OTL logfile created on: 1/8/2010 5:20:26 PM - Run 2
OTL by OldTimer - Version 3.1.21.1 Folder = C:\Documents and Settings\wDanIw\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
959.00 Mb Total Physical Memory | 568.00 Mb Available Physical Memory | 59.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48.83 Gb Total Space | 42.99 Gb Free Space | 88.03% Space Free | Partition Type: NTFS
Drive D: | 249.26 Gb Total Space | 222.16 Gb Free Space | 89.13% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DESPERADO
Current User Name: wDanIw
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
========== Processes (SafeList) ==========
PRC - [2010/01/08 16:53:52 | 00,514,048 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\wDanIw\My Documents\Downloads\OTL.exe
PRC - [2010/01/06 14:27:17 | 00,289,584 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2009/12/22 19:41:29 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2008/11/07 14:31:40 | 00,076,744 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe
PRC - [2008/11/07 14:31:38 | 21,633,320 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2008/04/14 11:00:00 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/04/10 10:52:10 | 16,861,184 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTHDCPL.exe
PRC - [2008/02/25 06:29:00 | 00,155,716 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
========== Modules (SafeList) ==========
MOD - [2010/01/08 16:53:52 | 00,514,048 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\wDanIw\My Documents\Downloads\OTL.exe
========== Win32 Services (SafeList) ==========
SRV - [2008/02/25 06:29:00 | 00,155,716 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2005/11/17 14:18:52 | 01,527,900 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/06 14:16:04 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/06 14:16:01 | 00,000,000 | ---D | M]
[2010/01/06 14:16:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\wDanIw\Application Data\Mozilla\Extensions
[2010/01/06 14:16:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\wDanIw\Application Data\Mozilla\Firefox\Profiles\sffw4zcd.default\extensions
[2010/01/08 16:52:02 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
O1 HOSTS File: (734 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TrayServer] C:\Program Files\MAGIX\Movie_Edit_Pro_14_PLUS_Download_version\Trayserver.exe (MAGIX AG)
O4 - HKCU..\Run: [skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/01/06 14:01:44 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
========== Files/Folders - Created Within 14 Days ==========
[2010/01/08 17:18:18 | 00,000,000 | ---D | C] -- C:\_OTL
[2010/01/08 17:02:00 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2010/01/08 15:34:44 | 00,000,000 | ---D | C] -- C:\Program Files\ESET
[2010/01/08 15:26:49 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010/01/08 15:24:08 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2010/01/08 15:23:40 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/01/08 15:23:40 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/01/08 15:23:40 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/01/08 15:23:40 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/01/08 15:23:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/01/08 15:23:23 | 00,000,000 | ---D | C] -- C:\Qoobox
[2010/01/08 15:12:01 | 00,000,000 | ---D | C] -- C:\JTT
[2010/01/08 15:00:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\Malwarebytes
[2010/01/08 15:00:44 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/08 15:00:43 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/08 15:00:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/01/08 15:00:43 | 00,000,000 | ---D | C] -- C:\HJT
[2010/01/08 13:47:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Desktop\Deathrun Map Pack
[2010/01/07 22:42:31 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2010/01/07 18:39:34 | 00,000,000 | ---D | C] -- C:\Program Files\AMX Mod X
[2010/01/07 13:25:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2010/01/06 20:19:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/01/06 20:10:29 | 00,000,000 | R--D | C] -- C:\Documents and Settings\wDanIw\My Documents\My Videos
[2010/01/06 20:10:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\My Documents\MAGIX downloads
[2010/01/06 20:10:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\MAGIX
[2010/01/06 20:09:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\My Documents\MAGIX_Screenshare
[2010/01/06 20:09:38 | 00,618,496 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLAV32.dll
[2010/01/06 20:09:38 | 00,430,080 | ---- | C] (MAGIX AG) -- C:\WINDOWS\System32\MXRestore.exe
[2010/01/06 20:09:38 | 00,192,512 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLRES32.dll
[2010/01/06 20:09:38 | 00,167,936 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLDEV32.dll
[2010/01/06 20:09:38 | 00,151,552 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLDRV32.dll
[2010/01/06 20:09:38 | 00,114,688 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLCDA32.dll
[2010/01/06 20:09:38 | 00,098,304 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLCPY32.dll
[2010/01/06 20:09:38 | 00,065,536 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLPTL32.dll
[2010/01/06 20:09:38 | 00,061,440 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLCDF32.dll
[2010/01/06 20:09:38 | 00,057,344 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLTPO32.dll
[2010/01/06 20:09:38 | 00,053,248 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLPRJ32.dll
[2010/01/06 20:09:38 | 00,053,248 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLIO32.dll
[2010/01/06 20:09:38 | 00,049,152 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLPRF32.dll
[2010/01/06 20:09:38 | 00,045,056 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLIMG32.dll
[2010/01/06 20:09:38 | 00,040,960 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLRD32.dll
[2010/01/06 20:09:38 | 00,036,864 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLPNT32.dll
[2010/01/06 20:09:38 | 00,032,768 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\STRING32.dll
[2010/01/06 20:09:38 | 00,032,768 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLMSC32.dll
[2010/01/06 20:09:38 | 00,032,768 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLISO32.dll
[2010/01/06 20:09:38 | 00,032,768 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLDIR32.dll
[2010/01/06 20:09:38 | 00,024,576 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\TTIC32.dll
[2010/01/06 20:09:38 | 00,024,576 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\TTI32.dll
[2010/01/06 20:09:38 | 00,024,576 | ---- | C] (PoINT Software & Systems GmbH) -- C:\WINDOWS\System32\DLLIX.dll
[2010/01/06 20:09:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\My Documents\MAGIX_Movie_Edit_Pro_14_PLUS_Download_version
[2010/01/06 20:09:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\MAGIX
[2010/01/06 20:08:53 | 00,000,000 | ---D | C] -- C:\Program Files\MAGIX
[2010/01/06 20:08:42 | 00,700,416 | ---- | C] (MAGIX AG) -- C:\WINDOWS\System32\mgxoschk.dll
[2010/01/06 20:08:42 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\MAGIX
[2010/01/06 17:21:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\skypePM
[2010/01/06 16:51:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\Skype
[2010/01/06 16:51:48 | 00,000,000 | ---D | C] -- C:\Program Files\Skype
[2010/01/06 16:51:48 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2010/01/06 16:51:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Skype
[2010/01/06 15:54:34 | 00,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010/01/06 15:54:34 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2010/01/06 15:54:31 | 00,000,000 | R--D | C] -- C:\Program Files
[2010/01/06 15:54:31 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2010/01/06 15:54:31 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2010/01/06 15:54:31 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files
[2010/01/06 15:54:07 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
[2010/01/06 15:54:07 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents
[2010/01/06 15:54:07 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
[2010/01/06 15:54:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites
[2010/01/06 15:54:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop
[2010/01/06 15:52:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010/01/06 15:52:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010/01/06 15:52:10 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2010/01/06 15:52:10 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
[2010/01/06 15:51:54 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2010/01/06 15:51:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings
[2010/01/06 15:48:37 | 00,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010/01/06 15:48:37 | 00,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2010/01/06 15:48:37 | 00,000,000 | R--D | C] -- C:\WINDOWS\Web
[2010/01/06 15:48:37 | 00,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\system
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\security
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\java
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010/01/06 15:48:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010/01/06 15:32:21 | 00,000,000 | ---D | C] -- C:\Program Files\Valve
[2010/01/06 14:47:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\WinRAR
[2010/01/06 14:47:26 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010/01/06 14:36:14 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2010/01/06 14:32:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\AIMP
[2010/01/06 14:31:59 | 00,000,000 | ---D | C] -- C:\Program Files\AIMP2
[2010/01/06 14:30:51 | 00,000,000 | ---D | C] -- C:\Program Files\Webteh
[2010/01/06 14:30:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\BSplayer PRO
[2010/01/06 14:27:17 | 00,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2010/01/06 14:27:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\uTorrent
[2010/01/06 14:24:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\Macromedia
[2010/01/06 14:24:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\Adobe
[2010/01/06 14:23:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\My Documents\Downloads
[2010/01/06 14:16:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Local Settings\Application Data\Mozilla
[2010/01/06 14:16:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\Mozilla
[2010/01/06 14:16:01 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/01/06 14:15:13 | 00,000,000 | --SD | C] -- C:\Documents and Settings\wDanIw\UserData
[2010/01/06 14:13:34 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
[2010/01/06 14:11:53 | 00,000,000 | ---D | C] -- C:\WINDOWS\nview
[2010/01/06 14:10:52 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2010/01/06 14:10:50 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2010/01/06 14:10:16 | 00,000,000 | ---D | C] -- C:\Program Files\AMD
[2010/01/06 14:10:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\InstallShield
[2010/01/06 14:09:19 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
[2010/01/06 14:08:58 | 02,808,832 | R--- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\alcwzrd.exe
[2010/01/06 14:08:57 | 00,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010/01/06 14:08:56 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010/01/06 14:08:49 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010/01/06 14:06:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Application Data\Identities
[2010/01/06 14:06:19 | 00,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010/01/06 14:06:17 | 00,000,000 | R--D | C] -- C:\Documents and Settings\wDanIw\My Documents\My Pictures
[2010/01/06 14:06:17 | 00,000,000 | R--D | C] -- C:\Documents and Settings\wDanIw\My Documents\My Music
[2010/01/06 14:06:14 | 00,000,000 | --SD | C] -- C:\Documents and Settings\wDanIw\Application Data\Microsoft
[2010/01/06 14:06:14 | 00,000,000 | --SD | C] -- C:\Documents and Settings\wDanIw\Cookies
[2010/01/06 14:06:14 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\wDanIw\SendTo
[2010/01/06 14:06:14 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\wDanIw\Recent
[2010/01/06 14:06:14 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\wDanIw\Application Data
[2010/01/06 14:06:14 | 00,000,000 | R--D | C] -- C:\Documents and Settings\wDanIw\Start Menu
[2010/01/06 14:06:14 | 00,000,000 | R--D | C] -- C:\Documents and Settings\wDanIw\My Documents
[2010/01/06 14:06:14 | 00,000,000 | R--D | C] -- C:\Documents and Settings\wDanIw\Favorites
[2010/01/06 14:06:14 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\wDanIw\Templates
[2010/01/06 14:06:14 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\wDanIw\PrintHood
[2010/01/06 14:06:14 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\wDanIw\NetHood
[2010/01/06 14:06:14 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\wDanIw\Local Settings
[2010/01/06 14:06:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Local Settings\Application Data\Microsoft
[2010/01/06 14:06:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\wDanIw\Desktop
[2010/01/06 14:05:29 | 00,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010/01/06 14:05:28 | 00,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010/01/06 14:05:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010/01/06 14:05:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/01/06 14:05:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/01/06 14:03:57 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2010/01/06 14:03:57 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2010/01/06 14:03:57 | 00,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2010/01/06 14:03:14 | 00,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
[2010/01/06 14:03:14 | 00,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
[2010/01/06 14:03:14 | 00,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
[2010/01/06 14:03:06 | 00,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2010/01/06 14:02:45 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010/01/06 14:02:45 | 00,000,000 | ---D | C] -- C:\Program Files\xerox
[2010/01/06 14:02:45 | 00,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010/01/06 14:01:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010/01/06 14:01:58 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010/01/06 14:01:36 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/01/06 14:01:36 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/01/06 14:01:01 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2010/01/06 14:00:55 | 00,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010/01/06 14:00:55 | 00,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2010/01/06 14:00:48 | 00,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2010/01/06 14:00:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010/01/06 14:00:23 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2010/01/06 14:00:21 | 00,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010/01/06 14:00:20 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2010/01/06 14:00:17 | 00,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010/01/06 14:00:17 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010/01/06 14:00:11 | 00,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2010/01/06 13:59:56 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010/01/06 13:59:53 | 00,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2010/01/06 13:59:51 | 00,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2010/01/06 13:59:46 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2010/01/06 13:59:46 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2010/01/06 13:59:45 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
[2010/01/06 13:59:20 | 00,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2010/01/06 13:59:15 | 00,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010/01/06 13:59:10 | 00,000,000 | ---D | C] -- C:\Program Files\Online Services
[2010/01/06 13:59:09 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
[2010/01/06 13:59:09 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2010/01/06 13:59:04 | 00,000,000 | ---D | C] -- C:\Program Files\Messenger
[2010/01/06 13:59:01 | 00,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2010/01/06 13:58:37 | 00,000,000 | ---D | C] -- C:\Program Files\MSN
[2010/01/06 13:58:36 | 00,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe
[2010/01/06 13:58:35 | 00,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2010/01/06 13:58:34 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2010/01/06 13:58:32 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010/01/06 13:58:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010/01/06 13:58:21 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
========== Files - Modified Within 14 Days ==========
[2010/01/08 17:19:24 | 01,048,576 | -H-- | M] () -- C:\Documents and Settings\wDanIw\NTUSER.DAT
[2010/01/08 17:19:14 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/01/08 17:19:14 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/01/08 17:19:12 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/01/08 17:17:30 | 00,130,994 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\klip12.MVD
[2010/01/08 17:15:42 | 00,093,786 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\klip12_BAK0.MV_
[2010/01/08 17:02:29 | 00,000,765 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to Extras.lnk
[2010/01/08 17:02:05 | 00,000,746 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to OTL.lnk
[2010/01/08 15:26:11 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/01/08 15:24:10 | 00,000,281 | RHS- | M] () -- C:\boot.ini
[2010/01/08 15:22:04 | 03,819,182 | R--- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Tool2.exe.exe
[2010/01/08 15:12:01 | 00,001,323 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\HijackThis.lnk
[2010/01/08 15:10:03 | 04,256,532 | -H-- | M] () -- C:\Documents and Settings\wDanIw\Local Settings\Application Data\IconCache.db
[2010/01/08 15:00:46 | 00,000,443 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/01/08 14:00:58 | 00,002,257 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010/01/07 20:04:58 | 00,130,988 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\klip1.MVD
[2010/01/07 18:35:08 | 00,000,664 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to Geek Play.lnk
[2010/01/07 18:10:03 | 00,005,120 | ---- | M] () -- C:\Documents and Settings\wDanIw\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/07 17:13:23 | 00,000,796 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\BS.Player PRO.lnk
[2010/01/07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/07 13:26:09 | 00,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/01/07 13:26:09 | 00,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/01/07 13:26:08 | 00,356,120 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/01/07 13:25:01 | 00,118,952 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/01/07 13:24:19 | 00,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/01/06 20:38:24 | 00,000,447 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Fraps.lnk
[2010/01/06 20:24:41 | 00,140,694 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/01/06 20:24:34 | 00,026,456 | ---- | M] () -- C:\Documents and Settings\wDanIw\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/01/06 20:12:13 | 00,005,937 | ---- | M] () -- C:\WINDOWS\mgxoschk.ini
[2010/01/06 20:11:32 | 00,000,988 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to MovieEdit.lnk
[2010/01/06 20:09:55 | 00,000,840 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\MAGIX Xtreme Photo Designer 6.lnk
[2010/01/06 17:21:28 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/01/06 15:56:55 | 00,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2010/01/06 15:33:10 | 00,001,607 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Counter Strike 1.6 Non Steam.lnk
[2010/01/06 15:33:10 | 00,001,587 | ---- | M] () -- C:\Documents and Settings\wDanIw\Desktop\Dedicated Server.lnk
[2010/01/06 14:32:00 | 00,000,652 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AIMP2.lnk
[2010/01/06 14:27:17 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/01/06 14:16:05 | 00,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010/01/06 14:16:02 | 00,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/01/06 14:15:00 | 00,000,536 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\unisat.lnk
[2010/01/06 14:13:35 | 00,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010/01/06 14:13:35 | 00,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010/01/06 14:12:38 | 00,000,178 | -HS- | M] () -- C:\Documents and Settings\wDanIw\ntuser.ini
[2010/01/06 14:05:17 | 00,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010/01/06 14:04:25 | 00,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/01/06 14:01:44 | 00,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/01/06 14:01:44 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/01/06 14:01:44 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/01/06 14:01:44 | 00,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2010/01/06 14:01:44 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/01/06 14:01:44 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/01/06 14:01:43 | 00,000,477 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/01/06 14:01:36 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/01/06 14:01:36 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/01/06 14:01:35 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010/01/06 14:01:28 | 00,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010/01/06 14:00:55 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010/01/06 14:00:55 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010/01/06 13:59:28 | 00,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/01/06 13:59:18 | 00,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2010/01/06 13:59:18 | 00,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2010/01/06 13:57:46 | 00,000,211 | ---- | M] () -- C:\Boot.bak
========== Files Created - No Company Name ==========
[2010/01/08 17:15:42 | 00,093,786 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\klip12_BAK0.MV_
[2010/01/08 17:02:29 | 00,000,765 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to Extras.lnk
[2010/01/08 17:02:05 | 00,000,746 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to OTL.lnk
[2010/01/08 15:24:10 | 00,000,211 | ---- | C] () -- C:\Boot.bak
[2010/01/08 15:24:08 | 00,260,272 | ---- | C] () -- C:\cmldr
[2010/01/08 15:23:40 | 00,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/01/08 15:23:40 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/01/08 15:23:40 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/01/08 15:23:40 | 00,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/01/08 15:23:40 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/01/08 15:22:17 | 03,819,182 | R--- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Tool2.exe.exe
[2010/01/08 15:22:17 | 00,293,376 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Tool.exe.exe
[2010/01/08 15:12:01 | 00,001,323 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\HijackThis.lnk
[2010/01/08 15:00:46 | 00,000,443 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/01/07 21:49:32 | 00,130,994 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\klip12.MVD
[2010/01/07 19:25:49 | 00,130,988 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\klip1.MVD
[2010/01/07 18:35:08 | 00,000,664 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to Geek Play.lnk
[2010/01/06 20:38:51 | 00,005,120 | ---- | C] () -- C:\Documents and Settings\wDanIw\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/06 20:19:10 | 00,000,447 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Fraps.lnk
[2010/01/06 20:11:32 | 00,000,988 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Shortcut to MovieEdit.lnk
[2010/01/06 20:09:55 | 00,000,840 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\MAGIX Xtreme Photo Designer 6.lnk
[2010/01/06 20:09:38 | 00,014,182 | ---- | C] () -- C:\WINDOWS\System32\DLLAV32.lib
[2010/01/06 20:08:53 | 00,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2010/01/06 20:08:42 | 00,005,937 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2010/01/06 17:21:28 | 00,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/01/06 16:51:49 | 00,002,257 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010/01/06 15:56:55 | 00,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2010/01/06 15:54:36 | 00,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010/01/06 15:54:32 | 01,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2010/01/06 15:54:32 | 00,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010/01/06 15:54:32 | 00,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2010/01/06 15:54:31 | 00,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010/01/06 15:54:27 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2010/01/06 15:54:27 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2010/01/06 15:54:26 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2010/01/06 15:54:26 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2010/01/06 15:54:26 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2010/01/06 15:54:26 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2010/01/06 15:54:26 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2010/01/06 15:54:26 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2010/01/06 15:54:24 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2010/01/06 15:54:24 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2010/01/06 15:54:24 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2010/01/06 15:54:24 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2010/01/06 15:54:24 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2010/01/06 15:54:24 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2010/01/06 15:54:23 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2010/01/06 15:54:23 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2010/01/06 15:54:23 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2010/01/06 15:54:23 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2010/01/06 15:54:23 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2010/01/06 15:54:23 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2010/01/06 15:54:23 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2010/01/06 15:54:23 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2010/01/06 15:54:23 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2010/01/06 15:54:23 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2010/01/06 15:54:22 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2010/01/06 15:54:22 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2010/01/06 15:54:22 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2010/01/06 15:54:22 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2010/01/06 15:54:22 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2010/01/06 15:54:22 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2010/01/06 15:54:21 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls
[2010/01/06 15:54:21 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls
[2010/01/06 15:54:21 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2010/01/06 15:54:21 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2010/01/06 15:54:21 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2010/01/06 15:54:21 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2010/01/06 15:54:21 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2010/01/06 15:54:21 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2010/01/06 15:54:19 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2010/01/06 15:54:19 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2010/01/06 15:54:16 | 00,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010/01/06 15:52:26 | 00,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010/01/06 15:52:26 | 00,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010/01/06 15:52:26 | 00,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2010/01/06 15:52:26 | 00,112,918 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2010/01/06 15:52:26 | 00,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2010/01/06 15:52:26 | 00,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2010/01/06 15:52:26 | 00,034,063 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2010/01/06 15:52:26 | 00,026,991 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat
[2010/01/06 15:52:26 | 00,016,535 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2010/01/06 15:52:26 | 00,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat
[2010/01/06 15:52:26 | 00,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010/01/06 15:52:26 | 00,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2010/01/06 15:52:26 | 00,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2010/01/06 15:52:26 | 00,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010/01/06 15:52:26 | 00,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010/01/06 15:52:26 | 00,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010/01/06 15:52:25 | 02,144,487 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2010/01/06 15:52:25 | 01,296,669 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2010/01/06 15:52:25 | 00,522,220 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2010/01/06 15:51:53 | 00,118,952 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/01/06 15:51:12 | 00,000,281 | RHS- | C] () -- C:\boot.ini
[2010/01/06 15:51:09 | 00,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/01/06 14:49:47 | 00,001,607 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Counter Strike 1.6 Non Steam.lnk
[2010/01/06 14:49:47 | 00,001,587 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\Dedicated Server.lnk
[2010/01/06 14:32:00 | 00,000,652 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AIMP2.lnk
[2010/01/06 14:31:17 | 00,000,796 | ---- | C] () -- C:\Documents and Settings\wDanIw\Desktop\BS.Player PRO.lnk
[2010/01/06 14:27:17 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/01/06 14:16:05 | 00,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/01/06 14:16:02 | 00,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/01/06 14:15:00 | 00,000,536 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\unisat.lnk
[2010/01/06 14:13:35 | 00,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010/01/06 14:13:35 | 00,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010/01/06 14:12:20 | 00,140,694 | ---- | C] () -- C:\WINDOWS\System32\nvapps.xml
[2010/01/06 14:11:53 | 00,017,525 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2010/01/06 14:11:34 | 00,009,417 | R--- | C] () -- C:\WINDOWS\System32\nvide.nvu
[2010/01/06 14:11:17 | 00,005,836 | R--- | C] () -- C:\WINDOWS\System32\nvnrm.nvu
[2010/01/06 14:11:17 | 00,003,948 | R--- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
[2010/01/06 14:11:14 | 00,000,682 | R--- | C] () -- C:\WINDOWS\System32\nvsmu.nvu
[2010/01/06 14:11:13 | 00,002,016 | R--- | C] () -- C:\WINDOWS\System32\nvsmb.nvu
[2010/01/06 14:09:47 | 00,000,553 | R--- | C] () -- C:\WINDOWS\USetup.iss
[2010/01/06 14:09:41 | 00,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010/01/06 14:06:15 | 00,000,178 | -HS- | C] () -- C:\Documents and Settings\wDanIw\ntuser.ini
[2010/01/06 14:06:14 | 01,048,576 | -H-- | C] () -- C:\Documents and Settings\wDanIw\NTUSER.DAT
[2010/01/06 14:05:17 | 00,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010/01/06 14:04:25 | 00,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/01/06 14:04:16 | 00,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2010/01/06 14:03:53 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2010/01/06 14:03:53 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2010/01/06 14:03:52 | 00,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010/01/06 14:03:39 | 00,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2010/01/06 14:03:38 | 01,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010/01/06 14:03:33 | 00,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2010/01/06 14:03:32 | 00,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010/01/06 14:03:30 | 00,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2010/01/06 14:03:23 | 13,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010/01/06 14:03:19 | 00,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2010/01/06 14:03:16 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2010/01/06 14:03:08 | 00,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2010/01/06 14:03:05 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010/01/06 14:03:05 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010/01/06 14:03:05 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2010/01/06 14:03:05 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010/01/06 14:03:05 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2010/01/06 14:03:05 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010/01/06 14:03:05 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010/01/06 14:03:05 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2010/01/06 14:03:05 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2010/01/06 14:03:04 | 00,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2010/01/06 14:03:04 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2010/01/06 14:03:04 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2010/01/06 14:03:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2010/01/06 14:03:03 | 00,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2010/01/06 14:03:03 | 00,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2010/01/06 14:03:03 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2010/01/06 14:03:03 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2010/01/06 14:03:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2010/01/06 14:03:02 | 00,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2010/01/06 14:03:02 | 00,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2010/01/06 14:03:02 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2010/01/06 14:03:02 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2010/01/06 14:03:01 | 00,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2010/01/06 14:03:01 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2010/01/06 14:03:01 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2010/01/06 14:03:01 | 00,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2010/01/06 14:03:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010/01/06 14:03:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010/01/06 14:03:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010/01/06 14:03:00 | 00,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2010/01/06 14:03:00 | 00,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2010/01/06 14:01:44 | 00,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/01/06 14:01:44 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010/01/06 14:01:44 | 00,000,000 | RHS- | C] () -- C:\IO.SYS
[2010/01/06 14:01:44 | 00,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010/01/06 14:01:44 | 00,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010/01/06 14:01:36 | 00,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/01/06 14:01:36 | 00,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/01/06 14:01:35 | 00,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010/01/06 14:00:55 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010/01/06 14:00:55 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010/01/06 14:00:51 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010/01/06 14:00:40 | 04,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2010/01/06 14:00:29 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010/01/06 14:00:29 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010/01/06 14:00:24 | 00,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2010/01/06 13:59:57 | 00,376,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll
[2010/01/06 13:59:28 | 00,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/01/06 13:58:52 | 00,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2010/01/06 13:58:52 | 00,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2010/01/06 13:58:52 | 00,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2010/01/06 13:58:52 | 00,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2010/01/06 13:58:52 | 00,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2010/01/06 13:58:52 | 00,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2010/01/06 13:58:52 | 00,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
[2010/01/06 13:58:52 | 00,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2010/01/06 13:58:51 | 00,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2010/01/06 13:58:51 | 00,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
[2010/01/06 13:58:51 | 00,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2010/01/06 13:58:51 | 00,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2010/01/06 13:58:51 | 00,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2010/01/06 13:58:51 | 00,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
[2010/01/06 13:58:51 | 00,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2010/01/06 13:58:51 | 00,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2010/01/06 13:58:51 | 00,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2010/01/06 13:58:51 | 00,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2010/01/06 13:58:51 | 00,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
[2010/01/06 13:58:49 | 00,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010/01/06 13:58:49 | 00,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010/01/06 13:58:49 | 00,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010/01/06 13:58:45 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2008/02/25 06:29:00 | 01,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/02/25 06:29:00 | 01,482,752 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/02/25 06:29:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/02/25 06:29:00 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/02/25 06:29:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
========== LOP Check ==========
[2010/01/06 20:12:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MAGIX
[2010/01/07 22:01:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/01/08 17:04:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\wDanIw\Application Data\AIMP
[2010/01/07 17:13:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\wDanIw\Application Data\BSplayer PRO
[2010/01/06 20:12:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\wDanIw\Application Data\MAGIX
[2010/01/08 16:02:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\wDanIw\Application Data\uTorrent
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
< End of report >
P.S Кво стана ?