A---- C:\WINDOWS\system32\nvuenet.exe
2010-03-07 23:10:09 ----D---- C:\WINDOWS\NV6281192.TMP
2010-03-07 23:10:04 ----A---- C:\WINDOWS\system32\usbui.dll
2010-03-07 23:07:46 ----SHD---- C:\WINDOWS\Installer
2010-03-07 23:07:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-07 23:07:45 ----D---- C:\Program Files\Common Files\ODBC
2010-03-07 23:07:45 ----A---- C:\WINDOWS\ODBCINST.INI
2010-03-07 23:07:41 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-03-07 23:07:40 ----RD---- C:\Program Files
2010-03-07 23:07:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-03-07 23:07:40 ----D---- C:\Program Files\Common Files
2010-03-07 23:07:31 ----A---- C:\WINDOWS\system32\uniime.dll
2010-03-07 23:07:18 ----A---- C:\WINDOWS\system32\c_g18030.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdlk41j.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdlk41a.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdibm02.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbdax2.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbd106n.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\kbd101.dll
2010-03-07 23:07:16 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
2010-03-07 23:07:15 ----A---- C:\WINDOWS\system32\imjp81k.dll
2010-03-07 23:07:07 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
2010-03-07 23:07:07 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
2010-03-07 23:07:07 ----RA---- C:\WINDOWS\system32\kbdarme.dll
2010-03-07 23:07:07 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2010-03-07 23:07:06 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdintel.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdintam.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
2010-03-07 23:07:05 ----RA---- C:\WINDOWS\system32\kbdindev.dll
2010-03-07 23:07:05 ----A---- C:\WINDOWS\system32\c_iscii.dll
2010-03-07 23:07:02 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbdfa.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbda3.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbda2.dll
2010-03-07 23:07:01 ----RA---- C:\WINDOWS\system32\kbda1.dll
2010-03-07 23:07:01 ----A---- C:\WINDOWS\system32\kbdusa.dll
2010-03-07 23:06:57 ----RA---- C:\WINDOWS\system32\kbdheb.dll
2010-03-07 23:06:49 ----RA---- C:\WINDOWS\system32\kbdth3.dll
2010-03-07 23:06:49 ----RA---- C:\WINDOWS\system32\kbdth2.dll
2010-03-07 23:06:49 ----RA---- C:\WINDOWS\system32\kbdth1.dll
2010-03-07 23:06:48 ----RA---- C:\WINDOWS\system32\kbdth0.dll
2010-03-07 23:06:48 ----A---- C:\WINDOWS\system32\ftlx041e.dll
2010-03-07 23:06:48 ----A---- C:\WINDOWS\system32\chsbrkr.dll
2010-03-07 23:06:47 ----A---- C:\WINDOWS\system32\chtbrkr.dll
2010-03-07 23:06:46 ----A---- C:\WINDOWS\system32\korwbrkr.dll
2010-03-07 23:06:45 ----A---- C:\WINDOWS\system32\msir3jp.dll
2010-03-07 23:06:23 ----A---- C:\WINDOWS\system32\kbd101a.dll
2010-03-07 23:06:09 ----A---- C:\WINDOWS\system32\kbdnecNT.dll
2010-03-07 23:06:09 ----A---- C:\WINDOWS\system32\kbdnecAT.dll
2010-03-07 23:06:09 ----A---- C:\WINDOWS\system32\kbdnec95.dll
2010-03-07 23:05:42 ----A---- C:\WINDOWS\system32\c_is2022.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbdkor.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbd106.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbd103.dll
2010-03-07 23:05:41 ----A---- C:\WINDOWS\system32\kbd101c.dll
2010-03-07 23:05:40 ----A---- C:\WINDOWS\system32\kbd101b.dll
2010-03-07 23:05:37 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-03-07 23:05:37 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-03-07 23:05:37 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-03-07 23:05:35 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-03-07 23:05:33 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-03-07 23:05:32 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-03-07 23:05:30 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-03-07 23:05:25 ----A---- C:\WINDOWS\system32\irclass.dll
2010-03-07 23:05:25 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-03-07 23:05:24 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-03-07 23:05:24 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-03-07 23:05:24 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-03-07 23:05:22 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-03-07 23:05:22 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-03-07 23:05:22 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-03-07 23:05:22 ----A---- C:\WINDOWS\system32\batt.dll
2010-03-07 23:05:22 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-03-07 23:05:21 ----A---- C:\WINDOWS\system32\storprop.dll
2010-03-07 23:05:11 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-03-07 23:03:35 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-07 23:03:35 ----D---- C:\WINDOWS\system32\CatRoot
2010-03-07 23:03:30 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-03-07 23:02:30 ----A---- C:\WINDOWS\system32\drivers\nvcchflt.sys
2010-03-07 23:02:30 ----A---- C:\WINDOWS\system32\drivers\nvatabus.sys
2010-03-07 23:02:29 ----A---- C:\WINDOWS\system32\idecoi.dll
2010-03-07 23:02:22 ----A---- C:\WINDOWS\system32\drivers\Rtnicxp.sys
2010-03-07 23:02:22 ----A---- C:\WINDOWS\system32\drivers\NVENET.sys
2010-03-07 23:02:20 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2010-03-07 23:02:20 ----A---- C:\WINDOWS\system32\NVCOE.DLL
2010-03-07 23:02:02 ----D---- C:\Documents and Settings
2010-03-07 23:02:01 ----SHD---- C:\System Volume Information
2010-03-07 23:00:59 ----RASH---- C:\boot.ini
2010-03-07 22:59:28 ----D---- C:\Program Files\Driver Magician Lite
2010-03-07 22:57:09 ----SD---- C:\WINDOWS\Offline Web Pages
2010-03-07 22:57:09 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-03-07 22:57:09 ----RSD---- C:\WINDOWS\Fonts
2010-03-07 22:57:09 ----RD---- C:\WINDOWS\Web
2010-03-07 22:57:09 ----HD---- C:\WINDOWS\inf
2010-03-07 22:57:09 ----D---- C:\WINDOWS\WinSxS
2010-03-07 22:57:09 ----D---- C:\WINDOWS\WBEM
2010-03-07 22:57:09 ----D---- C:\WINDOWS\twain_32
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\wins
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\wbem
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\usmt
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\spool
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\ShellExt
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\Setup
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\scripting
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\ras
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\npp
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\mui
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\IME
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\icsxml
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\ias
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\export
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\en-US
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\en
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers\etc
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\drivers
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\dhcp
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\config
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\3com_dmi
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\3076
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\2052
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1054
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1042
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1041
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1037
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1033
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1031
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1028
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32\1025
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system32
2010-03-07 22:57:09 ----D---- C:\WINDOWS\system
2010-03-07 22:57:09 ----D---- C:\WINDOWS\security
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Resources
2010-03-07 22:57:09 ----D---- C:\WINDOWS\repair
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Provisioning
2010-03-07 22:57:09 ----D---- C:\WINDOWS\PeerNet
2010-03-07 22:57:09 ----D---- C:\WINDOWS\pchealth
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Network Diagnostic
2010-03-07 22:57:09 ----D---- C:\WINDOWS\mui
2010-03-07 22:57:09 ----D---- C:\WINDOWS\msapps
2010-03-07 22:57:09 ----D---- C:\WINDOWS\msagent
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Media
2010-03-07 22:57:09 ----D---- C:\WINDOWS\L2Schemas
2010-03-07 22:57:09 ----D---- C:\WINDOWS\java
2010-03-07 22:57:09 ----D---- C:\WINDOWS\ime
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Help
2010-03-07 22:57:09 ----D---- C:\WINDOWS\ehome
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Driver Cache
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Debug
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Cursors
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Connection Wizard
2010-03-07 22:57:09 ----D---- C:\WINDOWS\Config
2010-03-07 22:57:09 ----D---- C:\WINDOWS\AppPatch
2010-03-07 22:57:09 ----D---- C:\WINDOWS\addins
2010-03-07 22:57:09 ----D---- C:\WINDOWS
2010-03-07 22:57:09 ----ASH---- C:\pagefile.sys
2010-03-07 22:54:11 ----D---- C:\Documents and Settings\Owner\Application Data\Uniblue
2010-03-07 22:54:11 ----D---- C:\Documents and Settings\All Users\Application Data\DriverScanner
2010-03-07 22:49:12 ----D---- C:\Program Files\Silicon Image, Inc
2010-03-07 22:49:04 ----A---- C:\WINDOWS\IsUninst.exe
2010-03-07 22:42:14 ----D---- C:\Documents and Settings\Owner\Application Data\Opera
2010-03-07 22:42:04 ----D---- C:\Program Files\Opera
2010-03-03 15:15:53 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2010-03-03 15:15:53 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2010-03-03 15:11:34 ----D---- C:\Program Files\Google
2010-03-01 20:31:52 ----D---- C:\Documents and Settings\Owner\Application Data\DivX
2010-03-01 20:28:48 ----D---- C:\Program Files\Common Files\DivX Shared
2010-03-01 20:28:36 ----D---- C:\Program Files\DivX
2009-11-14 22:31:58 ----A---- C:\WINDOWS\system32\dpl100.dll
2009-11-14 01:47:28 ----A---- C:\WINDOWS\system32\divx_xx16.dll
2009-11-14 01:47:28 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2009-11-14 01:47:28 ----A---- C:\WINDOWS\system32\DivX.dll
2009-04-20 19:32:44 ----A---- C:\WINDOWS\system32\setupold.exe
2009-04-20 19:32:44 ----A---- C:\WINDOWS\system32\setup.exe
2009-04-20 19:32:44 ----A---- C:\WINDOWS\system32\presetup.cmd
2009-04-20 19:25:35 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2009-04-20 19:25:34 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-04-20 19:25:34 ----A---- C:\WINDOWS\system32\sfc_os.dll
2009-04-20 19:25:16 ----A---- C:\WINDOWS\system32\msvcrt10.dll
2009-04-20 19:25:16 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-04-20 19:25:15 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-04-20 19:25:15 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-04-20 19:25:15 ----A---- C:\WINDOWS\system32\msvcp70.dll